Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Heisses Thema (Mehr als 10 Antworten) AWO Tour <support@awo-tour.ru> (Gelesen: 2835 mal)
 
oxygenboy
Themenstarter Themenstarter
Ex-Mitglied
*****


I Love Anti-Scam

Geschlecht: männlich
AWO Tour <support@awo-tour.ru>
07. November 2018 um 14:28
 
Dear Mr.XXX,

Thank You for contacting us.
I am the manager of the travel agency AWO Tour.
My name is Roman Podoplelov.
Miss Yana warned that You will contact us.
We know about this situation.

Contract 481516 booked by Yana Arapova.
Total cost of the trip: 930 EURO (70.000 RUB).
Miss Yana has already paid: 140 EURO (10.000 RUB).

We will arrange a trip to YYY for our client.
Now we are expecting payment for this voucher.
Immediately after payment we will prepare all necessary travel documents (visa, international passport).
Preparation of the document takes about 7-10 working days after receiving the payment.
Once all the documents are ready, we will buy a flight to ZZZ for Miss Yana.
We are waiting for the payment of the contract in the amount of 790 EURO (60.000 RUB).
At the request of Miss Yana, I send You a copy of the tourist voucher.
We accept payments from Europe only to a bank account to our Director General.
I want to explain everything to you in advance.
Firstly: a bank account of a travel agency can accept payment only in RUBLE currency.
Payment for any services in foreign currency is prohibited on the territory of Russia in accordance with the law.
Secondly: a bank account of a travel agency can only accept payments from other bank accounts or debit or credit cards that are only opened in Russian banks.
I think that it will be very difficult for You to fulfill two conditions for making payments to the bank account of the travel agency.
I think that You do not have a bank account or a credit card opened with a Russian bank.
Therefore, in Your situation, we can offer to accept payment from You only to the bank account of our Director General of our travel agency.
Since his bank account accepts payments from all countries and the currency of EURO.
Please tell us your intentions.
Do You want to receive bank details of our Director General?
Will You pay this travel contract?

Regards

Roman Podoplelov

Spoiler:


X-Apparently-To: xxx@xxx.xx; Wed, 07 Nov 2018 12:27:06 +0000
Return-Path: <support@awo-tour.ru>
Received-SPF: pass (domain of awo-tour.ru designates 92.53.117.34 as permitted sender)
X-YMailISG: OSTmh8IWLDuPQoeXvc3rIx9sJjELhRNLdHtd6MwEnSBkXHnS
MZsVe89veOyI_3OYQDjCFj_jgIPG9Y_15cga6ts85gMedoCBFZrxjHKxurqo
pGp0qv8.JVPe7_uQhgM2PW26v9fzwlrsxAuBcAIOB7UDHXUdXUpWJXdbS3av
9nkvTzYqYiSyrGNW0SitmJGgucWKY8_mFmWgeuQeMY3Je.6Wf5C5XkFH5hDy
fgSTeiNJNV_aBo3ys1mJSzd__e1h9YIZvBI.4w3CUQHP9YHFmjNVaf21RMaT
9C1H6P2xD9LXUcBPJ7X80mryNjYrrqV7LwE7raZItWHdPS7oSwHQ2PmNu5ve
2JmF3Z.Q1Q3Mcbkc_rXCD5TrruA_3re07j3JTIJtNOgZszQiuMRRnn2JlmUZ
jPT7b3aF0kNLRcc5qyMoSsEXq1MmkdSygJxxJKWsbI6c.6XFapnZUZ68gwnz
Vzzhoi206XnUfGm9MZ6vF99X6tEgH.XSaISLmklKuHTGmTXVdpYdG7KlJiiB
SvOON9AkL7Zc7dPOF.U9muvnNEWxB1i1otldFXPm6HmlWPbYN9PQptMualiN
zv0R5EsBzqKMZBe2HrYdr_k9AC40GV1INi5KYVOtmwkFel6gtuMI8FgRNFU0
PFKD8jbtMOeOZ1h9954kQVRRpD7nPHlhIhr57yOn1k4gY0ynOVAHOzQddiw4
.vGI4zZmEckBZyBsCKsAlQdT_rrwvoOpQqYm4xSPp.LarU2gsHhex6kamUiz
Ja14IBq0dygNkh_8l63yEY4lJrtVASc3hFazNVR18jbS7HkeWs.HMF9XEK8g
s8bvXhfCt536qhXY2.8sDVgBQeeceluhByYBpx5QfE7VL.r73exrIPsqQq.H
jP31et1it0Nc..e_nHOgFah3.SgTAI2oThfi13ku5K2ayZ3RDVsEVKPatTIu
s16trDIKXevrtpS5FafckctNIcr51Rgvpika1S5gGHMGnu3XP_zJB1RD.QJ8
FEFIDV7kBcHcOoOMLTbv_fXa7aXf.zQirBZaw7HLpMux7AXscDB5D0PPVdNh
SIw3jXeIFQwf3xlOGiB39NZ63R6PLLmDm2U9PodPFhoelAJ82hDhwfKyZZLh
OcbK_BgeCb_bsOhedd2RvBCXH0olXiM7Zu.mjSfsjDku.XOG2r8evEHWMYkj
fy16f4LxbvA-
X-Originating-IP: [92.53.117.34]
Authentication-Results: mta1014.mail.ir2.yahoo.com  from=awo-tour.ru; domainkeys=neutral (no sig);  from=awo-tour.ru; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO smtpout4.timeweb.ru) (92.53.117.34)
  by mta1014.mail.ir2.yahoo.com with SMTPS; Wed, 07 Nov 2018 12:27:06 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=awo-tour.ru; s=dkim;
     te; bh=rQnsLkYZ+6d43/FSI++GtuJooPHuBYAGjYejagwbwjs=;
     rcGCYB+w4mv38=;
Received: from [95.211.225.40] (helo=[10.12.21.84])
     by smtp.timeweb.ru with esmtpsa (TLS1.0:RSA_AES_256_CBC_SHA1:256)
     (Exim 4.82)
     (envelope-from <support@awo-tour.ru>)
     id 1gKMvB-0002xp-LS
     for xxx@xxx.xx; Wed, 07 Nov 2018 15:27:04 +0300
Date: Wed, 7 Nov 2018 14:54:07 +0300
From: AWO Tour <support@awo-tour.ru>
X-Priority: 3 (Normal)
Message-ID: <2310732810.20181107145407@awo-tour.ru>
To: XXX <xxx@xxx.xxx>
Subject: Re: Contract number 481516
In-Reply-To: <2074245825.92060.1541575185348@mail.yahoo.com>
References: <2074245825.92060.1541575185348.ref@mail.yahoo.com> <2074245825.92060.1541575185348@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------55921783088AA0"
X-KLMS-Rule-ID: 1
X-KLMS-Message-Action: clean
X-KLMS-AntiSpam-Lua-Profiles: 131067 [Nov 07 2018]
X-KLMS-AntiSpam-Version: 5.8.3.0
X-KLMS-AntiSpam-Envelope-From: support@awo-tour.ru
X-KLMS-AntiSpam-Rate: 0
X-KLMS-AntiSpam-Status: not_detected
X-KLMS-AntiSpam-Method: none
X-KLMS-AntiSpam-Info: LuaCore: 205 205 2f584fc5d437d92fc6aea7edaff39b944687648d, {rep_avail}, DmarcAF: none
X-KLMS-AntiSpam-Interceptor-Info: scan successful
X-KLMS-AntiVirus: Kaspersky Security 8.0 for Linux Mail Server 8.0.0.455, not checked
X-KLMS-AntiVirus-Status: NotChecked: not checked, skipped
Content-Length: 1301359
« Zuletzt geändert: 21. November 2018 um 11:22 von Uli »  

AWO-Tour_Contract_001.jpg ( 100 KB | Downloads )
AWO-Tour_Contract_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
oxygenboy
Themenstarter Themenstarter
Ex-Mitglied
*****


I Love Anti-Scam

Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #1 - 07. November 2018 um 15:16
 
Related to topic Jana <rekeyana@yandex.com>
  
Zum Seitenanfang
 
IP gespeichert
 
oxygenboy
Themenstarter Themenstarter
Ex-Mitglied
*****


I Love Anti-Scam

Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #2 - 08. November 2018 um 09:03
 
Dear Mr. XXX,

I send You the bank details of our Director General.
This bank account accepts the EURO currency.
Please enter all details correctly, without errors.
When implementing an international bank transfer it is very important that all details are entered without errors.
Therefore, I ask you to be careful with the bank transfer.
Please do not make mistakes.

Beneficiary: TERENTEVA KARINA
Address: 109377, Moscow, Ryazansky Prospect, 32 korp. 3
Account number: 40817978000000509826
Bank name: Tinkoff Bank
SWIFT / BIC: TICSRUMM
Address of central bank's office: 1st Volokolamsky pr., 10, bld. 1, Moscow, Russia

Please send us a copy of Your bank receipt after You have made a bank transfer.
This is necessary to verify the correctness of all the details and confirm the payment.


Regards
Roman Podoplelov

Spoiler:

X-Apparently-To: xxx@xxx.xx; Thu, 08 Nov 2018 07:51:38 +0000
Return-Path: <support@awo-tour.ru>
Received-SPF: pass (domain of awo-tour.ru designates 92.53.117.34 as permitted sender)
X-YMailISG: J.9rtr4WLDtTyB1mpfrWOOfW1NwFMz5YM8Ti6Xumo.3.lEPR
3XwB1SxoH0os.PvmQCXavabN9fLhEUTbOMzutKPrp5qk..mmUU4u64YY5x5A
nFtQtw3H8ngj1.hwHWBM6uKBhVkEfrVL2S7x706EOq1vRJ5I_nkCV_80Sxy5
xFtuAe43hyTf_msbs562vAq.PQK5ZE98iy4o3sOVAz51H5vK2FtqSoaK8mJD
5v4nEv0lzzyyu9Ykd.EbAHHKyWdjgfUnN62q0scZLhPfrYOqYzy1FBx6HiJC
wpVzwkBxizYJBS732MmSKb2BLGC45BGsZYnmXL8pkyNTYV0L5cFbEX4t1PH1
fSZNSvPIG42_7Eg4TFLTZ_rA1IGwj8yQw3v6qGKUslQ.YxCi7t_VWiwNGc1B
aw3DJLZ0oH84jEtnQF2JQsnYLVs4GxtYQE2DJ29aVRkM1tbFsViAN1mLogYG
porJPLEhDuTKypTf7dJTrkiHejLzDZG6jPqfhYimz81_TKmqfC0_sgns_N6d
WnAMG84EGR1368nc17aTs7blO06kCVIcLFn25wbkjPkYW7nGC5F47z29B27R
WzQTOk8vjmzjeO2H6ZrA9yuSjMQrq1tg7i1O_BL3FS8gyr28BSi.gF59x3Ha
PeCIWvpu7mkiU_SZ9LykPPe2suhiLcqIzpHJcnjK.7FLq_I7l3WhMDOm2nZX
SpxvoliFKvCYrzD9rAYnVEqyd6y9MuzzzSQsbAcv0JkbyB5iu4rhLFEW6eeM
t1035Nl3GkUazNf2EDRrEMQ1igmcdalLt20EmpRQ0zTBM.LN.Wtt0RVvUgn9
IvYsh2ZIfNDCJYNtI799eaO96ABlFMeWLcOGQympS_rwWvxkv7Jb8bd7N4Ea
bOKdT4sBfYNB1iqW0RTAve0cZiicN9asfBh9GXR_QOwHb.H3mG_3ZyhAgWzq
SzSD8_UeCCvF0NGRh48fh6Hxs52RIvlDjOWSIRnW1ZzpExFrcwyIkToiQk17
kBcRBR8e8Uh63my7ek_QHcxrsF4mvqLWFWzyqLyLS8F8l9UEL9As002Qx24n
MdURPAVWmj5_x9yDWHzgsj.snICa0FH9eO7XBaFh1SOUqOc7cWRlGpEmR0YJ
KC2qLwPEXCBob3YsbQ--
X-Originating-IP: [92.53.117.34]
Authentication-Results: mta1001.mail.ir2.yahoo.com  from=awo-tour.ru; domainkeys=neutral (no sig);  from=awo-tour.ru; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO smtpout4.timeweb.ru) (92.53.117.34)
  by mta1001.mail.ir2.yahoo.com with SMTPS; Thu, 08 Nov 2018 07:51:37 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=awo-tour.ru; s=dkim;
     ject:To:Message-ID:From:Date; bh=s65up5/muuq8eCBmATUyqPqN4aJ/wBdfdcQrQxmgkdk=;
     W6K/qLnbnq3j8=;
Received: from [95.211.225.42] (helo=[10.12.21.84])
     by smtp.timeweb.ru with esmtpsa (TLS1.0:RSA_AES_256_CBC_SHA1:256)
     (Exim 4.82)
     (envelope-from <support@awo-tour.ru>)
     id 1gKf6F-00034j-TX
     for xxx@xxx.xx; Thu, 08 Nov 2018 10:51:37 +0300
Date: Thu, 8 Nov 2018 10:41:11 +0300
From: AWO Tour <support@awo-tour.ru>
X-Priority: 3 (Normal)
Message-ID: <231637205.20181108104111@awo-tour.ru>
To: XXX <xxx@xxx.xx>
Subject: Re: Contract number 481516
In-Reply-To: <1685777633.529291.1541597106592@mail.yahoo.com>
References: <2074245825.92060.1541575185348.ref@mail.yahoo.com> <2074245825.92060.1541575185348@mail.yahoo.com> <2310732810.20181107145407@awo-tour.ru> <1685777633.529291.1541597106592@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-KLMS-Rule-ID: 1
X-KLMS-Message-Action: clean
X-KLMS-AntiSpam-Lua-Profiles: 131117 [Nov 08 2018]
X-KLMS-AntiSpam-Version: 5.8.3.0
X-KLMS-AntiSpam-Envelope-From: support@awo-tour.ru
X-KLMS-AntiSpam-Rate: 0
X-KLMS-AntiSpam-Status: not_detected
X-KLMS-AntiSpam-Method: none
X-KLMS-AntiSpam-Info: LuaCore: 205 205 2f584fc5d437d92fc6aea7edaff39b944687648d, {rep_avail}, DmarcAF: none
X-KLMS-AntiSpam-Interceptor-Info: scan successful
X-KLMS-AntiVirus: Kaspersky Security 8.0 for Linux Mail Server 8.0.0.455, not checked
X-KLMS-AntiVirus-Status: NotChecked: not checked, skipped
Content-Length: 833
  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30555
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #3 - 16. November 2018 um 11:26
 
Die Domain awo-tour ist nagelneu:

Zitat:
Domain Whois record

Queried whois.tcinet.ru with "awo-tour.ru"...

domain:        AWO-TOUR.RU
nserver:       ns1.timeweb.ru.
nserver:       ns2.timeweb.ru.
nserver:       ns3.timeweb.org.
nserver:       ns4.timeweb.org.
state:         REGISTERED, DELEGATED, UNVERIFIED
person:        Private Person
registrar:     TIMEWEB-RU
admin-contact: http://timeweb.name/contact-admin
created:       2018-07-11T16:20:03Z
paid-till:     2019-07-11T16:20:03Z
free-date:     2019-08-11
source:        TCI

Last updated on 2018-11-15T11:26:33Z



Zu geben scheint es das Reisebüro nur in Moskau, Ryazanski Prospekt 32. Scheinbar gibt es in Ulyanovsk keine Reisebüros.  Zwinkernd

Ihre Telefonnummern +7 (495) 775-95-99 und +7 (903) 154-24-90 sind die Telefonnummern des Naska Plaza, Moskau, Ryazansky Avenue, 32 Block 3, aber nicht eines Reisebüros!

Die gefälschte Lizenz 0029424 haben wir bereits von dem Reisebüro Wowtravel 24 <wowtravel24.ru> <support@wowtravel24.ru>


« Zuletzt geändert: 16. November 2018 um 11:27 von Uli »  

0029424_-_awo-tur_001.jpg ( 103 KB | Downloads )
0029424_-_awo-tur_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
oxygenboy
Themenstarter Themenstarter
Ex-Mitglied
*****


I Love Anti-Scam

Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #4 - 20. November 2018 um 15:47
 
Zitat:

Hello Mr. Podoplelov.
The manager of my bank, Mr. Uli Esquea, is asking me for a passport copy of the receiver of the money, Mrs. Karina Terenteva, because of our European money laundry law.
Regards.


Note: the ficticious name of my bank manager is a word play with "Uli" (our webmaster and expert in fake passports, who asked me for this passport for his archive of fake passports) and "Esquea" (a typical spanish surname) that sounds like the Spanish verb "olisquea", meaning "he sniffs", in the sense of researching a scam.

Reply:

Dear Mr. XXX,

I apologize for the delay in replying.
I had to get personal permission to send personal information from our Director General.
It took some time.
I am sending You a copy of an identity document.
I am waiting for Your message.

Regards
Roman Podoplelov
« Zuletzt geändert: 21. November 2018 um 11:11 von Uli »  

45_12_642932_-_Terenteva.jpg ( 91 KB | Downloads )
45_12_642932_-_Terenteva.jpg
Zum Seitenanfang
 
IP gespeichert
 
oxygenboy
Themenstarter Themenstarter
Ex-Mitglied
*****


I Love Anti-Scam

Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #5 - 20. November 2018 um 16:06
 
Spoiler:

X-Apparently-To: xxx@xxx.xx; Tue, 20 Nov 2018 14:18:28 +0000
Return-Path: <support@awo-tour.ru>
Received-SPF: pass (domain of awo-tour.ru designates 92.53.117.15 as permitted sender)
X-YMailISG: kAmLO90WLDviyOAW7kfI66_Skn5cb1ObA9h7J6ib0FESV6iT
t_qJSRFUFRqysBcEdV.frZ9dlLnJjckoBtNnTZcsNqtKsXKUBnrWKnozKcA1
nBWpUqgiuvrK0mByRfch0NVQCfqD7yTgMWQ09YXqIZa5y0tIiGrBAZmHh1oe
FHUsGrNTNLXym6COmip24BtTYcxgmQ66t76M2biNpXwB3g64dp8gUA5VXQ73
jqGX44BOlwyyq9PaXktdRgCiUCnYE0RcDFvG2..bavAVxVASyp4hjG.jkDZ8
FrG7Rf5rVyMsqgnVHXlD2rCwXgrOJD1hD9dtPSxDCf0_0skHmG9TEIn60xdu
Flh12FlJVjPvO3LU1RbQKtZI9mr6IclCnzOMg3R4CWY3F6RJmEdJsbj2H4hl
VqA22PTuL_pzCqGq4PFPFkCiA6hNtqWwCGv2fyqe6Mu4DF8EGMdfhlWfhe4_
BUA446hg7Q7DvDgy3VDprrVVF1cPMsws9AhkDBEviW0_SAQNb6W8b3a4Gcq1
_gxgE_CshtTfbh14ViC1yoBUu1u_sNveOY9C5YxPrAUcuW7c.L59kFORP.sf
2C3iSJnhyvt92LaO08MffMQ44AsbyS4VTK6N2AHoeBOUNgjO3A7go4ld7PsZ
pBX3RH0X4AnCLljaUKtDBDYWN0id5tURx0xds3puymOs8WYOMgQMvEG1RpLM
nb367v._tBGg8Wb5rT1_d_nC9FyAPNqm4kuQsuGW068hXXPCradaavuD61S2
fat04pVR5YW6DR.KSIBkaDWP_JEwaQo0Jihx69hCRCV6G2JVv8P6oHQkFa0t
MwidEiKnzkUx.n6ahZUaslqOEHh_O1XGKRIu4I.eslIpMlxWEFi4CPIEasc9
EO87aVfRl71SSSHEz3KRLdCm4m4cO6grGAcbpOI_2i_sTxZGf2KX8Gb4LCHj
vzEiC8FUoCyz_JzGVnLy3v4KSvvV6DKbGEytS27mcXBqZlTRaEt9TAM_gAJ3
UJT1ayg.g48hRCgqmpaOA6gi85QF3cAtrWYAv_p7PAinnnw0aq0xFXc08xHT
kPT2Ta9mLfC.05iGmHtl8iAmIt7jbK58v15gw3a1kH5cnuTq
X-Originating-IP: [92.53.117.15]
Authentication-Results: mta1053.mail.ir2.yahoo.com  from=awo-tour.ru; domainkeys=neutral (no sig);  from=awo-tour.ru; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO smtpout1.timeweb.ru) (92.53.117.15)
  by mta1053.mail.ir2.yahoo.com with SMTPS; Tue, 20 Nov 2018 14:18:27 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=awo-tour.ru; s=dkim;
     te; bh=7J9PHkUYzkfDN7cq0q611lS1Cg2SMoFQI/yQ30iaynA=;
     AvlS86Ns3pCis=;
Received: from [95.211.225.42] (helo=[10.12.21.84])
     by smtp.timeweb.ru with esmtpsa (TLS1.0:RSA_AES_256_CBC_SHA1:256)
     (Exim 4.82)
     (envelope-from <support@awo-tour.ru>)
     id 1gP6r4-00032q-0V
     for xxx@xxx.xx; Tue, 20 Nov 2018 17:18:24 +0300
Date: Tue, 20 Nov 2018 17:17:34 +0300
From: AWO Tour <support@awo-tour.ru>
X-Priority: 3 (Normal)
Message-ID: <1489352472.20181120171734@awo-tour.ru>
To: XXX <xxx@xxx.xx>
Subject: Re: Contract 481516
In-Reply-To: <1842988981.2692558.1542371023480@mail.yahoo.com>
References: <273786842.2394789.1542091766240.ref@mail.yahoo.com> <273786842.2394789.1542091766240@mail.yahoo.com> <86677352.20181113195409@awo-tour.ru> <1842988981.2692558.1542371023480@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------65FBC83E75F6"
X-KLMS-Rule-ID: 1
X-KLMS-Message-Action: clean
X-KLMS-AntiSpam-Lua-Profiles: 131777 [Nov 20 2018]
X-KLMS-AntiSpam-Version: 5.8.3.0
X-KLMS-AntiSpam-Envelope-From: support@awo-tour.ru
X-KLMS-AntiSpam-Rate: 0
X-KLMS-AntiSpam-Status: not_detected
X-KLMS-AntiSpam-Method: none
X-KLMS-AntiSpam-Info: LuaCore: 209 209 9ce9bdf56ed4d1562a7164857e0c5045f306856b, {rep_avail}, DmarcAF: none
X-KLMS-AntiSpam-Interceptor-Info: scan successful
X-KLMS-AntiVirus: Kaspersky Security 8.0 for Linux Mail Server 8.0.0.455, not checked
X-KLMS-AntiVirus-Status: NotChecked: not checked, skipped
Content-Length: 483411
  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30555
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #6 - 21. November 2018 um 11:17
 
Mail was hidden by using Leaseweb:

Code
Alles auswählen
IP Address 	95.211.225.42
% Abuse contact for '95.211.220.0 - 95.211.227.255' is ''

inetnum:        95.211.220.0 - 95.211.227.255
netname:        LEASEWEB
descr:          LeaseWeb Netherlands B.V.
remarks:        Please send all abuse notifications to the following email address:
. To ensure proper processing of your abuse notification, please visit
the website www.leaseweb.com/abuse for notification requirements. All police and other
government agency requests must be sent to .
country:        NL
admin-c:        LSW1-RIPE
tech-c:         LSW1-RIPE
status:         ASSIGNED PA
mnt-by:         LEASEWEB-NL-MNT
created:        2011-11-01T14:48:27Z
last-modified:  2015-09-30T22:18:23Z
source:         RIPE

person:         RIP Mean
address:        P.O. Box 93054
address:        1090BB AMSTERDAM
address:        Netherlands
phone:          +31 20 3162880
fax-no:         +31 20 3162890
e-mail:          

  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30555
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #7 - 21. November 2018 um 11:21
 
To fake passport 45 12 642932 of Karina Dmitrievna Terenteva:

Since July 2010 russian internal passports have a machiereadable part, too!
Passport- and stampnumber are not from the same regions in Russia.
Wrong typewriter font for the data of the passport.


Zum gefälschten Pass 45 12 642932 von Karina Dmitrievna Terenteva:

Seit Juli 2010 haben auch die russischen Inlandspässe einen maschinenlesbaren Teil.
Pass- und Stempelnummer kommen nicht aus der gleichen Region Russlands.
Flascher Schreibamschinenschriftsatz für die Passdaten.
  
Zum Seitenanfang
 
IP gespeichert
 
oxygenboy
Themenstarter Themenstarter
Ex-Mitglied
*****


I Love Anti-Scam

Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #8 - 22. November 2018 um 08:02
 
Dear Mr. XXX,

Our price list:
International passport - 80 euro.
Full medical examination and medical certificates - 70 euro.
Visa - 90 euro.
Consular fee for a visa - 70 euro.
A trip to Moscow for an interview at the embassy - 170 euro.
Airplane tickets - 300 euro.
The cost of our services - 150 euro.

Regards
Roman Podoplelov

Spoiler:

X-Apparently-To: xxx@xxx.xx; Wed, 21 Nov 2018 19:01:10 +0000
Return-Path: <support@awo-tour.ru>
Received-SPF: pass (domain of awo-tour.ru designates 92.53.117.15 as permitted sender)
X-YMailISG: YMFPwb8WLDsjPdkN0crIRNPNja5JvjJFAlU59gHfLuguSkZB
07oKnOIcFuumfpcWX0mW3tZvPuWjrHJHLOPaMirI7ORJ.KbTDG77CjUvsrQq
mNF4LYUk2Si8Tj1RQo3APK7.iNKTzA0lfwLrfQYiiLmBb_h7hhPWMxfAmxMR
5j0EYv_wog1uMpEb5Xv9h7HxWF3lQewy1PJO2buW1Vqffsb9Vnp5v71rRFE4
EYfcsvFyu12BonfB8Ku5ma1FWtL6sJ9yAQts70fTacQdZNx4W5Od3YbpmTNv
MjxZ5gxDhkyDBG1rgiIpOBRhj9HIhppY5fEzkodOZh6yEsT2Q4jPnBNHh7iW
OK3mWpOCU76qSjI_srwnKYy64EsnY4Cn_tRWfjjypSQl6jE29Lw3kfZca6Iz
jxHTFOoixib0f64xvF2vGb9pd4bSc8JHOendl9WGz1KQ1X9BrbWvDRx4BNyq
paeCDQug.RMyh2rrC.pM8npoytQ7MPaj6Q6a1ih5AvwKORTlatJ1XQZE9m6s
K7oF0yRQnK3vq8b06dlJl2W8mTODVv34albjyROXlvZGEKfipHjVckk67a3q
1HNp2.WxLYb1FylFxzrIYIlnjewrhhCauKgz_JssLfDsMv8o1DhqD867io8d
CSte9phnc8gd2PDs75lNkgh1LtrPZm0_RzvVuqnhplHJCTocz1.ByrUJWt4S
6Oy9KpNhq830zaxO9ZUbc7R0RyD87KvfJ1OlLJZBwW7AmaO_qPBXpsoK35cS
ZuMPPahRfLutWZFfshwBoTUCommoFcMImQ3OOnkBJLt99WteQXYIECfLLD3e
pdohVyfqufMxu0Mm9rPbZ7w21GsLBJxh41NvWpo6wnFvEu2d_Xq0zptCo6J.
bCmdj1aw7kSrxWsGQElaPMNlKXATkrimW0S1vEyYJpwog5XOckctvVS.YiD1
fHufkhEgQUZb1_g0pC.8zoiTUzjgTlbkUmNX8KOl93crlk9jwHsfvhxb2g1x
1Y9WeMtXq_yIQ7sbRXen8F6eh6L8xkC.Ri2TfNjb7C0AYYX3YWEhxMFBZkO7
b56iJw--
X-Originating-IP: [92.53.117.15]
Authentication-Results: mta1085.mail.ir2.yahoo.com  from=awo-tour.ru; domainkeys=neutral (no sig);  from=awo-tour.ru; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO smtpout1.timeweb.ru) (92.53.117.15)
  by mta1085.mail.ir2.yahoo.com with SMTPS; Wed, 21 Nov 2018 19:01:10 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=awo-tour.ru; s=dkim;
     ject:To:Message-ID:From:Date; bh=ET+iCcrlX7aITNcnlB3NZ0ZWg9keulZ76pPzV+SMIlM=;
     IYgAXs+f8hfWM=;
Received: from [95.211.225.40] (helo=[10.12.21.84])
     by smtp.timeweb.ru with esmtpsa (TLS1.0:RSA_AES_256_CBC_SHA1:256)
     (Exim 4.82)
     (envelope-from <support@awo-tour.ru>)
     id 1gPXkK-0005p9-MY
     for xxx@xxx.xx; Wed, 21 Nov 2018 22:01:09 +0300
Date: Wed, 21 Nov 2018 22:00:00 +0300
From: AWO Tour <support@awo-tour.ru>
X-Priority: 3 (Normal)
Message-ID: <1525723071.20181121220000@awo-tour.ru>
To: XXX <xxx@xxx.xx>
Subject: Re: Contract 481516
In-Reply-To: <1371696905.6792264.1542791317359@mail.yahoo.com>
References: <273786842.2394789.1542091766240.ref@mail.yahoo.com> <273786842.2394789.1542091766240@mail.yahoo.com> <86677352.20181113195409@awo-tour.ru> <1842988981.2692558.1542371023480@mail.yahoo.com> <1489352472.20181120171734@awo-tour.ru> <1371696905.6792264.1542791317359@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-KLMS-Rule-ID: 1
X-KLMS-Message-Action: clean
X-KLMS-AntiSpam-Lua-Profiles: 131841 [Nov 21 2018]
X-KLMS-AntiSpam-Version: 5.8.3.0
X-KLMS-AntiSpam-Envelope-From: support@awo-tour.ru
X-KLMS-AntiSpam-Rate: 0
X-KLMS-AntiSpam-Status: not_detected
X-KLMS-AntiSpam-Method: none
X-KLMS-AntiSpam-Info: LuaCore: 211 211 6f33b6f81832c918a79fef49314194c444bd0347, {rep_avail}, DmarcAF: none
X-KLMS-AntiSpam-Interceptor-Info: scan successful
X-KLMS-AntiVirus: Kaspersky Security 8.0 for Linux Mail Server 8.0.0.455, not checked
X-KLMS-AntiVirus-Status: NotChecked: not checked, skipped
Content-Length: 339
  
Zum Seitenanfang
 
IP gespeichert
 
oxygenboy
Themenstarter Themenstarter
Ex-Mitglied
*****


I Love Anti-Scam

Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #9 - 22. November 2018 um 09:51
 
Zitat:

Hello Mr. Podoplelov,

yesterday I went to my bank and tried to transfer the money to Mrs. Terenteva's bank account for Miss Yana's travel contract, but they told me that it's possible only if there's a passport with a machine-readable area. Mrs. Terenteva's passport didn't have any machine-readable area. I'm sorry very much for all these inconveniences. Please, could you help me?

Kind regards


Reply:

Dear Mr. XXX,

I sent you a copy of the original passport.
This is a passport of a citizen of the Russian Federation.
This passport was issued 18.12.2012.
The machine-readable zone is only in passports received after July 1, 2013.
July 1, 2013 in Russia began to issue new passports with a machine-readable zone.
Therefore, logically on the passport Mrs. Terenteva cannot be machine readable zone.
As I have already said, new passport samples began to be issued on July 1, 2013.
I ask you to let us know your intentions.
We have had cases of working with clients from abroad.
And they never had a problem.
Your bank cannot forbid you to make a bank transfer.
Every day thousands of bank transfers take place between Russia and the countries of the European Union.
In this situation, it all depends on you.
I fulfilled all your requests.
I provided you with bank details for payment.
Please let me know your intentions.


Regards
Roman Podoplelov

Spoiler:

X-Apparently-To: xxx@xxx.xx; Thu, 22 Nov 2018 08:44:33 +0000
Return-Path: <support@awo-tour.ru>
Received-SPF: pass (domain of awo-tour.ru designates 92.53.117.15 as permitted sender)
X-YMailISG: QCuhQusWLDudTi2veGqP3bm6mYOrrgImid1NCMRrv_FF0aPG
CBU5vXYXTGeOsPONA09PvnNBsLFQK4IVJblSlwaSTm4S.FVSmLZv9ood9kmM
Q8YGEIUsyQY9Cq3psuw.uNIAHFGoSKTm9QF6.8CN2jys7EsS57wI_lon0dK8
uDklWL.EbxRm.oh9lmPT_UjuJ_hyzlamlgKYHzliLIVbEoCXxY7ij.vENVsN
t8uJibxw_hkhwT9CzVKXYPASZEmtMrcA1nLVdsuK3NfJZjrr4_uoGp3DAyQP
_kslk7jOBN0.CZh6oX89HWK6YZNw_zSEqFVtQNqQoNoTjHO7xwTcffKjyKgo
F5XjvQ5S2_JEUIY7jT1jx1moWumH5hqkPyPQzc44nuHyYIp.n8wHnanav_hV
6FFOOqJpn50.drF6hxzLndOgcK38ObtuffKzHZUG2vXRIMqsSmnoCOu75WrI
6LfoNGJapP69iWOyr4srVkvQd.N7cZ4_TaIDrtsSSijgfnS70aH2w.kV7D.1
WhHzNBc2FZS_PPi1qgGNmqMhKXf1gjYMoAvh7H4tVSATMh1wQ7kvHZzytSsT
8XKXywjfA63ayJ_MyAo0xrX1OIdA3uCugxLPYLiI0KIK3mhRdRnmtTgHWhsb
W3l4amHofWNK.rUVFn2IA4_rXIMfj.cZv6B8zgk2La3GUOHtheaGQHN_X9l3
9it419.C_Eh931_WPPIvHZzKuQOzfuoMimS1FSKMZpkvC2lHAoVI5VDGoSvn
TE0crKpS9Ly9v9QfSx5LaPV_sJ74Zc0aD_Y6sgs15JW5Be4jvJQxNxa5rm_7
LT_P4vO493csmcKqtPorGUj3chiQstRxwB4VdS6o8cU2Dc9sj3vXAxoFa8jJ
UcHjIAdnlwqkskD_bCtFphjSXzgCECnQYXDoNuX0wAdlABjaMQc5dULRPLzV
XuCjeIUqJ3tMpOWLguOVwQfXfABJu4a6CZ.EiAYjoNsVMy7SirWRJLviL7VZ
w2YWx25Y_H5m0qHS9nI8KHuf0z_uaWWDW._J.qUkdEBMACvwx5W8q.TA1g2I
8FyTAqsxl_EfbYoslbY5tvZ9NRQYxbIxgKPrYw8H3E_n0ntNBsTaQCN1qW0n
ARfo
X-Originating-IP: [92.53.117.15]
Authentication-Results: mta1170.mail.ir2.yahoo.com  from=awo-tour.ru; domainkeys=neutral (no sig);  from=awo-tour.ru; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO smtpout1.timeweb.ru) (92.53.117.15)
  by mta1170.mail.ir2.yahoo.com with SMTPS; Thu, 22 Nov 2018 08:44:32 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=awo-tour.ru; s=dkim;
     ject:To:Message-ID:From:Date; bh=r3rkFft+qaPrsz06fh6YSeAtY2cDICW/JyEdJ8tWM0M=;
     jivHrrnWApMiM=;
Received: from [95.211.225.39] (helo=[10.12.21.84])
     by smtp.timeweb.ru with esmtpsa (TLS1.0:RSA_AES_256_CBC_SHA1:256)
     (Exim 4.82)
     (envelope-from <support@awo-tour.ru>)
     id 1gPkb9-00043v-81
     for xxx@xxx.xx; Thu, 22 Nov 2018 11:44:32 +0300
Date: Thu, 22 Nov 2018 11:29:02 +0300
From: AWO Tour <support@awo-tour.ru>
X-Priority: 3 (Normal)
Message-ID: <887057665.20181122112902@awo-tour.ru>
To: XXX <xxx@xxx.xx>
Subject: Re: Contract 481516
In-Reply-To: <1218314367.7757314.1542869113149@mail.yahoo.com>
References: <273786842.2394789.1542091766240.ref@mail.yahoo.com> <273786842.2394789.1542091766240@mail.yahoo.com> <86677352.20181113195409@awo-tour.ru> <1842988981.2692558.1542371023480@mail.yahoo.com> <1489352472.20181120171734@awo-tour.ru> <1371696905.6792264.1542791317359@mail.yahoo.com> <1525723071.20181121220000@awo-tour.ru> <1218314367.7757314.1542869113149@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-KLMS-Rule-ID: 1
X-KLMS-Message-Action: clean
X-KLMS-AntiSpam-Lua-Profiles: 131873 [Nov 22 2018]
X-KLMS-AntiSpam-Version: 5.8.3.0
X-KLMS-AntiSpam-Envelope-From: support@awo-tour.ru
X-KLMS-AntiSpam-Rate: 0
X-KLMS-AntiSpam-Status: not_detected
X-KLMS-AntiSpam-Method: none
X-KLMS-AntiSpam-Info: LuaCore: 211 211 6f33b6f81832c918a79fef49314194c444bd0347, {rep_avail}, DmarcAF: none
X-KLMS-AntiSpam-Interceptor-Info: scan successful
X-KLMS-AntiVirus: Kaspersky Security 8.0 for Linux Mail Server 8.0.0.455, not checked
X-KLMS-AntiVirus-Status: NotChecked: not checked, skipped
Content-Length: 962
  
Zum Seitenanfang
 
IP gespeichert
 
oxygenboy
Themenstarter Themenstarter
Ex-Mitglied
*****


I Love Anti-Scam

Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #10 - 26. November 2018 um 12:39
 
Zitat:

Hi Mr. Podoplelov,

I have confrontate the bank with the information of the mail you wrote to me and they insist that Russian internal passports have a machine-readable zone since 1st July 2011. Even they gave me a link: https://en.ppt-online.org/238055 (page 29, image attached) with the information of the Russian state to the rest of the world.
I'm sorry for the inconveniences, but the internal policy of my bank prevents me from transferring 790 euros to a foreign bank account whose owner is not duly accredited.

Best regards


Reply:


Dear Mr. XXX,

You have the wrong information.
The machine-readable zone appeared in Russian passports issued after July 1, 2013.
Our travel agency has been working in tourism for 10 years already.
We have accreditation.
A copy of our license can be found on our website.
I understand Your intentions.
You are not our customer, we do not force You to make a payment.
Miss Yana is our customer.
All further questions about the payment contract, we will discuss only with her.
I apologize for the inconvenience.
I won't bother You anymore.


Regards
Roman Podoplelov

Spoiler:

X-Apparently-To: xxx@xxx.xx; Mon, 26 Nov 2018 11:26:13 +0000
Return-Path: <support@awo-tour.ru>
Received-SPF: pass (domain of awo-tour.ru designates 92.53.117.34 as permitted sender)
X-YMailISG: jlCOVj0WLDtUk.6r4lpddsVi4jV8Epw9MBMIi2nL6PAT9TFj
KYJi_xCgHS_f4Bl_UPnZiMv851hBokMpqI9kNTgrZo55mInl3QfgNQC0WiYl
pClA.6Can1NFVHhr7v0HuLvM1JM1pijX3YzIEpOX_ds8P0GGyjRcel9MMhwL
2hQQ2cnOXmusNRgCYhlTlmNHdWQpszXm3Afn79xo0QdmlhvBh5puY3kQQ5HL
Yg5fZtaD4X2IhcnWime5FSvpUX_0wfVrJm2.NbnNjNE_kOqkfvN0cebUjKWa
OPosW3MHQlv5BRk3bwsCXSHzpWCJy0ez3sM6jhche7On8enHx7Zjeb63L7eA
W5jaALI5KvGEo0n50MM6JH4wYR61zykxTkxFiyszt2JLLvFoagD4Pbolh0HN
hKnfBBr11Unl9jlnSBjDI2qnkInj1VjqZG4T3yOTAadNhyBXQZtcYgXO.CSp
KZimPCJf_xjLFLe.NNXSVknDqATZXWdplcqmGF923sC4tPa09gIE9ez8ih3_
93LSun2ZlERwzq1wfK41AXx9OCj7lAwnQ4ToNcWC0Tejywgr7TQ6oeRdTpsr
O2XZ6hin9Wsri9bHgiE02F4I8eEQrKBjICw6dozjhcBGZ35XjIL7llCS6PzC
4sSxpeXIf_7kqsH1t0S_270GbJg_TCxkiL9eqU3o4i9Hj3BpOvkvBZnazMvK
IBAaDk6yMA2hp.MuP9aFIngZloFSjHGYu8na0B9xttdwqxI502RmA7d8zCG2
BKNFoCnOAVAfgQDhmCLhOiUdGwRBM4k678b5sNrsgIg46.xX5lH6jH2Fw8_I
V1j5PSvyJwm.1Y3wdwq42Q1dl.FwWf4bna9TFg_7p.uAxtfiHN30yy.EOwoo
A5HG0VLP9XtBOJE_g0btpjT8_vw5PJHtewRM0WRW4xeW6fBHNOpQZAFcYCC5
.P8da3veiRmGaQ8M3hjTp2lGNmH9KskX4X0Cn.TbK7xdZ1pvO06H_TYwKqRo
OKwsY7aKhE0eH5HLs1N.uP8YHjwW6x7u8xypWvA0COY6d65x_RNuOAp8C2qC
8Hai4TCd.M5vyI_wK_oM3_I3KtenZbah
X-Originating-IP: [92.53.117.34]
Authentication-Results: mta1027.mail.ir2.yahoo.com  from=awo-tour.ru; domainkeys=neutral (no sig);  from=awo-tour.ru; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO smtpout4.timeweb.ru) (92.53.117.34)
  by mta1027.mail.ir2.yahoo.com with SMTPS; Mon, 26 Nov 2018 11:26:13 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=awo-tour.ru; s=dkim;
     ject:To:Message-ID:From:Date; bh=isn6sc9pv3vEgtPt4Sc97Zg1/aPqIJUlc780bHSNirY=;
     KS5FVHXBtuIrk=;
Received: from [95.211.225.42] (helo=[10.12.21.84])
     by smtp.timeweb.ru with esmtpsa (TLS1.0:RSA_AES_256_CBC_SHA1:256)
     (Exim 4.82)
     (envelope-from <support@awo-tour.ru>)
     id 1gRF1n-0002Wr-Kw
     for xxx@xxx.xx; Mon, 26 Nov 2018 14:26:12 +0300
Date: Mon, 26 Nov 2018 13:49:43 +0300
From: AWO Tour <support@awo-tour.ru>
X-Priority: 3 (Normal)
Message-ID: <471414084.20181126134943@awo-tour.ru>
To: XXX <xxx@xxx.xx>
Subject: Re: Contract 481516
In-Reply-To: <2013994648.9766654.1543062781942@mail.yahoo.com>
References: <273786842.2394789.1542091766240.ref@mail.yahoo.com> <273786842.2394789.1542091766240@mail.yahoo.com> <86677352.20181113195409@awo-tour.ru> <1842988981.2692558.1542371023480@mail.yahoo.com> <1489352472.20181120171734@awo-tour.ru> <1371696905.6792264.1542791317359@mail.yahoo.com> <1525723071.20181121220000@awo-tour.ru> <1218314367.7757314.1542869113149@mail.yahoo.com> <887057665.20181122112902@awo-tour.ru> <2013994648.9766654.1543062781942@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-KLMS-Rule-ID: 1
X-KLMS-Message-Action: clean
X-KLMS-AntiSpam-Lua-Profiles: 132109 [Nov 26 2018]
X-KLMS-AntiSpam-Version: 5.8.3.0
X-KLMS-AntiSpam-Envelope-From: support@awo-tour.ru
X-KLMS-AntiSpam-Rate: 0
X-KLMS-AntiSpam-Status: not_detected
X-KLMS-AntiSpam-Method: none
X-KLMS-AntiSpam-Info: LuaCore: 214 214 dd5d82bb00ca93bd3dfb46ca097df6af04819311, {rep_avail}, DmarcAF: none
X-KLMS-AntiSpam-Interceptor-Info: scan successful
X-KLMS-AntiVirus: Kaspersky Security 8.0 for Linux Mail Server 8.0.0.455, not checked
X-KLMS-AntiVirus-Status: NotChecked: not checked, skipped
Content-Length: 577
  

slide-28.jpg ( 125 KB | Downloads )
slide-28.jpg
Zum Seitenanfang
 
IP gespeichert
 
oxygenboy
Themenstarter Themenstarter
Ex-Mitglied
*****


I Love Anti-Scam

Geschlecht: männlich
Re: AWO Tour <support@awo-tour.ru>
Antwort #11 - 26. November 2018 um 12:41
 
Zitat:

I understand Your intentions.
You are not our customer, we do not force You to make a payment.
Miss Yana is our customer.


I think my game with this scammer is over.

Zitat:

You have the wrong information.
The machine-readable zone appeared in Russian passports issued after July 1, 2013.


Regarding machine-readable zone in internal Russian passports, apart from the document that Uli sent me (https://en.ppt-online.org/238055, page 29), there is this one:

http://www.passport-collector.com/wp-content/uploads/2011/09/USSR_Russian-passpo... (page 49, at the top): 
"Also our Russian Ministry of Internal Affairs issues passports of this type but with Machine-Readable Zone (since 01 July 2011)."
« Zuletzt geändert: 26. November 2018 um 12:54 von oxygenboy »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema