Mr. Richard [email protected] +229-99851458

[Tim Atem]

Header Analysis Quick Report
Originating IP: 41.85.176.46
Originating ISP: Opt Benin / Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.37.203.13 with SMTP id b13csp2317593ybg;
Tue, 1 Dec 2015 08:52:13 -0800 (PST)
X-Received: by 10.13.252.131 with SMTP id m125mr7696770ywf.104.1448988733658;
Tue, 01 Dec 2015 08:52:13 -0800 (PST)
Return-Path: <[email protected]>
Received: from 10ibl21ser04.datacenter.cha.cantv.net (10ibl21ser04.datacenter.cha.cantv.net. [200.11.173.10])
by mx.google.com with ESMTPS id q185si32341052ywc.420.2015.12.01.08.52.02
(version=TLS1 cipher=AES128-SHA bits=128/128);
Tue, 01 Dec 2015 08:52:13 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) client-ip=200.11.173.10;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) smtp.mailfrom=[email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id tB1GpsB7030124;
Tue, 1 Dec 2015 12:21:54 -0430
X-Matched-Lists: []
Received: from 41.85.176.46 ([41.85.176.46]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Tue, 1 Dec 2015 12:21:54 -0430 (VET)
Date: Tue, 1 Dec 2015 12:21:54 -0430 (VET)
From: mr tony moor <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <233437352.3667865.1448988714821.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
Subject: Attention
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.85.176.46]

Attention.

Good day, Please we need your current home address and telephone number to
enable us start sending your 2.5USD to you as we were instructed by IMF to be
sending you $8000.00 each day till the whole amount 2.5USD,Now we need your
full name....Home Address..
Telephone number....
Forward it to ([email protected])
Or call with this r telephone number +229-99851458

Thanks
Mr Richard

[Tim Atem]

Mr. Richard has a new email address [email protected] but is still using the same phone number +229-99851458 and script:

Header Analysis Quick Report
Originating IP: 41.86.238.28
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.37.203.13 with SMTP id b13csp2754305ybg;
Wed, 2 Dec 2015 00:42:30 -0800 (PST)
X-Received: by 10.129.81.147 with SMTP id f141mr1196009ywb.176.1449045750300;
Wed, 02 Dec 2015 00:42:30 -0800 (PST)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id r1si1250587ywf.141.2015.12.02.00.42.19
(version=TLS1 cipher=AES128-SHA bits=128/128);
Wed, 02 Dec 2015 00:42:30 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) smtp.mailfrom=[email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-03.datacenter.cha.cantv.net (webmail-03.datacenter.cha.cantv.net [200.11.153.86])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id tB28fiWf001461;
Wed, 2 Dec 2015 04:12:14 -0430
X-Matched-Lists: []
Received: from 41.86.238.28 ([41.86.238.28]) by webmail-03.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Wed, 2 Dec 2015 04:11:43 -0430 (VET)
Date: Wed, 2 Dec 2015 04:11:43 -0430 (VET)
From: mr tony moor <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <1452366585.1484755.1449045734136.JavaMail.gess@webmail-03.datacenter.cha.cantv.net>
Subject: Attention
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.86.238.28]

Attention.

Good day, Please we need your current home address and telephone number to
enable us start sending your 2.5USD to you as we were instructed by IMF to be
sending you $8000.00 each day till the whole amount 2.5USD,Now we need your
full name....Home Address..
Telephone number....
Forward it to ([email protected])
Or call with this r telephone number +229-99851458

Thanks
Mr Richard