John Brown [email protected] +229-98524062

[Tim Atem]

Header Analysis Quick Report
Originating IP: 41.79.219.215
Originating ISP: Spacetel
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.37.203.13 with SMTP id b13csp774918ybg;
Fri, 4 Dec 2015 10:01:36 -0800 (PST)
X-Received: by 10.13.193.68 with SMTP id c65mr12140829ywd.17.1449252096177;
Fri, 04 Dec 2015 10:01:36 -0800 (PST)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id p63si8696716ywp.260.2015.12.04.10.01.22
(version=TLS1 cipher=AES128-SHA bits=128/128);
Fri, 04 Dec 2015 10:01:36 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) smtp.mailfrom=[email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id tB4I1HiD024778;
Fri, 4 Dec 2015 13:31:17 -0430
X-Matched-Lists: []
Received: from 41.79.219.215 ([41.79.219.215]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Fri, 4 Dec 2015 13:31:17 -0430 (VET)
Date: Fri, 4 Dec 2015 13:31:17 -0430 (VET)
From: "Mr.Emmanuel Eziamaka" <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <806844377.3857618.1449252077370.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
Subject: Attention:
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.79.219.215]

Attention:
I have registered your ATM CARD of US$3.5Mwith DHL Courier Company with registration code of(Shipment Code awb 33xzs).please Contact with delivery information such as,Your Name, Your Address and Your Telephone Number:
Shiping company Office: Note you are to pay $105.00 for delivery charge.
Name of Dir:Mr John Brown
E-mail: [email protected]
Tel:+22998524062
Best Regards,
Mr.Emmanuel Eziamaka

[Tim Atem]

Using the same email address and phone number:

Header Analysis Quick Report
Originating IP: 41.79.219.208
Originating ISP: Spacetel Benin Sa
City: n/a
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.37.1.195 with SMTP id 186csp1849672ybb;
Sat, 19 Dec 2015 16:36:33 -0800 (PST)
X-Received: by 10.31.12.77 with SMTP id 74mr6878831vkm.28.1450571793186;
Sat, 19 Dec 2015 16:36:33 -0800 (PST)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id 132si19297781vkg.183.2015.12.19.16.36.20
(version=TLS1 cipher=AES128-SHA bits=128/128);
Sat, 19 Dec 2015 16:36:33 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) smtp.mailfrom=[email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-02.datacenter.cha.cantv.net (webmail-02.datacenter.cha.cantv.net [200.11.153.85])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id tBK0aEuO026460;
Sat, 19 Dec 2015 20:06:14 -0430
X-Matched-Lists: []
Received: from 41.79.219.208 ([41.79.219.208]) by webmail-02.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Sat, 19 Dec 2015 20:06:14 -0430 (VET)
Date: Sat, 19 Dec 2015 20:06:14 -0430 (VET)
From: "Mr.Emmanuel Eziamaka" <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <1626828770.4660891.1450571774638.JavaMail.gess@webmail-02.datacenter.cha.cantv.net>
Subject: Your first payment of $5000.00.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.79.219.208]

Good day, I'm western union Agent Mr.DAVID MORRISON Your first payment of $5000.00 has been sent today via Western Union. You are advise to Contact WU with your full information to enable them give you Sender Name, Question and Answer, M.T.C.N to pick up your First Payment For more information contact Mr. DAVID MORRISON, ( [email protected] )Tell: +22998524062, he'll keep sending your payment until your total fund is Completed, send information such as,Your Name, Your Address and Your Telephone Number,Your country: Thank you for cooperation Best Regards, Mr.Emmanuel Eziamaka