Mrs. Ann White [email protected]

Header Analysis Quick Report
Originating IP: 41.138.90.68
Originating ISP: Etisalat Benin
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.86 with SMTP id t83csp762327ioe;
Thu, 25 Jun 2015 13:19:48 -0700 (PDT)
X-Received: by 10.70.48.34 with SMTP id i2mr94683366pdn.125.1435263587991;
Thu, 25 Jun 2015 13:19:47 -0700 (PDT)
Return-Path: <[email protected]>
Received: from web101620.mail.kks.yahoo.co.jp (web101620.mail.kks.yahoo.co.jp. [183.79.150.107])
by mx.google.com with SMTP id kn10si46560339pbd.243.2015.06.25.13.19.46
for <<snipped>>;
Thu, 25 Jun 2015 13:19:47 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 183.79.150.107 as permitted sender) client-ip=183.79.150.107;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 183.79.150.107 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: (qmail 76266 invoked by uid 60001); 25 Jun 2015 20:13:05 -0000
DomainKey-Signature: <snipped>
Message-ID: <[email protected]>
X-YMail-OSG: <snipped>
Received: from [41.138.90.68] by web101620.mail.kks.yahoo.co.jp via HTTP; Fri, 26 Jun 2015 05:13:04 JST
X-RocketYMMF: haruhi_mima
X-Mailer: YahooMailWebService/0.8.111_65
X-YMail-JAS: <snipped>
Sender: [email protected]
Date: Fri, 26 Jun 2015 05:13:04 +0900 (JST)
From: ANN WHITE <[email protected]>
Reply-To: ANN WHITE <[email protected]>
Subject: URGENT RESPONSE
To: undisclosed recipients: ;
MIME-Version: 1.0

Dear Beloved,

Please read this slowly and carefully, as it may be one of the most important emails you ever get. I am Mrs.Ann White , I was married to Late Mr.Drew White . He used to work with Shell Petroleum Development Company Kuwait and was also a seasoned contractor in the Middle East Region. He died on 31 December, 2010 in Italy.
We were married for seventeen years without a child. After his death I decided not to re-marry or get a child outside my matrimonial home. When my late husband was alive, he deposited the sum of $15,000,000.00USD in a bank in London. My Doctor told me that I would not last long due to my complicated health issues, I have cancer.
Having known my condition I decided to donate these funds to better the lives of the less privileged need an honest and trust worthy individual that will utilize this money in accordance with my instruction.

I want the funds to be used in funding religious organizations, orphanages and the less privileged propagating the word of God. I took this decision because I don't have any child that will inherit this money and my husband's relatives are very unkind to me and I don't want my husband's hard earned money to be misused. I am not afraid of death hence I know where I am going. I know that I am going to be in the bosom of the Lord. Exodus 14 VS 14 says that the lord will fight my course and I shall hold my peace. As soon as I receive your reply I shall give you the contact of the Bank, and my Attorney.

For legitimacy, he will also issue you a Letter of Authorization that will empower you as the original-beneficiary of this fund. I want you to always pray for me, Any delay in your reply will give me room in sourcing for another individual for this same purpose, if you are not interesteda, kindly pardon me for contacting you.


Yours Faithfully,
Mrs.Ann White

URGENT RESPONSE

She's changed her e-mail address: [email protected]

Also using stock photos stolen from Dreamstime & Shutterstock (they still have the watermark on them)

Delivered-To: <snipped>
Received: by 10.112.26.75 with SMTP id j11csp162314lbg;
Tue, 30 Jun 2015 14:50:14 -0700 (PDT)
X-Received: by 10.70.37.144 with SMTP id y16mr47549025pdj.86.1435701013763;
Tue, 30 Jun 2015 14:50:13 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm46-vm9.bullet.mail.gq1.yahoo.com (nm46-vm9.bullet.mail.gq1.yahoo.com. [67.195.87.177])
by mx.google.com with ESMTPS id lj8si71975275pbc.11.2015.06.30.14.50.12
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 30 Jun 2015 14:50:13 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 67.195.87.177 as permitted sender) client-ip=67.195.87.177;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 67.195.87.177 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm46.bullet.mail.gq1.yahoo.com with NNFMP; 30 Jun 2015 21:50:12 -0000
Received: from [98.137.12.175] by nm46.bullet.mail.gq1.yahoo.com with NNFMP; 30 Jun 2015 21:47:28 -0000
Received: from [98.139.170.180] by tm14.bullet.mail.gq1.yahoo.com with NNFMP; 30 Jun 2015 21:47:27 -0000
Received: from [98.139.212.206] by tm23.bullet.mail.bf1.yahoo.com with NNFMP; 30 Jun 2015 21:47:27 -0000
Received: from [127.0.0.1] by omp1015.mail.bf1.yahoo.com with NNFMP; 30 Jun 2015 21:47:27 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 66.196.80.193; Tue, 30 Jun 2015 21:47:27 +0000
Date: Tue, 30 Jun 2015 21:47:26 +0000 (UTC)
From: Ann White <[email protected]>
Reply-To: Ann White <[email protected]>
To: "<snipped>" <<snipped>>
Message-ID: <[email protected]>
Subject: URGENT RESPONSE.
MIME-Version: 1.0

My Dear,

Sorry for my delayed response, I'm not in good health condition as you know.

I really appreciate your kind reply with great understanding and sincerity to my offer, I pray the Almighty God will continue to guide and bless you and your entire house hold in all your endeavors.

I prayed for God’s direction to the right person that will not betray me before I suddenly came across your email contact on the web and my instinct asked me to chose you, but please understand that it is not a must, it is your decision whether to carried out this humanitarian project to the glory of our creator or not but the truth remains that my spirit accepts you.

I’m actually writing you right now from my hospital sick bed with a laptop courtesy of a nurse that has been aiding me and I will not be writing forever due to my health condition as I will be embarking on surgery soon and I keep praying for God’s mercy, please pray for me as well because my chances of making it is in God's hand.

My dear, all I ask of you is your honesty and trust to receive this fund and use it empower the less privileges and motherless children/orphans which you know is the major reason I contacted you.

I'm now making arrangement on how the fund will be released to you and I hope to conclude before this week runs out because it will take some days to rearrange some documents that will enable the bank recognize you as receiver of the fund when you will contact them.

I managed to take some snap with the phone of the nurse that is taken care of me at list for you to see whom you are dealing with.

I will get back to you tomorrow or next by the grace of God.

Remain blessed in the Lord and please understand that whatever you’re doing in this life, your soul is very important so always try to work in the ways of God for your soul to be saved at last because no created being on earth will live forever.

Please let me know you receive this message.

Yours in Christ,
Mrs.Ann White

She's now using the email address [email protected]

She sent the same photos from [email protected]:

from: [email protected]
to:
date: Wed, Jul 1, 2015 at 5:11 AM
subject: My Dear URGENT RESPONSE.
signed-by: barid.com

Header Analysis Quick Report
Originating IP: 41.138.89.41
Originating ISP: Etisalat Benin
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.26.75 with SMTP id j11csp474929lbg;
Wed, 1 Jul 2015 03:14:22 -0700 (PDT)
X-Received: by 10.194.22.105 with SMTP id c9mr314970wjf.120.1435745662420;
Wed, 01 Jul 2015 03:14:22 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mx3.mail.bg (mx3.mail.bg. [2001:67c:16b8:1::2:19])
by mx.google.com with ESMTPS id n3si3215489wib.44.2015.07.01.03.14.21
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 01 Jul 2015 03:14:22 -0700 (PDT)
Received-SPF: neutral (google.com: 2001:67c:16b8:1::2:19 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=2001:67c:16b8:1::2:19;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 2001:67c:16b8:1::2:19 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected]
Received: from barid.com (unknown [10.0.0.23])
by mx3.mail.bg (Postfix) with ESMTPA id 8332B203C0F1
for <<snipped>>; Wed, 1 Jul 2015 13:14:20 +0300 (EEST)
DKIM-Signature: <snipped>
Message-ID: <[email protected]>
Date: Wed, 1 Jul 2015 11:11:34 +0100
Subject: My Dear ..URGENT RESPONSE.
From: [email protected]
To: <snipped>
User-Agent: Mail.BG Webmail
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="----=_20150701111134_59765"
X-Priority: 3 (Normal)
Importance: Normal
X-Composed: 2015-07-01T11:11:34+01:00
X-Originating-IP: [41.138.89.41]

My Dear,

Sorry for my delayed response, I have been having problems with my yahoo account lately. I'm not in good health condition as you know.

I really appreciate your kind reply with great understanding and sincerity to my offer, I pray the Almighty God will continue to guide and bless you and your entire house hold in all your endeavors.

I prayed for God’s direction to the right person that will not betray me before I suddenly came across your email contact on the web and my instinct asked me to chose you, but please understand that it is not a must, it is your decision whether to carried out this humanitarian project to the glory of our creator or not but the truth remains that my spirit accepts you.

I’m actually writing you right now from my hospital sick bed with a laptop courtesy of a nurse that has been aiding me and I will not be writing forever due to my health condition as I will be embarking on surgery soon and I keep praying for God’s mercy, please pray for me as well because my chances of making it is in God's hand.

My dear, all I ask of you is your honesty and trust to receive this fund and use it empower the less privileges and motherless children/orphans which you know is the major reason I contacted you.

I'm now making arrangement on how the fund will be released to you and I hope to conclude before this week runs out because it will take some days to rearrange some documents that will enable the bank recognize you as receiver of the fund when you will contact them.

I managed to take some snap with phone of the nurse that is taken care of me at list for you to see whom you are dealing with.

I will get back to you tomorrow or next by the grace of God.

Remain blessed in the Lord and please understand that whatever you’re doing in this life, your soul is very important so always try to work in the ways of God for your soul to be saved at last because no created being on earth will live forever.

Please let me know you receive this message.

Yours in Christ,
Mrs.Ann White

Mrs. Ann White's "attorney"

CHRIS MORE CHAMBERS& ASSOCIATES
Legal Practitioners, Solicitors
& Public Notaries .
100 Nileson street Benin Republic.
Email: [email protected]
Tel:+ 229 684 724 43

Header Analysis Quick Report
Originating IP: 41.138.89.41
Originating ISP: Etisalat Benin
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.26.75 with SMTP id j11csp667715lbg;
Sat, 4 Jul 2015 09:31:27 -0700 (PDT)
X-Received: by 10.181.11.137 with SMTP id ei9mr35928358wid.48.1436027487363;
Sat, 04 Jul 2015 09:31:27 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mx2.mail.bg (mx2.mail.bg. [2001:67c:16b8:1::2:18])
by mx.google.com with ESMTPS id on7si21711901wic.76.2015.07.04.09.31.27
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 04 Jul 2015 09:31:27 -0700 (PDT)
Received-SPF: neutral (google.com: 2001:67c:16b8:1::2:18 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=2001:67c:16b8:1::2:18;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 2001:67c:16b8:1::2:18 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected]
Received: from barid.com (unknown [10.0.0.20])
by mx2.mail.bg (Postfix) with ESMTPA id 76B7760086C2
for <<snipped>>; Sat, 4 Jul 2015 19:31:26 +0300 (EEST)
DKIM-Signature: <snipped>
Message-ID: <[email protected]>
In-Reply-To:
<CABOce3sNWBK4OsOxC-bG9zWc_GsUOSJLF=Ead9GMKpsqHxmD2w@mail.gmail.com>
References:
<CABOce3sNWBK4OsOxC-bG9zWc_GsUOSJLF=Ead9GMKpsqHxmD2w@mail.gmail.com>
Date: Sat, 4 Jul 2015 17:28:32 +0100
Subject: Re: My Dear ..Please Pray For Me...
From: [email protected]
To: <<snipped>>
User-Agent: Mail.BG Webmail
MIME-Version: 1.0
Content-Type: multipart/alternative;boundary="----=_20150704172832_81702"
X-Priority: 3 (Normal)
Importance: Normal
X-Composed: 2015-07-04T17:28:32+01:00
X-Originating-IP: [41.138.89.41]

Dear Beloved,

I am sorry for my late response it has been due to my health complications, I am replying to this email immediately because I will be wheeled into the theater in some couple of hours and my chances of survival is slim as the doctors have advised ,so I will immediately give you my Attorney(s)contact ,he will ensure that this funds get to your account safely even if I am not there.

CHRIS MORE CHAMBERS& ASSOCIATES
Legal Practitioners, Solicitors
& Public Notaries .
100 Nileson street Benin Republic.
Email: [email protected]
Tel:+ 229 684 724 43

Please always remember me in prayers and contact him immediately to help you in the claim processes.

Yours Faithfully,
Mrs Ann White

The "bank" that has Mrs. Ann's money:

ETA: This is the fake bank information AND FAKE WEBSITES they are using:

Pyramid Bank of Africa (PBA)
1147 Rue de Jerome
Cotonou - Benin Republik.
+229-62 53 975

http://pyramidb.tk << FREE DOMAIN

The website is in the process of being reported for fraud.

Delivered-To: <snipped>
Received: by 10.112.26.75 with SMTP id j11csp1187723lbg;
Fri, 10 Jul 2015 02:57:27 -0700 (PDT)
X-Received: by 10.140.95.204 with SMTP id i70mr30903228qge.51.1436522247437;
Fri, 10 Jul 2015 02:57:27 -0700 (PDT)
Return-Path: <[email protected]>
Received: from BLU004-OMC4S34.hotmail.com (blu004-omc4s34.hotmail.com. [65.55.111.173])
by mx.google.com with ESMTPS id j194si9947837qhc.48.2015.07.10.02.57.26
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 10 Jul 2015 02:57:27 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.111.173 as permitted sender) client-ip=65.55.111.173;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.55.111.173 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from na01-bl2-obe.outbound.protection.outlook.com ([65.55.111.135]) by BLU004-OMC4S34.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Fri, 10 Jul 2015 02:57:23 -0700
Received: from CO2PR13MB0042.namprd13.prod.outlook.com (10.161.85.145) by
CO2PR13MB0042.namprd13.prod.outlook.com (10.161.85.145) with Microsoft SMTP
Server (TLS) id 15.1.213.10; Fri, 10 Jul 2015 09:57:22 +0000
Received: from CO2PR13MB0042.namprd13.prod.outlook.com ([10.161.85.145]) by
CO2PR13MB0042.namprd13.prod.outlook.com ([10.161.85.145]) with mapi id
15.01.0213.000; Fri, 10 Jul 2015 09:57:22 +0000
From: "Mr. James Ratigan" <[email protected]>
To: "<snipped>" <<snipped>>
Subject: Attn: YOUR FUND RELEASE PROCESS.
Thread-Topic: Attn: YOUR FUND RELEASE PROCESS.
Thread-Index: AQHQuvbQr4kB+7MXjkKyPQK7i3VuLQ==
Date: Fri, 10 Jul 2015 09:57:22 +0000
Message-ID: <CO2PR13MB0042F29F787E30920C0E0BBADC9F0@CO2PR13MB0042.namprd13.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: gmail.com; dkim=none (message not signed)
header.d=none;
x-tmn: [390R/jbpqDN9ZWlHprqfdpFugycZes+a]
x-microsoft-exchange-diagnostics: <snipped>
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CO2PR13MB0042;
x-microsoft-antispam-prvs: <CO2PR13MB004213C6DEA5F1AE2FEF0EC6DC9F0@CO2PR13MB0042.namprd13.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: <snipped>
x-forefront-prvs: 06339BAE63
x-forefront-antispam-report: <snipped>
Content-Type: multipart/alternative;
boundary="_000_CO2PR13MB0042F29F787E30920C0E0BBADC9F0CO2PR13MB0042namp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jul 2015 09:57:22.3680
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR13MB0042
Return-Path: [email protected]
X-OriginalArrivalTime: 10 Jul 2015 09:57:23.0148 (UTC) FILETIME=[D16458C0:01D0BAF6]

Attn:

This is to inform you that we have received an application and a Letter of Authorization on your behalf this morning from Barrister Chris Moore. This documents have clearly indictated that you are the new beneficiary to the late Mrs. Ann White's fund in the amount of USD$15,000,000.00.

However, after a meeting with the board of directors and members of staff in this bank, we have resolved in having your funds transferred to your choice bank account through our secured online banking system.

In the light of the above, we request that you provide us immediately with the complete information of your bank account details where your funds will be transferred.

Mr. James Ratigan.
International Remittance Dept. Manager.
For Pyramid Bank of Africa (PBA)