[email protected]

Header Analysis Quick Report
Originating IP: 41.216.50.180
Originating ISP: Abonnes Adsl De Benin Telecoms A Dowa
City: n/a
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Western Union Payment Center.
Wusih Zone 6, Porto-Novo FCT.
24 hours banking service.

Dear Customer,

This is to report to you that our Western Union Bureau have received a correspondence from the Federal High Court as cancellation notice for your funds transfer to be deleted from foreign payment file . The Western Union Management desires to inform you that your funds transfer with us has been programmed among the five (5) transactions that would face cancellation soon.

We have waited long time enough for you to fulfill the required obligations and claim the funds like other beneficiaries that have claimed their funds before February ending this year but nothing comes up from you as indication from the funds owner.

The Management of this Western Union held an urgent meeting in my office today, regards to the transferring of your funds by Western Union and they have asked my office to submit all the paper works and files containing your funds confidentiality but I refused and asked the board members to give me from now till 2days time so that I consult you personally for you to declear your interest on the funds transfer.

Further more, you are advised to reply to this email after reading, and feel free to tell us why you abandoned such huge amount here. Let us know if you are no longer interested to complete your transaction.
Finally, if you still have the interest of being paid your funds by Western Union Money Transfer; you should kindly forward your receiver’s name and address including your phone number immediately

your full name________
your address________
your occupation________
your age
your telephone number/fax line
(mobile)________
private E.mail.________

you should there fore reconfirm the information of yours so i can sign all the relevant paper work on behalf of you,to ascertain you are the real owner/beneficially of these fund

I am looking forward to your positive cooperation fairly soon

Best Regards.

Mr. Dina` Raphael.
Western Union
[email protected]

header:

Delivered-To: <redacted>
Received: by 10.64.136.210 with SMTP id qc18csp94961ieb;
Sat, 2 Mar 2013 00:24:04 -0800 (PST)
X-Received: by 10.43.134.8 with SMTP id ia8mr11721383icc.42.1362212644186;
Sat, 02 Mar 2013 00:24:04 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm14-vm2.bullet.mail.ne1.yahoo.com (nm14-vm2.bullet.mail.ne1.yahoo.com. [98.138.91.90])
by mx.google.com with ESMTPS id r8si20736363icu.106.2013.03.02.00.24.02
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 02 Mar 2013 00:24:04 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.91.90 as permitted sender) client-ip=98.138.91.90;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.91.90 as permitted sender) [email protected];
dkim=pass [email protected]
Received: from [98.138.226.177] by nm14.bullet.mail.ne1.yahoo.com with NNFMP; 02 Mar 2013 08:24:02 -0000
Received: from [98.138.89.166] by tm12.bullet.mail.ne1.yahoo.com with NNFMP; 02 Mar 2013 08:24:02 -0000
Received: from [127.0.0.1] by omp1022.mail.ne1.yahoo.com with NNFMP; 02 Mar 2013 08:24:02 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 58442 invoked by uid 60001); 2 Mar 2013 08:24:02 -0000
DKIM-Signature:
Received: from [41.216.50.180] by web122901.mail.ne1.yahoo.com via HTTP; Sat, 02 Mar 2013 00:24:01 PST
X-Rocket-MIMEInfo:
X-Mailer: YahooMailClassic/15.1.4 YahooMailWebService/0.8.135.514
Message-ID: <[email protected]>
Date: Sat, 2 Mar 2013 00:24:01 -0800 (PST)
From: WESTERN UNION MONEY TRANSFER <[email protected]>
Subject: att;Dear Customer,
To: <redacted>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-396438602-1810064757-1362212641=:32128"

---396438602-1810064757-1362212641=:32128
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable