by Zander
Mon Nov 16, 2015 3:33 pm
Fake loan scam with advanced payment. Operating with fake Google+ account, all under MarthaIngram Investments.
[*]Delivered-To: snip
Received: by 10.79.0.141 with SMTP id q13csp1738498ivf;
Sun, 15 Nov 2015 01:21:21 -0800 (PST)
X-Received: by 10.25.8.7 with SMTP id 7mr14273543lfi.52.1447579281034;
Sun, 15 Nov 2015 01:21:21 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-lf0-x233.google.com (mail-lf0-x233.google.com. [2a00:1450:4010:c07::233])
by mx.google.com with ESMTPS id b189si6211993lfe.92.2015.11.15.01.21.20
for <snip>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 15 Nov 2015 01:21:21 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:4010:c07::233 as permitted sender) client-ip=2a00:1450:4010:c07::233;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c07::233 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-lf0-x233.google.com with SMTP id 39so70594509lfs.3
for <snip>; Sun, 15 Nov 2015 01:21:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=mipeCAcVub1kTevLjCOtE0bsNqa8Pz081JirxPjiQTo=;[*]
[*]Delivered-To: snip
Received: by 10.79.0.141 with SMTP id q13csp1738498ivf;
Sun, 15 Nov 2015 01:21:21 -0800 (PST)
X-Received: by 10.25.8.7 with SMTP id 7mr14273543lfi.52.1447579281034;
Sun, 15 Nov 2015 01:21:21 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-lf0-x233.google.com (mail-lf0-x233.google.com. [2a00:1450:4010:c07::233])
by mx.google.com with ESMTPS id b189si6211993lfe.92.2015.11.15.01.21.20
for <snip>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 15 Nov 2015 01:21:21 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:4010:c07::233 as permitted sender) client-ip=2a00:1450:4010:c07::233;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c07::233 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-lf0-x233.google.com with SMTP id 39so70594509lfs.3
for <snip>; Sun, 15 Nov 2015 01:21:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=mipeCAcVub1kTevLjCOtE0bsNqa8Pz081JirxPjiQTo=;[*]