DR FRANK BROWN [email protected] [email protected]

Delivered-To: <snipped>
Received: by 10.112.143.231 with SMTP id sh7csp3454055lbb;
Mon, 18 May 2015 01:42:23 -0700 (PDT)
X-Received: by 10.42.30.209 with SMTP id w17mr16597939icc.77.1431938542341;
Mon, 18 May 2015 01:42:22 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm50-vm4.bullet.mail.ne1.yahoo.com (nm50-vm4.bullet.mail.ne1.yahoo.com. [98.138.121.148])
by mx.google.com with ESMTPS id r10si4820298icw.9.2015.05.18.01.42.21
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Mon, 18 May 2015 01:42:22 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 98.138.121.148 as permitted sender) client-ip=98.138.121.148;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.138.121.148 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm50.bullet.mail.ne1.yahoo.com with NNFMP; 18 May 2015 08:42:20 -0000
Received: from [98.138.101.131] by nm50.bullet.mail.ne1.yahoo.com with NNFMP; 18 May 2015 08:39:34 -0000
Received: from [98.138.89.192] by tm19.bullet.mail.ne1.yahoo.com with NNFMP; 18 May 2015 08:39:34 -0000
Received: from [127.0.0.1] by omp1050.mail.ne1.yahoo.com with NNFMP; 18 May 2015 08:39:34 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 98.138.101.170; Mon, 18 May 2015 08:39:34 +0000
Date: Mon, 18 May 2015 08:39:34 +0000 (UTC)
From: DR FRANK BROWN <[email protected]>
Reply-To: DR FRANK BROWN <[email protected]>
Message-ID: <[email protected]>
Subject: Attn Beneficiary

Attn Beneficiary

I AM SORRY TO TELL YOU IF THIS IS TRUE? I RECEIVED AN EMAIL
FROM MR JAMES WHITE ,HE CALLED US YESTERDAY WITH THIS
TELEPHONE NUMBER: +1 8035660316 INFORMING ME THAT YOU ARE
DEAD AND HE SAID THAT I SHOULD SEEK FOR POWER OF ATTORNEY
FROM MINISTRY OF FINANCE TO CHANGE YOUR FILE NAME FROM YOUR
payment FILE TO HIS NAME AND TRANSFER YOUR $2.5MILLION
DOLLARS TO HIM, BECAUSE HE IS YOUR NEXT OF KIN BENEFICIARY
TO YOU, AND HE ALSO TOLD ME THAT YOU INSTRUCTED HIM TO CLAIM
YOUR PROPERTIES INCLUDING YOUR FUND BECAUSE YOU ARE NO MORE
TO BE FOUND ON EARTH.
I AM VERY SORRY TO HEAR THAT YOU ARE NO MORE TO BE FOUND ON
EARTH AND I DON'T KNOW IF THIS IS THE REASON WHY YOU
HAVE NOT REPLY THE EMAIL I HAVE BEEN SENDING TO YOU
SINCE,THIS IS MY PROMISE TO YOU THAT I AM GOING TO DO
EVERYTHING WITHIN MY POWER TO MAKE SURE THAT YOUR FUND IS BE
TRANSFER TO HIM AS YOUR NEXT OF KIN BENEFICIAL TO YOU MAY
YOUR SOUL REST IN PERFECT PEACE AND MAY GOD GRANT YOU
INTERNAL LIFE ON THE LAST DAY TO COME I AM VERY VERY SORRY
IF THIS IS TRUE.

HE DID SAID HE KNEW HE WAS GOING TO SEND SOME MONEY FOR THE
TRANSFER TO GET YOUR FUND TO HIM BECAUSE YOU TOLD HIM
SOMETHING LIKE THAT AND I SHOULD LET HIM KNOW THE COST WHICH
IS $59.00USD ONLY.
BUT I TOLD HIM TO HOLD ON AND LET ME VERIFY IF THIS IS TRUE
OR NOT BECAUSE I AM CONFUSED NOW ABOUT THIS CLAIMS YOU ARE
ADVICE TO REPLY BACK TO US WITH THE FEE, IF THIS IS NOT TRUE
BUT IF IT IS TRUE THAT YOU ARE DEAD STILL NO WHERE TO BE
FOUND ON EARTH, MEANS WE WILL NOT HEAR FROM YOU, THEN WE ARE
GOING TO KEEP ON WAITING FOR YOU TILL TOMORROW THEN FAIL TO
HEAR FROM YOU THEN WE WILL CHANGE YOUR PAYMENT FILE TO HIS
NAME TO TRANSFER YOUR FUND TO HIM AS YOUR BENEFICIAL.
SO IF YOU STILL ALIVE THEN FEEL FREE TO GO AHEAD AND SEND
THE REQUIRED FEE OF $59.00USD US DOLLARS FOR THE TRANSFER
CHARGE TODAY SO THAT BY TOMORROW,WE WILL TRANSFER YOUR FUND
TO YOU AS AGREED,BELOW HERE ARE THE INFORMATION TO SEND THE
$59.00USD THROUGH WESTERN UNION,

The agreement made it mandatory that you will pay $59.00USD
only for the Transfer Charges fee to enable us automate the
information's on the transfer script text for your fund
to be made available to you. You are advice to send the sum
of $59.00USD only via Western Union Money Transfer with the
below stated details to make it faster and easier;

Receivers:FRANK OBI
City: Cotonou
Country: Benin Republic
Test Question: To who
Answer: MY INLAWY
Amount: $59
Sender s name:
MTCN:

When you make the Payment, send the payment information to
this Office. upon confirm the fee from you today, The
Complete Information will be release to you , note that we
have a specific time to transfer your funds and you have to
know that this is the final stage and the most important and
fragile stage of this transaction. The official deadline is
due to expire with the application law. So you have to act
fast to avoid any further delays that may be detrimental to
the whole process.

I will be waiting for your positive response with the
payment information's. Any delay from your side
regarding this payment exercise will be resolved for the
next quarter payment that will be coming . So you are
advised to add here to our instructions so as to enable us
serve you better.

I look forward to hear from you soonest.

Thank you

Same reply-to email address [email protected] using phone number +229-98983966

from: DR JOHN <[email protected]>
reply-to: [email protected]
to:
date: Wed, Jul 1, 2015 at 8:53 AM
subject: ATTENTION:

Header Analysis Quick Report
Originating IP: 41.86.234.165
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.86 with SMTP id t83csp722810ioe;
Wed, 1 Jul 2015 06:54:09 -0700 (PDT)
X-Received: by 10.170.187.134 with SMTP id d128mr32484783yke.103.1435758848999;
Wed, 01 Jul 2015 06:54:08 -0700 (PDT)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id w67si1499707ywd.131.2015.07.01.06.53.52
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Wed, 01 Jul 2015 06:54:08 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) [email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-02.datacenter.cha.cantv.net (webmail-02.datacenter.cha.cantv.net [200.11.153.85])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id t61Drotu014203;
Wed, 1 Jul 2015 09:23:50 -0430
X-Matched-Lists: []
Received: from 41.86.234.165 ([41.86.234.165]) by webmail-02.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Wed, 1 Jul 2015 09:23:50 -0430 (VET)
Date: Wed, 1 Jul 2015 09:23:50 -0430 (VET)
From: DR JOHN <[email protected]>
Reply-To: [email protected]
To: <snipped>
Message-ID: <1824335098.6569530.1435758830428.JavaMail.gess@webmail-02.datacenter.cha.cantv.net>
Subject: ATTENTION:
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.86.234.165]

ATTENTION:

I HAVE REGISTERED YOUR ATM CARD OF US$4.8 WITH COURIER COMPANY WITH
REGISTRATION CODE OF (SHIPMENT CODE AWB 33XZS)PLEASE CONTACT WITH YOUR
DELIVERY INFORMATION SUCH AS,YOUR NAME,YOUR ADDRESS AND YOUR TELEPHONE
NUMBER:
SHIPPING COMPANY OFFICE
NAME OF DR JOHN
OU WILL SEND THEM THE SUM OF $99 ONLY FOR DELIVERY CHARGE
-MAIL:[email protected]
TEL: +22998983966
BEST REGARDS
Mrs. ROSELINE THOMAS

Same email address [email protected] but new phone number +229-99315383

Header Analysis Quick Report
Originating IP: 41.86.234.165
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.76 with SMTP id t73csp1727636ioe;
Tue, 7 Jul 2015 03:51:30 -0700 (PDT)
X-Received: by 10.170.91.194 with SMTP id i185mr4148865yka.25.1436266290703;
Tue, 07 Jul 2015 03:51:30 -0700 (PDT)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id e127si14906217ykf.101.2015.07.07.03.50.47
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 07 Jul 2015 03:51:30 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) [email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id t67AoeSx003221;
Tue, 7 Jul 2015 06:20:40 -0430
X-Matched-Lists: []
Received: from 41.86.234.165 ([41.86.234.165]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Tue, 7 Jul 2015 06:20:39 -0430 (VET)
Date: Tue, 7 Jul 2015 06:20:39 -0430 (VET)
From: MR mike william <[email protected]>
Reply-To: [email protected]
To: <snipped>
Message-ID: <616619755.7178975.1436266240748.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
Subject: ATTENTION:
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.86.234.165]

ATTENTION:

I HAVE REGISTERED YOUR ATM CARD OF US$4.8 WITH COURIER COMPANY WITH
REGISTRATION CODE OF (SHIPMENT CODE AWB 33XZS)PLEASE CONTACT WITH YOUR
DELIVERY INFORMATION SUCH AS,YOUR NAME,YOUR ADDRESS AND YOUR TELEPHONE
NUMBER:
SHIPPING COMPANY OFFICE
NAME OF DR JOHN
YOU WILL SEND THEM THE SUM OF $150 ONLY FOR DELIVERY CHARGE
E-MAIL:[email protected]
TEL: +22999315383
BEST REGARDS
Mrs. ROSELINE THOMAS

Using the same reply-to email address [email protected] and the new phone number +229-98385673

from: western union <[email protected]>
date: Fri, Jul 10, 2015 at 3:26 PM
subject: RE: ATTENTION:

Delivered-To: <snipped>
Received: by 10.202.199.208 with SMTP id x199csp142770oif;
Fri, 10 Jul 2015 13:26:35 -0700 (PDT)
X-Received: by 10.60.69.200 with SMTP id g8mr20280615oeu.40.1436559995256;
Fri, 10 Jul 2015 13:26:35 -0700 (PDT)
Return-Path: <[email protected]>
Received: from BAY004-OMC4S7.hotmail.com (bay004-omc4s7.hotmail.com. [65.54.190.209])
by mx.google.com with ESMTPS id m130si7425707oia.131.2015.07.10.13.26.34
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 10 Jul 2015 13:26:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.54.190.209 as permitted sender) client-ip=65.54.190.209;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.54.190.209 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from BAY181-W92 ([65.54.190.201]) by BAY004-OMC4S7.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Fri, 10 Jul 2015 13:26:34 -0700
X-TMN: [8mHCo7t0FvR4WVtvVCZmaxYU+WYIwNLh]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_5626e662-cfaf-47c1-975f-40cdd5ac4d1a_"
From: western union <[email protected]>
To: <<snipped>>
Subject: RE: ATTENTION:
Date: Fri, 10 Jul 2015 21:26:33 +0100
Importance: Normal
In-Reply-To:
<CABvzxd7D8GwFSGiCRtUb5DZny1eL8vYvBom=_1SeGTjcUuShow@mail.gmail.com>
References:
<CABvzxd7D8GwFSGiCRtUb5DZny1eL8vYvBom=_1SeGTjcUuShow@mail.gmail.com>
MIME-Version: 1.0
X-OriginalArrivalTime: 10 Jul 2015 20:26:34.0099 (UTC) FILETIME=[B6B65430:01D0BB4E]

western union
9:22 PM
To: B M ARTHANDA KUMARKUMAR Kumar

WE TRANSFER AND RECEIVES MONEY
Finance Department Director
Eco bank Benin Republic Cotonou
Western Union Head Office Cotonou Benin Republic.

Attn::

I confirmed the receipt of your e-mail today in my office regarding the first payment that has been sent to you. Yes, it is true that you were sent a payment of $5000 according to an instruction from the ministry of finance Cotonou-Benin Republic which indicates that we should be sending to you daily payment of $5000 everyday till we complete your total amount of $7.5,000,00 u.s dollar

Here is the information’s of the $5000 your first payment we release to you below, but you can track it and see is available to pick up by you but is on hold to the International Monetary Fund ask us to place it on hold due to (International Monetary Fund) required the Clean Bill Record Certificate which will cost you $100.

Here is the information of the $5000 your first payment we release to you below, you can click it on http://www.wu.com/content/ wucom/Countries/en_BJ/track- transfer-result.html? transactionStatus=AVAILABLE& progressIndicator=3& statusMessage=Your%20money% 20transfer%27s%20ready%20to% 20be%20picked%20up%20at%20any% 20Western%20Union%20agent% 20location to see that is available to pick up by the receiver, but you can not pick it up until you send the sum of $100 for the Clean Bill Record Certificate.

The minister administrator trust fund said that nobody has legal right over your fund therefore we can’t be able to deduct any amount from the arranged fund, because is against our law and regulation that is the reason why you must send the fee $100 to enable the (IMF) Office (International Monetary Fund place the sent $5000 to your name because the money Is not place in your name yet that is why you can’t be able to pick the sent $5000 USD right now.

So kindly send the $100 to below name through Western Union Money Transfer;

Receiver's name:CHIDI OBI
Country:Benin Republic
City:Cotonou
Text Question:when?
Answer:soon
Amount:$100

Dr.Daniel Koman
+229 98385673

DIRECTORATE OF INTERNATIONAL
PAYMENT AND TRANSFERS.
CONGRATULATION IN ADVANCE.
BEST REGARDS.
Send Money Worldwid