Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by rocketman Tue Sep 25, 2012 8:15 pm
I have had some discussions with a supposed American woman in England that needs some money to pay back taxes. Here is her statement

Sandy Monads:
i went to british high court today honey but was not happy
they told i will pay some of 1450 pounds to the bitish high court
they told me that honey
in order to get the swore affidavit done
i have total of 620 pounds now left with me

Here are some of the headers from her emails - she is supposedly in Liverpool, England

Code: Select all1) Return-Path:    <[email protected]>
Received-SPF:    none (domain of yahoo.com does not designate permitted sender hosts) IHlvdSBoYXZlIGEgbG92ZWx5IGRheSwgaG9wZSB0aGUgbWVldGluZyB3ZW50 IHRocm91Z2ggYXQgd29yaywgZnJvbSBteSBoZWFydCwgaSBtIHNvIG11Y2gg aGFwcHkgbm93IGFuZCBldmVyeXRoaW5nIGlzIGdvaW5nIG9uIGZpbmUsIGkg ZG9uJ3Qga25vdyBpJ20gc28gaGFwcHksIG1heSBiZSBiZWNhdXNlIHlvdSBh cmUgaW4gbXkgaGVhcnQuIGkgaGF2ZSBiZWVuIGFibGUgdG8gbQEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzQCA3RleHQvcGxhaW4DAzACA3RleHQv aHRtbAMDMgJzYW5ka2suanBnA2ltYWdlL2pwZWcDAzMxAnNhbmQ3Nzc3Lmpw ZwNpbWFnZS9qcGVnAwM2MQ--
X-YMailISG:    lahsp7AWLDste9jlfglLkQW9e.2k84onjh8QofI517GaxA0R MiYODAvNB3SzXxrw3qGxjIQVUrMGtYip6AjwyQWAmG3e2C6o1Qv.a3CbzBST x_zIkWy1AAmPNBJGR6zl21cmMIYiIL23QShhEUCgdL7xYTMb.xKO2iVPeMIl 2N.SqLcv27q3joCa15TzHmwWhws4KV084fVKQSwIThc..VHldiPhW1qqpANP PBp03EsTFr7hVi0nZrkHVp7uBMVsZOlzt43yOdwrCnuUHX0K1a3k39HxOLsj 7i2EDQp1eIzz2V2Q7c93O9WX2dJv0hzTwmSqnzNzIRaAoCk_.MMSpWjzSSjC WsZZePZhaDoBtq.voEdhqP_lDmF5HgxObzv4ArnlcLMEOZ5kU2Qhx6gOt8XS xenmJG5KEZ4emAUMPuPk7S8nSCXjMCvidkLIojmTQZ6HgrxOXDbIJdEGkk1w .y12UXFy.0CBRV_G6j3C8Vm6OJRjXFjMamIAPxIS306hDQC3mDCchk.f28gd mZyYvwilp137XBx3VGpWyHp7.E1S220uS0gbBlWkIpDspXyUTPrxZCUn1OJO tNBIcFXJA9qGcyWDjE3357uAqP.FviJSZwiyffn1LVvWyHfu0TJJRIJOigCW fpOBVCfnLrUAiaLzMsbeXurRqaDDE50tcQknNFQfXhCKfPv.2DszWfRBiH.r OwhWBKPfELBUVCM_.O3EsNXs90cvL1DxqYGDRW1QilQ.1YpTupJ0SBVqQKU9 q7jDfDupeelye5nZ815dg8hFw4BW4xZDyEz.WY8n4GEug_rpkjgktU.E7zDY lQP_ryr.tAblH_5rqZC9tfD7ce3xWylHpx6o28d7VsWAszEpKOJtSlLbLFIL BmgGufb6VAC3kJjeoZpEDHOsyfCPekrJU7nc7ysMCQh41Ky8BnltHl1RexAS qjyzWoQPktF6zSYZGqMCLcF9WcvTzBOFbIGlMfgOQEn_LioIJOfeW1zbaFVr 7bMzy6FjNd9peX3Ds1pch.cGm.nqKOOsL9fz6R7ig4U_7bVfirxNOmVbInNA IEJMNAVjh5qL67_T2j3WA7nTu8DatOkpgfA3C7iUu333OxDqWKxzAoBm_qDe DY.NiSq2mVuI9dJj6pjROw4iTcbz_GvI1R89x6ssTEHhMjPxvdZIxnAHiQTh PqJOoDqcYK7h4B6CK135km2bsKnlzcRSEQudCVrOHeKLAzmMe3S6K89yzBSp lEjvbifZbbWQc6KYqzSdYiaCb3I3BGEJ6.lwq9RW9ZCzRaIMJj1fLzU5BG_n VO3dnuU-
X-Originating-IP:    [98.138.91.210]
Authentication-Results:    mta1021.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received:    from 127.0.0.1 (HELO nm22-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.210) by mta1021.mail.gq1.yahoo.com with SMTP; Sat, 15 Sep 2012 13:40:27 -0700
Received:    from [98.138.90.55] by nm22.bullet.mail.ne1.yahoo.com with NNFMP; 15 Sep 2012 20:40:27 -0000
Received:    from [98.138.87.9] by tm8.bullet.mail.ne1.yahoo.com with NNFMP; 15 Sep 2012 20:40:27 -0000
Received:    from [127.0.0.1] by omp1009.mail.ne1.yahoo.com with NNFMP; 15 Sep 2012 20:40:27 -0000
X-Yahoo-Newman-Property:    ymail-3
X-Yahoo-Newman-Id:    [email protected]
Received:    (qmail 73477 invoked by uid 60001); 15 Sep 2012 20:40:27 -0000
DKIM-Signature:    v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1347741627; bh=tfRdpYqsBcpFmPyntbKAm//LJ8eZCw7pd0zKaKhL+TA=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=IIKXe2j+lfyW6sUB3BTZ7JnuNwIyWbRkrJnXiacYfcPohUZ30nd8UTFUWpZwM2/aCLtsH/yeOPYEH6ewJbVxgmcQ00o6sSCmY03rtOHRP3MYtxySze1lcivO4jT/sD7rOziquGkEGia4LmiyaUeyHtKccAAkxbS0RaP7NMt0V+A=
DomainKey-Signature:   a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=VtXroRWZwfoSUDL2wauiFHKJ8d4QtVrNaeRRbUCOz9RiXsMxqN4ZUBqyBKJhyVYI1o9yzvmgPVzcM7KO49gDxMDSDO/XJIlQWL2z5HlOMHnxm6TtXZBQShk1rRym9XXf6ZVMaMVxXKjcVmnrTaqIG6yHAOvoBuRMriGuk0UcmHM=;
X-YMail-OSG:    xydcTIEVM1nT4KK5giLJTVFWDaYcH6UIgi0z8BG29yVw3Qh SfwHXPuzGCoiPn9F2a7PcpRSEPhneBkKFr._OrDYcWClWrovFKtFrEKHJjpa LpuwF1ZGhsT5IZHLFV9_EM3D1YvETvxah.f0Ixq92FCDUWcCH0rBBywl2ChY 6Ofh5WpWPvJGjRqc_wo5lAN9c9FOqEC0uJdc1NNPGLNN4iHqTGLRWKa63ZGx XB.RfstPCi_iCLzzOfNht32G3.YGW2_MN1KhLry8atFIe48m22NjNIqoa1hB WstQlJgV.jNobz6PTDvi4WukfuQSita5b_xz0aC0SZOQ_cInfobloTb0oDbT f.QdVY_2UO5867ltPzHABNRKzJXe74ReGYUo6EvGpogqvgZFQtbXJmxHlGaU 85rjwIjNQkgk5hOXqjY7argSUcCmWGnLN_qHNo47SwJ2RvswYq8JZZUIPP.7 1Rfg-
Received:    from [82.128.0.30] by web125102.mail.ne1.yahoo.com via HTTP; Sat, 15 Sep 2012 13:40:26 PDT
X-Mailer:    YahooMailWebService/0.8.121.416
References:    <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]>
Message-ID:    <[email protected]>
Date:    Sat, 15 Sep 2012 13:40:26 -0700 (PDT)

Code: Select all2) Return-Path:    <[email protected]>
Received-SPF:    none (domain of yahoo.com does not designate permitted sender hosts) YWJsZS4gQ2hhbmdlcyBhbHdheXMgY29tZSBhbG9uZywgaW4gYmlnIG9yIHNt YWxsIHdheXMuIGJ1dCB0aGlzIGNoYW5nZXMgdG8gbXkgaGVhcnQgaGFzIGNv bWUgaW4gYSBiaWcgb25lIERlYW4uLiBpIGFtIHNvIGhhcHB5IG5vdywsIHlv dSBtYWRlIG1lICwsIHlvdSBtYWRlIG1lLCB5b3UgbWFkZSB0aGlzIFN1bmRh eSB0aGUgd29uZGVyZnVsIG9uZS4gaSBjYW50IHdhaXQgdG8gcwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG:    PpEoKEEWLDt9qA28WK_7mdCWHgRxaYcCmrE0au6LInAyWKTL TXzZvc3EfqB4IAvyiuRIXbl1Q23HsBzGzLj_3tkj7pZbl8vRFlQgIxtNx.0Z tumL1he2O5AhCnls7xuHp_suuVhHNmKeH_y0Y8wRawKhLW.DhVpyOEl4M.5k yUhdG0zA5DszJq84lZz7Fpicwtz3NGKtNvJ0abcuyRlV8.1tMEybEMvMhAiL gP6CHWkcxNpsrTkBtnE5nJqOfO4uVFYR21gw3N3FW9EDGJ02MB8s.ksxjZoo pdL03kod.Ah2E1E_z9C8q85mvnixIsa3H83nuVt0FUTJcvdo7hO6oM4zCB_C WlckQunOfHQcM5t59J.6tDSk8p3kdXMsZP47qWWhoGEKTaAAHjMYrmwysx5C 3kS3lUnVVXsLbn0ttXaP7h9QFGX6F103tkpy7h6HKL8RNbeCq4wzowhtfLi0 Ofhp.7Ip9kHdp6eMNhD_iiYNPOVEDFOiPNFx8gALF5gKb7Yiu_2JeSmSbL1b 2CFyrGFiGksflVqqvp4xL6NcNmBWveEbMSpaMyFlYI649uNn_JR11uckrLy_ ObkgBD19n3lazA2xfrCSIUyhSinzSjf9UccscRb3Pkd2zrSz3v58Pspjinky bI8NHotNYY0W5CUPwjGt8646IHQe09QkC0Tnue7THxDspvDXcuAIZ61xS4To mwuPJmCPLSsK37lkpAXMmIZi7pid4u3Y4N4nzDyiElX6kje5CwvKXFtPjRfR zV.rTVNF1HuhJ1U.01Vd0JgMEWmE.xtKyUnQKw.rejEazWn2G_mgMJwicFrX cHkf6jiohWsE7DDpFGJUteQ190NjAaF7NJi2NB26sm9hMM8.PpZn.LtIP_UL Mlx4KQQnwi5WoVS5gTAQWifnzhvvkq0ossJZC_rdSSWJ31O90JAxVSGAMcnN fWyJUzLLNU4RyPhmE8sPu_sGDzZ1tEhE0BU2ylbvDuZWMAGlnI.d5KLqYSMi j9VPxD4mK5ciAAKTtne2WRTFyHycjxRjGcUaipOEi1oyn0I1HjXNKpfDACLT 2hi.SdF73xVYfsbFkD0rWwrbLRY3YgFtJYjRckOwtv.g8Y2_BkEYdkcalhrv FMcsWvxLcZtZWfAA3uvbPd5GWtmgDKE_Og.4jOBM_j8kZOUVPJbGcPkbD94d mLiJzOu0pFEwosoSexiz2ncMryJIWdLpMedZunHzrKeJAmSYcKLYjheaEOR6 QxJ.29rvqO.kQu6LyViUVlySKk3_PcSVPatDl8Tbqh1zYorEN9My5O3iCOxG _w--
X-Originating-IP:    [98.138.91.137]
Authentication-Results:    mta1005.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received:    from 127.0.0.1 (HELO nm7-vm3.bullet.mail.ne1.yahoo.com) (98.138.91.137) by mta1005.mail.gq1.yahoo.com with SMTP; Sun, 16 Sep 2012 03:45:51 -0700
Received:    from [98.138.90.55] by nm7.bullet.mail.ne1.yahoo.com with NNFMP; 16 Sep 2012 10:45:50 -0000
Received:    from [98.138.87.2] by tm8.bullet.mail.ne1.yahoo.com with NNFMP; 16 Sep 2012 10:45:50 -0000
Received:    from [127.0.0.1] by omp1002.mail.ne1.yahoo.com with NNFMP; 16 Sep 2012 10:45:50 -0000
X-Yahoo-Newman-Property:    ymail-3
X-Yahoo-Newman-Id:    [email protected]
Received:    (qmail 92753 invoked by uid 60001); 16 Sep 2012 10:45:50 -0000
DKIM-Signature:    v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1347792350; bh=Lf5ls71rRtHOk58nWilXT9OWpRgNXJJvvdt1bBI7rOc=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=p+j6uzERqPjGT+ZcnJS0yulksxZFYUnA5NbQrEzXCk6u6X7p+l67jbsEaMQIzRocVdZcOeppMsz9us72A4QgP7LGEq0rcacva16LbSIDTdjo6cZCFxSKnEuo2ckVO/o8tr35kA6hUg/BGQS2ha1UIWboVShxrmVsHM9IivfJhgI=
DomainKey-Signature:   a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=0hNaoFLGLrXIbHXT6VRs0pTiTu+owHznzi74lXYkM8UiAe9yb7RfoFu/dVl5ZYSutwhJAC4DBAGBOajEWZFTTRooYA9G6Tyruj8+oAVhUDOJMy6TKDzgSVJ2rgy5keweY19658foEGOKA7MSnvPtpotGUEd//tvatfX9UHoq+WA=;
X-YMail-OSG:    aViY8_8VM1k_.7b4P._nce8o_NLHxw1P13lENvxp6uHyIZ0 e_JBFpb4WR85tPlwojSO5jJOCJ9vCBxcyLMWpK9jsrmvr4Dap_5YuG5oinuD iufroim9QGkYqQAA8.qe8a_2lqhq25wUthwAx7jAZNliXi7qQy9qMI7dqk_D ex3ZtvBLOzl3pzJLCS7nNHTpRJXgiu_jKtruhIRQE2tbfeewBZVwXfFOXWqO AuDE1ZD8ofMbnEZP9uJKu.iesoNybEsG9Eh8H4OAW2aHRdM_LYzsTLS3TwtU GWCmaoGABRT0UXxWzdS_hGbxPc.o0zTw9PKSyPzSGxzPnz4FyippMs6P6o5d XhLMxWOlrErYwHWpLjkiVGAHnnPe_JHcYQ9AlkAMJx5LeBAE3582qnSrBmU_ PFOVU0x2rQsJ6tgsYBZR0RyZ2.hzOz0YT8euD4xqXy_TJAMpX00o8biodiwZ OgfM-
Received:    from [82.128.3.198] by web125104.mail.ne1.yahoo.com via HTTP; Sun, 16 Sep 2012 03:45:50 PDT
X-Mailer:    YahooMailWebService/0.8.121.416
References:    <[email protected]>
Message-ID:    <[email protected]>
Date:    Sun, 16 Sep 2012 03:45:50 -0700 (PDT)

Code: Select all3) Return-Path:    <[email protected]>
Received-SPF:    none (domain of yahoo.com does not designate permitted sender hosts) IGhhZCBhIGxvdmVseSBzbGVlcC4gSSBtIG5vdCBzbyBoYXBweSBhZnRlciBp IHJlYWQgeW91ciBtYWlsIGFzIGkgd2FzIGV4cGVjdGluZyB0byBiZS4uIGZp cnN0bHksIGkgZGlkIG5vdCBhc2sgZm9yIHlvdXIgYWRkcmVzcyBmb3IgYW55 dGhpbmcgYnV0IHRvIHNlbmQgeW91IHRoZSByb3NlIGZsb3dlciBpIGJvdWdo dCBmb3IgeW91LCB0aGF0IGlzIHdoeSBpIGNhbGxlZCBpdCAnJwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzM-
X-YMailISG:    YqEpTnAWLDthNCddKxcXdLf_7dzhEWZ_CSDW7cCr_TZqDiV9 hZ98P.v_v4fTrVXv8550bAtf8XqvoqID0GxL272IMPedIfav8Eytf4N661eF BuROlOOu5CUeBTNwpZiQkq6k_DLTyVK5UZuaHrf6XVnpLwIMuOuFkMR4b47k IsY7LB76HWl8E1eYU9ks4cbqWb0XW0ltGS6KXmWpHOL_sYiosbzZ159b6CAI 5tb6V2HmOlmAtyCMQkYk9pCy.DweI0Bb7dV7jaWZpqOXUhEX721sqwAISEbs nc2Yp1K2roM7DGX.iUfOQlSLPBI8GSrXc7cnjqCzIW26M9zcrR2Wz6mgyjtS PayXtApdwEt0YnVmtN0LuzxgbHEqaLMyetLLqsW39g9qp1OYuPYGH4O.GL3C BrcghbOkhRtBiY60uAUUFoSDOmipjmNiCffplV_lineHAOaD2A7RWEabwdTN _89p0V2qP4rB9cndDhKy5Nvl.CquwmYz.DE0rEeYP9hmdyhWHJtdJhuHBcsh 4PVxEJL_gq3xluxH9bJq0m0IqOPrGllJ_VukkUbZ20P0Mnp1vy0bevo6wCVC IKejhxs74xav6ipfZaJT3bQsQ873BJCbYDnu6QfO4tkoB5wD3oUT274EM3LI F7tMHgyr7krUCbbNOsf9MEQQpRsC4OfY.x5O1ZOzuSXHZobrBGPs0Kyead_J CS0HYdtMQ1LJugj9_uHifCXlHxn5kiv02sj2G.NaCLGdknj_yr_qPYgqEUmV Fwn5RpbXP8r_S1koc_LAKqTtGNYcOgSGOojqOOkocH.nwDtppU5SFF0018Uv O05BD.6bVDSf.8IP5SOtRVVhxOQdgWmFIlgC9FqPUgMkuCvD0wHyofgomVBh iFAKf.8zRsOSPsY9RBwUgNBQDc.0Fp03B0vfa_SDymbhFV6oHsKDj3h2sehL pgzMQhK._m14PrG2raI_Opd0sTd756ueQlK_oybZgSPUFO9gH1vB.YcAV0Zi EHmT6OogAf2DYG6NY_ul8Ezb2fs3UUb.fMMdepGF_Bf_8fUbylVDCoJys3VF Jg0yMCoBAOTLsLeLJx_JAHJG_7cz_SaAwjFVEbZ_xVDrbhj2Sz5DzJg7qKsn NFElmoWXtRywGhoEXNnfIvJ4iFGyJsip0bCdjNyFgKwKKVT8JpdUwGA2hVWX Mc23GXscNmWNAlaP6bjVLPHPt1smRmFQK5Z2jvlzfUqUnBgpqIksvUAIyPjt KAKVRuZoi7I_hbusy1WPzTAq1A81E6_5.WXoKiQ2
X-Originating-IP:    [98.138.229.52]
Authentication-Results:    mta1330.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received:    from 127.0.0.1 (HELO nm32-vm4.bullet.mail.ne1.yahoo.com) (98.138.229.52) by mta1330.mail.bf1.yahoo.com with SMTP; Tue, 18 Sep 2012 05:50:30 -0700
Received:    from [98.138.226.179] by nm32.bullet.mail.ne1.yahoo.com with NNFMP; 18 Sep 2012 12:50:30 -0000
Received:    from [98.138.89.254] by tm14.bullet.mail.ne1.yahoo.com with NNFMP; 18 Sep 2012 12:50:30 -0000
Received:    from [127.0.0.1] by omp1046.mail.ne1.yahoo.com with NNFMP; 18 Sep 2012 12:50:29 -0000
X-Yahoo-Newman-Property:    ymail-3
X-Yahoo-Newman-Id:    [email protected]
Received:    (qmail 38673 invoked by uid 60001); 18 Sep 2012 12:50:29 -0000
DKIM-Signature:    v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1347972629; bh=4n1MCj5k8MhIkyCG7PkPcGNf+pU4J6XE4rwMGTfz1ek=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=sALDiMdNzkK78257yDV29QMtp9L+7dO75YO2OqD37Zc7X5AYXJQrYLKhDXOSvZ5awJAyY579z9MemXqAU654RNRJkXPCggjz2hXmkZ1KYTT4IzzpuPGhfNH/ZIh3Q2sgsFtL8gwytsPU6tZWBz+X67LT2+CKf0jdtH9gXVUaU6Q=
DomainKey-Signature:   a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=A/rvXMsexbLb3yHhtr1Zkq+SG/5RhOzwpgiO7904DAdqEtXTa7mhB47g9vbcJ31/zcTb0powz//uax6AiE0QjTyXGdclUbBr87CnTjPoT4RTL29chYgq5CvLZd3czwVZIs9fo6HvjbEaVolQFISpC2xIjiijqPJqyEhp9D1vOAs=;
X-YMail-OSG:    9eaIilQVM1mqUtw3mpBSKbC3lNfKskLuoxL7ZLgcfEdMPFy s9CG4GS4fbplLj8FDslkWOYCqKhjVtK43quxFBowigZGXjm58PeG.O7he6W5 LoTWoTGLlJ.AIGtIZclKRxm7n5snRdf9V7ZSOZEzHCfZ_OCR_Ux8XkLu.mKj 1QK_kmJfGUOpIREIWXG.HP3lHoT98Ntl6wtx.UiAjg_A3msNyxVy_fXypvRU Or7bUb0tvAl7WkinWvGLx9ftE3OTuPGdVZLoVAswRi._qgpGhZE_mE0iOu2_ rmMvxzExAhc88rHNgMcUqySiwSSxIkCF5d7pgszGu9u0rUfwx.9Cseb6ITtG 2KrLc8bwYF06bidLfnqthpJwhNvHsLojr9jTLjrrIDbxh3TxEO8wG_wY9qUh S0n0LS_dWLjJcsftsLfFrKxbb6o2NSJ2h2L1FmK9Cf3ai
Received:    from [75.125.151.194] by web125104.mail.ne1.yahoo.com via HTTP; Tue, 18 Sep 2012 05:50:29 PDT
X-Mailer:    YahooMailWebService/0.8.121.416
References:    <[email protected]> <[email protected]>
Message-ID:    <[email protected]>
Date:    Tue, 18 Sep 2012 05:50:29 -0700 (PDT)

Code: Select all4) Return-Path:    <[email protected]>
Received-SPF:    none (domain of yahoo.com does not designate permitted sender hosts) IGRheSBob25leS4gaSBqdXN0IGNhbWUgaW4gbm93IGFuZCBpIG0gYml0IHRp cmVkLC4gaG9uZXkuIGNhbiB5b3UgdGFsayB0byBtZSBvbiBtZXNzZW5nZXIs IGkgbSB3b3JyaWVkLCxmcm9tIG1lIFNhbmR5IAEwAQEBAQN0ZXh0L3BsYWlu AwMwAgN0ZXh0L2h0bWwDAzE-
X-YMailISG:    V7C82HsWLDvy8uH9ebUl1wp.4CPZZNBqVynpHrAZ0NW1unoM WgQLMBrHCpWsZwIgHlnFoQK4sG6HDvmbo7tIj2i.URoQe6ishSJgEQ0o8bS6 phsps7X7Pwq4D8Loxwo1kcxC7DI73osgaQQwYO4B32ugcyzdYGzbNzq8Ib2_ _n_zcR9K4SU77n9XOnUwcbZdMEewGT99YlBvWJom.iqA9D3E6J8dPYUIMAGl vx81bNe.iTOFOFpaBkqAmLd.dHWgsjyRWbxHha6z31OivQAopKo.CZ6eQeCi JUo35WyA8_ie7kwNZ0BulzcxisBTJ.zptsH4NNzwJ_pwIqFhJLFaeh_NUOGY pee8_NkDEZ4ZgK2jtnnzIJi8b6znH3FtroRVhvhHe8bDsN32BKQQGXfZCVD8 4zRPIAVlLAZ21AZjXbV44at3q4ungc.zkx_GohseBZN3oFv6SbDFkEvKlCQP 6UV6B7xhSXovZpaX94vCvbNbhT_vgtWm3kyc9iQKb597doCMKxd.B1ln_fDj 6NM9LCR3gT0_7X.8QxfGTyI_flhEz2LF4.0mXIGWWWkDXQ4CJzVSEWuBJ1tY J638luCTTNYcf84.W5bu_HD.LGGxXo5o9LneASMCLmH_Az29lqgImL8DSf1P NFgp0YsZV253qRTpkVlPJFBKjBZ8z.4agd.lspytMP7HwQTPikwK4BG.0Ol9 HMxd6XFbGPOgwPkAOD2ImbyFdSMA3Ggv51UMKpaAtxDda7kDSVhT5M0xEZM2 _xYQxKghmMg5ftDbWdq8X8qU6r5akS_zkBaxjxgiBEzIKPwGEJ6a.HLc9ALr PrwZ2BYri15AKo7QQvyRmNt1xzU291G0wDu_Q_Xfi_o200lQH2D6dvvL1.uh UgsLKjmOPzO98Od_WJ6WTxIdv17Kk4AiZP1Q_ln9auCTprDjj_giZWXzHN7N hO6.gWDe_WlK5Gs7Mxejq0UIvY_zUgdxZKV8BSkAUA1.8dCs5jZpz4B2Bfn9 Pj3Tw9xn_C.I.mdWwHumnA3K.GKUQvxfQ5JXiwXvfST2fLSf_KjnpYlGfvIg EqepsEVwI9jY2In2KcmdU1lYlmyMbpczvHU8JyBzOcP4xiu22vjehJwzO.GN 5ylysB4smEZcbC5zjLQHDJIDqJ6fT4mJln4QaOWj7eay9RVlVmN_fPVImE3. 9KhfYIn_LFBPeQzjpfjbZMjfzdDs3SgSe69PXtnevvkwfB9yRwElXKiRhs1y 4ZFNbow-
X-Originating-IP:    [98.138.229.84]
Authentication-Results:    mta1046.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received:    from 127.0.0.1 (HELO nm34-vm4.bullet.mail.ne1.yahoo.com) (98.138.229.84) by mta1046.mail.gq1.yahoo.com with SMTP; Mon, 24 Sep 2012 11:24:25 -0700
Received:    from [98.138.90.56] by nm34.bullet.mail.ne1.yahoo.com with NNFMP; 24 Sep 2012 18:24:25 -0000
Received:    from [98.138.89.163] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 24 Sep 2012 18:24:25 -0000
Received:    from [127.0.0.1] by omp1019.mail.ne1.yahoo.com with NNFMP; 24 Sep 2012 18:24:25 -0000
X-Yahoo-Newman-Property:    ymail-3
X-Yahoo-Newman-Id:    [email protected]
Received:    (qmail 30283 invoked by uid 60001); 24 Sep 2012 18:24:25 -0000
DKIM-Signature:    v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1348511065; bh=7rMBj7cvD6guJGNTy7RfTwFt92+kFqSiHyrph6pV/og=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=rd2jDnjCrOXdkwruAKK4AIYeOtYLV2YA+eWJZFu/caBPtLvkL+lCGobSYLpo7cLxBfLBbhj4Af6knTsObQF+hw6Va4+ilGL4Y+L28x6tT2v6ordTqYzSsRKNSxFmrRp5tUJnNYOmlkrh0WFGAWwkaSWXe88IEiBx51dV9jwU6BI=
DomainKey-Signature:   a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=u4BVHjRLzVsXCFS7UpuRB/S1lLzwP3df0KDFnpmKJD4shkcsYmtN+zmrgCYvAqxlL/MZDrYQOQk+aww3OSheCIPn2qToeV3GI7DyxBEcfLfZ4ew3s7eUarazRZ3zszmfxzXR0PKHLuc0/a0BUIfYMN1VhmRUIpFMj6ZxrWmI8BY=;
X-YMail-OSG:    WL0J.NIVM1mqlPeAqdMUJuw75L_W5iItHu7PmgsULOU5tg8 zg2jKYfGOZYWfCuA5Bg.tVK6PN2jt8mm47xcdFclx28ICCqNVpsofdjAX6H. 4uKtLHOzql6M5BUSGkXjyeM2nSKMW_CZBvtaB2upTFTO3SIRIx5En6wVmyvV OAc5SimZPClB5bg4fpwdf.OsjF4U0aU.2W6Wn3g2Y01fkcom5HKZJDdNzn2_ Dv94oGybvG7GkY0BavN1UwByUraH2pz8qV7MJHpq6f0JK4cuumGm1cOEFKRP PPI.Io9mwMqjUCGQnBoO_naUeuTbzMSnOD0sx89wpK.Rv4inG6dOkr929aWj BLJI7tXI7EktmfjvEoCrDd4fKiMDN0ZwowfBb5mCbmn8.ljxVLFqe043iumG pwd_n5HH41gDl6Ibb5aU194ErrqopH2Nkrsz_P_78ggNpKbylwDz8aOx.6Vb KIv2OUqSf6g--
Received:    from [37.220.17.226] by web125102.mail.ne1.yahoo.com via HTTP; Mon, 24 Sep 2012 11:24:24 PDT
X-Mailer:    YahooMailWebService/0.8.121.434
References:    <[email protected]> <[email protected]>
Message-ID:    <[email protected]>
Date:    Mon, 24 Sep 2012 11:24:24 -0700 (PDT)

Code: Select all5) Return-Path:    <[email protected]>
Received-SPF:    none (domain of yahoo.com does not designate permitted sender hosts) ZXksIG1vdmluZyBoZXJlIGFuZCB0aGVyZSBvbiBteSBiZWQgYW5kIHRoaW5r aW5nIGFib3V0IHdoYXQgaGFwcGVuZWQgdG8gdXMgdGhhdCBuaWd0LiBJIGxl YXN0IGV4cGVjdGVkIGl0LCBJIGV4cGVyaWVuY2VkIHRoZSB3b3JzdCBoZWFk YWNoZSBldmVyIG5vdyBob25leSwgYXMgbXkgZXhwZWN0YXRpb24gZm9yIHRo ZSBuaWdodCB3YXMgc28gbXVjaCBncmVhdGVyLCBidXQgaXQgZQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzE-
X-YMailISG:    IORz_BAWLDuNsgvFUY5sK0YCOMIQeby4Kgs7P9AH4Wq8e53L z2mOO6WOeXAklV5AB_9OzOh4Z7mWxkHM5.f_rxM5zyUno9CTNZK.Ae1rSuuH 1PCJ5IsD5wHchwUCAaYzrPmWVKXMLp2IHP.bTIi8bgFB5S9mgxB4urXRonlZ uGAu.DEx__CjJClAFK95XOqr0Z.Bxfmfcv8V0goym.QDrLEGBOYIVzPyD.qF AdhYZA9rEuXeAl7.mv05n0rtLJvHELV_ooZQTFlVxtK3GMrWtyhfqHG2MxC2 2v11rhME_Az2qu9nEmw3m.Qq55j9iioRck3XsnEoSBaMQ_MN.27Jt0C2G91C 1.eM9LofaKSHjH3zhC2PRDYKFPFDo5Kf9Rsc4a7famkbfCVVmlSujFECSDkJ N_.Z90SkEcC0kV4yqiKvCYvvjJI58FqaWacWX7VJ1VCkXxglTmyHc6JvbnuI _AU_r6dykfzlPBF.3DXuPf6VoX5w1c5VB1QYWwW_l7xrsKUYQuAN4HuzOuvE kB1OU80aa3ip4IaVseYdHaVeTpZok5hBSChm4ceXmhZ9mzzHwsq1fsfzRaCq 6rXgi.KFveGlj0DVmC40uzIlWxi.PWjGjoLH1ZXQggxJ4QBDB1nq9plhb8Sf 1UuPa31CoBEeOGW.XyIBc0bGbMLg5gytqr1pq7b70BRZuS7LYA_P6bee0yXf GHRIeXBR1Uyafh6aTTcvJU8m5MDFaTJxk8OUq7BiE5.nPkLQPeeHMsxDeDPd xmK2sZ82FKd0U4aFwWEx0XlmEj7JEsZdfs58T5yUu2iVanL0SeZ003wlUgXw 4qoJx9zN4Z59NIEPuJT_RiPv4.QSgiPceyto1gkxrgztyXCm4a1JA8HkTrd7 a8_v6r2fePEF8iBEH86EmY7CiDSbgE8zkmqAww.frk3a_btB0ol1z6hgHQQx U.I25PLYevWYxCuPQdW_sC8BWwG4A_5f_hiCv9blR1bY4dK8V_D48mSPUluc rZS0BTezAeOeNqIHwfRzswR74Khlr1xnX0uGsmP3b9ECgJcdWXpMGscQBrVt IAOlcVmQ3fF6nVF.R_27EmWGVpEPdJcwrP6caSwfVE_rPI.L5N.DFKN3Jekd KUoayyEDqwHrpNQfrL4Guptg4XtB5F7v.S35cGieMIumjJxGgkz93fd.5rQP _vbw.ece9jehf7rxuXTQslO7Zk3gRtVmlFd6ZvMtkn3fnGAJlg--
X-Originating-IP:    [98.138.90.47]
Authentication-Results:    mta1127.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received:    from 127.0.0.1 (HELO nm9-vm1.bullet.mail.ne1.yahoo.com) (98.138.90.47) by mta1127.mail.gq1.yahoo.com with SMTP; Tue, 25 Sep 2012 15:21:20 -0700
Received:    from [98.138.90.48] by nm9.bullet.mail.ne1.yahoo.com with NNFMP; 25 Sep 2012 22:21:19 -0000
Received:    from [98.138.89.174] by tm1.bullet.mail.ne1.yahoo.com with NNFMP; 25 Sep 2012 22:21:19 -0000
Received:    from [127.0.0.1] by omp1030.mail.ne1.yahoo.com with NNFMP; 25 Sep 2012 22:21:19 -0000
X-Yahoo-Newman-Property:    ymail-3
X-Yahoo-Newman-Id:    [email protected]
Received:    (qmail 77123 invoked by uid 60001); 25 Sep 2012 22:21:19 -0000
DKIM-Signature:    v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1348611679; bh=iljYoSZCV2uah/W/i7vGzDLmfxl3N3Z0QvY45+pIsA0=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=yaM8KUG4jmfxmlYkLK8kvblhpLk9nwtrNg+MqrJ/2yXNrOSG185QouW3xl2gyilb1Tgf3VoIHgX7IU4SkchW7Es6Oj4jt//itIfW2JPWmaupBTpnkdRArR665W7mpyaoyqERmQU0MY2J1uEjC7ksOpWcUU6Dqknjhp4+SsTl/0M=
DomainKey-Signature:   a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=zHHai9Yqpt8jDKObhOjCRHejDnKouIraZ695JAu6SAge/JHlB8+qmvZzzyyqGVEelpgNlvlvfvnJ4Qb8mvz1xgOrmZ6nb+y3bVQbAoz7gxTYnBgw8IyXiS3hLuSviD9xsdwClBgYT1DQhLkrO0QlvTcQVICPgENtrwgIW0llMQs=;
X-YMail-OSG:    9hvSwkMVM1mTwxN0_VWXD4gcPTyLQTw5igXFvObegdv1Jb0 5DaTDIW39pIiS1C4JEVGaAsqyj6f0KzMvEVg3uUtLBs.qb3ssRPmHzYLbZeI Ph.5nKOOLKEsVlSePQ1jl92_aJkHynqH8ZUylw2sYpDBcUJ_bebUG_pkNyTO G1dDqBOZ84HI17EkXPuhSYdA9Abs8_q6JGjlRK6cZHNRirmzpwqLeBboAli1 QtumiMlQn9cx2ISN1zWNYfM9dnCzdalaRl4y_qKm1Zzndl9k8TrkZePvG4Vr F.Ng2xShTMSgpk4AUOEpPYbgNRaLT8hxMKDbqbFq8cFWSI2or7pBc1qzm_V. cgQdB8nEMtCJNtz.4Is.WMCZeLqx6mtBS3r9_sKQZJUx0FpRrfYMZksuzN2v gIvAXV6EfoFQpmRhV94AG.anFRuHMWBVOC9hNQUIBUCscADNUPl5uGRmw7U6 TdZ4niFiP.g--
Received:    from [23.19.88.130] by web125103.mail.ne1.yahoo.com via HTTP; Tue, 25 Sep 2012 15:21:19 PDT
X-Mailer:    YahooMailWebService/0.8.121.434
References:    <[email protected]>
Message-ID:    <[email protected]>
Date:    Tue, 25 Sep 2012 15:21:19 -0700 (PDT)

Sadly I do have more. I have some images if needed. Thanks you.
Advertisement

by rocketman Tue Sep 25, 2012 9:13 pm
Thank you for your time Justin. Yes, it seemed obvious but their sender IP addresses were varying from Logo, Nigeria, England, Arizona, .... I did not understand how their sender IP address could vary so much from email to email and what it meant. To help educate myself and those around me, for example how did the emails she sent today appear to originate from Arizona. Also, would you suggest I completely close this account or just no longer reply
by vonpaso xlura Tue Sep 25, 2012 10:48 pm
Just no longer reply. All those scammers want is money; it's unlikely that she'll try to harm you in any other way. She (who is probably he playing her) has lots of potential victims and the ones that don't look promising she just drops.

You will probably get more scammy offers. Just ignore them.

She may belong to a gang of scammers that has rented virtual servers overseas, or has dealings with a gang that runs botnets.

LOL at the name! It reminds me of someone I knew long ago named Singleton.

... ni los estafadores heredarĂ¡n el reino de Dios. 1 Cor. 6:10

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 9 guests