RSS

Tag Archives: Romance Scam

“Magical Summer Cloud”

WARNING – ONLINE DATING SCAM

Hello�Hi�Good day�Good afternoon, my dear friend. My name is Lida. I liked
your profile very much. I�ve
never tried dating online before, because of this I feel a bit stressed.
And now Ill tell you a little about myself. Im 30 years old. I was born
on the 15 July
in 1982. Im 5,4 ft tall and my weight is 119 lb. I am blonde and I have
green eyes. Look at my photo . I live in Nizhny Novgorod, its in the
European part of Russia, east of Moscow.
Now, some information about my interests. I like reading,
communicating with my friends, walking and and so on. I also like watching
TV and cooking different tasty things. I love sports: tennis, volleyball,
cycling, skiing.
I am an accountant in a small organization. Its tedious but I like my job.
Ive never been married and dont have any babies. But I want to get
married. And Im on the lookout for a man who wants to have meaningful
relationships. I dont need any flirt and I suppose you dont need it, too.
If you want to continue our conversation, write me on my e-mail.
magicalsummercloud@yahoo.com

 
Leave a comment

Posted by on 02/07/2013 in Romance Scam

 

Tags: , , ,

“Nulty Rita”

419 SCAM / ONLINE DATING SCAM

NOTE: This scammer has sent a previous email which can be found here. 

WAITING TO HEAR FROM YOU SOON.
From: Nulty-Rita nulty.rita23@gmail.com
Hello Dear.

How are you today, hope nice? i know you be wondering while i keep silent, well am doing great health wise only

been so busy with a lot of duty as the assignment is still in progress,

I just want to know if you have received the parcel from Mr Sylvester, please do let me know if the parcel has come to your care.

Yours.
Nulty.

Return-Path: nultyri1980@live.com
Received-SPF: pass (domain of live.com designates 157.55.1.156 as permitted sender)
X-Originating-IP: [157.55.1.156]
Authentication-Results: mta1455.mail.gq1.yahoo.com
Received: from 127.0.0.1 (EHLO dub0-omc2-s17.dub0.hotmail.com) (157.55.1.156)
by mta1455.mail.gq1.yahoo.com with SMTP; Thu, 20 Jun 2013 05:09:19 +0000
Received: from DUB114-W131 ([157.55.1.136]) by dub0-omc2-s17.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
X-TMN: [3a34Ffr58Po4PhIKfHhEAVGF1SUB1Smi]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <DUB114-W131EB32F1002E74F0735B02C28E0@phx.gbl>
Return-Path: nultyri1980@live.com
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: WAITING TO HEAR FROM YOU SOON.

MY ORGANIZATION25TH YEARS IN EXISTENCE.
Hello my dear,

How are you doing health wise,Hope good, i was so excited after the anniversary party, indeed i was filed with joy, on my mind, I wanted it to be a surprise for you, the organization where I am working just cerebrated the 25YEAR IN EXISTENCE,the party holed just two days ago, and been the organization departmental personal manager, i received some gift from the organization and friends, oh I wish you were here with me. But you know what, I didn’t forget you during this great celebrations.

Splendid my dear, I got some prize award and gifts from my organization, friends and relatives, your thought just came in my mind again and I decided to let you have some of the pleasant gifts and also to register in your heart that I valued our friendship so real and to wish you an awesome day as we are building more interest and oneness on our relationship.

I sent the gifts through our organization Gulf Chief Accountant, MR. BONFREY ERNEST, who went back to gulf regional continent since yesterday morning and I gave him the gifts package to deliver it to you when he arrives there since I was not really sure of your home postal address and I couldn’t wait for you to do that since he is in a hurry to catch his flight.

Right now am in Isreal for an official assignment, with some of our organization officials, which will take us a little time before completing the assignment.

I belief where MR.BONFREY ERNEST, is residing might be closer to you. Just contact him via email: bonfrey.ernest2@gmail.com ; and as well discuss with him on phone +228 90 56 57 81. Concerning on how you can receive my precious gift package for you.

Please do accept that token of gift for our friendship, I knew it isn’t much for the new year wishes but I sent it from my innermost heart and belief you will appreciate and apprehend it and everything inside the package cox it is coming from a special friend.

The content of the package are; a hp laptop 2012 edition, 2 I-phones, AN ENVELOPE, 1 Video Camera (Sony Camcorder) and some jewelries. I packed everything in a medium sealed carton and the Chief Accountant accepted to deliver it to you coz he didn’t return home with much luggage of his own. Please, Open the packet of the Laptop to bring out the envelope inside, it contains some of my recent photos and a surprise gift which I don’t want to disclose to you till you find it. Update me when you receive it,

So I will be aware, do comment on my photos, left with blue suit is my superior i at the other end and the middle is Mr Ernest incase when you meet with him you will not be confused. and the lest is members and my single view.

I’m wishing you a great and wonderful awesome season for the months of March, and as well saying happy new year 2013..

Yours truly friend,

Nulty.

“Nulty Rita” <nulty.rita23@gmail.com>
Return-Path: nultyri1980@live.com
X-YahooFilteredBulk: 157.55.1.174
Received-SPF: pass (domain of live.com designates 157.55.1.174 as permitted sender)
X-Originating-IP: [157.55.1.174]
Authentication-Results: mta1118.mail.gq1.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dub0-omc2-s35.dub0.hotmail.com) (157.55.1.174) by mta1118.mail.gq1.yahoo.com with SMTP; Sat, 02 Mar 2013 07:59:15 -0800
Received: from DUB114-W98 ([157.55.1.136]) by dub0-omc2-s35.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sat, 2 Mar 2013 07:59:12 -0800
X-EIP: [CPXQ+HYlIHIvzdgyJaVbb1C2FpyQuO/c]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <DUB114-W98830642040CF06AAB2CF9C2F80@phx.gbl>
Return-Path: nultyri1980@live.com
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: MY ORGANIZATION25TH YEARS IN EXISTENCE.
References: <BAY146-W42CA7A7E6EE20E69E5C668C2010@phx.gbl>,<1360054761.17753.YahooMailClassic@web161001.mail.bf1.yahoo.com>

_____

Hello Dear,

It is nice and joyful to found your email address on the Internet search during my quest for friendship to keep busy the lonely and lovely world. Hope you fill the vacuum? I thought is beautiful to make you a friend in this regard. My name is Nulty Rita a Canadian nationality, female. My friends tell me that I am a quiet person with a good sense of humor.

I am always fair, straightforward, honest and easy going lady and I seek trust worthy friendship. I believe in giving and taking on both sides and I value faithfulness. I like people for what they are and not for what they are not. I want to be your friend, and let share whatever we have in friendship.

I will be detailed in my consequential mails and expecting same from you if both considered:

AGE: 29 languages spoken: Fluent English & little Spanish.

It will be nice to know you in this regard.

Yours truly,

Nulty.

“nulty rita” <nulty.rita23@gmail.com>

Return-Path: <michael.williams7763@yahoo.com>
X-YahooFilteredBulk: 98.136.218.151
X-Originating-IP: [98.136.218.151]
Authentication-Results: mta1248.mail.bf1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm3-vm8.bullet.mail.gq1.yahoo.com) (98.136.218.151) by mta1248.mail.bf1.yahoo.com with SMTP; Mon, 11 Feb 2013 05:54:36 -0800
Received: from [98.137.12.191] by nm3.bullet.mail.gq1.yahoo.com with NNFMP; 11 Feb 2013 13:51:16 -0000
Received: from [98.137.12.217] by tm12.bullet.mail.gq1.yahoo.com with NNFMP; 11 Feb 2013 13:51:16 -0000
X-Yahoo-Newman-Id: 28265.28690.bm@omp1025.mail.gq1.yahoo.com
Received: (qmail 39232 invoked by uid 60001); 11 Feb 2013 13:51:15 -0000
Received: from [41.207.163.1] by web163403.mail.gq1.yahoo.com via HTTP; Mon, 11 Feb 2013 05:51:15 PST
Message-ID: <1360590675.38942.YahooMailClassic@web163403.mail.gq1.yahoo.com>
From: nulty rita nulty.rita23@gmail.com
Reply-To: nulty.rita23@gmail.com
Subject: Hello

RECEIVED_IP: 41.207.163.1 IP_USED: 98.136.218.151 – Also going by the name Michael Williams

___

SUBJECT LINE: MY GOOD FRIEND

Message contains attachments3 Files (31KB) | Download All
hh.jpg
h.jpg
hhhhh.jpg

Dear Friend .

Thanks for your mail, for our friendship continuations. I have been so busy these days due to some official Assignments, Which I can’t afford to overlook. I have been so tight-up with much job on my table in our on-going Worker’s Employment/recruitment program-taking place in Canada, USA, UK, Australia-Europe and Africa. I guess you will be interested?

I’m Nulty Rita by name, Canadian by nationality, but working and living in United state of America, 29 years of age, female single. I have no child yet but really love to have in the near future. I’m the only daughter of my parents. My parent got Three kids, two Male and i female. My elder brothers were married.

I ‘m a staff in an employment, immigration and recruiting organization here in U.S. Washington, DC. I love Songs, to be precise singing is my best gift, and I have a keyboard and love playing it. My hobbies are watching music; driving when/where there is no traffic hold and swimming sometimes.

I live in a moderate quiet area and have adapted to it. Reside at 395-North to Rte 1-North. Cross the 14th Street Bridge, stay in the left lane the exit Right 1-North. Pass Thomas Circle and continue on 14th Street. Turn left on Rhode Island Avenue, go one block to 1666 K Street, NW Washington, DC 20006

I need you to completely understand who I am and what I can give. It may not compare to other persons or past friendship but that doesn’t matter, we can make the best of friend. We can be friend regardless of colors, race, age and sometime sex maybe considered.

Find also, copies of my picture attached to this letter. Send me mails at your best convenient and your pictures if available at the moment.

Yours sincerely,

Nulty.

HEADER DETAILS:

Return-Path: <nultyri1980@live.com>
X-YahooFilteredBulk: 65.54.190.85
Received-SPF: pass (domain of live.com designates 65.54.190.85 as permitted sender)
X-YMailISG: wOOOviMWLDtfnaUqhOT0TKjcn0VJNQgPdUYaZIInvGs5LdpM .ufhrZqSKewFi9qFKFkNsM8laT8vEJqiLhNJdedLFAxiJuHnOiSYoub.xJtg vi2Ks.yqDpiYu8SBSRAWg8KjkdleFMEBNDWZAqs94zMeHTZwfZ5eMe2SrtAP 8jtdsF6CLdyq7a3d4vKqiEh2xKiavjF1ixPK3fSBoJMBjNhrXQ_lFj3oYC6Q VGfs3mGst0xvjs..a1E1WVkzKB8PqHFMHTmx6bOSmR._MIwduQ2rLVpMJkXT jch22fX2UnJbRnXPwGP3.JtEqrbSTVGCvJk6g5RE6vKhAPZImTLNOx0wV_ae .wgQZHKg0yMfSkMa_SgJzm9ZYF1wdbuwYgOXKRVmqYS37PAOxXmeGc02L_Rf 4J1CFQtcon6hDAR2vCrt5izpUOxi2z4lrSKeYGJvE3c91MWyG5YvU.7y2rlB NvAmozoOb8lF_0RuS1FcQ.pbdH1F821IANneA9.bHmDwQ12tAWnrT40E7ksu wCKfRVllBvz_WWtaHObDODgn34Yr8WyF.GGGLJFfXOth2b3idEr5fBkxevsn mJj8d3vfs6Y8VKyj6R56iAhi0yESkCk9o_JdiLXVkJgYyvCbl5cGKYpYVJtD QIm3592llFKkKkEFADtEyPZDrTRl.KAx4l8Mc3or3BtW6SW86tQsgmVivi6J gksG_OUIa0ILQg7x4_WdXXbxQ5.IhNkQH2Omnk2Lh1Kbda5r6xwSVYyKPucn fFOI6dm8_P04VWpA1z2s6omcFu86.TRrfE5OfcxRoHJC7cmUkqnJf99D.fJQ QHRSTZL3KHksumqYJGFYdMrN6WWKoC8K4u3vZPueW4rrcfG0wWEHPVDoYEnx J4jViPuMxGeig.hPP_ANTaPB2BxV15tSoI98jxl1xkNDYmg12JlYIhd9VgWc dLrlVzjrxVRJtAXeNFN3uHpLd0qV45Zznd0VRhD4xdqEBDoWVqrSlTeu6Lbj EuScecsjA_u4_ncbp5.PgTHDyfKHde3VFf2DQGP2SZNYZEqkEkDDK9IT9E56 BtrrcPj63JrWho9VQrFVf6_utKkOi6a6Xi_Izw6H18kpnONMMCvg5diY8RLZ DrcIYOlX6CUplLVmlgZqZs1sXSAgVneN0jemr1eHmD7ZM.L9pZ2PO5gQtbVd X4d4ya_wRHUeBvuIhmFdLoBbX9ZzpxeIifqw5Pcwq85zXYLdVd9QVRnxODm8 W5n8nVBUNgSfKYWUf7E0XNVLry5Uy92JqBwGSb1xa4ExHyY0Ot2VEjwFj.UI YFWUUJoQP3UdfKgK2bM-
X-Originating-IP: [65.54.190.85]
Authentication-Results: mta1241.mail.mud.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s10.bay0.hotmail.com) (65.54.190.85) by mta1241.mail.mud.yahoo.com with SMTP; Mon, 04 Feb 2013 00:59:06 -0800
Received: from BAY146-W42 ([65.54.190.123]) by bay0-omc2-s10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 4 Feb 2013 00:59:06 -0800
X-EIP: [9x96LiugYipI8EjJRus/A+fVRPioWw/g]
X-Originating-Email: nultyri1980@live.com
Message-ID: <BAY146-W42CA7A7E6EE20E69E5C668C2010@phx.gbl>
Return-Path: nultyri1980@live.com
Content-Type: multipart/mixed; boundary=”_bcbaed7d-04e8-4fa2-a89b-36a03cb0dec1_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: MY GOOD FRIEND
In-Reply-To: <BAY146-W586EAFFEFCCB2B3E87369AC2020@phx.gbl>

RECEIVED_IP: 65.54.190.123 IP_USED: 65.54.190.85 

Below is the emails and IP addresses that NuIty Rita used in her first email. This is another great sign when trying to detect scammers. They always use different IP addresses and frequently change their email addresses and use a different reply/return address. Alot of their emails are similar and may be idenical but different email servers. Example: JohnDoe@yahoo and JohnDoe@gmail — Also, notice the return address michael.williams7763@yahoo.com ? This scammer most likely using the fake name Michael Williams in other scams.

nulty rita nulty.rita23@gmail.com RETURN_ADDRESS: michael.williams7763@yahoo.com RECEIVED_IP: 41.207.184.25 IP_USED: 98.136.216.199

 
Leave a comment

Posted by on 02/05/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , , , , , ,

“nulty rita”

ROMANCE SCAM – ONLINE DATING – SCAMMER

All of the emails on this post are from Nulty Rita — I’ve put the header details under the emails. Scammer is using different IP and email addresses in each email.

romance_scams

SUBJECT LINE: Hello

Hello Dear,

It is nice and joyful to found your email address on the Internet search during my quest for friendship to keep busy the lonely and lovely world. Hope you fill the vacuum? I thought is beautiful to make you a friend in this regard. My name is Nulty Rita a Canadian nationality, female. My friends tell me that I am a quiet person with a good sense of humor.

I am always fair, straightforward, honest and easy going lady and I seek trust worthy friendship. I believe in giving and taking on both sides and I value faithfulness. I like people for what they are and not for what they are not. I want to be your friend, and let share whatever we have in friendship.

I will be detailed in my consequential mails and expecting same from you if both considered:

AGE: 29 languages spoken: Fluent English & little Spanish.

It will be nice to know you in this regard.

Yours truly,

Nulty.

___

EMAIL TWO –

SUBJECT LINE: waiting to read from you soon.

Thanks for your response and friendship continuation, am sorry for my late respond to you, due to some official jobs which i can’t over look in my office, I saw the picture you sent to me is very interesting and ham-some i love that, it gives me pressure when i read your mail, am looking for a serious relationship that will always exchanging ideas with me and the same time i will learn something from him, i think it will be interesting if you occupy the vacuum. I will be waiting to read from you soonest,

Thanks,Your beloved,

Nulty.

_______

THIRD EMAIL FROM NULTY RITA –

Thanks for your response and friendship continuation, am sorry for my late respond to you, due to some official jobs which i can’t over look in my office, I saw the picture you sent to me is very interesting and ham-some i love that, it gives me pressure when i read your mail, am looking for a serious relationship that will always exchanging ideas with me and the same time i will learn something from him, i think it will be interesting if you occupy the vacuum. I will be waiting to read from you soonest,

Thanks,Your beloved,

Nulty.

HEADER DETAILS:

Return-Path: <michael.williams7763@yahoo.com>
X-YahooFilteredBulk: 98.136.216.199
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: v_EU3goWLDtxr2FQVO1kRAvJR4p8Omw_uuoF7WARHE_SgVV_ bpbLV8e1qIRPWQALlOv138.Ok2_i41Jfi_sWdIhWeb2fUy6R.Kc7hPKPUMMi mdr8uBUz5AuqfDzFnqyFxvaBDSvhr725kMv1DiUeX7IabJOXM1aWO40XTceD ASSaaW0JH43vTjOeIV6_96mvOGj_lTmILiOK9XrOdkVBZKqWzTAU_w45I0bF aoArTHBH6Yjig.n_eq_1.gnx6T4gRxZE.bGc4oLGba7nKE_yCOmIRlXg6_Z5 8yaTLcK0PgmsZ8fmEs0eYOU9WKmXIVBANtTE6H2CwnwwDU8TIEY5BPg0djAx 9jrQ.4S.5qoO1MsYJ61FxDqhJARORWwm6cFijCg0.gzA6xXfaCgmBSziiSpS _L09_KbN7C1UZblljY1mTT2yhF7wd2sF22LK1qvwI.Ld0qxE0JKiksmBqutA MtwyPhEsyI45jaavUjQVRrWuC8iW6sfKBrrI_1EeSVRclO6gSXSTnAOCpq4J s4yA_mG07c7WgRKvbcz57_zmiaMblveBEFwdi1ZfuYfx7H046.oog2svJL6h DOMojjWxAaywELOVO5hH2FNrNghc1lxafwR9rLhOVxJomibqazix.nMyOBHn Ln9_HOexc46rXN7heZ1LaVogJMvpLALL7NuWAhLX8aMP3IjSZ244cajk1WM1 cxiptdrrIlRP6doBHuZ9L2XzXzeEs4qTwXoKborT.qWohUpebxPiv6VY9GZi YrjBFQQrthXQwDL2p5qvQb8FlE.RYH9G6HWy0_mDvxD5BcB9uETzKQnRw2bj rUI1XXqyR8YCF5_uwglfFkR0pLbqN_Ha_BZkAoV8JuMQyg7ONHDgomoeFDnd 2wVb0GfDxIx7C6MwaKwcx7fh4bZEmYJXqVl5J9nfXr.AUt9UXlqXi1L19wHg dWl1omgF48oVhllrYLKu3INJ028GiKBHpeCkgszIpzxZJ3Sl3vhIofwpE9GX L1NWXt2FxMvR1H5kWbHSkeMWKC1wjxFG5wnI7vL6.QCWVdeid1CNl.8C2T3B cuEZu8J0GYetrsgEgyce9mVx_yXJqWZLgftFfOTRwPlEz9d0Edvbdzvb2P0O IpX3NPltzUiAmXT6oqN8u6Cl5VytQ.0MmzfIyAbtuEMKiKQ.3NS1UWfGMciF doAZ9nFmiFHIWT7Z6_pQ1BEMaHjRyn8lgePCUuBoN5XkM9N2qOMyNwEBqM5U 9.WDL9g99tB1IUc0Z4S7f2C7fP5UHkwGaaXaiNF.oIIODWUhhrtBpH_r5lz5 Y8vLng37VNZGRMT0QqQP.Ykyk3QDyzFpVz86qw5lTV1WbnvycgD_RUYALS3u 4REp5mErkD3rVrZeuzRLM6uYeR7vtNkmigkEnXYyPQ–
X-Originating-IP: [98.136.216.199]
Authentication-Results: mta1382.mail.gq1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm30-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.199) by mta1382.mail.gq1.yahoo.com with SMTP; Sat, 02 Feb 2013 23:18:10 -0800
Received: from [98.137.12.189] by nm30.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
Received: from [98.137.12.242] by tm10.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
Received: from [127.0.0.1] by omp1050.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 311370.83000.bm@omp1050.mail.gq1.yahoo.com
Received: (qmail 62306 invoked by uid 60001); 3 Feb 2013 07:18:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1359875890; bh=CYH4aW/vXnFu6XxmeTfb8LB5QPC+tPQSLrPr0gNnyR4=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vyI+zCTHzdaW5W2vq8YuMJYcZxlo726RH+4c9hsFzpVw7Rqm0XWNnU6kMYCKjkVCwQCMEOx4kqjcWlxpNlVkpQ/jmVNPKGtkTCmr2Kz4mR/EFWsyhLzVaoLcu3ZcEivjixhhhppt4fPreHNsedxBUBc2QbtSU8165oHZRH+86u8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=S9D1a3sEM64Qpx99F29253XC3e/QunCc4mkcVhh/UDKDs0PYUdC1B66APbJhvdS+iGCgNLg9fQX+HK5A72x1eZ/8XHq6pN9fjNi5Cr6V3y04xsDgc5dPhvcFq29VdbeXiZXf6drDvwNeuT/nMz3IFBK70J2lFlWhm8iyLASFiPM=;
X-YMail-OSG: vpBsc8AVM1ktRTNJG9zqZuIXG3eH1Do1oc6NjwgBAx6nqRt B9xVVUbwPPQyO.t0DRyVzQQO9xMpcz1fya0BVHXd8eLIfMw30JpR0bnppA6z LMCgOQZpCbFK_ewcc0W04BkU36BwFH6Uyx.n4.j.EXyrnKewca8JTOqVJej. FtzPkV63fiy4TCdIoBGxF0eEPdTlUx_wznhfWtWmh3pX3DuGxwP2Wm2NPr5k FYdhac6m2W3Jkcktx7RS1Evvp89Cu4dyZ9DEvSTf.tOuUEq442yQMIwWWhD0 hMVQYu1A30S7jxzAKDVImZG7Dmi3kt1sbXsoc88Dn9QJ82dekE739enmScRS 9M9nH2o0G_68mtPMK65aHTT4uUIkhyp1J5JGtqrVap9kFJuvKCymK2RQUZyr 9_nzXREArt4J1azO1SoTgJH8D81TGfDLyDzrPVggl2irAaC8ThEVvhMcgjLd zd3HBYpyT8Q5goXd2jsEYF6kOF7VJCMpqboofIvmz8wSl2T7XxeieAhs9YD9 k6W474_4G211.n1kvPmRyaE.Pci1eEsEnfJBIdn.Us6QCTvkVrnGrYCtbTFQ oXTaK8aD2u0POiavSwPbNwyGhr7Cfo_.qz0b_vAGo3MziGD7be0wb1FCgqlJ iLMkZaDZ9h4sU_uBNJIc-
Received: from [41.207.184.25] by web163406.mail.gq1.yahoo.com via HTTP; Sat, 02 Feb 2013 23:18:10 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <1359875890.71870.YahooMailClassic@web163406.mail.gq1.yahoo.com>
From: nulty rita <nulty.rita23@gmail.com>
Reply-To: nulty.rita23@gmail.com
Subject: Hello

nulty rita nulty.rita23@gmail.com RETURN_ADDRESS: michael.williams7763@yahoo.com RECEIVED_IP: 41.207.184.25 IP_USED: 98.136.216.199

You can tell by the return address that this scammer uses, or used, the name Michael Williams to send out spam.

In the second email, the scammer used

Return-Path: <nultyri1980@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.100 as permitted sender) IGNvbnRpbnVhdGlvbiwgYW0gc29ycnkgZm9yIG15IGxhdGUgcmVzcG9uZCB0 byB5b3UsIGR1ZSB0byBzb21lIG9mZmljaWFsIGpvYnMgd2hpY2ggaSBjYW4n dCBvdmVyIGxvb2sgaW4gbXkgb2ZmaWNlLCBJIHNhdyB0aGUgcGljdHVyZSB5 b3Ugc2VudCB0byBtZSBpcyB2ZXJ5IGludGVyZXN0aW5nIGFuZCBoYW0tc29t ZSBpIGxvdmUgdGhhdCwgaXQgZ2l2ZXMgbWUgcHJlc3N1cmUgdwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: s_YHocUWLDvKLd_cNdSu2_dyD.4lsfGNHQhkhqhTvUcUNJdI ePY7VF4_7F1qAJWmi.YJm1fRexH9K24EC1maTbj79iBn.wwzpxa8Gaxg7tF. D75_m2NdEhVLTZwssac61o1P4X8iir2vDnaTB6peXrLvCoNpRS5S8qPhE6hn qGzjv3bTyoS9Up0ZcLr.0RY1gF8q.e0_.5p7a79G1Yc1RX0v5EQLohOfrl0H mBCM3dMqDTOAVqDTgSR3iVVRRFplnGlEmUal2RlTzacFvLqXdvmq8_KlKES4 A4Q31BbUK2kyAQd66z5gEurFJZLo3fLPmuZr6zTyYURncXNz5rLlIx9Ff9Ck Og9ckAA4Bc0XFUJEtEfheC2H7ZvKmEm6_nWKLJFjcVWPyTKCKk2kXIjOjj9d OTToU0zY582zQTn4ZLtPSq31Ymm69zxMEk2k8ErSGvwu53Q2ZRkDxu8MNw7z ulthl5gYfthCuOORPhyJwcDnP3OHYTldtbqlKYkc76eUrZMnAIl6WO.PqJHZ 7qDdx6qzok_.KimW8KPrlRQ8MwpTtLwWSHIQHYiSmh1vPPcj13OQVN.9KXRj kA1LuSYJXGoAKepweHtseX5_wCiQuNMqO30yEKBVBTCcjVqxeLGen.gGz4kM InAXshcvL2MRZnlLArZWmI.4cpiz084Xm7VqzaDWmbPTok6bkRGKhPjCkguT fLZigDaRqms8sxEf_WGaTqH9iLVUAz7V2fn3UzJXZq_Hs68H0R3Y9t8yoYmi TMslobRyoP4nEMyrWSgJOOTWN3NsfahEdOkZK.I8OFwaRaS1Hy9r3Rpfu86q 25K0qPXMWJZXWchuecPIkSYDwaRCSLwfD9nXVk9alxP_EXWIW0idcnZ1xs9F x2fgym581CmR9vFludTJjNOtwaCI2M9ouG4Jo9yUB2hkLSZNHzy_x1nTG7xV rsdfZz0Ddvw2YfkEk.O8uhcPehW_wTXIQvYKTboGD8S4wjmD3YjuOZJip51u N..aXDyZWGzKds74PmPYS7tBDoukidFnBBI5c93iVKkgq9vrggeQW5cjw680 IDGt_odGzjD5gn_qOLtFw_fdJWggpHKZB.OAtVhAUu6hRbyecfYDUAjauwtl adjxmNJvSZaBMuKcTUpH0XLdSfP2fp.Oog39p4TNSdj79MqmqL00Sa66VTMv gZVNiWqmyfO3Uh0.cxPyMsCSanIW7k4GX7uUVcZTrJhgAU7wDn49rNVmd80u jVObxIKhgxlHesSrtdjwzwnkX59rYkyy65n4cKTh1gDFD0aKZAkjOFJnLXvt mnkVAUzRCEALkco-
X-Originating-IP: [65.54.190.100]
Authentication-Results: mta1263.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s25.bay0.hotmail.com) (65.54.190.100) by mta1263.mail.ac4.yahoo.com with SMTP; Thu, 07 Feb 2013 03:39:50 -0800
Received: from BAY146-W18 ([65.54.190.123]) by bay0-omc2-s25.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 7 Feb 2013 03:39:49 -0800
X-EIP: [IqVGmK0w0oLjwT2X+oNKJGn1RTxTliB1]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <BAY146-W18416BA2828AD7841F411EC2060@phx.gbl>
Return-Path: nultyri1980@live.com
Content-Type: multipart/alternative; boundary=”_9a9adec8-f8e1-4b56-8b33-1467878732f5_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: waiting to read from you soon.

RECEIVED_IP: 65.54.190.123 IP_USED: 65.54.190.100

THIRD HEADER:

Return-Path: <nultyri1980@live.com>
X-YahooFilteredBulk: 65.54.190.102
X-Originating-IP: [65.54.190.102]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s27.bay0.hotmail.com) (65.54.190.102) by mta1285.mail.ac4.yahoo.com with SMTP; Thu, 07 Feb 2013 03:24:22 -0800
Received: from BAY146-W47 ([65.54.190.123]) by bay0-omc2-s27.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 7 Feb 2013 03:24:20 -0800
X-EIP: [GjEee5wEdwhjQ6WfsAb/S8iGhYrE9CEz]
X-Originating-Email: [nultyri1980@live.com]
Return-Path: nultyri1980@live.com
Content-Type: multipart/alternative; boundary=”_fb412a94-7270-497c-9056-a6250dfe01a4_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: WAITING TO READ FROM YOU SOON

 
1 Comment

Posted by on 02/04/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , ,

“Lucy Gatoma”

ROMANCE SCAM – NIGERIAN SCAMMER

romance_scams
Hello
My name is Miss Lucy Gatoma ,I am 25 years old single Female looking for love and marriage. As I finished my prayers tonight and went into search for a nice friend I came across your contact,My mind and my heart told me to contact you for friendship, A friend who truly understand his or her friend and share their feelings together. please kindly accept my request,I believe that distance can ever be a barrier but let’s love connect us because love is a bridge that connected far distance to be close to each other,contact me on my private email lucygatoma@yahoo.co.uk ) Please try to send your pictures to me immediately you receives my reply and for more details on love and investment with you in your country.
Yours truely,

Miss Lucy Gatoma

HEADER DETAILS:

Return-Path: <lucygatoma@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.68
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: rYiPTOAWLDsflgQiWPbmAOH4ijHoo2QP7vcXZZK.ouC6wsWc 3KpcwZ8UHUcD7ff3bI2vrFpXpFhRYOr95B4AK4BqlROQ2gANEQrYcBc3n.Cu sMJRuktyqM4hMtJYA4NW57Fb5_MPatKBao1zibf9If2WMHmjo9.nmuBbx69O MBnLKSmpdQLXynbxqNGUqX4GPFOu_uQ4P7x9Ljb8NmUABqBF7f0kAoPBUK99 6e7Ydcu0xvVqyKGiUA4WXDoBzTJQR.dYd2p85ReipZULk4OO9JOubvoJa.5s fF9gtamUt3VhgGTgGywQRyln4m9jX0CFy6khZjX8hjzsNirvUQwRb6g1d0am 8JC4vmIoe96AJ2JZ78eh9GBqi2dtcXzrjcOhfmwhcJw7d_9aSRpPNu4ERr1F KiReU4S6hmzcqyNWIRd4ahdrtgDRFFZVUxoile9.aReNts0qL.inx6p3M3ef aLZLkg67029758bdNAlAiMEBXh6c2IA3x22ZT8nJnBtrFl0C6zfSnLPsLdg0 b9iIJN7HgAmEYAhp3EkCn5lek2GfFzIz3D.smxaFvmGZsBkbRgIyvDTDXUgM 0nRY5xDy_fQJEXZO0iy3Md_SAiyxQgGM2h642rt3oDZxRLVYD1u3pU8cIuBP UFILGVMBTLJdZaRaXGfjc7NUQkCRQPZ76Br115cwokMOMfFTtJoTvpJ6I5SX N0nYwYsrIkBDn6AAL0CigLiam77XAU.V2jv9wYGA5SDS9P4.EYr4iu81qGda vWYPM3i2LbqZ2mdyMOOMdXNL8wPEZXUQ9P3BMfWVBhMYAc4uWVC9IhbTWQzJ GmGmjyXuffuDcj5ErvUqv4HpmsRX6dn.MfSoxiRG6UuCZxMydJtVpERV8XVt DSJdPObDBhrF.9CTKO7PhtyyRTvNqsH1p_c1OVkmyjbLCB2BeCYEq0WPdfRm x5F17frAgiRrsNdUFj9g5pwMoV9vqxdVu17MyP69Vv..CsawrACBfTSpw8QO mXkOnUvasC6xWjLAvSeoXu0N7i1K14HkwpMPIW_xwjxGFkUGh0O13huZtiPD SghJZs2WdnodykE_McZ5AB1_T2M7X_93WDzfbNdYNUM.3AaJ7b7.6iLqrWd1 CemdNi3whbJNeGBvEy5ekeuEkb1iVWiebYf7Ic0FxbHdHIhYC9X8YR7gnfVr QvxGAfYfa2hWJItR.OQvpEuoVm52sJBdB9ReeTpi_YEX__mUdQsU3ieTNHhJ DNnF.J_YRWDGqRKtHQmxk9.lHAQ8W_vhK8Ov3zzCkntXiHTkWi.eYsRmUtxi iKC0uhoM8A3I2h6zDggAPT7zLOsL7N_zCgtJb9NUkm6LONpyjy9zACRf4zel HG0egJeH1NPZWIxJIN.pOtLwbuMTSZPbmgX9C2DksD5.knylb9AU119IiWPr zkQZLhmvOp6M3oD8uu8RL3V7Jw–
X-Originating-IP: [77.238.189.68]
Authentication-Results: mta1308.mail.mud.yahoo.com from=yahoo.co.uk; domainkeys=pass (ok); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ird.yahoo.com) (77.238.189.68) by mta1308.mail.mud.yahoo.com with SMTP; Fri, 18 Jan 2013 14:59:05 -0800
Received: from [77.238.189.234] by nm15.bullet.mail.ird.yahoo.com with NNFMP; 18 Jan 2013 22:58:48 -0000
Received: from [212.82.108.118] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 18 Jan 2013 22:58:46 -0000
Received: from [127.0.0.1] by omp1027.mail.ird.yahoo.com with NNFMP; 18 Jan 2013 22:58:46 -0000
X-Yahoo-Newman-Id: 641224.99002.bm@omp1027.mail.ird.yahoo.com
Received: (qmail 85530 invoked by uid 60001); 18 Jan 2013 22:58:46 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1358549926; bh=SXTsfIwGCv5NIPRj3/FCZbXpwFew86J2aBpsJ1FeYPs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=p9lXVAi9n0qvsAQGsAwLqq8h7JRC8StOJYycpFvd7zwxp5X2/DSETFDsBaD94tywKsw9Dh49W0xSev31MuGIWMsHwfW95zXhW9uJIjWYzhiIyuh6gy64eAKUFceGbkEnTurixq3LUDIYI4Pc922VZadhOsivwyqCdpHczp4y6IU=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=f+NSDjSt5+dY/4/shBxvwxtKZ3Jk6kLihiGbQ3vm2OEbhOkjlwD1K/yI3uRCutsEtmi29WfsIGygutRlGTsI+29sP0SpC5gH1qh0V1TKuQxDkjquP5Y3b885MmTJy6st+K00KhdfBo9xsxicWjDD2qzNZ6cgXzX7uwgL5i8r49o=;
X-YMail-OSG: NYbrcvgVM1ltbpnC.9U.F60ojU6B4q3psvzm7f1SD_c85lX pQo5pr.3KmqUt9oUk4dSmF1A3F8Ecz6CAECiUn0SIc7siaQgNea2WEv1SOHL ftzKNRovo4xgUvBwT6o2x83omfsXZUyg1WxVENADoS0dnpznFX.y1uKrbrXY GN338RcYZd6sZRxOqwVKaWpvk57W4Frx3Q3g0UsoObP0ATlN.ao_6TwyjOBI kotSmBnIll4T0hj1PPyHTrl46UYBLTeJUp.oAyieeK03iYrzeJz07YGEOolV tYnp6YxRci0NMj4MYrCVf1Twek61HIaYkKAy4Lxb8KOwJCZho6J3isR5xjXk L9BuYeR63xmjiwEOSok4bqxzxNqk.WsAzez3sZ1DT2_1PF.4tde3iQWKji7G OMZj96J9W19bLQnToNngHybfPNFzHJkqQMQ–
Received: from [41.82.120.206] by web171502.mail.ir2.yahoo.com via HTTP; Fri, 18 Jan 2013 22:58:46 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358549926.71914.YahooMailClassic@web171502.mail.ir2.yahoo.com>
From: Lucy Gatoma <lucygatoma@yahoo.co.uk>
Subject: CONTACT

Lucy Gatoma lucygatoma@yahoo.co.uk RETURN_ADDRESS: lucygatoma@yahoo.co.uk RECEIVED_IP: 41.82.120.206 IP_USED: 77.238.189.68

 
Leave a comment

Posted by on 02/02/2013 in Romance Scam

 

Tags: , , , , , , , ,

“Ziva Abiya”

WARNING – ROMANCE SCAM – NIGERIAN SCAMMER

online_dating_scam

SUBJECT LINE: HI

Happy New Year
How are you today,my name is Miss Ziva Abiya,i am single girl looking for Good Friend or partner i will like you to reply me here for a confidential discussions am waiting to hear from you soon
Yours Miss Ziva

HEADER DETAILS:

Return-Path: <daren88k@yahoo.co.in>
X-YahooFilteredBulk: 106.10.148.197
X-YMailISG: 3GfFP3UWLDvwz8vQaNAsnJ.Ea666E.GWfoe.uf0MiE9YkBte ZekS32.JSYmA_h1F5bUhnL1HfJgiO0x9RbNi.ugYOOPNeAiNE..uAXg3I3mH SbtZGuRdTc9vknLhOMloqq1cB3a4x24LQK2A1X2kOwUJcaPz7MhTXayKaPbQ ntwYksXFD8iuQc5XHMDJn3NSP_VxEReQ7wV0Iv9IjYP0.UZdYD0o9F8CAzfh n_279QKxMSkt0V4UxjCBBVlIYc2EaGNUIhBKFsJgluKuawCQ0Y9RSJaM3lxr mS_ifvvgIuHHvnsedr1CBwzhrnh.OeIcuy924nNiYooXKSoCPUmVZpso1toP 9TxZASWy3YvZWKa9CfAA66tr32kLmfIeazBhxOld26STnSgW4wXCCDw502.W y_qYyYS.HLXINdnhV2JUq2sjaR.pmhJByngAOimHTeqDdS7FbTyr6bEovQfF TDPWEgDld1bXERUzLCcA6FFBwUEYjVimwY6vHlgz5sXNUrnyCAY3bt2C8bWc ztYl66kWagGV1Q_hOX6SIuVHV9PNyiwY6QOwvTryZ9Sx9CmpW_siuyds5nMd EMLXmcKD7EPF2O5agq4LSD.FSJRkyQdAIpBD2z9vIS9y1ms6wWd6Eb0gFk9S 7NbSRegn_4wHuB6t73VqR_uxQwbi71ymYiKSLSzCnpPg5QoFxpGkbQT7UD7U cRCh.hGHlnLT.Y_.JxCUh97BSRBjfJMIpLQLhSRr5ZTode5RVR_A9tMUkKRJ 7wfyD2UfJ3xWzLTdqeHdlMFTS6lnoQgsiIAxhvfJ2nv9KQL_kProphHfBB6E YryxfPdnfs1sUGvctG6qAOyFLm4YQmZMgNaNJs_pJtZvGAAvo05ykDkGtgHH lE4H3AFLkLcuRRMQ3OGXnHSTf4LO5J_pWrQYVBQNjOUzxykNYG3PeX1Enmo4 YcZlTmcCAsYRaMPaUfnAwjJql.0IwMtZr32i8jEZ4n5r4UGqz_GNZ2RyyY_. REfRGoji4TvDt7XZj4VYWLl8McmptkWUputmPfgpC_Z4qbxQLiT5PjuU2Syv Ig38b0oK0NSYTTtqp.eoql86O_fgbCVSABBMW7hkjN8zzg.ZMokusNwtS5w3 xyxzZITlQgmCzPXjiChnaOHNIYNaqzP42ZlM_BKVjvmoRaToaB4IPoXY2qos CikFVGC.4t7BupheH0FXs30tacoMmCQlvkgWGPxTBa3DtNCRqVkZyKAE8rKM OcJEDoxBs_3KWLFKASDQRVRe4eb.nRdkJEQiTtmF6.9MUPtL4qqSFY.7gbVa 5CkNshcRLw5HiKeObJAMoew4MUXuplYEcMqgux4IbF0bAQsRNCR.Z6dZiCIh G0sgkOqNvTp6EAkaUSEHqydtyDH6jJFrvVg-
X-Originating-IP: [106.10.148.197]
Authentication-Results: mta1276.mail.sk1.yahoo.com from=hotmail.com; domainkeys=fail (bad syntax); from=yahoo.co.in; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm8-vm6.bullet.mail.sg3.yahoo.com) (106.10.148.197) by mta1276.mail.sk1.yahoo.com with SMTP; Thu, 31 Jan 2013 16:09:48 -0800
Received: from [106.10.166.61] by nm8.bullet.mail.sg3.yahoo.com with NNFMP; 01 Feb 2013 00:09:47 -0000
Received: from [106.10.150.25] by tm18.bullet.mail.sg3.yahoo.com with NNFMP; 01 Feb 2013 00:09:47 -0000
Received: from [127.0.0.1] by omp1026.mail.sg3.yahoo.com with NNFMP; 01 Feb 2013 00:09:47 -0000
Received: from [41.83.217.49] by web192201.mail.sg3.yahoo.com via HTTP; Fri, 01 Feb 2013 08:09:46 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <1359677386.72997.YahooMailClassic@web192201.mail.sg3.yahoo.com>
Date: Fri, 1 Feb 2013 08:09:46 +0800 (SGT)
From: Ziva Abiya <ramia1ritha@hotmail.com>
Reply-To: zivabiya@yahoo.in
Subject: HI

Ziva Abiya ramia1ritha@hotmail.com REPLY_ADDRESS: zivabiya@yahoo.in RETURN_PATH: daren88k@yahoo.co.in RECEIVED_IP: 41.83.217.49 IP_USED: 106.10.148.197

 
Leave a comment

Posted by on 02/02/2013 in Romance Scam

 

Tags: , , , , , , , , ,

“eHarmony.com Dating Partner”

POSSIBLE PHISHING ATTACK – ONLINE DATING WEBSITE – PRETENDING TO BE EHARMONY – SPOOFED LINKS

ATTENTION: I’ve been getting fake eHarmony emails sent to my spam filter. I am not, nor have I ever signed up for eHarmony and I received these eHarmony emails the past several days (on my fake scam baiting account, mind you) — I knew immediately that something was phishy. The fact that the URLs weren’t even related to eHarmony, and after looking up the header details I realized this is some type of phishing email. Whether it’s malware, a hacker, a scam, etc, it’s something phishy.
SUBJECT LINE: Singles Looking For Love In 2013

#1 Most Trusted Online Dating Site. Join Now!

©2013 eHarmony, Inc.
If you would no longer wish to receive our special promotions, please click here
or send mail to:
PO Box 3640, Santa Monica, CA 90408

HEADER DETAILS:

Return-Path: <2093192922@portalexport.com>
X-YahooFilteredBulk: 130.93.81.10
Received-SPF: pass (domain of portalexport.com designates 130.93.81.10 as permitted sender)
X-YMailISG: M3AJff0WLDu3gnhmNjiGcWZCDX8VNfF9gVyEVwn0d57lYzYE Qw6i7CSQaV_KniE81oJcBTzfEaYhbhvkkW_3bgeWeNssI0hpTf8pzJVZd4oj DlOjgYNdSbizcBsnGDlAlYOCN3ODZG2M3SCHPtdrCfd2Vkv.uh7LQM7onIIZ EvxzodhiT8tstB4O0meuQ.GeuYvrrsfQ_ykQPIL11z4apR1aDJwKCEP8PjBP NiXMaIWSB6QtdT9r3Nu9RD7FRc_6pNpGJCLqKv6YhG2tAUiA.Z4dU8LaSe.Z 2OSI7J.8etjFW6l1A07wfcOiPhdjpUJfzOKT3gjlPVw0bneSOCbvdf0n0.Ol J53i3G8UtPk._SsOOuRTH0px18vsfKJfAba0qkHMhi4IaS.xyabsVmAj3121 .cFUzW7sBgHPzIHmJwX2hAOHr8n.nzSK05os.fCTkr2VC2dn3adr5CjCK4Cs yTDmaf2XCi7fI_wdhX_VHfQl4n43kCVWkSbr83ioRgw1UxL5OQh648_uW3QA QNZiz09BBkeWzy5hcVIbYeFN6WRAHb554l.AFMQQZSY1F.WzfnoyjbRArlsb 3_YxdMxulbx_UfOHBv2DlGin3XVIA_DASQd3fT.2LlbX02M.sFomz4ikQI5k W4tlvj5kpAYEpDzMjMrSZoz.900y4sxRbFw5kv_dEAZ56_OcfsiD_wTuA6K0 XlRzTlIP27gQ6EoIafDU.GIyYrCNNxBrKCQOXKyTuG7UWLCjf.zAHY5oqjdo sylsaiFmj20f24gNvgwgyUFjwvfC0SAwlCbKIeoXrXVhJDdjQ0ikPMgeeoHg OH7f2Hf6DSdjKB_cFDCPGGbfRscHYLePq_0BmP1zUnM5L1zxzc.EY9CPijgN DsAPkpAoAp5lY7C8GDeqPZOyAvPJuyU2Qt0mmE9q5QiBvRvKlewbvOK7BusZ Z_o5cddS._R1QyJ0J6OfiirXgHbZlGwZGY3VqH2gfGGXZiqrrTVS6uiI0a_F mNiVA5Jdw.Vhose1PnR0ATG3SQJLy0xlgfmCI90TJe3_E6NwubWAWK5YK4OU zwrMdKiLpHu5WM7SHvA8GgPTws4NqwqbYn1gBkNvHgYkTzabyQ7E72vguk7r mCvYXVpJaYrgozv5OGNXnQeCHtL73sQf0IQrQAmkWAIe1pKxBtUS8HkDJki. iNH_vWvqO9_HTPOKGRArVq4FQPKhgoQaS6gXzUpa18fjyytvuzkIjgpnECia dYgtcMwG6TaMfJfnilczjWZ7i19ceCfb26_gGwIqqHEOexzWs42hb3vuiKYd qOStuXI6KVd6Fig5Kkvs5CfzO7NN9d28mgX4EN4UtypmZDvUmY6GSZfX8PHl FqOpIksji3xRa2u1f.Yl6KUArTL0dWTicRIVXiunSnD2uuxuhCUov9fgtuGc b_jAFjk9vsXH27xV
X-Originating-IP: [130.93.81.10]
Authentication-Results: mta1234.mail.ac4.yahoo.com from=; domainkeys=neutral (no sig); from=portalexport.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ul.portalexport.com) (130.93.81.10) by mta1234.mail.ac4.yahoo.com with SMTP; Wed, 30 Jan 2013 16:25:27 -0800
From: eHarmony.com Dating Partner <mailers@portalexport.com>
Message-id: <72704994_2093192922@portalexport.com>
Subject: Singles Looking For Love In 2013
X-mHn9bGc2TnNqC6Sqp8c: NzI3MDQ5OTRfMjA5MzE5MjkyMl8xNDI1ODY0N180ODMyOV82NzQ5MF8xMjI0NTVfMjY3MV83OTU2Mzk3XzBfNjA5DQ
X-Ver: NzI3MDQ5OTQ
X-CampaignDetail: 72704994
X-Log: 0
Errors-To: errors@portalexport.com
<http://portalexport.com/x/MjA5MzE5MjkyMg|NzI3MDQ5OTQ|cG9ya3lleHBvc2VkQHlhaG9vLmNvbQ|NDI|MTUzMQ|Njc0OTA|MTIyNDU1|NDgzMjk||MA|MA|||Nzk1NjM5Nw|MTQyNTg2NDc|MjY3MQ|MA|NjA5|VQ.html>
Content-Type: multipart/alternative; boundary=”—-_=_NextPart_001_FHVBI9TV.45VYWRRW” 88.198.16.166 173.44.133.82

 eHarmony.com Dating Partner mailers@portalexport.com 130.93.81.10

 The links came in forms of images pretending to be eHarmony but the actual URLs were http://www.portalexport.com.br/negocios.htm <> http://webmail.portalexport.com.br/index.php?lang=Latvian — Which is a ”business consultant” looking for partners to buy and sell items. It’s not even a English website, never mind an English dating website like eHarmony. The actual URL can’t be copy and pasted because it came in the form of an image but it started off like portalexport.com/…/with_a_bunch_of_numbers_and_letters

__ __ __ __

SUBJECT LINE: Singles Looking For Love In 2013

©2013 eHarmony, Inc.
If you would no longer wish to receive our special promotions, please click here
or send mail to:
PO Box 3640, Santa Monica, CA 90408

HEADER DETAILS:

Return-Path: <2093192922@devicedigest.com>
X-YahooFilteredBulk: 130.93.80.179
Received-SPF: pass (domain of devicedigest.com designates 130.93.80.179 as permitted sender)
X-YMailISG: qP4_qdIWLDsuod7JBnqDQpOfP0SPPxPAdYLhMttsbbbZhvJ9 fTFBcUBRm31.ArzlDqoCIlKINNvCIZPP.YYUpu38eWQuf1B.f7NKGjT7t_sd dx2s5ERWR8ymbEo8pXEaYNEaZEgtG_imXHo6Cnq1d4OemJo6.fPkm8YH_uVB ET0R1GYNVy5KoonXIyfDW9mtrMRtNj2nfuMJp2qHFgItr2hH0dOfoe08OPvG om5jmFe7TP8l16Rv0r5Ljt5L.X9gPwAiGV5VxLGnhZ49zhl9.upfGLsU9uCl 0GQAGSt8lIUoUBZ0w.Q6MNpIq33IY2fMPHnQjaz3yVk8U3Sv7ZLgvxVo7Tw8 st6vV5zQ36c7YI8AeqnehFxAr2iLjWa475NvjoyXmhGOO.AYJ3wkOvlV1MWu MiS0Zv86zlT1wQeBftcu9ROAl2wZco_tx6kt7Tfm.adYFbjuU6mNNcjTmm1F SKQ8gCHHei6JhHVxXtvoXYCyTaVxkbsmtLu5iC92ggMO5t8kU8ASjX0MWdS8 cx51VgWGHcRMtAMTq.uZWQJHWaYuQLmlqTGLyEg8V7XAGOjv9BYJrZYJNzJ4 wq2kJoyRWCB4qL1akmMI61mSMxEUq3vDjpjo6UERvvYFvHjzRn.dthghsCSB mIXI6xpIzNWnL_LOFNPs3HINsIYORPNYGAAibnrd6rNERchkaaxjqjVdVz0S s4ssR_3Lj1lxP9ncV9aU7gVa_qtegp6br61vnF2TaQ7hBEVXi1pqPxoge37d 2WN5c2pA8fEkfzgf7LQ0Hj7Rk3zRh5h2T4f5FL06JT5_RfSkZ9THFCufOlZp leAWTeA9qBfi2l7OeF6AEMGH1u1Ez4n0fQCkqIesKA_GIDfV1mmhbKQaK3Nf QcdIYfUCEGBbcspg78A_3SYNUXWyH4MS3GfdqBE61Y0jkkPERCHvSXz_RZkf 7KN3SEIXfKDn.VttRA7YEuRtsV_BXZKKEeX3lkfP_JcCEq.g39SC2Zux69L_ DwIw.MIbUbePduUaBC3.9yPNHbbLjTUvglNzyNmhHg5Nny_lLg5Iws_t7bbU FerwxMy0zl6SPwz0X09ztF5pwdxEnNht9xig0rd34yaDf9UYXmiKYbg0W8dS AlfOFPOmBlOo74nXVt8jywbKPE5j_8.niDgLwTXn6XC9fmPnhO_vGE1P7Hus Zn0_0WmKEDdFMyxMqJdt3Gq2lC3FJtzk935BL7bjaBv..azU7iLcHHLGrl4k rssOIt_F8bKMkmXr4xpqNYdd1fI0YpDK4ToJPfiGOQwTDrq1SB_xzppvljtw jCjUlLlzIyu31xor_0G6eb9JcAfynnabJsFsF2_grljdRB0nfKfxbPvWbzaf 2fhu8ZNCj4UngXFA5pKMeJIW
X-Originating-IP: [130.93.80.179]
Authentication-Results: mta1047.mail.gq1.yahoo.com from=devicedigest.com; domainkeys=neutral (no sig); from=devicedigest.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO kl5hbb.devicedigest.com) (130.93.80.179) by mta1047.mail.gq1.yahoo.com with SMTP; Thu, 31 Jan 2013 12:16:30 -0800
From: eHarmony Dating <mailers@devicedigest.com>
Message-id: <72975089_2093192922@devicedigest.com>
Subject: Singles Looking For Love In 2013
X-IK1CRNCvGL5wLAmNh8H: NzI5NzUwODlfMjA5MzE5MjkyMl8xNDI1ODk1Nl80NjQyOF82NTU4OV8xMjI0NTVfMjY3MV83OTU2MzkyXzBfNjA5DQ
X-Ver: NzI5NzUwODk
X-CampaignDetail: 72975089
X-Log: 0
Errors-To: errors@devicedigest.com
List-Unsubscribe: <http://devicedigest.com/x/MjA5MzE5MjkyMg|NzI5NzUwODk|cG9ya3lleHBvc2VkQHlhaG9vLmNvbQ|NDI|MTUzMQ|NjU1ODk|MTIyNDU1|NDY0Mjg||MA|MA|||Nzk1NjM5Mg|MTQyNTg5NTY|MjY3MQ|MA|NjA5|VQ.html>
Content-Type: multipart/alternative; boundary=”—-_=_NextPart_001_9EEATPXW.CKJHBHDT”

eHarmony Dating mailers@devicedigest.com RETURN_PATH: 2093192922@devicedigest.com

This email came in the form of a link as well. The URL is something along the lines of devicedigest.com/…/_bunch_of_numbers_and_letters — At first, it looks like a legitimate website, however, the .com/…/_numbers_letters are what’s making me suspicious. And the website the above email (portalexport) brought me too, was nothing more then a login page and business consultant looking for business partners (supposely a french website, not even English, and definitely NOT eHarmony.

 

If someone has figured out who these unknown emailers are, could you please fill me in. Thank you.

 

Tags: , , , , , , , , , , , , , , ,

How online romances cost Melba and Paul more than their hearts

online_dating_scam

Melba met a man online who claimed to be from South Africa. They struck up a relationship and she ended up sending the man $6,000 – her life savings. She never heard from him again and feels “used and abused” by the man she thought she loved.

Paul, a retired grazier from remote central Queensland, met a woman named ‘Selina’, from Ghana, through an online dating website. They struck up a relationship and Paul told Selina “everything”. Then one day Paul received a phone call from a man claiming to be Selina’s brother. The man told Paul that Selina had been hit by a car and had suffered a brain haemorrhage and he asked Paul for $1200 to cover the costs of the operation.

This contact continued for months and the scammers used Paul’s perceived relationship with Selina to convince him to help her village through gold refining and butter processing. Over this extended period of time, Paul gave Selina and her accomplices over $200,000. Of course none of Paul’s money ever reached the village. Paul says he is hurt that he couldn’t help the people of the village.

This video tells the stories of Melba and Paul and shows how scammers use internet dating websites to con unsuspecting daters into sending them large sums of money. It also provides some important tips from an online dating agency and police on how to protect yourself when dating online.

Source: Scam Watch

 
Leave a comment

Posted by on 01/13/2013 in Romance Scam

 

Tags: , , ,

“Cecile Gomez”

ROMANCE SCAM – NIGERIAN SCAMMER A.K.A 419 SCAMMER

Click here for additional emails sent by “Cecile Gomez”

EMAIL: good evening
Thank you for the reply but I’m glad of that you have done good projects this sum I “ve decided to donner.Pour a very good result of this donation, please give me the following information:
NAME …….. .
Surnam ………………………………
AS …………………………………………. ..
COUNTRY …………………………………………
CITY: ………………………………………..
PROFESSION: …………………………….
AGE: …………………………………………
EMAIL ADDRESS: ……………………………….
PROJECT …………………………………………. …………
thank you to answer me

HEADER INFORMATION:

Return-Path: <cecilegomez268@yahoo.fr>
X-YahooFilteredBulk: 212.82.109.208
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: x22RaKcWLDvz8i6Xqw6JXaNuu5p1bGTeLysVElxmPPofuuir BWmd4oM3VD4dVhNDxGfLVEC2eUB_oQLtyOcgCjOKu9lHDBLLIIdqbxVM8ZjA 6UaBUM38KMNLD07H4GL19zOnpwB86VziFqOehB9RSLJmYeASY63nrJl9g9a. hICwt3AEkRf8Or5U8hW6ncxii4qOr2kndD3Ki9CXmW8k2s8fcb9aVsc3Ks2t 6ZbFlEjwZr5Pu7Ompi1C0yCiIQ7uoCQlwmLYAbqdSdIk9mHlS8kx6ffWYklM F6gwhkWRk4C5EJzlD7fjCJI0E2MhO8qkYTDBkRd6rHr8iT0.QhDyTroAoreN _9.phDTKl4HJyKlWWK3dUD2tyUJjJ93zDacwZt.Tjdz5jZYPiMM1_qxOQmHy D6AXPlWllK985pTUS30txJ2M2gGO3JCdREuWOGyuMHlHR7sqN1Tsru41F5rD qoygEBqvfm9dTvTHijg3nkOg76KIsygLBuvqAE7lIpITMHyd9DEluEz1BTFU gRPbQZ1TU8dF4ICNN.5grwC_TzENSfUnJCjm.qZyPU3aCBMzzXbUroVpRObQ 8ouw3GxSfrOMsfnvNc2INSQjNzZFEcajCyyPgwroFaayN2tTVf9UreJsXoKs iqq8e8jja22OAK3YUakDwUo8oV6Zga67me0ZGkiNpCHs1zTAzLFKfacj8Zof v.AdoNVqc8k1p2k4mHOq_dL5b_cujznepIXf6g1KigVeKMi4Z5wydIJkbT0o yLQmgjHv6V7inXdiauv2IId77WpsRQFTcNnvsROsIO1X0NpDOFiiewcvQlcA PZsbNZReAX9.xmsyCaMjvWX_15qQrxa8FnSe9pVEFLGVoE1dHMm10Igy0mLP wVh4RPGRddYbigooL9LPawYG1SoXo6z2.xmITWa9Zs.mYoTEiboauwWiUSfe 4L.OU5xcDTza_YJ5ld0XfDZsSYDxNnzFjeqFGo_SKxM4R_ANUbSXl_a3S_Kl 5o8pGELz_soj4T5CP1WIr4MKeq3DtKUqb9C1aQFbFmTdi6ozjjC5TNt2CyvT b7pkvsOJgsF6KbsJph.Z_kGYNhTCIaoAj0878kYcMzqWzevrYbPV2p_YVqqH bSEMb6Q4Ht5Q8Zhbhe5xFv1zpvn8MqpLiqCNeDDpwxjg_6rofYtramiN1nku uOg9p7uBfEuJUcLs1RLbcl2E8ITlXyQKQtbNNLiaAx0XS5d0kq82Ydrsc_Jv jbtfzYjtr5p2vOc9EuUkTAe3dvqXkQZQIVdy1v__60uLZ56wVx0kTHdYF4WM HKa_vIZ7KpvLjy0ReWtaqsiPmvf.I9soq9PZ9lKCROGN33y8_mz9suzMjHL5 i8El1hdEydnbr0vaxQ–
X-Originating-IP: [212.82.109.208]
Authentication-Results: mta1124.mail.bf1.yahoo.com from=yahoo.fr; domainkeys=pass (ok); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm25-vm7.bullet.mail.ird.yahoo.com) (212.82.109.208) by mta1124.mail.bf1.yahoo.com with SMTP; Mon, 07 Jan 2013 05:36:08 -0800
Received: from [77.238.189.230] by nm25.bullet.mail.ird.yahoo.com with NNFMP; 07 Jan 2013 13:36:03 -0000
Received: from [212.82.108.114] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 07 Jan 2013 13:36:02 -0000
Received: from [127.0.0.1] by omp1023.mail.ird.yahoo.com with NNFMP; 07 Jan 2013 13:36:02 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 839067.52886.bm@omp1023.mail.ird.yahoo.com
Received: (qmail 56387 invoked by uid 60001); 7 Jan 2013 13:36:02 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1357565762; bh=TOjPzeysCjRwRWMJwmO6tl0JDLmTHThuLoGHmmqyWFA=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=dX4DhiR+n+uEI9tsaVSpaVaNCtV4pySt/45wyYsLvQLx+ZALFS6RvS3r2idkxFtlqY1Uc64GM48W7RMJF3m+IeRwBpm2tXKJCQCwbRslVL+meAGEJYvWfZRwQazo2/NP9PadNhNpuCiAayqhxn0idr63TFrSxn3lfqEXMlZ9VA4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=Na2QHlQfAzgTWTFeKFk97N1Zfu3mgSX+ppqmpABEqkl9hgjgDKFu+RFxRfTWaSKCDQUxptpsyNtNpTtXdeEaAuSkKnuhhtvurypjioPhWBgFdX0Y81KU3yqy8VqwWReQkKfzczXSEn1foTEXmFT4y5C2Z/pNuFEQWnCoSxzGY40=;
X-YMail-OSG: PmVumUgVM1n_70sDgkbB2d0RIX9d90s3D1d1JxjWdisJOiq Vptiusjt4ECcSLZp0dk9eXjjLVpYnv2zNT8J0HlYUkdUCVSoJI2s1qYBbmsm TJLfmjSLRWqEaozkBwLaZpT5oBa.ZiqedF.8hbGKq18_.oVxUpsinmTWoPKR jfzk.2eHCAUYJ0jKyO.gNjJYUYrIU7cAQLqrNQAoDv_YZJbuvSzRG70lu.vc TJbwLBHfMfX0PWt1WS_zWFnNe0AgvSGSbhLXQXwNNXTXxke4Ipf6XNb69yY4 Djct.iudNC_EXW7f8TFFgw9tiPtbIwzU4NsZ7mYMONvCIRn77YxAFUIY0r0M Tdw3dhHl2VV2A8VQD7lM1E4WaAmDSKztFb7yEknVtbIdWyqs8fMV0_qKlBrm I7D7_WSlpExSEw9KYYv_jrEDL8iekukOvLiZouHXOFbHxrnkVMb7MlJFX
Received: from [41.216.50.35] by web171501.mail.ir2.yahoo.com via HTTP; Mon, 07 Jan 2013 13:36:02 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1357565762.48864.YahooMailClassic@web171501.mail.ir2.yahoo.com>
Date: Mon, 7 Jan 2013 13:36:02 +0000 (GMT)
From: Cecile Gomez <cecilegomez268@yahoo.fr>
Subject: Re: WELL LOVE

Cecile Gomez cecilegomez268@yahoo.fr

RECEIVED IP: 41.216.50.35 ORIGINATING-IP: 212.82.109.208

 
Leave a comment

Posted by on 01/11/2013 in Romance Scam

 

Tags: , , , , , , ,

“Sandra Omini”

ROMANCE SCAMMER – SENEGAL SWEETHEART SCAM

ATTENTION: Below I’ve posted two emails sent from Sandra Omini which were sent on Jan 7, 2013. I’ve posted both header details which will show you that this scammer sent both emails using different IP addresses. 

Also, click FIRST & SECOND EMAIL if you would like to read the prior emails sent to me by Love Sandra Omini

anti_scam

NOTE: This scammer also sent two (fake) photos but I because I don’t click attached links/files sent by scammers, I couldn’t post. The titles of both photos were “love.jpg” and “MYLOVE2222222222222” (mind you, I’ve only responded twice and it was NOT flirtatious yet I’m already being called ”my dearest” and ”my love” — one of the biggests signs of a romance scam is when the unknown online-user, pushes for a relationship too quickly!)

My Dearest,

Thanks, l consider it a privilege for you to give a prompt response to my mail, also l am responding with a little explanation of the things about me and what we need to do making the way for us to proceed, you will agree with me that since we do not know ourselves in person as we have not met before, therefore, we need to know each other first by exchange of photo identifications to help us know who we are dealing with.

l have here attached copies of my pictures for you and l hope you will also do the same in return. Also as you will know, this is the only money that l have left for my future living upon which l can better my life now and l do not want to make mistakes with it, please l will like you to send me your contact information’s such as…………

Your full name…………………………………………………….
Your home address………………………………………………
Occupation…………………………………………………………
Age……………………………………………………………………
Direct phone………………………………………………………. and Fax number) where l can reach you for further verbal instruction. upon receiving all these information’s, l will now send a letter of Authority to the bank instructing them to treat you as my foreign representative in whose account the money should be transferred there in your country on my behalf.

So that when l hear from you again with your information’s as l requested here and after making use of your information to send a letter of Authority to the bankers officials introducing you to them that you are my foreign representative to whose account they will have to transfer the money there in your country on my behalf, then after doing so, in my next email l will give you the bank contact and the contact officials in the bank so that you can contact them by email or through phone with your banking information, Your bank account number and where you want them to transfer the money on my behalf as my foreign representative. you have to know that l want this transfer to be completed soon so that l can get out of this place to come and meet you there in your country for my education and future living under your care for a better future of mine as I desires.

Secondly, ever since l came to this refugee camp, l have not been steady in school and right now, l will want you to help me locate a good university there in your country, where l can seek admission for the next academic year.

Am living in the refugee camp here in Dakar Senegal. Please write me soon. l really need your help and l am waiting to hear from you soon.

Thanks,
With Lots Love,

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.90.78
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 1IjoQqoWLDsZWAjRySGjeqLNAAFyrdyevggSCp.7mzBLX5QO YvdxigPFD7YYIKV4TUJQrt1Zy6a1t5gbcVd56cBikBBcfn39wb6t4_nW3fel cPsehAp0KW43T3eaqw2y0puca5XaJKf9i9uulknAsjbCOLpg3SB1jxrVnMfH 3GhspK4e9m0As3b_plyA1y6kInYTAl9_DEPamK7.JjghGooInZLfzdv_huXM s0fKmjD3rJV0Y93nbR_JRsHffgZNMAZ2Z.gwLMZBYLjtZSsCGwHDwSabL92D BfYgmrOYG9fKe1j4sRohKoHt4snfumInvERDfdTqKXB2iAydL09rDmDh0Pxr AQKQMoENyu2veu1TWWdSA_vGC9u1K9QI3hdeWcXUMvjHf4LpAKsWD5nXbB8k .VGiREOry11FhFBBXAwu7OtMZbzEPjGrBjIcQWfP8eoYQ5Hm66Mu1CHKvBwl B8z8v4AHAkWKW9WmaccIhVEsmm7VO6ytzUYO.CPC2VCeZVmb1YvROcUoVi7V gEsekc3ZOSkqWKC1gkYaNVgb7aUe0j.OpwgIFfAxlT4KLZ3NmN_vMjqHHSMw acytLF1wcLDOwpU5W.YKuqVL_SbThGxb4jv7yFjGAK1NKCsuig1YLB0_HdqA yYrmlCX60dpKlCwKl81YrVI2pyV4r1b6r9Qi7lT3ezqVQRqRzqIAqbfOTPyt kS2j.NEFq8g7mUece52gTG31I47mVdSyUJA1_qpQ0SQIboumz3kAqiHqNYfx KCD_EYI6j3IZzEpHD2Wy9jtuwaApz.KqSCWqGqkv4qiMd2YdJ1mmgcDRLNQo cGu_6F8n64pTEVhQ2Chq83poIvUo3yMsynJSnElNBHVEHCrm1AVwvkNK937q 5woRtIo2HY5XipdhS3OOQXQ9i3lDa6oItPrg2Z8fgPeZeUgl4HndpjaGkcs5 jECsm0ZtBlY2sBzcTwjBJjSf4nexxusbPs5itfPElFIV.jvPTPBweW8sD45n _lmhm2_RX0Rujxj4gWG61UNMoIlnp7JxYR6fWD6B8IQRWQTo_m_JIm9b744c 6jJNi1eQx48wUSvhxsMUzcmHNIL1JTv9JOVF5cy0W.KPr55PXFe8PyfDyESq uoD2AGnWnUiaKZjAS1P6PBtMtgrpQG_6FD5xbyJDl2jNWh2zejdXK8UJmxYO VfWGaTYWsrLy785kHheMbQ4r2yYQd9.bTXMwlkpWVr8ifbS5XKTrVRI-
X-Originating-IP: [98.138.90.78]
Authentication-Results: mta1161.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ne1.yahoo.com) (98.138.90.78) by mta1161.mail.bf1.yahoo.com with SMTP; Mon, 07 Jan 2013 03:01:33 -0800
Received: from [98.138.226.180] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:31 -0000
Received: from [98.138.89.246] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:30 -0000
Received: from [127.0.0.1] by omp1060.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 261138.8003.bm@omp1060.mail.ne1.yahoo.com
Received: (qmail 44249 invoked by uid 60001); 7 Jan 2013 11:01:29 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357556489; bh=sF39V2YXIXyohJJ4DIMYvoz+D4RbkXVTwI5HmpPU1cs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=BE5wb2s2Zn6sVN2koaDY7vQPaPU+cGNZtRoBYcdGcxd2ntt4fr8RdVctniXPGcuYLEYRiZZLEGGwhr4CAXIf/hdH4UdsHgE7D9Lay3Ka7XG2hlyml8wqNPUawvPhnUSwvPjaO3SjgjXkO8NmGpj6Cz4dJTu6QBp5gBb9ZwkNwPY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=hsTK/l7O/YSlNhftvE+SSOlqrt0LVLpN5zAsdRfnLiMAQ48fPrJLpW7WJTStezmAnOsdr2HoJLoK0PZvM5rFTSnT0H6fh/+0eKgDW3QPhER6RQpHN61uAHHfXzeIGUD7hD/N3kS3DySGqwdNdjsXwMSCAMNySHpY7o4bo8NUNC0=;
X-YMail-OSG: VC8V8esVM1nIItl3zaBA6uZ_oE9xCFH9dYQCrDjRczq9s1Z IQLjn4D_gA6rF3196eBlK2sBorj81zxBMFAl9YzUQzmNsy92BZdx2U_svg63 9L9yw3WOf8etb9j91mnQ0c_zZFZeK5ar3ep_T.ASJ1irXF.UL.MVz.vckzUX bDSb6fj8czWpWb_9CvrBHLwTLORIYETSce3fvFOluoKGVTj8eGmxvc06qMaa 7upAvgj7EpqnGWg6RC42V5zrgqQvCoPlV3BnR3tWDUuNjK_8E5_t2UUw7TwY gJXec3YUDPQnqY6pMeGSBh5Bt7g7YSAY5Bsz3ZxtRBtZjUcuuKfUuGukY9WW UubW.qnODx492OgVPL7Td9SSIPKMKu9c.6Mvd7vbw4Gw.7RWglXPPxuxw5fl lxvKVKl8r6Fjg7W0zhBqnZoQV9R00NA161CHJzRPZRzJ3_eu8hX_eg.BzVZo ogZDhXS4KpVpTByx0Z5b6.hnk6Ace5evPOPvhMHsSmVYtMYmwlDZKUgZHMFQ qGldiUJ1bGHNhiye1I5e9kRPSlkSYn0rSjWUzyDRD5Ar_IWRv.1yCdwxYNWG GbiagnNkzl8P0mQwdSYgXlpnifTQFV8OEcITcag–
Received: from [41.82.130.87] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 07 Jan 2013 03:01:29 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357556489.42339.YahooMailClassic@web125004.mail.ne1.yahoo.com>
Date: Mon, 7 Jan 2013 03:01:29 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: Thanks for your response

FROM: Love Sandra Omini lovesandrao@yahoo.com RETURN-ADDRESS: lovesandrao@yahoo.com

RECEIVED-IP: 41.82.130.87 ORIGINATING/FILTER-BULK: 98.138.90.78

________________________________________________________

ANOTHER EMAIL WHICH WAS SENT RIGHT AFTER THE EMAIL ABOVE WAS SENT.

My Dearest,

For us to proceed for the transaction as you have agreed to help me transfer the fund, you should send me your contact information’s such as…..
1: Your full name……………………………………………….
2: Your home address……………………………………………
2: Occupation…………………………………………………..
3: Age……………………………………………………………..
4: Direct phone………………………………………………… and Fax number) where l can reach you for further verbal instruction. upon receiving all these information’s, l will now send a letter of Authority to the bank instructing them to treat you as my foreign representative in whose account the money should be transferred there in your country on my behalf.

My Dearest,i contacted you to help me transfer the fund,so that i can come over to your country to further my education and to secure a resident permit in your country because,since the death of my parents i have been residing in the refugee camp here in Dakar Senegal,and it is Rev.Father. Simon Dickson the priest in charge of this home who helps me out with his computer to communicate you on this issue here is also his number, +221765359970, please,when you call him just tell him your name and ask him to call me out from the hostel to speak with you.

Another important thing i want you to know is this, please try to keep this issue as a secret because, i have not told this to any other body if not you and that is because of the love and trust i have deposed on you. Please don’t be offended if what am going to say now will offend you but that is because of my present condition here, so i will appreciate it the most if you can at least send me some money to be eating here till we finalize this transfer issue and be together because,the refugee camp authorities provide food for us only once in a day. I shall wait for your lovely reply, remember to keep this issue of my inheritance transfer as a top secret between the two of us because, i have never told any body about this if not you.

With Love Always,
Sandra.

NOTE: THIS EMAIL ALSO HAD A SKYPE LINK (NO URL) BUT THE WORDS ” Cliquer pour passer un appel A prix avantageux avec skype ” CAME UP WHEN I PUT MY HOUSE OVER THE LINK.

HEADER INFORMATION:

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.91.63
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: ZL4aQh8WLDvzm.nEQhp7EAokzebktzXovrG_M0rJtqQ_MHXx ZZ6_Eytmcy_9YsMPgsg.esDg4dmEz2fgGCdjhYe6LkDQFGumUzTLsZZP18V5 mQtKHwtQ9g8w7Q0MLYu82lhxRym21foSmKeGGRwzdSc5Mz8duZ1kML4oI8S_ y_YHT3KIW4DCOeApM4Gf.cBMD08lSQaBtkT0SGt.5F2_CzxW3RjtO0_xCOmV azRU.pB7PS1xKi9ER5Czb_XwCliwFh99yJAwAaiBddLS_.Yw6b67EpzoH7pv 2IXEyKwRhcZLh1bxEFx3qBs0zn90H3A76n.ESKkHCL9Kgzd3lzMKoOnhsTVg xyFX5VuLiCZTNGJUDzlatFoBUacip1PrzwUGSUapmtg5flNC4xxf4F1KT6QB HdKm8kdOeFr026UnQppsD_2EJk_nxDHDEeAvh_zX4a3fYbWUWeLQXfInv_8b SpKag37UitZFwOC3JV5XRB.ijJq93QXivf167FDxYsMHmBQ4t2B4yXcmA.FS THtSMluTFoLuZ9UEkucu7iD4p_hu0AijhjGtEr7WYybhnm57wRTca1O4nk3Y 6IPY2WEHtKL0.UVZaZpPtVs38Bnwl_jxPySE5Br_fFmO05D8Vxp8ANdq1n.G TnB_XrdwqEq23V4zLs2gh0lEeuLZC8tyh1EZ6jcoDqUFWyv8aZJcc0jv_ev9 LCZ.Xf3En_jCXkf7QdM8v591WTpjBbHmKgiUHq3kQB6IWEuyZPEJf9q6e1fh 3kT_vKtrS6moeRfhBhXdkHs4EBUOpYPaxKFKjrDWJTfB8XKplnn30LHTIdEe qEiaFd4jMYIQK0hMYcpwWuh667NJl6.DM_lrJFZoonWjmvs0TjncRZiiS4Ca y_NTB07_.m4W6DMTplYvI0_SOSlNwAnvNubEB1AhCTWBDGoQt1Cf_GZIhUdo A2xTgW6sSEw1QV1PEHOgcQjLKFqTbIeyrGg1.hazhbl.nPaUSfH1x5NJY1YQ XeqHk0m1hNZKvNBQQc1rRoMqGc_FziHuvc2kS04PpVs9evInRQV2TVG7A4Lz m.bVqmPiZi1YUSpHdOpHD3xaan8iMLrhib1JW5YswSqj1vOa8PfCEnQCFv_A bBolpnXG4TQQPmOnqncEbxeWOzD_R.MVW6rGKIgI35bDCyxDQSa.8RGL7wIt ts6t3mQRp1bMys_I20hWL8n.RPcHfuaYPtxV77F9vj0EknRqix6K3JEk.c5n m8JxCDxOWq6uRs422OUAHvL5zarV772WRxxGm5jnH1DaCvG_hCOJ8IEex6It PLDRIG_6uq1NkQ3gcp4A1gqznxVx6nKZ_ap.967kghkXvWDp_V1Ci..hUia4 DnavYvqHhyPQk.VJ7ow.YOLoLAlCjg8GnvL2PS6kTQot_4j1tIZNA6n0P5hx ZW2O_2zgNQrwZBn3_R.5Z8x2Yg7etfz2WDvAUQ3QhlXUnoZL9OYN
X-Originating-IP: [98.138.91.63]
Authentication-Results: mta1333.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm27-vm0.bullet.mail.ne1.yahoo.com) (98.138.91.63) by mta1333.mail.gq1.yahoo.com with SMTP; Mon, 07 Jan 2013 03:02:22 -0800
Received: from [98.138.90.48] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
Received: from [98.138.89.234] by tm1.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
Received: from [127.0.0.1] by omp1049.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 98866.57766.bm@omp1049.mail.ne1.yahoo.com
Received: (qmail 44614 invoked by uid 60001); 7 Jan 2013 11:02:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357556541; bh=QeXsO4FaKKKdpb0dARzj48oGSADrn8ZArz+vzImbRDM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=fFL0mRPgGFeN52Qakcp0Wiji1nT84TV6YSZKuZd80VTxoUEFO4uX6Rn8I2XaH5fAT/cR1KAfmrMMF/jGwjj0w14I1pbemTePHvul60hkD9LwwXQt0vVfVCtTwl+cwQrze7s5mRdUFbLbuFZ2CLVoZHflkQSirzGBKL/lBmxGaH8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=g7Rv4EXWIUcxHv4INWOdU/mi/dl8kalG4XpdyNqNjU2kH1p3oiqUZT3IhR+taly7sPs1wYrH2OM58q8sKsfAV8YxfwYfcUJUNgWrLI2tHXTZ7eOYADitfQ9c1J8g6S5zCiQRuiY3OY0G7P3w4no5Uh2ZQS9ko47GoxguI3H18+M=;
X-YMail-OSG: QqRpdA0VM1k39KFdomfmoYqlQQbkQz0Q4ODCQvXnrcT9L97 vNoygxjOwX8e7XH5f5y3kqlUxoeqzBEuboabbWbM7RlYYDjxx1zZ9xnKPFhi MRV5j7z9mUz19_cx73qYjZo.f3NyY2aovnPu.Wtp8ZENP3N_xz7uHyq6Z.5a XQ1LXF5tApybPpu4nauCG1z0vjiEhjq3Ji0zfzD8mqxOQT3QGxm2Dd0i4Nxg cYmyLtW60CafnXTbumqEaMhvM6ngL4Ypx9Wp_epAuO5Fkoft7j79dQp2RC79 JKU5XgUMfbr1yBpSQt0fNJzZIDAzFWSod2lDVm7Sh5Ee9HXF1IR1DyoFVcrC 5gmB2hWOGU4SHwNlwRtUTznR_k.8W6_Fe4QrV4OHspBpd77q776NDVGaeMQE AZ3P4j7AhZpouQWKUobU0ZAEAv9uxKqD0D31Pyeqy1srAcj.ydTrSpQVviWW 3Apn8DojsA5qQn.1gTap3TLmwo2R.brLkEJ3iBjLu3xzDAh_tMpFQFmRHm0M N.rfuEedd2jUx3DFOZuRfZVFsmWiA1R7VkYJJSzliyh5daimEJMnOnokTaJb 9O6X5CVFwUdlC1EirMp7X6DkqRmwrjeJOIyu1uXp.sceMZ03vGgE-
Received: from [41.82.130.87] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 07 Jan 2013 03:02:20 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357556540.41156.YahooMailClassic@web125004.mail.ne1.yahoo.com>
Date: Mon, 7 Jan 2013 03:02:20 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: GET BACK TO ME WITH YOUR DETAILS AS I REQUIRED HERE

RECEIVED-IP: 41.82.130.87 ORIGINATING: 98.138.91.63

 
1 Comment

Posted by on 01/08/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , , , , , ,

“Lorita Kasala”

ROMANCE SCAM – NIGERIAN 419 SCAMMER

ATTENTION: LORITA KASALA ALSO SCAMS UNDER THE NAME FAVOR KHALIFA <favorkhalifa06@yahoo.com>

Dearest Love,
I am more than happy in your reply to my mail, how is your day today i hope all is well and fine with you including your health and job. My name is Miss lorita kassala and i am 24 years, single and never been married, i am from Post Sudan, Sudan in Africa and presently residing in the missionary here in Senegal where i ran for refuge due to the political civil war in my country. I am in sufferings and pains here in this missionary and i really need help from a man by encouraging me and good advice in life and to help me to come out from this situation, and again to help me get my money, because my late father deposited some amount of money for me in the Bank and he used my name as the next of kin.

My late father Dr. David Ellison Kassala, who was CEO of (E T I C PLC), in Port Sudan in Sudan. During the war, the rebel loyal to one of the greedy business associate of my late father attacked our house one early morning and killed my mother and father in a cold blood. It is only me that is alive now and i managed to make my way to this country Senegal by the help of UN army where i am living now in the missionary, headed by a Reverend Father, i used his office computer to send you this email and i only enter his office when he is less busy in his office

I would like to know more about you, your likes dislikes and your hobbies and what you are doing presently, i like to meet understanding, loyal, sincere, truthfully, kindly and friendly and more to that, a man of vision and truth. I will tell you more about myself in my next mail. Attached here is my picture, i will be hoping to hear from you again.
I remain yours lorita

HEADER:

Return-Path: <lorita_kasala23@yahoo.com>
X-YahooFilteredBulk: 72.30.238.128
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: iGPQ3HUWLDvkyT6tV.XBSRGOv.T84STSLRjy4hhA2Bi4suai HiMKRtpT5r0Y9SQBWeHnIyayxkGFp1GeTXJDofBRw9srITPA5UEcbuNk5U.Q 8ZzpKvw6eXKGCvqNycmj8RhwoLl1tJaH_GyP2ByFdh4_vbFKP03p9VK.iqSw 8N4kWgNvEplzcxmnGGTq0uHPGm5v1wGKhvGegNA2cyok3CnJ4RAue47SUSJd 91QL0DOqqUk4XhxkKiAdC8zAnU3Brr5cuU1FnC2MD5cfnSt6OR8We7fa83c4 K9UKUPKHckFu.JAWRI3PpPALPUPaAB8jVIjJBrc2VtSp9yzrOUJGApALHsGP chaQ9QFa0v3Zl5tZFURSt_31eSUoCmOYJYDJW9pmQ5g0oJU9ULBR5mgkn1bz bj4sp1JOvoqi8DmQHjW.eS48GDulvdVBWgI45dCrn.3Ts0SRnJoJVlEqQtU_ Lbz5ytDVcQuBfbdhNrue.fzK_jXuOQgW.w37Psu6R1JNQMj8QmPimZbQVbcR G5Tp8jFt5ZiX7WaSFJ.kVwmXEBu3Qy4m7He.7z.KUEkd5CCffn7V1KhpR3IN xvJWKFAgT8lB26rokRqBfPpuay2E_lsAzUzwvgBA_B7MtV0kQTEnOaWKrcQC uFAusiRIka3SbuyjgniZNpjsrHIzan1THQiGBrRankV3JmNmg1wUmdpDfa0V JcCvuCPhtZ0iG2ExhTo75ByBOacGL1OjX1.t8pI5kWvv.v2a7NOhHvDfps0w ttW80PEHIIYpUE6mv6z3o0giNEw.NGRY7jU0Z9iduEm_xOHpFdF7Stf3vwo5 7fHzb7UcGSH8pPgOfl42Ve3oeQZJs9NdjYGgqfMwQR7h1rUvji7WllyUkJFL 8BLlGi4I5Xe1bJkwVVPqCm7g.hbHgRqKtuuZ_G2wQopDSdkuW0cu8v1HVDel cjL7bkPsX_2qAMW_2Cmw44SHqc65EfhPeqEI7J_hlMfwPhW12vNafAZdR5yc p5CKPgPubWUUAs4NiNDkdblc3eNUcrBLgLRjn2cRZOTpBsEoMWye8iRJr6q. DquFhB_cYP3GkVbLaREFjsHKxRl9KdrLPOsdNRXWvALKsHu_GCaWCMyFZbnx 72qaCODk7K_8uaMA7ynBZOUFPhPCXER3BJB.dc_8Raiewba.toi3tp4XZK3P B4DIAtEooHE2BF7y5eHiPOnVvs06p1ZC5AXpV9KB3oKYSz.SutUfTZwAu8Zc TU2YrqvLD2dRXFo.zY5voHSXd4_yuTB1_3NDe8Kmc2Qu407R5LL5JgrfvYEg FAw7H_caPtw_Qy5CPc0oWMHCmsHQynpmK1pyU0tSb6OMBiQWYt_yb1ZwjC9x BKQaM_Tmk0UTmZwuOc_94FW2ZWG5ZBqTH3z54Gx_OGZWRkSeU0KTxZA.zewd uv6C2C2gF9O5gd4zX.Uf6YK.vyGekkWKb4YYGjPbTeDfudwvZDsD1fynqTiC tmUAMg_eyzjEYUIX03RBVN0qWL1Fap9VFJx8THAt2UCz2FJCCQp2oGkI.o79 PNXuI6K9TW97cZ7Vnwt3rCmxVnSS9liyI9j_SwOkAMI-
X-Originating-IP: [72.30.238.128]
Authentication-Results: mta1388.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm32.bullet.mail.bf1.yahoo.com) (72.30.238.128) by mta1388.mail.bf1.yahoo.com with SMTP; Mon, 31 Dec 2012 01:01:39 -0800
Received: from [98.139.212.153] by nm32.bullet.mail.bf1.yahoo.com with NNFMP; 31 Dec 2012 09:01:38 -0000
Received: from [98.139.212.248] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 31 Dec 2012 09:01:38 -0000
Received: from [127.0.0.1] by omp1057.mail.bf1.yahoo.com with NNFMP; 31 Dec 2012 09:01:38 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 313443.27611.bm@omp1057.mail.bf1.yahoo.com
Received: (qmail 82216 invoked by uid 60001); 31 Dec 2012 09:01:38 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1356944498; bh=S0BMMfUlaMjxJAammylV6GjZw8EEFjHvsc9mPV/htEo=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=vLkudD5IZ5c+mWcmW2neNKP7nleHB1BkFpb0ic/C8VdZGVSwTdffoeCVDr9dkchUTJOklvu7OwKqdZMSnQW4dWt/a8AFBFBA06FwEPa8m+qi/5Ey6ggoTVXyhjPLt/V5LBuMQRAlcPpoep+1O+BOp3JbxqqcdnchqQsW4BR3Qfg=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=Azuq5QeG73JQMuKGuyyQ3ks2F101vk5/itqRLwk/r0i1cDg0E//xC33Ue6qFvmwu5D3lsFp3z/L6Pbjre26Pm9haqd9meunWQBSUNQwTLwZyj1a35NwxK2lP6TfLSWDdrV+LiBBq/mbrXsPcNvumpqf9S5e2nrt744eJVM8ZTAw=;
X-YMail-OSG: N2roZr4VM1n2wRXbrrwi.r1mk8E33h6IUUOdqDIJpNHF.fa kw6hir_K8pqwn6pyle7poRVaczpzxQT5tYA3eF8D_MKnCbLu6mXqFENTfTOr 0PmIZ1ooTqf7UUi7bOs5BQ16Zc91sg6A6KqeZrz8YYnK1QidenHbo0KmhhB7 tD.yGDvpATNWj1WXj.Ea83McZplexH4CkKJoPGL5Xw4yMxuXuYogM1LwfK3Q NhGOY0GseZPv1kj_a2ji67IFAz8jrDntpR3OAZymeoymgN46gH57eEqOqc3l nuZMxOORk_K5VWbG0Ku8TnRKLPeS1jsAR0lyRz4oWeA1LH9gcVdLT44t3eYQ Ppfltj11WGZDeKr_z09vWqAk_IQ755XJ9SiPU5w_ZaixtOhPnVEU1hgLTrCm GLnQFEZMaCfWSxtD09Xg1wpyXs12paZhjUXQ0BTS4NNmW3DeqMDGEy83o4Zb 7GelfbeVAsG.yv30Rp26v6xdW_8f4y614_8gF08tW8HcYilwuiUrdec.H9.4 dKNg2vahGQ3q_3bhQlS7uqDtNM7uCacQkHg0Avedr.1rybp.Ry.d8djvySha tc7vbGGSWOc_cTKfzlqfwBro0eNupEgYuJJ2skDIjkVod0gT_LrGPl59wh.u I0Nnu3VpD5Wis10feIffDn6ddGTwXryHT06zD96vpZLmEaJYy2fyyDMa2dqe tYtB7QLvr0Njzn1XECijpLfZWFbudhR_EVjrJ7yxVPdMBUNGWG6oBEKNKVJW Bl97h7pmjmc3sQuj171Z_drm_uf0Ic36OgNsh
Received: from [41.82.104.160] by web160905.mail.bf1.yahoo.com via HTTP; Mon, 31 Dec 2012 01:01:37 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356944497.81840.YahooMailClassic@web160905.mail.bf1.yahoo.com>
Date: Mon, 31 Dec 2012 01:01:37 -0800 (PST)
From: Lorita Kasala <lorita_kasala23@yahoo.com>
Subject: THANKS FOR YOUR MAIL

Lorita Kasala <lorita_kasala23@yahoo.com> RETURN-ADDRESS: lorita_kasala23@yahoo.com

RECEIVED IP: 41.82.104.160 ORIGINATING-IP: 72.30.238.128

 WARNING!! — BELOW IS INFORMATION USED BY SCAMMERS WHO’VE USED THE SAME IP ADDRESSES AS ABOVE TO SEND OUT SPAM

Nelson Smith <nelsonsmith11@yahoo.com> <nelsmith11@live.com> +447024065949 David Winter <winter_dd11@yahoo.com> SAMUEL DIALLO web.office_3059683@att.net Nadia kallon mbembe nadimbem@rambler.ru Subject: Hello Dear

IP: 199.114.223.42 by web161006.mail.bf1.yahoo.com via HTTP;
Decimal: 3346194218
Hostname: 199.114.223.42
Country: Anonymous Proxy IP Address 41.203.67.116

Host 41.203.67.116
Location: Nigeria – Africa
City: Lagos
AS Number AS37148 IP: 41.203.67.117 Decimal: 701186933

Hostname: 41.203.67.117
Country: Nigeria
City: Lagos IP: 41.203.67.116 by web161003.mail.bf1.yahoo.com

Decimal: 701186932
Hostname: 41.203.67.116
Country: Nigeria
State/Region: Lagos IP: 209.159.152.66 Decimal: 3516897346 Hostname: 209.159.152.66 

209.159.152.66

 
1 Comment

Posted by on 01/05/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: