Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Wed Jan 14, 2015 4:02 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 212.82.98.123
Originating ISP: Yahoo! Europe
City: n/a
Country of Origin: United Kingdom
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.211.135 with SMTP id k129csp1623010lfg;
Wed, 14 Jan 2015 07:22:53 -0800 (PST)
X-Received: by 10.180.218.39 with SMTP id pd7mr9686929wic.21.1421248973215;
Wed, 14 Jan 2015 07:22:53 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm26-vm5.bullet.mail.ir2.yahoo.com (nm26-vm5.bullet.mail.ir2.yahoo.com. [212.82.97.47])
by mx.google.com with ESMTPS id om7si7691422wjc.100.2015.01.14.07.22.52
for <snipped>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Wed, 14 Jan 2015 07:22:53 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=212.82.97.47;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected];
dkim=fail [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
DKIM-Signature: <snipped>
Received: from [212.82.98.124] by nm26.bullet.mail.ir2.yahoo.com with NNFMP; 14 Jan 2015 15:22:49 -0000
Received: from [212.82.98.64] by tm17.bullet.mail.ir2.yahoo.com with NNFMP; 14 Jan 2015 15:22:49 -0000
Received: from [127.0.0.1] by omp1001.mail.ir2.yahoo.com with NNFMP; 14 Jan 2015 15:22:49 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 212.82.98.123; Wed, 14 Jan 2015 15:22:47 +0000
Date: Wed, 14 Jan 2015 15:22:46 +0000 (UTC)
From: Thembelani Thulas <[email protected]>
Reply-To: Thembelani Thulas <[email protected]>
Message-ID: <618238935.1060490.1421248966639.JavaMail.yahoo@jws11176.mail.ir2.yahoo.com>
In-Reply-To: <491825158.1100186.1421248933766.JavaMail.yahoo@jws11137.mail.ir2.yahoo.com>
References: <snipped>
Subject: ATTACHED FILE FROM MINISTER OF WORKS
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_1060489_546623072.1421248966639"
Content-Length: 10834


Nothing in the message body.

Contents of the attachment:

From Mr. Thembelani Thulas (Department of Public Works- Johannesburg, South Africa)
Private Email: [email protected]
Dear Sir / Madam,
BUSINESS DEAL PROPOSAL
My name is MR THEMBELANI THULAS; I am a senior government official in the
Department of Public works and housing of the Republic of South Africa and the
chairman of the board in charge of the contracts award execution and supervision of all
contracts in the Ministry of works and Housing. In 2007, I personally monitored and
supervised the awarded contracts for the supply of building materials and construction of
ultra modern shopping malls, low cost housing units, airports maintenance and Stadiums
for 2010 world cup preparations in the Eastern Cape, Western Cape, Natal and Gauteng
provinces here in South Africa.
My colleague and I are serving in the board deliberately inflated and over invoiced the
contract sum, leaving an excess of US$50, 000,000.00 (Fifty Million United States
dollars). At the completion of the contract, the real contract sum was paid to the original
contractors, leaving the excess, which we reported to the Government that it belonged to
the sub-contractor that handled part of the original contract. But the company we
submitted as the beneficiary was a non-existing foreign company, which was a purported
attempt by us to divert the money for our private use. I do not intend to mince words with
you, I have to tell you the truth; this is a deal but it is 100% risk-free and genuine
because the contract has been perfectly and genuinely executed and completed. It
depends on whether you are interested or not.
Right now this amount is due for payment and is floating in the treasury not attached to
anyone/company. We are only two people who know the origin of this fund. But we
cannot claim it by ourselves because we are civil servants therefore we are looking for a
trustworthy foreign company / individual whose name we can use to claim the money for
our mutual benefit.
This is strictly a business deal, but it is 100% risk-free and secure because we will use
our official positions to source all the necessary approvals, official documents and
certificates that will back up the fund to reflect that you/your company genuinely
executed and completed the contract. All necessary arrangements have been put in
place in all the relevant departments for immediate approval of this payment.
For your co-operation, we have agreed to offer you 25% of the entire amount on
conclusion of the transaction while 75% will be for us. Please if you are interested in this
proposal, I want you to respond immediately through my personal and telephone stated
above for further information and directives.
This transaction is expected to be completed within 14 working days and is highly
confidential and discreet.
Thank you for your co-operation. Your urgent reply is awaited.
Best Regards,
Mr. THEMBELANI THULAS
(Department of Public Works S A)

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 22 guests