RSS

Tag Archives: 157.55.1.174

“Fatima Almuntasir” aka “Daniel David” aka “Christopher Benson”

WARNING – NIGERIAN SCAM / PROPOSAL

In less than 24 hours of posting the first email, Fatima Almuntasir had changed her name to Fatima Almuntasirf —   Scammers are always changing little details in their name hoping no one will take notice. This is so it doesn’t come up in search engines.

Subject Line: Dear Friend

Dear Friend,

Miss Fatima Almuntasir is my name. I am the only daughter of the former Libyan Minister of mineral resources, late Mr. Al-SalifAlmuntasir, who was slain-ed by the rebel forces during this ongoing political turned civil war in our country. I am 21 yrs old. I am an under-graduate, level 200 medical student at Misurata University,

Libya. I managed to escape into government re refugee camp in Ghana through the help of some Red Cross Personnel’s working in our country. I have an estates of US$29.7M only, in cash that my father left for me in a security company here. The fund was proceeds from the sale of crude oil. Now that he is no more, I want to transfer the ownership of the fund to you for safe keeping and relocate to your country to complete my medical course and permanently reside there. Please let me know if you can be honest with me and assist me. I propose to remunerate you with 25% of the fund at the successful end for your honesty, transparency, confidentiality and sincerity of purpose. All further details will be disclosed to you as soon as I have your confidence.
please contact me with my own E-mail(fatimaalmuntasir1@hotmail.com) for more information please.

Respectfully

Miss Fatima Almuntasir.

Return-Path: christopherbensonq1@yahoo.fr
X-YahooFilteredBulk: 212.82.109.197
X-Originating-IP: [212.82.109.197]
Authentication-Results: mta1397.mail.mud.yahoo.com
Received: from 127.0.0.1 (HELO nm24-vm6.bullet.mail.ird.yahoo.com) (212.82.109.197) by mta1397.mail.mud.yahoo.com with SMTP; Sun, 03 Mar 2013 11:17:08 -0800
Received: from [77.238.189.57] by nm24.bullet.mail.ird.yahoo.com with NNFMP; 03 Mar 2013 19:17:04 -0000
Received: from [212.82.98.103] by tm10.bullet.mail.ird.yahoo.com with NNFMP; 03 Mar 2013 19:17:04 -0000
Received: from [127.0.0.1] by omp1040.mail.ir2.yahoo.com with NNFMP; 03 Mar 2013 19:17:04 -0000
Received: from [41.138.165.93] by web132503.mail.ird.yahoo.com via HTTP; Sun, 03 Mar 2013 19:17:03 GMT
Message-ID: <1362338223.86850.YahooMailNeo@web132503.mail.ird.yahoo.com>
From: christopher benson <christopherbensonq1@yahoo.fr>
Reply-To: christopher benson <christopherbensonq1@yahoo.fr>
Subject: Dear Friend,
Christopher Benson Christopher Bensong

Subject Line: Dear Friend
From: “Fatima Almuntasir” <fatimaalmuntasir1@hotmail.com>

Dear. ,

Thanks for your mail and understanding towards this transaction.However i highly appreciate your quick response,not withstanding i have to explain this transaction very well to you for us to achieve our aim, I am Miss Fatima Almuntasir,the only daughter of the former Libyan Minister of mineral resources, late Mr. Al-SalifAlmuntasir, who was slain-ed by the rebel forces during this ongoing political turned civil war in our country. I am 21 yrs old. I am an under-graduate, level 200 medical student at Misurata University,Libya.

And now i am in a refugee camp where i hide myself for my dear life.Again,as i am here now in refugee camp we are not allowed to move out,we have limited areas to walk around,so i am using one Rev.Father computer to email you, but he does not know my communication with you even he does not know about this fund,i am doing this because i do not want any person to know about here to avoid any eyebrow over the fund.

Now my late father lodge this fund in a security company in my name and when he deposited it he registered it as family valuables for security reason,and he did not disclose the actual content of the trunk box to the security company,so the company knows that this box contain family valuables,is only I and you knows that this box contain money.

Meanwhile, the certificate of the deposit and also receipt which the security company issued to my late father in my name, is here with me and which i will give it to you to study it upon the conclusion where both of us have agree in one mind.

Lastly, before we proceed you have to send me your full name, and your house address together with your telephone number with any of your identity card,that will permit me to use it and write a letter of authorization on your name to the security firm by introducing you to them as my trustee,so that they will use the information and affect the changing of ownership agreement on your name as the new beneficiary,as you may understand that, they have to change my name to your name ,and once the changing of ownership agreement is done on your name,then they will release the trunk box to your country and i too will now come to join you and continue my studies over there for better future, i have put my trust on you and believe that you will not frustrate ,because this is only my future hope as an orphan.

Therefore once i hear from you , then i will send you all the document and also my passport copy for you to know who you are dealing with, please keep this issue within your self no third party should know about this until the fund gets to your hand.

I wait to hear from you soon.

Best Regards.
Miss Fatima Almuntasirf

Return-Path: <fatimaalmuntasir1@hotmail.com>
Received-SPF: pass (domain of hotmail.com designates 157.55.1.174 as permitted sender)
X-Originating-IP: [157.55.1.174]
Authentication-Results: mta1146.mail.gq1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dub0-omc2-s35.dub0.hotmail.com) 157.55.1.174 by mta1146.mail.gq1.yahoo.com with SMTP; Mon, 11 Mar 2013 02:23:13 -0700
Received: from DUB122-W17 ([157.55.1.138]) by dub0-omc2-s35.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 11 Mar 2013 02:22:54 -0700
X-EIP: [afsQ++ufBRsBsu/f+plpxCXCiTguz7fX]
X-Originating-Email: [fatimaalmuntasir1@hotmail.com]
Message-ID: <DUB122-W17D836ADCCEBA800B10221EEE10@phx.gbl>
Return-Path: fatimaalmuntasir1@hotmail.com
From: Fatima Almuntasir fatimaalmuntasir1@hotmail.com
Subject: Dear Friend

Return-Path: <fatimaalmuntasir90@yahoo.com>
X-Originating-IP: [98.138.90.65]
Authentication-Results: mta1455.mail.mud.yahoo.com from=yahoo.com
Received: from 127.0.0.1 (EHLO nm2.bullet.mail.ne1.yahoo.com) (98.138.90.65) by mta1455.mail.mud.yahoo.com with SMTP; Mon, 11 Mar 2013 02:24:12 -0700
Received: from [98.138.226.178] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 11 Mar 2013 09:24:12 -0000
Received: from [98.138.89.245] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 11 Mar 2013 09:24:12 -0000
Received: from [127.0.0.1] by omp1059.mail.ne1.yahoo.com with NNFMP; 11 Mar 2013 09:24:12 -0000
X-Yahoo-Newman-Id: 342843.79477.bm@omp1059.mail.ne1.yahoo.com
Received: (qmail 42814 invoked by uid 60001); 11 Mar 2013 09:24:12 -0000
Received: from [41.138.167.57] by web126106.mail.ne1.yahoo.com via HTTP; Mon, 11 Mar 2013 02:24:12 PDT
Message-ID: <1362993852.38536.YahooMailNeo@web126106.mail.ne1.yahoo.com>
From: Fatima Almuntasir <fatimaalmuntasir90@yahoo.com>
Reply-To: Fatima Almuntasir fatimaalmuntasir90@yahoo.com
Subject: Dear.

Subject Line: RE: Dear Friend contact the company

Dear ,

Thanks for your understanding.

Not withstanding, i received all the information which you sent to me and i have also use it and wrote a letter of authorization to the security company as i told you in my previous mail,by presenting you to them as my trustee,this letter of authorization bears your name as my trustee.

As i sumitted the letter to the security company on your behalf ,they made me to understand they need to hear from you as my trustee,therefore i will like you to contact them and introduce yourself to them,but please while contacting them do not let them to know the actual content of trunk box for security reason,because my late father registered it as a family valuables and he did it for security reason,that is why i said that you should not let them to know the content for us to achieve our aim.

Below is the contact of the security company
CONTACT PERSON :REV DANIEL DAVID
TELEPHONE NUMBER:+233547613292
universaltrust_ltd1@consultant.com

Please contact the security company and ask them , there procedure on how to retrieve the consignment from there custody to your country,please i will not like you to involve any other person in this transaction to avoid any eyebrow over the fund
I wait to hear from you soon.

Best Regards,

Miss Fatima

universaltrust_ltd1@consultant.com

Return-Path: <fatimaalmuntasir1@hotmail.com>
Received-SPF: pass (domain of hotmail.com designates 157.55.1.170 as permitted sender)
X-Originating-IP: [157.55.1.170]
Authentication-Results: mta1000.mail.bf1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dub0-omc2-s31.dub0.hotmail.com) (157.55.1.170) by mta1000.mail.bf1.yahoo.com with SMTP; Tue, 12 Mar 2013 09:31:20 -0700
Received: from DUB122-W27 ([157.55.1.138]) by dub0-omc2-s31.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 12 Mar 2013 09:31:19 -0700
X-EIP: [7M4sVVv1fzsVlZI5a+CQYK01DnHkExWn]
X-Originating-Email: [fatimaalmuntasir1@hotmail.com]
Message-ID: <DUB122-W27359F4B70B76995D0C55BEEE20@phx.gbl>
Return-Path: fatimaalmuntasir1@hotmail.com
Content-Type: multipart/alternative; boundary=”_e7a2c091-dd67-4630-bafa-2527490eb972_”
From: Fatima Almuntasir <fatimaalmuntasir1@hotmail.com>
Subject: RE: Dear Friend contact the company
In-Reply-To: <1363062832.48292.YahooMailClassic@web161004.mail.bf1.yahoo.com>
References: <DUB122-W17D836ADCCEBA800B10221EEE10@phx.gbl>,<1363062832.48292.YahooMailClassic@web161004.mail.bf1.yahoo.com>

 

Universal Trust Ltd +233547613292 23 3547613292
Fatima Almuntasir fatimaalmuntasir1@hotmail.com

 
Leave a comment

Posted by on 03/10/2013 in Other

 

Tags: , , , , , , , , , , , , , , , , ,

“Nulty Rita”

419 SCAM / ONLINE DATING SCAM

NOTE: This scammer has sent a previous email which can be found here. 

WAITING TO HEAR FROM YOU SOON.
From: Nulty-Rita nulty.rita23@gmail.com
Hello Dear.

How are you today, hope nice? i know you be wondering while i keep silent, well am doing great health wise only

been so busy with a lot of duty as the assignment is still in progress,

I just want to know if you have received the parcel from Mr Sylvester, please do let me know if the parcel has come to your care.

Yours.
Nulty.

Return-Path: nultyri1980@live.com
Received-SPF: pass (domain of live.com designates 157.55.1.156 as permitted sender)
X-Originating-IP: [157.55.1.156]
Authentication-Results: mta1455.mail.gq1.yahoo.com
Received: from 127.0.0.1 (EHLO dub0-omc2-s17.dub0.hotmail.com) (157.55.1.156)
by mta1455.mail.gq1.yahoo.com with SMTP; Thu, 20 Jun 2013 05:09:19 +0000
Received: from DUB114-W131 ([157.55.1.136]) by dub0-omc2-s17.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
X-TMN: [3a34Ffr58Po4PhIKfHhEAVGF1SUB1Smi]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <DUB114-W131EB32F1002E74F0735B02C28E0@phx.gbl>
Return-Path: nultyri1980@live.com
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: WAITING TO HEAR FROM YOU SOON.

MY ORGANIZATION25TH YEARS IN EXISTENCE.
Hello my dear,

How are you doing health wise,Hope good, i was so excited after the anniversary party, indeed i was filed with joy, on my mind, I wanted it to be a surprise for you, the organization where I am working just cerebrated the 25YEAR IN EXISTENCE,the party holed just two days ago, and been the organization departmental personal manager, i received some gift from the organization and friends, oh I wish you were here with me. But you know what, I didn’t forget you during this great celebrations.

Splendid my dear, I got some prize award and gifts from my organization, friends and relatives, your thought just came in my mind again and I decided to let you have some of the pleasant gifts and also to register in your heart that I valued our friendship so real and to wish you an awesome day as we are building more interest and oneness on our relationship.

I sent the gifts through our organization Gulf Chief Accountant, MR. BONFREY ERNEST, who went back to gulf regional continent since yesterday morning and I gave him the gifts package to deliver it to you when he arrives there since I was not really sure of your home postal address and I couldn’t wait for you to do that since he is in a hurry to catch his flight.

Right now am in Isreal for an official assignment, with some of our organization officials, which will take us a little time before completing the assignment.

I belief where MR.BONFREY ERNEST, is residing might be closer to you. Just contact him via email: bonfrey.ernest2@gmail.com ; and as well discuss with him on phone +228 90 56 57 81. Concerning on how you can receive my precious gift package for you.

Please do accept that token of gift for our friendship, I knew it isn’t much for the new year wishes but I sent it from my innermost heart and belief you will appreciate and apprehend it and everything inside the package cox it is coming from a special friend.

The content of the package are; a hp laptop 2012 edition, 2 I-phones, AN ENVELOPE, 1 Video Camera (Sony Camcorder) and some jewelries. I packed everything in a medium sealed carton and the Chief Accountant accepted to deliver it to you coz he didn’t return home with much luggage of his own. Please, Open the packet of the Laptop to bring out the envelope inside, it contains some of my recent photos and a surprise gift which I don’t want to disclose to you till you find it. Update me when you receive it,

So I will be aware, do comment on my photos, left with blue suit is my superior i at the other end and the middle is Mr Ernest incase when you meet with him you will not be confused. and the lest is members and my single view.

I’m wishing you a great and wonderful awesome season for the months of March, and as well saying happy new year 2013..

Yours truly friend,

Nulty.

“Nulty Rita” <nulty.rita23@gmail.com>
Return-Path: nultyri1980@live.com
X-YahooFilteredBulk: 157.55.1.174
Received-SPF: pass (domain of live.com designates 157.55.1.174 as permitted sender)
X-Originating-IP: [157.55.1.174]
Authentication-Results: mta1118.mail.gq1.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dub0-omc2-s35.dub0.hotmail.com) (157.55.1.174) by mta1118.mail.gq1.yahoo.com with SMTP; Sat, 02 Mar 2013 07:59:15 -0800
Received: from DUB114-W98 ([157.55.1.136]) by dub0-omc2-s35.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sat, 2 Mar 2013 07:59:12 -0800
X-EIP: [CPXQ+HYlIHIvzdgyJaVbb1C2FpyQuO/c]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <DUB114-W98830642040CF06AAB2CF9C2F80@phx.gbl>
Return-Path: nultyri1980@live.com
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: MY ORGANIZATION25TH YEARS IN EXISTENCE.
References: <BAY146-W42CA7A7E6EE20E69E5C668C2010@phx.gbl>,<1360054761.17753.YahooMailClassic@web161001.mail.bf1.yahoo.com>

_____

Hello Dear,

It is nice and joyful to found your email address on the Internet search during my quest for friendship to keep busy the lonely and lovely world. Hope you fill the vacuum? I thought is beautiful to make you a friend in this regard. My name is Nulty Rita a Canadian nationality, female. My friends tell me that I am a quiet person with a good sense of humor.

I am always fair, straightforward, honest and easy going lady and I seek trust worthy friendship. I believe in giving and taking on both sides and I value faithfulness. I like people for what they are and not for what they are not. I want to be your friend, and let share whatever we have in friendship.

I will be detailed in my consequential mails and expecting same from you if both considered:

AGE: 29 languages spoken: Fluent English & little Spanish.

It will be nice to know you in this regard.

Yours truly,

Nulty.

“nulty rita” <nulty.rita23@gmail.com>

Return-Path: <michael.williams7763@yahoo.com>
X-YahooFilteredBulk: 98.136.218.151
X-Originating-IP: [98.136.218.151]
Authentication-Results: mta1248.mail.bf1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm3-vm8.bullet.mail.gq1.yahoo.com) (98.136.218.151) by mta1248.mail.bf1.yahoo.com with SMTP; Mon, 11 Feb 2013 05:54:36 -0800
Received: from [98.137.12.191] by nm3.bullet.mail.gq1.yahoo.com with NNFMP; 11 Feb 2013 13:51:16 -0000
Received: from [98.137.12.217] by tm12.bullet.mail.gq1.yahoo.com with NNFMP; 11 Feb 2013 13:51:16 -0000
X-Yahoo-Newman-Id: 28265.28690.bm@omp1025.mail.gq1.yahoo.com
Received: (qmail 39232 invoked by uid 60001); 11 Feb 2013 13:51:15 -0000
Received: from [41.207.163.1] by web163403.mail.gq1.yahoo.com via HTTP; Mon, 11 Feb 2013 05:51:15 PST
Message-ID: <1360590675.38942.YahooMailClassic@web163403.mail.gq1.yahoo.com>
From: nulty rita nulty.rita23@gmail.com
Reply-To: nulty.rita23@gmail.com
Subject: Hello

RECEIVED_IP: 41.207.163.1 IP_USED: 98.136.218.151 – Also going by the name Michael Williams

___

SUBJECT LINE: MY GOOD FRIEND

Message contains attachments3 Files (31KB) | Download All
hh.jpg
h.jpg
hhhhh.jpg

Dear Friend .

Thanks for your mail, for our friendship continuations. I have been so busy these days due to some official Assignments, Which I can’t afford to overlook. I have been so tight-up with much job on my table in our on-going Worker’s Employment/recruitment program-taking place in Canada, USA, UK, Australia-Europe and Africa. I guess you will be interested?

I’m Nulty Rita by name, Canadian by nationality, but working and living in United state of America, 29 years of age, female single. I have no child yet but really love to have in the near future. I’m the only daughter of my parents. My parent got Three kids, two Male and i female. My elder brothers were married.

I ‘m a staff in an employment, immigration and recruiting organization here in U.S. Washington, DC. I love Songs, to be precise singing is my best gift, and I have a keyboard and love playing it. My hobbies are watching music; driving when/where there is no traffic hold and swimming sometimes.

I live in a moderate quiet area and have adapted to it. Reside at 395-North to Rte 1-North. Cross the 14th Street Bridge, stay in the left lane the exit Right 1-North. Pass Thomas Circle and continue on 14th Street. Turn left on Rhode Island Avenue, go one block to 1666 K Street, NW Washington, DC 20006

I need you to completely understand who I am and what I can give. It may not compare to other persons or past friendship but that doesn’t matter, we can make the best of friend. We can be friend regardless of colors, race, age and sometime sex maybe considered.

Find also, copies of my picture attached to this letter. Send me mails at your best convenient and your pictures if available at the moment.

Yours sincerely,

Nulty.

HEADER DETAILS:

Return-Path: <nultyri1980@live.com>
X-YahooFilteredBulk: 65.54.190.85
Received-SPF: pass (domain of live.com designates 65.54.190.85 as permitted sender)
X-YMailISG: wOOOviMWLDtfnaUqhOT0TKjcn0VJNQgPdUYaZIInvGs5LdpM .ufhrZqSKewFi9qFKFkNsM8laT8vEJqiLhNJdedLFAxiJuHnOiSYoub.xJtg vi2Ks.yqDpiYu8SBSRAWg8KjkdleFMEBNDWZAqs94zMeHTZwfZ5eMe2SrtAP 8jtdsF6CLdyq7a3d4vKqiEh2xKiavjF1ixPK3fSBoJMBjNhrXQ_lFj3oYC6Q VGfs3mGst0xvjs..a1E1WVkzKB8PqHFMHTmx6bOSmR._MIwduQ2rLVpMJkXT jch22fX2UnJbRnXPwGP3.JtEqrbSTVGCvJk6g5RE6vKhAPZImTLNOx0wV_ae .wgQZHKg0yMfSkMa_SgJzm9ZYF1wdbuwYgOXKRVmqYS37PAOxXmeGc02L_Rf 4J1CFQtcon6hDAR2vCrt5izpUOxi2z4lrSKeYGJvE3c91MWyG5YvU.7y2rlB NvAmozoOb8lF_0RuS1FcQ.pbdH1F821IANneA9.bHmDwQ12tAWnrT40E7ksu wCKfRVllBvz_WWtaHObDODgn34Yr8WyF.GGGLJFfXOth2b3idEr5fBkxevsn mJj8d3vfs6Y8VKyj6R56iAhi0yESkCk9o_JdiLXVkJgYyvCbl5cGKYpYVJtD QIm3592llFKkKkEFADtEyPZDrTRl.KAx4l8Mc3or3BtW6SW86tQsgmVivi6J gksG_OUIa0ILQg7x4_WdXXbxQ5.IhNkQH2Omnk2Lh1Kbda5r6xwSVYyKPucn fFOI6dm8_P04VWpA1z2s6omcFu86.TRrfE5OfcxRoHJC7cmUkqnJf99D.fJQ QHRSTZL3KHksumqYJGFYdMrN6WWKoC8K4u3vZPueW4rrcfG0wWEHPVDoYEnx J4jViPuMxGeig.hPP_ANTaPB2BxV15tSoI98jxl1xkNDYmg12JlYIhd9VgWc dLrlVzjrxVRJtAXeNFN3uHpLd0qV45Zznd0VRhD4xdqEBDoWVqrSlTeu6Lbj EuScecsjA_u4_ncbp5.PgTHDyfKHde3VFf2DQGP2SZNYZEqkEkDDK9IT9E56 BtrrcPj63JrWho9VQrFVf6_utKkOi6a6Xi_Izw6H18kpnONMMCvg5diY8RLZ DrcIYOlX6CUplLVmlgZqZs1sXSAgVneN0jemr1eHmD7ZM.L9pZ2PO5gQtbVd X4d4ya_wRHUeBvuIhmFdLoBbX9ZzpxeIifqw5Pcwq85zXYLdVd9QVRnxODm8 W5n8nVBUNgSfKYWUf7E0XNVLry5Uy92JqBwGSb1xa4ExHyY0Ot2VEjwFj.UI YFWUUJoQP3UdfKgK2bM-
X-Originating-IP: [65.54.190.85]
Authentication-Results: mta1241.mail.mud.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s10.bay0.hotmail.com) (65.54.190.85) by mta1241.mail.mud.yahoo.com with SMTP; Mon, 04 Feb 2013 00:59:06 -0800
Received: from BAY146-W42 ([65.54.190.123]) by bay0-omc2-s10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 4 Feb 2013 00:59:06 -0800
X-EIP: [9x96LiugYipI8EjJRus/A+fVRPioWw/g]
X-Originating-Email: nultyri1980@live.com
Message-ID: <BAY146-W42CA7A7E6EE20E69E5C668C2010@phx.gbl>
Return-Path: nultyri1980@live.com
Content-Type: multipart/mixed; boundary=”_bcbaed7d-04e8-4fa2-a89b-36a03cb0dec1_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: MY GOOD FRIEND
In-Reply-To: <BAY146-W586EAFFEFCCB2B3E87369AC2020@phx.gbl>

RECEIVED_IP: 65.54.190.123 IP_USED: 65.54.190.85 

Below is the emails and IP addresses that NuIty Rita used in her first email. This is another great sign when trying to detect scammers. They always use different IP addresses and frequently change their email addresses and use a different reply/return address. Alot of their emails are similar and may be idenical but different email servers. Example: JohnDoe@yahoo and JohnDoe@gmail — Also, notice the return address michael.williams7763@yahoo.com ? This scammer most likely using the fake name Michael Williams in other scams.

nulty rita nulty.rita23@gmail.com RETURN_ADDRESS: michael.williams7763@yahoo.com RECEIVED_IP: 41.207.184.25 IP_USED: 98.136.216.199

 
Leave a comment

Posted by on 02/05/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: