by monalisaa2
Sat Jun 16, 2012 3:22 am
I met this guy on cupid.com. He is posing as an agent for the UN. I spoke to him once and had him send an email to my dummy account and got his email header.
IP tracker shows this address to be coming from somewhere in Georgia. However after speaking to him, I am totally convinced that he is a scammer so I investigated his IP address: 98.138.91.88, which came up with hits from this site as a scammers IP address. It probably does warrant a little more investigation.
Mod edit: edited out op's email address. DJ
From Robertson Bruce Fri Jun 15 22:07:55 2012
X-Apparently-To: xxxvia 72.30.239.52; Fri, 15 Jun 2012 22:07:59 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: OQON9xoWLDurpx2wOrgCplDNqFB9eh7epsDKBMR.0MZxNYuC
pjf9VBGUhm_npRClsI_hfWP_oDG9tWPEa24kxXNAJ.BkrYMv9kY_kQtCpK4L
dJdTMIjhtxjEqmA_V.rnp62FzGTootkdcRx7j6.fjwmDd2QAr0mN22OdvtgQ
pndEClBUgHJq9i6yrmM_Jt3L46OLCym5a4OZEyo6dGlBAXqeTu9_8Rs1WC5i
SYCMQe7Y.k0OtUtjraJoOy6VLYV_nVnS4F0JrifqyVHoDOgpuz_ynK06qpjt
OEjHufl2ngnS1z1hFL9J1z1Cj7Rnn3EiIpb9byAHglXJBktGVdqqjv8ekrRt
XYAzzw9d0sui8OlwxaScZEWjGkiIZ7Tm0IsZbBQXMKT1SpUmgBULujvGok8o
TlrHZXYS9s5Zv4HNGKvHfyfOEN9MX_MB9GOfrkNQC9CRQe38gBh_X6._Y_Y.
boEMSopazSiqFlW3h1qO5OIxS14kezRKeurB1_ecJGKDVwf8d9YgFRDsoiYg
6pyFvnh.ohBspg2NmA508UgXULBx3QmTwsKnBPKGC0FMPN_cD4JUVcEfoxLD
38mstBihDIGjUcxS1nlovAaVAdnqi1a7ekb2OUGmxj1uUvHlxamTiwuQUCJG
N_KcK4Hf97So1JfvMNu2jXLRkbtEwdRA98C4Vxw0wWB4UdDmPBLZbTuXbLCT
Wsd_BlQn1i1Kiw3vxbHcpykiUQCp_ce5mGsDbiykbrTdQJg_UDOLDwE2HETu
FIlc0p2Fu_Ua1JJmYYJh.vTFIiJQi3S3OSO50RKBHK5dm.l0wh.xCOKgppnb
bdX3vGLT1WNRlGX58CQgp6ArMEkfyTFy3SraWIeWqvRzMmDDvV5tCYvXVEPS
I7oSl7rGvIitZXL7Dp2c3ufzu2taZPBFkL1HJE.iBuTxyrPO0WkCVfNoSukU
8ljH8ln2m3t5HHIt2xP8DxB3lnYc6v.8IQdNzTG.0ZGkMXcOKjDUDVUgCWQV
sjpD.wyk9ZRm0d2dNGyKg4Om0QDRAPVq19iDPawXJcTVEp6078LoZXTBxglX
MP1vA7hpOhqQAS61nR3khGO6uw_A8TPbypWO1r8jxEh7_TaeQaayCzl71xX7
BqO1kXjdku30LMdX_6Zrue_gmj2q3JDBYqYLhnl3au.0Y8ww.rdjq97k95ky
X4333_Cq8535tHjjj5GTT2W_RTaDMip6Tac9R1bsfb0CAg0bLOhfUb3FwcCL
Taq1M8X3kfNx
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1239.mail.ac4.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88)
by mta1239.mail.ac4.yahoo.com with SMTP; Fri, 15 Jun 2012 22:07:58 -0700
Received: from [98.138.90.56] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 16 Jun 2012 05:07:56 -0000
Received: from [98.138.87.2] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 16 Jun 2012 05:07:55 -0000
Received: from [127.0.0.1] by omp1002.mail.ne1.yahoo.com with NNFMP; 16 Jun 2012 05:07:55 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 42822 invoked by uid 60001); 16 Jun 2012 05:07:55 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1339823275; bh=pTfoeyY6U9X9W4dKTyDUyykp+O4HYuFH+yfuc8Ztnq8=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=jVUra5aFcYdcHY5Bwf1QhSA9XppnXAf7rPGirP7SF5SGLLFHMaEfyx/0TUBGk7JNypuI82fMZSyHv6FRalnP/tXQMco5RxyG3UZ/vqfTaMS5yAY5ODAJbKVWGJLFODdXu8zL7iYr6WaMP2tz/tAA1FHFyGXvrl6y7AYOFA9KMC4=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type;
b=VqpDa1Yi3TOVTYCnizsMIVErSM+ia3PhHsqx6CDCJGbFZg6SQZ6BNaV5IbOgGuLMrI4UblNeBvydky3kV3Wtrxhb8fFvLB5HWsB1+FiSAlUKVWpGSq6iHy8LHcEnRX0c2zCqe/tB1gq0gaYi+DH8ncRF/zG+rNYucOaigh4Cnfc=;
X-YMail-OSG: hx90v.UVM1nV7mQ4XYE5A2AljhCp_nhYk3KwNnRmK3WNwci
3zd60.LrAEc0wgtWKZO7qSlenSt0SaBJZ0n4bO44WBTDPmHJdsdr88qX7bTV
0g1jcAq5AMPKuNI3wZ23pdgUt3We5bjNYPxsOVXjBVM0bdHnB7nBplY9fVps
V3ySJHxXSMMJywScON.ohk3nwrETdy4Sps6G1_39FXg_kLHnZgBAEeDDtdMk
2n4GadBEeveSY_WBXkC_meM2vdloVh9DI9AbVOCtBSpe7Ix09JVtSsYQ9Zem
66N_M1fWRqecNjMVbuqn10gWeq_Mw0UpU6TOF7X5LAE1tO_MNjIvyJR7euWD
ITOmfTzVwBSvhXb0BnXxlrWXbufHTreofryYWD676AF6iz.HBS4OP7ghNyFf
wjQyFhp2miMk_l8fAAg--
Received: from [172.129.15.35] by web124506.mail.ne1.yahoo.com via HTTP; Fri, 15 Jun 2012 22:07:55 PDT
X-Mailer: YahooMailClassic/15.0.6 YahooMailWebService/0.8.118.349524
Message-ID: <[email protected]>
Date: Fri, 15 Jun 2012 22:07:55 -0700 (PDT)
From: Robertson Bruce <[email protected]>
Subject: here is some of my pics, and little about whom i am. hope to see your pics too asap.
To: xxx
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-876459695-802553290-1339823275=:42048"
Content-Length: 318945
IP tracker shows this address to be coming from somewhere in Georgia. However after speaking to him, I am totally convinced that he is a scammer so I investigated his IP address: 98.138.91.88, which came up with hits from this site as a scammers IP address. It probably does warrant a little more investigation.
Mod edit: edited out op's email address. DJ