Information on romance scams and scammers.
#217916 by Faizan Docherty Sat Sep 06, 2014 9:47 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 65.54.190.90
Originating ISP: Microsoft Hosting
City: Redmond
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.125.234 with SMTP id mt10csp81350pdb;
Sat, 6 Sep 2014 03:53:22 -0700 (PDT)
X-Received: by 10.68.201.138 with SMTP id ka10mr3567843pbc.23.1410000801738;
Sat, 06 Sep 2014 03:53:21 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (nov-007-i626.relay.mailchannels.net. [46.232.183.180])
by mx.google.com with ESMTP id rs11si7984413pab.201.2014.09.06.03.53.19
for <snipped>;
Sat, 06 Sep 2014 03:53:21 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 46.232.183.180 as permitted sender) client-ip=46.232.183.180;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 46.232.183.180 as permitted sender) [email protected]
X-Sender-Id: _forwarded-from|65.54.190.124
Received: from r8-chicago.webserversystems.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183])
by relay.mailchannels.net (Postfix) with ESMTPA id 53F8960A53
for <snipped>; Sat, 6 Sep 2014 10:53:14 +0000 (UTC)
X-Sender-Id: _forwarded-from|65.54.190.124
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.227.41.147])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.2.13);
Sat, 06 Sep 2014 10:53:16 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|65.54.190.124
X-MailChannels-Auth-Id: wwwh
X-MC-Ingress-Time: 1410000796366
Received: from bay004-omc2s15.hotmail.com ([65.54.190.90]:57810)
by r8-chicago.webserversystems.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1XQDcG-000AtB-8C
for <snipped>; Sat, 06 Sep 2014 05:53:13 -0500
Received: from BAY182-W65 ([65.54.190.124]) by BAY004-OMC2S15.hotmail.com with Microsoft SMTPSVC(7.5.7601.22724);
Sat, 6 Sep 2014 03:53:09 -0700
X-TMN: [oVu9gj4R+qcO+FzmASxmodkunyALsmev]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_445fd125-2491-4786-ace4-3923ade25b89_"
From: bina babiker <[email protected]>
Subject: hi
Date: Sat, 6 Sep 2014 10:53:09 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 06 Sep 2014 10:53:09.0389 (UTC) FILETIME=[BF16F3D0:01CFC9C0]
X-Spam-Status: No, score=2.6
X-Spam-Score: 26
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: HI dear Good day my dear.how do you do, you captured my heart,
i need you for serious busines relationship. I am a single pretty girl, not
married, i got your email through web site page when i was searching for
a trust worthy partner. i will also like to know about you. write me back
so that i will give you full explanation about myself and send my photo to
you for you to see me. I will come back soon for your reply. yours sincerely,
Miss bina [...]

Content analysis details: (2.6 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[65.54.190.90 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(binababiker1[at]hotmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
-1.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (binababiker1[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
1.0 MALFORMED_FREEMAIL Bad headers on message from free email service
X-Spam-Flag: NO
X-MC-Forward: <snipped>
X-AuthUser:


HI dear
Good day my dear.how do you do, you captured my heart,
i need you for serious busines relationship. I am a single
pretty girl, not married, i got your email through web
site page when i was searching for a trust worthy partner.
i will also like to know about you.
write me back so that i will give you full explanation
about myself and send my photo to you for you to see me.
I will come back soon for your reply.
yours sincerely,
Miss bina

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 29 guests