Information on romance scams and scammers.
by Tim Atem Thu Dec 17, 2015 1:09 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.83.211.57
Originating ISP: Sonatel
City: n/a
Country of Origin: Senegal
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.107.39.139 with SMTP id n133csp267518ion;
Tue, 8 Dec 2015 15:18:15 -0800 (PST)
X-Received: by 10.28.174.68 with SMTP id x65mr28451380wme.51.1449616695530;
Tue, 08 Dec 2015 15:18:15 -0800 (PST)
Return-Path: <[email protected]>
Received: from bettex.sk (static-dsl-63.87-197-99.telecom.sk. [87.197.99.63])
by mx.google.com with ESMTP id p64si8135303wmg.31.2015.12.08.15.18.14;
Tue, 08 Dec 2015 15:18:15 -0800 (PST)
Received-SPF: neutral (google.com: 87.197.99.63 is neither permitted nor denied by domain of [email protected]) client-ip=87.197.99.63;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 87.197.99.63 is neither permitted nor denied by domain of [email protected]) [email protected];
dmarc=fail (p=REJECT dis=NONE) header.from=yahoo.com
Received: from everest.lan ([41.83.211.57]) by bettex.sk with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 9 Dec 2015 00:17:59 +0100
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: My New Friend,
To: Lizzy <[email protected]>
From: <[email protected]>
Date: Tue, 08 Dec 2015 23:17:49 +0000
Reply-To: [email protected]
X-Antivirus: avast! (VPS 151208-4, 12/08/2015), Outbound message
X-Antivirus-Status: Clean
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 08 Dec 2015 23:18:00.0085 (UTC) FILETIME=[AE037C50:01D1320E]


Hi My New Friend,

How are you today i hope that every things is ok with you, my name is Elizabeth Moris it is my great pleasure to contact you through this media requesting for a relationship and i know that you will grant my request in good faith and understanding while we see what happened in future.

I will be very happy if you can write me through this email for me to send my picture and details about my self, you should remember that distance, color, language or race cannot be barriers. i will be waiting to hear from you

Your new friend,

Ms ,Lizzy Morre

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

by Tim Atem Mon Dec 21, 2015 12:00 pm
She's still at it.

Delivered-To: <snipped>
Received: by 10.107.39.139 with SMTP id n133csp111748ion;
Fri, 11 Dec 2015 04:42:30 -0800 (PST)
X-Received: by 10.67.6.38 with SMTP id cr6mr24498993pad.104.1449837750770;
Fri, 11 Dec 2015 04:42:30 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm41-vm6.bullet.mail.gq1.yahoo.com (nm41-vm6.bullet.mail.gq1.yahoo.com. [67.195.87.93])
by mx.google.com with ESMTPS id m79si1096857pfj.219.2015.12.11.04.42.29
for <<snipped>>
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 11 Dec 2015 04:42:30 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 67.195.87.93 as permitted sender) client-ip=67.195.87.93;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 67.195.87.93 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm41.bullet.mail.gq1.yahoo.com with NNFMP; 11 Dec 2015 12:42:25 -0000
Received: from [98.137.12.188] by nm41.bullet.mail.gq1.yahoo.com with NNFMP; 11 Dec 2015 12:39:35 -0000
Received: from [66.196.81.174] by tm9.bullet.mail.gq1.yahoo.com with NNFMP; 11 Dec 2015 12:39:35 -0000
Received: from [98.139.212.238] by tm20.bullet.mail.bf1.yahoo.com with NNFMP; 11 Dec 2015 12:39:35 -0000
Received: from [127.0.0.1] by omp1047.mail.bf1.yahoo.com with NNFMP; 11 Dec 2015 12:39:35 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 76.13.27.6; Fri, 11 Dec 2015 12:39:34 +0000
Date: Fri, 11 Dec 2015 12:39:34 +0000 (UTC)
From: Lizzy Moris <[email protected]>
Reply-To: Lizzy Moris <[email protected]>
Message-ID: <[email protected]>
Subject: Hello Friend


Hi My New Friend,
How are you today i hope that every things is okay with you, my name is Lizzy it is my great pleasure to contact you through this media requesting for a relationship and i know that you will grant my request in good faith and understanding while we see what happened in future. I will be very happy if you can write me through this email for me to send my picture and details about my self, you should remember that distance, color, language or race cannot be barriers. i will be waiting to hear from you
Your new friend,
Lizzy

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
by Tim Atem Sat Jan 09, 2016 9:10 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.83.199.176
Originating ISP: Sonatel
City: Dakar
Country of Origin: Senegal
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.107.39.74 with SMTP id n71csp466102ion;
Thu, 7 Jan 2016 01:59:27 -0800 (PST)
X-Received: by 10.140.32.203 with SMTP id h69mr9708642qgh.55.1452160767603;
Thu, 07 Jan 2016 01:59:27 -0800 (PST)
Return-Path: <[email protected]>
Received: from zephia-smtp2.dattaweb.com (zephia-smtp2.dattaweb.com. [200.58.104.21])
by mx.google.com with ESMTPS id 80si54094996qhx.66.2016.01.07.01.59.27
(version=TLS1 cipher=AES128-SHA bits=128/128);
Thu, 07 Jan 2016 01:59:27 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 200.58.104.21 as permitted sender) client-ip=200.58.104.21;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 200.58.104.21 as permitted sender) [email protected]
Message-Id: <[email protected]>
Received: from [41.83.199.176]
by optimus.zephia.com.ar with esmtpa (Exim 4.77)
(envelope-from <[email protected]>)
id 1aH7Lo-0001tU-PL; Thu, 07 Jan 2016 06:59:25 -0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: hello my dear
To: Lizzy <[email protected]>
From: <[email protected]>
Date: Thu, 07 Jan 2016 09:58:58 +0000
Reply-To: [email protected]
X-Antivirus: avast! (VPS 160106-1, 01/06/2016), Outbound message
X-Antivirus-Status: Clean
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - optimus.zephia.com.ar
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [502 502] / [502 502]
X-AntiAbuse: Sender Address Domain - hotmail.fr


hello my dear
how are you doing?, i am Lizzy by name a girl,
i came across your profile and i will like to
have a good friendship with you,
here is my email [email protected]
contact me for us to know more and send my
photo to you.

lizzy

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
by malu53 Sat Jan 09, 2016 1:26 pm
http:/ /directory.zo18.com/detail/teegee-trading.html
TEEGEE TRADING , IMPORT & EXPORT CONSULTANTS
Address: Dakar ,
City: OTHER THAN INDIA
Pin Code: 0
Contact No: 6884592
Email ID: [email protected]
Short Description: Category: IMPORT & EXPORT CONSULTANTS

contact number: 00221 - 6884592
contact Person: Mr. Usman Diallo
by malu53 Sat Jan 09, 2016 1:28 pm
scammer used this pic on tagged, profile deleted

Image

find the scammer also documented on scamsurvivors

Who is online

Users browsing this forum: ClaudeBot and 13 guests