“Nulty Rita”

419 SCAM / ONLINE DATING SCAM

NOTE: This scammer has sent a previous email which can be found here. 

WAITING TO HEAR FROM YOU SOON.
From: Nulty-Rita nulty.rita23@gmail.com
Hello Dear.

How are you today, hope nice? i know you be wondering while i keep silent, well am doing great health wise only

been so busy with a lot of duty as the assignment is still in progress,

I just want to know if you have received the parcel from Mr Sylvester, please do let me know if the parcel has come to your care.

Yours.
Nulty.

Return-Path: nultyri1980@live.com
Received-SPF: pass (domain of live.com designates 157.55.1.156 as permitted sender)
X-Originating-IP: [157.55.1.156]
Authentication-Results: mta1455.mail.gq1.yahoo.com
Received: from 127.0.0.1 (EHLO dub0-omc2-s17.dub0.hotmail.com) (157.55.1.156)
by mta1455.mail.gq1.yahoo.com with SMTP; Thu, 20 Jun 2013 05:09:19 +0000
Received: from DUB114-W131 ([157.55.1.136]) by dub0-omc2-s17.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
X-TMN: [3a34Ffr58Po4PhIKfHhEAVGF1SUB1Smi]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <DUB114-W131EB32F1002E74F0735B02C28E0@phx.gbl>
Return-Path: nultyri1980@live.com
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: WAITING TO HEAR FROM YOU SOON.

MY ORGANIZATION25TH YEARS IN EXISTENCE.
Hello my dear,

How are you doing health wise,Hope good, i was so excited after the anniversary party, indeed i was filed with joy, on my mind, I wanted it to be a surprise for you, the organization where I am working just cerebrated the 25YEAR IN EXISTENCE,the party holed just two days ago, and been the organization departmental personal manager, i received some gift from the organization and friends, oh I wish you were here with me. But you know what, I didn’t forget you during this great celebrations.

Splendid my dear, I got some prize award and gifts from my organization, friends and relatives, your thought just came in my mind again and I decided to let you have some of the pleasant gifts and also to register in your heart that I valued our friendship so real and to wish you an awesome day as we are building more interest and oneness on our relationship.

I sent the gifts through our organization Gulf Chief Accountant, MR. BONFREY ERNEST, who went back to gulf regional continent since yesterday morning and I gave him the gifts package to deliver it to you when he arrives there since I was not really sure of your home postal address and I couldn’t wait for you to do that since he is in a hurry to catch his flight.

Right now am in Isreal for an official assignment, with some of our organization officials, which will take us a little time before completing the assignment.

I belief where MR.BONFREY ERNEST, is residing might be closer to you. Just contact him via email: bonfrey.ernest2@gmail.com ; and as well discuss with him on phone +228 90 56 57 81. Concerning on how you can receive my precious gift package for you.

Please do accept that token of gift for our friendship, I knew it isn’t much for the new year wishes but I sent it from my innermost heart and belief you will appreciate and apprehend it and everything inside the package cox it is coming from a special friend.

The content of the package are; a hp laptop 2012 edition, 2 I-phones, AN ENVELOPE, 1 Video Camera (Sony Camcorder) and some jewelries. I packed everything in a medium sealed carton and the Chief Accountant accepted to deliver it to you coz he didn’t return home with much luggage of his own. Please, Open the packet of the Laptop to bring out the envelope inside, it contains some of my recent photos and a surprise gift which I don’t want to disclose to you till you find it. Update me when you receive it,

So I will be aware, do comment on my photos, left with blue suit is my superior i at the other end and the middle is Mr Ernest incase when you meet with him you will not be confused. and the lest is members and my single view.

I’m wishing you a great and wonderful awesome season for the months of March, and as well saying happy new year 2013..

Yours truly friend,

Nulty.

“Nulty Rita” <nulty.rita23@gmail.com>
Return-Path: nultyri1980@live.com
X-YahooFilteredBulk: 157.55.1.174
Received-SPF: pass (domain of live.com designates 157.55.1.174 as permitted sender)
X-Originating-IP: [157.55.1.174]
Authentication-Results: mta1118.mail.gq1.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dub0-omc2-s35.dub0.hotmail.com) (157.55.1.174) by mta1118.mail.gq1.yahoo.com with SMTP; Sat, 02 Mar 2013 07:59:15 -0800
Received: from DUB114-W98 ([157.55.1.136]) by dub0-omc2-s35.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sat, 2 Mar 2013 07:59:12 -0800
X-EIP: [CPXQ+HYlIHIvzdgyJaVbb1C2FpyQuO/c]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <DUB114-W98830642040CF06AAB2CF9C2F80@phx.gbl>
Return-Path: nultyri1980@live.com
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: MY ORGANIZATION25TH YEARS IN EXISTENCE.
References: <BAY146-W42CA7A7E6EE20E69E5C668C2010@phx.gbl>,<1360054761.17753.YahooMailClassic@web161001.mail.bf1.yahoo.com>

_____

Hello Dear,

It is nice and joyful to found your email address on the Internet search during my quest for friendship to keep busy the lonely and lovely world. Hope you fill the vacuum? I thought is beautiful to make you a friend in this regard. My name is Nulty Rita a Canadian nationality, female. My friends tell me that I am a quiet person with a good sense of humor.

I am always fair, straightforward, honest and easy going lady and I seek trust worthy friendship. I believe in giving and taking on both sides and I value faithfulness. I like people for what they are and not for what they are not. I want to be your friend, and let share whatever we have in friendship.

I will be detailed in my consequential mails and expecting same from you if both considered:

AGE: 29 languages spoken: Fluent English & little Spanish.

It will be nice to know you in this regard.

Yours truly,

Nulty.

“nulty rita” <nulty.rita23@gmail.com>

Return-Path: <michael.williams7763@yahoo.com>
X-YahooFilteredBulk: 98.136.218.151
X-Originating-IP: [98.136.218.151]
Authentication-Results: mta1248.mail.bf1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm3-vm8.bullet.mail.gq1.yahoo.com) (98.136.218.151) by mta1248.mail.bf1.yahoo.com with SMTP; Mon, 11 Feb 2013 05:54:36 -0800
Received: from [98.137.12.191] by nm3.bullet.mail.gq1.yahoo.com with NNFMP; 11 Feb 2013 13:51:16 -0000
Received: from [98.137.12.217] by tm12.bullet.mail.gq1.yahoo.com with NNFMP; 11 Feb 2013 13:51:16 -0000
X-Yahoo-Newman-Id: 28265.28690.bm@omp1025.mail.gq1.yahoo.com
Received: (qmail 39232 invoked by uid 60001); 11 Feb 2013 13:51:15 -0000
Received: from [41.207.163.1] by web163403.mail.gq1.yahoo.com via HTTP; Mon, 11 Feb 2013 05:51:15 PST
Message-ID: <1360590675.38942.YahooMailClassic@web163403.mail.gq1.yahoo.com>
From: nulty rita nulty.rita23@gmail.com
Reply-To: nulty.rita23@gmail.com
Subject: Hello

RECEIVED_IP: 41.207.163.1 IP_USED: 98.136.218.151 – Also going by the name Michael Williams

___

SUBJECT LINE: MY GOOD FRIEND

Message contains attachments3 Files (31KB) | Download All
hh.jpg
h.jpg
hhhhh.jpg

Dear Friend .

Thanks for your mail, for our friendship continuations. I have been so busy these days due to some official Assignments, Which I can’t afford to overlook. I have been so tight-up with much job on my table in our on-going Worker’s Employment/recruitment program-taking place in Canada, USA, UK, Australia-Europe and Africa. I guess you will be interested?

I’m Nulty Rita by name, Canadian by nationality, but working and living in United state of America, 29 years of age, female single. I have no child yet but really love to have in the near future. I’m the only daughter of my parents. My parent got Three kids, two Male and i female. My elder brothers were married.

I ‘m a staff in an employment, immigration and recruiting organization here in U.S. Washington, DC. I love Songs, to be precise singing is my best gift, and I have a keyboard and love playing it. My hobbies are watching music; driving when/where there is no traffic hold and swimming sometimes.

I live in a moderate quiet area and have adapted to it. Reside at 395-North to Rte 1-North. Cross the 14th Street Bridge, stay in the left lane the exit Right 1-North. Pass Thomas Circle and continue on 14th Street. Turn left on Rhode Island Avenue, go one block to 1666 K Street, NW Washington, DC 20006

I need you to completely understand who I am and what I can give. It may not compare to other persons or past friendship but that doesn’t matter, we can make the best of friend. We can be friend regardless of colors, race, age and sometime sex maybe considered.

Find also, copies of my picture attached to this letter. Send me mails at your best convenient and your pictures if available at the moment.

Yours sincerely,

Nulty.

HEADER DETAILS:

Return-Path: <nultyri1980@live.com>
X-YahooFilteredBulk: 65.54.190.85
Received-SPF: pass (domain of live.com designates 65.54.190.85 as permitted sender)
X-YMailISG: wOOOviMWLDtfnaUqhOT0TKjcn0VJNQgPdUYaZIInvGs5LdpM .ufhrZqSKewFi9qFKFkNsM8laT8vEJqiLhNJdedLFAxiJuHnOiSYoub.xJtg vi2Ks.yqDpiYu8SBSRAWg8KjkdleFMEBNDWZAqs94zMeHTZwfZ5eMe2SrtAP 8jtdsF6CLdyq7a3d4vKqiEh2xKiavjF1ixPK3fSBoJMBjNhrXQ_lFj3oYC6Q VGfs3mGst0xvjs..a1E1WVkzKB8PqHFMHTmx6bOSmR._MIwduQ2rLVpMJkXT jch22fX2UnJbRnXPwGP3.JtEqrbSTVGCvJk6g5RE6vKhAPZImTLNOx0wV_ae .wgQZHKg0yMfSkMa_SgJzm9ZYF1wdbuwYgOXKRVmqYS37PAOxXmeGc02L_Rf 4J1CFQtcon6hDAR2vCrt5izpUOxi2z4lrSKeYGJvE3c91MWyG5YvU.7y2rlB NvAmozoOb8lF_0RuS1FcQ.pbdH1F821IANneA9.bHmDwQ12tAWnrT40E7ksu wCKfRVllBvz_WWtaHObDODgn34Yr8WyF.GGGLJFfXOth2b3idEr5fBkxevsn mJj8d3vfs6Y8VKyj6R56iAhi0yESkCk9o_JdiLXVkJgYyvCbl5cGKYpYVJtD QIm3592llFKkKkEFADtEyPZDrTRl.KAx4l8Mc3or3BtW6SW86tQsgmVivi6J gksG_OUIa0ILQg7x4_WdXXbxQ5.IhNkQH2Omnk2Lh1Kbda5r6xwSVYyKPucn fFOI6dm8_P04VWpA1z2s6omcFu86.TRrfE5OfcxRoHJC7cmUkqnJf99D.fJQ QHRSTZL3KHksumqYJGFYdMrN6WWKoC8K4u3vZPueW4rrcfG0wWEHPVDoYEnx J4jViPuMxGeig.hPP_ANTaPB2BxV15tSoI98jxl1xkNDYmg12JlYIhd9VgWc dLrlVzjrxVRJtAXeNFN3uHpLd0qV45Zznd0VRhD4xdqEBDoWVqrSlTeu6Lbj EuScecsjA_u4_ncbp5.PgTHDyfKHde3VFf2DQGP2SZNYZEqkEkDDK9IT9E56 BtrrcPj63JrWho9VQrFVf6_utKkOi6a6Xi_Izw6H18kpnONMMCvg5diY8RLZ DrcIYOlX6CUplLVmlgZqZs1sXSAgVneN0jemr1eHmD7ZM.L9pZ2PO5gQtbVd X4d4ya_wRHUeBvuIhmFdLoBbX9ZzpxeIifqw5Pcwq85zXYLdVd9QVRnxODm8 W5n8nVBUNgSfKYWUf7E0XNVLry5Uy92JqBwGSb1xa4ExHyY0Ot2VEjwFj.UI YFWUUJoQP3UdfKgK2bM-
X-Originating-IP: [65.54.190.85]
Authentication-Results: mta1241.mail.mud.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s10.bay0.hotmail.com) (65.54.190.85) by mta1241.mail.mud.yahoo.com with SMTP; Mon, 04 Feb 2013 00:59:06 -0800
Received: from BAY146-W42 ([65.54.190.123]) by bay0-omc2-s10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 4 Feb 2013 00:59:06 -0800
X-EIP: [9x96LiugYipI8EjJRus/A+fVRPioWw/g]
X-Originating-Email: nultyri1980@live.com
Message-ID: <BAY146-W42CA7A7E6EE20E69E5C668C2010@phx.gbl>
Return-Path: nultyri1980@live.com
Content-Type: multipart/mixed; boundary=”_bcbaed7d-04e8-4fa2-a89b-36a03cb0dec1_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: MY GOOD FRIEND
In-Reply-To: <BAY146-W586EAFFEFCCB2B3E87369AC2020@phx.gbl>

RECEIVED_IP: 65.54.190.123 IP_USED: 65.54.190.85 

Below is the emails and IP addresses that NuIty Rita used in her first email. This is another great sign when trying to detect scammers. They always use different IP addresses and frequently change their email addresses and use a different reply/return address. Alot of their emails are similar and may be idenical but different email servers. Example: JohnDoe@yahoo and JohnDoe@gmail — Also, notice the return address michael.williams7763@yahoo.com ? This scammer most likely using the fake name Michael Williams in other scams.

nulty rita nulty.rita23@gmail.com RETURN_ADDRESS: michael.williams7763@yahoo.com RECEIVED_IP: 41.207.184.25 IP_USED: 98.136.216.199

 

“nulty rita”

ROMANCE SCAM – ONLINE DATING – SCAMMER

All of the emails on this post are from Nulty Rita — I’ve put the header details under the emails. Scammer is using different IP and email addresses in each email.

SUBJECT LINE: Hello

Hello Dear,

It is nice and joyful to found your email address on the Internet search during my quest for friendship to keep busy the lonely and lovely world. Hope you fill the vacuum? I thought is beautiful to make you a friend in this regard. My name is Nulty Rita a Canadian nationality, female. My friends tell me that I am a quiet person with a good sense of humor.

I am always fair, straightforward, honest and easy going lady and I seek trust worthy friendship. I believe in giving and taking on both sides and I value faithfulness. I like people for what they are and not for what they are not. I want to be your friend, and let share whatever we have in friendship.

I will be detailed in my consequential mails and expecting same from you if both considered:

AGE: 29 languages spoken: Fluent English & little Spanish.

It will be nice to know you in this regard.

Yours truly,

Nulty.

___

EMAIL TWO –

SUBJECT LINE: waiting to read from you soon.

Thanks for your response and friendship continuation, am sorry for my late respond to you, due to some official jobs which i can’t over look in my office, I saw the picture you sent to me is very interesting and ham-some i love that, it gives me pressure when i read your mail, am looking for a serious relationship that will always exchanging ideas with me and the same time i will learn something from him, i think it will be interesting if you occupy the vacuum. I will be waiting to read from you soonest,

Thanks,Your beloved,

Nulty.

_______

THIRD EMAIL FROM NULTY RITA –

Thanks for your response and friendship continuation, am sorry for my late respond to you, due to some official jobs which i can’t over look in my office, I saw the picture you sent to me is very interesting and ham-some i love that, it gives me pressure when i read your mail, am looking for a serious relationship that will always exchanging ideas with me and the same time i will learn something from him, i think it will be interesting if you occupy the vacuum. I will be waiting to read from you soonest,

Thanks,Your beloved,

Nulty.

HEADER DETAILS:

Return-Path: <michael.williams7763@yahoo.com>
X-YahooFilteredBulk: 98.136.216.199
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: v_EU3goWLDtxr2FQVO1kRAvJR4p8Omw_uuoF7WARHE_SgVV_ bpbLV8e1qIRPWQALlOv138.Ok2_i41Jfi_sWdIhWeb2fUy6R.Kc7hPKPUMMi mdr8uBUz5AuqfDzFnqyFxvaBDSvhr725kMv1DiUeX7IabJOXM1aWO40XTceD ASSaaW0JH43vTjOeIV6_96mvOGj_lTmILiOK9XrOdkVBZKqWzTAU_w45I0bF aoArTHBH6Yjig.n_eq_1.gnx6T4gRxZE.bGc4oLGba7nKE_yCOmIRlXg6_Z5 8yaTLcK0PgmsZ8fmEs0eYOU9WKmXIVBANtTE6H2CwnwwDU8TIEY5BPg0djAx 9jrQ.4S.5qoO1MsYJ61FxDqhJARORWwm6cFijCg0.gzA6xXfaCgmBSziiSpS _L09_KbN7C1UZblljY1mTT2yhF7wd2sF22LK1qvwI.Ld0qxE0JKiksmBqutA MtwyPhEsyI45jaavUjQVRrWuC8iW6sfKBrrI_1EeSVRclO6gSXSTnAOCpq4J s4yA_mG07c7WgRKvbcz57_zmiaMblveBEFwdi1ZfuYfx7H046.oog2svJL6h DOMojjWxAaywELOVO5hH2FNrNghc1lxafwR9rLhOVxJomibqazix.nMyOBHn Ln9_HOexc46rXN7heZ1LaVogJMvpLALL7NuWAhLX8aMP3IjSZ244cajk1WM1 cxiptdrrIlRP6doBHuZ9L2XzXzeEs4qTwXoKborT.qWohUpebxPiv6VY9GZi YrjBFQQrthXQwDL2p5qvQb8FlE.RYH9G6HWy0_mDvxD5BcB9uETzKQnRw2bj rUI1XXqyR8YCF5_uwglfFkR0pLbqN_Ha_BZkAoV8JuMQyg7ONHDgomoeFDnd 2wVb0GfDxIx7C6MwaKwcx7fh4bZEmYJXqVl5J9nfXr.AUt9UXlqXi1L19wHg dWl1omgF48oVhllrYLKu3INJ028GiKBHpeCkgszIpzxZJ3Sl3vhIofwpE9GX L1NWXt2FxMvR1H5kWbHSkeMWKC1wjxFG5wnI7vL6.QCWVdeid1CNl.8C2T3B cuEZu8J0GYetrsgEgyce9mVx_yXJqWZLgftFfOTRwPlEz9d0Edvbdzvb2P0O IpX3NPltzUiAmXT6oqN8u6Cl5VytQ.0MmzfIyAbtuEMKiKQ.3NS1UWfGMciF doAZ9nFmiFHIWT7Z6_pQ1BEMaHjRyn8lgePCUuBoN5XkM9N2qOMyNwEBqM5U 9.WDL9g99tB1IUc0Z4S7f2C7fP5UHkwGaaXaiNF.oIIODWUhhrtBpH_r5lz5 Y8vLng37VNZGRMT0QqQP.Ykyk3QDyzFpVz86qw5lTV1WbnvycgD_RUYALS3u 4REp5mErkD3rVrZeuzRLM6uYeR7vtNkmigkEnXYyPQ–
X-Originating-IP: [98.136.216.199]
Authentication-Results: mta1382.mail.gq1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm30-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.199) by mta1382.mail.gq1.yahoo.com with SMTP; Sat, 02 Feb 2013 23:18:10 -0800
Received: from [98.137.12.189] by nm30.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
Received: from [98.137.12.242] by tm10.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
Received: from [127.0.0.1] by omp1050.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 311370.83000.bm@omp1050.mail.gq1.yahoo.com
Received: (qmail 62306 invoked by uid 60001); 3 Feb 2013 07:18:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1359875890; bh=CYH4aW/vXnFu6XxmeTfb8LB5QPC+tPQSLrPr0gNnyR4=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vyI+zCTHzdaW5W2vq8YuMJYcZxlo726RH+4c9hsFzpVw7Rqm0XWNnU6kMYCKjkVCwQCMEOx4kqjcWlxpNlVkpQ/jmVNPKGtkTCmr2Kz4mR/EFWsyhLzVaoLcu3ZcEivjixhhhppt4fPreHNsedxBUBc2QbtSU8165oHZRH+86u8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=S9D1a3sEM64Qpx99F29253XC3e/QunCc4mkcVhh/UDKDs0PYUdC1B66APbJhvdS+iGCgNLg9fQX+HK5A72x1eZ/8XHq6pN9fjNi5Cr6V3y04xsDgc5dPhvcFq29VdbeXiZXf6drDvwNeuT/nMz3IFBK70J2lFlWhm8iyLASFiPM=;
X-YMail-OSG: vpBsc8AVM1ktRTNJG9zqZuIXG3eH1Do1oc6NjwgBAx6nqRt B9xVVUbwPPQyO.t0DRyVzQQO9xMpcz1fya0BVHXd8eLIfMw30JpR0bnppA6z LMCgOQZpCbFK_ewcc0W04BkU36BwFH6Uyx.n4.j.EXyrnKewca8JTOqVJej. FtzPkV63fiy4TCdIoBGxF0eEPdTlUx_wznhfWtWmh3pX3DuGxwP2Wm2NPr5k FYdhac6m2W3Jkcktx7RS1Evvp89Cu4dyZ9DEvSTf.tOuUEq442yQMIwWWhD0 hMVQYu1A30S7jxzAKDVImZG7Dmi3kt1sbXsoc88Dn9QJ82dekE739enmScRS 9M9nH2o0G_68mtPMK65aHTT4uUIkhyp1J5JGtqrVap9kFJuvKCymK2RQUZyr 9_nzXREArt4J1azO1SoTgJH8D81TGfDLyDzrPVggl2irAaC8ThEVvhMcgjLd zd3HBYpyT8Q5goXd2jsEYF6kOF7VJCMpqboofIvmz8wSl2T7XxeieAhs9YD9 k6W474_4G211.n1kvPmRyaE.Pci1eEsEnfJBIdn.Us6QCTvkVrnGrYCtbTFQ oXTaK8aD2u0POiavSwPbNwyGhr7Cfo_.qz0b_vAGo3MziGD7be0wb1FCgqlJ iLMkZaDZ9h4sU_uBNJIc-
Received: from [41.207.184.25] by web163406.mail.gq1.yahoo.com via HTTP; Sat, 02 Feb 2013 23:18:10 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <1359875890.71870.YahooMailClassic@web163406.mail.gq1.yahoo.com>
From: nulty rita <nulty.rita23@gmail.com>
Reply-To: nulty.rita23@gmail.com
Subject: Hello

nulty rita nulty.rita23@gmail.com RETURN_ADDRESS: michael.williams7763@yahoo.com RECEIVED_IP: 41.207.184.25 IP_USED: 98.136.216.199

You can tell by the return address that this scammer uses, or used, the name Michael Williams to send out spam.

In the second email, the scammer used

Return-Path: <nultyri1980@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.100 as permitted sender) IGNvbnRpbnVhdGlvbiwgYW0gc29ycnkgZm9yIG15IGxhdGUgcmVzcG9uZCB0 byB5b3UsIGR1ZSB0byBzb21lIG9mZmljaWFsIGpvYnMgd2hpY2ggaSBjYW4n dCBvdmVyIGxvb2sgaW4gbXkgb2ZmaWNlLCBJIHNhdyB0aGUgcGljdHVyZSB5 b3Ugc2VudCB0byBtZSBpcyB2ZXJ5IGludGVyZXN0aW5nIGFuZCBoYW0tc29t ZSBpIGxvdmUgdGhhdCwgaXQgZ2l2ZXMgbWUgcHJlc3N1cmUgdwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: s_YHocUWLDvKLd_cNdSu2_dyD.4lsfGNHQhkhqhTvUcUNJdI ePY7VF4_7F1qAJWmi.YJm1fRexH9K24EC1maTbj79iBn.wwzpxa8Gaxg7tF. D75_m2NdEhVLTZwssac61o1P4X8iir2vDnaTB6peXrLvCoNpRS5S8qPhE6hn qGzjv3bTyoS9Up0ZcLr.0RY1gF8q.e0_.5p7a79G1Yc1RX0v5EQLohOfrl0H mBCM3dMqDTOAVqDTgSR3iVVRRFplnGlEmUal2RlTzacFvLqXdvmq8_KlKES4 A4Q31BbUK2kyAQd66z5gEurFJZLo3fLPmuZr6zTyYURncXNz5rLlIx9Ff9Ck Og9ckAA4Bc0XFUJEtEfheC2H7ZvKmEm6_nWKLJFjcVWPyTKCKk2kXIjOjj9d OTToU0zY582zQTn4ZLtPSq31Ymm69zxMEk2k8ErSGvwu53Q2ZRkDxu8MNw7z ulthl5gYfthCuOORPhyJwcDnP3OHYTldtbqlKYkc76eUrZMnAIl6WO.PqJHZ 7qDdx6qzok_.KimW8KPrlRQ8MwpTtLwWSHIQHYiSmh1vPPcj13OQVN.9KXRj kA1LuSYJXGoAKepweHtseX5_wCiQuNMqO30yEKBVBTCcjVqxeLGen.gGz4kM InAXshcvL2MRZnlLArZWmI.4cpiz084Xm7VqzaDWmbPTok6bkRGKhPjCkguT fLZigDaRqms8sxEf_WGaTqH9iLVUAz7V2fn3UzJXZq_Hs68H0R3Y9t8yoYmi TMslobRyoP4nEMyrWSgJOOTWN3NsfahEdOkZK.I8OFwaRaS1Hy9r3Rpfu86q 25K0qPXMWJZXWchuecPIkSYDwaRCSLwfD9nXVk9alxP_EXWIW0idcnZ1xs9F x2fgym581CmR9vFludTJjNOtwaCI2M9ouG4Jo9yUB2hkLSZNHzy_x1nTG7xV rsdfZz0Ddvw2YfkEk.O8uhcPehW_wTXIQvYKTboGD8S4wjmD3YjuOZJip51u N..aXDyZWGzKds74PmPYS7tBDoukidFnBBI5c93iVKkgq9vrggeQW5cjw680 IDGt_odGzjD5gn_qOLtFw_fdJWggpHKZB.OAtVhAUu6hRbyecfYDUAjauwtl adjxmNJvSZaBMuKcTUpH0XLdSfP2fp.Oog39p4TNSdj79MqmqL00Sa66VTMv gZVNiWqmyfO3Uh0.cxPyMsCSanIW7k4GX7uUVcZTrJhgAU7wDn49rNVmd80u jVObxIKhgxlHesSrtdjwzwnkX59rYkyy65n4cKTh1gDFD0aKZAkjOFJnLXvt mnkVAUzRCEALkco-
X-Originating-IP: [65.54.190.100]
Authentication-Results: mta1263.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s25.bay0.hotmail.com) (65.54.190.100) by mta1263.mail.ac4.yahoo.com with SMTP; Thu, 07 Feb 2013 03:39:50 -0800
Received: from BAY146-W18 ([65.54.190.123]) by bay0-omc2-s25.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 7 Feb 2013 03:39:49 -0800
X-EIP: [IqVGmK0w0oLjwT2X+oNKJGn1RTxTliB1]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <BAY146-W18416BA2828AD7841F411EC2060@phx.gbl>
Return-Path: nultyri1980@live.com
Content-Type: multipart/alternative; boundary=”_9a9adec8-f8e1-4b56-8b33-1467878732f5_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: waiting to read from you soon.

RECEIVED_IP: 65.54.190.123 IP_USED: 65.54.190.100

THIRD HEADER:

Return-Path: <nultyri1980@live.com>
X-YahooFilteredBulk: 65.54.190.102
X-Originating-IP: [65.54.190.102]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s27.bay0.hotmail.com) (65.54.190.102) by mta1285.mail.ac4.yahoo.com with SMTP; Thu, 07 Feb 2013 03:24:22 -0800
Received: from BAY146-W47 ([65.54.190.123]) by bay0-omc2-s27.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 7 Feb 2013 03:24:20 -0800
X-EIP: [GjEee5wEdwhjQ6WfsAb/S8iGhYrE9CEz]
X-Originating-Email: [nultyri1980@live.com]
Return-Path: nultyri1980@live.com
Content-Type: multipart/alternative; boundary=”_fb412a94-7270-497c-9056-a6250dfe01a4_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: WAITING TO READ FROM YOU SOON

 

“Lucy Gatoma”

ROMANCE SCAM – NIGERIAN SCAMMER

Hello
My name is Miss Lucy Gatoma ,I am 25 years old single Female looking for love and marriage. As I finished my prayers tonight and went into search for a nice friend I came across your contact,My mind and my heart told me to contact you for friendship, A friend who truly understand his or her friend and share their feelings together. please kindly accept my request,I believe that distance can ever be a barrier but let’s love connect us because love is a bridge that connected far distance to be close to each other,contact me on my private email lucygatoma@yahoo.co.uk ) Please try to send your pictures to me immediately you receives my reply and for more details on love and investment with you in your country.
Yours truely,

Miss Lucy Gatoma

HEADER DETAILS:

Return-Path: <lucygatoma@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.68
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: rYiPTOAWLDsflgQiWPbmAOH4ijHoo2QP7vcXZZK.ouC6wsWc 3KpcwZ8UHUcD7ff3bI2vrFpXpFhRYOr95B4AK4BqlROQ2gANEQrYcBc3n.Cu sMJRuktyqM4hMtJYA4NW57Fb5_MPatKBao1zibf9If2WMHmjo9.nmuBbx69O MBnLKSmpdQLXynbxqNGUqX4GPFOu_uQ4P7x9Ljb8NmUABqBF7f0kAoPBUK99 6e7Ydcu0xvVqyKGiUA4WXDoBzTJQR.dYd2p85ReipZULk4OO9JOubvoJa.5s fF9gtamUt3VhgGTgGywQRyln4m9jX0CFy6khZjX8hjzsNirvUQwRb6g1d0am 8JC4vmIoe96AJ2JZ78eh9GBqi2dtcXzrjcOhfmwhcJw7d_9aSRpPNu4ERr1F KiReU4S6hmzcqyNWIRd4ahdrtgDRFFZVUxoile9.aReNts0qL.inx6p3M3ef aLZLkg67029758bdNAlAiMEBXh6c2IA3x22ZT8nJnBtrFl0C6zfSnLPsLdg0 b9iIJN7HgAmEYAhp3EkCn5lek2GfFzIz3D.smxaFvmGZsBkbRgIyvDTDXUgM 0nRY5xDy_fQJEXZO0iy3Md_SAiyxQgGM2h642rt3oDZxRLVYD1u3pU8cIuBP UFILGVMBTLJdZaRaXGfjc7NUQkCRQPZ76Br115cwokMOMfFTtJoTvpJ6I5SX N0nYwYsrIkBDn6AAL0CigLiam77XAU.V2jv9wYGA5SDS9P4.EYr4iu81qGda vWYPM3i2LbqZ2mdyMOOMdXNL8wPEZXUQ9P3BMfWVBhMYAc4uWVC9IhbTWQzJ GmGmjyXuffuDcj5ErvUqv4HpmsRX6dn.MfSoxiRG6UuCZxMydJtVpERV8XVt DSJdPObDBhrF.9CTKO7PhtyyRTvNqsH1p_c1OVkmyjbLCB2BeCYEq0WPdfRm x5F17frAgiRrsNdUFj9g5pwMoV9vqxdVu17MyP69Vv..CsawrACBfTSpw8QO mXkOnUvasC6xWjLAvSeoXu0N7i1K14HkwpMPIW_xwjxGFkUGh0O13huZtiPD SghJZs2WdnodykE_McZ5AB1_T2M7X_93WDzfbNdYNUM.3AaJ7b7.6iLqrWd1 CemdNi3whbJNeGBvEy5ekeuEkb1iVWiebYf7Ic0FxbHdHIhYC9X8YR7gnfVr QvxGAfYfa2hWJItR.OQvpEuoVm52sJBdB9ReeTpi_YEX__mUdQsU3ieTNHhJ DNnF.J_YRWDGqRKtHQmxk9.lHAQ8W_vhK8Ov3zzCkntXiHTkWi.eYsRmUtxi iKC0uhoM8A3I2h6zDggAPT7zLOsL7N_zCgtJb9NUkm6LONpyjy9zACRf4zel HG0egJeH1NPZWIxJIN.pOtLwbuMTSZPbmgX9C2DksD5.knylb9AU119IiWPr zkQZLhmvOp6M3oD8uu8RL3V7Jw–
X-Originating-IP: [77.238.189.68]
Authentication-Results: mta1308.mail.mud.yahoo.com from=yahoo.co.uk; domainkeys=pass (ok); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ird.yahoo.com) (77.238.189.68) by mta1308.mail.mud.yahoo.com with SMTP; Fri, 18 Jan 2013 14:59:05 -0800
Received: from [77.238.189.234] by nm15.bullet.mail.ird.yahoo.com with NNFMP; 18 Jan 2013 22:58:48 -0000
Received: from [212.82.108.118] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 18 Jan 2013 22:58:46 -0000
Received: from [127.0.0.1] by omp1027.mail.ird.yahoo.com with NNFMP; 18 Jan 2013 22:58:46 -0000
X-Yahoo-Newman-Id: 641224.99002.bm@omp1027.mail.ird.yahoo.com
Received: (qmail 85530 invoked by uid 60001); 18 Jan 2013 22:58:46 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1358549926; bh=SXTsfIwGCv5NIPRj3/FCZbXpwFew86J2aBpsJ1FeYPs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=p9lXVAi9n0qvsAQGsAwLqq8h7JRC8StOJYycpFvd7zwxp5X2/DSETFDsBaD94tywKsw9Dh49W0xSev31MuGIWMsHwfW95zXhW9uJIjWYzhiIyuh6gy64eAKUFceGbkEnTurixq3LUDIYI4Pc922VZadhOsivwyqCdpHczp4y6IU=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=f+NSDjSt5+dY/4/shBxvwxtKZ3Jk6kLihiGbQ3vm2OEbhOkjlwD1K/yI3uRCutsEtmi29WfsIGygutRlGTsI+29sP0SpC5gH1qh0V1TKuQxDkjquP5Y3b885MmTJy6st+K00KhdfBo9xsxicWjDD2qzNZ6cgXzX7uwgL5i8r49o=;
X-YMail-OSG: NYbrcvgVM1ltbpnC.9U.F60ojU6B4q3psvzm7f1SD_c85lX pQo5pr.3KmqUt9oUk4dSmF1A3F8Ecz6CAECiUn0SIc7siaQgNea2WEv1SOHL ftzKNRovo4xgUvBwT6o2x83omfsXZUyg1WxVENADoS0dnpznFX.y1uKrbrXY GN338RcYZd6sZRxOqwVKaWpvk57W4Frx3Q3g0UsoObP0ATlN.ao_6TwyjOBI kotSmBnIll4T0hj1PPyHTrl46UYBLTeJUp.oAyieeK03iYrzeJz07YGEOolV tYnp6YxRci0NMj4MYrCVf1Twek61HIaYkKAy4Lxb8KOwJCZho6J3isR5xjXk L9BuYeR63xmjiwEOSok4bqxzxNqk.WsAzez3sZ1DT2_1PF.4tde3iQWKji7G OMZj96J9W19bLQnToNngHybfPNFzHJkqQMQ–
Received: from [41.82.120.206] by web171502.mail.ir2.yahoo.com via HTTP; Fri, 18 Jan 2013 22:58:46 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358549926.71914.YahooMailClassic@web171502.mail.ir2.yahoo.com>
From: Lucy Gatoma <lucygatoma@yahoo.co.uk>
Subject: CONTACT

Lucy Gatoma lucygatoma@yahoo.co.uk RETURN_ADDRESS: lucygatoma@yahoo.co.uk RECEIVED_IP: 41.82.120.206 IP_USED: 77.238.189.68

 

“Ziva Abiya”

WARNING – ROMANCE SCAM – NIGERIAN SCAMMER

SUBJECT LINE: HI

Happy New Year
How are you today,my name is Miss Ziva Abiya,i am single girl looking for Good Friend or partner i will like you to reply me here for a confidential discussions am waiting to hear from you soon
Yours Miss Ziva

HEADER DETAILS:

Return-Path: <daren88k@yahoo.co.in>
X-YahooFilteredBulk: 106.10.148.197
X-YMailISG: 3GfFP3UWLDvwz8vQaNAsnJ.Ea666E.GWfoe.uf0MiE9YkBte ZekS32.JSYmA_h1F5bUhnL1HfJgiO0x9RbNi.ugYOOPNeAiNE..uAXg3I3mH SbtZGuRdTc9vknLhOMloqq1cB3a4x24LQK2A1X2kOwUJcaPz7MhTXayKaPbQ ntwYksXFD8iuQc5XHMDJn3NSP_VxEReQ7wV0Iv9IjYP0.UZdYD0o9F8CAzfh n_279QKxMSkt0V4UxjCBBVlIYc2EaGNUIhBKFsJgluKuawCQ0Y9RSJaM3lxr mS_ifvvgIuHHvnsedr1CBwzhrnh.OeIcuy924nNiYooXKSoCPUmVZpso1toP 9TxZASWy3YvZWKa9CfAA66tr32kLmfIeazBhxOld26STnSgW4wXCCDw502.W y_qYyYS.HLXINdnhV2JUq2sjaR.pmhJByngAOimHTeqDdS7FbTyr6bEovQfF TDPWEgDld1bXERUzLCcA6FFBwUEYjVimwY6vHlgz5sXNUrnyCAY3bt2C8bWc ztYl66kWagGV1Q_hOX6SIuVHV9PNyiwY6QOwvTryZ9Sx9CmpW_siuyds5nMd EMLXmcKD7EPF2O5agq4LSD.FSJRkyQdAIpBD2z9vIS9y1ms6wWd6Eb0gFk9S 7NbSRegn_4wHuB6t73VqR_uxQwbi71ymYiKSLSzCnpPg5QoFxpGkbQT7UD7U cRCh.hGHlnLT.Y_.JxCUh97BSRBjfJMIpLQLhSRr5ZTode5RVR_A9tMUkKRJ 7wfyD2UfJ3xWzLTdqeHdlMFTS6lnoQgsiIAxhvfJ2nv9KQL_kProphHfBB6E YryxfPdnfs1sUGvctG6qAOyFLm4YQmZMgNaNJs_pJtZvGAAvo05ykDkGtgHH lE4H3AFLkLcuRRMQ3OGXnHSTf4LO5J_pWrQYVBQNjOUzxykNYG3PeX1Enmo4 YcZlTmcCAsYRaMPaUfnAwjJql.0IwMtZr32i8jEZ4n5r4UGqz_GNZ2RyyY_. REfRGoji4TvDt7XZj4VYWLl8McmptkWUputmPfgpC_Z4qbxQLiT5PjuU2Syv Ig38b0oK0NSYTTtqp.eoql86O_fgbCVSABBMW7hkjN8zzg.ZMokusNwtS5w3 xyxzZITlQgmCzPXjiChnaOHNIYNaqzP42ZlM_BKVjvmoRaToaB4IPoXY2qos CikFVGC.4t7BupheH0FXs30tacoMmCQlvkgWGPxTBa3DtNCRqVkZyKAE8rKM OcJEDoxBs_3KWLFKASDQRVRe4eb.nRdkJEQiTtmF6.9MUPtL4qqSFY.7gbVa 5CkNshcRLw5HiKeObJAMoew4MUXuplYEcMqgux4IbF0bAQsRNCR.Z6dZiCIh G0sgkOqNvTp6EAkaUSEHqydtyDH6jJFrvVg-
X-Originating-IP: [106.10.148.197]
Authentication-Results: mta1276.mail.sk1.yahoo.com from=hotmail.com; domainkeys=fail (bad syntax); from=yahoo.co.in; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm8-vm6.bullet.mail.sg3.yahoo.com) (106.10.148.197) by mta1276.mail.sk1.yahoo.com with SMTP; Thu, 31 Jan 2013 16:09:48 -0800
Received: from [106.10.166.61] by nm8.bullet.mail.sg3.yahoo.com with NNFMP; 01 Feb 2013 00:09:47 -0000
Received: from [106.10.150.25] by tm18.bullet.mail.sg3.yahoo.com with NNFMP; 01 Feb 2013 00:09:47 -0000
Received: from [127.0.0.1] by omp1026.mail.sg3.yahoo.com with NNFMP; 01 Feb 2013 00:09:47 -0000
Received: from [41.83.217.49] by web192201.mail.sg3.yahoo.com via HTTP; Fri, 01 Feb 2013 08:09:46 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <1359677386.72997.YahooMailClassic@web192201.mail.sg3.yahoo.com>
Date: Fri, 1 Feb 2013 08:09:46 +0800 (SGT)
From: Ziva Abiya <ramia1ritha@hotmail.com>
Reply-To: zivabiya@yahoo.in
Subject: HI

Ziva Abiya ramia1ritha@hotmail.com REPLY_ADDRESS: zivabiya@yahoo.in RETURN_PATH: daren88k@yahoo.co.in RECEIVED_IP: 41.83.217.49 IP_USED: 106.10.148.197

 

How online romances cost Melba and Paul more than their hearts

Melba met a man online who claimed to be from South Africa. They struck up a relationship and she ended up sending the man $6,000 – her life savings. She never heard from him again and feels “used and abused” by the man she thought she loved.

Paul, a retired grazier from remote central Queensland, met a woman named ‘Selina’, from Ghana, through an online dating website. They struck up a relationship and Paul told Selina “everything”. Then one day Paul received a phone call from a man claiming to be Selina’s brother. The man told Paul that Selina had been hit by a car and had suffered a brain haemorrhage and he asked Paul for $1200 to cover the costs of the operation.

This contact continued for months and the scammers used Paul’s perceived relationship with Selina to convince him to help her village through gold refining and butter processing. Over this extended period of time, Paul gave Selina and her accomplices over $200,000. Of course none of Paul’s money ever reached the village. Paul says he is hurt that he couldn’t help the people of the village.

This video tells the stories of Melba and Paul and shows how scammers use internet dating websites to con unsuspecting daters into sending them large sums of money. It also provides some important tips from an online dating agency and police on how to protect yourself when dating online.

Source: Scam Watch

 

“Cecile Gomez”

ROMANCE SCAM – NIGERIAN SCAMMER A.K.A 419 SCAMMER

Click here for additional emails sent by “Cecile Gomez”

EMAIL: good evening
Thank you for the reply but I’m glad of that you have done good projects this sum I “ve decided to donner.Pour a very good result of this donation, please give me the following information:
NAME …….. .
Surnam ………………………………
AS …………………………………………. ..
COUNTRY …………………………………………
CITY: ………………………………………..
PROFESSION: …………………………….
AGE: …………………………………………
EMAIL ADDRESS: ……………………………….
PROJECT …………………………………………. …………
thank you to answer me

HEADER INFORMATION:

Return-Path: <cecilegomez268@yahoo.fr>
X-YahooFilteredBulk: 212.82.109.208
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: x22RaKcWLDvz8i6Xqw6JXaNuu5p1bGTeLysVElxmPPofuuir BWmd4oM3VD4dVhNDxGfLVEC2eUB_oQLtyOcgCjOKu9lHDBLLIIdqbxVM8ZjA 6UaBUM38KMNLD07H4GL19zOnpwB86VziFqOehB9RSLJmYeASY63nrJl9g9a. hICwt3AEkRf8Or5U8hW6ncxii4qOr2kndD3Ki9CXmW8k2s8fcb9aVsc3Ks2t 6ZbFlEjwZr5Pu7Ompi1C0yCiIQ7uoCQlwmLYAbqdSdIk9mHlS8kx6ffWYklM F6gwhkWRk4C5EJzlD7fjCJI0E2MhO8qkYTDBkRd6rHr8iT0.QhDyTroAoreN _9.phDTKl4HJyKlWWK3dUD2tyUJjJ93zDacwZt.Tjdz5jZYPiMM1_qxOQmHy D6AXPlWllK985pTUS30txJ2M2gGO3JCdREuWOGyuMHlHR7sqN1Tsru41F5rD qoygEBqvfm9dTvTHijg3nkOg76KIsygLBuvqAE7lIpITMHyd9DEluEz1BTFU gRPbQZ1TU8dF4ICNN.5grwC_TzENSfUnJCjm.qZyPU3aCBMzzXbUroVpRObQ 8ouw3GxSfrOMsfnvNc2INSQjNzZFEcajCyyPgwroFaayN2tTVf9UreJsXoKs iqq8e8jja22OAK3YUakDwUo8oV6Zga67me0ZGkiNpCHs1zTAzLFKfacj8Zof v.AdoNVqc8k1p2k4mHOq_dL5b_cujznepIXf6g1KigVeKMi4Z5wydIJkbT0o yLQmgjHv6V7inXdiauv2IId77WpsRQFTcNnvsROsIO1X0NpDOFiiewcvQlcA PZsbNZReAX9.xmsyCaMjvWX_15qQrxa8FnSe9pVEFLGVoE1dHMm10Igy0mLP wVh4RPGRddYbigooL9LPawYG1SoXo6z2.xmITWa9Zs.mYoTEiboauwWiUSfe 4L.OU5xcDTza_YJ5ld0XfDZsSYDxNnzFjeqFGo_SKxM4R_ANUbSXl_a3S_Kl 5o8pGELz_soj4T5CP1WIr4MKeq3DtKUqb9C1aQFbFmTdi6ozjjC5TNt2CyvT b7pkvsOJgsF6KbsJph.Z_kGYNhTCIaoAj0878kYcMzqWzevrYbPV2p_YVqqH bSEMb6Q4Ht5Q8Zhbhe5xFv1zpvn8MqpLiqCNeDDpwxjg_6rofYtramiN1nku uOg9p7uBfEuJUcLs1RLbcl2E8ITlXyQKQtbNNLiaAx0XS5d0kq82Ydrsc_Jv jbtfzYjtr5p2vOc9EuUkTAe3dvqXkQZQIVdy1v__60uLZ56wVx0kTHdYF4WM HKa_vIZ7KpvLjy0ReWtaqsiPmvf.I9soq9PZ9lKCROGN33y8_mz9suzMjHL5 i8El1hdEydnbr0vaxQ–
X-Originating-IP: [212.82.109.208]
Authentication-Results: mta1124.mail.bf1.yahoo.com from=yahoo.fr; domainkeys=pass (ok); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm25-vm7.bullet.mail.ird.yahoo.com) (212.82.109.208) by mta1124.mail.bf1.yahoo.com with SMTP; Mon, 07 Jan 2013 05:36:08 -0800
Received: from [77.238.189.230] by nm25.bullet.mail.ird.yahoo.com with NNFMP; 07 Jan 2013 13:36:03 -0000
Received: from [212.82.108.114] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 07 Jan 2013 13:36:02 -0000
Received: from [127.0.0.1] by omp1023.mail.ird.yahoo.com with NNFMP; 07 Jan 2013 13:36:02 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 839067.52886.bm@omp1023.mail.ird.yahoo.com
Received: (qmail 56387 invoked by uid 60001); 7 Jan 2013 13:36:02 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1357565762; bh=TOjPzeysCjRwRWMJwmO6tl0JDLmTHThuLoGHmmqyWFA=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=dX4DhiR+n+uEI9tsaVSpaVaNCtV4pySt/45wyYsLvQLx+ZALFS6RvS3r2idkxFtlqY1Uc64GM48W7RMJF3m+IeRwBpm2tXKJCQCwbRslVL+meAGEJYvWfZRwQazo2/NP9PadNhNpuCiAayqhxn0idr63TFrSxn3lfqEXMlZ9VA4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=Na2QHlQfAzgTWTFeKFk97N1Zfu3mgSX+ppqmpABEqkl9hgjgDKFu+RFxRfTWaSKCDQUxptpsyNtNpTtXdeEaAuSkKnuhhtvurypjioPhWBgFdX0Y81KU3yqy8VqwWReQkKfzczXSEn1foTEXmFT4y5C2Z/pNuFEQWnCoSxzGY40=;
X-YMail-OSG: PmVumUgVM1n_70sDgkbB2d0RIX9d90s3D1d1JxjWdisJOiq Vptiusjt4ECcSLZp0dk9eXjjLVpYnv2zNT8J0HlYUkdUCVSoJI2s1qYBbmsm TJLfmjSLRWqEaozkBwLaZpT5oBa.ZiqedF.8hbGKq18_.oVxUpsinmTWoPKR jfzk.2eHCAUYJ0jKyO.gNjJYUYrIU7cAQLqrNQAoDv_YZJbuvSzRG70lu.vc TJbwLBHfMfX0PWt1WS_zWFnNe0AgvSGSbhLXQXwNNXTXxke4Ipf6XNb69yY4 Djct.iudNC_EXW7f8TFFgw9tiPtbIwzU4NsZ7mYMONvCIRn77YxAFUIY0r0M Tdw3dhHl2VV2A8VQD7lM1E4WaAmDSKztFb7yEknVtbIdWyqs8fMV0_qKlBrm I7D7_WSlpExSEw9KYYv_jrEDL8iekukOvLiZouHXOFbHxrnkVMb7MlJFX
Received: from [41.216.50.35] by web171501.mail.ir2.yahoo.com via HTTP; Mon, 07 Jan 2013 13:36:02 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1357565762.48864.YahooMailClassic@web171501.mail.ir2.yahoo.com>
Date: Mon, 7 Jan 2013 13:36:02 +0000 (GMT)
From: Cecile Gomez <cecilegomez268@yahoo.fr>
Subject: Re: WELL LOVE

Cecile Gomez cecilegomez268@yahoo.fr

RECEIVED IP: 41.216.50.35 ORIGINATING-IP: 212.82.109.208

 

“Sandra Omini”

ROMANCE SCAMMER – SENEGAL SWEETHEART SCAM

ATTENTION: Below I’ve posted two emails sent from Sandra Omini which were sent on Jan 7, 2013. I’ve posted both header details which will show you that this scammer sent both emails using different IP addresses. 

Also, click FIRST & SECOND EMAIL if you would like to read the prior emails sent to me by Love Sandra Omini

NOTE: This scammer also sent two (fake) photos but I because I don’t click attached links/files sent by scammers, I couldn’t post. The titles of both photos were “love.jpg” and “MYLOVE2222222222222” (mind you, I’ve only responded twice and it was NOT flirtatious yet I’m already being called ”my dearest” and ”my love” — one of the biggests signs of a romance scam is when the unknown online-user, pushes for a relationship too quickly!)

My Dearest,

Thanks, l consider it a privilege for you to give a prompt response to my mail, also l am responding with a little explanation of the things about me and what we need to do making the way for us to proceed, you will agree with me that since we do not know ourselves in person as we have not met before, therefore, we need to know each other first by exchange of photo identifications to help us know who we are dealing with.

l have here attached copies of my pictures for you and l hope you will also do the same in return. Also as you will know, this is the only money that l have left for my future living upon which l can better my life now and l do not want to make mistakes with it, please l will like you to send me your contact information’s such as…………

Your full name…………………………………………………….
Your home address………………………………………………
Occupation…………………………………………………………
Age……………………………………………………………………
Direct phone………………………………………………………. and Fax number) where l can reach you for further verbal instruction. upon receiving all these information’s, l will now send a letter of Authority to the bank instructing them to treat you as my foreign representative in whose account the money should be transferred there in your country on my behalf.

So that when l hear from you again with your information’s as l requested here and after making use of your information to send a letter of Authority to the bankers officials introducing you to them that you are my foreign representative to whose account they will have to transfer the money there in your country on my behalf, then after doing so, in my next email l will give you the bank contact and the contact officials in the bank so that you can contact them by email or through phone with your banking information, Your bank account number and where you want them to transfer the money on my behalf as my foreign representative. you have to know that l want this transfer to be completed soon so that l can get out of this place to come and meet you there in your country for my education and future living under your care for a better future of mine as I desires.

Secondly, ever since l came to this refugee camp, l have not been steady in school and right now, l will want you to help me locate a good university there in your country, where l can seek admission for the next academic year.

Am living in the refugee camp here in Dakar Senegal. Please write me soon. l really need your help and l am waiting to hear from you soon.

Thanks,
With Lots Love,

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.90.78
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 1IjoQqoWLDsZWAjRySGjeqLNAAFyrdyevggSCp.7mzBLX5QO YvdxigPFD7YYIKV4TUJQrt1Zy6a1t5gbcVd56cBikBBcfn39wb6t4_nW3fel cPsehAp0KW43T3eaqw2y0puca5XaJKf9i9uulknAsjbCOLpg3SB1jxrVnMfH 3GhspK4e9m0As3b_plyA1y6kInYTAl9_DEPamK7.JjghGooInZLfzdv_huXM s0fKmjD3rJV0Y93nbR_JRsHffgZNMAZ2Z.gwLMZBYLjtZSsCGwHDwSabL92D BfYgmrOYG9fKe1j4sRohKoHt4snfumInvERDfdTqKXB2iAydL09rDmDh0Pxr AQKQMoENyu2veu1TWWdSA_vGC9u1K9QI3hdeWcXUMvjHf4LpAKsWD5nXbB8k .VGiREOry11FhFBBXAwu7OtMZbzEPjGrBjIcQWfP8eoYQ5Hm66Mu1CHKvBwl B8z8v4AHAkWKW9WmaccIhVEsmm7VO6ytzUYO.CPC2VCeZVmb1YvROcUoVi7V gEsekc3ZOSkqWKC1gkYaNVgb7aUe0j.OpwgIFfAxlT4KLZ3NmN_vMjqHHSMw acytLF1wcLDOwpU5W.YKuqVL_SbThGxb4jv7yFjGAK1NKCsuig1YLB0_HdqA yYrmlCX60dpKlCwKl81YrVI2pyV4r1b6r9Qi7lT3ezqVQRqRzqIAqbfOTPyt kS2j.NEFq8g7mUece52gTG31I47mVdSyUJA1_qpQ0SQIboumz3kAqiHqNYfx KCD_EYI6j3IZzEpHD2Wy9jtuwaApz.KqSCWqGqkv4qiMd2YdJ1mmgcDRLNQo cGu_6F8n64pTEVhQ2Chq83poIvUo3yMsynJSnElNBHVEHCrm1AVwvkNK937q 5woRtIo2HY5XipdhS3OOQXQ9i3lDa6oItPrg2Z8fgPeZeUgl4HndpjaGkcs5 jECsm0ZtBlY2sBzcTwjBJjSf4nexxusbPs5itfPElFIV.jvPTPBweW8sD45n _lmhm2_RX0Rujxj4gWG61UNMoIlnp7JxYR6fWD6B8IQRWQTo_m_JIm9b744c 6jJNi1eQx48wUSvhxsMUzcmHNIL1JTv9JOVF5cy0W.KPr55PXFe8PyfDyESq uoD2AGnWnUiaKZjAS1P6PBtMtgrpQG_6FD5xbyJDl2jNWh2zejdXK8UJmxYO VfWGaTYWsrLy785kHheMbQ4r2yYQd9.bTXMwlkpWVr8ifbS5XKTrVRI-
X-Originating-IP: [98.138.90.78]
Authentication-Results: mta1161.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ne1.yahoo.com) (98.138.90.78) by mta1161.mail.bf1.yahoo.com with SMTP; Mon, 07 Jan 2013 03:01:33 -0800
Received: from [98.138.226.180] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:31 -0000
Received: from [98.138.89.246] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:30 -0000
Received: from [127.0.0.1] by omp1060.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 261138.8003.bm@omp1060.mail.ne1.yahoo.com
Received: (qmail 44249 invoked by uid 60001); 7 Jan 2013 11:01:29 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357556489; bh=sF39V2YXIXyohJJ4DIMYvoz+D4RbkXVTwI5HmpPU1cs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=BE5wb2s2Zn6sVN2koaDY7vQPaPU+cGNZtRoBYcdGcxd2ntt4fr8RdVctniXPGcuYLEYRiZZLEGGwhr4CAXIf/hdH4UdsHgE7D9Lay3Ka7XG2hlyml8wqNPUawvPhnUSwvPjaO3SjgjXkO8NmGpj6Cz4dJTu6QBp5gBb9ZwkNwPY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=hsTK/l7O/YSlNhftvE+SSOlqrt0LVLpN5zAsdRfnLiMAQ48fPrJLpW7WJTStezmAnOsdr2HoJLoK0PZvM5rFTSnT0H6fh/+0eKgDW3QPhER6RQpHN61uAHHfXzeIGUD7hD/N3kS3DySGqwdNdjsXwMSCAMNySHpY7o4bo8NUNC0=;
X-YMail-OSG: VC8V8esVM1nIItl3zaBA6uZ_oE9xCFH9dYQCrDjRczq9s1Z IQLjn4D_gA6rF3196eBlK2sBorj81zxBMFAl9YzUQzmNsy92BZdx2U_svg63 9L9yw3WOf8etb9j91mnQ0c_zZFZeK5ar3ep_T.ASJ1irXF.UL.MVz.vckzUX bDSb6fj8czWpWb_9CvrBHLwTLORIYETSce3fvFOluoKGVTj8eGmxvc06qMaa 7upAvgj7EpqnGWg6RC42V5zrgqQvCoPlV3BnR3tWDUuNjK_8E5_t2UUw7TwY gJXec3YUDPQnqY6pMeGSBh5Bt7g7YSAY5Bsz3ZxtRBtZjUcuuKfUuGukY9WW UubW.qnODx492OgVPL7Td9SSIPKMKu9c.6Mvd7vbw4Gw.7RWglXPPxuxw5fl lxvKVKl8r6Fjg7W0zhBqnZoQV9R00NA161CHJzRPZRzJ3_eu8hX_eg.BzVZo ogZDhXS4KpVpTByx0Z5b6.hnk6Ace5evPOPvhMHsSmVYtMYmwlDZKUgZHMFQ qGldiUJ1bGHNhiye1I5e9kRPSlkSYn0rSjWUzyDRD5Ar_IWRv.1yCdwxYNWG GbiagnNkzl8P0mQwdSYgXlpnifTQFV8OEcITcag–
Received: from [41.82.130.87] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 07 Jan 2013 03:01:29 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357556489.42339.YahooMailClassic@web125004.mail.ne1.yahoo.com>
Date: Mon, 7 Jan 2013 03:01:29 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: Thanks for your response

FROM: Love Sandra Omini lovesandrao@yahoo.com RETURN-ADDRESS: lovesandrao@yahoo.com

RECEIVED-IP: 41.82.130.87 ORIGINATING/FILTER-BULK: 98.138.90.78

________________________________________________________

ANOTHER EMAIL WHICH WAS SENT RIGHT AFTER THE EMAIL ABOVE WAS SENT.

My Dearest,

For us to proceed for the transaction as you have agreed to help me transfer the fund, you should send me your contact information’s such as…..
1: Your full name……………………………………………….
2: Your home address……………………………………………
2: Occupation…………………………………………………..
3: Age……………………………………………………………..
4: Direct phone………………………………………………… and Fax number) where l can reach you for further verbal instruction. upon receiving all these information’s, l will now send a letter of Authority to the bank instructing them to treat you as my foreign representative in whose account the money should be transferred there in your country on my behalf.

My Dearest,i contacted you to help me transfer the fund,so that i can come over to your country to further my education and to secure a resident permit in your country because,since the death of my parents i have been residing in the refugee camp here in Dakar Senegal,and it is Rev.Father. Simon Dickson the priest in charge of this home who helps me out with his computer to communicate you on this issue here is also his number, +221765359970, please,when you call him just tell him your name and ask him to call me out from the hostel to speak with you.

Another important thing i want you to know is this, please try to keep this issue as a secret because, i have not told this to any other body if not you and that is because of the love and trust i have deposed on you. Please don’t be offended if what am going to say now will offend you but that is because of my present condition here, so i will appreciate it the most if you can at least send me some money to be eating here till we finalize this transfer issue and be together because,the refugee camp authorities provide food for us only once in a day. I shall wait for your lovely reply, remember to keep this issue of my inheritance transfer as a top secret between the two of us because, i have never told any body about this if not you.

With Love Always,
Sandra.

NOTE: THIS EMAIL ALSO HAD A SKYPE LINK (NO URL) BUT THE WORDS ” Cliquer pour passer un appel A prix avantageux avec skype ” CAME UP WHEN I PUT MY HOUSE OVER THE LINK.

HEADER INFORMATION:

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.91.63
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: ZL4aQh8WLDvzm.nEQhp7EAokzebktzXovrG_M0rJtqQ_MHXx ZZ6_Eytmcy_9YsMPgsg.esDg4dmEz2fgGCdjhYe6LkDQFGumUzTLsZZP18V5 mQtKHwtQ9g8w7Q0MLYu82lhxRym21foSmKeGGRwzdSc5Mz8duZ1kML4oI8S_ y_YHT3KIW4DCOeApM4Gf.cBMD08lSQaBtkT0SGt.5F2_CzxW3RjtO0_xCOmV azRU.pB7PS1xKi9ER5Czb_XwCliwFh99yJAwAaiBddLS_.Yw6b67EpzoH7pv 2IXEyKwRhcZLh1bxEFx3qBs0zn90H3A76n.ESKkHCL9Kgzd3lzMKoOnhsTVg xyFX5VuLiCZTNGJUDzlatFoBUacip1PrzwUGSUapmtg5flNC4xxf4F1KT6QB HdKm8kdOeFr026UnQppsD_2EJk_nxDHDEeAvh_zX4a3fYbWUWeLQXfInv_8b SpKag37UitZFwOC3JV5XRB.ijJq93QXivf167FDxYsMHmBQ4t2B4yXcmA.FS THtSMluTFoLuZ9UEkucu7iD4p_hu0AijhjGtEr7WYybhnm57wRTca1O4nk3Y 6IPY2WEHtKL0.UVZaZpPtVs38Bnwl_jxPySE5Br_fFmO05D8Vxp8ANdq1n.G TnB_XrdwqEq23V4zLs2gh0lEeuLZC8tyh1EZ6jcoDqUFWyv8aZJcc0jv_ev9 LCZ.Xf3En_jCXkf7QdM8v591WTpjBbHmKgiUHq3kQB6IWEuyZPEJf9q6e1fh 3kT_vKtrS6moeRfhBhXdkHs4EBUOpYPaxKFKjrDWJTfB8XKplnn30LHTIdEe qEiaFd4jMYIQK0hMYcpwWuh667NJl6.DM_lrJFZoonWjmvs0TjncRZiiS4Ca y_NTB07_.m4W6DMTplYvI0_SOSlNwAnvNubEB1AhCTWBDGoQt1Cf_GZIhUdo A2xTgW6sSEw1QV1PEHOgcQjLKFqTbIeyrGg1.hazhbl.nPaUSfH1x5NJY1YQ XeqHk0m1hNZKvNBQQc1rRoMqGc_FziHuvc2kS04PpVs9evInRQV2TVG7A4Lz m.bVqmPiZi1YUSpHdOpHD3xaan8iMLrhib1JW5YswSqj1vOa8PfCEnQCFv_A bBolpnXG4TQQPmOnqncEbxeWOzD_R.MVW6rGKIgI35bDCyxDQSa.8RGL7wIt ts6t3mQRp1bMys_I20hWL8n.RPcHfuaYPtxV77F9vj0EknRqix6K3JEk.c5n m8JxCDxOWq6uRs422OUAHvL5zarV772WRxxGm5jnH1DaCvG_hCOJ8IEex6It PLDRIG_6uq1NkQ3gcp4A1gqznxVx6nKZ_ap.967kghkXvWDp_V1Ci..hUia4 DnavYvqHhyPQk.VJ7ow.YOLoLAlCjg8GnvL2PS6kTQot_4j1tIZNA6n0P5hx ZW2O_2zgNQrwZBn3_R.5Z8x2Yg7etfz2WDvAUQ3QhlXUnoZL9OYN
X-Originating-IP: [98.138.91.63]
Authentication-Results: mta1333.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm27-vm0.bullet.mail.ne1.yahoo.com) (98.138.91.63) by mta1333.mail.gq1.yahoo.com with SMTP; Mon, 07 Jan 2013 03:02:22 -0800
Received: from [98.138.90.48] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
Received: from [98.138.89.234] by tm1.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
Received: from [127.0.0.1] by omp1049.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 98866.57766.bm@omp1049.mail.ne1.yahoo.com
Received: (qmail 44614 invoked by uid 60001); 7 Jan 2013 11:02:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357556541; bh=QeXsO4FaKKKdpb0dARzj48oGSADrn8ZArz+vzImbRDM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=fFL0mRPgGFeN52Qakcp0Wiji1nT84TV6YSZKuZd80VTxoUEFO4uX6Rn8I2XaH5fAT/cR1KAfmrMMF/jGwjj0w14I1pbemTePHvul60hkD9LwwXQt0vVfVCtTwl+cwQrze7s5mRdUFbLbuFZ2CLVoZHflkQSirzGBKL/lBmxGaH8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=g7Rv4EXWIUcxHv4INWOdU/mi/dl8kalG4XpdyNqNjU2kH1p3oiqUZT3IhR+taly7sPs1wYrH2OM58q8sKsfAV8YxfwYfcUJUNgWrLI2tHXTZ7eOYADitfQ9c1J8g6S5zCiQRuiY3OY0G7P3w4no5Uh2ZQS9ko47GoxguI3H18+M=;
X-YMail-OSG: QqRpdA0VM1k39KFdomfmoYqlQQbkQz0Q4ODCQvXnrcT9L97 vNoygxjOwX8e7XH5f5y3kqlUxoeqzBEuboabbWbM7RlYYDjxx1zZ9xnKPFhi MRV5j7z9mUz19_cx73qYjZo.f3NyY2aovnPu.Wtp8ZENP3N_xz7uHyq6Z.5a XQ1LXF5tApybPpu4nauCG1z0vjiEhjq3Ji0zfzD8mqxOQT3QGxm2Dd0i4Nxg cYmyLtW60CafnXTbumqEaMhvM6ngL4Ypx9Wp_epAuO5Fkoft7j79dQp2RC79 JKU5XgUMfbr1yBpSQt0fNJzZIDAzFWSod2lDVm7Sh5Ee9HXF1IR1DyoFVcrC 5gmB2hWOGU4SHwNlwRtUTznR_k.8W6_Fe4QrV4OHspBpd77q776NDVGaeMQE AZ3P4j7AhZpouQWKUobU0ZAEAv9uxKqD0D31Pyeqy1srAcj.ydTrSpQVviWW 3Apn8DojsA5qQn.1gTap3TLmwo2R.brLkEJ3iBjLu3xzDAh_tMpFQFmRHm0M N.rfuEedd2jUx3DFOZuRfZVFsmWiA1R7VkYJJSzliyh5daimEJMnOnokTaJb 9O6X5CVFwUdlC1EirMp7X6DkqRmwrjeJOIyu1uXp.sceMZ03vGgE-
Received: from [41.82.130.87] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 07 Jan 2013 03:02:20 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357556540.41156.YahooMailClassic@web125004.mail.ne1.yahoo.com>
Date: Mon, 7 Jan 2013 03:02:20 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: GET BACK TO ME WITH YOUR DETAILS AS I REQUIRED HERE

RECEIVED-IP: 41.82.130.87 ORIGINATING: 98.138.91.63

 

“Love Sandra Omini”

ROMANCE SCAMMER – FRAUD

This fraudster has also been reported by multiple online users who are calling this scam a ‘ Senegal Sweetheart Scam — It’s also turned into a plead for help regarding a Inheritance transaction

UPDATE: AFTER SENDING A PHONY REPLY I RECEIVED SOME MORE SPAM FROM OMINI. CLICK THIRD AND FOURTH EMAIL FOR THE UPDATED EMAILS.

Hello,
My name is Miss Sandra Omini,i would like to be your friend.

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.91.215
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: H0I3WGwWLDtznJzC250CezD7lfMLPc0Cla0p4fT5fTHlqN4G 5jwnfTVrZWyrKGfAXwJp8_OijavI6SFplX0WhOWINqu1yQxqaicOYpD1MVeI TK4SDGfg2Imj08hMo8bfp2EOPzaxN2z3hOqDiRs9EedIBc019cgoahmBkinl zy5Zg.eZtJtA59eCALthbPAOk5JC7EjVul1J2wHM3sIZ2z3AM.vn8KTnxgJo mKz9QcDNfk0yvL86cB_x6qNRraBPaZCnxZdIe9gGAUFIVlNomxohEMeYTTD8 SxQFENmb8cbbTEgyYUt8olfwM2e17Bi2L8i_PWzQL01j3ngF9USOvl2muecM 7nr4IYsouihlfZDvGSWp3m_K2boM1ouDicW_eZ57BMQRZcP.w80Tdp9l7Te9 F4WjvJcQ0P8CwbhtBQla9I3eLoq5KmTlge3vZzzIxYDQq_pHynnqGcpPGyJ2 LA9JcBsEoEAifQJKOhcjIpdkw8XsWmVACRoOBVMzLyhrrU1zZ7.vk9SqRcPf eLOW6Lc0mFiiiaUIiYOkQuAxahwyPBJa01CYeQAorARKCcU8TdPNBZ87UakY qKVsk8qd393Yb0U92SWgJ3fN5rr3k9Pypxi8sVwa7r_3IN2LzLJB6DCL9k_0 2En_HlOqFEgRPF0KDWFpsDCgeR8wKpzBqBww9HVGdTDKh6lFN9tf8B.ZdmHU VM47BcdWWWpA_JeT067PYXqyHov10Hwb.oxlVEAOP4iqabnskxxCAyRmDTZi zDh7PsD_JCAsy2EomG3IO9.0KQw7PtJBEXWnc_Oklt4r6rpc_d4t33DIktPu HLtUCi.dA0xUxj1X02xNo7Bg4sZkSacA2Am4Ynj.DzB0w394eJE52MqA0FxA UWPIHmL6PMYjAkb9GmkhhZSvIiah4ufGhtZepODjjUwX_uq30WkRNi_0Eguf ME75jc2PcPKSOZw9deEy1TBZfcOoqkApv82pPTEMaPV_dqH.cKrSMXSOnJFo 5ZCGmBpokXPXci7ubq5W_54hwq.CC63JaV5cBUpWqv3ic1hBHbxEk1ChezrT 8oEpQhr4nDjFVrKBq2I01LU9IUGRrJCqhOC_AIUJhZ5zcYRTw777C8HIMSf1 FZMP_pwMOYalWNcmHKpPeQ4mkFkU7OwM1sPrlXKsyRz6MrPb9D0_9_BmM3af zFsi6L5f6BYsyCfavBviHtDap2B8cwv.5Kj5dSFH.LS2KVsdZlbBldz4ZUp3 3f9dMcBKhPSSOSdjUIUJ4Y_soI1ssJNM_yrLBmMkUioSW8t8Q_s4xGFo7EFJ wrRgU6761Ft_XsV2ERiaNT6okUgGOPUGF86LLzC3WZJoMrzpECT6jvZPhXcn JLB6Mg–
X-Originating-IP: [98.138.91.215]
Authentication-Results: mta1089.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm27-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.215) by mta1089.mail.gq1.yahoo.com with SMTP; Sun, 30 Dec 2012 14:43:46 -0800
Received: from [98.138.226.178] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 30 Dec 2012 22:43:38 -0000
Received: from [98.138.226.165] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 30 Dec 2012 22:43:38 -0000
Received: from [127.0.0.1] by omp1066.mail.ne1.yahoo.com with NNFMP; 30 Dec 2012 22:43:38 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 579021.42655.bm@omp1066.mail.ne1.yahoo.com
Received: (qmail 92785 invoked by uid 60001); 30 Dec 2012 22:43:38 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1356907418; bh=OCrqNpy1dMOYpQlYpZNX9HiTbeE9VQtd2Lp2bz0Fd5U=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=U8vvV3pMrYUadxgDnXu0tnuurc4AFccxRMOOi5p0m7mvZxTAhwQILUcZlJMwDjYDxG4aBDvA2htR6Avqx/WvSoK8Pfi4qhb6YioFx+9fzms2DC06Ly95QuAVfNRfjxVXR+sboJRaTQeDKx2VI6X+liCNhJPaxi5TEu527jcJPZ4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=pRCIhetylUH2D/Krp/GqqvbB7HyIkQJpfi3R5YkALIA33USVn1xgau7iuXqBXCfMsaixrj/NpCTn64ftIob1iKu6Tp8Z5ekT9mxxGGS2e6VzaI6v+kWa2Tc0YhNNyyTEqJUI8m0P8spX2GmSbMjff+q+k+HMgRDFBXQ3XbLtB+8=;
X-YMail-OSG: zFkmSHoVM1m6ebe8D7Z3QNVlWt7mUNYRbeWbe0J3VmzznzQ 9JnUI.Imn5l2qt6675mjv5hRjPiYq_4ecbjtlD4Cu109qlxNx3mJk2YK6gAq 6I.N7lgI3ddx6vBxNxcA0eqajeuLApteCD24aYej.UHm0B6Rai4jbIi_eJoV cKRZFboEp4lgVGOEDZdpbmHtc7ia7SL7FpRcx5Q56WMZGebLpmKIkFyj3uHk oRMKk65ZrAGl9J7YdLeEV3te.xkOWNfr1I3jGRSYUIUwlxU_zKZBG4JowhXt 1xiOSzeu1InfVlrqYGFn4cAYQOFeP4y9ZBoYRs62z53l5F_JqVxnFxkG8.W7 jULUo7AZyO0RBSlzSvVP.zMgJ7dSUUGEw7NxQ0._NuB.NjuVpcods3JRRWdQ ScVZ2TM6PvHU3S7KpMJhmsf9qw88jgHXZfsoFIcaR1Inf0guDEC19K9T3XzF 0o8qZaHW186blZ.eHEa9He6lEbikyp.sJPiZ0vYruhECyiwqzfGnq0mfDSks xOAZECFls6zqPOY59xW6aWjQ.wM7AkMbFm1TbP_bAxr2kD05DQw1mIw323Py ZVTfgtA–
Received: from [41.82.170.145] by web125005.mail.ne1.yahoo.com via HTTP; Sun, 30 Dec 2012 14:43:38 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356907418.91798.YahooMailClassic@web125005.mail.ne1.yahoo.com>
Date: Sun, 30 Dec 2012 14:43:38 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: Please confirm your message!
To: lovesandrao@yahoo.com

Love Sandra Omini lovesandrao@yahoo.com RETURN-ADDRESS: lovesandrao@yahoo.com RECEIVED-IP: 41.82.170.145 <> 98.138.91.215

______________________________________

SECOND EMAIL FROM SANDRA OMINI – (boy, these nigerian scammers come up with dramatic sob stories.. boohoo)

Dearest One,

Good morning to you, am so happy that you replied me back, my dear as i told you in my first mail, my name is Sandra Omini and please bear with me. i will really like to have a good relationship with you, and i have a special reason why i decided to contact you, I decided to contact you based on the urgency of my situation here today.

My name is Sandra Omini. l am a single lady, of 24 years old, the daughter of Late Chief Dr.Lambert D Omini, my late father was a successful business man during his day’s, it is sad for me to inform you that l lost my father in a motor accident on the 14th of November, 2006. during the time he was returning from a business trip from Jackson, Michigan to Ohio (USA), Dear, after four months l lost my beloved father, his second wife killed my mother so that she and his children will inherit all what my father left for all of us.

Meanwhile after my fathers second wife poisoned my mother to death, I wanted to escape to any where l can be accepted since she’s also after my own life and no where is safe for me to stay with her and his children, but she went and hid away my international passport and other valuable traveling documents which I’m suppose to travel with. luckily for me as God have his own plans for my life, she couldn’t discover where I kept my fathers file which contains important documents of his deposited money of US$3,800,000.00.which my father used my name to deposit with one of the leading financial bank. So after then, since l have no where to run to, I decided to run to the refugee camp here, where l am today by the grace of God, presently seeking asylum under the United Nations High Commission for the Refugees and Now I am out seeking for your humble assistance for a long term business relationship between us in your Country. Which l would like you to invest my inherited money for me in any lucrative moving business in your country for my future living under your care and control.

However, l wish to stop here for now as l have no much time to explain all the details to you as l wish, but please dear, as soon as l hear from you soon showing your interest and acceptance to assist me as l really need your help to me now and l am waiting so that l shall send you my pictures and forward all vital information’s to you for your confirmation to help me out.

Thanks
Yours Sincerely
Ms.Sandra Omini.

SECOND EMAIL HEADER:

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.229.46
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 7FZKMvAWLDtlaJszyq.ThW7X7k_0aaO4qM5cVMUM9I5hqdsf zqRaGJ.uN7xtQZ8KoUSuUrorKaQOrgz4Rdkmp4lzjbDBWmNHt7fJ3zIRo.ze 1bmz8Y8HigTdq0jvKhstahD1Q7jQItWOragpYClSSjME8CQ8KybB.PEVHBg1 BOB47cuPj5hOylyd7xTgO.k8KCwFZFNWdGOUFDhnC0Y5v3NfJaM77JpI70AK RloDPQbru7cvBL5A_9.kVJ8mX_ciyAgL5LRlJwOgMloOcz63vHRuJMfX1pWN XzM7SsXU2PDJqxMf6llGJeTCoZXh7OfNdBN.oYqxbzmFRTx1V8TpYNpt6eex 3udj88xLinKbp7CrHbJDLB0lCryuPH9rmAZO4bTC.HEKGopIsrWfH2wzrttW CVaN9j8Bm6jX5oIRp4auOssXUnREDCiWR_UWtMYtYFV0ZOwCgSaPR11gpK1L 2Zz0EiiINmQ9Rc5KPsswc0JflhiKNl2dIJfSKVeTi41hIwyh.v8Neoj6iIXv zYZeBGnbVL83kpykMHuQXss8_HWtJ6FtdzMnN7lCK8Lrou7CGY.yeDEU6UOl dI1hhVLrswDe0kBC6V42UPZ1YprDHFgRq76_vBBCEf23VCL_uNFKotAxRZg3 6cXT7wjNUkekKBDbcP9CsOFy5gxJHCE7EYnmaXb4YTg5R95MZiztY7lzXdQO H2dl3Wc1txUyLGrZMxe5TaViB5kSzSyyosZppakluaonOqPzHc9SbPv4Gb0O P9raRXDcdaiLI.TLJb_pCrERXQB_8z5_Edj4zAOasUjtfw1E30zhxLFjk_Pr f2icgLILjj43wtCESVZmf3miJFRb2lc.WPHj1IIvBTR9dfutxips30.WOVbc Oa._0n8kn_YbXh21cLiUlWKi5TCAfLrvQcKkkbWzO1bvvxiL7RncxKkdM8NF 7f0zvL0HDUgyv3i6eyAB43ddo.Mx9epA97TaDulXud635u.mki5Z55RscKpz lQZcGfe4SngOylipBhnODqIoH8_w1n7T.dqgkH5OD7p76Mn80DTDNGbIEAh4 WbUiNvHlxr64cJLxd9H.jv2k.quphDyaW3TWbyhVL0u9SMBbSGkFVpyCwGcB RbOgvoWR5SC.bXES3DsVo3yLmpr1XNK6J03EheiE_1eDZH.UD2ORKDL0QRB1 Qa_t.gNSPhCbCZgauvJ.JvqRLeAoog3v8zE6olmQVRm1ccVfRXmuwil0.Xrc DmlbxF17t5Vkr5m0uhP1zTVRx11aHYG_uPs3oyERLND.q.uB3w3z09slTBok UFZBv3P1qf74qsayvdfZLpxZh6kyfWUTbG_C4N2LWCzOT_duwv8kP3QbZR1V mtT2U5GeNrbWRVxEyHIzRF8Ww5yannr02NNQk1qfyD9IvKsacAwhKye017_V 9w_Nkjo-
X-Originating-IP: [98.138.229.46]
Authentication-Results: mta1364.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm31-vm6.bullet.mail.ne1.yahoo.com) (98.138.229.46) by mta1364.mail.gq1.yahoo.com with SMTP; Fri, 04 Jan 2013 01:10:57 -0800
Received: from [98.138.226.176] by nm31.bullet.mail.ne1.yahoo.com with NNFMP; 04 Jan 2013 09:10:55 -0000
Received: from [98.138.87.3] by tm11.bullet.mail.ne1.yahoo.com with NNFMP; 04 Jan 2013 09:10:55 -0000
Received: from [127.0.0.1] by omp1003.mail.ne1.yahoo.com with NNFMP; 04 Jan 2013 09:10:55 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 763914.71110.bm@omp1003.mail.ne1.yahoo.com
Received: (qmail 39137 invoked by uid 60001); 4 Jan 2013 09:10:55 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357290655; bh=j4+4VwTY7z9JJTMYfuYYilrQjlWsKvbJiJbhxTm8Qco=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=On95EW1q2qtx1DRIM7Op33pjhuk1k4QcBlbNgcPbUgU+GLNEuZELhIgZwimemc21yxKucLKywQ05HGrUXJ+Sgjs/BOS+jyt76E1mQuQB9hZtrKeLVBQOan+svDJ+l2BQJ+eLzZNYBjDqiz0p4wju6XSL5b5ikLVGeLqPCKWH0pw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=t3+1OKUYOZG4gaX7D/Z4eliIJm7EB1QEDClxf/DPQsCn6BkBSIYjlJX+oMDbg1BMQKT+p2rghNtsvxBL5JJDIOHT3XmTxDJwRlQA3jM1rW5tR2YCPpiS5TqDFY2w0512flNN2eFWVDgIcI5TaS0KOszEfRABMMl1OXSrbAXLv8s=;
X-YMail-OSG: VbAuj2EVM1kn7kIj2ErS0aPjrypJb6ujTHzfgXPk5CGp0bA CMS3gNcnNU1VktsRtDcZlNMTIDLgAHs9aeBnKMOEpKFEmG.YOVCA3Q7HqgOA hwiBE3BU28ncKiY3R5tocWv0BM4e2z2js6syATdZl9QHNbjEb44NYDqRJg8x v5lSTizKRjdjrWKmRRZmCP0wsLSOuBRExvx1MmljZ9wtUurv9H_r2zR2Zsds WkECuzkoeyUEv4NPIHPmj5hU94ckQIZYTYnlwBhgdgFmVALS.KWiIuCauyBw dY4u8_z2vx2r1X1ZLxbx0X7judi97ZRHYn7HEmwkT7SvAuvPgYSXgm8DzAsd 0zcELtGDvTLCHLV0pvjFiBmUVDZxiF..SsYFGDVQkI_SdNlgOF.C9c9TUmGp 8wnbJudZNUyH0HQejR4GBLl.I6TrYZcz4bbaF99TagFds0KcuUKi8SnTftxB A8wLZIzL0MI6I4gBxrEvJ7p7SXNvrZj0v3XUy4wJB1zbTifvd0Zd7LSvCdAK A23OO_okZ9_GA87Xo7yAh6P_PgKgqedMi.yohz1q88jAD2v7GmPeUd2qpwE5 7wkSl5tYhFD6SBMwa8i8CTQ13Avomrz0j2UbYAOF_ztHK62kqvQ–
Received: from [41.82.172.211] by web125006.mail.ne1.yahoo.com via HTTP; Fri, 04 Jan 2013 01:10:55 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1357290655.37111.YahooMailClassic@web125006.mail.ne1.yahoo.com>
Date: Fri, 4 Jan 2013 01:10:55 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: Love and trust

RECEIVED IP: 41.82.172.211 ORIGINATING/FILTER-BULK: 98.138.229.46

OTHER SCAM INFORMATION SENT TO OTHER EMAIL-USERS

From: “Ms.Sandra Omini”<infor@sandra.com> REPLY-ADDRESS: ms.sandrao@yahoo.com  vienna_nl_almanzor@yahoo.com <> lovesandraomini@yahoo.com +221-76-488-86-54

 

“favor khalifa”

ONLINE DATING SCAM – NIGERIAN ROMANCE SCAMMER

Hi dear
How are you today, I hope all is well with you .I am sorry to worry you with my Proposal for a relationship with you, but I know that you will grant my request in good sense and understanding, My name is miss lorita i saw your profile today in the internet friendship site and became interested in you,i will also like to know more about you. I’m hoping to hear from you soon so that I can send you more details about my self Including my picture. I believe we can move from here. Bear in mind that friendship and Love has no colors barrier, no educational back ground barrier, no socio-economic Barrier, religious, language, nationality or distance barrier, the only important Thing there is love.
Yours Sincerely
lorita

HEADER:

Return-Path: <favorkhalifa06@yahoo.com>
X-YahooFilteredBulk: 98.136.217.39
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: lbR4xrkWLDs4M8pF07ovpMWXUVYTn5ydZVpndH.yYwcgiEg9 qFoIntE3ls47QwUicUSBAM_9TTDS.gGggD0DGSl4ClQz8GDiqyV8qcWOEuUn NFGG87DODBpsWBy3uEc6KTuQsoue2mht3YGnWsHhfW76YE11y5ISq7jb67AM zZ8B3rLlsBdAJbnf40HTc12Ee1r9dj3K6DeR8V5d_vjG3AMDAaPJLT9Bpwj3 rbcFuia.UjwVnveFcKWcDjsF_YrZRNFZcuvjGSJjssQO094aUgl6mSoEcq_s aYyF5EjlsXki77n7cylXvnJxVlh48JWe9kA75azvti7k2JYkRsvsPoldpa_c HhMrBAyZ3BNvFtfRyk8dYPWTyT79J4q.LSS9rcqh9Dqjty2Egbhgce0jQ4xd alXYqy8i5hEgX4ZtEXxmhpO7UYMh3inDeaUR3xWS263jp6jCZD.QsFlXr2rb 8l200_6aHP5tmcd_QJMVoW5acrYTARdTYXy03b812ZnydHwmuWwcpcBHaa4M nSYR8De0pu.Hc7aNAFD.weACpiUDoR0XvyLMq9KYA9nXUUg6YTMKVtxHhloo DKSP1J1F6gEbd3UROyuA2G6N3kddqw700kp_g1R2qwn.XeKXbwLZO7X5EJ3D ITm1qHw2Gq0bYq.2fDpj1OMX72ThYDJqPJM10v.NFZFgM2fSuADRxdU97o3I A3Enw60j1oWQtYwWxiNiP0NNN84SoEjorFrKi8ENFKijDUL80ceXEGp.t1us fJmtsixGl6Naylrs0zl0qb1PxDgBW6mNoxk5rLBaI2CPzPofgg1jnqINZP6D h4311joghCP_uX80iJ2ABDV9HQKzJNrtaLgp.Sz2496nsd.HxnzAZx4_eC.G sn59V.PNzLRUhCzsV_GKD7AFwoetleIUFIfsv1QyAxBQz8WgQH5_dwV.xB_1 JvDD0ZBWyFo3QvYtPwXj0h7X9Iu5P8bOKGIw.b0jEzk5Al2cMtE4jIrAXEVF u6DgFjCqOOmjYWMZAGVWaB0ko4qSjv3KTHPMn.ecrIrLzrpHbiXvzoTITkNh IdJlwBWL3PfF8hRhcIi99fd9mYxMDzyVUm7lDtoH.OF97hDxJsECdiQEfAUB FCneBm915OJ8RP7GrdHCUiRVID4HDg2SYtuOIMcGbqj8ovw3GLuUlx4Z6FbG XeBKrUT.jL.8WiSADZr28uZN0OLUNl5rYbUkjiVOt1YBgvmjrTf40YSGFNvg SFyTdU_dacY.hgwQ99zm657EpU6y.WwPDtw7JUu9uFmeZhjBEAwe4uSovtu8 Qv54OnuJgGfNcyrLKB6GW7VriVdXeskOGF4lJIaj576.BWC75M6ut2cuWuQm VGhKc567_TX2JR9EdgFJVa0nIt_qjLtQXcXxO_IobJSMIjDk3Z1hiAhAMYpK mcGqMHAtuyb4FgpS.Q–
X-Originating-IP: [98.136.217.39]
Authentication-Results: mta1195.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm20-vm8.bullet.mail.gq1.yahoo.com) (98.136.217.39) by mta1195.mail.bf1.yahoo.com with SMTP; Fri, 28 Dec 2012 16:56:10 -0800
Received: from [98.137.12.63] by nm20.bullet.mail.gq1.yahoo.com with NNFMP; 29 Dec 2012 00:56:06 -0000
Received: from [98.137.12.210] by tm8.bullet.mail.gq1.yahoo.com with NNFMP; 29 Dec 2012 00:56:06 -0000
Received: from [127.0.0.1] by omp1018.mail.gq1.yahoo.com with NNFMP; 29 Dec 2012 00:56:06 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 890946.89254.bm@omp1018.mail.gq1.yahoo.com
Received: (qmail 31083 invoked by uid 60001); 29 Dec 2012 00:56:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1356742566; bh=+TPw1TXVcPbQNe/lpgbb+9UmHGvANsl9yyGCPtTZrBc=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=j907DVYz0W0x42n7BBsuGeI27yrHnvc6g+0AeBc7fYogBS7O+13DV4NfDq3ImwBkSyjkMXRz6LNNazZ3EAg3I10HkB+rCy8GjgCGy916E0aLLIX6csE058avtWqtQZ4IFztdAtWCzvJv0z3xBoL+qwSgxpwtEQjaNPodti7baYA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=usDKyePvdDP1Zo6LbX5G4thqaWQ4oKSM9Yrw89S+7+WgYcOH1TObARZF87P6he+J9giIf/sufJFQPMDnSNA0aEqJlUz8tQ0YqKm5kQX8WpVg+fa4iGSyR9EBrZE3wUWJKKPutMH3lSiLAC+4atFKbjCES6bp9rI481Bg+/lRaBI=;
X-YMail-OSG: S7DwE7wVM1nBz3AtZJpldRybwjdRghemKEaTYlELDuduwRx Ommw_pAhG26zW4Ks0JIdy7L0Lya_Gc0Nfw.Yf.VR6Oc7JwXaWZPldoLSCpVO adOZL0uqCKRXdFlM3eTF6LVI0HP2A.w8dMmKddKEt48I2aAITWeHOGcTGN8D AA2yik4bk4U_ntaRE3TYFsaI2Dn4D8LXBjCLypC75dPLTVbUDZXAeNGqXwVq 9MBdIgRVLDzoT6Gvg4UE2rAHrTTBXTQpc5frfTEmMH8Uc2ZS0ksplgFdLQ_q 2SlXeG0QZwnblKGy10CDhLAYDFpiomfHoArNkMucolBPD8DxCawNvzw2aspc TltBbkN31mPm8H9ii6HVVb6_NZMflLeDt2YB_7apJdGCi691Ws2IKo2xgAdC _ctYfNtW5nzo8zjPxh8IgScELO4aItfnBloakg.QvMNAPtPY7ZSd4lk09Ddz 797tTshLcRbhQXOCqUtq_OExN.Oe2Sd9hbyc8LQpMCOyHMSoOePSqlJaTRn4 rGFKUntwHLxAA84L6U7vGWMi1KaIVVi6VRw–
Received: from [41.82.125.44] by web163404.mail.gq1.yahoo.com via HTTP; Fri, 28 Dec 2012 16:56:06 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356742566.25710.YahooMailClassic@web163404.mail.gq1.yahoo.com>
Date: Fri, 28 Dec 2012 16:56:06 -0800 (PST)
From: favor khalifa <favorkhalifa06@yahoo.com>
Reply-To: lorita_kasala23@yahoo.com

_______________________________

Favor (Lorita) Khalifa has also sent out romance scams under the name ROSE and username rosebaby24 — including the email below which was written under the same IP as the above (received) IP (41.82.125.44) along with many other IP addresses.

Hello My Dear, My name is rose,i am interested in you, Also I like to know more about you and establish a relationship which based on truth and trust with you.I want you to send me an email to my email address (rosebaby_@yahoo.com) i will give you my picture for you to know whom i am. please i have something very important to tell you.I believe we can start from here. (Remember the distance or color does not matter the age, but love matters a lot in life) I will be happy to see a good resp

 

________________________________

favor khalifa favorkhalifa06@yahoo.com REPLY-ADDRESS: lorita_kasala23@yahoo.com

ORIGINATING-IP: 98.136.217.39 RECEIVED-IP: 41.82.125.44

THE TWO EMAIL ADDRESSES BELOW ARE SCAMMERS WHO HAVE ALSO SENT OUT SPAM UNDER THE IP 41.82.125.44

From: tamara_t_valadez@aol.com
Subject: RE: Wire Transfer cancelled
From: josette_shapley@aol.com
Subject: RE: Your Wire Transfer

 

 

 

 

Akoba Wilton Gbakolo

BUSINESS PROPOSAL – NIGERIAN SCAM

EMAIL: Dearest. I got your email address from the yahoo tourist search while looking for some one whom I will call mine, I will really like to have a good relationship with you, and I have a special reason why I decided to contact you. I decided to contact you because of the urgency of my situation here, I am Miss Akoba Wilton Gbakolo Sengbe Sankawulo 24years old girl from Liberia the only daughter of Late Mr. Wilton Gbakolo Sengbe Sankawulo a Lecturer in the University of Liberia who died from congestive heart failure. My Father died as a result of heart failure I am constrained to contact you because of the maltreatment I am receiving from my step mother. She planned to take away all my late father’s treasury and properties from me since the unexpected death of my beloved Father. Meanwhile I wanted to escape to the Europe she hide away my international passport and other valuable travelling documents. Luckily she did not discover where I kept my father’s File which contains important documents.  So I decided to run to the refugee camp where I am presently seeking asylum under the United Nations High Commission for the Refugee here in Ouagadougou, Republic of Burkina Faso. I wish to contact you personally for a long term business relationship and investment assistance in your Country. My Father of blessed memory deposited the sum of US$8.500, 000.00 in Bank with my name as the next of kin. However, I shall give you more information of my inheritance on confirmation of your acceptance to assist me for the transfer and investment of the fund.  As you will help me in an investment, and I will like to complete my studies, as I was in my first year in the university, when the he died. It is my intention to compensate you with 40% of the total money for your services and the balance shall be my investment capital. This is the reason why I decided to contact you. Please all communications should be through this email address only for confidential purposes. As soon as I receive your positive response showing your interest I will put things into action immediately. In the light of the above,  I shall appreciate an urgent message indicating your ability and willingness to handle this transaction sincerely. I am staying at the female hostel. Awaiting your urgent and positive response. Please do keep this only to your self please I beg you not to disclose it till I come over, once the fund has been transferred.Yours Love,Akoba.

HEADER:

Return-Path: <issa_muha2007@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.76
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: VvgAkwEWLDs2wQ7ejOSG8R3P.BXWskTmu50QD0XRnZx2Jk6j lLozuaE7w1vavH9o.FkL0iUYC0n_eF9w3RoJ.Zxvj51dutDByDEWlC.PI3TJ HifLGaeFluHQQc3yZhS.LICowWyiqCQ0ZeAY7WfVSwSggA2xHL6uyXpADW7b 8cDGVUb2DayQhwagGhFpcZ1pVcVJWCV2P0L8Vu5VuWxIDsWegasQ5kaZnVEj cFxTot1JqdoMncJT6o9tlxx3I6LZMvKDAdlFFTRx8p1YLDvT9h2XExzYfaqD .gS8JjCOQuE6YeQ0JmlbXJtGn_AMA3Xaa2R.cNA1Axoa22sHg7BTsNIQ72aX YhWzYetLMsKrvt5jN6jQ3r4TDl.itX.740NYiIJdTD46bcsVk7Qk3ynNRNv1 Wl4rHRNZueGRB_LPDkZHx29ZnJ381TNTSDe3QeB_jTtA3oBndOtTvaBftWUl uZp.PpB6XnaynpS5w3Kf1CoixdUri7k3BDBL5JisS8je341fViZ0eSimisQv nqImEJnGOfi2xfcIOqITKAZ.GSo5JcXT8kh4cPRp2yYkz2eZhHHx.vzlQMGP b8vWhY.FhhoZZrLEheePCTBs9airm9TvGWL8lGi_m0.wOUo73YRE_HeGIIQ5 wI8ZaLTEFlQo62LrMCupiHd.W8J.R2_TVMZlDJjCSoLZdm0gB5gN_Zt4c9x3 tPYNgcy169ZN9Ydz9ZBn7QrUwhcwUa0QaWLO5wchj4kKkhu.xtuFXpXuizOk BZqNphoSUy9TQ.aEErz38N.viQNdqirdFKYKWXJlBMe74EdXE9koxZ8CB511 LHzP7a.Zdp9UhyYELLQZcW3VTqo7rgL3cAmdQBEPE.Je3r74AMrHhnP2YsDP 3IPiQSxzqnxaEWXvyx.YRxa5Zevn_ZkfUzeEMBtGVg6wiHf9PEOUMiw5n9aE tldC9xk4USVi.H8_PYFJf4eLLSMHWlYSEqvYxOq.9Mr_.qZz6s1uDrt7M6qD hqrjvpp2b7Inf5rJsTl7qvw56Nb.VFJxYIbx2euQlHaUwYETb8_ov8mDmqqF EDbqBuToRoWZl4q0Ck0z1s8Jl1IcnKOjRf8FpMZb18UgHZ9CjGAMma_8AIrt asmAscimdOzUoZ37VzIEqfpzs.7dukj22hWncUqCsoPjw4m5fUUFw.e9NcS0 zJ4KHJdtdz51cQH6g23r32Brvqi7wJHKotS.rsuAii4xqkkcWaG.FschdA4c eJ1LNvBp5R5.d_Pa_w4zd1gMuq34_taXIS7N50I_OBRJycvn24bDe7tNFpmD MdsOulDgWlOoQv7DqgRlU3D.RaykI2mQkSTgj0RBJ.2QZGYeBRYs_QJIrjx3 cC13aIWKYwkHRLMQ4r8pQAANNrL2DzEQzLFeW4MnG5ZvO_4uQS5ebjmedZIT 52U-
X-Originating-IP: [77.238.189.76]
Authentication-Results: mta1442.mail.mud.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19.bullet.mail.ird.yahoo.com) (77.238.189.76) by mta1442.mail.mud.yahoo.com with SMTP; Mon, 10 Dec 2012 06:29:35 -0800
Received: from [77.238.189.232] by nm19.bullet.mail.ird.yahoo.com with NNFMP; 10 Dec 2012 14:29:32 -0000
Received: from [212.82.108.248] by tm13.bullet.mail.ird.yahoo.com with NNFMP; 10 Dec 2012 14:29:31 -0000
Received: from [127.0.0.1] by omp1013.mail.ird.yahoo.com with NNFMP; 10 Dec 2012 14:29:31 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 694706.55841.bm@omp1013.mail.ird.yahoo.com
Received: (qmail 32760 invoked by uid 60001); 10 Dec 2012 14:22:51 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1355149371; bh=Go660Cp/93cCWg0Zsa/6e2gdg7d3RDyVLQsWcOU/Ad0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=AF1zl1f4Ar3hwZwplXDfYUCuhoVgY1PJhxqpvKEHy7YdLegVcSi7ooFaRC/Bw7hdgYE+gHQSjDlTpVHAQ2Zian+rbVqVmZlW2tWVEJd6UU3XgpObbmhd9zeWsYf+gUb0eDQOmmoYdYiJg5VpIxK8rFN41o/ovGE1hBN/E2sz81U=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ImNlApv8424qOatMvV4qq4TC8SuCU79oa9ckJPmdzab4oPmVr9ppsEyHX5dI7fFwgnRi+vwaClusMk6qpCMXXU6pt3IlcNuBYOH5X5qEaGhy8gbq7vXRN7RZEVN7mvcRfvbjWht5b4/wrnz6QUDMpYEnXI5pRm+1PxYiGvzzqcA=;
X-YMail-OSG: J7m9hPcVM1lsPElW0pgMvQn_xCZWNdrW7fAHZtW0cZjtd2c rYUCNE1x7XYzj8ck-
Received: from [41.138.108.204] by web132503.mail.ird.yahoo.com via HTTP; Mon, 10 Dec 2012 14:22:50 GMT
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355149370.31600.YahooMailClassic@web132503.mail.ird.yahoo.com>
Date: Mon, 10 Dec 2012 14:22:50 +0000 (GMT)
From: Akoba Wilton Gbakolo <akobawiltongbakolo@voila.fr>
Reply-To: akobawiltongbakolo@voila.fr
Subject: PLEASE SAVE ME.

“Akoba Wilton Gbakolo” <akobawiltongbakolo@voila.fr> REPLY-TO: akobawiltongbakolo@voila.fr RETURN-PATH: issa_muha2007@yahoo.fr

RECEIVED IP: 41.138.108.204 – LOCATION: AFRICA

ORIGINATING-IP/YAHOO-FILTERBULK: 77.238.189.76 – LOCATION: IRELAND