IP Address Inspector

M.Davis15 commented...

Return-path:
Received: from nm13-vm1.bullet.mail.sp2.yahoo.com ([unknown] [98.139.91.245])
by vms172063.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with SMTP id for 123@abc.net; Tue,
03 Apr 2012 10:28:54 -0500 (CDT)
Received: from [98.139.91.67] by nm13.bullet.mail.sp2.yahoo.com with NNFMP;
Tue, 03 Apr 2012 15:28:53 +0000
Received: from [98.139.44.70] by tm7.bullet.mail.sp2.yahoo.com with NNFMP; Tue,
03 Apr 2012 15:28:52 +0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP;
Tue, 03 Apr 2012 15:28:52 +0000
Received: (qmail 31473 invoked by uid 60001); Tue, 03 Apr 2012 15:28:52 +0000
Received: from [41.122.242.23] by web1107.biz.mail.sk1.yahoo.com via HTTP; Tue,
03 Apr 2012 08:28:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024;
t=1333466932; bh=5yDKZVAabAhhc4zaYu3AOaM2tUp9u8ldkRbNxHJr6QE=;
h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=nzvN6p2+PwH6Q5SJKA34Z/hvU5tBNOF9OkN/SiS7eKDQ5nTn0/+u7rmC+Ii44FU5lQuocQeVW9ddOktme/lB2tijM7ckH93X2vigBkzlW8QBQInNQLBfBRul7zo1DfsW1z5URq4BVU5QJmE5/Yp95bpMRoLWBMWQSF+Z+h2McTc=
Date: Tue, 03 Apr 2012 08:28:51 -0700 (PDT)
From: "SHAWSTAKERS AWARD 92"201292""
Subject: Your email has won (US$720, 000.00 ) {Kindly View The Attached File
X-Originating-IP: [98.139.91.245]
To: undisclosed recipients: ;
Reply-to: shawstakers040@live.co.za
Message-id:
MIME-version: 1.0
X-Mailer: Y
April 03 2012 04:24 PM

M.Davis15 commented...

Return-path:
Received: from nm13-vm1.bullet.mail.sp2.yahoo.com ([unknown] [98.139.91.245])
by vms172059.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with SMTP id for x; Wed,
28 Mar 2012 05:47:03 -0500 (CDT)
Received: from [72.30.22.92] by nm13.bullet.mail.sp2.yahoo.com with NNFMP; Wed,
28 Mar 2012 10:47:03 +0000
Received: from [68.142.200.225] by tm14.bullet.mail.sp2.yahoo.com with NNFMP;
Wed, 28 Mar 2012 10:47:03 +0000
Received: from [66.94.237.120] by t6.bullet.mud.yahoo.com with NNFMP; Wed,
28 Mar 2012 10:47:02 +0000
Received: from [127.0.0.1] by omp1025.access.mail.mud.yahoo.com with NNFMP;
Wed, 28 Mar 2012 10:47:02 +0000
Received: (qmail 83115 invoked by uid 60001); Wed, 28 Mar 2012 10:47:02 +0000
Received: from [209.73.137.102] by web84407.mail.ac2.yahoo.com via HTTP; Wed,
28 Mar 2012 03:47:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024;
t=1332931622; bh=DDZORtxe4h1ifcwsHGmb0jD20rChvUTyVvSkqQBMLZc=;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=nGgngHzAf2OUo6pFLTL8gBMHNErz9oprSKo8D077nrjlLsAcfRAmJb96FpqCmfax76+pz/5AKrn2stn7czNGGNdakrp/kk8gBoBYT3w1PlZqriXIveszogtTMwM4YrQvrM1CUXEjqXbaPxoIrur2HW5yX5CNsbKaeAEKYVB7pVk=
Date: Wed, 28 Mar 2012 03:47:02 -0700 (PDT)
From: Seasonal Loan Firm
X-Originating-IP: [98.139.91.245]
To: undisclosed recipients: ;
Reply-to: seasonalloanfirm4@dgoh.org
Message-id:
MIME-version: 1.0
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
Content-type: multipart/alternative;
boundary="Boundary_(ID_vyiKxHiyGrsL3680enRVyA)"
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 976072.73017.bm@omp1025.access.mail.mud.yahoo.com
March 28 2012 07:47 AM

M.Davis15 commented...

Return-path:
Received: from nm13-vm1.bullet.mail.sp2.yahoo.com ([unknown] [98.139.91.245])
by vms172073.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with SMTP id for x; Tue,
20 Mar 2012 03:55:42 -0500 (CDT)
Received: from [98.139.91.67] by nm13.bullet.mail.sp2.yahoo.com with NNFMP;
Tue, 20 Mar 2012 08:55:41 +0000
Received: from [98.139.44.93] by tm7.bullet.mail.sp2.yahoo.com with NNFMP; Tue,
20 Mar 2012 08:55:40 +0000
Received: from [127.0.0.1] by omp1030.access.mail.sp2.yahoo.com with NNFMP;
Tue, 20 Mar 2012 08:55:40 +0000
Received: (qmail 76549 invoked by uid 60001); Tue, 20 Mar 2012 08:55:40 +0000
Received: from [41.66.70.104] by web1109.biz.mail.sk1.yahoo.com via HTTP; Tue,
20 Mar 2012 01:55:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024;
t=1332233740; bh=Zpxu3nce/UG9dcjsMYDTQjlS5LYy8HbPMkXmH3sp1uY=;
h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=zkWJW7YcFemDVjcvGzD4AmIl3elco9uvSXzJiuzyMtA75Zm6Yz0CLiAgQJEHhV8IRCBGo45bEo8Ubaf9VlO+VmfeCH21nqcxokffrlFN/pLu7hLa5veJnMzMqQaw91/FD4dDWboDW05ZnPm6tLQlZDxF2QvvJI8mRld9L1cNhHs=
Date: Tue, 20 Mar 2012 01:55:40 -0700 (PDT)
From: "Mr. Naser M. Aldousari"
Subject: Greetings; Kindly read the attached message and get back to me ASAP
X-Originating-IP: [98.139.91.245]
To: undisclosed recipients: ;
Reply-to: nasermaldousari@gmail.com
Message-id:
MIME-version: 1.0
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.116.338427
Content-type: multipart/mixed; boundary="Boundary_(ID_AinP69kZkrJOOKS8LB1uTQ
March 20 2012 06:51 AM

H.User7043 commented...

419 SpamScam from IP 41.218.228.28, using above YAHOO IP address and 2 other Yahoo IP addresses as relays:

Am i talking to the right person?
Mr. Simon Dorno
simondornooprivate@yahoo.com.hk

This is the same Spammer, frequently reported to abuse@yahoo.com, who uses 3 Yahoo accounts to relay his Spam emails in order to obfuscate his actual location. Yahoo shares full culpability for the proliferation of this Spammer's emails, in that Yahoo employs scanning software that is not programmed to recognize Yahoo's involvement, since the originating IP is not a Yahoo address.
December 24 2010 10:50 AM