Is this person a scammer

Is yahoo now stripping the headers and replacing it with their own? Or are the scammers using an E-mail masking program?

From Tasha Norris Thu Nov 27 15:12:02 2008
Return-Path: <[email protected]>
Authentication-Results: mta510.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok)
Received: from 76.13.13.66 (HELO n3a.bullet.mail.ac4.yahoo.com) (76.13.13.66)
by mta510.mail.mud.yahoo.com with SMTP; Thu, 27 Nov 2008 15:12:03 -0800
Received: from [76.13.13.25] by n3.bullet.mail.ac4.yahoo.com with NNFMP; 27 Nov 2008 23:12:02 -0000
Received: from [76.13.10.162] by t4.bullet.mail.ac4.yahoo.com with NNFMP; 27 Nov 2008 23:12:02 -0000
Received: from [127.0.0.1] by omp103.mail.ac4.yahoo.com with NNFMP; 27 Nov 2008 23:12:02 -0000
Received: (qmail 9515 invoked by uid 60001); 27 Nov 2008 23:12:02 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Message-ID;
b=HSsR+/ihvwgphF6/JTyZEQTEu7W9VT/LJe+H6A7Ov4AEmWKQyXl4J86bKWc84fnPrEy0dCgyBWwxJBa6GPcK51xMv1uvroFQuor4Z13gngwSngiK2z4eTvpLiLdhfNjGpWDFLcHJNH96R2GufKRMbe90R5meumv+UX8a407CMdQ=;
Received: from [80.94.119.100] by web59803.mail.ac4.yahoo.com via HTTP; Thu, 27 Nov 2008 15:12:02 PST
Date: Thu, 27 Nov 2008 15:12:02 -0800 (PST)
From: Tasha Norris <[email protected]>
Reply-To: [email protected]
Subject: hi mrs janet

I get Italy from the header 80.94.119.100 Italy (Mozzate)

To answer your question, yes, scammers are no doubt getting smarter, they keep coming up with new ways to scam and it can be a challenge to keep ahead of them at times, none the less there are still other ways for us to get around their tricks.

The email you recived was most likely sent a part of a large mailout using a tool that hides their IP, normal email address allow you to send 50 emails at a time, the tools they sometimes use allow them to send lots more, the give away in this case is the reply to info in the header, if you have a safe, unidentifyable email address you could send an email as the reply will usually be manually sent from the account of the scammer, then you can get the IP

If you would like to post the email I will look into it for you, my early suspicion is that it is indeed a scam but i cant give any conclusive proof without some more information to go on

[Michelle]

80.94.119.100 is indeed Italy.

If you are looking at the other ones, they probably all belong to various Yahoo! servers and each one records its own IP address as the mail is passed round its systems.

Normally the senders IP address is the one right at the bottom.