by monalisaa2
Sun Jun 24, 2012 6:01 pm
I met this scammer on Zoosk pretending to be a Caucasian guy working in another state. He immediately gave me his yahoo email and asked me to contact him. So I did using a dummy account. He replied and Gee look at what I found.
EMAIL HEADER:
From Jeffrey Peter jones Sat Jun 23 15:37:41 2012
X-Apparently-To: XXXXX via 72.30.239.50; Sat, 23 Jun 2012 15:37:43 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: aYPM3KEWLDsU2rZIOzbwz_zQR47ZFacnZpp9uafRThwau4H0
jj0aFpCwkC5QALiYR5aFqgIyQxBhGzgIl8euAqovhr5LZfl717TSapvqPN4g
2t6z96jO5GSN9sDT9btjJrkDkJEMSdZJ9SzlvBeV95uu9VC2gY5oZCOc1IQq
fXwkWMvOyEKuhUo7NpQhBMF6lEWG4mx2yoAYjHQtlqedjTUNml1IZeL6CM5O
_B.zug5V6YUz3vEBF8W9CDtu_ZrFLyemp2WfZ7adV7jP_hGm2baqthW1P3am
vz3Cw8rhS22NzpXxeR4fTEaXHu5erWPw8WtwAluohiM8fWUnsrDEKMD3Bk14
qaVRz1wpaLjTZdZu6uJxgyTZSRJLvwx1S0AtATx685SLjn23dxERkvxn._FB
gBJbxPAtkzGY9COpoNCneTpMcM9Xm4zFrBiga1xJxbFWlgzuR0w0n0mQiulc
c__JK2Ss8FtsWHmyrvNMAQHhZJQJAQTkoa361Miw96ORMBbjLEwCU.YiPRZP
hduNPba8YsDIxgjTzxzti9vYZM49wP1d4lW_N1y.UsUClD.sQm8HYruez4cB
fhBhGvjdGftZ117eoI3f.2K359JNE.0TYiQcdpDHfP1.YE7xIyCxDsrSOj2D
ho6Wdounanv99YEvoJo74dhZ0V6LwPJO0PJKgLWTeL0qucC8F3mNN_7W23GN
wWutSaS.Ca13X_hNhMf7JtKHk5mPrnI7QkeFvP3LnORX9T5FArB68YbRkq8p
XYz2emETRxX6q6mdSZk7M33a2JhcmXh1X3gJW4G4SNgqYAMvKkwtMZTZ8jRD
WRXE_bW65j06fHxrzDOg.KxyWeuU4EBok4OPzagXI3_NHcGVLkLVHPrz4lyy
rm9R3vvOmVMZTEnUmWv_lPurOccvbS35rQVdTTIARTCQTi7.VJFh4ikFPLTo
l5MITiWuz6F9V7whhOb9T8HIMp2gWgEsD_275cXa324sgAKLTCJZKh5lm0e0
TJC8iBPIxFZ8xj.BKh9WgQhCYOkfI8xQ07y_C_5cXINbRs3nXYyyFxkscyxZ
SMFgOvJyJk0A_u6DGAAb2lqrnJQnSPH81YaLCHXYdwKupRJ.JO9h7GGe7PPH
gWOXw2LBePYKD5HzZDYdPGGpOEQnVRF_zpLDo9zwiPHiouONRGZtbb5HQ1bp
wgoVF6o1ZsujfqKgubxwD._9S203_9PqhhDYraDhEWcufX_QJJyJS1BbfDVf
0aiOZtTQpSIAjBeH9Ol7WniLz8j51zTFkfT8W26b.iVk4wqegTriYDLPvtBm
I44-
X-Originating-IP: [98.139.212.176]
Authentication-Results: mta1123.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm17.bullet.mail.bf1.yahoo.com) (98.139.212.176)
by mta1123.mail.mud.yahoo.com with SMTP; Sat, 23 Jun 2012 15:37:43 -0700
Received: from [98.139.215.140] by nm17.bullet.mail.bf1.yahoo.com with NNFMP; 23 Jun 2012 22:37:42 -0000
Received: from [98.139.212.201] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 23 Jun 2012 22:37:42 -0000
Received: from [127.0.0.1] by omp1010.mail.bf1.yahoo.com with NNFMP; 23 Jun 2012 22:37:42 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 31601 invoked by uid 60001); 23 Jun 2012 22:37:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1340491062; bh=5MsMetOyhWQ6keJtZ2LryYlL9sr9dsq2NKx/wQXIoI4=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=Wm5/IvY7rqgDQ2Y8B6JeuYoHRxGqpgKE+iY99lR+DIXTVkn8VCeL6VY5aBcp//999UCnB0/BPtIg5B2lBAxNyRA+oC1HkfM8YtikDBZByN+06BYjymEgxlZYJ6r7q31pyrj2kLQce4Igjgvljw82r4Up2F8TFHVFpNag/f2H3V8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=bwJ9by+klBdV7JbawBTvXuvFR6TZ3lKQc8UdR6AEbN76AlE5r+sMEURyZ8eCoFIy1gDMiAwH8+ev6JF+8nVZWGWPOnLwuArg9crEEIch04+6IpG3/UZRl2RlrB37FxzP70GTat9M8BdxIk5Gl6YyHZJPkZfa4YkgH47yDxgZKb8=;
X-YMail-OSG: NJYeR7sVM1kB.peS2uVmySwGa177yL2sFP8WjpIQR2Ujmhs
FKB26YlEuMTgCgcmTcT0JEWanS6o9JLnfGld1LRR7OBVfMdwCCDYiBHw_0pH
6fACcxHDCuzqUXe3ZWmSnikwFJPKctHIH7clkKTPyWweMaJGEvJhqJWM4o5C
_1Va8.0CL3d7FTd9PJHq3pvBiUjhRd1jpoCaMF_lwQbsuiZ6kJ560S9nIPR0
dpKmtLiDGneOmx_P0kU_O54UabUnXoGiycteKqFWVoj3GaMf.VIpTcbyuc5X
mx0qZoNv7L0xDBYumdvXueVCbLPx_cmYKklisaq24bf7DNVlBXuh2eky2PPY
ZnFX_VkwVImIvUYTccE1eh1icVF4J9H9NIWDmrpbuQNp5AuNBGVSOIRJLHzb
9TOD4rGz.9IwAnygbeNP65_U4fhNHpUMY3DDrWo_Nrr7VlsWQX1w.gR6dyQl
x5Z6GJaeApNJd
Received: from [82.128.10.158] by web141005.mail.bf1.yahoo.com via HTTP; Sat, 23 Jun 2012 15:37:41 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.118.349524
Message-ID: <[email protected]>
Date: Sat, 23 Jun 2012 15:37:41 -0700 (PDT)
From: Jeffrey Peter jones <[email protected]>
Subject: Re: Hello
To: XXXXXXX>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="2058432387-645205618-1340491061=:35377"
Content-Length: 622
IP Tracker results:
EMAIL HEADER:
From Jeffrey Peter jones Sat Jun 23 15:37:41 2012
X-Apparently-To: XXXXX via 72.30.239.50; Sat, 23 Jun 2012 15:37:43 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: aYPM3KEWLDsU2rZIOzbwz_zQR47ZFacnZpp9uafRThwau4H0
jj0aFpCwkC5QALiYR5aFqgIyQxBhGzgIl8euAqovhr5LZfl717TSapvqPN4g
2t6z96jO5GSN9sDT9btjJrkDkJEMSdZJ9SzlvBeV95uu9VC2gY5oZCOc1IQq
fXwkWMvOyEKuhUo7NpQhBMF6lEWG4mx2yoAYjHQtlqedjTUNml1IZeL6CM5O
_B.zug5V6YUz3vEBF8W9CDtu_ZrFLyemp2WfZ7adV7jP_hGm2baqthW1P3am
vz3Cw8rhS22NzpXxeR4fTEaXHu5erWPw8WtwAluohiM8fWUnsrDEKMD3Bk14
qaVRz1wpaLjTZdZu6uJxgyTZSRJLvwx1S0AtATx685SLjn23dxERkvxn._FB
gBJbxPAtkzGY9COpoNCneTpMcM9Xm4zFrBiga1xJxbFWlgzuR0w0n0mQiulc
c__JK2Ss8FtsWHmyrvNMAQHhZJQJAQTkoa361Miw96ORMBbjLEwCU.YiPRZP
hduNPba8YsDIxgjTzxzti9vYZM49wP1d4lW_N1y.UsUClD.sQm8HYruez4cB
fhBhGvjdGftZ117eoI3f.2K359JNE.0TYiQcdpDHfP1.YE7xIyCxDsrSOj2D
ho6Wdounanv99YEvoJo74dhZ0V6LwPJO0PJKgLWTeL0qucC8F3mNN_7W23GN
wWutSaS.Ca13X_hNhMf7JtKHk5mPrnI7QkeFvP3LnORX9T5FArB68YbRkq8p
XYz2emETRxX6q6mdSZk7M33a2JhcmXh1X3gJW4G4SNgqYAMvKkwtMZTZ8jRD
WRXE_bW65j06fHxrzDOg.KxyWeuU4EBok4OPzagXI3_NHcGVLkLVHPrz4lyy
rm9R3vvOmVMZTEnUmWv_lPurOccvbS35rQVdTTIARTCQTi7.VJFh4ikFPLTo
l5MITiWuz6F9V7whhOb9T8HIMp2gWgEsD_275cXa324sgAKLTCJZKh5lm0e0
TJC8iBPIxFZ8xj.BKh9WgQhCYOkfI8xQ07y_C_5cXINbRs3nXYyyFxkscyxZ
SMFgOvJyJk0A_u6DGAAb2lqrnJQnSPH81YaLCHXYdwKupRJ.JO9h7GGe7PPH
gWOXw2LBePYKD5HzZDYdPGGpOEQnVRF_zpLDo9zwiPHiouONRGZtbb5HQ1bp
wgoVF6o1ZsujfqKgubxwD._9S203_9PqhhDYraDhEWcufX_QJJyJS1BbfDVf
0aiOZtTQpSIAjBeH9Ol7WniLz8j51zTFkfT8W26b.iVk4wqegTriYDLPvtBm
I44-
X-Originating-IP: [98.139.212.176]
Authentication-Results: mta1123.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm17.bullet.mail.bf1.yahoo.com) (98.139.212.176)
by mta1123.mail.mud.yahoo.com with SMTP; Sat, 23 Jun 2012 15:37:43 -0700
Received: from [98.139.215.140] by nm17.bullet.mail.bf1.yahoo.com with NNFMP; 23 Jun 2012 22:37:42 -0000
Received: from [98.139.212.201] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 23 Jun 2012 22:37:42 -0000
Received: from [127.0.0.1] by omp1010.mail.bf1.yahoo.com with NNFMP; 23 Jun 2012 22:37:42 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 31601 invoked by uid 60001); 23 Jun 2012 22:37:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1340491062; bh=5MsMetOyhWQ6keJtZ2LryYlL9sr9dsq2NKx/wQXIoI4=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=Wm5/IvY7rqgDQ2Y8B6JeuYoHRxGqpgKE+iY99lR+DIXTVkn8VCeL6VY5aBcp//999UCnB0/BPtIg5B2lBAxNyRA+oC1HkfM8YtikDBZByN+06BYjymEgxlZYJ6r7q31pyrj2kLQce4Igjgvljw82r4Up2F8TFHVFpNag/f2H3V8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=bwJ9by+klBdV7JbawBTvXuvFR6TZ3lKQc8UdR6AEbN76AlE5r+sMEURyZ8eCoFIy1gDMiAwH8+ev6JF+8nVZWGWPOnLwuArg9crEEIch04+6IpG3/UZRl2RlrB37FxzP70GTat9M8BdxIk5Gl6YyHZJPkZfa4YkgH47yDxgZKb8=;
X-YMail-OSG: NJYeR7sVM1kB.peS2uVmySwGa177yL2sFP8WjpIQR2Ujmhs
FKB26YlEuMTgCgcmTcT0JEWanS6o9JLnfGld1LRR7OBVfMdwCCDYiBHw_0pH
6fACcxHDCuzqUXe3ZWmSnikwFJPKctHIH7clkKTPyWweMaJGEvJhqJWM4o5C
_1Va8.0CL3d7FTd9PJHq3pvBiUjhRd1jpoCaMF_lwQbsuiZ6kJ560S9nIPR0
dpKmtLiDGneOmx_P0kU_O54UabUnXoGiycteKqFWVoj3GaMf.VIpTcbyuc5X
mx0qZoNv7L0xDBYumdvXueVCbLPx_cmYKklisaq24bf7DNVlBXuh2eky2PPY
ZnFX_VkwVImIvUYTccE1eh1icVF4J9H9NIWDmrpbuQNp5AuNBGVSOIRJLHzb
9TOD4rGz.9IwAnygbeNP65_U4fhNHpUMY3DDrWo_Nrr7VlsWQX1w.gR6dyQl
x5Z6GJaeApNJd
Received: from [82.128.10.158] by web141005.mail.bf1.yahoo.com via HTTP; Sat, 23 Jun 2012 15:37:41 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.118.349524
Message-ID: <[email protected]>
Date: Sat, 23 Jun 2012 15:37:41 -0700 (PDT)
From: Jeffrey Peter jones <[email protected]>
Subject: Re: Hello
To: XXXXXXX>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="2058432387-645205618-1340491061=:35377"
Content-Length: 622
IP Tracker results:
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 82.128.10.158
Originating ISP: Multi-links Telecommunications Limited
City: Ibadan
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline