DelphiFAQ Home Search:

Dating scammer Rhoda Naa from Accra, Ghana

 

comments7651 comments. Current rating: 5 stars (902 votes). Leave comments and/ or rate it.

pretty_naa2003@yahoo.com


Content-type: text/html

Comments:

You are on page 200 of 511, other pages: 1 2 3 197 198 199 [200] 201 202 203 508 509 510 511
2009-09-15, 19:05:18   (updated: 2009-09-15, 19:55:47)
gilligan,tcm  
hello all

A86 Im glad you came back - and hope all is well / i read your last posting and you are right as usual / there is no need for me even to elaborate to anon further

all new abroad looking for answers need to listen to my friend A-86 / he is seasoned enough to know sometimes it is best to not think things out too much / dont play games - simply ignore if you dont know / thus he says he doesnt care what if it is somone online overseas especailly west africa / ghana / nigeria / Russia / + others DONT GIVE THEM ANY MONEY - his answer is absolute - it is truth...there is no questions / no doubts / no could of would of should of - the answer is done and over BANG! - time to move on to an honest person. It transcends the confusion and suspicions. Bec you -are already suspicious by being here ... so un-suspicious the whole thing - That is why he gets a lot of credit with me and the first timers need to listen. do yourself a favor! with simplicity is strength

Clark - good job - and yes I am good a chess but i loose a few too - I know when I have met my match both in chess and life HAHAHAHA / im not even close to knowing everything - i look at the scamming invesigation more like the game dominoes or poker - it builds as you go and you make the right plays but you still need some luck. the Vikings (Northmen) used to say luck will often save a man if his courage holds

I will tell you something that is inconclusive regarding IP locations - they are at best + / - 200 miles - consider that when thinking of the scammer with IP location in the middle of the ocean i would like to know this IP if you had it / what is the closest mainland or island? - it is probably disguised and then tell me if it is a proxy server.

Keep in mind every body living has a touch of some type of arrogant trend. I do also. If you can get a scammer into an area of his weakness he may panic and talk while not thinking or his pride will draw him out eventually - he will make a mistake. a scambuster is often misconscrewed as a scammer himself bec he knows alot about scamming. he has a frame of reference for it more than the first time people here at Delphi or rookies to being scammed. everyone knows there is a scammer or two working here. I know for a fact. and we are all sort of suspicious sometimes. there are things that look innocent to one / while not so innocent to the others - the thing to look for when tracking a scammer to another scammer is key-words - that is what I used / my set up to one group of scammers when i said something about time share property in florida. Who would have thought that or other person would have been so stupid as to mention it to the whole damn world? unless I bruised his pride? think about it ...or he was specifically doing repeating on purpose but for what purpose but a game. to make it appear he is on my and delphis side when i know better! or crazy or needs the attention...you may think i am proud of that trap i placed but if i wasnt a little naive and a little smarter than i wouldnt have had to be here on delphi fighting scammers to begin with / right; hell im not so smart at all!!! the whole thing happened to me from the start like I was needed / or wanted to be on here ...

that was my chess as you call it / or my dominoes as i call it - i wasnt sure he would say anything and it was 'almost' sheer dumb luck / hahahaha but he made the connection for me. I also know that people in his clan had tried to contact me afterward.

Hello wan-wan the bupkus things are beautiful and well thought

Baddog / Fred / Ojas / - Kind regards!!!

GILLIGAN THAT CRAZY MONKEY
2009-09-15, 19:26:22   (updated: 2009-09-15, 19:29:53)
Clark,Kent from Germany  
You can have this IP. I try also to copy the map. I post it here. The nearest Town is COUTON ATLANTIQUE. I immadiately go to work. See you later
2009-09-15, 19:51:17
anonymous  
thanks Clark

Couton Atlantique i would bet then is the location of the scammer - great work / i dont know much of Couton Atlantique other than what you have said and I have heard just a little

GILLIGAN THAT CRAZY MONKEY
2009-09-15, 19:59:53   (updated: 2009-09-15, 20:06:31)
Clark,Kent from Germany  
Email Path Analyzer

Summary
Threat Level     Source IP Address:     127.0.0.1
Reverse Lookup:     localhost ( 127.0.0.1 )
Country Path:     COUTON ATLANTIQUE , USA
Spam Listing(s): 4     Delivery Time: 0d 0h 0m 34s Hops: 4
Client / Device:     Unknown

Details

*
* Analysis
* Delivery Path
* Sender Map
* Sender Whois
* Spam Info
* Header Input
* DNSstuff Tools Used


Spam Info:

This email was found in 4 Spam database(s) (RBLs) lists. (view listings)
Analysis:

This email was sent from 127.0.0.1 at 14-Apr2009 05: 21 AM via 4 hops. The threat level has been determined by analyzing the header content and by checking the in path mail servers against known spam lists.
Action:

Based on the above information we have found this email to be High Risk.


Keywords:
2009-09-15, 20:03:01
Clark,Kent from Germany  
I come back with the complete header. I cannot save the map. Not possible maybe you can something workout with the header byself. With DNSstuff you will see the map byself and also the IP´s and what i mean!
2009-09-15, 20:09:49   (updated: 2009-09-15, 20:13:50)
Clark,Kent from Germany  
X-Apparently-To:         xxx_xxx_xxxx@yahoo.de via 87.248.115.90; Mon, 13 Apr 2009 22:21:38 -0700
Return-Path:         <wwosuissee208@swissmail.com>
X-YMailISG:         KJabFG8WLDsg9KG3LSRtcoqqzU.WCz69cGSNILLQUHTwgdYViXk2sTUTvlPTlNpuHQ3M. e5kIcflJmMJMJ4BTLc10TboM4w1O8tzU_sAz6_U4iHGTGnlOxA6qVGBzbIsvvGLP1JP8wcV2u27TGBYFLMaBvuGrN6 zWpSmNEvJhsk7PBmTNF2C5Dvnw4KLBKLBlV7b_DgHcV0fChTLgVZUHi1wPI.XmsZMp2zJi3ebnb.NEXCo0Ftao86P61XE5li9erG.yOcWvMqhFlujQq6IGTMcl2.Y_AL86lMXT_MQ4.GQabC5o7enOjbpb37i9gnLAyC8H_zE9_SzG0ErxygPAQmYBXNif5qyJmb.fCsE8Lmd5uQBz5l80c9XEZu70MwyGF_Ec7_.ux.oAN3hnTlXb0jdYRUONEEDywkfZgxuCqCjuzhMjgshlngmtUc.1fU3V370nCOPQ2A3sLERbFOrMEFGT60BhlD0a5Ez.L6tZttKQSZgx2mQqWU3h1wka3rw
X-Originating-IP:         [208.36.123.129]
Authentication-Results:         mta146.mail.re1.yahoo.com from=swissmail.com; domainkeys=neutral (no sig); from=swissmail.com; dkim=neutral (no sig)
Received:         from 208.36.123.129 (EHLO outbound1-1.us4.outblaze.com) (208.36.123.129) by mta146.mail.re1.yahoo.com with SMTP; Mon, 13 Apr 2009 22:21:37 -0700
Received:         from wfilter3.us4.outblaze.com.int (wfilter3.us4.outblaze.com.int [192.168.8.242]) by outbound1-1.us4.outblaze.com (Postfix) with QMQP id 18B0E7A2C42 for <xxx_xxx_xxx@yahoo.de>; Tue, 14 Apr 2009 05:21:34 +0000 (GMT)
X-OB-Received:         from unknown (208.36.123.73) by wfilter3.us4.outblaze.com; 14 Apr 2009 05:21:35 -0000
Received:         by ws1-9.us4.outblaze.com (Postfix, from userid 1001) id 142C2BE407D; Tue, 14 Apr 2009 05:21:03 +0000 (GMT)
Content-Transfer-Encoding:         7bit
Content-Type:         multipart/alternative; boundary='_----------=_1239686463199670'
MIME-Version:         1.0
From:        
'wwosuissee208 swissmail.com' <wwosuissee208@swissmail.com>
Kontaktdaten anzeigen
To:         cxxx_xxx_xxx@yahoo.de
Date:         Tue, 14 Apr 2009 00:21:03 -0500
Subject:         Re: AW: YOUR GOLDEN TALLY CARD.
Received:         from [81.91.228.131] by ws1-9.us4.outblaze.com with http for wwosuissee208@swissmail.com; Tue, 14 Apr 2009 00:21:03 -0500
X-Originating-Ip:         81.91.228.131
X-Originating-Server:         ws1-9.us4.outblaze.com
X-Ob-Auth:         wwosuissee208:swissmail.com@mail.com
Message-Id:         <20090414052103.142C2BE407D@ws1-9.us4.outblaze.com>
Content-Length:         23738
2009-09-15, 20:27:28   (updated: 2009-09-15, 20:28:38)
gilligan,tcm  
IP 81.91.228.131
in Benin Africa - a country in West Africa (near Ghana)

IP 127.0.0.1 ? / is its own host - very clever scammer because this shows as a non proxy server - in this case could be someone (of course) disguising the Ip completely or works for a countries naval or air force

Im not sure what else to think re: 127.0.0.1

Either way its bullshit as you already know / perhaps someone n the military on a boat scamming to get you to send money home for their sweetheart / hell who knows right?

Good Job!!!

GILLIGAN THAT CRAZY MONKEY
2009-09-15, 20:27:41
Clark,Kent from Germany  
Sorry for brighten the space now.....Oops!
Gilligan, listen to me! When you have problems because i changed my email adress in the header with a 'xxx' than contact me immediately or give me a time when you are here and i will give you the correct words in the keywords by the levelmeter i posted. You must please remove immediately this words. I do not like when an bestard here is overflowing my email inbox. But i think when you put this header in the pathfinder by DNSstuff you will not have a problem with. Tell me about ur results.
kindly
Clark
Is it possible that we can via Peter Tiemann exchange our email addresses. It is an idea of me because for effectivly working. So we can be sure there is no spammer.
2009-09-15, 20:31:51
Clark,Kent from Germany  
I now check again that Ip on the water(smile). and i copy and paste here
2009-09-15, 20:44:50   (updated: 2009-09-15, 20:50:35)
Clark,Kent from Germany  
Ok!
I made a little mistaken by writing. The correct name is COTONOU ATLANTIQUE! The Ip is 81.91.228.131 the additional from IP´s is 192.168.8.242!!!!


I have no bigger pic from the colours from this country but i think it´s okay!
2009-09-15, 20:50:43
gilligan,tcm  
to: clark

I acknowldege your need and want for privacy. As I do too. Let us continue working this way as to keep our privacy as individuals. The owner Peter _____ has been said enough and his email address given on this site to where even he is vulnerable to attack and lacks of privacy. We could be traced easier that way. He would get even more attention thn us. We know what we have now but if it isnt broke than why fix it? right? I am content in communicating this way to protect him and this site. However if things were different we would exchange emails freely.

You are doing a great work!!!

GILLIGAN THAT CRAZY MONKEY !!!!
2009-09-15, 21:02:34
Clark,Kent from Germany  
Ok my friend!

Your right it´s benin!!!


Keywords:
2009-09-15, 21:07:29   (updated: 2009-09-15, 21:09:12)
anonymous from United States  
To Clark

Cotonou Atlantique is property of Benin / Africa near Ghana - Cotonou I believe is the capital of Benin - Ok it is falling into place - if you have had a contact in GHANA or other west african country then I would bet you made an impression on a scammer so much he / she couldnt let you go and is continuing with either another family member or someone who was in this attempt to scam you all along / or thy are playing games with you / and may actually live there.

by the way Amsterdam is another connection with scammers in Africa and USA and New York

That is my statement

Thanks my friend

GILLIGAN THAT CRAZY MONKEY
2009-09-15, 21:15:26
Clark,Kent from Germany  
From here they send me the fake documents first! Called Domain trustbank Spain Madrid. But there ofcourse isn´t that bank! Fake

Email Path Analyzer

Summary
Threat Level     Source IP Address:     213.96.213.136
Reverse Lookup:     136.Red-213-96-213.staticIP.rima-tde.net ( 213.96.213.136 )
Country Path:     Spain
Spam Listing(s): 2     Delivery Time: 0d 0h 0m 3s Hops: 4
Client / Device:     Unknown

Details

*
* Analysis
* Delivery Path
* Sender Map
* Sender Whois
* Spam Info
* Header Input
* DNSstuff Tools Used


Spam Info:

This email was found in 2 Spam database(s) (RBLs) lists. (view listings)
Analysis:

This email was sent from 213.96.213.136 at 04-May2009 09: 14 AM via 4 hops. The threat level has been determined by analyzing the header content and by checking the in path mail servers against known spam lists.
Action:

Based on the above information we have found this email to be High Risk



Keywords:
2009-09-15, 21:23:25
OJAS from United States  
Test malice level on the sender IP with http://trustedsource.org
Note: 127.0.0.1 is loopback for testing your own machine. No point tracing this IP.
Also, 192.168.xx.xx, 10. xx.xx.xx are private IPs, no point tracing. What we need, is the public IP, the WAN address provided by the sender ISP.
You are on page 200 of 511, other pages: 1 2 3 197 198 199 [200] 201 202 203 508 509 510 511

 

 

Are you being scammed and this is your first visit here?
Read the welcome page/ primer for newbies.
Thanks to Eddie for writing it up.

Please also read Miss Marple's article about recognizing male dating scammers.

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture:
Picture Search

You have received photos and wonder if these photos has been posted here before? Because you suspect this could be a dating scammer, but you do not want to post this picture? Try the Picture Search