| Author |
Message |
cmiriel
Not quite a Newb

Joined: 17 Jan 2007
Posts: 40

|
Posted:
Sat Feb 10, 2007 10:57 am |
  |
Hi
I have a new scammer hooked, claims "she" is from Soth Africa, can someone ihelp me find out where is this email coming from.
Thanks
Return-Path: <[email protected]>
Delivered-To:xxxxxxxxxxxxxxxxxxxx
Received: (qmail 24304 invoked from network); 10 Feb 2007 10:36:01 -0000
Received: from unknown (HELO web58802.mail.re1.yahoo.com) (66.196.100.216)
by ns19.webmasters.com with SMTP; Sat, 10 Feb 2007 05:36:01 -0500
Received: (qmail 19532 invoked by uid 60001); 10 Feb 2007 10:35:24 -0000
Received: from [216.118.251.226] by web58802.mail.re1.yahoo.com via HTTP; Sat, 10 Feb 2007 02:35:24 PST
Date: Sat, 10 Feb 2007 02:35:24 -0800 (PST)
From: sarah williams <[email protected]>
Subject: its me Sarah
To: xxxxxxxxxxxxxxxxxxxxx
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-1909939676-1171103724=:95306"
Content-Transfer-Encoding: 8bit
Message-ID: <[email protected]>
X-NAS-BWL: Found match for '[email protected]' on the allowed list (194 addresses, 0 domains)
X-NAS-Classification: 0
X-NAS-MessageID: 351
X-NAS-Validation: {6A4B64CC-E80D-4E9C-9F78-B6B7C3CB5CE3}
Mod Edit: Removed DomainKey-Signature to prevent blowout [BB]: |
|
|
|
|
 |
Fanny Plunge
Granny Pawn

Joined: 10 Jul 2006
Posts: 692
Location: Straight Baiting FTW!

|
Posted:
Sat Feb 10, 2007 11:26 am |
  |
There's no viable IP in the info you posted..
Just out of interest..What would happen if you did find out the Lad's location??? |
_________________ Don Felix,"Iwant to know if Im being initiated in a kind of cultic society,Also a wooden spoon could be difficult to get"
vPeter Renta,"I was in the wester onion with my brother but they told us there know money there"
Dr Famoru El-phram,"Look at you Kangaroo Imsucha Donkee.Bastard you pile patient.Nicompoop"
verkwyn,"You are just a bloody foolish Nigerain,It sounds like an email writen by an illitrate"
Humanity Hicham,"wooooow u are very pretty and lovely but u have dick"
x2 x280-WebSitesx21 |
|
|
|
 |
cmiriel
Not quite a Newb

Joined: 17 Jan 2007
Posts: 40

|
Posted:
Sat Feb 10, 2007 11:31 am |
  |
Hi
then we know exactly where the shots are coming from
and add that IP into a data bank of IP's used by scammers.
and if you run that funny IP on google you will get some surprising details
and knowing that the scammer is from nigeria will help baiting him, now I know he is from Nigeria as I have had a Yahoo messeneger chat with the scamemr. |
|
|
|
|
 |
Rusgirl
Not quite a Newb

Joined: 01 Nov 2006
Posts: 26
Location: Pindosia

|
Posted:
Mon Feb 12, 2007 7:42 am |
  |
216.118.251.226 - IRONLINK in Florida.
Known provider for Nigeria, probably a satellite connection. I've seen many of them from Ironlink.
I have a list of providers that don't resolve directly to Nigeria, but still mean "Nigeria":
IRONLINK
216.118.251.0 - 216.118.251.255
216.118.252.0 - 216.118.252.255
SES Americom Inc:
216.226.192.0 - 216.226.255.255
Lyman Bros, Inc.:
216.147.128.0 - 216.147.159.255
NV-ARIAVE, Isreal
195.225.62.0 - 195.225.63.255
Local Communications Networks, Inc. in Virginia
204.16.124.0 - 204.16.127.255
and of course:
Goldenlines (Israel)
Gilat (Israel)
Intelsat (UK)
Websat (Ireland)
PanAmSat (US)
PaeTec (US)
Skylogic (Italy)
Juch-Tech (Canada)
and many more... |
_________________ scammers reside here:
http://www.romancescam.com/album |
|
|
|
 |
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|