Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Tatjana Mishina <tatti.mishina@yandex.ru> (Gelesen: 2204 mal)
 
geheim
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 101
Mitglied seit: 19. Juni 2015
Geschlecht: männlich
Tatjana Mishina <tatti.mishina@yandex.ru>
14. April 2016 um 11:10
 
Hello xxxxx!

My name is Tatjana.

I was born in Ukraine and I live here now.

I’m divorced. I have a son who is 13 years old.

He studies at school.

I'm easy-going, serious and kind woman who loves life. My passion is dancing. I like to dance very much because when I'm dancing I forget about all the problems in life.

You know I have suffered from war in the east of Ukraine. I lived in Donetsk and I could not stay there when there was shooting.

So, I and my son have come to the city of  Krivoy Rog.

Here I work as a nurse in the hospital.

Dear xxx, can you help me in my situation please?

I apologize for my direct letter. But I’m really in a bad situation now and I’m very sad and disappointed.

I’m waiting for your letter.

Best regards,

Tatjana.

Spoiler für Quelltext Yandex Inline:
Return-Path: <tatti.mishina@yandex.ru>
Received: from forward8h.cmail.yandex.net (forward8h.cmail.yandex.net [87.250.230.219])
     (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
     (No client certificate requested)
     by mtaig-mbc01.mx.aol.com (Internet Inbound) with ESMTPS id 6F1E270000082
     for <xxxxxx>; Wed, 13 Apr 2016 10:32:57 -0400 (EDT)
Received: from web3h.yandex.ru (web3h.yandex.ru [84.201.186.32])
     by forward8h.cmail.yandex.net (Yandex) with ESMTP id 8FB0D21A27
     for <xxxxx>; Wed, 13 Apr 2016 17:32:52 +0300 (MSK)
Received: from web3h.yandex.ru (localhost [127.0.0.1])
     by web3h.yandex.ru (Yandex) with ESMTP id 2ACBB728129C;
     Wed, 13 Apr 2016 17:32:52 +0300 (MSK)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
     t=1460557972; bh=fO/XncN/lv7H9Oxd6H4R+vmyC+RMuv1GndsigjhH/lA=;
     h=From:To:Subject:Date;
     b=oOHuQckHTpDm1gfv4qrMoXzTYGI2ZWj0e4FZ2p1sHysqTBkUbxRuuvcJdgHAoouFL
      6uKcEkP+BEZK1LV9ok7SE8PBtW46vDYIksxr6W0iHTu/w2CARBX+xnbX3pt/IVzIzv
      pRUyWHeNbCZ4CP+gktJ6S1fJxRlCylEAsnvIeDz8=
Received: by web3h.yandex.ru with HTTP;
     Wed, 13 Apr 2016 17:32:51 +0300
From: Tatjana Mishina <tatti.mishina@yandex.ru>
Envelope-From: tatti-mishina@yandex.ua
To: xxxxxxx
Subject: to xxx
MIME-Version: 1.0
Message-Id: <5545181460557971@web3h.yandex.ru>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Wed, 13 Apr 2016 17:32:51 +0300
Content-Type: multipart/mixed;
     boundary="----==--bound.554519.web3h.yandex.ru"
x-aol-global-disposition: S
X-AOL-VSS-INFO: 5800.7501/109354
X-AOL-VSS-CODE: clean
X-AOL-SCOLL-AUTHENTICATION: mtaig-mbc01.mx.aol.com ; domain : yandex.ru DKIM : fail
X-AOL-SCOLL-DMARC: mtaig-mbc01.mx.aol.com ; domain : yandex.ru ; policy : none ; result : Q
Authentication-Results: mx.aol.com;
     spf=pass (aol.com: the domain yandex.ru reports 87.250.230.219 as a permitted sender.) smtp.mailfrom=yandex.ru;
     dkim=fail (aol.com: Message body hash computation failed verification.) Quelltext.d=yandex.ru;
     dmarc=pass (aol.com: the domain yandex.ru reports that SPF is strictly aligned, DKIM is unaligned.) Quelltext.from=yandex.ru;
X-AOL-OVERRIDE-PIK-REASON: Y
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1add81570e58997994
X-AOL-IP: 87.250.230.219
X-AOL-SPF: domain : yandex.ru SPF : pass
------==--bound.554519.web3h.yandex.ru
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable


Zitat:
From: Tatjana Mishina <tatti.mishina@yandex.ru>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Wed, 13 Apr 2016 17:32:51 +0300
« Zuletzt geändert: 15. Mai 2016 um 12:35 von Uli »  

AgWRY34TbCk.jpg ( 127 KB | Downloads )
AgWRY34TbCk.jpg
reaqx6YRSJU.jpg ( 137 KB | Downloads )
reaqx6YRSJU.jpg
zRfSnzLD7VA.jpg ( 181 KB | Downloads )
zRfSnzLD7VA.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65703
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Tatjana Mishina <tatti.mishina@yandex.ru>
Antwort #1 - 14. April 2016 um 17:07
 
Dear xxxx!

Thank you very much for your letter! We are similar with you.
Does your son live with you?

The situation is really bad here.
You know, I need moral support and financial help now.
But I understand that you are not a rich man.

Dear xxxx, can I ask you to lend me some money - 30-50 dollars?
I hope the situation will change for better in Ukraine one day and I'll be able to return you your money.

I also would like to continue our communication.
You know I like many things to do in my life. I like to grow flowers and plants. I like to cook very much.
I send you more photos of me.
Take care.
I am waiting for your letter.
Best regards,
Tatjana.

Spoiler für Quelltext Yandex Inline:
Return-Path: <tatti.mishina@yandex.ru>
Received: from forward7j.cmail.yandex.net (forward7j.cmail.yandex.net [5.255.227.108])
     (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
     (No client certificate requested)
     by mtaig-aac01.mx.aol.com (Internet Inbound) with ESMTPS id 9D45070000088
     for <xxxxxx>; Wed, 13 Apr 2016 13:31:39 -0400 (EDT)
Received: from web13j.yandex.ru (web13j.yandex.ru [5.45.198.54])
     by forward7j.cmail.yandex.net (Yandex) with ESMTP id 437482112E
     for <xxxxxxx>; Wed, 13 Apr 2016 20:31:30 +0300 (MSK)
Received: from web13j.yandex.ru (localhost [127.0.0.1])
     by web13j.yandex.ru (Yandex) with ESMTP id C27EDD407B3;
     Wed, 13 Apr 2016 20:31:29 +0300 (MSK)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
     t=1460568689; bh=BBOMPVuuCilmov77BQvBBSV9/Bwq2j6ZlgBLrSowH+I=;
     h=From:To:In-Reply-To:References:Subject:Date;
     b=wimJmVZGA+NcqsuZMBj+XPFfZQbZtaTs+tMtBakmfQd/KMRleIqwQ1Dfbz//kipw0
      KZNi98hIjWZVNnO2S28pEEPLl9WbXRY7+xhdCmy+uabiBvk14TkyHK0CxKTTAoyyKH
      qwCwk+iphyLGuA+4hzSYx+98NU2Fyc6z3Y7R89XI=
Received: by web13j.yandex.ru with HTTP;
     Wed, 13 Apr 2016 20:31:29 +0300
From: Tatjana Mishina <tatti.mishina@yandex.ru>
Envelope-From: tatti-mishina@yandex.ua
To: xxx <xxxxx>
In-Reply-To: <15410106944-23e6-4814@webprd-m06.mail.aol.com>
References: <5545181460557971@web3h.yandex.ru> <15410106944-23e6-4814@webprd-m06.mail.aol.com>
Subject: Re: xxxxx
MIME-Version: 1.0
Message-Id: <1349821460568689@web13j.yandex.ru>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Wed, 13 Apr 2016 20:31:29 +0300
Content-Type: multipart/mixed;
     boundary="----==--bound.134983.web13j.yandex.ru"
x-aol-global-disposition: G
X-AOL-VSS-INFO: 5800.7501/109356
X-AOL-VSS-CODE: clean
X-AOL-SCOLL-AUTHENTICATION: mtaig-aac01.mx.aol.com ; domain : yandex.ru DKIM : fail
X-AOL-SCOLL-DMARC: mtaig-aac01.mx.aol.com ; domain : yandex.ru ; policy : none ; result : Q
Authentication-Results: mx.aol.com;
     spf=pass (aol.com: the domain yandex.ru reports 5.255.227.108 as a permitted sender.) smtp.mailfrom=yandex.ru;
     dkim=fail (aol.com: Message body hash computation failed verification.) Quelltext.d=yandex.ru;
     dmarc=pass (aol.com: the domain yandex.ru reports that SPF is strictly aligned, DKIM is unaligned.) Quelltext.from=yandex.ru;
x-aol-sid: 3039ac1b0215570e827b4d1c
X-AOL-IP: 5.255.227.108
X-AOL-SPF: domain : yandex.ru SPF : pass
------==--bound.134983.web13j.yandex.ru
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


Zitat:
From: Tatjana Mishina <tatti.mishina@yandex.ru>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Wed, 13 Apr 2016 20:31:29 +0300
« Zuletzt geändert: 14. April 2016 um 17:10 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65703
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Tatjana Mishina <tatti.mishina@yandex.ru>
Antwort #2 - 14. April 2016 um 17:18
 
Zitat:
can I ask you to lend me some money - 30-50 dollars?


@ geheim

Dann fordere doch mal einen Ausweis an.
  
Zum Seitenanfang
 
IP gespeichert
 
COSMOPOLIT
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 13
Standort: Hamburg
Mitglied seit: 12. Oktober 2009
Geschlecht: männlich
Re: Tatjana Mishina <tatti.mishina@yandex.ru>
Antwort #3 - 07. Mai 2016 um 13:04
 
...mal sehen, wie der Pass aussieht!

Dear xxx!
what identity card you mean?
In Ukraine we have a passport. I can make the scan-copy of my passport next week on my work in the hospital because now I have days off.

i do not ask you to send me a lot of money. I ask you about 30-50 dollars because i understand that you do not know me well and can't trust me.
but I'm really in a bad situation now and need your help.
I promise that I will not dissapoint you.

Best regards,
Tatjana.

Spoiler für Quelltext Yandex Inline:
Return-path: <tatti.mishina@yandex.ru>
Envelope-to: xxx
Delivery-date: Sat, 07 May 2016 10:06:05 +0200
Received: from [192.168.1.141] (helo=mailin01.ims-firmen.de)
     by m2 with esmtp
     (envelope-from <tatti.mishina@yandex.ru>)
     id 1ayxFV-0006Fo-Vk
     for xxx; Sat, 07 May 2016 10:06:05 +0200
Received: from forward19h.cmail.yandex.net ([87.250.230.161])
     by mailin01.ims-firmen.de with esmtp
     (envelope-from <tatti.mishina@yandex.ru>)
     id 1ayxFU-0007c0-38
     for xxx; Sat, 07 May 2016 10:06:05 +0200
Received: from web12h.yandex.ru (web12h.yandex.ru [84.201.186.41])
     by forward19h.cmail.yandex.net (Yandex) with ESMTP id 6755A206E5
     for xxx; Sat,  7 May 2016 11:06:04 +0300 (MSK)
Received: from web12h.yandex.ru (localhost [127.0.0.1])
     by web12h.yandex.ru (Yandex) with ESMTP id C8A06C204D9;
     Sat,  7 May 2016 11:06:03 +0300 (MSK)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
     t=1462608363; bh=TdTC8LUGlAv2JEAk+HTgTwnJuhNNU0Js9t8MeWuFoOo=;
     h=From:To:In-Reply-To:References:Subject:Date;
     b=uqQSV4JYzfOe7FwY7Vl6qclE66/3kSU3/AT5GFEpL9PQ4oYlzVFRtAx1J2pAqG5FH
      BBUjFy9J0ghljh1mkKwINn+hdyNsL7+5WqiV8+gpAp3lGcf/wYLh1tRlk/mXAN7zHL
      L4Mr67nlqui2vFZFLRMi8YdLv3YQQNJVWEmKQT40=
Received: by web12h.yandex.ru with HTTP;
     Sat, 07 May 2016 11:06:03 +0300
From: Tatjana Mishina <tatti.mishina@yandex.ru>
Envelope-From: tatti-mishina@yandex.ua
To: xxx
In-Reply-To: <1874031462608122@web12h.yandex.ru>
References: <2507441462527059@web22o.yandex.ru> xxx
Subject: Re: AW: AW: to xxx
MIME-Version: 1.0
Message-Id: <1878741462608363@web12h.yandex.ru>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Sat, 07 May 2016 11:06:03 +0300
Content-Type: multipart/mixed;
     boundary="----==--bound.187875.web12h.yandex.ru"
X-Envelope-To: xxx
X-Envelope-From: tatti.mishina@yandex.ru
X-IMS-IP: 87.250.230.161
X-CTCH-Spam: Unknown
X-CTCH-VOD: Unknown
X-CTCH-Flags: 0
X-CTCH-RefID: 
gs=0
X-IMS-List: None
X-IMS-StoreID: d7a3eb21d22988cee252
X-Antivirus: avast! (VPS 160506-1, 06.05.2016), Inbound message
X-Antivirus-Status: Clean


Zitat:
From: Tatjana Mishina <tatti.mishina@yandex.ru>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Sat, 07 May 2016 11:06:03 +0300
« Zuletzt geändert: 07. Mai 2016 um 17:19 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65703
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Tatjana Mishina <tatti.mishina@yandex.ru>
Antwort #4 - 07. Mai 2016 um 13:41
 
@ COSMOPOLIT

Hast Du auch noch die Quelltext, dann poste diese bitte.

Änderung:
Quelltext eingefügt. Das war nur ein Quelltext, Deine Daten ( Emailadresse ) sind im Quelltext durch xxx zu ersetzen.
« Zuletzt geändert: 07. Mai 2016 um 17:21 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
COSMOPOLIT
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 13
Standort: Hamburg
Mitglied seit: 12. Oktober 2009
Geschlecht: männlich
Re: Tatjana Mishina <tatti.mishina@yandex.ru>
Antwort #5 - 07. Mai 2016 um 17:09
 
Dear xxx!
Thank you very much for your kindness and your compliments to me. It will be a very big help for me. I'm very grateful to you for your desire to help me. But I do not want you have financial difficulties because of me.

Quelltext fehlt

Dear xxx, I give you the details of my bank account.

BENEFICIARY: TATJANA MISHINA
ACCOUNT: 5168757295745238
BANK OF BENEFICIARY: PRIVATBANK
SWIFT CODE: PBANUA2X
INTERMEDIARY BANK: JP MORGAN CHASE BANK SWIFT CODE: CHASUS33
CORRESPONDENT ACCOUNT: 0011000080
IBAN: UA233052990005168757295745238

Quelltext fehlt

Dear xxx, I wish you a very good day and hope to hear from you soon.
Best regards,
Tatjana.

Quelltext fehlt

Änderung:
Mails an Tatjana gelöscht.
« Zuletzt geändert: 07. Mai 2016 um 17:19 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
COSMOPOLIT
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 13
Standort: Hamburg
Mitglied seit: 12. Oktober 2009
Geschlecht: männlich
Re: Tatjana Mishina <tatti.mishina@yandex.ru>
Antwort #6 - 12. Mai 2016 um 17:36
 
Hallo Forengemeinde!

...ist dieser Ausweis wohl echt?



Zitat:
Betreff: the copy of my identity card


Hello dear xxx!
How are you? I have not heard from you for a long time.
I send you the copy of my identity card (the Ukrainian passport) as I promised.
I wish you a very nice day and hope to hear from you soon.
Best regards,
Tatjana.

Spoiler für Quelltext Yandex Inline:
Return-path: <tatti.mishina@yandex.ru>
Envelope-to: xxx
Delivery-date: Thu, 12 May 2016 08:32:30 +0200
Received: from [192.168.1.141] (helo=mailin01.ims-firmen.de)
     by m4 with esmtp
     (envelope-from <tatti.mishina@yandex.ru>)
     id 1b0kAf-00024F-cb
     for xxx; Thu, 12 May 2016 08:32:30 +0200
Received: from forward13m.cmail.yandex.net ([5.255.216.144])
     by mailin01.ims-firmen.de with esmtps (TLSv1.2:ADH-AES256-GCM-SHA384:256)
     (envelope-from <tatti.mishina@yandex.ru>)
     id 1b0kAf-0000sP-0H
     for xxx; Thu, 12 May 2016 08:32:29 +0200
Received: from web8m.yandex.ru (web8m.yandex.ru [IPv6:2a02:6b8:0:2519::208])
     by forward13m.cmail.yandex.net (Yandex) with ESMTP id 49DE621EEB
     for xxx; Thu, 12 May 2016 09:32:28 +0300 (MSK)
Received: from web8m.yandex.ru (localhost [127.0.0.1])
     by web8m.yandex.ru (Yandex) with ESMTP id B4B312F22EC4;
     Thu, 12 May 2016 09:32:27 +0300 (MSK)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
     t=1463034747; bh=5jry2GJmOgE7OL2nVnMG8NlN5zTda2jcceLeqfwq+/g=;
     h=From:To:In-Reply-To:References:Subject:Date;
     b=p+VxL3u8Caqy2BcuZL+ew6ieNqNbs8qS+bJggLRyFGwxXC2ud0e6jcMz/FrvXvDj5
      ZlTrGc20r4y+yvdGuo0Ab0Q+bmFvU0abjByfrNgWE3X0zPsSCP0y5cLVrkZnfdKt0T
      qtB03p/xONWj3XsnjwQDxoF9uDDiNolaXGUzPczk=
Received: by web8m.yandex.ru with HTTP;
     Thu, 12 May 2016 09:32:27 +0300
From: Tatjana Mishina <tatti.mishina@yandex.ru>
Envelope-From: tatti-mishina@yandex.ua
To: xxx
In-Reply-To: <009d01d1a7a9$09d63580$1d82a080$@xxx
References: <2507441462527059@web22o.yandex.ru> <004401d1a780$81cfb260$856f1720$@> <3099701462530695@web1h.yandex.ru> <005e01d1a789$3956c100$ac044300$> <4390461462541596@web3j.yandex.ru> <009d01d1a7a9$09d63580$1d82a080$@>
Subject: the copy of my identity card
MIME-Version: 1.0
Message-Id: <1824261463034747@web8m.yandex.ru>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Thu, 12 May 2016 09:32:27 +0300
Content-Type: multipart/mixed;
     boundary="----==--bound.182429.web8m.yandex.ru"
X-Envelope-To: xxx
X-Envelope-From: tatti.mishina@yandex.ru
X-IMS-IP: 5.255.216.144
X-CTCH-Spam: Unknown
X-CTCH-VOD: Unknown
X-CTCH-Flags: 0
X-CTCH-RefID: gs=0
X-IMS-List: None
X-IMS-StoreID: 34b2510429ea0119b0e4
X-Antivirus: avast! (VPS 160511-0, 11.05.2016), Inbound message
X-Antivirus-Status: Clean


Zitat:
From: Tatjana Mishina <tatti.mishina@yandex.ru>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Thu, 12 May 2016 09:32:27 +0300


« Zuletzt geändert: 15. Mai 2016 um 12:28 von Uli »  

AM416856_-_Mashina.jpeg ( 88 KB | Downloads )
AM416856_-_Mashina.jpeg
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Tatjana Mishina <tatti.mishina@yandex.ru>
Antwort #7 - 15. Mai 2016 um 12:35
 
Zum gefälschten Pass AM416856 von Tetyana Volodimirivna Mashina:

Ich habe bisher noch keinen originalen ukrainischen Pass gesehen, bei dem auf dem Passfoto die Person an der Kamera vorbeischaut!
Auch erscheint mehr der Hintergrund ein Muster zu haben. Aber das muss wohl am Sofa liegen, auf dem sie sitzt. Es handelt sich um einen Bildausschnitt aus AgWRY34TbCk.jpg!

Wir sollten uns angewöhnen, bei ukrainischen Pässen sowohl die ersten beiden, als auch die beiden Folgeseiten anzufordern. Denn auf der Folgeseite stehen noch weitere Daten.
« Zuletzt geändert: 15. Mai 2016 um 12:36 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema