Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Yaroslava <beautysalonqeen@gmail.com> (Gelesen: 1339 mal)
 
power
Themenstarter Themenstarter
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 48
Mitglied seit: 13. August 2010
Yaroslava <beautysalonqeen@gmail.com>
26. Februar 2018 um 22:37
 
Hello my new friend
We met on the dating site. My name is Yaroslava!
I would like to talk to you and get to know you better.
I hope to see your letter soon!
Have a nice day!

Good morning my honey xxx
Thank you very much for your letter
My dear, I really miss you! How are you? How was your holiday? I hope everything is all right!
I understand you, but I warned that I would not be able to talk often in skype. I'm at work all the time and I just do not have time for that. You understand?
My dear, yesterday was such a beautiful day, a wonderful holiday!
I'm sorry that we were not together, but I've been thinking about you all day! You do not know how much I wanted yesterday, that you would be beside me! And you know, I would not want to go to a restaurant or something. I would just like to sit with you at home.
I do not know how to describe my emotions, but it was simply inexpressible! I really wanted to hug you tenderly, that I would feel your heart beating, to feel your scent! I wanted to kiss you passionately, to feel the warmth and softness of your lips. I wanted to hold your hand and not let you go!
I really wanted to be alone with you. I could make you a relaxing massage! What would you feel like my rick is kneading your back, that you would feel my touch and my kisses all over your body. I want that in the air to smell of us. I really need you and after yesterday I became even more sensitive to the acuteness of my feelings. I want us to be together!
I, as promised, went to the firm to find out about the documents.
They told me what documents I need to fly to you. I need: an international passport, insurance and tickets.
Everything was great until they told me how much these documents cost.
Kitten, cost of documents $ 1 730
I was in shock! I did not expect it to be so expensive! I did not even want to believe it!
I want to tell you the truth, when I found out the cost of the tour, I did not want to write to you. I understand that I can not pay for all this! And I just do not know what to do!
You know that I do not have parents. I work alone. I need to buy food, pay for the apartment and help my sister. This is too hard for me.
I thought about going to the bank and taking out a loan. I'll try to settle this, I hope I succeed!
My dear, I really really want to meet you! Every day I think only about our meeting. God, I hope that everything will turn out.
Good cat, I kiss and hug you! I'll wait for your letter. Yasya 

Spoiler:
Delivered-To: xxx
Received: by 10.103.22.194 with SMTP id 185csp1334600vsw;
        Fri, 12 Jan 2018 01:56:14 -0800 (PST)
X-Received: by 10.46.29.215 with SMTP id w84mr14260407lje.78.1515750974158;
        Fri, 12 Jan 2018 01:56:14 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1515750974; cv=none;
        d=google.com; s=arc-20160816;
        b=GipTohJmhyXYl0GQJfT6fBl2IdPCawztzEdsui+6u749RJcfy4gSpeRBp4CNodUxmG
         QWPEovryKN/hsADliqgv9nFDfWP7sxPAtBtKE/Avyuw0zwAYfp0aSslIUypv2atAhcBT
         DkgE5TkKV6UKY3/5v2qcudqu9x2R5Kt8Lj8J4XNKKULEinp1Ro0ElFnDSYG9uHphnsJ+
         AKXbsrPJGcJRWcPTnkR49Cc0xKF/UP+RQtX0SnpGrEXuYHUQS8oxqVRnJbMzVB4g8q9W
         jrAoRGax8grhLy/POToMSRlDVsu6lRO9+FDR7vwOzJQHUvLSbw/qU7ea4a9CE42iClOH
         /wbw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:subject:to:message-id:date:from:dkim-signature
         :arc-authentication-results;
        bh=kmBYexRcYweXmrIxWXzmRSoSLNVFVXrV4ruzViXutf0=;
        b=UP6JbLjB187HVNJA03K4cFByhd6HFcts0vLjTwjNlxS9knDBPbk4iW2KwO7w4uHWto
         GZaj82jMlosKJpGM9AwsmUt0KgthR8rKJGVBRarl20bDbQibkP/dCSOOIVYP4ANQ9Q/4
         MvMBQ5QLvZ59mBbOGvH6CKQIEXpalk35sZSoc4fCt5OGyK1Wslxk5wJ5KoN+GMAUZ36Q
         6Yqp2EnMXJ+BChaK29zQo8UpNA87lNSImpalOnsMopY/9zxKtAv3AVqiFhRpDvBomTLF
         Rzb9sfYLj57qYsJR9LuO1WPnhNWT5wfkisCH1jUbIS6GD4a7HBOFGpDUz9b8YuWqbbfw
         CNRA==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20161025 header.b=gRVZZxjD;
       spf=pass (google.com: domain of beautysalonqeen@gmail.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=beautysalonqeen@gmail.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Return-Path: <beautysalonqeen@gmail.com>
Received: from mail-sor-f65.google.com (mail-sor-f65.google.com. [209.85.220.65])
        by mx.google.com with SMTPS id p126sor151524lfp.69.2018.01.12.01.56.13
        for <xxx>
        (Google Transport Security);
        Fri, 12 Jan 2018 01:56:14 -0800 (PST)
Received-SPF: pass (google.com: domain of beautysalonqeen@gmail.com designates 209.85.220.65 as permitted sender) client-ip=209.85.220.65;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20161025 header.b=gRVZZxjD;
       spf=pass (google.com: domain of beautysalonqeen@gmail.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=beautysalonqeen@gmail.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=from:date:message-id:to:subject:mime-version;
        bh=kmBYexRcYweXmrIxWXzmRSoSLNVFVXrV4ruzViXutf0=;
        b=gRVZZxjD8JVXngMQe5s2k8o35l+HAUb34RGFeatcmTFHLjlKRyi7qulds8X4k1sUjO
         5VAPXI7kS1XV+YyE7XF0bwfKP2d+4Lqpcjv6voI05Dnjdzoyn2uUQlpfSuZcbxv+9JfF
         IAS2lmKq15abHNiZTfgNXDOkG79i1ndo/XhB4j+2ghP+E6a1HRtFv8e7fuQk94SN+BDM
         LFNXBQtu9pKFQHQ6OMVoBpC/Z5Au6vD3CIa6Uep8NfWD+/b10gykzWX8nPUX8JgeNlz/
         3WVZTcPYyaeIzf52dtUfUKUSyNDs/X9ABie/iH/fu9ZnRk+knvRp1mQiFWsd3dk7ciyn
         CC8w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:from:date:message-id:to:subject:mime-version;
        bh=kmBYexRcYweXmrIxWXzmRSoSLNVFVXrV4ruzViXutf0=;
        b=prMJh1Ax1MC5jkpJkSeHc1gs9DhLvHS5Ix0HtVgQJ4OA2km10jlAy61mD+gFAgj44b
         TOPvkfPpcRzv78SiE4sxIuCY12oRrhNZJWXHDnsn3OZ0kyswrN15SxodklBivGgUc6Lq
         vlKgHuvsF64jfDMjJdpyT6qjjUFwRR8N5nHxKqUWIWCdJ0FXmpuyu1+0noyjRRRsqyff
         MaTPumKJb8IL0L8elmJASFOfLFjGmcQHfBUeNQzK7HpYHJTo2Zsvw7aPEoF9Rpu89cXQ
         5ZJccgx58sjWSy5m99WShgZv67R+ahHp8t31llCdBGGoHHi5nLmwtXSgKmWXSl/lZOVr
         EhIw==
X-Gm-Message-State: AKwxytctudJS5kO5NYbkooEB0tyeQE5LPgXE3GR8oOdDk4wjnjrSHOwR 2Rs1DvTsaxsHuBvOx4VJ0bB9faDP
X-Google-Smtp-Source: 
X-Received: by 10.25.67.83 with SMTP id m19mr5920931lfj.114.1515750973289;
        Fri, 12 Jan 2018 01:56:13 -0800 (PST)
Return-Path: <beautysalonqeen@gmail.com>
Received: from [88.85.64.181] (100por.com. [88.85.64.181])
        by smtp.gmail.com with ESMTPSA id f126sm2509746lff.82.2018.01.12.01.56.07
        for <xxx>
        (version=TLS1 cipher=AES128-SHA bits=128/128);
        Fri, 12 Jan 2018 01:56:12 -0800 (PST)
From: beautysalonqeen@gmail.com
X-Google-Original-From: beautysalonQeen@gmail.com
Date: Fri, 12 Jan 2018 12:55:44 +0300
X-Priority: 3 (Normal)
Message-ID: <678590656.20180112125544@gmail.com>
To: xxx
Subject: Nice to meet you
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------11C02010206FE82E4"

------------11C02010206FE82E4
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


Scammer use 2 numbers +38068815176; +380960781923

« Zuletzt geändert: 11. März 2018 um 17:36 von Uli »  

567IUL__1_.jpg ( 89 KB | Downloads )
567IUL__1_.jpg
234556.jpg ( 87 KB | Downloads )
234556.jpg
ERTY__1_.jpg ( 195 KB | Downloads )
ERTY__1_.jpg
IKUJH.jpg ( 133 KB | Downloads )
IKUJH.jpg
TRFD.jpg ( 24 KB | Downloads )
TRFD.jpg
EN286227_-_Moiseienko.jpg ( 58 KB | Downloads )
EN286227_-_Moiseienko.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11801
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Yaroslava <beautysalonqeen@gmail.com>
Antwort #1 - 26. Februar 2018 um 23:59
 
Mail delivered over the Netherlands.

Code
Alles auswählen
IP Address 88.85.64.181
Host 100por.com
Location NL NL, Netherlands
Organization Webzilla B.V.
ISP Webzilla B.V.
AS Number AS35415 Webzilla B.V. 



Zitat:
from [88.85.64.181] [...] by smtp.gmail.com with ESMTPSA; Fri, 12 Jan 2018 01:56:12 -0800 (PST)
From: beautysalonqeen@gmail.com
Date: Fri, 12 Jan 2018 12:55:44 +0300
« Zuletzt geändert: 27. Februar 2018 um 17:11 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65488
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Yaroslava <beautysalonqeen@gmail.com>
Antwort #2 - 27. Februar 2018 um 17:14
 
Zitat:
Scammer use 2 numbers +38068815176; +380960781923


Zitat:
Information on phone number range +380 68XXXXXXX
     
Number billable as      mobile number
Country or destination      Ukraine
Original network provider      Beeline


Zitat:
Information on phone number range +380 96XXXXXXX
     
Number billable as      mobile number
Country or destination      Ukraine
Original network provider      Kyivstar JSC
« Zuletzt geändert: 27. Februar 2018 um 17:22 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30555
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Yaroslava <beautysalonqeen@gmail.com>
Antwort #3 - 11. März 2018 um 17:47
 
To fakepassport EN286227 of Yaroslava Volodimirivna Moiseienko:

Passportphoto is a cut from 567IUL__1_.jpg. The head doesn't belong to the body.
Please order the following sides of the passport!

Zum gefälschten Pass EN286227 von Yaroslava Volodimirivna Moiesienko:

Das Foto ist ein Ausschnitt aus 567IUL__1_.jpg. Der Kopf gehört nicht zum Körper.

power schrieb on 26. Februar 2018 um 22:37:
cost of documents $ 1 730


That's too expensive! The costs of an urgant passport (3 - 5 days) are 1580 Grivna (60,28 US$). Insurance is about 1 US$ each day. WIll she fly First Class or is the Dollar no US Dollar, but Nam$???
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema