RSS

“nulty rita”

04 Feb

ROMANCE SCAM – ONLINE DATING – SCAMMER

All of the emails on this post are from Nulty Rita — I’ve put the header details under the emails. Scammer is using different IP and email addresses in each email.

romance_scams

SUBJECT LINE: Hello

Hello Dear,

It is nice and joyful to found your email address on the Internet search during my quest for friendship to keep busy the lonely and lovely world. Hope you fill the vacuum? I thought is beautiful to make you a friend in this regard. My name is Nulty Rita a Canadian nationality, female. My friends tell me that I am a quiet person with a good sense of humor.

I am always fair, straightforward, honest and easy going lady and I seek trust worthy friendship. I believe in giving and taking on both sides and I value faithfulness. I like people for what they are and not for what they are not. I want to be your friend, and let share whatever we have in friendship.

I will be detailed in my consequential mails and expecting same from you if both considered:

AGE: 29 languages spoken: Fluent English & little Spanish.

It will be nice to know you in this regard.

Yours truly,

Nulty.

___

EMAIL TWO –

SUBJECT LINE: waiting to read from you soon.

Thanks for your response and friendship continuation, am sorry for my late respond to you, due to some official jobs which i can’t over look in my office, I saw the picture you sent to me is very interesting and ham-some i love that, it gives me pressure when i read your mail, am looking for a serious relationship that will always exchanging ideas with me and the same time i will learn something from him, i think it will be interesting if you occupy the vacuum. I will be waiting to read from you soonest,

Thanks,Your beloved,

Nulty.

_______

THIRD EMAIL FROM NULTY RITA –

Thanks for your response and friendship continuation, am sorry for my late respond to you, due to some official jobs which i can’t over look in my office, I saw the picture you sent to me is very interesting and ham-some i love that, it gives me pressure when i read your mail, am looking for a serious relationship that will always exchanging ideas with me and the same time i will learn something from him, i think it will be interesting if you occupy the vacuum. I will be waiting to read from you soonest,

Thanks,Your beloved,

Nulty.

HEADER DETAILS:

Return-Path: <michael.williams7763@yahoo.com>
X-YahooFilteredBulk: 98.136.216.199
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: v_EU3goWLDtxr2FQVO1kRAvJR4p8Omw_uuoF7WARHE_SgVV_ bpbLV8e1qIRPWQALlOv138.Ok2_i41Jfi_sWdIhWeb2fUy6R.Kc7hPKPUMMi mdr8uBUz5AuqfDzFnqyFxvaBDSvhr725kMv1DiUeX7IabJOXM1aWO40XTceD ASSaaW0JH43vTjOeIV6_96mvOGj_lTmILiOK9XrOdkVBZKqWzTAU_w45I0bF aoArTHBH6Yjig.n_eq_1.gnx6T4gRxZE.bGc4oLGba7nKE_yCOmIRlXg6_Z5 8yaTLcK0PgmsZ8fmEs0eYOU9WKmXIVBANtTE6H2CwnwwDU8TIEY5BPg0djAx 9jrQ.4S.5qoO1MsYJ61FxDqhJARORWwm6cFijCg0.gzA6xXfaCgmBSziiSpS _L09_KbN7C1UZblljY1mTT2yhF7wd2sF22LK1qvwI.Ld0qxE0JKiksmBqutA MtwyPhEsyI45jaavUjQVRrWuC8iW6sfKBrrI_1EeSVRclO6gSXSTnAOCpq4J s4yA_mG07c7WgRKvbcz57_zmiaMblveBEFwdi1ZfuYfx7H046.oog2svJL6h DOMojjWxAaywELOVO5hH2FNrNghc1lxafwR9rLhOVxJomibqazix.nMyOBHn Ln9_HOexc46rXN7heZ1LaVogJMvpLALL7NuWAhLX8aMP3IjSZ244cajk1WM1 cxiptdrrIlRP6doBHuZ9L2XzXzeEs4qTwXoKborT.qWohUpebxPiv6VY9GZi YrjBFQQrthXQwDL2p5qvQb8FlE.RYH9G6HWy0_mDvxD5BcB9uETzKQnRw2bj rUI1XXqyR8YCF5_uwglfFkR0pLbqN_Ha_BZkAoV8JuMQyg7ONHDgomoeFDnd 2wVb0GfDxIx7C6MwaKwcx7fh4bZEmYJXqVl5J9nfXr.AUt9UXlqXi1L19wHg dWl1omgF48oVhllrYLKu3INJ028GiKBHpeCkgszIpzxZJ3Sl3vhIofwpE9GX L1NWXt2FxMvR1H5kWbHSkeMWKC1wjxFG5wnI7vL6.QCWVdeid1CNl.8C2T3B cuEZu8J0GYetrsgEgyce9mVx_yXJqWZLgftFfOTRwPlEz9d0Edvbdzvb2P0O IpX3NPltzUiAmXT6oqN8u6Cl5VytQ.0MmzfIyAbtuEMKiKQ.3NS1UWfGMciF doAZ9nFmiFHIWT7Z6_pQ1BEMaHjRyn8lgePCUuBoN5XkM9N2qOMyNwEBqM5U 9.WDL9g99tB1IUc0Z4S7f2C7fP5UHkwGaaXaiNF.oIIODWUhhrtBpH_r5lz5 Y8vLng37VNZGRMT0QqQP.Ykyk3QDyzFpVz86qw5lTV1WbnvycgD_RUYALS3u 4REp5mErkD3rVrZeuzRLM6uYeR7vtNkmigkEnXYyPQ–
X-Originating-IP: [98.136.216.199]
Authentication-Results: mta1382.mail.gq1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm30-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.199) by mta1382.mail.gq1.yahoo.com with SMTP; Sat, 02 Feb 2013 23:18:10 -0800
Received: from [98.137.12.189] by nm30.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
Received: from [98.137.12.242] by tm10.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
Received: from [127.0.0.1] by omp1050.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 311370.83000.bm@omp1050.mail.gq1.yahoo.com
Received: (qmail 62306 invoked by uid 60001); 3 Feb 2013 07:18:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1359875890; bh=CYH4aW/vXnFu6XxmeTfb8LB5QPC+tPQSLrPr0gNnyR4=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vyI+zCTHzdaW5W2vq8YuMJYcZxlo726RH+4c9hsFzpVw7Rqm0XWNnU6kMYCKjkVCwQCMEOx4kqjcWlxpNlVkpQ/jmVNPKGtkTCmr2Kz4mR/EFWsyhLzVaoLcu3ZcEivjixhhhppt4fPreHNsedxBUBc2QbtSU8165oHZRH+86u8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=S9D1a3sEM64Qpx99F29253XC3e/QunCc4mkcVhh/UDKDs0PYUdC1B66APbJhvdS+iGCgNLg9fQX+HK5A72x1eZ/8XHq6pN9fjNi5Cr6V3y04xsDgc5dPhvcFq29VdbeXiZXf6drDvwNeuT/nMz3IFBK70J2lFlWhm8iyLASFiPM=;
X-YMail-OSG: vpBsc8AVM1ktRTNJG9zqZuIXG3eH1Do1oc6NjwgBAx6nqRt B9xVVUbwPPQyO.t0DRyVzQQO9xMpcz1fya0BVHXd8eLIfMw30JpR0bnppA6z LMCgOQZpCbFK_ewcc0W04BkU36BwFH6Uyx.n4.j.EXyrnKewca8JTOqVJej. FtzPkV63fiy4TCdIoBGxF0eEPdTlUx_wznhfWtWmh3pX3DuGxwP2Wm2NPr5k FYdhac6m2W3Jkcktx7RS1Evvp89Cu4dyZ9DEvSTf.tOuUEq442yQMIwWWhD0 hMVQYu1A30S7jxzAKDVImZG7Dmi3kt1sbXsoc88Dn9QJ82dekE739enmScRS 9M9nH2o0G_68mtPMK65aHTT4uUIkhyp1J5JGtqrVap9kFJuvKCymK2RQUZyr 9_nzXREArt4J1azO1SoTgJH8D81TGfDLyDzrPVggl2irAaC8ThEVvhMcgjLd zd3HBYpyT8Q5goXd2jsEYF6kOF7VJCMpqboofIvmz8wSl2T7XxeieAhs9YD9 k6W474_4G211.n1kvPmRyaE.Pci1eEsEnfJBIdn.Us6QCTvkVrnGrYCtbTFQ oXTaK8aD2u0POiavSwPbNwyGhr7Cfo_.qz0b_vAGo3MziGD7be0wb1FCgqlJ iLMkZaDZ9h4sU_uBNJIc-
Received: from [41.207.184.25] by web163406.mail.gq1.yahoo.com via HTTP; Sat, 02 Feb 2013 23:18:10 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <1359875890.71870.YahooMailClassic@web163406.mail.gq1.yahoo.com>
From: nulty rita <nulty.rita23@gmail.com>
Reply-To: nulty.rita23@gmail.com
Subject: Hello

nulty rita nulty.rita23@gmail.com RETURN_ADDRESS: michael.williams7763@yahoo.com RECEIVED_IP: 41.207.184.25 IP_USED: 98.136.216.199

You can tell by the return address that this scammer uses, or used, the name Michael Williams to send out spam.

In the second email, the scammer used

Return-Path: <nultyri1980@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.100 as permitted sender) IGNvbnRpbnVhdGlvbiwgYW0gc29ycnkgZm9yIG15IGxhdGUgcmVzcG9uZCB0 byB5b3UsIGR1ZSB0byBzb21lIG9mZmljaWFsIGpvYnMgd2hpY2ggaSBjYW4n dCBvdmVyIGxvb2sgaW4gbXkgb2ZmaWNlLCBJIHNhdyB0aGUgcGljdHVyZSB5 b3Ugc2VudCB0byBtZSBpcyB2ZXJ5IGludGVyZXN0aW5nIGFuZCBoYW0tc29t ZSBpIGxvdmUgdGhhdCwgaXQgZ2l2ZXMgbWUgcHJlc3N1cmUgdwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: s_YHocUWLDvKLd_cNdSu2_dyD.4lsfGNHQhkhqhTvUcUNJdI ePY7VF4_7F1qAJWmi.YJm1fRexH9K24EC1maTbj79iBn.wwzpxa8Gaxg7tF. D75_m2NdEhVLTZwssac61o1P4X8iir2vDnaTB6peXrLvCoNpRS5S8qPhE6hn qGzjv3bTyoS9Up0ZcLr.0RY1gF8q.e0_.5p7a79G1Yc1RX0v5EQLohOfrl0H mBCM3dMqDTOAVqDTgSR3iVVRRFplnGlEmUal2RlTzacFvLqXdvmq8_KlKES4 A4Q31BbUK2kyAQd66z5gEurFJZLo3fLPmuZr6zTyYURncXNz5rLlIx9Ff9Ck Og9ckAA4Bc0XFUJEtEfheC2H7ZvKmEm6_nWKLJFjcVWPyTKCKk2kXIjOjj9d OTToU0zY582zQTn4ZLtPSq31Ymm69zxMEk2k8ErSGvwu53Q2ZRkDxu8MNw7z ulthl5gYfthCuOORPhyJwcDnP3OHYTldtbqlKYkc76eUrZMnAIl6WO.PqJHZ 7qDdx6qzok_.KimW8KPrlRQ8MwpTtLwWSHIQHYiSmh1vPPcj13OQVN.9KXRj kA1LuSYJXGoAKepweHtseX5_wCiQuNMqO30yEKBVBTCcjVqxeLGen.gGz4kM InAXshcvL2MRZnlLArZWmI.4cpiz084Xm7VqzaDWmbPTok6bkRGKhPjCkguT fLZigDaRqms8sxEf_WGaTqH9iLVUAz7V2fn3UzJXZq_Hs68H0R3Y9t8yoYmi TMslobRyoP4nEMyrWSgJOOTWN3NsfahEdOkZK.I8OFwaRaS1Hy9r3Rpfu86q 25K0qPXMWJZXWchuecPIkSYDwaRCSLwfD9nXVk9alxP_EXWIW0idcnZ1xs9F x2fgym581CmR9vFludTJjNOtwaCI2M9ouG4Jo9yUB2hkLSZNHzy_x1nTG7xV rsdfZz0Ddvw2YfkEk.O8uhcPehW_wTXIQvYKTboGD8S4wjmD3YjuOZJip51u N..aXDyZWGzKds74PmPYS7tBDoukidFnBBI5c93iVKkgq9vrggeQW5cjw680 IDGt_odGzjD5gn_qOLtFw_fdJWggpHKZB.OAtVhAUu6hRbyecfYDUAjauwtl adjxmNJvSZaBMuKcTUpH0XLdSfP2fp.Oog39p4TNSdj79MqmqL00Sa66VTMv gZVNiWqmyfO3Uh0.cxPyMsCSanIW7k4GX7uUVcZTrJhgAU7wDn49rNVmd80u jVObxIKhgxlHesSrtdjwzwnkX59rYkyy65n4cKTh1gDFD0aKZAkjOFJnLXvt mnkVAUzRCEALkco-
X-Originating-IP: [65.54.190.100]
Authentication-Results: mta1263.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s25.bay0.hotmail.com) (65.54.190.100) by mta1263.mail.ac4.yahoo.com with SMTP; Thu, 07 Feb 2013 03:39:50 -0800
Received: from BAY146-W18 ([65.54.190.123]) by bay0-omc2-s25.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 7 Feb 2013 03:39:49 -0800
X-EIP: [IqVGmK0w0oLjwT2X+oNKJGn1RTxTliB1]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <BAY146-W18416BA2828AD7841F411EC2060@phx.gbl>
Return-Path: nultyri1980@live.com
Content-Type: multipart/alternative; boundary=”_9a9adec8-f8e1-4b56-8b33-1467878732f5_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: waiting to read from you soon.

RECEIVED_IP: 65.54.190.123 IP_USED: 65.54.190.100

THIRD HEADER:

Return-Path: <nultyri1980@live.com>
X-YahooFilteredBulk: 65.54.190.102
X-Originating-IP: [65.54.190.102]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s27.bay0.hotmail.com) (65.54.190.102) by mta1285.mail.ac4.yahoo.com with SMTP; Thu, 07 Feb 2013 03:24:22 -0800
Received: from BAY146-W47 ([65.54.190.123]) by bay0-omc2-s27.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 7 Feb 2013 03:24:20 -0800
X-EIP: [GjEee5wEdwhjQ6WfsAb/S8iGhYrE9CEz]
X-Originating-Email: [nultyri1980@live.com]
Return-Path: nultyri1980@live.com
Content-Type: multipart/alternative; boundary=”_fb412a94-7270-497c-9056-a6250dfe01a4_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: WAITING TO READ FROM YOU SOON

 
1 Comment

Posted by on 02/04/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , ,

One response to ““nulty rita”

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: