Information on romance scams and scammers.
by nailgirl Sun Nov 27, 2011 1:14 pm
OK HERE IS THE HEADER. I TRACED THE EMAIL TO SUNNYVALE, CALIFORNIA. HE DOES SAY HE IS FROM CALIFORNIA. LET ME KNOW WHAT YOU FIND.
HE IS SUPPOSED TO BE IN AFGANISTAN.
From Darren Fischer Mon Nov 21 11:40:05 2011
X-Apparently-To: via 67.195.15.101; Mon, 21 Nov 2011 03:40:07 -0800
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
ZT8gSSBob3BlIGV2ZXJ5dGhpbmcgaXMgZ29pbmcgd2VsbCB3aXRoIHlvdSB0
aGVyZS4gWW91IGFsd2F5cyBtYWtlIG1lIHdhbm5hIGNvbWUgaG9tZSwgeW91
IG1ha2UgbWUgeWVhcm4gc28gbXVjaCB0byBiZSBpbiB5b3VyIGFybXMuIFlv
dSBtYWtlIG1lIGZlZWwgbGlrZSB0aGUgbW9zdCBoYXBwaWVzdCBwZXJzb24g
b24gdGhpcyBlYXJ0aCB3aGVuZXZlciAgaSBnZXQgdG8gcmVhZAEwAQEBAQ--
X-YMailISG: NISx2HYWLDujXfeGEx.SVu3lvsJNoUA6m1.5YnhHqDgra5NU
b8ZaPhcB8pr1Ia1mtzYPS9y1BuHQjYsjp8qteq0os54PvX9FUDM_aBqkdiD4
0K8VtquDmn0EUOkzgLFWgXUz3jzwWHO_7pNgO8zIqLx6HHcgDezGm6Aj4yz0
xnFiLEfGAkAhn8AeYj.QT1eJJKL8tf0nJx6kt5Kxx_x6osSR_keSlFLwpl_o
6d3eMrQT_s.AYjWYQFhHt7Edfd2UHDdKY7kkzHudxbHwnijHHYmu55Tqxe3Q
Z2I8DrmMlaMaZ3tHikaa4zFjAQy7tLCUWK_J06onXNTGDsz0RLZReCnBtJRT
bnuwAVw_YRcWQqdokIYOu5o.y30JnRjrL3WNWhYZotyg7LPeLgCyrS48T.8W
MPund0CQesHrCbu5BZY-
X-Originating-IP: [98.138.91.170]
Authentication-Results: mta1068.sbc.mail.sp1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 65.50.243.78 (EHLO fgateway15.isp.att.net) (207.115.11.45)
by mta1068.sbc.mail.sp1.yahoo.com with SMTP; Mon, 21 Nov 2011 03:40:07 -0800
Received: from nm10-vm4.bullet.mail.ne1.yahoo.com ([98.138.91.170])
by att.net (frfwmxc15) with SMTP
id <20111121114006f0100ldk4ge>; Mon, 21 Nov 2011 11:40:06 +0000
X-Originating-IP: [98.138.91.170]
Received: from [98.138.90.54] by nm10.bullet.mail.ne1.yahoo.com with NNFMP; 21 Nov 2011 11:40:05 -0000
Received: from [98.138.89.253] by tm7.bullet.mail.ne1.yahoo.com with NNFMP; 21 Nov 2011 11:40:05 -0000
Received: from [127.0.0.1] by omp1045.mail.ne1.yahoo.com with NNFMP; 21 Nov 2011 11:40:05 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 37868 invoked by uid 60001); 21 Nov 2011 11:40:05 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1321875605; bh=JD8qYuWmcW9pNeDubhSsfB1jcGLBIEB3PcNCnKfyxAo=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=YC3+tdhDgZNvhdabHTuihfV03rmueHbdwg+ngoZcdjNc7/Olp8acQQBGOPCnRf70hatGqUaApRSwrsiGQeU5qo6SIckH8yVp4jknRnsX2LgCZgE/STkcKRAIHgIEFXkmNg9dNsDjOxGafaotewVOpt7QhtP93xhN8YkZzKtPIjI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=mYmvysuuxVtaRrOitIuVKGy/QDX3gSjsEUWPDZ7Nkt8ptXotcmqGsZKZlq/TUMRZKuXQKlW415lLqiRFLoMFcp4d4CBDDI7uYT5Ito5kd++vDfhRfkjnrgemjYRy78rIL9PLmknU1nTHed63NXo1lLEbV3a0ObnN8pO6K8mhaok=;
X-YMail-OSG: 9CDiTDMVM1lyaMHTYL5q42CgzwCYRV67GhX_YmV63YqDiwV
mPMUx5jQzzO1bM2EpL3LyXtRPzafxrB9qo6fq8mXg5rY70fZl8qNjI5HI1yz
jBzmi2.JKtAB.lkDzubd9eUpt52ltpofjgo438AtkHlwwy6bJH_.DP4kTGsY
TuGrpSaZC_oDLzSk0e3bnicXVXtDFVVEpXppkFcN1KIsXTWiAqcrBeuFHN2m
qvAtQ_0N84urrVlcZ5j5jtS__EG7wW8YJzlR7nU2ETcjF.Ai3FrdbDGAMxkS
EPKWU4jiVpEHlfmV0uXSq_toT_4XalS12KOCJZVw7fFTmnRo5Y4FJb5gVXBc
fin7fUlqKYmCPFu6FNsXjhSu_E0zLClvUjAFnsU7XxMsQgiOvYgjn9BDtQYS
T8Bg-
Received: from [41.139.47.47] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 21 Nov 2011 03:40:05 PST
X-Mailer: YahooMailWebService/0.8.115.325013
References: <[email protected]>
Message-ID: <[email protected]>
Date: Mon, 21 Nov 2011 03:40:05 -0800 (PST)
From: Darren Fischer <[email protected]>
Reply-To: Darren Fischer <[email protected]>
Subject: Good Morning
To: >
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1310913832-41619158-1321875605=:31237"
Content-Length: 5120
Advertisement

by Helen Halper Sun Nov 27, 2011 1:19 pm
Hi nailgirl!
I just ran this through http://www.iptrackeronline.com/header.php

ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 41.139.47.47<br>Originating ISP: Teledata Ict Ltd<br> City: Accra<br>Country of Origin: Ghana<br>* For a complete report on this email header goto ipTRACKERonline

by Dotti Sun Nov 27, 2011 2:26 pm
Just a heads up nailgirl,

Yahoo's headquarters are in Sunnyvale and Google's headquarters are in Mountain View California.
Any time you see either of these, you are simply getting the email provider's location, not the person's location.

Need to post photos? http://scamwarners.com/forum/viewtopic.php?f=28&t=3219
Are you a victim of a romance scam? Read here for advice and FAQ's.

Who is online

Users browsing this forum: ClaudeBot and 13 guests