Avoid Internet ScamsHow to Avoid Job Scams & Internet Dating Scams.
Find Their Location | Never Send Money! | Scam Info | Scam Stories | Newbie Info | Black Listed Agencies | Better Dating Sites | Russian/Eng Translation | Visa / Passport Help | Rerport Crime to FBI | Report Crime to Russia
|
Last Updated Sep 28, 2009 Don't be SCAMMED! Scammers hide their location  Have you received an email job offer??? Are you dating someone on the internet??? Are they really from the United States??? Is she really from Kiev or the city she claims??? Below are steps to open the email header of: The ip address on the header can help you find their location If you like things easy just use an      |
|
gmail 1. Click on her email and open it. 2. At the top of the page click the blue down arrow button on the right side of "Reply". 3. At the bottom of this new box click "Show original" and a new page will open. 4.On the new page look for X-Mailer: The Bat! If you see it look no further. It is a scam! X-Mailer is a mass mailing software that spammers use. Less popular are FC'2000, Becky and Communigate Pro. 5. If you do not see X-Mailer check the "Received: from" ip addresses.
click "Lookup" to find the actual location. If the IP addresses do not match her city or nearby major city then it is a scam. if you see: Received: from [10.225.15.75] - it is not the origin You should ask them to use Yahoo or Hotmail. Note: Some gmails cannot show the senders ip Use this instead: You will see something like this after clicking "Show original": X-Gmail-Received: 6747e76f69bc277134418c8599197cba55879025 |
|
Yahoo 1. Click Full Headers at the lower right hand corner of the page and a new page will open. 2. On the new page look for "X-Mailer: The Bat!" . If you see it look no further. It is a scam! X-Mailer is a mass mailing software that spammers use. Less popular are FC'2000, Becky and Communigate Pro. 3. If you do not see X-Mailer check the "Received: from" or last Received: ip addresses.
click "Lookup" to find the actual location. If the ip addresses do not match her city or nearby major city then it is a scam.
You will see something like this:
|
View Contact Details 
Add Mobile Alert |
hotmail 1. Click "Inbox" 2. Right click on her email and you will get a box. 3. Left click "View message source" and a new page will open. 4. On the new page look for "X-Mailer: The Bat!". If you see it look no further. It is a scam! X-Mailer is the most common mass mailing software that spammers use. Less popular are FC'2000, Becky and CommuniGate Pro. 5. You can also check the "Received: from" or "X-Originating-IP" and ip addresses.
click "Lookup" to find the actual location. If the ip
addresses do not match her city or nearby major city then it is a scam. You will see something like this: Received: from smtp1.yandex.ru ([213.180.200.14]) by bay0-mc6-f18.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Fri, 3 Mar 2006 01:52:18 -0800
|
    
|
|
Results of an IP Address By opening an email header you can see where her email is coming from. The ip address listed may not be her actual city but a nearby city where her ISP is located. Also, some scammers use a proxy, i.e. another server. Thus, you can never know their original location unless you use an email tracker on the bottom of this page. However the proxy they use will not be in the city she lives in. Even if they could get a proxy in their scam city the ip will never be under the "Received: from" . If the scammers were geniuses and found a way we should remember: never send money. A good Russian woman will never ask for money, remember that. If the ip address begins with "10" then it is not their location. The following came from 10.229.15.75 and is not their location 4676 Admiralty Way, Suite 330, Marina del Rey CA If the "Received: from" ip address you entered gives you "Marina del Ray" then we know is it is not their location. On the same page below Marina del Ray : NetType: IANA Special Use NameServer: BLACKHOLE-1.IANA.ORG NameServer: BLACKHOLE-2.IANA.ORG IANA = "Internet Assigned Numbers Authority" IANA has nothing to do with the email you received. IANA uses extra set of ip addresses that begin with 10,127, 169, 172 or 192. They are used in private networks for computers, modems and routers and should never appear on the internet email headers unless it is gmail. In other words if you get Marina del Ray, IANA or an ip address with the above prefix, it means someone is hiding their ip address or not revealing it like gmail does. It could also be from another country like Amsterdam. Again, if it is gmail and the ip begins with a 10 we cannot find their location unless you use an email tracker. Also look at "Received: by" to find their location. If it still begins with 10 or you still get Marina del Ray then we will have to dig deeper using all the Whois from different parts of the world. If you get Marina del Ray or no answer then proceed to the next whois. If you finally get a country then maybe it is from there. For example if I use 10.229.15.75 It could be from Amsterdam but we cannot be certain. If it is gmail we must use an email tracker when we get an ip address that begins with "10"
WHOIS Use this one first since most scams are from here: Europe, the Middle East, Central Asia, and African countries located north of the equator Click here for the RIPE NCC's Whois.
If you get some crappy weird stuff after the "Received: from" then it is a scam. They inserted instructions to their mass mailer application. Example: Received: from %RNDUCCHAR1524 (j236.128.26.76.%RNDLCCHAR15357.ti.yahoo.com 96.208.178.254) |
 |
|
Ask our Mother for help.  Our Lady of Kazan |
|
If this website helped you
|
© 2005 All Rights Reserved.
