Ocha Mijad [email protected] +229 68554244

Header Analysis Quick Report
Originating IP: 202.144.147.206
Originating ISP: Druknet Isp
City: Thimphu
Country of Origin: Bhutan
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.27.175.80 with SMTP id y77csp16882wle;
Fri, 26 Jun 2015 06:04:00 -0700 (PDT)
X-Received: by 10.50.64.244 with SMTP id r20mr3086786igs.33.1435323839786;
Fri, 26 Jun 2015 06:03:59 -0700 (PDT)
Return-Path: <[email protected]>
Received: from proxy.bsb.gov.bt (host206.bajothangschool.druknet.bt. [202.144.147.206])
by mx.google.com with ESMTPS id cy5si1439117igc.53.2015.06.26.06.03.45
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Fri, 26 Jun 2015 06:03:59 -0700 (PDT)
Received-SPF: neutral (google.com: 202.144.147.206 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=202.144.147.206;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 202.144.147.206 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=yahoo.pt
Received: from 202.144.147.206 (localhost.localdomain [127.0.0.1])
by proxy.bsb.gov.bt (8.13.8/8.13. with ESMTP id t5QD6Hgd012601;
Fri, 26 Jun 2015 19:06:34 +0600
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Fri, 26 Jun 2015 17:06:06 +0400
From: Mr Peter Kom <[email protected]>
To: undisclosed-recipients:;
Subject: [SPAM] GOOD NEWS
Reply-To: <[email protected]>
Mail-Reply-To: <[email protected]>
Message-ID: <1a431fefe9dea8c277e9ec9c516f098e@localhost>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.7.2
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (proxy.bsb.gov.bt [127.0.0.1]); Fri, 26 Jun 2015 19:06:34 +0600 (BTT)
X-Spam-Flag: YES
X-Spam-Status: Yes, score=10.1 required=5.0 tests=ADVANCE_FEE_2,ALL_TRUSTED,
BAYES_99,DNS_FROM_AHBL_RHSBL,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,
TVD_RCVD_IP,TVD_RCVD_IP4,T_HK_NAME_FM_MR_MRS,T_LOTS_OF_MONEY,
T_TO_NO_BRKTS_FREEMAIL autolearn=no version=3.3.1
X-Spam-Report:
* -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
* 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
* [score: 1.0000]
* 2.7 DNS_FROM_AHBL_RHSBL RBL: Envelope sender listed in dnsbl.ahbl.org
* 1.6 TVD_RCVD_IP4 TVD_RCVD_IP4
* 0.7 TVD_RCVD_IP TVD_RCVD_IP
* 0.0 FREEMAIL_FROM Sender email is freemail (peterkom285[at]yahoo.pt)
* 1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
* digit (peterkom285[at]yahoo.pt)
* 1.1 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
* 0.0 T_LOTS_OF_MONEY Huge... sums of money
* 0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
* 0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Level: **********
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on proxy.bsb.gov.bt

--
Dearest Friend,

Compliments of the season and God's blessings from Barrister Mr Peter Kom.
I am the Barrister who contacted you long ago, I am very happy to inform
you about my success in getting that fund transferred, Now I want you to
contact my secretary on the information below:

NAME : MR Ocha Mijad
EMAIL : [email protected]
PHONE : +229 6855 4244.

Call him immediately with His above direct phone.Ask him to send you the
total sum of (800,000.00) Eight Hundred and Thousand usd Cashier's Cheque,
which I kept for your compensation contact my secretary on this
Email:[email protected]

Yours faithfully.



Mr Peter Kom

New email address [email protected]
Same phone number/name

Header Analysis Quick Report
Originating IP: 41.86.234.165
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.27.175.80 with SMTP id y77csp631506wle;
Sat, 4 Jul 2015 13:18:01 -0700 (PDT)
X-Received: by 10.66.192.1 with SMTP id hc1mr89486978pac.38.1436041080503;
Sat, 04 Jul 2015 13:18:00 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.hoatech.com.tw (hoatech.com.tw. [61.219.65.1])
by mx.google.com with ESMTP id ox1si20982301pdb.28.2015.07.04.13.17.58;
Sat, 04 Jul 2015 13:18:00 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 61.219.65.1 as permitted sender) client-ip=61.219.65.1;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 61.219.65.1 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=qq.com
Received: from mail2.hoatech.com.tw (localhost [127.0.0.1])
by mail.hoatech.com.tw (Postfix) with ESMTP id 02F8C1237E9;
Sun, 5 Jul 2015 04:17:58 +0800 (CST)
From: "Mr Peter Kom" <[email protected]>
Subject: GOOD NEWS
Date: Sun, 5 Jul 2015 04:17:58 +0800
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 41.86.234.165 (aaron)
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-1
To: undisclosed-recipients:;

Dearest Friend,

Compliments of the season and God's blessings from Barrister Mr Peter Kom. I am the
Barrister who contacted you long ago, I am very happy to inform you about my success in
getting that fund transferred, Now I want you to contact my secretary on the information
below:

NAME : MR Ocha Mijad
EMAIL : [email protected]
PHONE : +229 6855 4244.

Call him immediately with His above direct phone.Ask him to send you the total sum of
(800,000.00) Eight Hundred and Thousand usd Cashier's Cheque, which I kept for your
compensation contact my secretary on this Email:[email protected]

Yours faithfully.

Mr Peter Kom

Using the same email address [email protected] and phone number +229-68554244

Header Analysis Quick Report
Originating IP: 41.86.234.165
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.27.175.95 with SMTP id y92csp1871802wle;
Tue, 21 Jul 2015 09:30:46 -0700 (PDT)
X-Received: by 10.50.30.105 with SMTP id r9mr25573942igh.11.1437496245579;
Tue, 21 Jul 2015 09:30:45 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.hoatech.com.tw (hoatech.com.tw. [61.219.65.1])
by mx.google.com with ESMTP id t84si9729853ioe.46.2015.07.21.09.30.34;
Tue, 21 Jul 2015 09:30:45 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 61.219.65.1 as permitted sender) client-ip=61.219.65.1;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 61.219.65.1 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=qq.com
Received: from mail2.hoatech.com.tw (localhost [127.0.0.1])
by mail.hoatech.com.tw (Postfix) with ESMTP id A5FBB123CE4;
Tue, 21 Jul 2015 22:50:32 +0800 (CST)
From: "MRS JANE MOORE" <[email protected]>
Reply-To: [email protected]
Subject: GOOD NEWS
Date: Tue, 21 Jul 2015 16:50:32 +0200
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 41.86.234.165 (aaron)
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-1
To: undisclosed-recipients:;

Attention please!!!

I have registered your ATM CARD of $2.5Million with Dhl Express Benin Republic
with registration code of (Shipment Code awb 33xzs)Please Contact them with your
delivery information such as, Your Name, Your Address ID CARD COPY and Your
Telephone Number:

Dhl Office:
Contact Mr.Harry Bello
Tel: (+229-6855 4244)
Email:([email protected])

I have paid for the Delivery fee. The only fee you have to pay is their Security
fee only. Please indicate the registration Number and ask them how much their
Security fee is so that you can pay it.

Best Regards,
MRS JANE MOORE

Using the same email address [email protected] and same phone number +229-68554244

Delivered-To: <snipped>
Received: by 10.27.220.9 with SMTP id t9csp29626wlg;
Thu, 27 Aug 2015 17:23:50 -0700 (PDT)
X-Received: by 10.107.10.214 with SMTP id 83mr11877506iok.120.1440721430241;
Thu, 27 Aug 2015 17:23:50 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-ig0-x243.google.com (mail-ig0-x243.google.com. [2607:f8b0:4001:c05::243])
by mx.google.com with ESMTPS id x6si608428igl.33.2015.08.27.17.23.49
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 27 Aug 2015 17:23:50 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::243 as permitted sender) client-ip=2607:f8b0:4001:c05::243;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::243 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-ig0-x243.google.com with SMTP id we12so654731igc.3
for <<snipped>>; Thu, 27 Aug 2015 17:23:49 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.50.32.34 with SMTP id f2mr1166372igi.44.1440721429785; Thu,
27 Aug 2015 17:23:49 -0700 (PDT)
Received: by 10.36.20.11 with HTTP; Thu, 27 Aug 2015 17:23:49 -0700 (PDT)
Reply-To: [email protected]
Date: Fri, 28 Aug 2015 01:23:49 +0100
Message-ID: <CADPJQ3iD0tjrqB6cgP45bASU08CxHwCGbFD=QWL-UE_ddrKe6w@mail.gmail.com>
Subject: GOOD NEWS
From: "Mrs. Mary Judith" <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc: <snipped>

Attention please!!!

I have registered your ATM CARD of $2.5Million with Dhl Express Benin
Republic with registration code of (Shipment Code awb 33xzs)Please
Contact them with your delivery information such as, Your Name, Your
Address ID CARD COPY and Your Telephone Number:

Dhl Office:
Contact Mr.Harry Bello
Tel: (+229-6855 4244)
Email:([email protected])

I have paid for the Delivery fee. The only fee you have to pay is
their Security fee only. Please indicate the registration Number and
ask them how much their Security fee is so that you can pay it.

Best Regards,
Mrs. Mary Judith