Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#267819 by Tim Atem Tue Sep 15, 2015 9:18 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.85.162.245
Originating ISP: Opt Benin / Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.107.130.220 with SMTP id m89csp1412871ioi;
Mon, 14 Sep 2015 14:35:52 -0700 (PDT)
X-Received: by 10.112.11.200 with SMTP id s8mr16765639lbb.44.1442266552831;
Mon, 14 Sep 2015 14:35:52 -0700 (PDT)
Return-Path: <[email protected]>
Received: from smok.lm.pl (smok.lm.pl. [83.242.127.230])
by mx.google.com with ESMTP id vv3si11070320lbb.102.2015.09.14.14.35.49;
Mon, 14 Sep 2015 14:35:52 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 83.242.127.230 as permitted sender) client-ip=83.242.127.230;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 83.242.127.230 as permitted sender) [email protected]
Received: from User (unknown [41.85.162.245])
by smok.lm.pl (Postfix) with ESMTP id 55E93191DD2;
Mon, 14 Sep 2015 23:35:27 +0200 (CEST)
Reply-To: <[email protected]>
From: "Mr. Philip Howard"<[email protected]>
Subject: CONTACT HIM TODAY FOR YOUR BANK CHECK!
Date: Mon, 14 Sep 2015 22:36:26 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;


Hello my good friend

Good day and how are you today? Hope all is well with you and your family? I am using this opportunity to inform you that this multi- million-dollar business has been concluded with the assistance of another partner from India who financed the transaction to a logical conclusion. Due to your effort sincerity courage and trust worthiness You showed during the course of the transaction.I have left a certified international bank check for you worth of $1,200 000.00 cashable anywherein the world.

Contact: Mr.Paul Berhard
Cotonou Benin Republic.
His email: [email protected]

Therefore you should send him your full Name and telephone number/your correct mailing address where you want him to send the bank check to you.
Thanks and God bless you and your family.

Hoping to hear from you.


Mr. Philip Howard

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

#268149 by Tim Atem Thu Sep 17, 2015 11:38 am
He's using the phone number +229-99769312

Delivered-To: <snipped>
Received: by 10.27.224.10 with SMTP id x10csp1238697wlg;
Tue, 15 Sep 2015 09:11:02 -0700 (PDT)
X-Received: by 10.107.168.230 with SMTP id e99mr30921507ioj.95.1442333462630;
Tue, 15 Sep 2015 09:11:02 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm46.bullet.mail.ne1.yahoo.com (nm46.bullet.mail.ne1.yahoo.com. [98.138.120.53])
by mx.google.com with ESMTPS id l4si12852912igk.65.2015.09.15.09.11.02
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 15 Sep 2015 09:11:02 -0700 (PDT)
Received-SPF: neutral (google.com: 98.138.120.53 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.138.120.53;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 98.138.120.53 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.de
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm46.bullet.mail.ne1.yahoo.com with NNFMP; 15 Sep 2015 16:11:01 -0000
Received: from [98.138.101.132] by nm46.bullet.mail.ne1.yahoo.com with NNFMP; 15 Sep 2015 16:08:04 -0000
Received: from [212.82.98.51] by tm20.bullet.mail.ne1.yahoo.com with NNFMP; 15 Sep 2015 16:08:04 -0000
Received: from [212.82.98.88] by tm4.bullet.mail.ir2.yahoo.com with NNFMP; 15 Sep 2015 16:08:03 -0000
Received: from [127.0.0.1] by omp1025.mail.ir2.yahoo.com with NNFMP; 15 Sep 2015 16:08:03 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 212.82.98.117; Tue, 15 Sep 2015 16:08:03 +0000
Date: Tue, 15 Sep 2015 16:08:03 +0000 (UTC)
From: "Paul A. Berhard" <[email protected]>
Reply-To: "Paul A. Berhard" <[email protected]>
To: <<snipped>>
Message-ID: <[email protected]>
Subject: Re: From Mr. Paul Berhard Forward your mailing address..
MIME-Version: 1.0


This is to acknowledge the receipt of your mail. Yes,I have the instruction to send to you your Bank check in my custody by your associate (Mr. Philip Howard). He instructs that as soon as you contact me, I should forward the Bank check to you through Courier Company.

Now that I have received your email contact, I expect you to forward either your house or office mailing address where you will like to receive your Bank check as this information will be used by the courier company during registration and mailing the Bank check to you.

As soon as I have the information requested,I will be at the courier company to confirm the modalities for registering and despatching of your Bank check.

I am waiting for the requested info.

Best regards,
Mr. Paul Berhard
+229-99-769-312

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: Google [Bot], Majestic-12 [Bot] and 260 guests