Information on romance scams and scammers.
by Faizan Docherty Fri Feb 21, 2014 3:04 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.82.158.107
Originating ISP: Clients-adsl
City: Dakar
Country of Origin: Senegal
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.126.40 with SMTP id mv8csp112725pdb;
Fri, 21 Feb 2014 10:45:42 -0800 (PST)
X-Received: by 10.60.70.239 with SMTP id p15mr11281778oeu.26.1393008341639;
Fri, 21 Feb 2014 10:45:41 -0800 (PST)
Return-Path: <[email protected]>
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com. [184.154.1.124])
by mx.google.com with ESMTPS id m4si7624490oel.100.2014.02.21.10.45.41
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Fri, 21 Feb 2014 10:45:41 -0800 (PST)
Received-SPF: neutral (google.com: 184.154.1.124 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=184.154.1.124;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 184.154.1.124 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.ca
Received: from nm27-vm2.bullet.mail.ne1.yahoo.com ([98.138.91.215]:34644)
by r8-chicago.webserversystems.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1WGv6S-0007mq-Iq
for <snipped>; Fri, 21 Feb 2014 12:45:40 -0600
Received: from [98.138.226.180] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 21 Feb 2014 18:45:40 -0000
Received: from [98.138.87.9] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 21 Feb 2014 18:45:40 -0000
Received: from [127.0.0.1] by omp1009.mail.ne1.yahoo.com with NNFMP; 21 Feb 2014 18:45:40 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 75899 invoked by uid 60001); 21 Feb 2014 18:45:40 -0000
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>
Received: from [41.82.158.107] by web122306.mail.ne1.yahoo.com via HTTP; Fri, 21 Feb 2014 10:45:39 PST
X-Rocket-MIMEInfo: <snipped>
X-Mailer: YahooMailWebService/0.8.177.636
Message-ID: <[email protected]>
Date: Fri, 21 Feb 2014 10:45:39 -0800 (PST)
From: Franca Achim <[email protected]>
Reply-To: Franca Achim <[email protected]>
Subject: Hello
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-140725594-545734268-1393008339=:68526"
X-Spam-Status: No, score=4.9
X-Spam-Score: 49
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: hi my name is miss franca, i saw your profile and become interested
to know more about you meanwhile you can contact me with my e-mail address
([email protected]) so i can give you my picture so you can know more
about me too, thanks yours franca. [...]

Content analysis details: (4.9 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.91.215 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(francaachim24[at]yahoo.ca)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(franca achim <francaachim24[at]yahoo.ca>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (francaachim24[at]yahoo.ca)
2.6 FSL_MY_NAME_IS BODY: My name is ...
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
X-Spam-Flag: NO
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - r8-chicago.webserversystems.com
X-AntiAbuse: Original Domain - <snipped>
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.ca
X-Get-Message-Sender-Via: r8-chicago.webserversystems.com: none
X-Source:
X-Source-Args:
X-Source-Dir:


hi my name is miss franca, i saw your profile and become interested to know more about you meanwhile you can contact me with my e-mail address ([email protected]) so i can give you my picture so you can know more about me too,
thanks yours
franca.

([email protected])

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

by Bryon Williams Fri Feb 21, 2014 6:33 pm
Dearest,
I am Franca Achim 23 years old girl from Somalia in east Africa,my hobbies are,reading novels,jogging,listening to music,cooking,listen to music, tv and movies.I am the only Child of Late Dr Donald Achim ,before my fathers death he was a very well know as land developer and the same time he was working before as manager in a local Oil company,my father was killed by unknown gun men no one know why he was short but before he died he is being taking to a private hospital where he stay and died. but before he died he told me everything about his money since am the only child he has.

I am constrained to contact you because of the maltreatment I'm receiving from my step mother,She planned to take away all my late father's treasury and properties from me since the unexpected death of my beloved Father,Meanwhile I wanted to escape to Europe but she hide away my international passport and other valuable traveling documents.she did all this because she know i lost my mother while i was 3 years old

Luckily she did not discover where I kept my fathers File which contains important documents. So I decided to run to the refugee camp with the help of a Reverend Father william Godwin where I am presently seeking asylum under the United Nations High Commission for the Refugee here in Dakar, Republic of Senegal.

I wish to contact you personally for a long term business relationship and investment assistance in your Country,My father deposited sum of $3.7(Three Million seven Hundred Thousand Us Dollars in a Bank with my name as the next of kin. However, I shall forward you with the necessary documents after confirmation your acceptance to assist me for the transfer and investment of the fund.As you will help me in the investment,and i will like to complete my studies there in your country after all this is done,

As i was in my first year in the university when the crisis started in my life. it is my wish to compensate you with 20% of the total money as soon as the transfer has being made if maybe you do not find good enough to be your life partner, This is the reason why I decided to contact you.Please all communications should be through this email address only for confidential purposes. please if you want to help me i will like to know few information about you as below.

Full Name ...............
Real age..................
place of work and the position..............
Address.............
phone number........................

As soon as I receive your positive response showing your interest I will put things into action immediately. In the light of the above, I shall appreciate an urgent message indicating your ability and willingness to handle this transaction sincerely.

You can call me with this phone number (+221-76-64-99-00-1) ,this is Reverend Father william Godwin phone number who is taking care of us in the refugee camp here in Senegal,because i have no phone here but if you will like to speak to me on phone, it is the Reverend fathers Number here in the camp, call and tell him you want to talk to Franca Achim,he will call me because i am staying at the female hostel.

I attached here my photos for you i am not that photograph i hope you we not mind,please send me your photos also. Please do keep this only to yourself please i beg you not to disclose it till i come over to your country,once the fund has been transferred.
Yours truly Franca,

Image

Please contacta moferatorstor if you have a question or information about this post.



Please do not tell the scammer he is posted here.


Please remember the fallen. https://www.odmp.org/

Who is online

Users browsing this forum: ClaudeBot and 16 guests