Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#219771 by Faizan Docherty Sat Sep 20, 2014 8:37 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP:
Originating ISP: Zipnet
City: n/a
Country of Origin: Ghana
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by with SMTP id cj10csp416802vcb;
Tue, 16 Sep 2014 08:03:21 -0700 (PDT)
X-Received: by with SMTP id et5mr44650570wjc.14.1410879801240;
Tue, 16 Sep 2014 08:03:21 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mtaout23.012.net.il (mtaout23.012.net.il. [])
by mx.google.com with ESMTP id bt6si3025754wib.101.2014.
for <multiple recipients>;
Tue, 16 Sep 2014 08:03:21 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates as permitted sender) client-ip=;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates as permitted sender) [email protected]
Received: from conversion-daemon.a-mtaout23.012.net.il by a-mtaout23.012.net.il (HyperSendmail v2007.08) id <[email protected]>; Tue, 16 Sep 2014 18:03:17 +0300 (IDT)
Received: from default.domain (i-mmp22 []) by a-mtaout23.012.net.il (HyperSendmail v2007.08) with ESMTP id <[email protected]>; Tue, 16 Sep 2014 18:03:16 +0300 (IDT)
Received: from [] (Forwarded-For: by a-mmp22.012.net.il (mshttpd); Tue, 16 Sep 2014 08:03:16 -0700
Date: Tue, 16 Sep 2014 08:03:16 -0700
From: "FROM DR. JAMES L. DONALD" <[email protected]>
Subject: Please i need your partnership.
To: [email protected]
Reply-to: [email protected]
Message-id: <[email protected]>
MIME-version: 1.0
X-Mailer: Oracle Communications Messenger Express 7u4-23.01( 64bit (built Aug 10 2011)
Content-type: multipart/mixed; boundary="Boundary_(ID_lweueMfVw993WfDUd8Ileg)"
Content-language: en
X-Accept-Language: en
Priority: normal
X-Brightmail-Tracker: AAAAAwABcYkgzJIWAAFf8A==
x-012-spamresult: spam

This is a multi-part message in MIME format.

Content-type: multipart/alternative;

Hello, greetings to you.
I hope this email finds you in good health. I am Dr. James L. Donald, a USA Surgeon Doctor an expert in Medicine, But I am presently in Ghana working under United States Army Africa Command (AFRICOM) I also was working as a US Military doctor at Camp Eagger's located at the capital of Afghanistan Kabul. On the 12th of April 2014 I was approached by a British Soldier, Warrant Officer Faulkner Spencer, who handed a box full of cash totaling $3.650 million US dollars to me and for safe keeping and begged me never to disclose this to anyone.Unfortunately,exactly two weeks later news reached me that he had an accident and died in an Helicopter crash in Takhta Pul District, Afghanistan. Kindly view the link below for confirmation.


I want to use this opportunity to seek for your assistance to help me repatriate this fund to your country for investment purposes because the fund is not safe here and I can no longer hold on to this fund since Officer Faulkner is no more and I am willing to compensate you with 30% of the total sum for your help while 10% will be used to cover any expenses that both of us involved during cost of delivery, after you have confirmed the fund in your position. Please i wait for your urgent response, as i have plans to move the cash through consignment delivery to you through the help of UN Delivery Agent.

Dr. James L. Donald

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: No registered users and 27 guests