Mr.Partrick Devlin [email protected]

Received: by 10.213.104.141 with SMTP id p13cs36278ebo;
Mon, 22 Aug 2011 07:23:33 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.220.188.193 as permitted sender) client-ip=10.220.188.193;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.220.188.193 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.220.188.193])
by 10.220.188.193 with SMTP id db1mr79611vcb.190.1314023012868 (num_hops = 1);
Mon, 22 Aug 2011 07:23:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=H5PVP5chbUImXZ/WpnDRMAP5sBDLg
EQaCpiT1yhHWV8=;
b=C1A/zZ26dewL7fSl0BZ+0hLh6+8O40TkP
IfNVCcsB1UYvFQWeSz0jzeAfTIcnjm2qo
DvQSW2aXvdpK760VqDRmB+heC36FUt/hTx
En9Z/1T7hGIJXkqgg+6hsRM7snklzSzye9
QNNISD84+WU1QmNlNAc1MhsZRLGAzROOl
xP6g=
Bcc: [email protected]
MIME-Version: 1.0
Received: by 10.220.188.193 with SMTP id db1mr59652vcb.190.1314023006981; Mon,
22 Aug 2011 07:23:26 -0700 (PDT)
Received: by 10.220.191.195 with HTTP; Mon, 22 Aug 2011 07:23:26 -0700 (PDT)
Reply-To: [email protected]
Date: Mon, 22 Aug 2011 15:23:26 +0100
Message-ID: <CAHP4JnyPc_DkT=R1eOBh-S_bbTiyuc0cF9JxUG8PVsf5ULJ7Qw@mail.gmail.com>
Subject: We give out loans to any part of the world
From: "Mr.Partrick Devlin" <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=90e6ba53a64a8ed11f04ab18d288

--90e6ba53a64a8ed11f04ab18d288
Content-Type: text/plain; charset=ISO-8859-1

no IP found

from Mr.Partrick Devlin [email protected]
reply-to [email protected]
to
bcc [email protected]
date Mon, Aug 22, 2011 at 3:23 PM
subject We give out loans to any part of the world


We give out loans to any part of the world.we offer all kinds and types of
loans with a comfortable repayment scheme,Our Loan Interest rates is 3% per
annul with a negotiable duration, Irrespective of Location or credit status,
To get a Loan today Email: [email protected]
.Interested applicant are
to fill the borrower form below
BORROWERS INFORMATION*
*Full Name:......................*
*SEX.............................*
*AGE.............................*
*MARITAL STATUS..................*
*Contact Address:................*
*Country.........................*
*Phone:..........................*
*Amount Needed as Loan:..........*
*Loan Duration:..................*
*Annual Income:..................*
*Occupation:.....................*
*Collateral:.....................*
*Mode of repayment: monthly or yearly


Thanks as we await your swift response

Edited subject line -Jillian

And all the IP numbers beginning with 10 are in a private block.
A friend managed to squeeze the ip of 74.125.237.24 out of the header which shows Mountain View, but that may be gmails location. Also the IP number 255.255.255.255 came on the screen but that is a private block.

^^^ could it be a university or other educational facility?

A very good question a_a.
Have tried to study the header without success I'm afraid!
It appears 4 lines do not appear to be a valid e-mail header field and thus probably forged.
mail.mn is associated with Datacom out of a location Ulaanbaatar, wherever that is? mail.mn is a domain controlled by two domain name servers at magic.mn. And apparently has one IP number 202.131.4.9

Because it is a gmail address, the IP will point to gmail on the east coast or the west coast.