Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by special55 Thu Dec 09, 2010 8:31 am
From:
Michael Boyle <[email protected]>

how are you doing this morning my love.. you are so cute and nice
i like the way we chart last night you are so full of passion and love
i wish we will be more than friends i like you so much and hope you will understand ok... we will talk later in night cheers


could you please let me know if the above is a scam

thanks
Advertisement

by Michael Thu Dec 09, 2010 8:47 am
Hi there,

Based on what you have posted I can't prove it with 100% certainty but my gut feeling is telling me it is a scam. The choice of words, the grammar and writing style make it look to me as if the author is African. If you want we might be able to trace where the email is sent from, we will need the headers of the mail for that though. If you are unsure what headers are or how to retrieve them just tell us which email provider you use and we'll guide you through the process :)

Account inactive - messages are not being monitored
by special55 Thu Dec 09, 2010 8:51 am
it sent to a yahoo account

he states he is from denmark?
by special55 Thu Dec 09, 2010 8:53 am
hi
From:
Michael Boyle <[email protected]>
View Contact
To: <snipped - Michael>
how are you doing this morning my love.. you are so cute and nice
i like the way we chart last night you are so full of passion and love
i wish we will be more than friends i like you so much and hope you will understand ok... we will talk later in night cheers

is this of help to you
by Michael Thu Dec 09, 2010 9:07 am
This is how to find headers in yahoo:

To change your settings so full headers are always displayed:
Log into your Yahoo! Mail account.
Click the "Options" link on the navigation bar.
Click the "General Preferences" link.
Go to the paragraph titled Messages and Locate the Show Headers heading and select "All."
Click the "Save" button to put your new settings into effect.
Once this setting is saved, the full headers will always show on your emails.

Or, to show full headers on a single message:
Scroll all the way to the bottom of the message.
On the right hand side, click “Full Headers”
Illustrated Guide: http://docs.department23.co.uk/Yahoo.pdf


Take a look in the headers and remove your own email adress from it - it may appear a few times. I have snipped your email adress from your previous post so it can't be found by spammers, scammers etc.

Account inactive - messages are not being monitored
by special55 Thu Dec 09, 2010 9:20 am
rom Michael Boyle Tue Dec 7 06:07:35 2010

Return-Path: <[email protected]>
X-YahooFilteredBulk: 98.138.91.1
Received-SPF: none (mta1025.mail.ac4.yahoo.com: domain of [email protected] does not designate permitted sender hosts)
X-YMailISG: 6BdqOi8cZAqQWC0XpUcD1ZFkUFlTE0QV63xahhcu_2m_xcxt
ocQnmIma8xDq4XScss0nnZoMv9yF.2AphA3r4fQPvzt.k8nFp2fz4PGlhQDo
GihrF2t2ol4OZVUpkMW0q7nNPRFV.9PVEUWNj6VuJLeHHWXOwpIZ0aREjpNz
AYEf9wuOVWlH4j5P7oh33uCOPAmA94nZ2uZ_UciaNLEqakMhzE94JoIU20xp
FjMAq0NwcV.QeAAvZhO1Vh2cTnEa2NqCkPX82XudHXj13.9GGzg1BYGFJFFt
yFm89wYMEja282GhPeGT4eFr5t8a5gQX9UmjQfNPhL81s8vZQEInKNClEvJg
RjRYTJ8_I3Sf5_ho9AR8XqzKYFBeessVhv4s2eRvPOQhFZmz0IjliLQInsB4
KDpLVQ3Pj7.GGefZIK8lhiOx40C.gctiMxcnUUc.ASE2ddmfYUbT.KYZ4ffl
q2c3AyALm6Q00bgjxsDtRDorAtMejClM_HJFEk2AZbanI8ISccW.xU.TZCqU
LD.yqbDJ1LaFj9.USU4Y6He5kbEkCwWeNOszLO95P5uj6YyF.dcGl_6Q9zzj
yXzG1qOaXUkFpXcuAxFYaGhol3O7Pp0Nwclak8VmxdozywuiCz4EplOe2F_E
fAgYYOvP5qCEt1RsU4Xro0bMFagwQEZAS8dklMChPaB5ctBjFgLj3mwrue33
og0nxkWYxu6UzYeCV0lvztspTInj7QtXKk1bDQDVmNsIsWrLNmbfVsQupLK1
qtro0W7z0I6Ix3DaYeCPELUmHBXEkURgrKuma0Ke0fa0owLVxsi3RQOffpm8
ITuzTc2aa3dKN1CUk0CH0CvdfumL3jFNAF2bNK6CjvKTaO118lLG.X4NEwFY
dA1iugzuCNuZGaLriuBaycQt9tpBRZgPZ9rCG.O6yrMpienj_.TT3VMy7xAw
5_vIxGK71b2VAmeNZMVZ4b1BnMW9_DXxuR3zr20rp7v51F8IMvRCRyfBmm3B
PxQzO6Am9Qq165Zt8IZpiuLLKuGWP4x3J0haz0jpjX4qOJjfiuPPJ2DgbL2N
maaSYvy.X2J_tZAP0ud2HgzNRy_NYVl80CIxiPTib9RZLFPZvr7wfELD3tPx
zJyICZUObFBz9d.g0egY8_3GUQseU_7twbjYn4f8ynGh.eIAJXjObH.U8T4J
tkKwaIZaRfCau.L9ZNvRq1.V3imtGlEGfvkcT5Wc6Q5kkhl423AYeDFp3P5E
a1n8X60ej1Hl9EC.RLJy
X-Originating-IP: [98.138.91.1]
Authentication-Results: mta1025.mail.ac4.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO web121201.mail.ne1.yahoo.com) (98.138.91.1)
by mta1025.mail.ac4.yahoo.com with SMTP; Mon, 06 Dec 2010 22:07:36 -0800
Received: (qmail 75941 invoked by uid 60001); 7 Dec 2010 06:07:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1291702055; bh=YLq/U84DksJbwNc4jN5FWBjoSpeXp2itfye+gI0q0xE=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=TUjjMjIQ3sWJ2ndsO/PIWflLj9YQ5hsx6KNI0e6l0o79tiPug+jGb0KtNLL+wzqXQlCTKrJ0lBjDfeXgC0h/40hMa6Msi4qxVYJ27BquKKPtQB6HFVlEGHm7vMc81vT54b3KvgH9H0PCPG38gnI0jA4Vnnulg2QpxD3rTcDClco=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
b=6GS1DM1jINsc+JhEc4b1R6v8vTSeZ900s3TU1Dx2ebCu+P6xP4Nr+E4nEybxcCpTn2YhGMvA/e6CNXqLfAANDcKH6k16nsbKl0LSGuGwYtzhy5ePKRraVJDfEBtXOXA91Or8N52E91GbN7q3ewgYhHSEAr0oEXKMkSW0LEFAz58=;
Message-ID: <[email protected]>
X-YMail-OSG: 45liaWAVM1nF2X.VRR0JV_HLlaYMgaCjSCwsBz6e9fqZPRc
P2BLVH7uvcmrsyCUh88yxgz6h0AWNMs_bjXcGMolCey7yaXjFx1NenSPtU52
vBjh2x19h_J977rxLdxpEowQueaISgozQqqcVWFDjGuWcpzKwjN2KtZkgHyS
Uy9Od6wjIGgyzcoc7wL1Xr56rnkkB3qe9XgMZew--
Received: from [217.26.250.66] by web121201.mail.ne1.yahoo.com via HTTP; Mon, 06 Dec 2010 22:07:35 PST
X-Mailer: YahooMailRC/553 YahooMailWebService/0.8.107.285259
Date: Mon, 6 Dec 2010 22:07:35 -0800 (PST)
From: Michael Boyle <[email protected]>
Subject: hi

MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1887089500-1291702055=:75117"
Content-Length: 1266

is this what you require
by Mac Ramses Thu Dec 09, 2010 9:33 am
Received: from [217.26.250.66] by web121201.mail.ne1.yahoo.com via HTTP; Mon, 06 Dec 2010 22:07:35 PST

http://whatismyipaddress.com/ip/217.26.250.66
Nynex are a German Satellite Provider. Guess what area they cover? Yup, West Africa. The GeoLocator places the IP in the West African region, so chances are he has only ever seen Denmark from the pictures on his VDU.
Scammer.

I am the son, begotten by Ra
by special55 Thu Dec 09, 2010 9:35 am
thank you
another one getting really fed up with these people
by Michael Thu Dec 09, 2010 9:39 am
Yes, that's what we're looking for. Excellent! :D

When reading the headers it becomes apparent he is using a sattelite provider. Basically this means we can't tie him to a specific country. However, when doing a search on the IP we find that it has been used by other romance scammers before. Google Search

There's no doubt here anymore. It's a scammer. Just drop him completely :)

Account inactive - messages are not being monitored
by special55 Thu Dec 09, 2010 9:42 am
please note the ones who have been contacting me have come from the Mature Dating website
by special55 Thu Dec 09, 2010 9:44 am
another one blocked

Who is online

Users browsing this forum: Bing [Bot], ClaudeBot and 22 guests