RSS

Tag Archives: Online dating

“eHarmony.com Dating Partner”

POSSIBLE PHISHING ATTACK – ONLINE DATING WEBSITE – PRETENDING TO BE EHARMONY – SPOOFED LINKS

ATTENTION: I’ve been getting fake eHarmony emails sent to my spam filter. I am not, nor have I ever signed up for eHarmony and I received these eHarmony emails the past several days (on my fake scam baiting account, mind you) — I knew immediately that something was phishy. The fact that the URLs weren’t even related to eHarmony, and after looking up the header details I realized this is some type of phishing email. Whether it’s malware, a hacker, a scam, etc, it’s something phishy.
SUBJECT LINE: Singles Looking For Love In 2013

#1 Most Trusted Online Dating Site. Join Now!

©2013 eHarmony, Inc.
If you would no longer wish to receive our special promotions, please click here
or send mail to:
PO Box 3640, Santa Monica, CA 90408

HEADER DETAILS:

Return-Path: <2093192922@portalexport.com>
X-YahooFilteredBulk: 130.93.81.10
Received-SPF: pass (domain of portalexport.com designates 130.93.81.10 as permitted sender)
X-YMailISG: M3AJff0WLDu3gnhmNjiGcWZCDX8VNfF9gVyEVwn0d57lYzYE Qw6i7CSQaV_KniE81oJcBTzfEaYhbhvkkW_3bgeWeNssI0hpTf8pzJVZd4oj DlOjgYNdSbizcBsnGDlAlYOCN3ODZG2M3SCHPtdrCfd2Vkv.uh7LQM7onIIZ EvxzodhiT8tstB4O0meuQ.GeuYvrrsfQ_ykQPIL11z4apR1aDJwKCEP8PjBP NiXMaIWSB6QtdT9r3Nu9RD7FRc_6pNpGJCLqKv6YhG2tAUiA.Z4dU8LaSe.Z 2OSI7J.8etjFW6l1A07wfcOiPhdjpUJfzOKT3gjlPVw0bneSOCbvdf0n0.Ol J53i3G8UtPk._SsOOuRTH0px18vsfKJfAba0qkHMhi4IaS.xyabsVmAj3121 .cFUzW7sBgHPzIHmJwX2hAOHr8n.nzSK05os.fCTkr2VC2dn3adr5CjCK4Cs yTDmaf2XCi7fI_wdhX_VHfQl4n43kCVWkSbr83ioRgw1UxL5OQh648_uW3QA QNZiz09BBkeWzy5hcVIbYeFN6WRAHb554l.AFMQQZSY1F.WzfnoyjbRArlsb 3_YxdMxulbx_UfOHBv2DlGin3XVIA_DASQd3fT.2LlbX02M.sFomz4ikQI5k W4tlvj5kpAYEpDzMjMrSZoz.900y4sxRbFw5kv_dEAZ56_OcfsiD_wTuA6K0 XlRzTlIP27gQ6EoIafDU.GIyYrCNNxBrKCQOXKyTuG7UWLCjf.zAHY5oqjdo sylsaiFmj20f24gNvgwgyUFjwvfC0SAwlCbKIeoXrXVhJDdjQ0ikPMgeeoHg OH7f2Hf6DSdjKB_cFDCPGGbfRscHYLePq_0BmP1zUnM5L1zxzc.EY9CPijgN DsAPkpAoAp5lY7C8GDeqPZOyAvPJuyU2Qt0mmE9q5QiBvRvKlewbvOK7BusZ Z_o5cddS._R1QyJ0J6OfiirXgHbZlGwZGY3VqH2gfGGXZiqrrTVS6uiI0a_F mNiVA5Jdw.Vhose1PnR0ATG3SQJLy0xlgfmCI90TJe3_E6NwubWAWK5YK4OU zwrMdKiLpHu5WM7SHvA8GgPTws4NqwqbYn1gBkNvHgYkTzabyQ7E72vguk7r mCvYXVpJaYrgozv5OGNXnQeCHtL73sQf0IQrQAmkWAIe1pKxBtUS8HkDJki. iNH_vWvqO9_HTPOKGRArVq4FQPKhgoQaS6gXzUpa18fjyytvuzkIjgpnECia dYgtcMwG6TaMfJfnilczjWZ7i19ceCfb26_gGwIqqHEOexzWs42hb3vuiKYd qOStuXI6KVd6Fig5Kkvs5CfzO7NN9d28mgX4EN4UtypmZDvUmY6GSZfX8PHl FqOpIksji3xRa2u1f.Yl6KUArTL0dWTicRIVXiunSnD2uuxuhCUov9fgtuGc b_jAFjk9vsXH27xV
X-Originating-IP: [130.93.81.10]
Authentication-Results: mta1234.mail.ac4.yahoo.com from=; domainkeys=neutral (no sig); from=portalexport.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ul.portalexport.com) (130.93.81.10) by mta1234.mail.ac4.yahoo.com with SMTP; Wed, 30 Jan 2013 16:25:27 -0800
From: eHarmony.com Dating Partner <mailers@portalexport.com>
Message-id: <72704994_2093192922@portalexport.com>
Subject: Singles Looking For Love In 2013
X-mHn9bGc2TnNqC6Sqp8c: NzI3MDQ5OTRfMjA5MzE5MjkyMl8xNDI1ODY0N180ODMyOV82NzQ5MF8xMjI0NTVfMjY3MV83OTU2Mzk3XzBfNjA5DQ
X-Ver: NzI3MDQ5OTQ
X-CampaignDetail: 72704994
X-Log: 0
Errors-To: errors@portalexport.com
<http://portalexport.com/x/MjA5MzE5MjkyMg|NzI3MDQ5OTQ|cG9ya3lleHBvc2VkQHlhaG9vLmNvbQ|NDI|MTUzMQ|Njc0OTA|MTIyNDU1|NDgzMjk||MA|MA|||Nzk1NjM5Nw|MTQyNTg2NDc|MjY3MQ|MA|NjA5|VQ.html>
Content-Type: multipart/alternative; boundary=”—-_=_NextPart_001_FHVBI9TV.45VYWRRW” 88.198.16.166 173.44.133.82

 eHarmony.com Dating Partner mailers@portalexport.com 130.93.81.10

 The links came in forms of images pretending to be eHarmony but the actual URLs were http://www.portalexport.com.br/negocios.htm <> http://webmail.portalexport.com.br/index.php?lang=Latvian — Which is a ”business consultant” looking for partners to buy and sell items. It’s not even a English website, never mind an English dating website like eHarmony. The actual URL can’t be copy and pasted because it came in the form of an image but it started off like portalexport.com/…/with_a_bunch_of_numbers_and_letters

__ __ __ __

SUBJECT LINE: Singles Looking For Love In 2013

©2013 eHarmony, Inc.
If you would no longer wish to receive our special promotions, please click here
or send mail to:
PO Box 3640, Santa Monica, CA 90408

HEADER DETAILS:

Return-Path: <2093192922@devicedigest.com>
X-YahooFilteredBulk: 130.93.80.179
Received-SPF: pass (domain of devicedigest.com designates 130.93.80.179 as permitted sender)
X-YMailISG: qP4_qdIWLDsuod7JBnqDQpOfP0SPPxPAdYLhMttsbbbZhvJ9 fTFBcUBRm31.ArzlDqoCIlKINNvCIZPP.YYUpu38eWQuf1B.f7NKGjT7t_sd dx2s5ERWR8ymbEo8pXEaYNEaZEgtG_imXHo6Cnq1d4OemJo6.fPkm8YH_uVB ET0R1GYNVy5KoonXIyfDW9mtrMRtNj2nfuMJp2qHFgItr2hH0dOfoe08OPvG om5jmFe7TP8l16Rv0r5Ljt5L.X9gPwAiGV5VxLGnhZ49zhl9.upfGLsU9uCl 0GQAGSt8lIUoUBZ0w.Q6MNpIq33IY2fMPHnQjaz3yVk8U3Sv7ZLgvxVo7Tw8 st6vV5zQ36c7YI8AeqnehFxAr2iLjWa475NvjoyXmhGOO.AYJ3wkOvlV1MWu MiS0Zv86zlT1wQeBftcu9ROAl2wZco_tx6kt7Tfm.adYFbjuU6mNNcjTmm1F SKQ8gCHHei6JhHVxXtvoXYCyTaVxkbsmtLu5iC92ggMO5t8kU8ASjX0MWdS8 cx51VgWGHcRMtAMTq.uZWQJHWaYuQLmlqTGLyEg8V7XAGOjv9BYJrZYJNzJ4 wq2kJoyRWCB4qL1akmMI61mSMxEUq3vDjpjo6UERvvYFvHjzRn.dthghsCSB mIXI6xpIzNWnL_LOFNPs3HINsIYORPNYGAAibnrd6rNERchkaaxjqjVdVz0S s4ssR_3Lj1lxP9ncV9aU7gVa_qtegp6br61vnF2TaQ7hBEVXi1pqPxoge37d 2WN5c2pA8fEkfzgf7LQ0Hj7Rk3zRh5h2T4f5FL06JT5_RfSkZ9THFCufOlZp leAWTeA9qBfi2l7OeF6AEMGH1u1Ez4n0fQCkqIesKA_GIDfV1mmhbKQaK3Nf QcdIYfUCEGBbcspg78A_3SYNUXWyH4MS3GfdqBE61Y0jkkPERCHvSXz_RZkf 7KN3SEIXfKDn.VttRA7YEuRtsV_BXZKKEeX3lkfP_JcCEq.g39SC2Zux69L_ DwIw.MIbUbePduUaBC3.9yPNHbbLjTUvglNzyNmhHg5Nny_lLg5Iws_t7bbU FerwxMy0zl6SPwz0X09ztF5pwdxEnNht9xig0rd34yaDf9UYXmiKYbg0W8dS AlfOFPOmBlOo74nXVt8jywbKPE5j_8.niDgLwTXn6XC9fmPnhO_vGE1P7Hus Zn0_0WmKEDdFMyxMqJdt3Gq2lC3FJtzk935BL7bjaBv..azU7iLcHHLGrl4k rssOIt_F8bKMkmXr4xpqNYdd1fI0YpDK4ToJPfiGOQwTDrq1SB_xzppvljtw jCjUlLlzIyu31xor_0G6eb9JcAfynnabJsFsF2_grljdRB0nfKfxbPvWbzaf 2fhu8ZNCj4UngXFA5pKMeJIW
X-Originating-IP: [130.93.80.179]
Authentication-Results: mta1047.mail.gq1.yahoo.com from=devicedigest.com; domainkeys=neutral (no sig); from=devicedigest.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO kl5hbb.devicedigest.com) (130.93.80.179) by mta1047.mail.gq1.yahoo.com with SMTP; Thu, 31 Jan 2013 12:16:30 -0800
From: eHarmony Dating <mailers@devicedigest.com>
Message-id: <72975089_2093192922@devicedigest.com>
Subject: Singles Looking For Love In 2013
X-IK1CRNCvGL5wLAmNh8H: NzI5NzUwODlfMjA5MzE5MjkyMl8xNDI1ODk1Nl80NjQyOF82NTU4OV8xMjI0NTVfMjY3MV83OTU2MzkyXzBfNjA5DQ
X-Ver: NzI5NzUwODk
X-CampaignDetail: 72975089
X-Log: 0
Errors-To: errors@devicedigest.com
List-Unsubscribe: <http://devicedigest.com/x/MjA5MzE5MjkyMg|NzI5NzUwODk|cG9ya3lleHBvc2VkQHlhaG9vLmNvbQ|NDI|MTUzMQ|NjU1ODk|MTIyNDU1|NDY0Mjg||MA|MA|||Nzk1NjM5Mg|MTQyNTg5NTY|MjY3MQ|MA|NjA5|VQ.html>
Content-Type: multipart/alternative; boundary=”—-_=_NextPart_001_9EEATPXW.CKJHBHDT”

eHarmony Dating mailers@devicedigest.com RETURN_PATH: 2093192922@devicedigest.com

This email came in the form of a link as well. The URL is something along the lines of devicedigest.com/…/_bunch_of_numbers_and_letters — At first, it looks like a legitimate website, however, the .com/…/_numbers_letters are what’s making me suspicious. And the website the above email (portalexport) brought me too, was nothing more then a login page and business consultant looking for business partners (supposely a french website, not even English, and definitely NOT eHarmony.

 

If someone has figured out who these unknown emailers are, could you please fill me in. Thank you.

Advertisements
 

Tags: , , , , , , , , , , , , , , ,

“Lorita Kasala”

ROMANCE SCAM – NIGERIAN 419 SCAMMER

ATTENTION: LORITA KASALA ALSO SCAMS UNDER THE NAME FAVOR KHALIFA <favorkhalifa06@yahoo.com>

Dearest Love,
I am more than happy in your reply to my mail, how is your day today i hope all is well and fine with you including your health and job. My name is Miss lorita kassala and i am 24 years, single and never been married, i am from Post Sudan, Sudan in Africa and presently residing in the missionary here in Senegal where i ran for refuge due to the political civil war in my country. I am in sufferings and pains here in this missionary and i really need help from a man by encouraging me and good advice in life and to help me to come out from this situation, and again to help me get my money, because my late father deposited some amount of money for me in the Bank and he used my name as the next of kin.

My late father Dr. David Ellison Kassala, who was CEO of (E T I C PLC), in Port Sudan in Sudan. During the war, the rebel loyal to one of the greedy business associate of my late father attacked our house one early morning and killed my mother and father in a cold blood. It is only me that is alive now and i managed to make my way to this country Senegal by the help of UN army where i am living now in the missionary, headed by a Reverend Father, i used his office computer to send you this email and i only enter his office when he is less busy in his office

I would like to know more about you, your likes dislikes and your hobbies and what you are doing presently, i like to meet understanding, loyal, sincere, truthfully, kindly and friendly and more to that, a man of vision and truth. I will tell you more about myself in my next mail. Attached here is my picture, i will be hoping to hear from you again.
I remain yours lorita

HEADER:

Return-Path: <lorita_kasala23@yahoo.com>
X-YahooFilteredBulk: 72.30.238.128
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: iGPQ3HUWLDvkyT6tV.XBSRGOv.T84STSLRjy4hhA2Bi4suai HiMKRtpT5r0Y9SQBWeHnIyayxkGFp1GeTXJDofBRw9srITPA5UEcbuNk5U.Q 8ZzpKvw6eXKGCvqNycmj8RhwoLl1tJaH_GyP2ByFdh4_vbFKP03p9VK.iqSw 8N4kWgNvEplzcxmnGGTq0uHPGm5v1wGKhvGegNA2cyok3CnJ4RAue47SUSJd 91QL0DOqqUk4XhxkKiAdC8zAnU3Brr5cuU1FnC2MD5cfnSt6OR8We7fa83c4 K9UKUPKHckFu.JAWRI3PpPALPUPaAB8jVIjJBrc2VtSp9yzrOUJGApALHsGP chaQ9QFa0v3Zl5tZFURSt_31eSUoCmOYJYDJW9pmQ5g0oJU9ULBR5mgkn1bz bj4sp1JOvoqi8DmQHjW.eS48GDulvdVBWgI45dCrn.3Ts0SRnJoJVlEqQtU_ Lbz5ytDVcQuBfbdhNrue.fzK_jXuOQgW.w37Psu6R1JNQMj8QmPimZbQVbcR G5Tp8jFt5ZiX7WaSFJ.kVwmXEBu3Qy4m7He.7z.KUEkd5CCffn7V1KhpR3IN xvJWKFAgT8lB26rokRqBfPpuay2E_lsAzUzwvgBA_B7MtV0kQTEnOaWKrcQC uFAusiRIka3SbuyjgniZNpjsrHIzan1THQiGBrRankV3JmNmg1wUmdpDfa0V JcCvuCPhtZ0iG2ExhTo75ByBOacGL1OjX1.t8pI5kWvv.v2a7NOhHvDfps0w ttW80PEHIIYpUE6mv6z3o0giNEw.NGRY7jU0Z9iduEm_xOHpFdF7Stf3vwo5 7fHzb7UcGSH8pPgOfl42Ve3oeQZJs9NdjYGgqfMwQR7h1rUvji7WllyUkJFL 8BLlGi4I5Xe1bJkwVVPqCm7g.hbHgRqKtuuZ_G2wQopDSdkuW0cu8v1HVDel cjL7bkPsX_2qAMW_2Cmw44SHqc65EfhPeqEI7J_hlMfwPhW12vNafAZdR5yc p5CKPgPubWUUAs4NiNDkdblc3eNUcrBLgLRjn2cRZOTpBsEoMWye8iRJr6q. DquFhB_cYP3GkVbLaREFjsHKxRl9KdrLPOsdNRXWvALKsHu_GCaWCMyFZbnx 72qaCODk7K_8uaMA7ynBZOUFPhPCXER3BJB.dc_8Raiewba.toi3tp4XZK3P B4DIAtEooHE2BF7y5eHiPOnVvs06p1ZC5AXpV9KB3oKYSz.SutUfTZwAu8Zc TU2YrqvLD2dRXFo.zY5voHSXd4_yuTB1_3NDe8Kmc2Qu407R5LL5JgrfvYEg FAw7H_caPtw_Qy5CPc0oWMHCmsHQynpmK1pyU0tSb6OMBiQWYt_yb1ZwjC9x BKQaM_Tmk0UTmZwuOc_94FW2ZWG5ZBqTH3z54Gx_OGZWRkSeU0KTxZA.zewd uv6C2C2gF9O5gd4zX.Uf6YK.vyGekkWKb4YYGjPbTeDfudwvZDsD1fynqTiC tmUAMg_eyzjEYUIX03RBVN0qWL1Fap9VFJx8THAt2UCz2FJCCQp2oGkI.o79 PNXuI6K9TW97cZ7Vnwt3rCmxVnSS9liyI9j_SwOkAMI-
X-Originating-IP: [72.30.238.128]
Authentication-Results: mta1388.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm32.bullet.mail.bf1.yahoo.com) (72.30.238.128) by mta1388.mail.bf1.yahoo.com with SMTP; Mon, 31 Dec 2012 01:01:39 -0800
Received: from [98.139.212.153] by nm32.bullet.mail.bf1.yahoo.com with NNFMP; 31 Dec 2012 09:01:38 -0000
Received: from [98.139.212.248] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 31 Dec 2012 09:01:38 -0000
Received: from [127.0.0.1] by omp1057.mail.bf1.yahoo.com with NNFMP; 31 Dec 2012 09:01:38 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 313443.27611.bm@omp1057.mail.bf1.yahoo.com
Received: (qmail 82216 invoked by uid 60001); 31 Dec 2012 09:01:38 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1356944498; bh=S0BMMfUlaMjxJAammylV6GjZw8EEFjHvsc9mPV/htEo=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=vLkudD5IZ5c+mWcmW2neNKP7nleHB1BkFpb0ic/C8VdZGVSwTdffoeCVDr9dkchUTJOklvu7OwKqdZMSnQW4dWt/a8AFBFBA06FwEPa8m+qi/5Ey6ggoTVXyhjPLt/V5LBuMQRAlcPpoep+1O+BOp3JbxqqcdnchqQsW4BR3Qfg=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=Azuq5QeG73JQMuKGuyyQ3ks2F101vk5/itqRLwk/r0i1cDg0E//xC33Ue6qFvmwu5D3lsFp3z/L6Pbjre26Pm9haqd9meunWQBSUNQwTLwZyj1a35NwxK2lP6TfLSWDdrV+LiBBq/mbrXsPcNvumpqf9S5e2nrt744eJVM8ZTAw=;
X-YMail-OSG: N2roZr4VM1n2wRXbrrwi.r1mk8E33h6IUUOdqDIJpNHF.fa kw6hir_K8pqwn6pyle7poRVaczpzxQT5tYA3eF8D_MKnCbLu6mXqFENTfTOr 0PmIZ1ooTqf7UUi7bOs5BQ16Zc91sg6A6KqeZrz8YYnK1QidenHbo0KmhhB7 tD.yGDvpATNWj1WXj.Ea83McZplexH4CkKJoPGL5Xw4yMxuXuYogM1LwfK3Q NhGOY0GseZPv1kj_a2ji67IFAz8jrDntpR3OAZymeoymgN46gH57eEqOqc3l nuZMxOORk_K5VWbG0Ku8TnRKLPeS1jsAR0lyRz4oWeA1LH9gcVdLT44t3eYQ Ppfltj11WGZDeKr_z09vWqAk_IQ755XJ9SiPU5w_ZaixtOhPnVEU1hgLTrCm GLnQFEZMaCfWSxtD09Xg1wpyXs12paZhjUXQ0BTS4NNmW3DeqMDGEy83o4Zb 7GelfbeVAsG.yv30Rp26v6xdW_8f4y614_8gF08tW8HcYilwuiUrdec.H9.4 dKNg2vahGQ3q_3bhQlS7uqDtNM7uCacQkHg0Avedr.1rybp.Ry.d8djvySha tc7vbGGSWOc_cTKfzlqfwBro0eNupEgYuJJ2skDIjkVod0gT_LrGPl59wh.u I0Nnu3VpD5Wis10feIffDn6ddGTwXryHT06zD96vpZLmEaJYy2fyyDMa2dqe tYtB7QLvr0Njzn1XECijpLfZWFbudhR_EVjrJ7yxVPdMBUNGWG6oBEKNKVJW Bl97h7pmjmc3sQuj171Z_drm_uf0Ic36OgNsh
Received: from [41.82.104.160] by web160905.mail.bf1.yahoo.com via HTTP; Mon, 31 Dec 2012 01:01:37 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356944497.81840.YahooMailClassic@web160905.mail.bf1.yahoo.com>
Date: Mon, 31 Dec 2012 01:01:37 -0800 (PST)
From: Lorita Kasala <lorita_kasala23@yahoo.com>
Subject: THANKS FOR YOUR MAIL

Lorita Kasala <lorita_kasala23@yahoo.com> RETURN-ADDRESS: lorita_kasala23@yahoo.com

RECEIVED IP: 41.82.104.160 ORIGINATING-IP: 72.30.238.128

 WARNING!! — BELOW IS INFORMATION USED BY SCAMMERS WHO’VE USED THE SAME IP ADDRESSES AS ABOVE TO SEND OUT SPAM

Nelson Smith <nelsonsmith11@yahoo.com> <nelsmith11@live.com> +447024065949 David Winter <winter_dd11@yahoo.com> SAMUEL DIALLO web.office_3059683@att.net Nadia kallon mbembe nadimbem@rambler.ru Subject: Hello Dear

IP: 199.114.223.42 by web161006.mail.bf1.yahoo.com via HTTP;
Decimal: 3346194218
Hostname: 199.114.223.42
Country: Anonymous Proxy IP Address 41.203.67.116

Host 41.203.67.116
Location: Nigeria – Africa
City: Lagos
AS Number AS37148 IP: 41.203.67.117 Decimal: 701186933

Hostname: 41.203.67.117
Country: Nigeria
City: Lagos IP: 41.203.67.116 by web161003.mail.bf1.yahoo.com

Decimal: 701186932
Hostname: 41.203.67.116
Country: Nigeria
State/Region: Lagos IP: 209.159.152.66 Decimal: 3516897346 Hostname: 209.159.152.66 

209.159.152.66

 
1 Comment

Posted by on 01/05/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , , , , , , ,

“Mr Paul White” is ”Judy Peterson”

Inheritance (Beneficiary) & Romance SCAM – NIGERIAN 419 SCAMMER – Advance Fee Fraud

 

Mr Paul White <> mrwhitepaul2090@gmail.com <> mrwhitepaul456@juno.com <>


EMAIL: 

I received your email and note that your ATM CARD has been issued by the presidency and we have been giving the go ahead by the president to deliver it to you but the only thing you are to do is for you to fill out your details and also send the fee to pay for the delivery  of the courier and also the document which is the INSURANCE BOND  CERTIFICATE that has to be on your name to backup your card for successful delivery,as soon as this is done your ATM CARD will be delivered to you.

 

Note I do not want you to loose your funds now that the president has approved your ATM CARD and also make sure you do not contact any one because they do not have your CARD with them.

 

I await you

 

Mr Paul White

 

 

 

> — On Thu, 11/1/12, Mr Paul White  mrwhitepaul456@juno.com wrote:

 

 

> From: Mr Paul White  mrwhitepaul456@juno.com

 

> Subject: Dear Beneficiary

 

> To: 

 

> Date: Thursday, November 1, 2012, 1:05 AM

 

 

> Dear Beneficiary

 

 

> Good day?This is Mr Paul White From Nigeria,We have your ATM CARD here

 

> loaded with the sum of $4.5 million and has to be delivered to you at your

 

> residential address over there and what you have to do now is to obtain the

 

> INSURANCE BOND CERTIFICATE that has to be on your name to back up your card

 

> for successful delivery and also pay for the delivery fee of the courier,It

 

> will cost you $250 usd and that is all.

 

 

> What you need to do is to re-confirm your information to us

 

 

> Your full name:

 

> Your resident address:

 

> Your telephone number:

 

 

> Here is the information of payment

 

 

> Receiving name: Teke James

 

> Receiving address: Lagos Nigeria

 

> Text question: How are you

 

> Text answer: Fine

 

 

> I await you

 

 

> Mr Paul White

 

>

HEADER:

Return-Path:   <mrwhitepaul2090@gmail.com>
Received-SPF:   pass (domain of gmail.com designates 74.125.83.68 as permitted sender) ciBBVE0gQ0FSRCBoYXMgYmVlbiBpc3N1ZWQgYnkgdGhlIHByZXNpZGVuY3kg YW5kIHdlIGhhdmUgYmVlbiBnaXZpbmcgdGhlIGdvIGFoZWFkIGJ5IHRoZSBw cmVzaWRlbnQgdG8gZGVsaXZlciBpdCB0byB5b3UgYnV0IHRoZSBvbmx5IHRo aW5nIHlvdSBhcmUgdG8gZG8gaXMgZm9yIHlvdSB0byBmaWxsIG91dCB5b3Vy IGRldGFpbHMgYW5kIGFsc28gc2VuZCB0aGUgZmVlIHRvIHBheQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzM-
X-YMailISG:   MSoeIOkWLDtHW9x0uNSzc8WZD3.nVCiKVcVohr.aWgYn72kH eJWC6.A9hRLcAq23yQedUmxaJzRQ.DNVGXp2SEa3GHFh1A9iuiXYzQqH.gq6 Td46np_gRqR53wCozKHxgNzdZbg4luN.RyPsoP4bjImZAsnSrblllDwZlVuQ EICLfPld8FKnO23XqDwyWAjHUOxJCB1TMfIzDyEpbbiHwV39Gl0gBasJ1R3T bx.D7_QtpXMEQzgFoO_3DsAvaps2Bx2pS4m7DdRZHHH80GMERFfQRpuueqxH ICVfJ3yX8pcEEn2gc6LmsLRH16nCssdktKnLtw3mE51zrPAwb7pOrlD0dnej 1TP7oCh16SzhPKv14xnRESwc6HEIRygpNVOHchmSl3zXyxt2O_kGGYovp2JH 1J3vq6DdJ91xvazftL50ectADF0E.3FKs2u6W1cicqXovuMvnV9_pNWSsPb4 ajlzIueNmdRHME2nsnKKiwv1km64iUTzabNIEDASk_r0MmeYV0v76dBM.UfZ NagAolmzFqz9KDJbmFgEuFadBybLWjlFdSRifiHN4gcjisEtW_b_WLd13qad Tw4YoOTLpbXDdqwdA3kG8jXTJIVCYYH5guOAvzudlsiSc2xV8PfI66aGS_U9 dj.UMGjdqGYy4Pgh2ep8B5DgbS6cfTLMLIFMh6hWLf9m_3psXKIBHT6qGUbj OW9G0_47Uy7B2DWfW22cY9JJ49eBOfHwEdS51wAN6lvU27Trzcz3GKV0lkT2 RXfx4IxB2oJIAh4KytQMAVsE8mkeT7YJVn.O4DGtQxVOsnyiX9tytrtkFjuY kpmlllgDDn6B_23jo5VoW_8S0dhknm5DLXJQrNOPlgaZrQl.dD4fnH48qW9p 0KmpXQljdhA6Bxw62aCQPGmOLYv9gvOyp46p.VLKCPVeXvjYG_3uFH2MI5rU HRrlu0yaQ6R7uVVSvgv.0kq8bdayy1MnaM_yGn_4lZOiQWZeF3pE1aLYnqCm _QvVSVETwVKchhj7vwjntq44ilD2bXzSDP8JNVsBLAvxeb1n8ycewx_s7nSD UuRdqHEYPoniz9WeT6Vpz_AR.zMb_C6CsXYS1noLgE0ySe5xmqbnAtX0eMhx sZERJ8YZudt1MGy16PS9EWP2e6HHSJiUljbtNFf19MZz3epZiPxRo2265S7r tf0FfI6w_0jpJISzknbgPIsYLbYrwykW._T5
X-Originating-IP:   [74.125.83.68]
Authentication-Results:   mta1394.mail.gq1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO mail-ee0-f68.google.com) (74.125.83.68) by mta1394.mail.gq1.yahoo.com with SMTP; Tue, 13 Nov 2012 03:29:17 -0800
Received:   by mail-ee0-f68.google.com with SMTP id e51so278686eek.7  Tue, 13 Nov 2012 03:29:16 -0800 (PST)
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=yoKQDks/uFHuxfhYNKZpQL4lIC5qc+0JVRs4GKfkO98=; b=vuehpmABqm8daObVgvMVW+79wLJ6TTSdmb5emB5CxOckqFCO1ZoLVeaM4fKpt7IjTM M32e7uhU7G5pwt0/aJDbhL2OLzKb55TCpRqT/LyjXfq+YzRgOwqMLvOVsHN1UK3E0zXU aIj2hG/ovnMTlOpIPmvcc2mJCmGeQmK2cxTVVikeRGQv8t8GRuACOT91y51UaIUa/VAG qbVt3GKn1J+NMDLhfnhQ3NCrwtBnpdmWaI4PwR9sDVY2/xDM9E5SegGOEDixl5qaVuV3 2VfJXDa68Ng8m1KAt5asrurwp8k1iwcQW8HGqnv6rzlNkSaT8fpgx4ybCzAu2+KE53b5 yvPA==
MIME-Version:   1.0
Received:   by 10.14.213.65 with SMTP id z41mr73219533eeo.29.1352806156559; Tue, 13 Nov 2012 03:29:16 -0800 (PST)
Received:   by 10.14.219.67 with HTTP; Tue, 13 Nov 2012 03:29:16 -0800 (PST)
Date:   Tue, 13 Nov 2012 03:29:16 -0800
Message-ID:   <CAJ=7cqikeaxhhrrg14=JhgNMecePFv0qE-rfJYU71mCdv+fOMA@mail.gmail.com>
Subject:   Dear Beneficiary
From:  
Mr Paul White <mrwhitepaul2090@gmail.com>
To:   Me
Content-Type:   multipart/alternative; boundary=047d7b621ee269652704ce5eba2a
Bcc:    
Content-Length:   4662

 

Example Messages Sent From 74.125.83.68
From: “Alex” <volonter1964@gmail.com> 
Subject: RE: 
From: luis pedro <luispedro53@gmail.com>
Subject: GEWINNBENACHRITIGUNG 
From: Angelina Keith <gtcxxxx@gmail.com>
Subject: Charity Assistance 
From: serap caliskan <ingilizce06@gmail.com>
Subject: Hediye Kitabiniz Hazir 
From: Zara Camino <zracamino77@gmail.com>
Subject: offizielle sieger 
From: “Mike J” <rockwellalummj@gmail.com>
Subject: Your Reliable Aluminum Company 
From: judy peterson <judy4me@ymail.com>
Subject: Hello sweetie 
From: “Tom Bell” <danielbroody@gmail.com>
Subject: We’re Hiring! 
From: Super akcija <akcija@akvafors.lv>
Subject: Spasibo za pokupku! 
From: 班���组
Subject: 国家发改委培训中心[ 
From: Judy Raon <9ymercury@gmail.com>
Subject: Secure Web Application and Coding Workshop 
From: 3U Pet Supply <latoyia7o6b@gmail.com>
Subject: dog supply 
From: AL QADRI TAMMER <alqadri_tammer@yahoo.com.ph>
Subject: BUSINESS CONTRACT OF $16.5 MILLION USD OPEN THIS A 
Example User Names Used By 74.125.83.68
User-name: beijing
User-name: personnel

 

Paul White is also Judy Peterson who goes under numerous email addresses including: judy4me@ymail.com —- judy4melove@ymail.com —- treyryu556dyruur@gmail.com —–

Judy is already posted on this site and is under the category ” Romance Scam ” – You can get to her post by clicking here.

ROMANCE SCAM HEADER:

Return-Path:   <treyryu556dyruur@gmail.com>
X-YahooFilteredBulk:   209.85.219.66
Received-SPF:   pass (domain of gmail.com designates 209.85.219.66 as permitted sender)
X-YMailISG:   q2qYtNAWLDuVSliclPG5tcO7nEoGKi5QYFCg69rYHH2VIdBy VTGT68loHQov0AS5V32290CnFtJHWscSkPkzj45YquUWmUdGHSh1GQ8AL6Db KvFO0DGTAGcAhutR33.CEfdLDYNZdHDS6GipjSkzr1mCJmcMUu.O42WA4k5b E.3rhSrZ1c_.hX5ian4u3UGSOWj7bLbej9r9vViHPAiSNBEUvxfODrP8j7f2 1VgICRlqg9bCWAjSMi_BLTUeAKKR.gyOll3CQC7T.IyxfGK1YLk24xLnVQpx odaPqgRr8koQ4tg3Ql8.ZEeW3Kjcvb_sv5.Q5Pu41AYPwgruiRN6MTLI8m69 0G7R0IWD2egAbioIjdLyTxp5ZbkC9N8RBqa55A9MU.6mDjB5F6zd4PjbSWGE 7buqFXxgMdsFwikhUnnpKAaIphI_44ciWDopJ_iY6lrI_u9jAtrMaqvUj5NQ EaEz4MhCkqi.NUGSBeuSzxRhydUYorxZ72vzWjABszn7TZ4W9T3zu_YqG0zC O2n6EO_EyJO2bx5DPopdLwaywq5kZcgDDw.qn_7ArgGGZE6d8A6BtlYXd35W 64M4gg3WBGkrPD3AFdZf7GDkob5Xk22oZJdW5u5C6FzsK9C5JH.HChDaJP_n aZTPx8MFLbUAw9.LZGopJDYKNYmyTlKZUD.tCMLJLsliU4pkuPieT9r8OrXT 0m5BgRyxf2F7BfGtcAPy2wauERAikAi7HBdkyRnVPYR_4igS_woofNSqFjbS .u_O6VXClMtqvU5tC4SfO1Mgcu83lcYaA1d_sBt_VehKqOHnePbWIOtMW5Df TICBoGWPJHz7.mlWQEPUG0ccuPShpeZib7wdbvTbi8IxL8POah3nSCWruyzd ewGLtz4nMoKXMRoNqObt6ZAMKZSztJ8ixeJjThmw6OqfWeyPNiFygw4QeDEP e7dlaqJjda86niyQAyOrkJy61_fuYt526LH8TiMzNqCYk1AzbFol3fe3g7XW TZKgZQa2E6JbGY22QLVssZNHERNimeKOZCwDpb2ktQj59zJOPt4yuRzDyiCX 1Nk3qE6vhoFq8hK4cv4RzdV2._09MMVc9vHifj7Fvx3ub6h9ZrpcMr5ioFu. 2LKmBGgtsQN2ID2hjxQ8fm4v_YJgOTNznQoZ1MLh3H5SgRhIrQXqWPjhHBzt zOjm8f1EZu4QVRmOD9e_M1dPeKzKj7zh2CwGQZNr..v5kPzxiqAn9EAxjUT5 gk9ketJDYajX2Z9HWuig8ZlQTg–
X-Originating-IP:   [209.85.219.66]
Authentication-Results:   mta1275.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO mail-oa0-f66.google.com) (209.85.219.66) by mta1275.mail.bf1.yahoo.com with SMTP; Tue, 30 Oct 2012 06:05:33 -0700
Received:   by mail-oa0-f66.google.com with SMTP id k14so38347oag.1 for; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type; bh=rtKRnDa9SZkm1mtqi2HyK1eEedIzlkc4Z7bZKWbp2DA=; b=CgTZtR7uUda95WOzVKC0+Gaf9dcyZBpbd/N50LBy+LndRDyJv4JcqGBCKE3hb+plDc FlbO4GRPE/2adPH5xg7D6Nacryb10aI1lLB64GU0qDddD2TbFH5Ll0WIkfvhURnFDukC JIQTZ6eq8Jw7YhWK4xfAZihPEOIWobubj80omLFXjH37aFPXi/lGdTozzQ7IG+GZo35P U/CLn0drJRyWiYDWvqPLivEWOEV2BmEzWCZlA+Qfua/k84OXebexc72Yu7tXme+hdD+8 Ktc4A9XnmsnDVDFWuJmqV8BmqLIAU1/82tfRTDXGPlxRBdirPzw7d4r6UHsnMk7s25qD tttQ==
MIME-Version:   1.0
Received:   by 10.182.21.135 with SMTP id v7mr28031346obe.101.1351602332600; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
Sender:   treyryu556dyruur@gmail.com
Received:   by 10.76.92.102 with HTTP; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
Date:   Tue, 30 Oct 2012 13:05:32 +0000
X-Google-Sender-Auth:   ajA2UwthwZYsSy_kttSY7nR4zHM
Message-ID:   <CAD6XNVzah5yKWD-87NpAvaFZqc5y9uWRVWM30LA7_a7X2=Lruw@mail.gmail.com>
Subject:   Hello sweetie
From:  
judy peterson <judy4me@ymail.com>
To:   undisclosed-recipients:;
Content-Type:   multipart/alternative; boundary=14dae93b6374e98c1104cd467089
Bcc:   (deleted for privacy reasons)
Content-Length:   1280

98.136.216.26 added

 

 

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

Judy Peterson (and other fake names/email-addresses)

Online Dating Scam – Nigerian Romance Scammer

This is the second email from ”Judy Peterson” – Nigerian Romance Scammer –

SCAM PHONE NUMBER – +221772093435

Email: Hello (name of potential victim),

It warms my heart to hear from you, my heart accepts you from the very first time i don’t know what you have done to me to make me feel like this, i am aware of our age difference, i will be 26 years old by next month, to me age is not a problem at all, age are nothing but just numbers, what matters to me most is the heart, love, happiness, maturity, i need a real and sincere friend that i can trust and talk to, i have kept this secrete for too long i need to open up my heart  to you because my heart chooses you as my helper, Sometimes the world seems to be upside down, things seems to be so unusual, sometimes i feel like am living in this world all alone,
My heart has been so lonely  ever since my parents was assassinated and i was left in this world all by myself,i am the only surviving child of chief John Peterson, my late father was the owner of Guarantee project company but his was assassinated by his business partner and i was left alone in this world all by myself, i did,nt have any  friend or family to turn to  and i was so scared that the people that killed my parents will come after my life,  that was why i left my country to this country i am now, I’m presently in Dakar, Senegal.

Getting  here i don’t know anybody or have any where to stay so i was taken to the Church hostel where i live presently, though here in this hostel i don’t have freedom and the living here is very bad but what choice do i have, i have to keep myself alive, when i came to this country the first thing i did was to try and claim my inheritance that my late parents left for me  but i couldn’t because of my status here in this country but i believe with time i will be able to claim my inheritance hopefully when i get somebody to help me claim it, my inheritance is enough for us to invest on any kind of business we choose, i like to sing, cook and walk on the beach, please tell me more about yourself and your country,
I would really love to hear your voice sweetie  but is so unfortunate that i don’t have a phone of my own, but you can call me  with the Rev father’ s phone here in the camp,
the number is ( +221 772 093 435 )  when you call just tell the Rev  Father that you want to talk to Judy he will send for me, i really cant wait to hear from you again  my heart really looks up to you, i hope my present situation will not scare you away or make you abandon me here, because hard times don’t last long,  please don’t let my color, distance or our age difference stop you from helping me, this is the truth of my heart and my real feelings to you, i don’t care about wealth, i just want to live free and happy again, i hope you understand me, everything will be alright soon, hope you like my pics,
until i hear from you again,

Take care,

Judy.

NOTE: When this scammer sent the second email she sent it with a different reply-to email address which was similar to her first email address (judy4me@ymail.com) her other email is judy4melove@ymail.com 

The IP’s associated with her second her have all been blacklisted – These headers are:

41.208.186.164 ↔ This IP has also been reported on anti-scam websites and a scammer pretending to be Juliet Samuel <julietamuel56@yahoo.com>  ( username: julietsamuel )

106.10.148.215 ↔ This IP has been blacklisted and reported multiple times. – Anyone getting a suspicious email from an unidentified person named ‘ Joy Olu ‘ should stay away. Some of the email addresses used in this scam are – compensation.unit@compensation.unit.com also known as mrs.joy.olu@gmail.com 

 

 

Additional information below

__________ __________ __________ ___________ __________

Name: Judy Peterson

Email-Address: judy4me@ymail.com <>  treyryu556dyruur@gmail.com

Subject: Hello sweetie

Email: Hello sweetie,

My name is Judy, i am 25yrs old, i’m a free minded,open hearted girl, i like to take life as easy as i could, i’m one of the few that still believes in friendship, love, trust and signs, am very much single and ready to mingle. was browsing through the internet and came across your contact,it will be my sincere pleasure to be your friend if you don’t mind, i hope you will not take my request for granted, i look forward to hear from you soon.

Take care.

judy

+221 772093435

Example Messages Sent From 209.85.219.66 (look in header for additional IP’s associated with this email. Theres a few.
From: KEN SAMBO <samboken2012@gmail.com>
Subject: Investment Proposition 
From: Judy Ann raon <mercury.jud89@gmail.com>
Subject: Invitation:Network Vulnerability Assessment and Pe 
From: lela ferti <lelaferti@gmail.com>
Subject: ΕΦΤΑΣΕ ΚΑΙ ΣΤΗΝ ΕΛΛΑΔΑ ΤΟ 
From: Research Workshops <ctd2@irp.edu.pk>
Subject: On-line Workshop: MANAGING PATENTABLE RESEARCH 

HEADER:

Return-Path: <treyryu556dyruur@gmail.com>
X-YahooFilteredBulk: 209.85.219.66
Received-SPF: pass (domain of gmail.com designates 209.85.219.66 as permitted sender)
X-YMailISG: q2qYtNAWLDuVSliclPG5tcO7nEoGKi5QYFCg69rYHH2VIdBy VTGT68loHQov0AS5V32290CnFtJHWscSkPkzj45YquUWmUdGHSh1GQ8AL6Db KvFO0DGTAGcAhutR33.CEfdLDYNZdHDS6GipjSkzr1mCJmcMUu.O42WA4k5b E.3rhSrZ1c_.hX5ian4u3UGSOWj7bLbej9r9vViHPAiSNBEUvxfODrP8j7f2 1VgICRlqg9bCWAjSMi_BLTUeAKKR.gyOll3CQC7T.IyxfGK1YLk24xLnVQpx odaPqgRr8koQ4tg3Ql8.ZEeW3Kjcvb_sv5.Q5Pu41AYPwgruiRN6MTLI8m69 0G7R0IWD2egAbioIjdLyTxp5ZbkC9N8RBqa55A9MU.6mDjB5F6zd4PjbSWGE 7buqFXxgMdsFwikhUnnpKAaIphI_44ciWDopJ_iY6lrI_u9jAtrMaqvUj5NQ EaEz4MhCkqi.NUGSBeuSzxRhydUYorxZ72vzWjABszn7TZ4W9T3zu_YqG0zC O2n6EO_EyJO2bx5DPopdLwaywq5kZcgDDw.qn_7ArgGGZE6d8A6BtlYXd35W 64M4gg3WBGkrPD3AFdZf7GDkob5Xk22oZJdW5u5C6FzsK9C5JH.HChDaJP_n aZTPx8MFLbUAw9.LZGopJDYKNYmyTlKZUD.tCMLJLsliU4pkuPieT9r8OrXT 0m5BgRyxf2F7BfGtcAPy2wauERAikAi7HBdkyRnVPYR_4igS_woofNSqFjbS .u_O6VXClMtqvU5tC4SfO1Mgcu83lcYaA1d_sBt_VehKqOHnePbWIOtMW5Df TICBoGWPJHz7.mlWQEPUG0ccuPShpeZib7wdbvTbi8IxL8POah3nSCWruyzd ewGLtz4nMoKXMRoNqObt6ZAMKZSztJ8ixeJjThmw6OqfWeyPNiFygw4QeDEP e7dlaqJjda86niyQAyOrkJy61_fuYt526LH8TiMzNqCYk1AzbFol3fe3g7XW TZKgZQa2E6JbGY22QLVssZNHERNimeKOZCwDpb2ktQj59zJOPt4yuRzDyiCX 1Nk3qE6vhoFq8hK4cv4RzdV2._09MMVc9vHifj7Fvx3ub6h9ZrpcMr5ioFu. 2LKmBGgtsQN2ID2hjxQ8fm4v_YJgOTNznQoZ1MLh3H5SgRhIrQXqWPjhHBzt zOjm8f1EZu4QVRmOD9e_M1dPeKzKj7zh2CwGQZNr..v5kPzxiqAn9EAxjUT5 gk9ketJDYajX2Z9HWuig8ZlQTg–
X-Originating-IP: [209.85.219.66]
Authentication-Results: mta1275.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-oa0-f66.google.com) (209.85.219.66) by mta1275.mail.bf1.yahoo.com with SMTP; Tue, 30 Oct 2012 06:05:33 -0700
Received: by mail-oa0-f66.google.com with SMTP id k14so38347oag.1 for; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type; bh=rtKRnDa9SZkm1mtqi2HyK1eEedIzlkc4Z7bZKWbp2DA=; b=CgTZtR7uUda95WOzVKC0+Gaf9dcyZBpbd/N50LBy+LndRDyJv4JcqGBCKE3hb+plDc FlbO4GRPE/2adPH5xg7D6Nacryb10aI1lLB64GU0qDddD2TbFH5Ll0WIkfvhURnFDukC JIQTZ6eq8Jw7YhWK4xfAZihPEOIWobubj80omLFXjH37aFPXi/lGdTozzQ7IG+GZo35P U/CLn0drJRyWiYDWvqPLivEWOEV2BmEzWCZlA+Qfua/k84OXebexc72Yu7tXme+hdD+8 Ktc4A9XnmsnDVDFWuJmqV8BmqLIAU1/82tfRTDXGPlxRBdirPzw7d4r6UHsnMk7s25qD tttQ==
MIME-Version: 1.0
Received: by 10.182.21.135 with SMTP id v7mr28031346obe.101.1351602332600; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
Sender: treyryu556dyruur@gmail.com
Received: by 10.76.92.102 with HTTP; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
Date: Tue, 30 Oct 2012 13:05:32 +0000
X-Google-Sender-Auth: ajA2UwthwZYsSy_kttSY7nR4zHM
Message-ID: <CAD6XNVzah5yKWD-87NpAvaFZqc5y9uWRVWM30LA7_a7X2=Lruw@mail.gmail.com>
Subject: Hello sweetie
From:
judy peterson <judy4me@ymail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=14dae93b6374e98c1104cd467089
Bcc: (deleted for privacy reasons)
Content-Length: 1280
 
1 Comment

Posted by on 10/31/2012 in Romance Scam

 

Tags: , , , , , , , , , , , , ,

 
%d bloggers like this: