Mr. Richard Andre [email protected]

[Tim Atem]

Header Analysis Quick Report
Originating IP: 186.224.105.20
Originating ISP: Insidesign Tecnologia Ltda Epp
City: Ribeirão Prêto
Country of Origin: Brazil
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.86 with SMTP id t83csp848061ioe;
Sat, 27 Jun 2015 21:15:10 -0700 (PDT)
X-Received: by 10.140.238.15 with SMTP id j15mr12563926qhc.4.1435464909842;
Sat, 27 Jun 2015 21:15:09 -0700 (PDT)
Return-Path: <[email protected]>
Received: from whm02.insidesign.com.br (whm02.insidesign.com.br. [186.224.105.20])
by mx.google.com with ESMTPS id f141si3725285qhc.83.2015.06.27.21.15.08
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 27 Jun 2015 21:15:09 -0700 (PDT)
Received-SPF: neutral (google.com: 186.224.105.20 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=186.224.105.20;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 186.224.105.20 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mail=[email protected]
Received: from localhost ([::1]:57412 helo=webmail.cfsistemas.com.br)
by whm02.insidesign.com.br with esmtpa (Exim 4.85)
(envelope-from <[email protected]>)
id 1Z93zP-002SeJ-Bq; Sun, 28 Jun 2015 01:14:43 -0300
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Sun, 28 Jun 2015 01:14:43 -0300
From: [email protected]
To: undisclosed-recipients:;
Subject: My Dear Friend
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.0.5
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - whm02.insidesign.com.br
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - cfsistemas.com.br
X-Get-Message-Sender-Via: whm02.insidesign.com.br: authenticated_id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:

My Dear Friend,

As you read this, I don't want you to feel sorry for me, because, I
Believe Everyone will die someday. My name is Mr. Richard Andre I have
been diagnosed with O esophageal cancer.I want God to be merciful to me
and accept my soul so, I have decided to give alms to charity
organizations, as I want this to be one of the last good deeds I do on
earth. So far, I have distributed money to some charity organizations in
the Oman, Algeria and the Philippines After Typhoon . Now that my health
has deteriorated so badly, I cannot do this myself anymore.

I once asked members of my family to close one of my accounts and
distribute the money which I have there to charity organization in
Bulgaria and Pakistan, they refused and kept the money to
themselves.Hence, I do not trust them anymore, as they seem not to be
contended with what I have left for them. The last of my money which no
one knows of is the huge cash deposit of thirteen million united state
dollars 13,000,000 that I have in England from a contract i did with for
amex.

I don't know how much time i have got to live and i would like to
entrust my dying wish to you so you can help me make them true and to
make things fair you can control 30% of the funds which should be OK for
you and the rest for my last wish .

I need your kind respond to my email, [email protected]

Mr. Richard Andre

[Tim Atem]

Mr. Richard's attorney: [email protected]

Header Analysis Quick Report
Originating IP: 94.78.69.225
Originating ISP: Nethouse Bilgi Islem Merkezi Ltd
City: n/a
Country of Origin: Turkey
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.202.199.208 with SMTP id x199csp876568oif;
Wed, 1 Jul 2015 07:01:17 -0700 (PDT)
X-Received: by 10.140.104.110 with SMTP id z101mr33095923qge.76.1435759277086;
Wed, 01 Jul 2015 07:01:17 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.200])
by mx.google.com with ESMTPS id 87si2268409qkq.112.2015.07.01.07.01.16
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 01 Jul 2015 07:01:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 74.208.4.200 as permitted sender) client-ip=74.208.4.200;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 74.208.4.200 as permitted sender) smtp.mail=[email protected]
Received: from [94.78.69.225] by 3capp-mailcom-lxa14.server.lan (via HTTP);
Wed, 1 Jul 2015 16:01:15 +0200
MIME-Version: 1.0
Message-ID: <trinity-931b8aa6-c400-407b-bb2b-e7a523ae1c00-1435759275094@3capp-mailcom-lxa14>
From: "Marcus Greenwood" <[email protected]>
To: <snipped>
Subject: Letter from Barrister Greenwood Regarding Mr Richards Funds
Content-Type: text/html; charset=UTF-8
Date: Wed, 1 Jul 2015 16:01:15 +0200
Importance: normal
Sensitivity: Normal
X-Priority: 3
X-Provags-ID: <snipped>
X-UI-Out-Filterresults: <snipped>

Hello

I have been instructed by Mr Richard to help you in the process of making you his beneficiary to be able to get his fund deposited in the bank release and transfer to you, Also your information was forwarded to me by Mr Richard.

I will like you to give me a call to talk forward more on how the process will be and what is needed to be done to get the change of ownership certificate before applying for the release of the fund at the bank.

Presently I am in New York and I will be going to Istanbul Turkey tomorrow which is good because since Mr Richard fund is deposited in a bank in Europe it will be easy for me to do the process.

So here is my phone number for now or send me an email on the best time to call you.. 647-489-7756.

I wait for your phone call.

Barrister Greenwood.

[Tim Atem]

Header Analysis Quick Report
Originating IP: 94.78.69.225
Originating ISP: Nethouse Bilgi Islem Merkezi Ltd
City: n/a
Country of Origin: Turkey
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.202.199.78 with SMTP id x75csp1765360oif;
Tue, 14 Jul 2015 08:10:15 -0700 (PDT)
X-Received: by 10.107.34.65 with SMTP id i62mr18303071ioi.25.1436886614980;
Tue, 14 Jul 2015 08:10:14 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.201])
by mx.google.com with ESMTPS id sb10si8413793igb.13.2015.07.14.08.10.14
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 14 Jul 2015 08:10:14 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 74.208.4.201 as permitted sender) client-ip=74.208.4.201;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 74.208.4.201 as permitted sender) smtp.mail=[email protected]
Received: from [94.78.69.225] by 3capp-mailcom-lxa16.server.lan (via HTTP);
Tue, 14 Jul 2015 17:10:13 +0200
MIME-Version: 1.0
Message-ID: <trinity-c272d759-c254-4dc6-9c0c-339dcb65bc76-1436886613411@3capp-mailcom-lxa16>
From: "Marcus Greenwood" <[email protected]>
To: <<snipped>>
Subject: Re: Letter from Barrister Greenwood Regarding Mr Richards Funds
Content-Type: multipart/mixed;
boundary=knika-a05298a6-9af5-484a-9de5-d4a14037ada8
Date: Tue, 14 Jul 2015 17:10:13 +0200
Importance: normal
Sensitivity: Normal
In-Reply-To: <CABvzxd6uUh7RwKT3M7dmKh4PyXgOpFW-RLejW8TbwUxgLH56iA@mail.gmail.com>
References: <snipped>
X-UI-Message-Type: mail
X-Priority: 3
X-Provags-ID: <snipped>
X-UI-Out-Filterresults: <snipped>

Attach is the form for the change of ownership certificate we need please do fill the form and send back to me then I can apply for the change of ownership certificate then we can move to the next step in order to get the fund release and transferred to you.

I will wait for your email and if there is any question please do email me or give me a phone call.

Barrister Greenwood.