#44665 by campzamablkmale
Mon Jan 17, 2011 1:24 pm
I've received several emails from this person pretending to be a Japanese girl looking for an American boyfriend. After doing my own research (ip-lookups, whois, etc); found out that there have been dozens of email sent from the same ip address as listed in this header for money schemes.
From Yuya Izumi Sat Jan 15 05:34:14 2011
X-Apparently-To: HIDDEN <HIDDEN> via 98.139.210.193; Fri, 14 Jan 2011 21:34:15 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 98.139.91.192
Received-SPF: none (mta1168.mail.sk1.yahoo.com: domain of [email protected] does not designate permitted sender hosts)
X-YMailISG: ps2XMW4cZArb19mKkevUV1QAWnOi.TQMlVW4YbWY3YZ4AfO6 P64iTVi_RyiynLraqxou.HCqwufQyU7FO8UTNyhIP1.Ol.6XNq4mvDGJHn81 hGkd8X7L6Azh4zf.Ijg_xSdwhKWqcmpePNQn57hUW0T5_q1zfkd7I819wtHY fnXCvgD54vURgFOFcYa2LUrCef1PiraO9eLEashLiAzJhSIoiE1olTUR5nAj xDJZr68pSahOsGAl0iTqkKNQo0Dvj1XG1Yhtyznbpnu2UeGWiy.csQN_5xJz UUSniLvyMxnBD7e7A8LBAvG4nAHQjruLQ3abp28LxY_FsXawC7ifew.WaIwU dRZ670TB2.znN3vu.fJuFwGPERp9gRY0XtWwTxZrC5pm.9ZcG3JwWm2ne_em J6s57fHxBvLU1jZfKMu75b45yu27yraNiGavdqSU9CHnC4xrWkxFFPjKdrVt ZGUPvkTAklvyI9EPbBufX_KqqEdbPWDiQTOu2vn6q406BQSh_iooNfXnbBzj U8GZsSJE3.DxDZUlokeqBMKwC1Fk6edSqp8DPCkgulPN.q18DxUx3rIbyPKe cEqzOf0_utHfqiZb_uiyroiMzxnFExTBquJaPlBOOzqWOVUAONsIHQB_.N0A jfZVcUCU4BnGdVXT7Kknje6uTKhwC7YVa1dh4eZEU9ROzpm6gctmAq.caJvf KVz7YNhMq2SKAlE.PVCFfuadYZ4h8lZexmTf9KyYci_sxtV0NIIkT79_qsQH x0ud5LTmn6lzPBkSAEp7xIwd9kxAjYnz.7nC3iWCG2lBPbmq55pK019i6CTn fQ.ivdT.xoKWXOHINr.jiBfGPqMlWc4pHpNHKgDhkiw1RaLGsCZFuWP3vEbm sXMO5KD1EOLgSR5DbuR1_mLC_HZYlKo5qrHBGAnVa18tsAfpuCAdeKrnXoaF 572LEsKkwlPK3.jGbX6a9iYeiWJd0jKdPc0E55x.r1DgI90ybNmR2X9o9pRw 7JHhWDQrWvOdebebyR.8YyfMcp3.HIdD90.NxBvx7awIem_b2VKyqPqpdC7H JcEiU2QKirL8X.zJK8bVfpaeV8vu.ypsRZVTASX_f3ZCC8RQ9QjQh3vR4FnD vaItijUTfFEKLyQ.PAH.5B9yGi57xfpWb2Di7rc60WXRdYIPwN1KDxG6HpVn CmgrtJLbkJ8UKBftKhbITEqmPbrY.R0p.5oW4Goq4LqDO0_Xw6DVK2yft1uW EmRwLUS7pogwr7rCV0M4GtiFrzxdQS50NE6rM6HhKZQQw6JMmwyTaGlT84b1 0VpEAF3X3BK23VZ6hH2EyIaL4odFzj1lS3u66oXTIw--
X-Originating-IP: [98.139.91.192]
Authentication-Results: mta1168.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm7-vm0.bullet.mail.sp2.yahoo.com) (98.139.91.192) by mta1168.mail.sk1.yahoo.com with SMTP; Fri, 14 Jan 2011 21:34:14 -0800
Received: from [98.139.91.61] by nm7.bullet.mail.sp2.yahoo.com with NNFMP; 15 Jan 2011 05:34:14 -0000
Received: from [98.139.91.40] by tm1.bullet.mail.sp2.yahoo.com with NNFMP; 15 Jan 2011 05:34:14 -0000
Received: from [127.0.0.1] by omp1040.mail.sp2.yahoo.com with NNFMP; 15 Jan 2011 05:34:14 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 40980 invoked by uid 60001); 15 Jan 2011 05:34:14 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1295069654; bh=E4xfGG29qHNRQ6L8hrsYJihjJFKoi3sNW/wKeqVivJM=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=x9wIgRmz1I31dIDQtZnNjGO2ZJefQQOm4Igg1vShtcLVw1bdtFCkPJpentpzaZasatchT3FbLkQtxNj42LT+MpQc3lOyNT4EdawvmBixpxMSO1QuRdmWXLg0averbYEfTizqKd1bRUWDMbeWVijnJZaaQ0s3HtES3WC83N/COL8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=XYKQE8UmFI8ltnU+9I84CQWeVMq9ynL/zIEPjbi+pHrUv0KgmFHnsh4Hzbk4hiLPzFDHAfeZtxdpVeJikFpCHKQLX2X45fEu3gIfXpdQOZYu9RoV46iG1BATutTmg9dbRXEM4iFzWGtGbbmpFGupPxpDJA2nseVzaCDIR4DmdsA=;
Message-ID: <[email protected]>
X-YMail-OSG: _anjTRkVM1krskcLsNwUoIaxW9_yo7sWWkwoGvjTN5nqPuL XtEIBOLNnuDxwfI5GUm5IqxEAZyAHztOZALBSaqV2f6c2w7VjK.Dt7R0oLrC Hf7nXwmAoeyNjdIm4Wn64oIEBimsgyCODchWznfi89X7uI9Jw.PodG1ehfba jf6VBIA2aauAaPFrcoMDxlvCYdMtp7RpXQ0tYlpUulOVWWDYv0pwUVN0OHZw K7Vug2uIrJsLtnLAfQANhvJHy1fTWsFcomtIREbqMCR_R4obnxYShO8Wdpzg jqHcT79rNHXOk5P2zMY05SNCmIenNh8BcPIHC3kQ8Rs60RgY_a04yeg--
Received: from [184.61.79.212] by web112603.mail.gq1.yahoo.com via HTTP; Fri, 14 Jan 2011 21:34:14 PST
X-Mailer: YahooMailRC/555 YahooMailWebService/0.8.107.285259
References: <[email protected]>
Date: Fri, 14 Jan 2011 21:34:14 -0800 (PST)
From: This sender is DomainKeys verified
Yuya Izumi <[email protected]>
Add sender to Contacts
Subject: Re: [Metropolis Classifieds] Ad reply
To: HIDDEN <HIDDEN>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1506917592-1295069654=:40752"
Content-Length: 471
From Yuya Izumi Sat Jan 15 05:34:14 2011
X-Apparently-To: HIDDEN <HIDDEN> via 98.139.210.193; Fri, 14 Jan 2011 21:34:15 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 98.139.91.192
Received-SPF: none (mta1168.mail.sk1.yahoo.com: domain of [email protected] does not designate permitted sender hosts)
X-YMailISG: ps2XMW4cZArb19mKkevUV1QAWnOi.TQMlVW4YbWY3YZ4AfO6 P64iTVi_RyiynLraqxou.HCqwufQyU7FO8UTNyhIP1.Ol.6XNq4mvDGJHn81 hGkd8X7L6Azh4zf.Ijg_xSdwhKWqcmpePNQn57hUW0T5_q1zfkd7I819wtHY fnXCvgD54vURgFOFcYa2LUrCef1PiraO9eLEashLiAzJhSIoiE1olTUR5nAj xDJZr68pSahOsGAl0iTqkKNQo0Dvj1XG1Yhtyznbpnu2UeGWiy.csQN_5xJz UUSniLvyMxnBD7e7A8LBAvG4nAHQjruLQ3abp28LxY_FsXawC7ifew.WaIwU dRZ670TB2.znN3vu.fJuFwGPERp9gRY0XtWwTxZrC5pm.9ZcG3JwWm2ne_em J6s57fHxBvLU1jZfKMu75b45yu27yraNiGavdqSU9CHnC4xrWkxFFPjKdrVt ZGUPvkTAklvyI9EPbBufX_KqqEdbPWDiQTOu2vn6q406BQSh_iooNfXnbBzj U8GZsSJE3.DxDZUlokeqBMKwC1Fk6edSqp8DPCkgulPN.q18DxUx3rIbyPKe cEqzOf0_utHfqiZb_uiyroiMzxnFExTBquJaPlBOOzqWOVUAONsIHQB_.N0A jfZVcUCU4BnGdVXT7Kknje6uTKhwC7YVa1dh4eZEU9ROzpm6gctmAq.caJvf KVz7YNhMq2SKAlE.PVCFfuadYZ4h8lZexmTf9KyYci_sxtV0NIIkT79_qsQH x0ud5LTmn6lzPBkSAEp7xIwd9kxAjYnz.7nC3iWCG2lBPbmq55pK019i6CTn fQ.ivdT.xoKWXOHINr.jiBfGPqMlWc4pHpNHKgDhkiw1RaLGsCZFuWP3vEbm sXMO5KD1EOLgSR5DbuR1_mLC_HZYlKo5qrHBGAnVa18tsAfpuCAdeKrnXoaF 572LEsKkwlPK3.jGbX6a9iYeiWJd0jKdPc0E55x.r1DgI90ybNmR2X9o9pRw 7JHhWDQrWvOdebebyR.8YyfMcp3.HIdD90.NxBvx7awIem_b2VKyqPqpdC7H JcEiU2QKirL8X.zJK8bVfpaeV8vu.ypsRZVTASX_f3ZCC8RQ9QjQh3vR4FnD vaItijUTfFEKLyQ.PAH.5B9yGi57xfpWb2Di7rc60WXRdYIPwN1KDxG6HpVn CmgrtJLbkJ8UKBftKhbITEqmPbrY.R0p.5oW4Goq4LqDO0_Xw6DVK2yft1uW EmRwLUS7pogwr7rCV0M4GtiFrzxdQS50NE6rM6HhKZQQw6JMmwyTaGlT84b1 0VpEAF3X3BK23VZ6hH2EyIaL4odFzj1lS3u66oXTIw--
X-Originating-IP: [98.139.91.192]
Authentication-Results: mta1168.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm7-vm0.bullet.mail.sp2.yahoo.com) (98.139.91.192) by mta1168.mail.sk1.yahoo.com with SMTP; Fri, 14 Jan 2011 21:34:14 -0800
Received: from [98.139.91.61] by nm7.bullet.mail.sp2.yahoo.com with NNFMP; 15 Jan 2011 05:34:14 -0000
Received: from [98.139.91.40] by tm1.bullet.mail.sp2.yahoo.com with NNFMP; 15 Jan 2011 05:34:14 -0000
Received: from [127.0.0.1] by omp1040.mail.sp2.yahoo.com with NNFMP; 15 Jan 2011 05:34:14 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 40980 invoked by uid 60001); 15 Jan 2011 05:34:14 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1295069654; bh=E4xfGG29qHNRQ6L8hrsYJihjJFKoi3sNW/wKeqVivJM=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=x9wIgRmz1I31dIDQtZnNjGO2ZJefQQOm4Igg1vShtcLVw1bdtFCkPJpentpzaZasatchT3FbLkQtxNj42LT+MpQc3lOyNT4EdawvmBixpxMSO1QuRdmWXLg0averbYEfTizqKd1bRUWDMbeWVijnJZaaQ0s3HtES3WC83N/COL8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=XYKQE8UmFI8ltnU+9I84CQWeVMq9ynL/zIEPjbi+pHrUv0KgmFHnsh4Hzbk4hiLPzFDHAfeZtxdpVeJikFpCHKQLX2X45fEu3gIfXpdQOZYu9RoV46iG1BATutTmg9dbRXEM4iFzWGtGbbmpFGupPxpDJA2nseVzaCDIR4DmdsA=;
Message-ID: <[email protected]>
X-YMail-OSG: _anjTRkVM1krskcLsNwUoIaxW9_yo7sWWkwoGvjTN5nqPuL XtEIBOLNnuDxwfI5GUm5IqxEAZyAHztOZALBSaqV2f6c2w7VjK.Dt7R0oLrC Hf7nXwmAoeyNjdIm4Wn64oIEBimsgyCODchWznfi89X7uI9Jw.PodG1ehfba jf6VBIA2aauAaPFrcoMDxlvCYdMtp7RpXQ0tYlpUulOVWWDYv0pwUVN0OHZw K7Vug2uIrJsLtnLAfQANhvJHy1fTWsFcomtIREbqMCR_R4obnxYShO8Wdpzg jqHcT79rNHXOk5P2zMY05SNCmIenNh8BcPIHC3kQ8Rs60RgY_a04yeg--
Received: from [184.61.79.212] by web112603.mail.gq1.yahoo.com via HTTP; Fri, 14 Jan 2011 21:34:14 PST
X-Mailer: YahooMailRC/555 YahooMailWebService/0.8.107.285259
References: <[email protected]>
Date: Fri, 14 Jan 2011 21:34:14 -0800 (PST)
From: This sender is DomainKeys verified
Yuya Izumi <[email protected]>
Add sender to Contacts
Subject: Re: [Metropolis Classifieds] Ad reply
To: HIDDEN <HIDDEN>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1506917592-1295069654=:40752"
Content-Length: 471