RSS

Tag Archives: Nulty Rita

“Nulty Rita”

419 SCAM / ONLINE DATING SCAM

NOTE: This scammer has sent a previous email which can be found here. 

WAITING TO HEAR FROM YOU SOON.
From: Nulty-Rita nulty.rita23@gmail.com
Hello Dear.

How are you today, hope nice? i know you be wondering while i keep silent, well am doing great health wise only

been so busy with a lot of duty as the assignment is still in progress,

I just want to know if you have received the parcel from Mr Sylvester, please do let me know if the parcel has come to your care.

Yours.
Nulty.

Return-Path: nultyri1980@live.com
Received-SPF: pass (domain of live.com designates 157.55.1.156 as permitted sender)
X-Originating-IP: [157.55.1.156]
Authentication-Results: mta1455.mail.gq1.yahoo.com
Received: from 127.0.0.1 (EHLO dub0-omc2-s17.dub0.hotmail.com) (157.55.1.156)
by mta1455.mail.gq1.yahoo.com with SMTP; Thu, 20 Jun 2013 05:09:19 +0000
Received: from DUB114-W131 ([157.55.1.136]) by dub0-omc2-s17.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
X-TMN: [3a34Ffr58Po4PhIKfHhEAVGF1SUB1Smi]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <DUB114-W131EB32F1002E74F0735B02C28E0@phx.gbl>
Return-Path: nultyri1980@live.com
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: WAITING TO HEAR FROM YOU SOON.

MY ORGANIZATION25TH YEARS IN EXISTENCE.
Hello my dear,

How are you doing health wise,Hope good, i was so excited after the anniversary party, indeed i was filed with joy, on my mind, I wanted it to be a surprise for you, the organization where I am working just cerebrated the 25YEAR IN EXISTENCE,the party holed just two days ago, and been the organization departmental personal manager, i received some gift from the organization and friends, oh I wish you were here with me. But you know what, I didn’t forget you during this great celebrations.

Splendid my dear, I got some prize award and gifts from my organization, friends and relatives, your thought just came in my mind again and I decided to let you have some of the pleasant gifts and also to register in your heart that I valued our friendship so real and to wish you an awesome day as we are building more interest and oneness on our relationship.

I sent the gifts through our organization Gulf Chief Accountant, MR. BONFREY ERNEST, who went back to gulf regional continent since yesterday morning and I gave him the gifts package to deliver it to you when he arrives there since I was not really sure of your home postal address and I couldn’t wait for you to do that since he is in a hurry to catch his flight.

Right now am in Isreal for an official assignment, with some of our organization officials, which will take us a little time before completing the assignment.

I belief where MR.BONFREY ERNEST, is residing might be closer to you. Just contact him via email: bonfrey.ernest2@gmail.com ; and as well discuss with him on phone +228 90 56 57 81. Concerning on how you can receive my precious gift package for you.

Please do accept that token of gift for our friendship, I knew it isn’t much for the new year wishes but I sent it from my innermost heart and belief you will appreciate and apprehend it and everything inside the package cox it is coming from a special friend.

The content of the package are; a hp laptop 2012 edition, 2 I-phones, AN ENVELOPE, 1 Video Camera (Sony Camcorder) and some jewelries. I packed everything in a medium sealed carton and the Chief Accountant accepted to deliver it to you coz he didn’t return home with much luggage of his own. Please, Open the packet of the Laptop to bring out the envelope inside, it contains some of my recent photos and a surprise gift which I don’t want to disclose to you till you find it. Update me when you receive it,

So I will be aware, do comment on my photos, left with blue suit is my superior i at the other end and the middle is Mr Ernest incase when you meet with him you will not be confused. and the lest is members and my single view.

I’m wishing you a great and wonderful awesome season for the months of March, and as well saying happy new year 2013..

Yours truly friend,

Nulty.

“Nulty Rita” <nulty.rita23@gmail.com>
Return-Path: nultyri1980@live.com
X-YahooFilteredBulk: 157.55.1.174
Received-SPF: pass (domain of live.com designates 157.55.1.174 as permitted sender)
X-Originating-IP: [157.55.1.174]
Authentication-Results: mta1118.mail.gq1.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dub0-omc2-s35.dub0.hotmail.com) (157.55.1.174) by mta1118.mail.gq1.yahoo.com with SMTP; Sat, 02 Mar 2013 07:59:15 -0800
Received: from DUB114-W98 ([157.55.1.136]) by dub0-omc2-s35.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sat, 2 Mar 2013 07:59:12 -0800
X-EIP: [CPXQ+HYlIHIvzdgyJaVbb1C2FpyQuO/c]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <DUB114-W98830642040CF06AAB2CF9C2F80@phx.gbl>
Return-Path: nultyri1980@live.com
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: MY ORGANIZATION25TH YEARS IN EXISTENCE.
References: <BAY146-W42CA7A7E6EE20E69E5C668C2010@phx.gbl>,<1360054761.17753.YahooMailClassic@web161001.mail.bf1.yahoo.com>

_____

Hello Dear,

It is nice and joyful to found your email address on the Internet search during my quest for friendship to keep busy the lonely and lovely world. Hope you fill the vacuum? I thought is beautiful to make you a friend in this regard. My name is Nulty Rita a Canadian nationality, female. My friends tell me that I am a quiet person with a good sense of humor.

I am always fair, straightforward, honest and easy going lady and I seek trust worthy friendship. I believe in giving and taking on both sides and I value faithfulness. I like people for what they are and not for what they are not. I want to be your friend, and let share whatever we have in friendship.

I will be detailed in my consequential mails and expecting same from you if both considered:

AGE: 29 languages spoken: Fluent English & little Spanish.

It will be nice to know you in this regard.

Yours truly,

Nulty.

“nulty rita” <nulty.rita23@gmail.com>

Return-Path: <michael.williams7763@yahoo.com>
X-YahooFilteredBulk: 98.136.218.151
X-Originating-IP: [98.136.218.151]
Authentication-Results: mta1248.mail.bf1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm3-vm8.bullet.mail.gq1.yahoo.com) (98.136.218.151) by mta1248.mail.bf1.yahoo.com with SMTP; Mon, 11 Feb 2013 05:54:36 -0800
Received: from [98.137.12.191] by nm3.bullet.mail.gq1.yahoo.com with NNFMP; 11 Feb 2013 13:51:16 -0000
Received: from [98.137.12.217] by tm12.bullet.mail.gq1.yahoo.com with NNFMP; 11 Feb 2013 13:51:16 -0000
X-Yahoo-Newman-Id: 28265.28690.bm@omp1025.mail.gq1.yahoo.com
Received: (qmail 39232 invoked by uid 60001); 11 Feb 2013 13:51:15 -0000
Received: from [41.207.163.1] by web163403.mail.gq1.yahoo.com via HTTP; Mon, 11 Feb 2013 05:51:15 PST
Message-ID: <1360590675.38942.YahooMailClassic@web163403.mail.gq1.yahoo.com>
From: nulty rita nulty.rita23@gmail.com
Reply-To: nulty.rita23@gmail.com
Subject: Hello

RECEIVED_IP: 41.207.163.1 IP_USED: 98.136.218.151 – Also going by the name Michael Williams

___

SUBJECT LINE: MY GOOD FRIEND

Message contains attachments3 Files (31KB) | Download All
hh.jpg
h.jpg
hhhhh.jpg

Dear Friend .

Thanks for your mail, for our friendship continuations. I have been so busy these days due to some official Assignments, Which I can’t afford to overlook. I have been so tight-up with much job on my table in our on-going Worker’s Employment/recruitment program-taking place in Canada, USA, UK, Australia-Europe and Africa. I guess you will be interested?

I’m Nulty Rita by name, Canadian by nationality, but working and living in United state of America, 29 years of age, female single. I have no child yet but really love to have in the near future. I’m the only daughter of my parents. My parent got Three kids, two Male and i female. My elder brothers were married.

I ‘m a staff in an employment, immigration and recruiting organization here in U.S. Washington, DC. I love Songs, to be precise singing is my best gift, and I have a keyboard and love playing it. My hobbies are watching music; driving when/where there is no traffic hold and swimming sometimes.

I live in a moderate quiet area and have adapted to it. Reside at 395-North to Rte 1-North. Cross the 14th Street Bridge, stay in the left lane the exit Right 1-North. Pass Thomas Circle and continue on 14th Street. Turn left on Rhode Island Avenue, go one block to 1666 K Street, NW Washington, DC 20006

I need you to completely understand who I am and what I can give. It may not compare to other persons or past friendship but that doesn’t matter, we can make the best of friend. We can be friend regardless of colors, race, age and sometime sex maybe considered.

Find also, copies of my picture attached to this letter. Send me mails at your best convenient and your pictures if available at the moment.

Yours sincerely,

Nulty.

HEADER DETAILS:

Return-Path: <nultyri1980@live.com>
X-YahooFilteredBulk: 65.54.190.85
Received-SPF: pass (domain of live.com designates 65.54.190.85 as permitted sender)
X-YMailISG: wOOOviMWLDtfnaUqhOT0TKjcn0VJNQgPdUYaZIInvGs5LdpM .ufhrZqSKewFi9qFKFkNsM8laT8vEJqiLhNJdedLFAxiJuHnOiSYoub.xJtg vi2Ks.yqDpiYu8SBSRAWg8KjkdleFMEBNDWZAqs94zMeHTZwfZ5eMe2SrtAP 8jtdsF6CLdyq7a3d4vKqiEh2xKiavjF1ixPK3fSBoJMBjNhrXQ_lFj3oYC6Q VGfs3mGst0xvjs..a1E1WVkzKB8PqHFMHTmx6bOSmR._MIwduQ2rLVpMJkXT jch22fX2UnJbRnXPwGP3.JtEqrbSTVGCvJk6g5RE6vKhAPZImTLNOx0wV_ae .wgQZHKg0yMfSkMa_SgJzm9ZYF1wdbuwYgOXKRVmqYS37PAOxXmeGc02L_Rf 4J1CFQtcon6hDAR2vCrt5izpUOxi2z4lrSKeYGJvE3c91MWyG5YvU.7y2rlB NvAmozoOb8lF_0RuS1FcQ.pbdH1F821IANneA9.bHmDwQ12tAWnrT40E7ksu wCKfRVllBvz_WWtaHObDODgn34Yr8WyF.GGGLJFfXOth2b3idEr5fBkxevsn mJj8d3vfs6Y8VKyj6R56iAhi0yESkCk9o_JdiLXVkJgYyvCbl5cGKYpYVJtD QIm3592llFKkKkEFADtEyPZDrTRl.KAx4l8Mc3or3BtW6SW86tQsgmVivi6J gksG_OUIa0ILQg7x4_WdXXbxQ5.IhNkQH2Omnk2Lh1Kbda5r6xwSVYyKPucn fFOI6dm8_P04VWpA1z2s6omcFu86.TRrfE5OfcxRoHJC7cmUkqnJf99D.fJQ QHRSTZL3KHksumqYJGFYdMrN6WWKoC8K4u3vZPueW4rrcfG0wWEHPVDoYEnx J4jViPuMxGeig.hPP_ANTaPB2BxV15tSoI98jxl1xkNDYmg12JlYIhd9VgWc dLrlVzjrxVRJtAXeNFN3uHpLd0qV45Zznd0VRhD4xdqEBDoWVqrSlTeu6Lbj EuScecsjA_u4_ncbp5.PgTHDyfKHde3VFf2DQGP2SZNYZEqkEkDDK9IT9E56 BtrrcPj63JrWho9VQrFVf6_utKkOi6a6Xi_Izw6H18kpnONMMCvg5diY8RLZ DrcIYOlX6CUplLVmlgZqZs1sXSAgVneN0jemr1eHmD7ZM.L9pZ2PO5gQtbVd X4d4ya_wRHUeBvuIhmFdLoBbX9ZzpxeIifqw5Pcwq85zXYLdVd9QVRnxODm8 W5n8nVBUNgSfKYWUf7E0XNVLry5Uy92JqBwGSb1xa4ExHyY0Ot2VEjwFj.UI YFWUUJoQP3UdfKgK2bM-
X-Originating-IP: [65.54.190.85]
Authentication-Results: mta1241.mail.mud.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s10.bay0.hotmail.com) (65.54.190.85) by mta1241.mail.mud.yahoo.com with SMTP; Mon, 04 Feb 2013 00:59:06 -0800
Received: from BAY146-W42 ([65.54.190.123]) by bay0-omc2-s10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 4 Feb 2013 00:59:06 -0800
X-EIP: [9x96LiugYipI8EjJRus/A+fVRPioWw/g]
X-Originating-Email: nultyri1980@live.com
Message-ID: <BAY146-W42CA7A7E6EE20E69E5C668C2010@phx.gbl>
Return-Path: nultyri1980@live.com
Content-Type: multipart/mixed; boundary=”_bcbaed7d-04e8-4fa2-a89b-36a03cb0dec1_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: MY GOOD FRIEND
In-Reply-To: <BAY146-W586EAFFEFCCB2B3E87369AC2020@phx.gbl>

RECEIVED_IP: 65.54.190.123 IP_USED: 65.54.190.85 

Below is the emails and IP addresses that NuIty Rita used in her first email. This is another great sign when trying to detect scammers. They always use different IP addresses and frequently change their email addresses and use a different reply/return address. Alot of their emails are similar and may be idenical but different email servers. Example: JohnDoe@yahoo and JohnDoe@gmail — Also, notice the return address michael.williams7763@yahoo.com ? This scammer most likely using the fake name Michael Williams in other scams.

nulty rita nulty.rita23@gmail.com RETURN_ADDRESS: michael.williams7763@yahoo.com RECEIVED_IP: 41.207.184.25 IP_USED: 98.136.216.199

 
Leave a comment

Posted by on 02/05/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , , , , , ,

“nulty rita”

ROMANCE SCAM – ONLINE DATING – SCAMMER

All of the emails on this post are from Nulty Rita — I’ve put the header details under the emails. Scammer is using different IP and email addresses in each email.

romance_scams

SUBJECT LINE: Hello

Hello Dear,

It is nice and joyful to found your email address on the Internet search during my quest for friendship to keep busy the lonely and lovely world. Hope you fill the vacuum? I thought is beautiful to make you a friend in this regard. My name is Nulty Rita a Canadian nationality, female. My friends tell me that I am a quiet person with a good sense of humor.

I am always fair, straightforward, honest and easy going lady and I seek trust worthy friendship. I believe in giving and taking on both sides and I value faithfulness. I like people for what they are and not for what they are not. I want to be your friend, and let share whatever we have in friendship.

I will be detailed in my consequential mails and expecting same from you if both considered:

AGE: 29 languages spoken: Fluent English & little Spanish.

It will be nice to know you in this regard.

Yours truly,

Nulty.

___

EMAIL TWO –

SUBJECT LINE: waiting to read from you soon.

Thanks for your response and friendship continuation, am sorry for my late respond to you, due to some official jobs which i can’t over look in my office, I saw the picture you sent to me is very interesting and ham-some i love that, it gives me pressure when i read your mail, am looking for a serious relationship that will always exchanging ideas with me and the same time i will learn something from him, i think it will be interesting if you occupy the vacuum. I will be waiting to read from you soonest,

Thanks,Your beloved,

Nulty.

_______

THIRD EMAIL FROM NULTY RITA –

Thanks for your response and friendship continuation, am sorry for my late respond to you, due to some official jobs which i can’t over look in my office, I saw the picture you sent to me is very interesting and ham-some i love that, it gives me pressure when i read your mail, am looking for a serious relationship that will always exchanging ideas with me and the same time i will learn something from him, i think it will be interesting if you occupy the vacuum. I will be waiting to read from you soonest,

Thanks,Your beloved,

Nulty.

HEADER DETAILS:

Return-Path: <michael.williams7763@yahoo.com>
X-YahooFilteredBulk: 98.136.216.199
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: v_EU3goWLDtxr2FQVO1kRAvJR4p8Omw_uuoF7WARHE_SgVV_ bpbLV8e1qIRPWQALlOv138.Ok2_i41Jfi_sWdIhWeb2fUy6R.Kc7hPKPUMMi mdr8uBUz5AuqfDzFnqyFxvaBDSvhr725kMv1DiUeX7IabJOXM1aWO40XTceD ASSaaW0JH43vTjOeIV6_96mvOGj_lTmILiOK9XrOdkVBZKqWzTAU_w45I0bF aoArTHBH6Yjig.n_eq_1.gnx6T4gRxZE.bGc4oLGba7nKE_yCOmIRlXg6_Z5 8yaTLcK0PgmsZ8fmEs0eYOU9WKmXIVBANtTE6H2CwnwwDU8TIEY5BPg0djAx 9jrQ.4S.5qoO1MsYJ61FxDqhJARORWwm6cFijCg0.gzA6xXfaCgmBSziiSpS _L09_KbN7C1UZblljY1mTT2yhF7wd2sF22LK1qvwI.Ld0qxE0JKiksmBqutA MtwyPhEsyI45jaavUjQVRrWuC8iW6sfKBrrI_1EeSVRclO6gSXSTnAOCpq4J s4yA_mG07c7WgRKvbcz57_zmiaMblveBEFwdi1ZfuYfx7H046.oog2svJL6h DOMojjWxAaywELOVO5hH2FNrNghc1lxafwR9rLhOVxJomibqazix.nMyOBHn Ln9_HOexc46rXN7heZ1LaVogJMvpLALL7NuWAhLX8aMP3IjSZ244cajk1WM1 cxiptdrrIlRP6doBHuZ9L2XzXzeEs4qTwXoKborT.qWohUpebxPiv6VY9GZi YrjBFQQrthXQwDL2p5qvQb8FlE.RYH9G6HWy0_mDvxD5BcB9uETzKQnRw2bj rUI1XXqyR8YCF5_uwglfFkR0pLbqN_Ha_BZkAoV8JuMQyg7ONHDgomoeFDnd 2wVb0GfDxIx7C6MwaKwcx7fh4bZEmYJXqVl5J9nfXr.AUt9UXlqXi1L19wHg dWl1omgF48oVhllrYLKu3INJ028GiKBHpeCkgszIpzxZJ3Sl3vhIofwpE9GX L1NWXt2FxMvR1H5kWbHSkeMWKC1wjxFG5wnI7vL6.QCWVdeid1CNl.8C2T3B cuEZu8J0GYetrsgEgyce9mVx_yXJqWZLgftFfOTRwPlEz9d0Edvbdzvb2P0O IpX3NPltzUiAmXT6oqN8u6Cl5VytQ.0MmzfIyAbtuEMKiKQ.3NS1UWfGMciF doAZ9nFmiFHIWT7Z6_pQ1BEMaHjRyn8lgePCUuBoN5XkM9N2qOMyNwEBqM5U 9.WDL9g99tB1IUc0Z4S7f2C7fP5UHkwGaaXaiNF.oIIODWUhhrtBpH_r5lz5 Y8vLng37VNZGRMT0QqQP.Ykyk3QDyzFpVz86qw5lTV1WbnvycgD_RUYALS3u 4REp5mErkD3rVrZeuzRLM6uYeR7vtNkmigkEnXYyPQ–
X-Originating-IP: [98.136.216.199]
Authentication-Results: mta1382.mail.gq1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm30-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.199) by mta1382.mail.gq1.yahoo.com with SMTP; Sat, 02 Feb 2013 23:18:10 -0800
Received: from [98.137.12.189] by nm30.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
Received: from [98.137.12.242] by tm10.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
Received: from [127.0.0.1] by omp1050.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 311370.83000.bm@omp1050.mail.gq1.yahoo.com
Received: (qmail 62306 invoked by uid 60001); 3 Feb 2013 07:18:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1359875890; bh=CYH4aW/vXnFu6XxmeTfb8LB5QPC+tPQSLrPr0gNnyR4=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vyI+zCTHzdaW5W2vq8YuMJYcZxlo726RH+4c9hsFzpVw7Rqm0XWNnU6kMYCKjkVCwQCMEOx4kqjcWlxpNlVkpQ/jmVNPKGtkTCmr2Kz4mR/EFWsyhLzVaoLcu3ZcEivjixhhhppt4fPreHNsedxBUBc2QbtSU8165oHZRH+86u8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=S9D1a3sEM64Qpx99F29253XC3e/QunCc4mkcVhh/UDKDs0PYUdC1B66APbJhvdS+iGCgNLg9fQX+HK5A72x1eZ/8XHq6pN9fjNi5Cr6V3y04xsDgc5dPhvcFq29VdbeXiZXf6drDvwNeuT/nMz3IFBK70J2lFlWhm8iyLASFiPM=;
X-YMail-OSG: vpBsc8AVM1ktRTNJG9zqZuIXG3eH1Do1oc6NjwgBAx6nqRt B9xVVUbwPPQyO.t0DRyVzQQO9xMpcz1fya0BVHXd8eLIfMw30JpR0bnppA6z LMCgOQZpCbFK_ewcc0W04BkU36BwFH6Uyx.n4.j.EXyrnKewca8JTOqVJej. FtzPkV63fiy4TCdIoBGxF0eEPdTlUx_wznhfWtWmh3pX3DuGxwP2Wm2NPr5k FYdhac6m2W3Jkcktx7RS1Evvp89Cu4dyZ9DEvSTf.tOuUEq442yQMIwWWhD0 hMVQYu1A30S7jxzAKDVImZG7Dmi3kt1sbXsoc88Dn9QJ82dekE739enmScRS 9M9nH2o0G_68mtPMK65aHTT4uUIkhyp1J5JGtqrVap9kFJuvKCymK2RQUZyr 9_nzXREArt4J1azO1SoTgJH8D81TGfDLyDzrPVggl2irAaC8ThEVvhMcgjLd zd3HBYpyT8Q5goXd2jsEYF6kOF7VJCMpqboofIvmz8wSl2T7XxeieAhs9YD9 k6W474_4G211.n1kvPmRyaE.Pci1eEsEnfJBIdn.Us6QCTvkVrnGrYCtbTFQ oXTaK8aD2u0POiavSwPbNwyGhr7Cfo_.qz0b_vAGo3MziGD7be0wb1FCgqlJ iLMkZaDZ9h4sU_uBNJIc-
Received: from [41.207.184.25] by web163406.mail.gq1.yahoo.com via HTTP; Sat, 02 Feb 2013 23:18:10 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <1359875890.71870.YahooMailClassic@web163406.mail.gq1.yahoo.com>
From: nulty rita <nulty.rita23@gmail.com>
Reply-To: nulty.rita23@gmail.com
Subject: Hello

nulty rita nulty.rita23@gmail.com RETURN_ADDRESS: michael.williams7763@yahoo.com RECEIVED_IP: 41.207.184.25 IP_USED: 98.136.216.199

You can tell by the return address that this scammer uses, or used, the name Michael Williams to send out spam.

In the second email, the scammer used

Return-Path: <nultyri1980@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.100 as permitted sender) IGNvbnRpbnVhdGlvbiwgYW0gc29ycnkgZm9yIG15IGxhdGUgcmVzcG9uZCB0 byB5b3UsIGR1ZSB0byBzb21lIG9mZmljaWFsIGpvYnMgd2hpY2ggaSBjYW4n dCBvdmVyIGxvb2sgaW4gbXkgb2ZmaWNlLCBJIHNhdyB0aGUgcGljdHVyZSB5 b3Ugc2VudCB0byBtZSBpcyB2ZXJ5IGludGVyZXN0aW5nIGFuZCBoYW0tc29t ZSBpIGxvdmUgdGhhdCwgaXQgZ2l2ZXMgbWUgcHJlc3N1cmUgdwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: s_YHocUWLDvKLd_cNdSu2_dyD.4lsfGNHQhkhqhTvUcUNJdI ePY7VF4_7F1qAJWmi.YJm1fRexH9K24EC1maTbj79iBn.wwzpxa8Gaxg7tF. D75_m2NdEhVLTZwssac61o1P4X8iir2vDnaTB6peXrLvCoNpRS5S8qPhE6hn qGzjv3bTyoS9Up0ZcLr.0RY1gF8q.e0_.5p7a79G1Yc1RX0v5EQLohOfrl0H mBCM3dMqDTOAVqDTgSR3iVVRRFplnGlEmUal2RlTzacFvLqXdvmq8_KlKES4 A4Q31BbUK2kyAQd66z5gEurFJZLo3fLPmuZr6zTyYURncXNz5rLlIx9Ff9Ck Og9ckAA4Bc0XFUJEtEfheC2H7ZvKmEm6_nWKLJFjcVWPyTKCKk2kXIjOjj9d OTToU0zY582zQTn4ZLtPSq31Ymm69zxMEk2k8ErSGvwu53Q2ZRkDxu8MNw7z ulthl5gYfthCuOORPhyJwcDnP3OHYTldtbqlKYkc76eUrZMnAIl6WO.PqJHZ 7qDdx6qzok_.KimW8KPrlRQ8MwpTtLwWSHIQHYiSmh1vPPcj13OQVN.9KXRj kA1LuSYJXGoAKepweHtseX5_wCiQuNMqO30yEKBVBTCcjVqxeLGen.gGz4kM InAXshcvL2MRZnlLArZWmI.4cpiz084Xm7VqzaDWmbPTok6bkRGKhPjCkguT fLZigDaRqms8sxEf_WGaTqH9iLVUAz7V2fn3UzJXZq_Hs68H0R3Y9t8yoYmi TMslobRyoP4nEMyrWSgJOOTWN3NsfahEdOkZK.I8OFwaRaS1Hy9r3Rpfu86q 25K0qPXMWJZXWchuecPIkSYDwaRCSLwfD9nXVk9alxP_EXWIW0idcnZ1xs9F x2fgym581CmR9vFludTJjNOtwaCI2M9ouG4Jo9yUB2hkLSZNHzy_x1nTG7xV rsdfZz0Ddvw2YfkEk.O8uhcPehW_wTXIQvYKTboGD8S4wjmD3YjuOZJip51u N..aXDyZWGzKds74PmPYS7tBDoukidFnBBI5c93iVKkgq9vrggeQW5cjw680 IDGt_odGzjD5gn_qOLtFw_fdJWggpHKZB.OAtVhAUu6hRbyecfYDUAjauwtl adjxmNJvSZaBMuKcTUpH0XLdSfP2fp.Oog39p4TNSdj79MqmqL00Sa66VTMv gZVNiWqmyfO3Uh0.cxPyMsCSanIW7k4GX7uUVcZTrJhgAU7wDn49rNVmd80u jVObxIKhgxlHesSrtdjwzwnkX59rYkyy65n4cKTh1gDFD0aKZAkjOFJnLXvt mnkVAUzRCEALkco-
X-Originating-IP: [65.54.190.100]
Authentication-Results: mta1263.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s25.bay0.hotmail.com) (65.54.190.100) by mta1263.mail.ac4.yahoo.com with SMTP; Thu, 07 Feb 2013 03:39:50 -0800
Received: from BAY146-W18 ([65.54.190.123]) by bay0-omc2-s25.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 7 Feb 2013 03:39:49 -0800
X-EIP: [IqVGmK0w0oLjwT2X+oNKJGn1RTxTliB1]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <BAY146-W18416BA2828AD7841F411EC2060@phx.gbl>
Return-Path: nultyri1980@live.com
Content-Type: multipart/alternative; boundary=”_9a9adec8-f8e1-4b56-8b33-1467878732f5_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: waiting to read from you soon.

RECEIVED_IP: 65.54.190.123 IP_USED: 65.54.190.100

THIRD HEADER:

Return-Path: <nultyri1980@live.com>
X-YahooFilteredBulk: 65.54.190.102
X-Originating-IP: [65.54.190.102]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s27.bay0.hotmail.com) (65.54.190.102) by mta1285.mail.ac4.yahoo.com with SMTP; Thu, 07 Feb 2013 03:24:22 -0800
Received: from BAY146-W47 ([65.54.190.123]) by bay0-omc2-s27.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 7 Feb 2013 03:24:20 -0800
X-EIP: [GjEee5wEdwhjQ6WfsAb/S8iGhYrE9CEz]
X-Originating-Email: [nultyri1980@live.com]
Return-Path: nultyri1980@live.com
Content-Type: multipart/alternative; boundary=”_fb412a94-7270-497c-9056-a6250dfe01a4_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: WAITING TO READ FROM YOU SOON

 
1 Comment

Posted by on 02/04/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , ,

 
%d bloggers like this: