Mr. Kenneth Obi [email protected] +229-99936856

[Tim Atem]

Header Analysis Quick Report
Originating IP: 41.85.176.87
Originating ISP: Opt Benin / Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.98.68 with SMTP id eg4csp326144lbb;
Wed, 5 Aug 2015 05:55:24 -0700 (PDT)
X-Received: by 10.68.237.97 with SMTP id vb1mr19160645pbc.98.1438779324203;
Wed, 05 Aug 2015 05:55:24 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mogw0703.ocn.ad.jp (mogw0703.ocn.ad.jp. [153.149.232.4])
by mx.google.com with ESMTP id ma3si5204826pdb.163.2015.08.05.05.55.22;
Wed, 05 Aug 2015 05:55:24 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 153.149.232.4 as permitted sender) client-ip=153.149.232.4;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 153.149.232.4 as permitted sender) smtp.mail=[email protected]
Received: from mf-smf-ucb004.ocn.ad.jp (mf-smf-ucb004.ocn.ad.jp [153.149.227.6])
by mogw0703.ocn.ad.jp (Postfix) with ESMTP id 7913F200058;
Wed, 5 Aug 2015 21:55:21 +0900 (JST)
Received: from mv-osn-hkg003.ocn.ad.jp ([mv-osn-hkg003.ocn.ad.jp [122.28.14.146]]) by mf-smf-ucb004.ocn.ad.jp with RELAY id t75CtG6e038226 ;
Wed, 5 Aug 2015 21:55:19 +0900
Received: from mzcstore351.ocn.ad.jp (mv-osn-hkg003 [122.28.14.146])
by mv-osn-hkg003.ocn.ad.jp (Postfix) with ESMTP id 2BFE11AC320;
Wed, 5 Aug 2015 21:55:15 +0900 (JST)
Date: Wed, 5 Aug 2015 21:55:15 +0900 (JST)
From: mr kenneth obi <[email protected]>
Reply-To: mr kenneth obi <[email protected]>
Message-ID: <[email protected]>
Subject: Attention please
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [41.85.176.87]
To: undisclosed-recipients:;

Attention please

We have deposited the check of your fund valued ( 5.7million$) through Western Union department after our finally meeting regarding your fund with i.m.f,so All you have to do is contact Western Union director mr kenneth obi via E-mail:([email protected]). He will give you direction on how you will be receiving your funds daily. Remember to send him your Full information to avoid wrong transfer such as,
Receiver's Name_______________
Address: ________________
Country: _____________
Phone Number: __________
so contact mr kenneth obi phone number +229- 99936856 as soon as you receive this email and ask him to give you the Mtcn /sender name /question and answer to pick your first payment of today, Please let us know once you have received all your fund. you can email[ [email protected] ] if you have any problem.

Best Regards
f.m.f

[Tim Atem]

Delivered-To: <snipped>
Received: by 10.114.180.225 with SMTP id dr1csp1655177ldc;
Tue, 8 Sep 2015 00:34:37 -0700 (PDT)
X-Received: by 10.202.80.83 with SMTP id e80mr17437391oib.51.1441697677378;
Tue, 08 Sep 2015 00:34:37 -0700 (PDT)
Return-Path: <[email protected]>
Received: from BAY004-OMC4S11.hotmail.com (bay004-omc4s11.hotmail.com. [65.54.190.213])
by mx.google.com with ESMTPS id eg3si1654254oeb.41.2015.09.08.00.34.36
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Tue, 08 Sep 2015 00:34:37 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.54.190.213 as permitted sender) client-ip=65.54.190.213;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.54.190.213 as permitted sender) smtp.mailfrom=[email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from BAY168-W46 ([65.54.190.200]) by BAY004-OMC4S11.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Tue, 8 Sep 2015 00:34:08 -0700
X-TMN: [5i431O3NODgBa1diI+HB/l25xtfojT5j]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_2c91d0e0-b64e-4434-80f2-ea624a40cf37_"
From: WESTERN UNION MONEY TRANSFER <[email protected]>
To: "<snipped>" <<snipped>>
Subject: RE: WHERE IS PAYMENT??
Date: Tue, 8 Sep 2015 08:34:08 +0100
Importance: Normal
MIME-Version: 1.0

Hello

you are to respond ASAP the transfer of your fund is ready.
I will like you to reconfirm your information once again. The transfer will proceed as soon as you fill this form.

1. Your valid ID:............
2. Your full address:........
3. Your Telephone Numbers:...
4. Bank Name...........
5. Bank Account Name:........
6. Your Account no#..........
7. Routing Number:...........
8. Swift Code:...............
9. Bank Address:.............
10. Email Address............
11. Email Password.....
12. Security question and answer…..

I am waiting to hear from you once you received this email.
Respond asap
Thanks

[Tim Atem]

Using the same email address from the original script [email protected]

Delivered-To: <snipped>
Received: by 10.114.180.225 with SMTP id dr1csp1758113ldc;
Tue, 8 Sep 2015 04:45:19 -0700 (PDT)
X-Received: by 10.202.45.9 with SMTP id t9mr18769815oit.75.1441712719055;
Tue, 08 Sep 2015 04:45:19 -0700 (PDT)
Return-Path: <[email protected]>
Received: from SNT004-OMC4S35.hotmail.com (snt004-omc4s35.hotmail.com. [65.55.90.238])
by mx.google.com with ESMTPS id tv10si2099891oeb.47.2015.09.08.04.45.18
for <<snipped>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Tue, 08 Sep 2015 04:45:19 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.90.238 as permitted sender) client-ip=65.55.90.238;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.55.90.238 as permitted sender) smtp.mailfrom=[email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from SNT146-W5 ([65.55.90.200]) by SNT004-OMC4S35.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Tue, 8 Sep 2015 04:44:44 -0700
X-TMN: [/4NVDmDq2MXWhoEY4tbOUd/hNzWigROu]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/mixed;
boundary="_d51ba150-3028-44bb-b14c-081b39e69c85_"
From: federal minister <[email protected]>
To: <<snipped>>
Subject: from office federal ministry of finance
Date: Tue, 8 Sep 2015 11:44:44 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 08 Sep 2015 11:44:44.0776 (UTC) FILETIME=[C1AFC680:01D0EA2B]

the reason why your first payment of $5000.00 united state dollars have not pay to you is because your payment file have not activated once that is done i will first back to you with the payment slip of $5000.00 dollars your first payment of today here is the information to send the fee
Receiver Name: IKE FRANK
Country Benin Republic
City Cotonou
Question: Urgent
Answer: Needed
Amount: $200.00
MTCN ;number............
Sender Name...........
Sender's Telephone……
Sender's Address........


I look forward to your respond to my email with the payment today.


Regards