Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 [2]  Thema versenden
Sehr heißes Thema (Mehr als 25 Antworten) Kristina <merselesa@gmail.com> (Gelesen: 10554 mal)
 
x5dr
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4944
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Kristina <merselesa@gmail.com>
Antwort #15 - 25. Februar 2016 um 21:02
 
Georg105 schrieb on 25. Februar 2016 um 20:54:
She sends you an even nicer pictures than it is in this picture, and tries to make you fool

@ Georg105

What do you mean exactly? unentschlossen
« Zuletzt geändert: 25. Februar 2016 um 21:04 von x5dr »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Georg105
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 9
Standort: South Bohemia
Mitglied seit: 17. Februar 2016
Geschlecht: männlich
Re: Kristina <merselesa@gmail.com>
Antwort #16 - 25. Februar 2016 um 21:35
 
I think this picture for example exactly, it is same girl or not?
« Zuletzt geändert: 25. Februar 2016 um 22:53 von Georg105 »  

DSC_13.jpg ( 396 KB | Downloads )
DSC_13.jpg
Zum Seitenanfang
 
IP gespeichert
 
x5dr
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4944
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Kristina <merselesa@gmail.com>
Antwort #17 - 25. Februar 2016 um 21:38
 
I think it is not the same girl.
  
Zum Seitenanfang
 
IP gespeichert
 
Georg105
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 9
Standort: South Bohemia
Mitglied seit: 17. Februar 2016
Geschlecht: männlich
Re: Kristina <merselesa@gmail.com>
Antwort #18 - 25. Februar 2016 um 22:28
 
I have got pictures like this from e-mail merselesa@gmail.com. There was the same girl like on the picture DSC_13.jpg only.

It is the only information I have. Good bye  Cool.
« Zuletzt geändert: 25. Februar 2016 um 22:54 von Georg105 »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30520
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Kristina <merselesa@gmail.com>
Antwort #19 - 09. März 2016 um 10:32
 
Georg105 schrieb on 18. Februar 2016 um 22:26:
Received: from [10.100.13.12] ([141.255.162.162])
       by smtp.gmail.com with ESMTPSA id gt7sm28892122wjc.1.2016.02.15.23.32.29
       for <xxxxx@di-gi.eu>
       (version=TLS1 cipher=AES128-SHA bits=128/128);
       Mon, 15 Feb 2016 23:32:30 -0800 (PST)
Date: Tue, 16 Feb 2016 10:32:18 +0400


Russia has wintertime like Middle Europe, too. But the mailheader shows summertime! The scammer seems to use a cracked Windows copy without connection to the Microsoft server!
  
Zum Seitenanfang
 
IP gespeichert
 
x5dr
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4944
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Kristina <merselesa@gmail.com>
Antwort #20 - 23. Juli 2016 um 14:35
 
Weitere Bilder vom TO!
  

DSC_31_001.jpg ( 439 KB | Downloads )
DSC_31_001.jpg
DSC_37_bearbeitet.jpg ( 41 KB | Downloads )
DSC_37_bearbeitet.jpg
DSC_64.jpg ( 70 KB | Downloads )
DSC_64.jpg
DSC_74_beabeitet.jpg ( 377 KB | Downloads )
DSC_74_beabeitet.jpg
DSC_94.jpg ( 864 KB | Downloads )
DSC_94.jpg
Zum Seitenanfang
 
IP gespeichert
 
Herbertvon
Ex-Mitglied


Re: Kristina <merselesa@gmail.com>
Antwort #21 - 07. Januar 2017 um 23:34
 
Georg105 schrieb on 18. Februar 2016 um 22:26:
She wrote that her mother has Osteoarthritis of the Knee. And that she is in serious condition in a coma. And how much does cost operation. It made me very angry and I had replied her that I will not help. Yes, it is brutal, reply. I know. We broke. She don't want my money. She wants me stay without help  hä? .


Zitat:
Geliebter, ich wünsche, dass alles in Ordnung ist. Meine Mutter ist jetzt in einem ernsten Zustand. Sie ist in einem Koma. Ich bin sehr besorgt um sie, ich weiß nicht, was zu tun ist. Ich bin verwirrt. Meine Hände zittern. Ich habe Tränen fliehen. Ich weiß nicht, was mit meiner Mutter vor sich geht. Ich will nicht, meine Mutter ein Leben lang bleiben wird.


Return-Path: <merselesa@gmail.com>
Received: from [10.100.13.12] ([141.255.162.162])
        by smtp.gmail.com with ESMTPSA id

For me she wrote from the same IP address 141.255.162.162 ; Lucerne,Switzerland with name
Anna Hachenkova <kiwionwalk@gmail.com>.

Finally as did not give for her a loan of 4500 EUR or 2250 EUR to be shown at visacenter, then she went home and her mother got a heart attack.
A scammer visacenter phonenumber +7499 380 7203 was used by a young man.

Zitat:
Zitat:
Received: from [10.100.6.3] ([141.255.162.162])
        by smtp.gmail.com with ESMTPSA
Date: Mon, 12 Dec 2016 13:53:05 -0800
From: kiwionwalk@gmail.com 

What have I done? For what fate gives me so much sadness? This operation cost 1340000 rubles. Even before the surgery, you need to spend a coronary angiography study. It will cost 260,000 rubles.
When I heard this, I immediately ran to put the apartment for sale. When I realized that it would be too long, I ran to the bank, to sell the apartment to the bank. My apartment was estimated at 1750000 rubles. All of this quantity, they can not give me as soon as it very much. At the moment, I can only get the remaining amount 1320000. give me closer to the middle of january, but I do not have much time. Now I need to find 280,000 rubles. For me it is a very great need right now.
It all happened because you are engaged in some kind of nonsense. You will never take seriously the situation? I hope you are in this situation otneseshsya seriously and help me. When the bank pays me the remnants of that number, I immediately give you.
Write me soon. I believe that soon I will go crazy, I have to save my mother.
Your Anna.


After that she claimed me, that her mother died. Then she wanted to borrow for the gravestone, which was 10 times more expensive than usually in Russia.

I paid only the poor 35715.07 RUB for the pasports, insurance, visa, flight ticket, travel. Made an invitation and a commitment to expenses: housing, food and the return trip.
  

474253.jpg ( 221 KB | Downloads )
474253.jpg
Zum Seitenanfang
 
IP gespeichert
 
Herbertvon
Ex-Mitglied


Re: Kristina <merselesa@gmail.com>
Antwort #22 - 08. Januar 2017 um 01:15
 
About Anna Hachenkova :
The local Visacenter in Moscow answered FRI 09.12.2016: Zitat:
Database does not exist indication that the personal data should be applied for a visa in recent times ... It is most likely a scam case, as we have received similar inquiries of the person, multiple invitations for her from potential sources.


She wrote from multible IP addresses in Russia (Moscow, Mosrentgen, Krasnodar, Kirov, Dzerzhinsk), Austria (Graz, Styria) and Luxenburg.

The Lucerne IP address 141.255.162.162 is blacklisted by 77 websites using IP Blacklist Cloud Plugin.
The IP is Blacklisted:
dnsbl.tornevall.org
opm.tornevall.org
  
Zum Seitenanfang
 
IP gespeichert
 
Herbertvon
Ex-Mitglied


Re: Kristina <merselesa@gmail.com>
Antwort #23 - 08. Januar 2017 um 03:31
 
zapparella schrieb on 23. Februar 2016 um 10:58:
They also sells VPN connections and Dedicated Server.
The time stamp +0400 is from the western part of Russia - for delivery via Switzerland should be stand +0100 in Winter time and +0200 in Summer time.
Also the time stamp in the Quelltext from Moldova is West Russian! Moldova has +0200 in Winter and +0300 in Summer.

Not so much West-Russia.
In the "machine" it happens to be just that, I guess:
https://greenwichmeantime.com/time-zone/russia/izhevsk/   See the map. 30 km to southeast.

She had that info on computer:
Zitat:
My address is:
Karl Marx Street, Building 42, =  Ulitsa Karla Marksa 42, 
City: Chaikovsky, Perm Krai.
Country: Russia.
Zip code: 617 760
Phone: +79639699116

Much earlier pics are shooted there.

Now the time is adjusted to -0800.
https://greenwichmeantime.com/time-zone/pacific/pitcairn-island/
https://greenwichmeantime.com/time-zone/gmt-8/


Zitat:
Administrative Contact
Milciades Garcia
Edif. Ocean Business Plaza 1404 Marbella
Panama City, Panama City
Panama City
Telephone: 41 75 414 2912

was earlier:
person: James Prado
address: Zürcherstrasse 161
address: SPB 101280
address: CH - 8010 Zürich
address: Switzerland
phone: +41 44-508-7052


I don't add the delays of the messages here  (cause not written at russian daytime). Had trips too...
  
Zum Seitenanfang
 
IP gespeichert
 
Herbertvon
Ex-Mitglied


Re: Kristina <merselesa@gmail.com>
Antwort #24 - 08. Januar 2017 um 12:26
 
Zitat:
zapparella schrieb on 23. Februar 2016 um 10:58:

The time stamp +0400

Now the time is adjusted to -0800.


GMT -0500  in September and in October - according your adjustment -
Cayman Islands, Colombia, Jamaica, Panama, Peru 

-But however suddenly  GMT -0700  3rd of November as on the wireless network in Dzerzhinsk, Nizhegorodskaya oblast', Russia 
Zitat:
from AdminPC
IP:      94.25.134.110  Dzerzhinsk, Nizhegorodskaya oblast', Russia 
56°14'20"N   43°27'47"E 
Location: Niznij Novgorod
 

- The time "not exact".  However standard Mountain Time
https://greenwichmeantime.com/time-zone/usa/mountain-time/

Date: Sun, 30 Oct 2016  she moved correctly to that standard Mountain Time -0700.
Date: Mon, 7 Nov 2016 she moved to standard Pacific Time -0800.
https://greenwichmeantime.com/time-zone/usa/pacific-time/

Suddenly in the same day in October her friend in Luxenburg adjusted for a moment even 1 hour less:
Zitat:
Date: Mon, 3 Oct 2016 08:33:13 -0800
Received: from [10.100.12.15] ([94.242.239.162])

But she continued with same IP after adjusted back to the normal Moscow time +0300.

This one case to been dealt with visited in the same network after one week trip, but continued to Austria via network:
Zitat:
Date: Sun, 30 Oct 2016 14:00:55 -0700
Date: Sun, 30 Oct 2016 15:37:17 -0700
Received: from [10.100.6.49] ([94.242.239.162])         
by smtp.gmail.com with ESMTPSA
.

The friend continued in the next day with renewed IP after that one week trip and used the common Moscow time like usually.

But she likes old castles and mountains (climping Kiwi walking) like Lucerne, Switzerland. 
  
Zum Seitenanfang
 
IP gespeichert
 
Herbertvon
Ex-Mitglied


Re: Kristina <merselesa@gmail.com>
Antwort #25 - 08. Januar 2017 um 16:08
 
Zitat:
Zitat:
zapparella schrieb on 23. Februar 2016 um 10:58:

The time stamp +0400

Now the time is adjusted to -0800.

-But however suddenly  GMT -0700  3rd of November 

... like Lucerne, Switzerland. 
 


I found out it easily "with your help".
From that +0400 area the clock was just adjusted -2 hours to Moscow. (AS I got the right direction on the planet...)

So now the clock is just adjusted to Lucerne, Switzerland or like to Germany as well. AM and PM are only wrongly adjusted.   But looks out like it was in the beginning inside +0400 area.   
She has moved only that 3 hours to the west. (the get wintertime as well..)
  
Zum Seitenanfang
 
IP gespeichert
 
Herbertvon
Ex-Mitglied


Anna Hachenkova <kiwionwalk@gmail.com>
Antwort #26 - 14. Januar 2017 um 11:57
 
She is here as well with pics
Natalia Glazyrina
natalislstena871@gmail.com
Kazan, Russia
https://datingscams.cc/scammer/profile/s18742


and
Natalia Glazyrina
Jaroslavl, Russia
Ul. Lomonosova 47  apt. 32
150048 Jaroslavl
e-mail: natalisolnce468@gmail.com
http://www.romancescam.com/forum/viewtopic.php?f=6&t=103661
   .... so far

She is here as well with partly same pics
Anna Hachenkova, Ulitsa Karla Marksa 42, 617760 Chaykovsky, Perm Krai, Russia
kiwionwalk@gmail.com
https://datingscams.cc/scammer/profile/s18699

and
Anna Hachenkova 
gulymont@gmail.com
https://datingscams.cc/scammer/profile/s18349#reports
  
Zum Seitenanfang
 
IP gespeichert
 
Herbertvon
Ex-Mitglied


Re: Anna Hachenkova <kiwionwalk@gmail.com>
Antwort #27 - 16. Januar 2017 um 22:04
 
The other older Anna Hachenkova pics are shooted mainly here:
Кострома
Kostroma
... with Volga bridges
300 km from Moscow
https://youtu.be/jjFlKIu7O2s

And like: 
Kostromskaya sloboda
The territory of the museum of wooden architecture
https://youtu.be/97Ou_qPMi-M
https://youtu.be/dyHj6iFoDGs

Anna:
Zitat:
Olga shooted pics
https://youtu.be/UjvkBNnqLh4
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1 [2] 
Thema versenden
Link zu diesem Thema