Mr. John Walter [email protected]

Header Analysis Quick Report
Originating IP: 41.138.90.70
Originating ISP: Etisalat Benin
City: n/a
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.130.220 with SMTP id m89csp1346557ioi;
Mon, 28 Sep 2015 05:35:04 -0700 (PDT)
X-Received: by 10.31.52.214 with SMTP id b205mr12392077vka.122.1443443704168;
Mon, 28 Sep 2015 05:35:04 -0700 (PDT)
Return-Path: <[email protected]>
Received: from 10ibl21ser04.datacenter.cha.cantv.net (10ibl21ser04.datacenter.cha.cantv.net. [200.11.173.10])
by mx.google.com with ESMTPS id m80si8609133vkf.73.2015.09.28.05.34.51
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 28 Sep 2015 05:35:04 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) client-ip=200.11.173.10;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) [email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-01 (webmail-01.datacenter.cha.cantv.net [200.11.153.84])
(authenticated bits=0)
by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id t8SCYk3U022796;
Mon, 28 Sep 2015 08:04:46 -0430
X-Matched-Lists: []
Received: from 41.138.90.70 ([41.138.90.70]) by webmail-01.mgmt.cantv.net (Cantv Webmail) with HTTP; Mon, 28 Sep 2015 08:04:40 -0430 (VET)
Date: Mon, 28 Sep 2015 08:04:40 -0430 (VET)
From: "Mr.eric wood" <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <956501353.154853.1443443686544.JavaMail.nitido@webmail-01.mgmt.cantv.net>
Subject: Attention please!!!
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.138.90.70]

Attention please!!!
we the federal ministry of finance have registered your ATM CARD of
US $8.5 to dhl Express courier Company customer service with
registration code of (9665776)So Contact Mr. john Walter dhl
manager.E-mail: [email protected])with your full information:
remember to indicates the registration Number of (9665776) .the only
money you have to pay is their security keeping fee 100usd and is
Mandatory before you will receive your Atm card.
Regards

Mr.eric wood

They're using the phone number +229-98282636

Header Analysis Quick Report
Originating IP: 185.79.118.239
Originating ISP: Telecom-birzha, Llc
City: Birzha
Country of Origin: Russian Federation
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.61.9 with SMTP id l9csp1541536lbr;
Mon, 28 Sep 2015 14:07:21 -0700 (PDT)
X-Received: by 10.194.190.75 with SMTP id go11mr23353717wjc.80.1443474441515;
Mon, 28 Sep 2015 14:07:21 -0700 (PDT)
Return-Path: <[email protected]>
Received: from web22.pochta.ru (web22.pochta.ru. [185.79.118.202])
by mx.google.com with ESMTPS id n6si24899394wjq.53.2015.09.28.14.07.21
for <<snipped>>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 28 Sep 2015 14:07:21 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 185.79.118.202 as permitted sender) client-ip=185.79.118.202;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 185.79.118.202 as permitted sender) [email protected];
dkim=pass [email protected]
DKIM-Signature: <snipped>
Received: from [127.0.0.1] (port=48994 helo=localhost)
by web22.pochta.ru with esmtp id 1Zgfde-0004Oe-6w
for <snipped>; Tue, 29 Sep 2015 00:07:20 +0300
From: DHL EXPRESS DELIVERY COMPANY <[email protected]>
Sender: [email protected]
To: <<snipped>>
Subject: Re: Attention please!!!
Date: Tue, 29 Sep 2015 00:07:10 +0300
Message-Id: <[email protected]>
X-Priority: 3
X-QIP-Sender: 185.79.118.239
MIME-Version: 1.0

Your responds is noted regards to your registered Atm card of US$8.5Millions in this company, therefore advice to go ahead and send the official keeping Fee as you read which to enable the shipment be made to you soon as the US$100 is confirm as it's mandatory also being the Fee needed from you, and also advice to send the Fee through MONEY GRAM or RIA MONEY TRANSFER to the receivers details below,

Receivers Name: === KEN OKE
Country: == Benin republic
City: ==== Cotonou
Fee amount: = US$100 Only
Test question: == When
Test answer:= Today.

However i wait for your cooperation with Ria Money Transfer or MoneyGram payment receipt immediately you send the payment to enable us proceed right away.

Best regards,
Mr. John C. Walter
Telephone#: +229 9828 2636
Manager, DHL express delivery company.