[email protected] / +22998813447

[HillBilly]

You are advise to Contact WU

x

Agent Anthony <[email protected]>
11:53 AM (14 minutes ago)

to


I'm western union Agent Anthony dike your first payment of $5000.00 has Been
sent today via Western Union. You are advise to Contact WU with your full
Information’s to enable them give you Sender Name, Question and Answer to Pick
up your First Payment MTCN= 372=616=4016, for more information contact Mr.Umeh,
Tell: +22998813447 Emails([email protected]) he'll keep Sending you
payment until your total fund is Completed Regard Thank you for
Cooperation Best Regards.

Message-ID: <[email protected]>
Date: Fri, 21 Oct 2016 20:53:21 +0200 (CEST)
From: Agent Anthony <[email protected]>
Reply-To: [email protected]
Subject: You are advise to Contact WU
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 197.234.222.139

IP: 197.234.222.139
Decimal: 3320503947
Hostname: 197.234.222.139
ASN: 37424
ISP: Spacetel benin
Organization: Spacetel
Services: None detected
Type: Broadband
Assignment: Static IP
Blacklist: Blacklist Check
Geolocation Information

Continent: Africa
Country: Benin

[HillBilly]

same basic scam text, but with a new reply to: email address.

Grace Williams <[email protected]>
4:09 AM (37 minutes ago)

to dma

I'm western union Agent Anthony dike your first payment of $5000.00 has Been sent today via Western Union. You are advise to Contact WU with your full Information’s to enable them give you Sender Name, Question and Answer to Pick up your First Payment MTCN= 372=616=4016, for more information contact Mr.Umeh, Tell: +22998813447 Emails([email protected]) he'll keep Sending you payment until your total fund is Completed Regard Thank you for Cooperation Best Regards.

Received: from 41.86.234.171 ([41.86.234.171]) by webmail-02.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Mon, 14 Nov 2016 08:09:24 -0400 (VET)
Date: Mon, 14 Nov 2016 08:09:24 -0400 (VET)
From: Grace Williams <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <1019187624.183330.1479125366117.JavaMail.gess@webmail-02.datacenter.cha.cantv.net>
Subject: You are advise to Contact WU
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.86.234.171]

IP: 41.86.234.171
Decimal: 693562027
Hostname: 41.86.234.171
ASN: 37090
ISP: Isocel Sarl
Organization: ISOCEL
Services: Suspected network sharing device
Type: Broadband
Assignment: Static IP
Blacklist: Blacklist Check
Geolocation Information

Continent: Africa
Country: Benin bj flag
State/Region: Littoral
City: Cotonou