Dr. Jim Victor [email protected]

Header Analysis Quick Report
Originating IP: 41.203.79.249
Originating ISP: Glomobile Benin Republic
City: n/a
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.202.73.207 with SMTP id w198csp925181oia;
Sun, 22 Mar 2015 16:51:22 -0700 (PDT)
X-Received: by 10.52.52.136 with SMTP id t8mr96390302vdo.49.1427068282257;
Sun, 22 Mar 2015 16:51:22 -0700 (PDT)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id yl7si9947235vdc.61.2015.03.22.16.50.45
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 22 Mar 2015 16:51:22 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) [email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-04 (webmail-04.datacenter.cha.cantv.net [200.11.153.87])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id t2MNodF1021734;
Sun, 22 Mar 2015 19:20:39 -0430
X-Matched-Lists: []
Received: from 41.203.79.249 ([41.203.79.249]) by webmail-04.mgmt.cantv.net (Cantv Webmail) with HTTP; Sun, 22 Mar 2015 19:22:31 -0430 (VET)
Date: Sun, 22 Mar 2015 19:22:31 -0430 (VET)
From: deopie <[email protected]>
Reply-To: [email protected]
To: <snipped>
Message-ID: <1462680825.653893.1427068351958.JavaMail.root@webmail-04.mgmt.cantv.net>
Subject: Attention My Dear
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.203.79.249]

Attention My Dear

I have registered your winning Price of $4.5USD with Fedex Express Company with registration code of ( DCJKT00617G). please Contact with your delivery information such as, Your Name, Your Address ID CARD COPY and Your Telephone Number:

Fedex Express Company Office:
Contact Person: Dr. Jim Victor:
E-mail: [email protected]
PHONE: NO+22968193843

I have paid for the Insurance & Delivery fee.The only fee you have to pay is their Security fee only.Please indicate the registration Number and ask Him how much is their Security fee so that you can pay it.

Best Regards,
Mr.Frank Williams.

Loan scam using the same email address
Mr. Paul Hart
[email protected]
+22968193843

Delivered-To: <snipped>
Received: by 10.112.143.231 with SMTP id sh7csp13178lbb;
Thu, 2 Apr 2015 03:45:56 -0700 (PDT)
X-Received: by 10.68.223.130 with SMTP id qu2mr87113434pbc.116.1427971555034;
Thu, 02 Apr 2015 03:45:55 -0700 (PDT)
Return-Path: <[email protected]>
Received: from COL004-OMC2S11.hotmail.com (col004-omc2s11.hotmail.com. [65.55.34.85])
by mx.google.com with ESMTPS id f6si6943161pdn.231.2015.04.02.03.45.54
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 02 Apr 2015 03:45:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.85 as permitted sender) client-ip=65.55.34.85;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.55.34.85 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from COL125-W45 ([65.55.34.71]) by COL004-OMC2S11.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
Thu, 2 Apr 2015 03:45:54 -0700
X-TMN: [qOmkxjLGDQRvivQ50fuyVBoUSitFq0a+]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_d05de074-7edd-43be-b4f0-67d88f828618_"
From: customer serviceo543 <[email protected]>
To: <<snipped>>
Subject: Hello,
Date: Thu, 2 Apr 2015 11:45:52 +0100
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 02 Apr 2015 10:45:54.0214 (UTC) FILETIME=[31A08460:01D06D32]

Hello,

I am Mr. Paul Hart a private loan lender and give loan at 3% interest rate, I offer loans to individuals and companies or groups of persons who are financially down.
It is an economic opportunity for your door step today and get a quick loan out there.
There are many financial opportunity and assistance Throughout the site and still can not take it. But it is a financial opportunity in the door step, and drought and can not miss this golden opportunity.

Service is provided to individuals, businesses, and men and business women. The loan amount available in a range of $ 1,000.00 is $ 500,000,000.00 or your choice. here are some questions: Are you in need of loan does not mean you want it pay bills are in financial trouble, you need financial solution?. Here is the solution to all your financial problems.
Give project loans, business, taxes, bills, and many other reasons, our loans are easy and * censored * For more information contact us by e-mail: [email protected]


Required Information FIRST
Full name .......... ..................................... .................

Personal phone number .............................................. . .......

Country .......... ....................................... ...............

Street Address: ......... ....................................... ...............

.......... ....................................... Been ...............

Age ....................................... .......... ...............

Sex ................................................. ........

Have you applied before? ........................................ .......... ..............

Marital Status .......... ...................................... ................

The loan amount necessary ................................... .......... . ..................

Duration of loans .................................... .......... . .................

Do you speak English? ......... .................................... ..... .............

Credit Purpose .......... ..................................... .................

Occupation ....................................... .......... ...............

Monthly income ................................................ ......


We will gladly wait for your quick reply,

best regards,

Mr. Paul Hart. Call me at +22968193843.

Another script from the email [email protected] but with the name of MRS.LINDA JOHNSON

Delivered-To: <snipped>
Received: by 10.112.143.231 with SMTP id sh7csp1800221lbb;
Sun, 5 Apr 2015 10:16:04 -0700 (PDT)
X-Received: by 10.107.164.209 with SMTP id d78mr16808580ioj.73.1428254163714;
Sun, 05 Apr 2015 10:16:03 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-ig0-x229.google.com (mail-ig0-x229.google.com. [2607:f8b0:4001:c05::229])
by mx.google.com with ESMTPS id l17si1558651igf.53.2015.04.05.10.16.02
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 05 Apr 2015 10:16:03 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::229 as permitted sender) client-ip=2607:f8b0:4001:c05::229;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::229 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-ig0-x229.google.com with SMTP id au2so7178269igc.0
for <<snipped>>; Sun, 05 Apr 2015 10:16:02 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.43.72.138 with SMTP id yo10mr15005726icb.69.1428254162763;
Sun, 05 Apr 2015 10:16:02 -0700 (PDT)
Received: by 10.107.153.137 with HTTP; Sun, 5 Apr 2015 10:16:02 -0700 (PDT)
Date: Sun, 5 Apr 2015 18:16:02 +0100
Message-ID: <CAO4=XX9qUV8S7918G6Wz-W+Nq4XBRaUwuRaskuCDCy_a5HHGXw@mail.gmail.com>
Subject: Attention,Attention,Attention.
From: delivery courier <[email protected]>
To: <<snipped>>
Content-Type: text/plain; charset=UTF-8

Attention,Attention,Attention.

How are you doing today, please there is something that bewildered
since morning which i do not understood what is going on,someone came
to my office this morring and his name is Mr.RAPHAEL JOHN, for his
statement,he said that he is your brother and you sent him to collect
your payment for you, he reeffirmed that you have heart attack last
week! and disable not to work,I suppose to call you but your phone
number is not with me.

Therefore i want to hear from you and verify whether you are the one
that sent him to collect your payment for you before we go to insurace
company and hand the payment over to him due to someone have to be
very careful to avoid mistake especially valuable money like this.
Please you should respond urgently to enable us to know whether you
are the one that sent him.

Information, Office is now giving you only 24hours to answer this
email because fail to hear from you within 24hours,it means that
Mr.RAPHAEL John is telling us the truth, and this office will hand
over your payment to (Mr.RAPHAEL JOHN) because you suppose to let us
know that you have heart attack since last week!

We Sorry to hear this BAD NEWS from your side but remember that
Mr.RAPHAEL John is ready to pay $6500 today but we told him to wait
first untill we hear from you because we need to verify if you are the
one who sent him collect your payment, ( you have 24hours only ) TO
ANSWER THIS MAIL BY SENDING THE $65.00 or you will loose the payment.


Receiver's Name: Anthony Emeka
Country: BENIN
City::::Cotonou
Text Question:Sky
Answer: Blue
Amount: $65.USD.USD
Sender's Name:::::
MTCN Number#:
Sender's address:

I will be looking forward to hear from you as soon as possible with
western union payment informations unless it is truth that you have
heart attack.

I am waiting for your response.

Thanks.
Yours in service,
MRS.LINDA JOHNSON