Karla Johnson [email protected]

[Tim Atem]

Header Analysis Quick Report
Originating IP: 41.86.234.162
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.83 with SMTP id t80csp1396709ioe;
Sun, 3 May 2015 09:25:09 -0700 (PDT)
X-Received: by 10.170.67.85 with SMTP id j82mr16958365ykj.67.1430670308292;
Sun, 03 May 2015 09:25:08 -0700 (PDT)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id l129si5852186yke.132.2015.05.03.09.24.54
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 03 May 2015 09:25:08 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) smtp.mail=[email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-02.datacenter.cha.cantv.net (webmail-02.datacenter.cha.cantv.net [200.11.153.85])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id t43GOpMd029548;
Sun, 3 May 2015 11:54:51 -0430
X-Matched-Lists: []
Received: from 41.86.234.162 ([41.86.234.162]) by webmail-02.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Sun, 3 May 2015 11:54:51 -0430 (VET)
Date: Sun, 3 May 2015 11:54:51 -0430 (VET)
From: Karla Johnson <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <450201964.3360527.1430670291557.JavaMail.gess@webmail-02.datacenter.cha.cantv.net>
Subject: Contact Western Union For Your Payments.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [41.86.234.162]

Attention My Dear,

Your first payment of 5000 Is about to sent today through western union money transfer You are advise to Contact Dr.kelvin Morrison with your full information.such as
Your name.....
Your country....
Your phone number..
Your adders......
To enable him to send your First Payment of 5000 today.For more information contact DR.kelvin Morrison, Telephone number: +22968748304. Email ([email protected]) he will keep sending you payment until your total fund is Completed 2.7 Usd.

Best Regards


Karla Johnson

[Tim Atem]

Same reply-to email address, name and phone number: Dr. Kelvin Morrison [email protected] +229-68748304

Recovery Scam!!

41.86.135.12 Cobranet Limited Lagos Nigeria

Delivered-To: <snipped>
Received: by 10.202.199.8 with SMTP id x8csp3433903oif;
Thu, 7 May 2015 00:32:18 -0700 (PDT)
X-Received: by 10.68.125.130 with SMTP id mq2mr4406176pbb.121.1430983937723;
Thu, 07 May 2015 00:32:17 -0700 (PDT)
Return-Path: <[email protected]>
Received: from smtpbg303.qq.com (smtpbg303.qq.com. [184.105.206.26])
by mx.google.com with ESMTPS id be6si1686226pbd.10.2015.05.07.00.32.17
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 07 May 2015 00:32:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 184.105.206.26 as permitted sender) client-ip=184.105.206.26;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 184.105.206.26 as permitted sender) smtp.mail=[email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=qq.com
DKIM-Signature: <snipped>
X-QQ-SSF: 00010000000000F0000000000000000
X-HAS-ATTACH: no
X-QQ-BUSINESS-ORIGIN: 2
X-Originating-IP: 41.86.135.12
In-Reply-To: <CABvzxd5RhUOpxTec35j_osydog0Po7G01umSGmMpK9uinY4_9Q@mail.gmail.com>
References: <CABvzxd5RhUOpxTec35j_osydog0Po7G01umSGmMpK9uinY4_9Q@mail.gmail.com>
X-QQ-STYLE:
X-QQ-mid: webenglish9t1430983933t732761
From: "=?ISO-8859-1?B?V2VzdGVybnVuaW9uIFRyYW5zZmVy?=" <[email protected]>
To: "=?ISO-8859-1?B?VGhvbWFzIFNiZWVm?=" <<snipped>>
Subject: WELCOME TO WESTERN UNION MONEY TRANSFER
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_554B14FD_0946CAB8_1114F60D"
Content-Transfer-Encoding: 8Bit
Date: Thu, 7 May 2015 15:32:13 +0800
X-Priority: 3
Message-ID: <[email protected]>
X-QQ-MIME: TCMime 1.0 by Tencent
X-Mailer: QQMail 2.x
X-QQ-Mailer: QQMail 2.x
X-QQ-ReplyHash: 2089653632
X-QQ-SENDSIZE: 520
X-QQ-FName: F9C803B953A0481395AFE7FBE3E0A99B
X-QQ-LocalIP: 58.250.134.100

WELCOME TO WESTERN UNION MONEY TRANSFER
Send Money Worldwide

BRANCH: PLOT 117 JEAN PAUL AVENUE BENIN REPUBLIC
E-mail Address: [email protected]
Website: http://www.westernunion.com
Tel +229- 68 74 83 04

Dear ,

Attention: E-mail Address Owner

RE: 2014 /2015 SCAM VICTIM'S COMPENSATION FROM THE IMF/ ECO-WAS / UNITED NATIONS CONTACT E-MAIL ADDRESS: [email protected]

The International Monetary Fund (IMF)/ ECO-WAS / UNITED NATIONS is compensating all the Scam victims and your email address was found in the scam victim's list for this fiscal year 2014 /2015. This Western Union office has been mandated by the IMF / ECO-WAS / UNITED NATIONS to transfer your compensation to you via Western Union Money Transfer.

However, we have concluded to affect your own payment through Western Union Money Transfer, $5000.00 us dollars, daily until the total sum of (Two millions Seven hundred thousand United State Dollars ( USD$2.700.000.00USD) is completely transferred to you. We can not be able to send the payment with your email address alone; thereby we need your information as to where we will be sending the funds, such as;

Receiver's Name:............
Address:..............
Country:..............
Phone number:.....................
Attached copy of your Identification.

Waiting to hear from you as soon as you receive this email.
Sincerely.

Dr. Kelvin Morrison
Senior Management - WESTERN UNION MONEY TRANSFER
BRANCH: PLOT 117 JEAN PAUL AVENUE
Tel +229- 68 74 83 04
BENIN REPUBLIC
Website: http://www.westernunion.com
Western UnionRegistered trademark symbolPayments

[Tim Atem]

Header Analysis Quick Report
Originating IP: 41.85.179.21
Originating ISP: Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.39.139 with SMTP id n133csp3682382ion;
Thu, 3 Dec 2015 03:09:48 -0800 (PST)
X-Received: by 10.129.52.143 with SMTP id b137mr5954401ywa.201.1449140988742;
Thu, 03 Dec 2015 03:09:48 -0800 (PST)
Return-Path: <[email protected]>
Received: from 10ibl21ser04.datacenter.cha.cantv.net (10ibl21ser04.datacenter.cha.cantv.net. [200.11.173.10])
by mx.google.com with ESMTPS id f10si4561502ywf.355.2015.12.03.03.09.32
(version=TLS1 cipher=AES128-SHA bits=128/128);
Thu, 03 Dec 2015 03:09:48 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) client-ip=200.11.173.10;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) smtp.mailfrom=[email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-01 (webmail-01.datacenter.cha.cantv.net [200.11.153.84])
(authenticated bits=0)
by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id tB3B9RdN028950;
Thu, 3 Dec 2015 06:39:27 -0430
X-Matched-Lists: []
Received: from 41.85.179.21 ([41.85.179.21]) by webmail-01.mgmt.cantv.net (Cantv Webmail) with HTTP; Thu, 3 Dec 2015 06:39:23 -0430 (VET)
Date: Thu, 3 Dec 2015 06:39:23 -0430 (VET)
From: Karl Johnson <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <2012058018.1660714.1449140967454.JavaMail.nitido@webmail-01.mgmt.cantv.net>
Subject: Your Payment is Ready
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.85.179.21]

Attention My Dear,
Your first payment of 5000 Is about to sent today through money gram transfer You are advise to Contact Mr Johnson David your full information.such as
Your name.....
Your country....
Your phone number..
Your adders......
To enable him to send your First Payment of 5000 today.For more information contact Mr Johnson David
,Telephone number: +229 68993819 Email ([email protected] )he will keep sending you payment until your total fund is Completed 2.7 Usd.

Best Regards
Karla Johnson

[AlanJones]

From: Karl Johnson - [email protected]
Other Email: [email protected]
Tel. No.: +22968993819

Attention My Dear,

Your first payment of 5000 Is about to sent today through money gram transfer You are advise to Contact Mr Johnson David your full information.such as

Your name.....
Your country....
Your phone number..
Your adders......

To enable him to send your First Payment of 5000 today.For more information contact Mr Johnson David

,Telephone number: +229 68993819 Email ([email protected] )he will keep sending you payment until your total fund is Completed 2.7 Usd.

Best Regards

Karla Johnson

[Tim Atem]

from: ahmed.musa - [email protected]
other email: [email protected]
phone number: +229-68993819

Attention My Dear,

Your first payment of $5000 Is about to sent today through money Gram transfer You are advise to Contact Mr Johnson David your full information.such as
Your name.....
Your country....
Your phone number..
Your adders......
To enable him to send your First Payment of 5000 today.For more information contact Mr Johnson David
,Telephone number: +229 68 99 38 19 Email ( [email protected] )he will keep sending you payment until your total fund is Completed $2.7 Million Usd.

Best Regards

Ahmed Musa