United Nation [email protected]

Header Analysis Quick Report
Originating IP: 200.42.138.132
Originating ISP: Cablevision
City: Buenos Aires
Country of Origin: Argentina
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.170.83 with SMTP id t80csp834301ioe;
Thu, 16 Apr 2015 01:44:04 -0700 (PDT)
X-Received: by 10.229.26.74 with SMTP id d10mr38016774qcc.7.1429173844026;
Thu, 16 Apr 2015 01:44:04 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay7.ciudad.com.ar (relay7.ciudad.com.ar. [200.42.138.177])
by mx.google.com with ESMTP id o16si7627366qko.28.2015.04.16.01.44.01;
Thu, 16 Apr 2015 01:44:04 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 200.42.138.177 as permitted sender) client-ip=200.42.138.177;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.42.138.177 as permitted sender) [email protected];
dkim=fail [email protected];
dmarc=pass (p=QUARANTINE dis=NONE) header.from=ciudad.com.ar
Received: from localhost (unknown [200.42.138.132])
by relay7.ciudad.com.ar (Postfix) with ESMTP id 60F11228D17;
Thu, 16 Apr 2015 05:44:00 -0300 (ART)
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>
Received: from relay3.ciudad.com.ar ([10.4.0.19])
by localhost (zap5.int.cmd.com.ar [10.4.0.87]) (amavisd-new, port 10024)
with ESMTP id Lvaew8g_rGkI; Thu, 16 Apr 2015 05:43:59 -0300 (ART)
Received: by relay3.ciudad.com.ar (Postfix, from userid 509)
id D9F653FF44; Thu, 16 Apr 2015 05:43:59 -0300 (ART)
Received: from zsp8.int.cmd.com.ar (zsp8.int.cmd.com.ar [10.4.1.183])
by relay3.ciudad.com.ar (Postfix) with ESMTP id 2D0D83FF3A;
Thu, 16 Apr 2015 05:43:12 -0300 (ART)
Date: Thu, 16 Apr 2015 05:43:12 -0300 (ART)
From: United Nation <[email protected]>
Reply-To: [email protected]
Message-ID: <[email protected]>
Subject: *** SPAM *** notice
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [10.4.0.13]
X-Mailer: Zimbra 8.0.7_GA_6021 (ZimbraWebClient - GC41 (Win)/8.0.6_GA_5922)
Thread-Topic: notice
Thread-Index: 9cdgPutDjWIU+jyyeU4Rp8zuKOxy3g==
To: undisclosed-recipients

Be inform that your wining compensation sum of($3.500,000,00) has been converted into an ATM VISA CARD by United Nation for the year promo
award, contact Idris Monrrison via email ([email protected]) for more information, Regards Dr mike

[AlanJones]

From: idris monrrison - [email protected]
Tel. No.: +22998354367

Dear XXX

I write to inform you that your ATM CARD contain the sum of $3.500.000.00 United State Dollars has been Approved by IMF/WORLD BANK AUDITORS through their e-mails ballot Promotion with commonwealth poverty affiliation program, this is what we require from you to avoid wrong delivery of your package to your home address .Full Name,Your country,State,Sex,Your Home Address,Your age,Occupation,Phone Number and your ID/Passport. Note as soon as we receive the above listed information, we shall proceed to give you the contact of the"Courier Delivery Company" that will deliver your ATM CARD to your home address safely..

Thanks and remain bless
Idris Monrrison
Coordinator
Tel. +229 98354367

[AlanJones]

Bank account used by the scammer

Account Name, Elias Ahoueke
Bank Name , Bank Of Africa (BOA)
Bank Address , Cotonou-Benin Republic
Account No. 02309320006
Iban, Bj66 BJ0610101800230932000643
SWIFT NO. AFRIBJBJXXX