Scams re-targeting those who have already been victimized
by Faizan Docherty Sat Feb 28, 2015 11:43 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.86.234.138
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline


Return-Path: <[email protected]>
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
by sloti33d1t14 (Cyrus git2.5+0-git-fastmail-10591) with LMTPA;
Sat, 28 Feb 2015 05:04:49 -0500
X-Sieve: CMU Sieve 2.4
X-Spam: high
X-Spam-score: 12.8
X-Spam-hits: ADVANCE_FEE_5_NEW_FORM 0.811, BAYES_95 3, FILL_THIS_FORM 0.001,
FREEMAIL_FORGED_REPLYTO 2.095, FREEMAIL_REPLYTO_END_DIGIT 0.25,
HK_SCAM_N3 0.21, RCVD_IN_INVALUEMENT24 2, RCVD_IN_UNSUBSCOREBL 1,
SPF_PASS -0.001, SUBJ_ALL_CAPS 1.506, TVD_RCVD_SPACE_BRACKET 0.001,
WPBL_RBL 2, LANGUAGES en, BAYES_USED global, SA_VERSION 3.3.2
X-Spam-source: IP='153.149.230.25', Host='mbkd0124.ocn.ad.jp', Country='JP',
FromHeader='jp', MailFrom='jp', XOriginatingCountry='BJ'
X-Spam-charsets: plain='ISO-2022-JP'
X-Resolved-to: <snipped>
X-Delivered-to: <snipped>
X-Mail-from: [email protected]
Received: from mx3 ([10.202.2.202])
by compute3.internal (LMTPProxy); Sat, 28 Feb 2015 05:04:49 -0500
Received: from mx3.messagingengine.com (localhost [127.0.0.1])
by mx3.nyi.internal (Postfix) with ESMTP id BDF99C0072
for <snipped>; Sat, 28 Feb 2015 05:04:48 -0500 (EST)
Received: from mx3.nyi.internal (localhost [127.0.0.1])
by mx3.messagingengine.com (Authentication Milter) with ESMTP
id 1B33BAE2559.B8BAAC0033;
Sat, 28 Feb 2015 05:04:48 -0500
Authentication-Results: mx3.messagingengine.com;
dkim=none (no signatures found);
dmarc=fail (p=none) header.from=lily.ocn.ne.jp;
spf=pass [email protected] smtp.helo=mbkd0124.ocn.ad.jp
Received-SPF: pass (lily.ocn.ne.jp: Sender is authorized to use '[email protected]' in 'mfrom' identity (mechanism 'include:spf.ocn.ne.jp' matched)) receiver=mx3.messagingengine.com; identity=mailfrom; envelope-from="[email protected]"; helo=mbkd0124.ocn.ad.jp; client-ip=153.149.230.25
Received: from mbkd0124.ocn.ad.jp (mbkd0124.ocn.ad.jp [153.149.230.25])
by mx3.messagingengine.com (Postfix) with ESMTP id B8BAAC0033
for <snipped>; Sat, 28 Feb 2015 05:04:47 -0500 (EST)
Received: from mf-smf-ucb007.ocn.ad.jp (mf-smf-ucb007.ocn.ad.jp [153.149.231.6])
by mbkd0124.ocn.ad.jp (Postfix) with ESMTP id 679EDC0148A;
Sat, 28 Feb 2015 19:04:45 +0900 (JST)
Received: from mv-osn-hcb007.ocn.ad.jp ([mv-osn-hcb007.ocn.ad.jp [118.23.180.69]]) by mf-smf-ucb007.ocn.ad.jp with RELAY id t1SA4egP035903 ;
Sat, 28 Feb 2015 19:04:43 +0900
Received: from mzcstore121.ocn.ad.jp (mv-osn-hcb007 [118.23.180.69])
by mv-osn-hcb007.ocn.ad.jp (Postfix) with ESMTP id 28C6629C34E;
Sat, 28 Feb 2015 19:04:40 +0900 (JST)
Date: Sat, 28 Feb 2015 19:04:40 +0900 (JST)
From: "Mrs.Susan W. Lucas" <[email protected]>
Reply-To: [email protected]
Message-ID: <[email protected]>
Subject: FROM MRS.SUSAN W. LUCAS
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [41.86.234.138]
To: undisclosed-recipients:;


FROM MRS.SUSAN W. LUCAS

This is to bring to your notice that because of the impossibility of your fund transfer through the western union network, I am doing all I can to make sure you receive your funds and I protected your funds for almost six Months now but I assure you that you still have every opportunity to claim your entire funds from the United State
Embassy Office Benin Republic (U.S.E.B.R).

I am only trying to help you because of the way the payment was handled in the past. Secondly, I can not sit and watch you loose your funds after confiding in me. As a matter of fact, there are still decent and God fearing people here in the United State Embassy Office Benin Republic which I am a good example. Since I came to this office in the year 2013, I have helped so many foreign

Contractors/Beneficiaries from all paths of the world in claiming their long over due fund from the Benin Government.

If you don't want to conclude these matter before Monday coming week just inform me today so that I can know what next to do because I can just be hearing same story and you will be dealing with people and sending information's to them and if you cant send the fee then know that your fund will be canceled and all your effort so far will turn useless because I did all I can for my government to protect your fund and your personality but you won't listen, I can help you if you help yourself.

If you can be able to come up with $45.00 for the Clearance Paper today, I will make sure you get your fund tomorrow morning, your fund is ready to transfer to you as I write to you now due to my effort and I don't know why you should be dealing with people outside my office, just do your best and these transfer will be conducted. Finally

if this fund will be terminated and there is no way on earth you can get this fund because the IMF will just have to cancel your name from the payment file, its better you conclude these matter within the given date.

If I receive the fee , I assure you that you are going to confirm your funds in your Country WITHIN 10HRS through our choosing Diplomatic Agent. I shall try my possible best to make sure I conclude the due legal process and will like you to Take my word because i am strong be hide you and my effort to this does not end until you confirm the availability of your fund in your hands.

Please do not allow any body to deceive you and I expect your response and I don't want you to be tired of these, just take life easy and see what the result will be by next Week, I will expect your response and the fee sent by western union. Just get back to me today with the details and I promise to release your fund to you, its

not easy and I believe you have tried as well, so make sure you conclude these or your fund will be terminated by the High Authority and that is all I can say for now.

Note that your consignment box has been arrived in US embassy and waiting to receive clearance certificate before the gate pass is given. Meanwhile you are advise to reconfirm the below information upon contacting us to avoid delivery to the wrong person.

1, Your full name:
2, Your home address:
3, Your occupation:
4, Direct Telephone Number:
Email:([email protected])


I am expecting the payment information as soon as you can so we can proceed immediately. Note that you are expected to pay only $45.00 for clearance certificate and you are to pay it to Benin Republic as the origination of the consignment box. Send the $45.00 through Money-Gram once you receive this mail with the information below for immediate release of your FUNDS,

RECEVERS:NAME: MR. SUNDAY EMAKE
COUNTRY: BENIN REPUBLIC
CITY COTONOU
TEXT QUESTION: WHO MADE?
TEXT ANSWER: JESUS
AMOUNT: $45.00
MTCN.........................?
SENDER NAME.................?

Once you send the money, try to notify us with the MTCN# AND THE SENDER'S NAME for easy pick up and for immediate action on the release of your consignment. Please treat this as matter of urgency. Note that any unclimbable consignment will be return to the Courier Company after 3 days for final diversion. So you are urgently advise to comply with our demand so that your consignment will be among those that will be deliver this week.


Yours In Service,
FROM MRS.SUSAN W. LUCAS
Assistant Secretary of U.S in Benin State for African Affairs

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 1 guest