[email protected]

From [email protected] Tue Nov 24 15:10:03 2009
X-Apparently-To: <snip> via 76.13.12.136; Tue, 24 Nov 2009 07:10:32 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 72.250.175.188
X-YMailISG: <snip>
X-Originating-IP: [72.250.175.188]
Authentication-Results: mta166.mail.sp2.yahoo.com from=presbynet.org; domainkeys=neutral (no sig); from=presbynet.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail2.ecunet.org) (72.250.175.188) by mta166.mail.sp2.yahoo.com with SMTP; Tue, 24 Nov 2009 07:10:30 -0800
Received: from ecunet.org (ecunet-mail-1 [192.168.0.90]) by mail2.ecunet.org (8.13.8/8.13. with ESMTP id nAOEjen9026315; Tue, 24 Nov 2009 09:45:41 -0500
Received-SPF: pass (ecunet.org: 192.168.0.92 is whitelisted) receiver=ecunet.org; client-ip=192.168.0.92; helo=ecunet-web-1.ecunet.org; [email protected]; x-software=spfmilter 0.97 xxxxxxxx/ with libspf2-1.0.0;
Received: from ecunet-web-1.ecunet.org (ecunet-web-1 [192.168.0.92]) by ecunet.org (8.14.1/8.14.1) with ESMTP id nAOFA2jJ019256; Tue, 24 Nov 2009 10:10:02 -0500
Received: from ecunet-web-1.ecunet.org (localhost.localdomain [127.0.0.1]) by ecunet-web-1.ecunet.org (8.13.8/8.13. with ESMTP id nAOFA4W5006064; Tue, 24 Nov 2009 10:10:04 -0500
Received: (from httpd@localhost) by ecunet-web-1.ecunet.org (8.13.8/8.13.8/Submit) id nAOFA3g3006057; Tue, 24 Nov 2009 10:10:03 -0500
Date: Tue, 24 Nov 2009 10:10:03 -0500
Message-Id: <[email protected]>
From:
[email protected]
Add sender to Contacts
Bcc:
Subject: [email protected]
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (ecunet.org [192.168.0.90]); Tue, 24 Nov 2009 10:10:02 -0500 (EST)
X-Spam-Status: No, score=8.4 required=10.0 tests=ALL_TRUSTED,BAYES_00, DNS_FROM_RFC_BOGUSMX,MISSING_HEADERS autolearn=no version=3.2.4
X-Spam-Level: ********
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on ecunet-mail-1
X-Virus-Scanned: ClamAV version 0.92, clamav-milter version 0.92 on ecunet-mail-1
X-Virus-Status: Clean
Content-Length: 223

[email protected]
Hello,
My Name is Miss betty,I read your profile today and it was so good to
me.i feel you are the only one,i am interested to be a friend
first.please contact me([email protected])
miss
betty.

Link to a spam filter site in the header not needed,. Removed - M

Definite refugee scammer

User name used tudi4u

Claims 23 years old, living in Dakar, Senegal

IP = 41.208.156.155 = Senegal.

Site message;

Hello

My name is betty i saw your profile today and admire it i think we can make it
together, therefore i would like you to contact me back throug my email address thus [email protected] i will tell you more about myself and i will also send you my photo as soon as you contact me back. Hopping to hear from you soonest, UNDERSTAND THAT LOVE IS ONE, Bless WITH LOVE AND TRUST Thanks and God bless you,Hope to hear from you soonest.

betty.

BRIEF SUMMARY OF THIS TYPE OF SCAM

This scam has a romance element - whereby a scammer is "pretending" to be a young girl - and will send stolen photographs in an attempt to appear legimate. The scammer will most likely "pretend" to be all alone, parentless (they died recently and tragically) and is in now in a refugee camp, where a "pastor figure" allows "her" to use a PC to mail the victim.

The scammer will mention a fortune (cocao/cash/diamonds) ect - and request you to mail "another person" - same scammer or scam partner - lawyer/banker/barrister - who will need some fee paid before the "imaginary" riches are transfered to the victim.

The scammer "pretend" girl - will fall in love with you and plan to travel to you - and live happily ever after with "her" knight in shining armour.

It is all lies - scammers always lie - all they care for is the money they hope you will wire to them.

Delete and do not reply to this and other scammers peddling the same/similar lies