DR ROBERT DEWAR [email protected]

Header Analysis Quick Report
Originating IP: 41.216.50.54
Originating ISP: Opt Benin / Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.83 with SMTP id t80csp991054ioe;
Thu, 23 Apr 2015 20:40:19 -0700 (PDT)
X-Received: by 10.66.141.171 with SMTP id rp11mr11056383pab.44.1429846818696;
Thu, 23 Apr 2015 20:40:18 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mbkd0225.ocn.ad.jp (mbkd0225.ocn.ad.jp. [153.149.233.26])
by mx.google.com with ESMTP id q9si15443690pds.196.2015.04.23.20.39.58;
Thu, 23 Apr 2015 20:40:18 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 153.149.233.26 as permitted sender) client-ip=153.149.233.26;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 153.149.233.26 as permitted sender) [email protected]
Received: from mf-smf-ucb010.ocn.ad.jp (mf-smf-ucb010.ocn.ad.jp [153.149.227.70])
by mbkd0225.ocn.ad.jp (Postfix) with ESMTP id 5F5A5583CDF;
Fri, 24 Apr 2015 12:39:57 +0900 (JST)
Received: from mv-osn-hcb010.ocn.ad.jp ([mv-osn-hcb010.ocn.ad.jp [122.1.235.84]]) by mf-smf-ucb010.ocn.ad.jp with RELAY id t3O3dqEh047413 ;
Fri, 24 Apr 2015 12:39:54 +0900
Received: from mzcstore302.ocn.ad.jp (mv-osn-hcb010.ocn.ad.jp [122.1.235.84])
by mv-osn-hcb010.ocn.ad.jp (Postfix) with ESMTP id 7978D6A0349;
Fri, 24 Apr 2015 12:39:51 +0900 (JST)
Date: Fri, 24 Apr 2015 12:39:51 +0900 (JST)
From: DR ROBERT DEWAR <[email protected]>
Reply-To: DR ROBERT DEWAR <[email protected]>
Message-ID: <[email protected]>
Subject: Attn My Dear
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [41.216.50.54]
To: undisclosed-recipients:;

Attn My Dear

We have finally arranged to deliver your package worth $10.5m USD
through (DHL) Company. We were able to accomplish this through the help
of IMF director Anderson Morgan and every necessary arrangement has
been made successfully .

Contact DR ROBERT DEWAR
Telephone: (+229-98176184)
Email: ([email protected])

Contact the (DHL) with your delivery information such as:

(1) Full names ---
(2) Phone line ---
(3) Country -----
(4) Age/sex ------
(5) Occupation:--
(6)Home address:--

And also be informed that delivery agent will leave to this country as
soon as you proceed with (DHL) Company.

Sincerely

Dr. ROBERT DEWAR

Same name/reply-to address: [email protected]

from: ATM CARD CARD <[email protected]>
reply-to: [email protected]
to:
bcc:
date: Sat, Jun 27, 2015 at 12:29 AM
subject: Attn My Dear

Delivered-To: <snipped>
Received: by 10.107.170.86 with SMTP id t83csp334520ioe;
Fri, 26 Jun 2015 22:29:42 -0700 (PDT)
X-Received: by 10.68.223.165 with SMTP id qv5mr10344647pbc.82.1435382982501;
Fri, 26 Jun 2015 22:29:42 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-pd0-x243.google.com (mail-pd0-x243.google.com. [2607:f8b0:400e:c02::243])
by mx.google.com with ESMTPS id ca15si53825679pdb.31.2015.06.26.22.29.42
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 26 Jun 2015 22:29:42 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:400e:c02::243 as permitted sender) client-ip=2607:f8b0:400e:c02::243;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:400e:c02::243 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-pd0-x243.google.com with SMTP id p10so11571364pdj.2
for <<snipped>>; Fri, 26 Jun 2015 22:29:42 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.67.2.98 with SMTP id bn2mr10327457pad.83.1435382981920; Fri,
26 Jun 2015 22:29:41 -0700 (PDT)
Received: by 10.66.253.4 with HTTP; Fri, 26 Jun 2015 22:29:41 -0700 (PDT)
Reply-To: [email protected]
Date: Fri, 26 Jun 2015 22:29:41 -0700
Message-ID: <CACE=VdmrvyXQH08RNFfqcPtDs5GhEDRsyUrM68r92cPOO7uNgA@mail.gmail.com>
Subject: Attn My Dear
From: ATM CARD CARD <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc: <snipped>

--

Attn My Dear
We have finally arranged to deliver your package worth $7.5m USD
through (DHL) Company. We were able to accomplish this through the help
of IMF director Anderson Morgan and every necessary arrangement has
been made successfully .

Contact Dr.Robert Dewar
Telephone: (+229-99939768)
Email: ([email protected])

Contact the (DHL) with your delivery information such as:

(1) Full names ---
(2) Phone line ---
(3) Country -----
(4) Age/sex ------
(5) Occupation:---
(6)Home address:--

And also be informed that delivery agent will leave to this country as
soon as you proceed with (DHL) Company.

Sincerely
Mr Dangote Don

Delivered-To: <snipped>
Received: by 10.112.26.75 with SMTP id j11csp767327lbg;
Mon, 29 Jun 2015 08:22:08 -0700 (PDT)
X-Received: by 10.180.218.227 with SMTP id pj3mr23360736wic.59.1435591327883;
Mon, 29 Jun 2015 08:22:07 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-wi0-x233.google.com (mail-wi0-x233.google.com. [2a00:1450:400c:c05::233])
by mx.google.com with ESMTPS id p4si12692210wif.91.2015.06.29.08.22.07
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 29 Jun 2015 08:22:07 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:400c:c05::233 as permitted sender) client-ip=2a00:1450:400c:c05::233;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:400c:c05::233 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-wi0-x233.google.com with SMTP id gi11so69762619wic.0
for <<snipped>>; Mon, 29 Jun 2015 08:22:07 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.194.77.179 with SMTP id t19mr31040757wjw.30.1435591327134;
Mon, 29 Jun 2015 08:22:07 -0700 (PDT)
Received: by 10.194.173.227 with HTTP; Mon, 29 Jun 2015 08:22:06 -0700 (PDT)
Reply-To: [email protected]
In-Reply-To: <CABOce3si7Tc28u2m+7PS6ptA-RWQ4hXhGddd2LJcG705kRrGmg@mail.gmail.com>
References: <CABOce3si7Tc28u2m+7PS6ptA-RWQ4hXhGddd2LJcG705kRrGmg@mail.gmail.com>
Date: Mon, 29 Jun 2015 16:22:06 +0100
Message-ID: <CAHvGy1gn1GPmK5cnw7QBz=wRQa0NiHBQqWwPcKt0eK=rueCtKg@mail.gmail.com>
Subject: Re: Attn My Dear
From: DR ROBERT DEWAR <[email protected]>
To: <<snipped>>
Content-Type: text/plain; charset=UTF-8

Attn;

Dear I got your email and the content is well understood, I am writing
in regard of your Compensation fund of $7.5milllion which has been
activated into an ATM card.

The only thing delaying your ATM card here is the clean bill
Certificate which this Certificate can only be obtains here the IMF
office and this clean bill certificate will only cost you $150.

So kindly copy this information below and send the fee to the IMF
office so that they can grant you this certificate to enable your ATM
card proceed immediately to your address India

Below is the information you will use to send the fee through Money
Gram or Western Union.

Receiver name; RAPHEAL IGWEZE
Country; Benin Republic
City; Cotonou
Amount;$150
Question; O
Answer; K
Senders Name;;
MTCN/ REF;;;;