Information on romance scams and scammers.
by Watchingwolf Fri Dec 11, 2009 2:26 pm
I've looked all over the site, but cannot find exact information on how to trace IPs via the email headers. The header is posted below from the first email received. I'm trying to figure out the actual location and am stuck. I searched the IPs via http://whatismyipaddress.com

Any help is appreciated. In case its needed, this was sent from a yahoo email to a yahoo email.

What I Am Looking ForTuesday, November 17, 2009 9:27 AM
From Billy Rivers Tue Nov 17 15:27:41 2009
X-RocketMail: 00000001;R---S-----------;5138
X-RocketUID: 0000000000
X-RocketYMUMID: AMfGtEQAAOQsSwLA8QnyRB3Blx4
X-RocketMIF: 1258471665;8852;
X-Apparently-To: REMOVED
X-RocketRCL: 5847;1;1460831792;5945
Return-Path: <[email protected]>
X-RocketTIP: 68.142.206.160 ; yahoo.com:s1024
X-RocketSRV: showStationery=; ;s_ip=68.142.206.160;d_t=1258471665;url=yimg.com,http://mail.yimg.com/us.yimg.com/i/mesg/tsmileys2/40.gif;Retro=Y;SgrnP=N
X-Rocket-Track: cat=UK; info=dkv:GD;dmcu:UK<token=NO_MATCH>;ip:NN<ip=68.142.206.160,policy=n-w0,n100,g0,s>;ipsh:UK<ip=68.142.206.160,policy=P=-1,X=-1,S=-1>;ipst:GD<ip=68.142.206.160>;cmsgbl:UK<s=30,m=1>;cmsgbk:UK<s=30,m=7>;cmsgob:UK<s=30,m=1>;mip:UK<p=not_run>;cptron:UK<prob=0.97>;ipsp:GD;csubbl:UK;csubbk:UK;url2db:GD<url=yimg.com>
X-YMailISG: JO2kBTcWLDvHYMUIwIn8g5EiMsZHyyOxXVECiJ5oGXJvpsoYh0TVtR61KkczbNZRSCgN.zRjSZJg5CNbOyikpfP5oWZhJ8su0.skLBkRC5D1OuvguQQS.6xAGmt6b59xjsVNqRjh7MgL3f0i1ENn5SrBye60aRpYo5x2Aw9JCBvsa5edZ3AoItUapahhTMmRopZ3R9vwZjR1Rl8EJOEWvIW2bnfXUwrO..mhHwMDQgTldcGJgD_n15rwRmgAuht_gQ4DjpG8ctbtaQk81sdlauviANC4OC4q.VyqhgPDB3jtMrG_o0LOeBOIyYHmMpVK3FwzM2SUw.hujxpnsZRDtVSbL8PAqlBclPFw0qEWLFM_J1GhA4b7pIsR5mOGnZtgb9aGJVzu4TeFwX9ol0mXAwMSYUWWacNyBdwX8GuTgwEAOPHTsP9Glbe2LQ3CYkr8_zt8G2gjvmck3acNSYo.kIUE
X-RocketHELO: n21.bullet.mail.mud.yahoo.com
X-RocketMAILFROM: [email protected]
X-RocketRCPTTO: REMOVED
X-RocketMSGID: [email protected]#0
X-Originating-IP: [68.142.206.160]
Authentication-Results: mta110.mail.ac4.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO n21.bullet.mail.mud.yahoo.com) (68.142.206.160) by mta110.mail.ac4.yahoo.com with SMTP; Tue, 17 Nov 2009 07:27:45 -0800
Received: from [209.191.108.96] by n21.bullet.mail.mud.yahoo.com with NNFMP; 17 Nov 2009 15:27:42 -0000
Received: from [68.142.201.247] by t3.bullet.mud.yahoo.com with NNFMP; 17 Nov 2009 15:27:42 -0000
Received: from [127.0.0.1] by omp408.mail.mud.yahoo.com with NNFMP; 17 Nov 2009 15:27:42 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 34589 invoked by uid 60001); 17 Nov 2009 15:27:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1258471661; bh=2JsiXw6MO6uRCel2eg5zuL9BC51rnXOv/JTHdx90V0k=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=1C3A/8aNO0KsSJvLTmUSw+bWhcA+8+zD1XiJOtcgF5PFDBjj/QjszF0YTi60OZsWScZUM0/hh/OwKT6hSX9jUzah5+0Vd3PX2QBnrjsXCOKi/sQKUfav1ZNIwDPO8/Ldj2Ypf8it6WmQtZ2pBYxvRPMCCG8bqhnFLkG0cqdYjUA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=T9GerMaJiyeOErsTAJreQg5JumlG9FFbSucqDt1IXNPWOEntnFdhNlZKpJ80h7XWgsKFcUnXjRbS36Y0gqq6c31Ky32piW7jp41RlFYey7NuzsKRVxQoZJVBq35lRymN2HnPmtWe0lnqt9EDOY7GTCjTxOHU6JNIHYAUtssjaYU=;
Message-ID: <[email protected]>
X-YMail-OSG: PYfGQawVM1mWpPDxBSL2hBh9spyEy5scXsSQnbCBYTZ4TyFzRbVGM1ocGLJC8o_uRArct5_DDn2QXunEi144FFpR7zE.c9Cysh5xL8kkcZ8uci7YTAG6QDDHU094OwnmkCIqmJ4yZ.w9lwuugT91SzBlRUS9e7tlKtbxWnvxV4sCXoQ8jZNgeTJz7.hxNkWBSoWggtG3P7cLu5lo4AkjBGbURi3K08fGtM9H19ClFLADnHtbBIaGQFHjYSS9rkEaSdUVlCIcLXFv4Fu3z.eriR9PP.eNzAaQqHZguPCFy4teTt6HkQOwgS8zaID_SZAZV979hmFuVQ--
Received: from [209.73.188.240] by web111914.mail.gq1.yahoo.com via HTTP; Tue, 17 Nov 2009 07:27:41 PST
X-Mailer: YahooMailClassic/8.1.6 YahooMailWebService/0.7.361.4
Date: Tue, 17 Nov 2009 07:27:41 -0800 (PST)
From: This sender is DomainKeys verified Billy Rivers <[email protected]> Add sender to Contacts
Subject: What I Am Looking For
To: REMOVED
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1541397210-1258471661=:54895"
Content-Length: 5847
Advertisement

by The Enchantress Fri Dec 11, 2009 3:13 pm
Welcome to Scamwarners Watchingwolf.

68.142.206.160. This IP belongs to a Yahoo Mail Server.

United States (Sunnyvale, California)

by n21.bullet.mail.mud.yahoo.com with NNFMP

IN SOME CASES Yahoo use a special protocol "NNFMP" to denote sender MAY be in a list of known scammers, or is using special software to hide their own IP address and details.


Note - it does not necessarily follow that if this protocol is not in a header - it should be assumed that the mail is NOT from a scammer.

Could you please post the mail you have recieved - we can investigate further.

Also it will alert and save others from being scammed.

Please post any questions or concerns - a support team member will be glad to help you.

Photos - are scammers using yours? click here
Are you falling for a love scammer? click here
Never send money by Western Union/Moneygram.
Never give personal information.
Online anyone can claim to be anyone, any age and from anywhere.
by Watchingwolf Fri Dec 11, 2009 3:29 pm
Sorry - I thought only the headers were needed, not a problem. But yes thats the information I was getting also, California, which doesn't add up. I believe all my information is out again this time. If not a mod is welcome to have at it LOL. Thank you for your help.

What I Am Looking ForTuesday, November 17, 2009 9:27 AM
From Billy Rivers Tue Nov 17 15:27:41 2009
X-RocketMail: 00000001;R---S-----------;5138
X-RocketUID: 0000000000
X-RocketYMUMID: AMfGtEQAAOQsSwLA8QnyRB3Blx4
X-RocketMIF: 1258471665;8852;
X-Apparently-To: [email protected] via 68.180.198.199; Tue, 17 Nov 2009 07:27:45 -0800
X-RocketRCL: 5847;1;1460831792;5945
Return-Path: <[email protected]>
X-RocketTIP: 68.142.206.160 ; yahoo.com:s1024
X-RocketSRV: showStationery=; ;s_ip=68.142.206.160;d_t=1258471665;url=yimg.com,http://mail.yimg.com/us.yimg.com/i/mesg/tsmileys2/40.gif;Retro=Y;SgrnP=N
X-Rocket-Track: cat=UK; info=dkv:GD;dmcu:UK<token=NO_MATCH>;ip:NN<ip=68.142.206.160,policy=n-w0,n100,g0,s>;ipsh:UK<ip=68.142.206.160,policy=P=-1,X=-1,S=-1>;ipst:GD<ip=68.142.206.160>;cmsgbl:UK<s=30,m=1>;cmsgbk:UK<s=30,m=7>;cmsgob:UK<s=30,m=1>;mip:UK<p=not_run>;cptron:UK<prob=0.97>;ipsp:GD;csubbl:UK;csubbk:UK;url2db:GD<url=yimg.com>
X-YMailISG: JO2kBTcWLDvHYMUIwIn8g5EiMsZHyyOxXVECiJ5oGXJvpsoYh0TVtR61KkczbNZRSCgN.zRjSZJg5CNbOyikpfP5oWZhJ8su0.skLBkRC5D1OuvguQQS.6xAGmt6b59xjsVNqRjh7MgL3f0i1ENn5SrBye60aRpYo5x2Aw9JCBvsa5edZ3AoItUapahhTMmRopZ3R9vwZjR1Rl8EJOEWvIW2bnfXUwrO..mhHwMDQgTldcGJgD_n15rwRmgAuht_gQ4DjpG8ctbtaQk81sdlauviANC4OC4q.VyqhgPDB3jtMrG_o0LOeBOIyYHmMpVK3FwzM2SUw.hujxpnsZRDtVSbL8PAqlBclPFw0qEWLFM_J1GhA4b7pIsR5mOGnZtgb9aGJVzu4TeFwX9ol0mXAwMSYUWWacNyBdwX8GuTgwEAOPHTsP9Glbe2LQ3CYkr8_zt8G2gjvmck3acNSYo.kIUE
X-RocketHELO: n21.bullet.mail.mud.yahoo.com
X-RocketMAILFROM: [email protected]
X-RocketRCPTTO: [email protected]
X-RocketMSGID: [email protected]#0
X-Originating-IP: [68.142.206.160]
Authentication-Results: mta110.mail.ac4.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO n21.bullet.mail.mud.yahoo.com) (68.142.206.160) by mta110.mail.ac4.yahoo.com with SMTP; Tue, 17 Nov 2009 07:27:45 -0800
Received: from [209.191.108.96] by n21.bullet.mail.mud.yahoo.com with NNFMP; 17 Nov 2009 15:27:42 -0000
Received: from [68.142.201.247] by t3.bullet.mud.yahoo.com with NNFMP; 17 Nov 2009 15:27:42 -0000
Received: from [127.0.0.1] by omp408.mail.mud.yahoo.com with NNFMP; 17 Nov 2009 15:27:42 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 34589 invoked by uid 60001); 17 Nov 2009 15:27:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1258471661; bh=2JsiXw6MO6uRCel2eg5zuL9BC51rnXOv/JTHdx90V0k=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=1C3A/8aNO0KsSJvLTmUSw+bWhcA+8+zD1XiJOtcgF5PFDBjj/QjszF0YTi60OZsWScZUM0/hh/OwKT6hSX9jUzah5+0Vd3PX2QBnrjsXCOKi/sQKUfav1ZNIwDPO8/Ldj2Ypf8it6WmQtZ2pBYxvRPMCCG8bqhnFLkG0cqdYjUA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=T9GerMaJiyeOErsTAJreQg5JumlG9FFbSucqDt1IXNPWOEntnFdhNlZKpJ80h7XWgsKFcUnXjRbS36Y0gqq6c31Ky32piW7jp41RlFYey7NuzsKRVxQoZJVBq35lRymN2HnPmtWe0lnqt9EDOY7GTCjTxOHU6JNIHYAUtssjaYU=;
Message-ID: <[email protected]>
X-YMail-OSG: PYfGQawVM1mWpPDxBSL2hBh9spyEy5scXsSQnbCBYTZ4TyFzRbVGM1ocGLJC8o_uRArct5_DDn2QXunEi144FFpR7zE.c9Cysh5xL8kkcZ8uci7YTAG6QDDHU094OwnmkCIqmJ4yZ.w9lwuugT91SzBlRUS9e7tlKtbxWnvxV4sCXoQ8jZNgeTJz7.hxNkWBSoWggtG3P7cLu5lo4AkjBGbURi3K08fGtM9H19ClFLADnHtbBIaGQFHjYSS9rkEaSdUVlCIcLXFv4Fu3z.eriR9PP.eNzAaQqHZguPCFy4teTt6HkQOwgS8zaID_SZAZV979hmFuVQ--
Received: from [209.73.188.240] by web111914.mail.gq1.yahoo.com via HTTP; Tue, 17 Nov 2009 07:27:41 PST
X-Mailer: YahooMailClassic/8.1.6 YahooMailWebService/0.7.361.4
Date: Tue, 17 Nov 2009 07:27:41 -0800 (PST)
From: This sender is DomainKeys verified Billy Rivers <[email protected]> Add sender to Contacts
Subject: What I Am Looking For
To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1541397210-1258471661=:54895"
Content-Length: 5847
Compact Headers
Dear removedbyme,

I am so excited to get response from you,thanks for sending me your email address,I'll add you to my buddy list.Hopefully we'll chat soon.I am interested in you,please get back to me after reading my email.

I am looking for someone who shares similar desires and aspirations for the future. I find it difficult to describe the person I'm looking for but there are certain qualities I do look for - which are fairly consistent. Here are some of the traits that I am in search of Someone who desires a happy healthy relationship, someone who is smart and intellectually stimulating. Someone who is honest and has good communication skills, someone who is a good listener, A good person with a big heart, who is kind and loving. Someone who takes care of her self and their professional development.

Someone who is committed to the relationship, who is willing to work on it. Someone who is supportive of my goals and dreams and can be supportive when I am having a bad time or a lousy day. Someone who is willing to take support from me in return, who won't hide or run away when she needs support. A person who is always willing to look at themselves and hear constructive criticism and willing to change a bad habit or character flaw with support and encouragement from a positive partner.

Someone who is passionate and has a zest for life. Someone who isn't fooled by my self-reliance and can see and accept my vulnerability. Someone with a strong sense of integrity. Someone who likes to travel. Someone who likes the outdoors. Someone who likes to read and sees movies. Someone who makes me laugh. Someone who enjoys entertaining. Someone who gets the most out of life.

I believe a journey of a 100miles begins with a step,let's walk down life's winding road hand in hand.

Do have a nice day!

Your friend,

Billy

by The Enchantress Fri Dec 11, 2009 3:39 pm
Hi

This is definitely a scammer - note the poor punctation at the start of the mail.

What follows is then copy and pasted from dating site, or other scripts used and shared by scammers.

This from "asian singles"

I am looking for someone who shares similar desires and aspirations for the future. I find it difficult to describe the person I'm looking for but there are certain qualities I do look for - which are fairly consistent. Here are some of the traits that I am in search of: Someone who desires a happy healthy relationship, someone who is smart and intellectually stimulating. Someone who is honest and has good communication skills, someone who is a good listener, A good person with a big heart, who is kind and loving. Someone who takes care of his/her self and their professional development


Please cease all communication with this professional thief and heartbreaker.

If you have any further questions please post or PM.

This Romance guide here may help http://www.scamwarners.com/forum/viewtopic.php?f=13&t=3607

Photos - are scammers using yours? click here
Are you falling for a love scammer? click here
Never send money by Western Union/Moneygram.
Never give personal information.
Online anyone can claim to be anyone, any age and from anywhere.
by annemlbrooks1 Mon Mar 08, 2010 2:26 pm
rvbilly1958 is at it again. He is the online Tagged.com dating site.


What I Am Looking For
Fri, March 5, 2010 5:04:31 AMFrom: Billy Rivers <[email protected]> View Contact
To: [email protected]


--------------------------------------------------------------------------------

Dear xxxx,

How are you?I hope you had a restful night.You've been on my mind,thanks for your response to my note on tagged and the pleasant chat.I am interested in you,I want to share some of the qualities I seek in a partner.I am not looking for a perfect woman,I am not Mr.perfect.Please,get back to me after reading this mail.

I am looking for someone who shares similar desires and aspirations for the future. I find it difficult to describe the person I'm looking for but there are certain qualities I do look for - which are fairly consistent. Here are some of the traits that I am in search of Someone who desires a happy healthy relationship, someone who is smart and intellectually stimulating. Someone who is honest and has good communication skills, someone who is a good listener, A good person with a big heart, who is kind and loving. Someone who takes care of her self and their professional development.

Someone who is committed to the relationship, who is willing to work on it. Someone who is supportive of my goals and dreams and can be supportive when I am having a bad time or a lousy day. Someone who is willing to take support from me in return, who won't hide or run away when she needs support. A person who is always willing to look at themselves and hear constructive criticism and willing to change a bad habit or character flaw with support and encouragement from a positive partner.

Someone who is passionate and has a zest for life. Someone who isn't fooled by my self-reliance and can see and accept my vulnerability. Someone with a strong sense of integrity. Someone who likes to travel. Someone who likes the outdoors. Someone who likes to read and sees movies. Someone who makes me laugh. Someone who enjoys entertaining. Someone who gets the most out of life.
I believe a journey of a 100miles begins with a step,let's walk down life's winding road hand in hand.

Do have a nice day!

Your friend,

Billy



Full ViewRe: What I Am Looking For
From: Billy Rivers <[email protected]> View Contact
To: xxxxx <[email protected]>


--------------------------------------------------------------------------------

Dear xxxx,

Your response to my email was longer than I anticipated,I appreciate the time you took to respond.I've no doubts about your personal values,I perceive you to be morally up-right and someone one who gives in her all to whatever thing she puts her mind to do.Such a rear quality for a lady nowadays,

You are just like me,I fall in love hard and with all of my heart.Your love for your late husband was absolute,it is the one song writers and poet write about.The role you played during his dying days can only emphasize the depth of your love for him.I must confess if we are lucky we might get a handful of ladies with your character and values.You took time to know yourselves,the relationship grew with time.I thought I was in a loving relationship for 12yrs,I didn't know I was wrong.We got married a week after we met.our attraction was physical,beauty is very deceptive.I was truly in love with her,i never suspected she was cheating on me not until I caught her making out with a delivery guy.She had two of our babies aborted all because of her modeling career as at that time.After my divorce I vowed never to get involved with any woman,I could'nt imagine experiencing another heart ache,after alot of pressure from concerned friends I decided to give the online dating site a shot.I was searching for that special woman when I saw your pix.

I am an only child,was singled handedly raised by my mom.My dad is British,he was a sailor.He met my mom in florida,after his demise my mom relocated to Scotland to be with my paternal grandmom,I spent my growing up years in the United Kingdom,my elementry,high school and university was there.I met my wife in California after I graduated we got married and settled in Fresno.My choices then were wrong,the qualities i was looking for were only skin deep,i learnt through the hard way.I'm wiser and I know better now.I need to go now,need to run some errands and checkout some things.Will be back to talk to you.You've been on my mind,i do really want to know you baby.feel free to ask any question okay?Do have a lovely day!

Your friend,

Billy

Mod edit to obfuscate personal details. - Samantha
by Dotti Mon Mar 08, 2010 2:40 pm
Ann,

Welcome, and thank you for posting the update on this scammer so people are aware he is still active. Obviously if he is still contacting people, he still has the potential to hook new victims, so having his current scripts posted could prevent someone else from being scammed.

Need to post photos? http://scamwarners.com/forum/viewtopic.php?f=28&t=3219
Are you a victim of a romance scam? Read here for advice and FAQ's.
by giveup Tue Mar 09, 2010 12:31 pm
I need help also. I don't know what you need to report these guys. I have 3 just now within 2 hours!!! All 3, wife's died, left a 13 yr old, one a 17 yr old and one a 15 yr old to raise. (POOR KIDS), LOL But I just started a new email address signed on to a different dating site. And wow they are out there. I have pictures of 2 no pictures of opne. I am goiong to lead them on for a while but all 3 wanted to write privately and also yahoo instant messanger. I have work to do so will do that later on. Please give me info what I need to get. I am also signed up at scambusters.
Thanx in advance
by annemlbrooks1 Tue Mar 09, 2010 12:45 pm
I would also like to have this kind of information. He is still sending me messages and I am playing along. He told me he is going to be going to bakassi penisula in cameroon for an oil dig. When he asked me if I knew where this is I said yes. I googled it. I gave him some recent headline news and he then asked if I knew someone in bakassi. I said no and that I just liked to read and keep up with world news. I suggest if you do decide to play with your scammers to get information, make sure you do not forward emails sent to you from friends or relatives nor give any real personal information. I always look around online in scam warning groups to see if there are pictures of the same guy or emails send that match the ones I have gotten. I was on the tagged.com group and find that the scammers there are flies to excrement. Always check facts they tell you. Check city names, company names, if they think your onto them, they usually just drop you but there is always someone ready to come in right behind them. It is not just guys either, the girls are just as bad.
by Dotti Tue Mar 09, 2010 1:05 pm
I'm going to echo the advice I gave to giveup here. Go over to our sister site 419eater.com and you will be able to get all kinds of information on how to bait effectively and safely, and you will also be introduced to some baiting tools designed to waste lots of scammer time and resources.
When you have enough information, you can profile each scammer here to help even more.

Need to post photos? http://scamwarners.com/forum/viewtopic.php?f=28&t=3219
Are you a victim of a romance scam? Read here for advice and FAQ's.
by devastated Mon Jul 25, 2011 3:04 pm
Is there a way to trace the IP from chat and not email? Just wondering, thanks!

Who is online

Users browsing this forum: ClaudeBot and 16 guests