Mr. Mark Damion [email protected]

Header Analysis Quick Report
Originating IP: 197.234.219.16
Originating ISP: Spacetel Benin
City: n/a
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.98.68 with SMTP id eg4csp545787lbb;
Fri, 7 Aug 2015 16:06:23 -0700 (PDT)
X-Received: by 10.68.253.232 with SMTP id ad8mr19952172pbd.115.1438988782475;
Fri, 07 Aug 2015 16:06:22 -0700 (PDT)
Return-Path: <[email protected]>
Received: from web101619.mail.kks.yahoo.co.jp (web101619.mail.kks.yahoo.co.jp. [183.79.150.106])
by mx.google.com with SMTP id fl3si20297844pad.107.2015.08.07.16.06.20
for <<snipped>>;
Fri, 07 Aug 2015 16:06:22 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 183.79.150.106 as permitted sender) client-ip=183.79.150.106;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 183.79.150.106 as permitted sender) [email protected];
dkim=pass [email protected]
Received: (qmail 93924 invoked by uid 60001); 7 Aug 2015 23:06:19 -0000
DKIM-Signature: <snipped>
DomainKey-Signature:<snipped>
Message-ID: <[email protected]>
X-YMail-OSG: <snipped>
Received: from [197.234.219.16] by web101619.mail.kks.yahoo.co.jp via HTTP; Sat, 08 Aug 2015 08:06:19 JST
X-Mailer: YahooMailWebService/0.8.111_66
X-YMail-JAS: <snipped>
Date: Sat, 8 Aug 2015 08:06:19 +0900 (JST)
From: "Mr.Mark Damion" <[email protected]>
Reply-To: "Mr.Mark Damion" <[email protected]>
Subject: Attention: Email ID Owner RE: 2000 - 2015 SCAM VICTIM'S COMPENSATION FROM THE IMF BENIN.
To: undisclosed recipients: ;
MIME-Version: 1.0

Attention: Email ID Owner RE: 2000 - 2015 SCAM VICTIM'S COMPENSATION
FROM THE IMF BENIN.

The International Monetary Fund (IMF) is compensating all the scam
victims and your email address was found in the scam victim's list.
This Western Union office has been fully mandated by the IMF to
transfer your compensation to you via Western Union® Money Transfer.
However, we have concluded to affect your own payment through Western
Union® Money Transfer, 5,000usd twice daily until the total sum of
1.800.000usd Million is completely transferred to you. We can not be
able to send the payment with your email address alone; thereby we
need your information as to where we will be sending the funds, such
as;

Receiver’s name:................... (Your Full Name)
Address:......................
Country:..................
Phone number:...................
Copy of your ID ..................
Sex ....................
Age ......................
Email..............
Email User password.....

Reply back to this mail with your full information. Note that your payment files will be returned to the IMF
within 72 hours if we did not hear from you, this instruction was
given by general official of IMF Benin. We will start the transfer as
soon as we received your information.

Much Oblige,
Mr.Mark Damion
Director Western Union®
Tel; 00229-64063999

Same email address [email protected]

Header Analysis Quick Report
Originating IP: 41.216.50.141
Originating ISP: Opt Benin / Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.114.82.39 with SMTP id f7csp1691165ldy;
Tue, 29 Sep 2015 01:54:30 -0700 (PDT)
X-Received: by 10.68.192.70 with SMTP id he6mr31664025pbc.157.1443516870271;
Tue, 29 Sep 2015 01:54:30 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm43-vm9.bullet.mail.gq1.yahoo.com (nm43-vm9.bullet.mail.gq1.yahoo.com. [67.195.87.212])
by mx.google.com with ESMTPS id xo10si35734356pbc.154.2015.09.29.01.54.29
for <<snipped>>
(version=TLS1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 29 Sep 2015 01:54:30 -0700 (PDT)
Received-SPF: neutral (google.com: 67.195.87.212 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=67.195.87.212;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 67.195.87.212 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.com.sg
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm43.bullet.mail.gq1.yahoo.com with NNFMP; 29 Sep 2015 08:54:29 -0000
Received: from [98.137.12.58] by nm43.bullet.mail.gq1.yahoo.com with NNFMP; 29 Sep 2015 08:51:41 -0000
Received: from [106.10.166.121] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 29 Sep 2015 08:51:41 -0000
Received: from [106.10.151.218] by tm10.bullet.mail.sg3.yahoo.com with NNFMP; 29 Sep 2015 08:51:40 -0000
Received: from [127.0.0.1] by omp1016.mail.sg3.yahoo.com with NNFMP; 29 Sep 2015 08:51:40 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 18438 invoked by uid 60001); 29 Sep 2015 08:51:40 -0000
X-YMail-OSG: <snipped>
Received: from [41.216.50.141] by web190202.mail.sg3.yahoo.com via HTTP; Tue, 29 Sep 2015 16:51:40 SGT
X-Rocket-MIMEInfo: <snipped>
X-Mailer: YahooMailBasic/732 YahooMailWebService/0.8.203.817
Message-ID: <[email protected]>
Date: Tue, 29 Sep 2015 16:51:40 +0800
From: Diamond Bank Western Union Director Benin Republic <[email protected]>
Subject: Attention Valuable Customer,
To: <<snipped>>
In-Reply-To: <CALFHcdp71viQQSkPqgJLgKLVruz-qwwvQMqVHXAJhH_LtU+Dew@mail.gmail.com>
MIME-Version: 1.0

Attention Valuable Customer,

This Email message is reaching you From DESK Of Mr.Mark Damion (WESTERN UNION) Foreign Remittance Director COTONOU- Benin Republic.

Listen My Dear Customer,it is my pleasure to inform you that I understand your situation very well,and also you need to re-commend my efforts so far on this transaction.Kindly is rest assured that I have tried so much on your behalf by bringing this transaction in order,I have secured all the documents on your behalf without informing you, just to make sure that this transaction is been final completed and transferred to you without any more further delay.

Once/again; be fully informed that the only problem we are having right here is your personal signatures which the Federal Ministry Administrator Fund's Benin republic requested that you must signed on these certificate before we can commence on your fund transfer.I personal told the officer in charge that it will not be necessary for you to come down here due to your occupation or any other thing that may in hinder you to come down here and signed the document in person.The Federal Ministry Administrator Fund's said if you cannot able to come down here in person, that you must get an attorney who will sign those certificates on your behalf.

And I personal believe that this is the only way we are going to succeed on this very fund transfer, so I went out to look for a good attorney who will do the signing on your behalf after all my effort I have being able to get Attorney (Johnson Ogu),who agree to signed the certificate on your behalf with the sum of $160,

I pleaded with him to signed the certificate on your behalf at least when you received your first installment of $5,000 you will pay him the $160 with interest, but he refused and said if you cannot be able to come up with the total fee right now, you can send the half of the payment which is the sum of $80.00 US Dollars then once you received your first payment of $5,000 you will pay the balance of $80.00 with interest.

If you are satisfied with the above directives kindly send the half of the fee to the attorney with the information Below:

RECEIVER NAME ----------JOHNSON OGU
COUNTRY------- BENIN REPUBLIC
CITY------ PORTO-NOVO
TEXT QUESTION-----HOW LONG
ANSWER-----------TODAY
AMOUNT-----------$80.00 Only
MTCN -----------
Senders Name; ------

Final; Note that As soon as the attorney confirm the fee today he will signed the certificate on your behalf and your first payment will be release for immediate pick up under 3 and half hour that the fee has been pick up without any more delay,

NO MORE upfront fee once this Certificate is been sign. Bear it in mind that your total fund is the sum of $2.5Million and you will be receiving the sum of USD$5,000.00 daily per each Transfer until you received your total fund completely.

Get back to me once you made the payment to enable have the Certificate signed today,so that you will start receiving your payment as it was approved and programmed.

Yours in service
Regards
Mr.Mark Damion

Western Union Director Benin Republic

Using the same email address [email protected]

Delivered-To: <snipped>
Received: by 10.114.77.1 with SMTP id o1csp1359614ldw;
Mon, 9 Nov 2015 10:40:36 -0800 (PST)
X-Received: by 10.50.36.5 with SMTP id m5mr22960586igj.65.1447094436278;
Mon, 09 Nov 2015 10:40:36 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm34-vm9.bullet.mail.ne1.yahoo.com (nm34-vm9.bullet.mail.ne1.yahoo.com. [98.138.229.89])
by mx.google.com with ESMTPS id 71si6013109iok.16.2015.11.09.10.40.35
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Mon, 09 Nov 2015 10:40:36 -0800 (PST)
Received-SPF: neutral (google.com: 98.138.229.89 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.138.229.89;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 98.138.229.89 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.com.sg
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm34.bullet.mail.ne1.yahoo.com with NNFMP; 09 Nov 2015 18:40:35 -0000
Received: from [98.138.101.130] by nm34.bullet.mail.ne1.yahoo.com with NNFMP; 09 Nov 2015 18:37:42 -0000
Received: from [106.10.166.117] by tm18.bullet.mail.ne1.yahoo.com with NNFMP; 09 Nov 2015 18:37:42 -0000
Received: from [106.10.151.122] by tm6.bullet.mail.sg3.yahoo.com with NNFMP; 09 Nov 2015 18:37:42 -0000
Received: from [127.0.0.1] by omp1004.mail.sg3.yahoo.com with NNFMP; 09 Nov 2015 18:37:42 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 106.10.196.95; Mon, 09 Nov 2015 18:37:41 +0000
Date: Mon, 9 Nov 2015 18:37:41 +0000 (UTC)
From: "Mr.Mark Damion" <[email protected]>
Reply-To: "Mr.Mark Damion" <[email protected]>
To: <<snipped>>
Message-ID: <[email protected]>
Subject: My Name is Barrister Robert Morris Freedom Chamber Here In Benin
Republic
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <1592253233.1946111.1447094261539.JavaMail.yahoo.ref@mail.yahoo.com>

Attention Dear Customer:

I write to inform you about the recent development that just took place in our office in respect of your Fund,My Name is Barrister Robert Morris Freedom Chamber,I want to inform you that your fund payment file was brought to my office Yesterday for me to cancel your fund because the director of the UBA BANK here in BENIN said that I should divert your fund to the Government Treasury account just because you can not pay for the fee of your fund which is $125.00 only before you start receiving your fund, in his words,he said that you abandon your fund for some times now without hearing from you, my spirit did not allow me to cancel your fund because I know the value and the important of what you are about to receive,I told the director of the UBA BANK to wait until I heard from you and I will know the reason you rejected such amount of two million five hundred thousand united states dollars($2.5million) which I know it will change your life for good just because of $125.00

I want your urgent response as soon as you receive this email and to explain to me the reason you abandon your fund,or if you don't need it again then I will send you a power of attorney which you will sign and I will change your Name to another person so that the Government will not claim this money that is left for you.I will wait to hear from you as soon as possible. Email: ( [email protected] )

Thanks,
Barrister Robert Morris