Loan Scammer [email protected]

This loan scam was sent in 4 different emails with different languages, all using the same from and reply-to emails. I've consolidated them into one post below.

Header Analysis Quick Report
Originating IP: 124.153.81.170
Originating ISP: Netmagic Datacenter Mumbai
City: Mumbai
Country of Origin: India
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.13.244.193 with SMTP id d184csp75704ywf;
Wed, 6 Jan 2016 13:50:16 -0800 (PST)
X-Received: by 10.202.227.136 with SMTP id a130mr62888456oih.8.1452117016892;
Wed, 06 Jan 2016 13:50:16 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.efensys.com ([103.241.147.209])
by mx.google.com with ESMTP id os5si9588415oeb.92.2016.01.06.13.50.15;
Wed, 06 Jan 2016 13:50:16 -0800 (PST)
Received-SPF: neutral (google.com: 103.241.147.209 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=103.241.147.209;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 103.241.147.209 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.efensys.com (Postfix) with ESMTP id 7589758ABB4;
Thu, 7 Jan 2016 03:17:10 +0530 (IST)
Received: from mail.efensys.com ([127.0.0.1])
by localhost (mail.efensys.com [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id cDxPrnNHEE01; Thu, 7 Jan 2016 03:17:09 +0530 (IST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.efensys.com (Postfix) with ESMTP id D226458ABE9;
Thu, 7 Jan 2016 03:17:08 +0530 (IST)
X-Virus-Scanned: amavisd-new at efensys.com
Received: from mail.efensys.com ([127.0.0.1])
by localhost (mail.efensys.com [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id 3EZZ1ymf56Tl; Thu, 7 Jan 2016 03:17:08 +0530 (IST)
Received: from mail.cms.co.in (unknown [124.153.81.170])
by mail.efensys.com (Postfix) with ESMTPSA id 7DBF558ABB4;
Thu, 7 Jan 2016 03:17:08 +0530 (IST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.cms.co.in (Postfix) with ESMTP id 5ECC580245447;
Thu, 7 Jan 2016 03:20:11 +0530 (IST)
Received: from mail.cms.co.in ([127.0.0.1])
by localhost (mail.cms.co.in [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id SWywAMI70YqV; Thu, 7 Jan 2016 03:20:10 +0530 (IST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.cms.co.in (Postfix) with ESMTP id B354C80214BF5;
Thu, 7 Jan 2016 03:20:10 +0530 (IST)
X-Virus-Scanned: amavisd-new at cms.co.in
Received: from mail.cms.co.in ([127.0.0.1])
by localhost (mail.cms.co.in [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id LxP0rsFOmlTS; Thu, 7 Jan 2016 03:20:10 +0530 (IST)
Received: from mail.cms.co.in (mail.cms.co.in [172.19.63.115])
by mail.cms.co.in (Postfix) with ESMTP id F044A80245447;
Thu, 7 Jan 2016 03:20:09 +0530 (IST)
Date: Thu, 7 Jan 2016 03:20:09 +0530 (IST)
From: Daniel Bowman <[email protected]>
Reply-To: Daniel Bowman <[email protected]>
Message-ID: <[email protected]>
Subject: loan
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [172.19.63.1]
X-Mailer: Zimbra 8.6.0_GA_1169 (zclient/8.6.0_GA_1169)
Thread-Topic: loan
Thread-Index: BniFfs4U/NZBAgUGYa+agilHAWjpeQ==

Have you been looking for financing options for your new home purchase, construction, real estate loan, refinance, debt consolidation, personal or business purpose? Welcome to the future! Financing made easy with us. Contact us as we offer our financial service at a low and affordable interest rate of 3% for long and short loan term.Interested applicant should contact us for further loan acquisition procedures at [email protected]


Ben je op zoek naar de financiering van opties voor uw nieuwe huis te kopen, bouw, vastgoed lening herfinancieren, consolidatie van schulden, persoonlijke of zakelijke doeleinden? Welkom in de toekomst! Financiering gemakkelijk gemaakt met ons. Neem contact met ons als we bieden onze financiële service tegen een lage en betaalbare rente van 3% voor de lange en korte leningen term.Interested aanvrager moet contact met ons op voor verdere lening overname procedures op [email protected]


¿Ha estado buscando opciones de financiamiento para su nueva compra de vivienda, construcción, préstamos de bienes raíces, refinanciar, consolidación de deudas, propósito personal o de negocios? ¡Bienvenido al futuro! Financiación fácil con nosotros. Póngase en contacto con nosotros, ya que ofrecemos nuestro servicio financiero a una tasa de interés baja y asequible de 3% para los préstamos a largo y corto solicitante term.Interested debe ponerse en contacto con nosotros para más procedimientos de adquisición de préstamo en [email protected]


Už ste hladali možnosti financovania pre svoj nový nákup domov, stavebníctvo, realitné úver, refinancovanie, konsolidácia dlhu, osobné alebo obchodné úcely? Vitajte v budúcnosti! Financovanie lahké s nami. Kontaktujte nás, ponúkame naše financné služby pri nízkej a cenovo úrokovou sadzbou vo výške 3% pre dlhé a krátke úveru term.Interested Žiadatel by mal kontaktujte nás pre dalšie akvizicné úver postupov na [email protected]