Loan Scammer [email protected]

Header Analysis Quick Report
Originating IP: 204.75.127.139
Originating ISP: Robert Half International
City: Pleasanton
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.86 with SMTP id t83csp1939719ioe;
Mon, 29 Jun 2015 15:04:25 -0700 (PDT)
X-Received: by 10.55.31.164 with SMTP id n36mr36274112qkh.76.1435615465335;
Mon, 29 Jun 2015 15:04:25 -0700 (PDT)
Return-Path: <[email protected]>
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0062.outbound.protection.outlook.com. [65.55.169.62])
by mx.google.com with ESMTPS id j19si43027844qgd.102.2015.06.29.15.04.24
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Mon, 29 Jun 2015 15:04:25 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.169.62 as permitted sender) client-ip=65.55.169.62;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.55.169.62 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=hotmail.com
Received: from BN1PR0301MB0721.namprd03.prod.outlook.com (10.160.78.140) by
BN1PR0301MB0641.namprd03.prod.outlook.com (10.160.171.14) with Microsoft SMTP
Server (TLS) id 15.1.195.15; Mon, 29 Jun 2015 22:04:24 +0000
Received: from BN3PR0301CA0070.namprd03.prod.outlook.com (10.160.152.166) by
BN1PR0301MB0721.namprd03.prod.outlook.com (10.160.78.140) with Microsoft SMTP
Server (TLS) id 15.1.195.15; Mon, 29 Jun 2015 22:04:22 +0000
Received: from BY2FFO11FD001.protection.gbl (2a01:111:f400:7c0c::156) by
BN3PR0301CA0070.outlook.office365.com (2a01:111:e400:401e::38) with Microsoft
SMTP Server (TLS) id 15.1.201.16 via Frontend Transport; Mon, 29 Jun 2015
22:04:22 +0000
Authentication-Results: spf=softfail (sender IP is 204.75.127.139)
smtp.mailfrom=hotmail.com; gmail.com; dkim=none (message not signed)
header.d=none;
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
hotmail.com discourages use of 204.75.127.139 as permitted sender)
Received: from N1-1EXC-HUB02.na.msds.rhi.com (204.75.127.139) by
BY2FFO11FD001.mail.protection.outlook.com (10.1.14.123) with Microsoft SMTP
Server (TLS) id 15.1.201.10 via Frontend Transport; Mon, 29 Jun 2015 22:04:22
+0000
Received: from N1-1EXC-HUB01.na.msds.rhi.com (10.249.46.163) by
N1-1EXC-HUB02.na.msds.rhi.com (10.249.46.164) with Microsoft SMTP Server
(TLS) id 15.0.775.38; Mon, 29 Jun 2015 15:03:42 -0700
Received: from hqp-as-smtpnlb1.pcs.iservices.grove (10.246.225.11) by
N1-1EXC-HUB01.na.msds.rhi.com (10.249.46.163) with Microsoft SMTP Server id
15.0.775.38 via Frontend Transport; Mon, 29 Jun 2015 15:03:42 -0700
Received: from hqp-as-prdwfe02 ([10.255.13.40]) by
hqp-as-smtpnlb1.pcs.iservices.grove with Microsoft SMTPSVC(8.0.9200.16384);
Mon, 29 Jun 2015 15:02:38 -0700
MIME-Version: 1.0
From: <[email protected]>
To: <snipped>
Date: Mon, 29 Jun 2015 15:03:42 -0700
Subject: I thought you might be interested in this link
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 29 Jun 2015 22:02:38.0325 (UTC) FILETIME=[4FEA2A50:01D0B2B7]
X-EOPAttributedMessage: 0
X-Matching-Connectors: 130800890623866804;(8db7d377-ee93-4970-4d43-08d11e5e9430);()
X-Microsoft-Exchange-Diagnostics: <snipped>
X-Forefront-Antispam-Report: <snipped>
X-Microsoft-Exchange-Diagnostics: <snipped>
X-Microsoft-Antispam:
UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR0301MB0721;UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR0301MB0641;
X-Microsoft-Antispam-PRVS: <BN1PR0301MB0721AE0E77CE79B751F57D93A0AA0@BN1PR0301MB0721.namprd03.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(5005006)(3002001);SRVR:BN1PR0301MB0721;BCL:0;PCL:0;RULEID:(400006);SRVR:BN1PR0301MB0721;
X-Forefront-PRVS: 0622A98CD5
X-Microsoft-Exchange-Diagnostics: <snipped>
X-Microsoft-Exchange-Diagnostics: <snipped>
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jun 2015 22:04:22.1838
(UTC)
X-MS-Exchange-CrossTenant-Id: 5afe0b00-7697-4969-b663-5eab37d5f47e
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: <snipped>
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR0301MB0721
X-Microsoft-Exchange-Diagnostics:
<snipped>

Hello!

Hello Sir/Madam

Have you been denied of a loan by banks and other financial bodies? Then contact us now as we provide loans at a minimized interest rate of 3% within the shortest period, inorder to meet the financial request of our numerous applicants.To apply, send down the details below:

1. Name Of Applicant in Full:.......

2. Telephone Numbers:.......

3. Age:......................

4. Address and Location:.....

5. Amount in request........

6. Repayment Period:........

7. Purpose Of Loan...........


You will be contacted within 24 hours with the loan terms and conditions as soon as the details have been received. Send the details to us via email

the e-mail: [email protected]

Click here to read the article.

If you have trouble viewing the link, copy and paste the following link into your browser:

http://www.protiviti.com/_layouts/proti ... riend.aspx


For more information on Protiviti, visit www.protiviti.com.

Using the same email address [email protected]

Delivered-To: <snipped>
Received: by 10.107.143.18 with SMTP id r18csp606537iod;
Sun, 19 Jul 2015 00:13:21 -0700 (PDT)
X-Received: by 10.152.21.37 with SMTP id s5mr21520321lae.2.1437290001272;
Sun, 19 Jul 2015 00:13:21 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-la0-x243.google.com (mail-la0-x243.google.com. [2a00:1450:4010:c03::243])
by mx.google.com with ESMTPS id kj18si6784809lbb.126.2015.07.19.00.13.20
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 19 Jul 2015 00:13:21 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:4010:c03::243 as permitted sender) client-ip=2a00:1450:4010:c03::243;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c03::243 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-la0-x243.google.com with SMTP id m6so5966516lae.2
for <<snipped>>; Sun, 19 Jul 2015 00:13:20 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.112.13.166 with SMTP id i6mr22028294lbc.50.1437290000374;
Sun, 19 Jul 2015 00:13:20 -0700 (PDT)
Received: by 10.112.18.33 with HTTP; Sun, 19 Jul 2015 00:13:20 -0700 (PDT)
Reply-To: [email protected]
Date: Sun, 19 Jul 2015 00:13:20 -0700
Message-ID: <CAH+ORu4nMhcbHidEQTH6HBebV-gYyfFGWz=sbku7DYxFjLF1nw@mail.gmail.com>
Subject: RE
From: Dane Harley <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc: <snipped>

--

--
Hello,
This is Dane Harley Finance,a loan cooperate financial for real
estate and any type of business financing, We offer loans to
individuals, enterprises and other organizations to cooperate who need
financial assistant. or have you be denied of a loan from the bank?
Whether stocks down and need refinancing? Are you looking for
financial assistance? I offer loan at a maximum low rate of 3%, both
safe and unsecured, every interested applicant should contact us to
this Email: [email protected]

First necessary information needed,

Name:
Surname:
gender:
Country:
Age:
Occupation:
The purpose of the loan
phone Number
Loan amount required as
term loan
Monthly income / annual income:

Please: After you submit your information to us, you should always endeavor to
check your e-mail 2-3 times a day to read updates from us. Thank you and
we look forward to working with you!

regards,
Dane Harley