by monalisaa2
Met this guy on Cupid.com. He said that he was from Florida, but working in Nigeria as a Contractor. I used one of my dummy accounts and had him send pics. Which turned out to be pictures of a model named Dario Vander who can be found on http://www.newfaces.com.
I even talked to him on skype, only using the voice function, didn't see his face of course.
This is his email header:
From Zack Holtzman Thu Jun 14 12:07:58 2012
X-Apparently-To: [email protected] via 98.138.211.178; Thu, 14 Jun 2012 12:07:59 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 8pkSNwYWLDtPGly2glKjEd4i7EIFf_73I9a.mNM4nbLh0ihe
..gthKeX8PkDsJs0K4lfxXdTheY59DbTorj7O7UB88bFYXuGeS9n1sECobyq
7FnCdCAPWaPBw9aGbtFbrG681L_6L8VjWHPmjoS_O3dUuwiWIzQ3pnYrIa3C
_cgHEvcSk0qkoLE7gKZ9DWVF0uVBNNjrbFU_DSLxXqThMi_PalsB0rUe9aLf
wrnknOrFAf.pnnqpl435bW28ODuIjkKvJdwnea3Nc_wsAqhVrQn91EwoTVmc
6SrzzLByFWDPsldaEBLfgOauONJJctM7RxwNLmXEmV4BK3GKLPQJpY1eUUmw
UocNTrdOFMILQgy6EtyACa5GMdF8mjISDjxljG.kJcqQ_k2zz0IiSRP8bpCV
GsqPUWfvPJevSAZtRmsslrnIW0wogTTUmRTTTS2bw_3THdo4LZLQuxVGsS3i
kFnYegfkydeCSOUi6iSadaTyAaQ9wRWvVKgUhsn30OMXwpLoQmoASgTPZlJ8
EDHj2_kjBfgMi76Wrj1iQOa6ZJFcdD0TbzqkHk7qaMMQ5Yjw_ev9Oxo_nZOg
IZTz_oQSUIqlSxmN3ftrb7mwi1s_dohk7VX34Pe8PrYkkURIw8oyIXJ.gYpn
dqw9R_P8V30iVF1zYF_YC3OV4r7M1kS6fjOo9ehKbxUaXV16llh7utt2M9ah
NGXdmaTBBO4wC13ywIQI1BUCKeedNyiUouIsWvS7GmsePtPXNOcgENNvXayH
_8sXikajQMFgkAjDzO_rySTYyxJU8LYPKJcaY89jvwqAr66L5C2EiBH93fQX
szlCVUL49awBX4t0Orh5eiGewYIK15Rg00W7pW6AmoFTiZocmoJUG.nef7.Y
8uvC4PObPLtuZlZ2lLcam4cyXJI15s8NMn1HJ2AfLbuvc0J.AdlCuj6Ty.XA
ADEY0eua8X9RHScAdtisVPTYPCduEyColChJChCC8FjJGKYQMekgNXhdzJPv
tvq1EgNHOc30xvpepUtEPUeEVgqrDNrKFG3jG1Mr5fxJdmq3TBQOLCabLIoi
K_.fM9VAG7XcKOQl9MM0IBuhxf02Ae_Co5eVqsuwUq5AamuB4YGwTHkM6jh4
ADV0GBnYzWewXC5zhY1sNfY_cHjvEgVzrP.dVEuAUCy_a2yIbPbYpZBpRHAU
_kV8dFGymnrAH9T7pWK0Woa7i5o3SlFhVVujeO3UhtccBWW3zTgilZgZthNn
AKwY8N_UMy6D86oFyv.03p.JU8cr_hg9Aw9UKz5RHgX93C.G8NOmKHs-
X-Originating-IP: [98.138.229.100]
Authentication-Results: mta1332.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm35-vm4.bullet.mail.ne1.yahoo.com) (98.138.229.100)
by mta1332.mail.bf1.yahoo.com with SMTP; Thu, 14 Jun 2012 12:07:59 -0700
Received: from [98.138.90.55] by nm35.bullet.mail.ne1.yahoo.com with NNFMP; 14 Jun 2012 19:07:59 -0000
Received: from [98.138.89.175] by tm8.bullet.mail.ne1.yahoo.com with NNFMP; 14 Jun 2012 19:07:58 -0000
Received: from [127.0.0.1] by omp1031.mail.ne1.yahoo.com with NNFMP; 14 Jun 2012 19:07:58 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 55611 invoked by uid 60001); 14 Jun 2012 19:07:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1339700878; bh=fQcJALf1xhdUNxfq72dwHs9JNCh17QP265nrx9Vp1ts=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=ycq6SR4CnHaZZz1q8fLb2KfGG/toW0aqDvsewbX3vqChKDqlUzWNsiCymC3o7LI+x3F/89UAKSzo7LPbhZkvfGpWvwG2hc4Xl2gwFK+rsGvPtdN4v8WSNOtYHhRLmp5+D4XpFXlTQ18FfVmv1U0WkAuKvWWzb0JbDoiGVZBw3SI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=WBWxD3C2gv70ed+g0LjRwlLzAkaDCP/f9eTHeCxCO4eu0nMSJuebURa5YM2nI9fdmTl+zVqLmt8QzwI2aUYugGHiTDlntguG27lnyvDfdJzWjHaSyOSIOaMPA7jGrAWbMy/sDUtR0E5EEWtSuOhB4963FWJhQKzVPLWPJgyK40Y=;
X-YMail-OSG: I199Q5IVM1l_osNECCPqMzDw6Y4Q743byzRubmu2SjmELRn
0XtsiwgSxBoAurBb_.9R1I3daMxvwUsdC0btF7Z.vq70PAZ4FjpgbtHounoM
PCIFFbS3HtdpX7A.ZqFxMaRU8VWiwS3Zn3BPNEaQFesdNR3PBk1euEJI48gX
PWG3Ke0cMmRMa658kPyIVClJGXTwqWrMKH0DvXRFL1HaOb2jdfg2uEGn.uzW
VhVhrV1m26hMFEtlp2zrNSEIIQ_ZRrAaFaXxESZdKmVNg04mWu5mrVcY2L2f
.gNw5gYBQuHTPQ8D07eNoH2svxMpVJz9xVBHwJYyKcTGuA0xEV6RoAYkWAiH
9k..wGppQG8aG4.xisdlMbq.Fl47CH2_OBefEM03HhjHtTaPr5xeU4Kw_4Ys
ZW8TQ440-
Received: from [41.71.173.31] by web122402.mail.ne1.yahoo.com via HTTP; Thu, 14 Jun 2012 12:07:58 PDT
X-Mailer: YahooMailWebService/0.8.118.349524
References: <[email protected]>
Message-ID: <[email protected]>
Date: Thu, 14 Jun 2012 12:07:58 -0700 (PDT)
From: Zack Holtzman <[email protected]>
Reply-To: Zack Holtzman <[email protected]>
Subject: Re: pics
To: Tracy Debari <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="1494295045-408896331-1339700878=:52826"
Content-Length: 134844
Gotcha Zack.
This is the photo that he is using on cupid.com.
https://img.tineye.com/result/e873bd08e ... 6bd1e6998e
I even talked to him on skype, only using the voice function, didn't see his face of course.
This is his email header:
From Zack Holtzman Thu Jun 14 12:07:58 2012
X-Apparently-To: [email protected] via 98.138.211.178; Thu, 14 Jun 2012 12:07:59 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 8pkSNwYWLDtPGly2glKjEd4i7EIFf_73I9a.mNM4nbLh0ihe
..gthKeX8PkDsJs0K4lfxXdTheY59DbTorj7O7UB88bFYXuGeS9n1sECobyq
7FnCdCAPWaPBw9aGbtFbrG681L_6L8VjWHPmjoS_O3dUuwiWIzQ3pnYrIa3C
_cgHEvcSk0qkoLE7gKZ9DWVF0uVBNNjrbFU_DSLxXqThMi_PalsB0rUe9aLf
wrnknOrFAf.pnnqpl435bW28ODuIjkKvJdwnea3Nc_wsAqhVrQn91EwoTVmc
6SrzzLByFWDPsldaEBLfgOauONJJctM7RxwNLmXEmV4BK3GKLPQJpY1eUUmw
UocNTrdOFMILQgy6EtyACa5GMdF8mjISDjxljG.kJcqQ_k2zz0IiSRP8bpCV
GsqPUWfvPJevSAZtRmsslrnIW0wogTTUmRTTTS2bw_3THdo4LZLQuxVGsS3i
kFnYegfkydeCSOUi6iSadaTyAaQ9wRWvVKgUhsn30OMXwpLoQmoASgTPZlJ8
EDHj2_kjBfgMi76Wrj1iQOa6ZJFcdD0TbzqkHk7qaMMQ5Yjw_ev9Oxo_nZOg
IZTz_oQSUIqlSxmN3ftrb7mwi1s_dohk7VX34Pe8PrYkkURIw8oyIXJ.gYpn
dqw9R_P8V30iVF1zYF_YC3OV4r7M1kS6fjOo9ehKbxUaXV16llh7utt2M9ah
NGXdmaTBBO4wC13ywIQI1BUCKeedNyiUouIsWvS7GmsePtPXNOcgENNvXayH
_8sXikajQMFgkAjDzO_rySTYyxJU8LYPKJcaY89jvwqAr66L5C2EiBH93fQX
szlCVUL49awBX4t0Orh5eiGewYIK15Rg00W7pW6AmoFTiZocmoJUG.nef7.Y
8uvC4PObPLtuZlZ2lLcam4cyXJI15s8NMn1HJ2AfLbuvc0J.AdlCuj6Ty.XA
ADEY0eua8X9RHScAdtisVPTYPCduEyColChJChCC8FjJGKYQMekgNXhdzJPv
tvq1EgNHOc30xvpepUtEPUeEVgqrDNrKFG3jG1Mr5fxJdmq3TBQOLCabLIoi
K_.fM9VAG7XcKOQl9MM0IBuhxf02Ae_Co5eVqsuwUq5AamuB4YGwTHkM6jh4
ADV0GBnYzWewXC5zhY1sNfY_cHjvEgVzrP.dVEuAUCy_a2yIbPbYpZBpRHAU
_kV8dFGymnrAH9T7pWK0Woa7i5o3SlFhVVujeO3UhtccBWW3zTgilZgZthNn
AKwY8N_UMy6D86oFyv.03p.JU8cr_hg9Aw9UKz5RHgX93C.G8NOmKHs-
X-Originating-IP: [98.138.229.100]
Authentication-Results: mta1332.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm35-vm4.bullet.mail.ne1.yahoo.com) (98.138.229.100)
by mta1332.mail.bf1.yahoo.com with SMTP; Thu, 14 Jun 2012 12:07:59 -0700
Received: from [98.138.90.55] by nm35.bullet.mail.ne1.yahoo.com with NNFMP; 14 Jun 2012 19:07:59 -0000
Received: from [98.138.89.175] by tm8.bullet.mail.ne1.yahoo.com with NNFMP; 14 Jun 2012 19:07:58 -0000
Received: from [127.0.0.1] by omp1031.mail.ne1.yahoo.com with NNFMP; 14 Jun 2012 19:07:58 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 55611 invoked by uid 60001); 14 Jun 2012 19:07:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1339700878; bh=fQcJALf1xhdUNxfq72dwHs9JNCh17QP265nrx9Vp1ts=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=ycq6SR4CnHaZZz1q8fLb2KfGG/toW0aqDvsewbX3vqChKDqlUzWNsiCymC3o7LI+x3F/89UAKSzo7LPbhZkvfGpWvwG2hc4Xl2gwFK+rsGvPtdN4v8WSNOtYHhRLmp5+D4XpFXlTQ18FfVmv1U0WkAuKvWWzb0JbDoiGVZBw3SI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=WBWxD3C2gv70ed+g0LjRwlLzAkaDCP/f9eTHeCxCO4eu0nMSJuebURa5YM2nI9fdmTl+zVqLmt8QzwI2aUYugGHiTDlntguG27lnyvDfdJzWjHaSyOSIOaMPA7jGrAWbMy/sDUtR0E5EEWtSuOhB4963FWJhQKzVPLWPJgyK40Y=;
X-YMail-OSG: I199Q5IVM1l_osNECCPqMzDw6Y4Q743byzRubmu2SjmELRn
0XtsiwgSxBoAurBb_.9R1I3daMxvwUsdC0btF7Z.vq70PAZ4FjpgbtHounoM
PCIFFbS3HtdpX7A.ZqFxMaRU8VWiwS3Zn3BPNEaQFesdNR3PBk1euEJI48gX
PWG3Ke0cMmRMa658kPyIVClJGXTwqWrMKH0DvXRFL1HaOb2jdfg2uEGn.uzW
VhVhrV1m26hMFEtlp2zrNSEIIQ_ZRrAaFaXxESZdKmVNg04mWu5mrVcY2L2f
.gNw5gYBQuHTPQ8D07eNoH2svxMpVJz9xVBHwJYyKcTGuA0xEV6RoAYkWAiH
9k..wGppQG8aG4.xisdlMbq.Fl47CH2_OBefEM03HhjHtTaPr5xeU4Kw_4Ys
ZW8TQ440-
Received: from [41.71.173.31] by web122402.mail.ne1.yahoo.com via HTTP; Thu, 14 Jun 2012 12:07:58 PDT
X-Mailer: YahooMailWebService/0.8.118.349524
References: <[email protected]>
Message-ID: <[email protected]>
Date: Thu, 14 Jun 2012 12:07:58 -0700 (PDT)
From: Zack Holtzman <[email protected]>
Reply-To: Zack Holtzman <[email protected]>
Subject: Re: pics
To: Tracy Debari <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="1494295045-408896331-1339700878=:52826"
Content-Length: 134844
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.71.173.31
Originating ISP: Visafone Communications Limited
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline
Gotcha Zack.
This is the photo that he is using on cupid.com.
https://img.tineye.com/result/e873bd08e ... 6bd1e6998e
