Information on romance scams and scammers.
#224229 by Faizan Docherty Wed Oct 22, 2014 3:42 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 209.85.223.194
Originating ISP: Google
City: Farmington
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.125.234 with SMTP id mt10csp39031pdb;
Wed, 22 Oct 2014 01:01:02 -0700 (PDT)
X-Received: by 10.66.121.103 with SMTP id lj7mr41110202pab.84.1413964861898;
Wed, 22 Oct 2014 01:01:01 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (si-002-i152.relay.mailchannels.net. [108.178.49.164])
by mx.google.com with ESMTP id v11si1859511pas.219.2014.10.22.01.01.00
for <snipped>;
Wed, 22 Oct 2014 01:01:01 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 108.178.49.164 as permitted sender) client-ip=108.178.49.164;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 108.178.49.164 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
X-Sender-Id: _forwarded-from|209.85.223.194
Received: from r8-chicago.webserversystems.com (ip-10-213-14-133.us-west-2.compute.internal [10.213.14.133])
by relay.mailchannels.net (Postfix) with ESMTPA id 04F47278D7F
for <snipped>; Wed, 22 Oct 2014 08:00:59 +0000 (UTC)
X-Sender-Id: _forwarded-from|209.85.223.194
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.252.6.112])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.3.1);
Wed, 22 Oct 2014 08:01:00 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|209.85.223.194
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1413964860238:870285048
X-MC-Ingress-Time: 1413964860238
Received: from mail-ie0-f194.google.com ([209.85.223.194]:61487)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1Xgqqo-00022r-8z
for <snipped>; Wed, 22 Oct 2014 03:00:59 -0500
Received: by mail-ie0-f194.google.com with SMTP id tr6so217638ieb.1
for <snipped>; Wed, 22 Oct 2014 01:00:57 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.50.142.104 with SMTP id rv8mr3571477igb.23.1413964857379;
Wed, 22 Oct 2014 01:00:57 -0700 (PDT)
Received: by 10.64.109.99 with HTTP; Wed, 22 Oct 2014 01:00:57 -0700 (PDT)
Date: Wed, 22 Oct 2014 08:00:57 +0000
Message-ID: <CAO7Oe5wsXp9Hf14Po_gL+reGE3_gZZB7ho5zBNtoJp03DOwqqw@mail.gmail.com>
Subject: hello
From: mary 400love <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=001a11c3db000c93e80505fe591b
X-Spam-Status: No, score=-0.8
X-Spam-Score: -7
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: [email protected] My name is mary, I am a young beautiful
girl with full of love,caring and romantic. I was impress when i saw your
profile in( )and i love it, i think we can click together. I will like you
to reply me through this my email address [email protected] and i will
show you my picture then you will know more about me. please contact me direct
to my email address [email protected] so that i will have enough space
to attach my picture and send it to you from there you will know more about
me. Age,distance and language does not matter but love matters in life. Waiting
for your reply to my email address soon. mary. [...]

Content analysis details: (-0.8 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mary400love[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.223.194 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
X-Spam-Flag: NO
X-MC-Forward: <snipped>
X-AuthUser:


[email protected]

My name is mary,
I am a young beautiful girl with full of love,caring and romantic. I was impress when i saw your profile in( )and i love it, i think we can click together. I will like you to reply me through this my email address [email protected] and i will show you my picture then you will know more about me. please contact me direct to my email address [email protected] so that i will have enough space to attach my picture and send it to you from there you will know more about me. Age,distance and language does not matter but love matters in life.
Waiting for your reply to my email address soon.

mary.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: No registered users and 218 guests