Information on romance scams and scammers.
#217773 by Faizan Docherty Fri Sep 05, 2014 10:22 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 65.55.34.143
Originating ISP: Microsoft Hosting
City: Redmond
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.74.40 with SMTP id q8csp389209pdv;
Tue, 2 Sep 2014 22:07:33 -0700 (PDT)
X-Received: by 10.66.179.140 with SMTP id dg12mr17765946pac.76.1409720853330;
Tue, 02 Sep 2014 22:07:33 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (si-002-i156.relay.mailchannels.net. [108.178.49.168])
by mx.google.com with ESMTP id i13si9151628pdm.37.2014.09.02.22.07.32
for <snipped>;
Tue, 02 Sep 2014 22:07:33 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 108.178.49.168 as permitted sender) client-ip=108.178.49.168;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 108.178.49.168 as permitted sender) [email protected]
X-Sender-Id: _forwarded-from|65.55.34.136
Received: from r8-chicago.webserversystems.com (ip-10-33-12-218.us-west-2.compute.internal [10.33.12.218])
by relay.mailchannels.net (Postfix) with ESMTPA id CBA1B6014D
for <snipped>; Wed, 3 Sep 2014 05:07:31 +0000 (UTC)
X-Sender-Id: _forwarded-from|65.55.34.136
Received: from r8-chicago.webserversystems.com ([UNAVAILABLE]. [10.252.32.37])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.2.13);
Wed, 03 Sep 2014 05:07:32 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|65.55.34.136
X-MailChannels-Auth-Id: wwwh
X-MC-Ingress-Time: 1409720852023
Received: from col004-omc3s5.hotmail.com ([65.55.34.143]:57340)
by r8-chicago.webserversystems.com with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1XP2mz-0000Xu-05
for <snipped>; Wed, 03 Sep 2014 00:07:27 -0500
Received: from COL129-W29 ([65.55.34.136]) by COL004-OMC3S5.hotmail.com with Microsoft SMTPSVC(7.5.7601.22701);
Tue, 2 Sep 2014 22:07:24 -0700
X-TMN: [h5J61/sbQkUtfu7NOZvScLtRThKCUnZC]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_4f8ba641-f966-4ee8-b7aa-8d3472ed6bbb_"
From: blessing fama <[email protected]>
To: <snipped>
Subject: Hello
Date: Wed, 3 Sep 2014 05:07:23 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 03 Sep 2014 05:07:24.0391 (UTC) FILETIME=[F2DE3770:01CFC734]
X-Spam-Status: No, score=0.0
X-Spam-Score: 0
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: [email protected] Hello. My Name is blessing i came
across your profile today and i will like you to email me through my email
address ([email protected]) so that i will show you my picture and
further communication. [...]

Content analysis details: (0.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[65.55.34.143 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(blessingfama[at]hotmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
X-Spam-Flag: NO
X-MC-Forward: <snipped>
X-AuthUser:


[email protected]
Hello.
My Name is blessing i came across your profile today and i will like you to email me through my email address ([email protected]) so that i will show you my picture and further communication.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: No registered users and 98 guests