by Raven McNamara
Wed Oct 29, 2014 8:00 pm
Loan Lad 3% – Brazil
loan
From: Daniel Coker <[email protected]>
Prior communique received from him: <[email protected]>
loan
From: Daniel Coker <[email protected]>
Prior communique received from him: <[email protected]>
Header Analysis Quick Report
Originating IP: 201.44.167.30
Originating ISP: Brasileira De TelecomunicaÇÕes Sa-embratel
City: n/a
Country of Origin: Brazil
Loan application for a low interest rate of 3% apply within contact us
now at: [email protected] with the details below.
Full Name:.......Country:.......Phone Number:..........Loan
Amount:......Duration:......
Return-Path: [email protected]
Received: from reboucas2.curitiba.pr.gov.br ([201.44.167.30]) by mx-ha.gmx.net (mxgmxus001) with ESMTP (Nemesis) id 0MLNIa-1Xj4IT1HW6-000eXg for <snipped>; Sun, 26 Oct 2014 23:30:43 +0100
Received: from localhost (localhost [127.0.0.1]) by reboucas2.curitiba.pr.gov.br (Vertical IP Secure Mail) with ESMTP id 9E8191A5000D; Sun, 26 Oct 2014 20:30:40 -0200 (BRST)
X-VERTICAL-IP-Quarantine-ID: <whxF1Dii3Yyw>
X-VERTICAL-IP-SCANNED: Vertip Secure Mail
X-VERTICAL-IP-Spam-Score: 0
Received: from zimbra-mta2.curitiba.pr.gov.br (unknown [172.19.201.96]) by reboucas2.curitiba.pr.gov.br (Vertical IP Secure Mail) with ESMTP id 25DB2E6004B; Sun, 26 Oct 2014 20:30:40 -0200 (BRST)
Received: from localhost (localhost.localdomain [127.0.0.1]) by zimbra-mta2.curitiba.pr.gov.br (Postfix) with ESMTP id 9E3FF1BA8001; Sun, 26 Oct 2014 19:30:39 -0300 (BRT)
X-Virus-Scanned: amavisd-new at zimbra-mta2.curitiba.pr.gov.br
Received: from zimbra-mta2.curitiba.pr.gov.br ([127.0.0.1]) by localhost (zimbra-mta2.curitiba.pr.gov.br [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LL5zxt0dzkuf; Sun, 26 Oct 2014 19:30:39 -0300 (BRT)
Received: from emailportal3.curitiba.pr.gov.br (emailportal3.curitiba.pr.gov.br [172.19.200.4]) by zimbra-mta2.curitiba.pr.gov.br (Postfix) with ESMTP id A9AE81B98002; Sun, 26 Oct 2014 19:30:38 -0300 (BRT)
Date: Sun, 26 Oct 2014 20:30:38 -0200 (BRST)
From: Daniel Coker <[email protected]>
Reply-To: Daniel Coker <[email protected]>
Message-ID: <1538506898.6997371.1414362638658.JavaMail.root@smrh.curitiba.pr.gov.br>
Subject: loan
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_6997370_740920372.1414362638656"
X-Originating-IP: [172.31.10.40]
X-Mailer: Zimbra 7.2.1_GA_2790 (zclient/7.2.1_GA_2790)
To: undisclosed-recipients:;
<snipped>X-GMX-Antispam: 0 (Mail was not recognized as spam); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: notjunk:1;V01:K0:2uXqe7L6C/w=:iUX3gQzn4quJWA3EnY+52UdFPf 8yWVWE498l79oxGVYB0AuJanKc0d98RYwlYfwMcoeE0A5ZLMEne2XfjiaJCVYnCt/4c0HyIh8 f7btaiYJpiKFyhlyARPRPSxwmYXmHqAZgl+XleIv2OWyMw2SRnLHIjA41JfesldKKyXNb8HlP O9kKllw/db2JJyVhBbvQQC7p/EgjYMayqf+dsSJi+wqVMK8uTHrhXlIzHiVeRLmjHa+AIHmFU vyOuMNHV6cbFRU4jerr/rAJaH1+2xxrAEsH1AcPO/NsZczzQv8X6HRFDg3rW/vlvEVJcGBCjO Xyg8PAI70CmtMNuYWE5EYfJhefuZ8uaNGOqcTazTnvyiGLoKYkqYs8QCo+088XubWdrpz8wyY FOTfd8ly1UYUtIL7lH1LIHoroqbXEIaS9y/FU49GRgq/IXRJG2IjviZ7zW0c4l0Cv6G+6tzGV HjGCaC60BmxqxiDdRbTcQ1Zn9ElmAZDbiD45V64NgX5ien8JEUTL82Du1jBlaNh2FrGOvdofQ z+Tscu1JGw9pUj4r2qXZeKDY3+0seubUdtm2GY+jc0joqNn6S27VvP/6sV1jIRk2aT2DCSlYO qAVM8GB/LQ4UWQ9pI6tBlxZN1edm5ewbUfnYushEkG4IYsUguD6cFosbL9JsQ0nTxZt3GTuoJ 04Am/IeTDNxT8WN9/Trs6X1CC6DXWQYlH3gZP3jKsk9A7HEZpVbMvoICVCjJyxOBXrDl0KeMt lnhGdlqsTYGkdheZLR+rSlavz7wQMG5Mmhz8+7ByGBYaiXd6kTDjVailNpsU34YxMK/JyO+Kl yfvC94jI/xztJLTBCet4+x+s9LFjvYKN3M61Ns35WbXAnNlg9cBixGv4YDyYVQ3poj3hnYz76 /1UMv1T4GD8OW4w/ISXqYdvTjUSS4lfwKXZK+mG48fdySjBKSNENS3xBhb2R6Dls9YTKgPpQl LFHft5bnB1RkHjq/nh4NIJDiJztBnqrQqrZvbd5evA5hMP6SgDMdwVp+ijCVdoSSfO0Makn4f eYxwSywyiPUWxTCwZcqCyZJZ4vuZ5AK1xgawMq8ycNnQRxKNLtQIaCyDuz39YH49CvuWQC6Zs 0m99M9caHNcktyZcd4eCgJkhGCFvcffAOVwR/AtTpwCA4Fp4eHNEpNrgdbPAH318kOetIQWQH KiYZoMD9+NLTWGy3vbRkfHz4pnffIoDeWS370N50cTPmxkDD6Afy4DBFjCEvA7Iq1pybX2EaT 96QXdTuQ1wXb4UrhykCgAUbW8mVrw1qkGHbRk8fdJopv3i2D1vwbpppMQyuNYf3EOSXnCgESV 7zgPMhUZWddc78FW3o3lVlyCcL2pt45PYYEusY0s3Yfzfs1tefJX0DrZdRqrjbCnL14f/FsMz mDGU7l2aHHEqOFUTCuyxDScBnmUz1x/X3l+93JHuo5NmjhUVwaMCsmsbwesXe6Tos0fgXsLcv CfyEtDidt4yjFsP+k5TtXCISOwHuxfu7tfAAGuPcCSIE6vt4xqgxOAAKJzfDCpvYlXvvF4wH8 P0AMPMybeW7na1zU/S0w=
Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.