Andrew Bailey [email protected] [email protected]

[Tim Atem]

Header Analysis Quick Report
Originating IP: 104.224.18.56
Originating ISP: Roya Hosting Llc
City: n/a
Country of Origin: Guyana
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.83 with SMTP id t80csp3371313ioe;
Wed, 6 May 2015 18:14:24 -0700 (PDT)
X-Received: by 10.180.187.141 with SMTP id fs13mr609098wic.26.1430961263891;
Wed, 06 May 2015 18:14:23 -0700 (PDT)
Return-Path: <[email protected]>
Received: from smtp203.alice.it (smtp203.alice.it. [82.57.200.99])
by mx.google.com with ESMTP id k5si1307416wix.79.2015.05.06.18.14.23
for <<snipped>>;
Wed, 06 May 2015 18:14:23 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=82.57.200.99;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) smtp.mail=[email protected]
Message-ID: <[email protected]>
X-Google-Original-Message-ID: <[email protected]> (added by [email protected])
Received: from User (104.224.18.56) by smtp203.alice.it (8.6.060.43) (authenticated as claire_89)
id 54D62AA8094C8284; Thu, 7 May 2015 03:14:05 +0200
Reply-To: <[email protected]>
From: <[email protected]>
Subject: HI
Date: Thu, 7 May 2015 02:14:01 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081

My name is Andrew Bailey (http://www.bankofengland.co.uk.) I have 25Million Pounds proposal for you, email me at [email protected], your full name, phone number and address if interested.

[buried under 419s]

X-MSK: Off
X-MUNQ: 6672d6aa3ae64f79908dc05e0ccd0670
X-Spam-Flag: YES
X-Envelope-From: [email protected]
DKIM-Filter: OpenDKIM Filter v2.11.0 mail50c28.carrierzone.com v24F7ftr017789
Return-Path: <[email protected]>
Received: from correo.huv.gov.co (correo.huv.gov.co [190.6.160.84])
by mail50c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id v24F7ftr017789
for <>; Sat, 4 Mar 2017 10:07:43 -0500
Received: from localhost ([127.0.0.1] helo=huv.gov.co)
by correo.huv.gov.co with esmtp (Exim 4.71)
(envelope-from <[email protected]>)
id 1ckBAu-0006XM-68; Sat, 04 Mar 2017 10:00:48 -0500
Received: from 207.244.89.75 ([207.244.89.75]) by correo.huv.gov.co (Horde
Framework) with HTTP; Sat, 04 Mar 2017 10:00:46 -0500
Message-ID: <[email protected]>
X-Priority: 3 (Normal)
Date: Sat, 04 Mar 2017 10:00:46 -0500
From: info <[email protected]>
To: undisclosed-recipients:;
Subject: *****SPAM***** Hello your urgent response is needed!
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.7)
X-SA-Exim-Connect-IP: 127.0.0.1
X-SA-Exim-Mail-From: [email protected]
X-SA-Exim-Scanned: No (on correo.huv.gov.co); SAEximRunCond expanded to false
X-CTCH-Spam: Unknown
X-CTCH-VOD: Unknown
X-CTCH-RefID: str=0001.0A020205.58BAD83F.026C:SCFSTAT39974654,ss=1,re=-2.250,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
X-CSC: 100
X-CHA: v=2.2 cv=N9hZLy1B c=1 sm=1 tr=0 p=hzTzOKpFFS8Yyo3-yjUA:9
p=PPUjduclA6bREPAJPyOCybWTjV0=:19 p=HKLB2sQ---MA:10
a=HfJZ2XL9SQ2ALE0ZvtzgHw==:117 a=HfJZ2XL9SQ2ALE0ZvtzgHw==:17
a=8nJEP1OIZ-IA:10 a=MKtGQD3n3ToA:10 a=1oJP67jkp3AA:10 a=6Iz7jQTuP9IA:10
a=7oalJ22rzwMA:10 a=LmV7pkAbXYUA:10 a=ZZnuYtJkoWoA:10 a=BMxJXzqDAAAA:8
a=wPNLvfGTeEIA:10 a=OpNHp3OwFrHwDycm7tgz:22
X-WHL: LR



Hello, how are you doing? I want to inform you that, we have an inheritance of a deceased client with your surname. Reply via email:[email protected] with your full names for info. Contact Andrew Bailey

----------------------------------
Correo Corporativo Hospital Universitario del Valle E.S.E
*******************************************************************************

"Estamos re-dimensionandonos para crecer!"

******************************************************************************