Hi Everyone. Scamvictims united helped me catch scam a few weeks ago when i entered a paragraph from e-mail into google and this website came up. This time, google didnt help because the scammers are getting smarter and actually change the body of the e-mail. This scammer messed up as they sent me a similar message with the same formatting (italics)from 2 different names. My brother (who is a computer geek) checked the originating IP of both e-mail which happened to be the same (shocker!) and happened to be from Nigeria.
Here's both e-mails and the IP address. I hope this helps.
email #1:
from: jennifer perry <jenniferperry707@yahoo.com>
to: jenniferperry707@yahoo.com
date:Sat, Aug 9, 2008 at 7:31 AM
subject:Unit @ Uni of cincinnati
mailed-by:yahoo.com
signed-by:yahoo.com
7:31 AM (4 hours ago)
Good day,
I am Jennifer. I came across your ad on the website and I am interested in renting your unit. I would like to know when the lease is expected to start and for how long?. I would also like to know if the place is still available for rent. Thanks.
Jennifer
Email #2:
from:Naomi Scott <naomiscott_01@yahoo.com>
reply-to:naomiscott_01@yahoo.com
to:naomiscott_01@yahoo.com
date:Sat, Aug 9, 2008 at 10:52 AM
subject:Rental Enquiry !
mailed-by:yahoo.com
signed-by:yahoo.com
Hello,
Good day to you,am Naomi shopping for a place to stay.I will be coming over from UK to study at University of Cincinnati and i will like to know if your place is still available,please do let me know how i can go about securing the place and get back to me immediately.
Thanks.
Naomi.
Ok, now here's the e-mail header for other computer geeks
Delivered-To: ************
Received: by 10.103.214.12 with SMTP id r12cs120045muq;
Sat, 9 Aug 2008 04:31:28 -0700 (PDT)
Received: by 10.90.69.7 with SMTP id r7mr7957907aga.39.1218281486881;
Sat, 09 Aug 2008 04:31:26 -0700 (PDT)
Return-Path: <jenniferperry707@yahoo.com>
Received: from web57114.mail.re3.yahoo.com (web57114.mail.re3.yahoo.com [216.252.111.127])
by mx.google.com with SMTP id 27si4263123wra.32.2008.08.09.04.31.24;
Sat, 09 Aug 2008 04:31:26 -0700 (PDT)
Received-SPF: pass (google.com: domain of jenniferperry707@yahoo.com designates 216.252.111.127 as permitted sender) client-ip=216.252.111.127;
DomainKey-Status: good (test mode)
Authentication-Results: mx.google.com; spf=pass (google.com: domain of jenniferperry707@yahoo.com designates 216.252.111.127 as permitted sender) smtp.mail=jenniferperry707@yahoo.com; domainkeys=pass (test mode) header.From=jenniferperry707@yahoo.com
Received: (qmail 28024 invoked by uid 60001); 9 Aug 2008 11:31:24 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID;
b=XWKDAtnhYdDf98hECgA6SOPqPq89LM4N48kI89QnjoFE6aRTwvk7NVC12K1L/l2cH34sJ4do3dtM8nMg4B12zREY700qMvMJVkjXPbmbaIZP81iabQbiKkrNiem3UXuAq22PFWLb3DMjuLo17yxezzvlvefn0kG7vpbQy8Jv2P0=;
Received: from [196.29.219.48] by web57114.mail.re3.yahoo.com via HTTP; Sat, 09 Aug 2008 04:31:23 PDT
X-Mailer: YahooMailWebService/0.7.218
Date: Sat, 9 Aug 2008 04:31:23 -0700 (PDT)
From: jennifer perry <jenniferperry707@yahoo.com>
Subject: Unit @ Uni of cincinnati
To: jenniferperry707@yahoo.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-376645509-1218281483=:28001"
Message-ID: <240035.28001.qm@web57114.mail.re3.yahoo.com>
--0-376645509-1218281483=:28001
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
----------------------------------------------------------
Delivered-To: **************
Received: by 10.103.214.12 with SMTP id r12cs124055muq;
Sat, 9 Aug 2008 07:52:42 -0700 (PDT)
Received: by 10.140.164.1 with SMTP id m1mr1204224rve.266.1218293561085;
Sat, 09 Aug 2008 07:52:41 -0700 (PDT)
Return-Path: <naomiscott_01@yahoo.com>
Received: from n67.bullet.mail.sp1.yahoo.com (n67.bullet.mail.sp1.yahoo.com [98.136.44.47])
by mx.google.com with SMTP id l31si4357204rvb.6.2008.08.09.07.52.39;
Sat, 09 Aug 2008 07:52:41 -0700 (PDT)
Received-SPF: pass (google.com: domain of naomiscott_01@yahoo.com designates 98.136.44.47 as permitted sender) client-ip=98.136.44.47;
DomainKey-Status: good (test mode)
Authentication-Results: mx.google.com; spf=pass (google.com: domain of naomiscott_01@yahoo.com designates 98.136.44.47 as permitted sender) smtp.mail=naomiscott_01@yahoo.com; domainkeys=pass (test mode) header.From=naomiscott_01@yahoo.com
Received: from [216.252.122.219] by n67.bullet.mail.sp1.yahoo.com with NNFMP; 09 Aug 2008 14:52:39 -0000
Received: from [69.147.84.107] by t4.bullet.sp1.yahoo.com with NNFMP; 09 Aug 2008 14:52:39 -0000
Received: from [127.0.0.1] by omp202.mail.sp1.yahoo.com with NNFMP; 09 Aug 2008 14:52:39 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 242406.28534.bm@omp202.mail.sp1.yahoo.com
Received: (qmail 4145 invoked by uid 60001); 9 Aug 2008 14:52:38 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Message-ID;
b=A/AesE1mzS3+sEfq2rlGKk3FOAj89z7ztQaDOHk+wMMfe/z2Y3HNG+01f9rtiQCxEhroXZHiFEjmbtmv3oMpnSh2dmN+ULXIS+b1RCSENF8pQLiQW/mqcKPcISlqRZFN7YEe8XYEjMGkYFbgBXb5NGVZ4MFXBrftfMHXhjH/l4Y=;
Received: from [196.29.219.48] by web46208.mail.sp1.yahoo.com via HTTP; Sat, 09 Aug 2008 07:52:35 PDT
X-Mailer: YahooMailWebService/0.7.218
Date: Sat, 9 Aug 2008 07:52:35 -0700 (PDT)
From: Naomi Scott <naomiscott_01@yahoo.com>
Reply-To: naomiscott_01@yahoo.com
Subject: Rental Enquiry !
To: naomiscott_01@yahoo.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1801241063-1218293555=:2850"
Message-ID: <647005.2850.qm@web46208.mail.sp1.yahoo.com>
--0-1801241063-1218293555=:2850
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable