True Origin of this email Account

[laverdadx100]

Is yahoo now stripping the headers and replacing it with their own? Or are the scammers using an E-mail masking program?

From Tasha Norris Thu Nov 27 15:12:02 2008
Return-Path: <[email protected]>
Authentication-Results: mta510.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok)
Received: from 76.13.13.66 (HELO n3a.bullet.mail.ac4.yahoo.com) (76.13.13.66)
by mta510.mail.mud.yahoo.com with SMTP; Thu, 27 Nov 2008 15:12:03 -0800
Received: from [76.13.13.25] by n3.bullet.mail.ac4.yahoo.com with NNFMP; 27 Nov 2008 23:12:02 -0000
Received: from [76.13.10.162] by t4.bullet.mail.ac4.yahoo.com with NNFMP; 27 Nov 2008 23:12:02 -0000
Received: from [127.0.0.1] by omp103.mail.ac4.yahoo.com with NNFMP; 27 Nov 2008 23:12:02 -0000
Received: (qmail 9515 invoked by uid 60001); 27 Nov 2008 23:12:02 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Message-ID;
b=HSsR+/ihvwgphF6/JTyZEQTEu7W9VT/LJe+H6A7Ov4AEmWKQyXl4J86bKWc84fnPrEy0dCgyBWwxJBa6GPcK51xMv1uvroFQuor4Z13gngwSngiK2z4eTvpLiLdhfNjGpWDFLcHJNH96R2GufKRMbe90R5meumv+UX8a407CMdQ=;
Received: from [80.94.119.100] by web59803.mail.ac4.yahoo.com via HTTP; Thu, 27 Nov 2008 15:12:02 PST
Date: Thu, 27 Nov 2008 15:12:02 -0800 (PST)
From: Tasha Norris <[email protected]>
Reply-To: [email protected]
Subject: hi mrs janet

MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1644346354-1227827522=:9043"
Message-ID: <[email protected]>
Content-Length: 5308

[Charles Fox]

Usually it the lowest Ip in the header.

IP address [?]: 80.94.119.100 [Whois]
IP address country: Italy
IP address state: Lombardia
IP address city: Mozzate
IP address latitude: 45.683300
IP address longitude: 8.950000
ISP of this IP [?]: Reti Telematiche Italiane S.p.A.
Organization: Milano Teleport Italia Srl

[Jillian]

Hi laverdadx100, you have posted a duplicate of this here: http://www.scamwarners.com/forum/viewto ... f=4&t=1733

I'll lock this one so that we can keep the discussion in one place.