Dr. John Isa [email protected] +229-65966266

[Tim Atem]

Header Analysis Quick Report
Originating IP: 41.216.50.34
Originating ISP: Opt Benin / Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.114.180.225 with SMTP id dr1csp452371ldc;
Thu, 24 Sep 2015 08:55:01 -0700 (PDT)
X-Received: by 10.68.96.67 with SMTP id dq3mr266110pbb.161.1443110101212;
Thu, 24 Sep 2015 08:55:01 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.ymps.ntpc.edu.tw (dns.ymps.ntpc.edu.tw. [163.20.103.129])
by mx.google.com with ESMTP id hf3si19268661pbb.34.2015.09.24.08.54.59;
Thu, 24 Sep 2015 08:55:01 -0700 (PDT)
Received-SPF: neutral (google.com: 163.20.103.129 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=163.20.103.129;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 163.20.103.129 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mailfrom=[email protected];
dmarc=fail (p=NONE dis=NONE) header.from=kimo.com
Received: from mail.ymps.ntpc.edu.tw (localhost [127.0.0.1])
by mail.ymps.ntpc.edu.tw (Postfix) with ESMTP id 600AA2EB23D0;
Thu, 24 Sep 2015 23:45:08 +0800 (CST)
Received: from mail.ymps.ntpc.edu.tw (localhost [127.0.0.1])
by mail.ymps.ntpc.edu.tw (Postfix) with ESMTP id 5AE762EB211A;
Thu, 24 Sep 2015 23:45:08 +0800 (CST)
From: "Barrister Frank Nwaeke" <[email protected]>
Reply-To: [email protected]
Subject: Re: Dear Costumer Email alert:‏
Date: Thu, 24 Sep 2015 17:45:08 +0200
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.52 20060502
X-OriginatingIP: 41.216.50.34 (web5)
MIME-Version: 1.0
Content-Type: text/html;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
To: undisclosed-recipients:;
X-NetStation-Status: PASS
X-NetStation-SPAM: 0.00/4.00-5.00

Attention:

Now we have arranged your payment of ($2.8millions) two millions eigth hundred thousand united state dollars in atm payment card to be sent to you through western union money transfer payment: Your payment will sending to you by western union, the amount you will receive per dayis $5,000

The minister trust funds of Benin Republic will send you the currently standards track details you need to pick up your (5,000) payment by western union, you will receive every day till you receive the $2.8millions
united state dollars, now no need to send you this atm card because you can not be able to withdraw the atm card due to the atm master card contain large money on it.


The director administrtor trust funds have already signed your payment, now you are free to comply with wemaco payment office on this email: ([email protected]) however, kindly contact the below person who is in position to release your payment by western union per $5,000 a day.

Mr Dr. JOHN . ISA,
western union department
Financial Bank Benin,
Call us with +229 65966-266
E-mail: ([email protected])

The financial western union payment canter has been mandated to issue out your payment and you have to stop any further communication with any other person(s) or office(s) to avoid any hitches in receiving your payment.

Note that the administrator payment need this details from you to process your payment:
Receiver name==========
Country================
City===================
Tel-===================
Test question==========
Answer=================
YOUR ID ==============
Comply now because as soon as you sent this required details to Mr Dr. JOHN . ISA he will start sending your payment by western union
Regards,
Barrister Frank Nwaeke

[Tim Atem]

Same email address [email protected] with a new phone number +229-67206750

Header Analysis Quick Report
Originating IP: 41.216.50.142
Originating ISP: Opt Benin / Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.114.82.39 with SMTP id f7csp998165ldy;
Fri, 23 Oct 2015 03:35:01 -0700 (PDT)
X-Received: by 10.202.226.206 with SMTP id z197mr13632664oig.19.1445596501838;
Fri, 23 Oct 2015 03:35:01 -0700 (PDT)
Return-Path: <[email protected]>
Received: from server.donkeymails.com ([205.251.156.154])
by mx.google.com with ESMTPS id fo7si11791248obb.86.2015.10.23.03.35.01
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 23 Oct 2015 03:35:01 -0700 (PDT)
Received-SPF: neutral (google.com: 205.251.156.154 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=205.251.156.154;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 205.251.156.154 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mailfrom=[email protected];
dmarc=fail (p=NONE dis=NONE) header.from=kimo.com
Received: from nobody by server.donkeymails.com with local (Exim 4.86)
(envelope-from <[email protected]>)
id 1ZpZgV-0000b0-G7
for <snipped>; Fri, 23 Oct 2015 05:34:58 -0500
To: <snipped>
Subject: MTCN;;8595603382
X-PHP-Script: http://www.donkeymails.com/pages/m.php for 41.216.50.142
From: WESTERN UNION <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Fri, 23 Oct 2015 05:34:55 -0500
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.donkeymails.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - server.donkeymails.com
X-Get-Message-Sender-Via: server.donkeymails.com: uid via acl_c_vhost_owner from authenticated_id: nobody from /only user confirmed/virtual account not confirmed
X-Authenticated-Sender: server.donkeymails.com: nobody

FROM OFFICE OF THE WESTERN UNION MONEY TRANSFER. COTONOU BENIN
REPUBLIC/ADDRESS 455 AGBOKOU,ANKPA ROADOPPOSITE TUNDE MOTORS COTONOU.TEL
+229-67206750.

ATTENTION:

I have receive your mail you send to me so you try and send the money today by tomorrow you will receive your frist payment. if you receive the e-mail you try and the money $49 today by tomorrow you will receive the money $2500 pey a day FINALLY, URGENT SEND US THE $48 USD TO ENABLE US PROCEED ON YOUR PAYMENT IMMEDIATELY. BELOW IS OUR ACCOUNTANT OFFICER INFORMATION FOR YOU TO SEND THE $48 USD THROUGH OUR WESTERN UNION MONEY TRANSFER BEEN OUR TRANSFER CHARGE.


1.RECEIVER NAME:.......MIKE ONWA
2.COUNTRY:..........Benin Republic.
3.CITY :............Cotonou.
4.TEXT QUESTION:....GOD
5.TEXT ANSWER:......BLESS.
6.AMOUNT:..........$48. 00 USD
MTCN NUMBER........
SENDER'S NAME SHOULD BE YOUR NAME.

With regards to our most efforts to get your first payment transfered to you due to month Bonus through our western union destrict here,so we have concluded to transferred your first payment as promised $2500 per a day.At this moment,we have gotten an approval from the director of another branch office that we are to start transfering your funds today and when you receive the first bite of the payment of the $2500,you will then pay what you owe here and the rest of your fund will also be sent to you accordingly as programmed.

For this effect,we have sent you the first portion of the $2500 this morning and below are the information on how to pick up:

MEANWHILE YOU CAN TRACK IT AND CONFIRM THE MTCN BY

https://wumt.westernunion.com/asp/order ... try=global

MTCN;;8595603382
Amount $2500.Dollar,s
Sender,s First name Julius
second name Eze
Question:.........A
Answer:...........B

Inside the website,Click transfer status and there you will see you a space for mtcn and the first and second name of the sender where you type in and click check status for you to know that the money is available to pick up by the receiver being you.You have to carry on the above directed instructions and then get back to me immediately you receive your moneytoday.

Yours In Services
MR JOHN CHIKA.
Western Union Tel +229-67206750.
Republic Manager

[Tim Atem]

Using the same email address [email protected]

Header Analysis Quick Report
Originating IP: 15.11.16.20
Originating ISP: Hewlett-packard Company
City: Palo Alto
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.13.234.206 with SMTP id t197csp2786043ywe;
Mon, 16 Nov 2015 20:30:39 -0800 (PST)
X-Received: by 10.68.177.5 with SMTP id cm5mr60704039pbc.92.1447734639577;
Mon, 16 Nov 2015 20:30:39 -0800 (PST)
Return-Path: <[email protected]>
Received: from atlas.matrixdm.com (ftp.matrixdm.com. [69.59.197.200])
by mx.google.com with ESMTPS id i8si32977371pbq.106.2015.11.16.20.30.39
for <<snipped>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 16 Nov 2015 20:30:39 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 69.59.197.200 as permitted sender) client-ip=69.59.197.200;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 69.59.197.200 as permitted sender) smtp.mailfrom=[email protected]
Received: from atlas.matrixdm.com (localhost.localdomain [127.0.0.1])
by atlas.matrixdm.com (8.14.4/8.14.4) with ESMTP id tAH463ZN007379
for <<snipped>>; Mon, 16 Nov 2015 20:06:03 -0800
Received: (from apache@localhost)
by atlas.matrixdm.com (8.14.4/8.14.4/Submit) id tAH462Gs007371;
Mon, 16 Nov 2015 20:06:02 -0800
Date: Mon, 16 Nov 2015 20:06:02 -0800
Message-Id: <[email protected]>
To: <snipped>
Subject: GOOD MORNING
From: WESTERN UNION <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0

With due respect sir, We write to acknowledge the receipt of your mail regarding your funds deposited in our office here for immediate transfer to your name via our service Western Union Money Transfer Department Cotonou, Benin Republic.

Regarding the transfer, We are hereby inform you as the beneficiary of the funds that before the full information will be release to pick up the $4,500.00 daily basis, Your payment file which was deposited in our office here will be renewed and activated with the sum of ($79.00) to enable us programmed your name with the information which you will use to pick up your funds in any nearest western union office around you
It is very important that you make the fee available to this office as soon as you receive this mail to renew and activate your payment file for security purposes so that the full information will be release to you immediately so that you can go and pick up your $4,500.00 payment and it will be continue like that until your total funds is transferred to you .

The total amount of your funds which you are going to confirm is the sum of Two Million Eight Hundred Thousand United State Dollars ($2.8m usd) as soon as we confirm the fee and it will be transferring you $4,500.00 daily and there will be another option if you want to be receiving more than $4,500.00 daily .
However, You are here to be assure that within 2hrs of receiving the $79.00 that your first payment of $4,500.00 will be wired and give you the MTCN CODE , SENDER'S NAME, TEXT QUESTION AND ANSWER TO PICK UP Note: that the reason you were ask to send the money is to renew and activate your payment file as we have stated above though we have tried to deduct the fee from your funds but the minister administrator trust fund of Benin Republic told us that no one has access over your funds as it has been signed and stamped that no money should be deducted until it gets to the beneficiary to avoid fraud or any thing related to that because if any one has access to deduct or added to the value it may result another thing
Therefore you are expecting to send the ($79.00 to enable us carry on with the transfer and finally,
Below is the information to send the fee via western union or moneygram.

Receiver's name/======= Mike Onwa
City/ ======= Cotonou
Country/ ====== Benin Republic.
Text question/=== What for?
Text answer/ ===== Payment
Sender's name/======
Amount/===== $79.00/
MTCN#/======
I am waiting to hear from you with payment information immediately.
Yours in service
Mr.Kenneth Aka Foreign operation manager
Telephone +229-68584286