Eric Wilson [email protected]

[Tim Atem]

Header Analysis Quick Report
Originating IP: 41.222.194.237
Originating ISP: Isocel
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.39.129 with SMTP id n123csp2538427ion;
Wed, 4 Nov 2015 06:17:31 -0800 (PST)
X-Received: by 10.129.38.213 with SMTP id m204mr1364719ywm.74.1446646651104;
Wed, 04 Nov 2015 06:17:31 -0800 (PST)
Return-Path: <[email protected]>
Received: from if09-mail-fb09-mia.mta.terra.com (if09-mail-fb09-mia.mta.terra.com. [208.84.243.233])
by mx.google.com with ESMTP id v77si589648ywe.204.2015.11.04.06.17.23;
Wed, 04 Nov 2015 06:17:31 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 208.84.243.233 as permitted sender) client-ip=208.84.243.233;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 208.84.243.233 as permitted sender) smtp.mailfrom=[email protected]
Received: from mail-smtp04-mia.tpn.terra.com (unknown [10.235.200.59])
by mail-fb09-mia.tpn.terra.com (Postfix) with ESMTP id F393280079C2;
Wed, 4 Nov 2015 14:17:22 +0000 (UTC)
X-Terra-Karma: -2%
X-Terra-Hash: c1993a1a6139f956b81909714cfa5778
Received: from localhost (1ge.terra.com [208.84.242.165])
(authenticated user rbara!speedylm)
by mail-smtp04-mia.tpn.terra.com (Postfix) with ESMTPA id 00B28400017D;
Wed, 4 Nov 2015 14:17:17 +0000 (UTC)
reply-to: [email protected]
date: Wed, 04 Nov 15 14:17:17 +0000
message-id: <[email protected]>
X-Priority: 3
x-msmail-priority: normal
importance: normal
priority: normal
subject: Contact The Diplomatic Agent For Your Package
x-origin: 41.222.194.237
from: "Mr.Johnson Marcel" <[email protected]>
content-type: text/html; charset=utf-8
content-transfer-encoding: QUOTED-PRINTABLE
mime-version: 1.0
to:
X-CMAE-Score: 0

Attn: Beneficiary,

This is to inform you that the diplomatic agent conveying your Consignment valued the sum of $2.5 Million United States Dollars has arrive Denver International Airport in Colorado with your consignment.

Contact him immediately with your address and direct phone number to enable him deliver your consignment to you.

(1)YOUR FULL NAME: _______
(2)HOME/OFFICE ADDRESS: ________
(3)MOBILE PHONE NUMBER: _______
(4)A COPY OF YOUR IDENTIFICATION: __________

Do contact the diplomatic agent with the email bellow and send him the information's required.

Contact Person: Eric Wilson
EMAIL:([email protected])

Never forget to forward the diplomat agent your consignment deposit details in order for him to act fast and moved the Package to your address.

Deposit Number: PLCC-101-
Sort/Clearance Code: PLC/101-45/P50
Deposit Certificate N0.: 405576
Package Description:Consignment
Depositor: DHEV ARAJULU

Make sure you quote the deposit details well to the diplomatic agent to avoid misinformation, Write to him now and quote the deposit details to the given address.

Note that the diplomatic agent Eric Wilson is not aware of the content of this consignment, so never disclose the content with him for security reason`s.

Contact him immediately and keep me inform as soon as he deliver the consignment to you ok.

Yours Sincerely,

Mr.Johnson Marcel.

[Tim Atem]

The US phone numbers they're using in this scam:

813-575-2929 VoIP - Bandwidth.com CLEC Tampa, FL
719-418-3395 Comcast VoIP in Colorado Springs, CO
901-305-8671 VoIP - Bandwidth.com CLEC Memphis, TN

Delivered-To: <snipped>
Received: by 10.112.73.147 with SMTP id l19csp349788lbv;
Sat, 7 Nov 2015 10:19:18 -0800 (PST)
X-Received: by 10.60.17.200 with SMTP id q8mr11728134oed.76.1446920358182;
Sat, 07 Nov 2015 10:19:18 -0800 (PST)
Return-Path: <[email protected]>
Received: from SNT004-OMC2S19.hotmail.com (snt004-omc2s19.hotmail.com. [65.55.90.94])
by mx.google.com with ESMTPS id ru10si2954102obb.2.2015.11.07.10.19.17
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Sat, 07 Nov 2015 10:19:18 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.90.94 as permitted sender) client-ip=65.55.90.94;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.55.90.94 as permitted sender) smtp.mailfrom=[email protected];
dmarc=pass (p=NONE dis=NONE) header.from=hotmail.com
Received: from SNT147-W42 ([65.55.90.72]) by SNT004-OMC2S19.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Sat, 7 Nov 2015 10:19:17 -0800
X-TMN: [CNFJD5mQLDqb6VKh3pkdCgjIyAd6QUUI]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_3932b410-5af6-4e3b-b02c-4e73da97eecb_"
From: Eric Wilson <[email protected]>
To: <<snipped>>
Subject: RE: Contact The Diplomatic Agent For Your Package
Date: Sat, 7 Nov 2015 18:19:17 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 07 Nov 2015 18:19:17.0673 (UTC) FILETIME=[D09E3190:01D11988]

I have received your email together with your address, my name is Mr. Eric Wilson, the diplomatic agent who came with your consignment luggage to deliver to you, I arrive at Denver International Airport in Colorado yesterday and i have concluded my arrangement this morning to fly down to your state to bring your consignment to you at your home.

The airport authorities wanted to open the luggage to inspect the content but i refused them to do so because the sender warned us that it should not be open so that the laboratory equipment's inside it will not get damaged.

So they did not open it again as i refused them to do so, they have weighed your consignment and i am set to depart from Denver International Airport right now to your destination but the airport authorities requested for the clearance charge for your consignment, the clearance fee is $385 only.

This is the only thing delaying me here at Denver International Airport right now, can you come with the clearance fee to Denver International Airport here in Colorado to meet me?

I am at the custom department inside Denver International Airport, the address is: 120 S. Broadway Denver, CO 80209, can you come to this address to meet me?

If you can not make it to come down here in Colorado then you have to quickly send the clearance fee sum of $385 to the receiver name of the airport authorities here so that they can clear your consignment to enable me board the flight to come down to your home immediately and deliver your consignment to you before i go back to my country.

The airport authorities has directed you to send the clearance fee Via moneygram or western union with this information's bellow:

RECEIVER NAME:........MELVIN JOSEPH <snipped>
ADDRESS:..........<snipped> COLORADO SPRINGS, COLORADO 80910-4188, USA.
TEXT QUESTION..........OK
TEXT ANSWER.............OK

This is the instruction of the airport authorities for sending the fee, so if you can not make it to come down to Colorado here to meet me, then send the fee immediately with the above given information so that they can clear your consignment to enable me fly down to your home immediately to hand over your consignment box to you before going back to my country.

I have arrive here at Denver International Airport in Colorado since yesterday and i have no much time to spend here, so do treat this as a matter of urgent ok.

You can call me on this temporary number bellow: 8135752929/ 719-418-3395 or text me on this number: 901305-8671.

I am waiting to hear from you as soon as you receive this message.

Regards,

Mr. Eric Wilson.