Anti-Scam - Valentina <kostryvalusha@gmail.com>

Template wählen:

Sprache wählen:

Anti-Scam › Ukraine › Ukrainische Scammer › Valentina <kostryvalusha@gmail.com>

‹ Vorheriges Thema | Nächstes Thema ›

Seitenindex umschalten

Seiten: 1

Thema versenden

Normales Thema

Valentina <kostryvalusha@gmail.com> (Gelesen: 1077 mal)

Slash Themenstarter Scam Warners Offline I Love Anti-Scam Beiträge: 185 Mitglied seit: 02. Mai 2019 Geschlecht:	Valentina <kostryvalusha@gmail.com> 09. August 2019 um 08:10
	Hi xxx! Great to have a chance to know you! I am a cheerful Valentana from the dating site and I hope that this will be only the beginning of something special! I am usual woman from Ukraine and I am looking for a usual guy, but with the characteristics which are not usual in the modern life: being honest, love to children and kindness. Unfortunately in the modern world a lot of people are angry, but I am not of this kind and I wish to see the same form my second half. I wasn’t able to meet such a man in my native country, so I am trying my change here on that site! I will do my best to be a good wife to show care and love for my soulmate, I dream to have a cozy home and to meet my husband with a tasty smell of dinner after his working day! What are you looking for? I do want to know you Write me your number Valentina Spoiler: Received: from VI1EUR04HT171.eop-eur04.prod.protection.outlook.com (2603:10a6:800:a9::28) by VI1PR0101MB2190.eurprd01.prod.exchangelabs.com with HTTPS via VI1PR0802CA0042.EURPRD08.PROD.OUTLOOK.COM; Thu, 8 Aug 2019 21:17:34 +0000 Received: from VI1EUR04FT047.eop-eur04.prod.protection.outlook.com (10.152.28.56) by VI1EUR04HT171.eop-eur04.prod.protection.outlook.com (10.152.28.120) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2157.15; Thu, 8 Aug 2019 21:17:33 +0000 Authentication-Results: spf=pass (sender IP is 209.85.221.66) smtp.mailfrom=gmail.com; live.at; dkim=pass (signature was verified) Quelltext.d=gmail.com;live.at; dmarc=pass action=none Quelltext.from=gmail.com; Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates 209.85.221.66 as permitted sender) receiver=protection.outlook.com; client-ip=209.85.221.66; helo=mail-wr1-f66.google.com; Received: from mail-wr1-f66.google.com (209.85.221.66) by VI1EUR04FT047.mail.protection.outlook.com (10.152.28.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2157.15 via Frontend Transport; Thu, 8 Aug 2019 21:17:33 +0000 X-IncomingTopHeaderMarker: FA94B;SizeAsReceived:2343;Count:16 Received: by mail-wr1-f66.google.com with SMTP id n9so96390741wru.0 for <xxx>; Thu, 08 Aug 2019 14:17:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=date:from:message-id:to:subject:mime-version; bh=n6o3jf7HBcdMLvUJSO5pmKDSfIKRYrHN0LXT5wr1hMQ=; b=VzUPk9LO/9EOZac2q6zPVlzEu41P1LOWlEA7RMFDOAY3gj8cPJe9xjDtyprSqQylnJ LP1J7kaHmFcFwqVSzYw5Pxa1yN+3VhSBlTHWbMwVVdfhwQXgXytzc5aXcH9cV3FtHdfg hIjbBLmu2R9muN2eFtUYkdw19cQZOa7c24bm3FfUqJ8fE5HoC7hxGhwIMAwVJveL0U+A bGEepvJGW4vxtS0YwkNJzBbQJOI3fgWhPfNjI6WLpWT5QuiWI+4O99zfdxcy3IA1CN+v mqPk/4g0VzfsdMSha/5ZiHK8uD6+P20gZRM4hJMCSzHW7xrv0vuOieDqT1hjS9dUqwnF ypNQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:message-id:to:subject:mime-version; bh=n6o3jf7HBcdMLvUJSO5pmKDSfIKRYrHN0LXT5wr1hMQ=; b=fGibxPkghKJ49wHufGTkc1woGTAbnixfEHe7EPNW0sqKPGUQTCUa/TnZ8p7fUxKXuj DIJjr47V2jnTnz4FwkiAjHihRTLtWiOF1Bf7TiXG7QugTA77tXgUwiqeRM1ZnStUmxsu Qx2HxclW8Jl57HAbNTrp3SMEcBVyhVu0wIJL5+zEJ4qMhkrz12JyDKnwrhcVBQyqLQ6H hvI/V67RP1fJMgoRnsfJ0r5yYW8TwsXrg6tT0ybXXnMS0ePvgqRZSquid58ozYNSrLgm unRaW6znaAEudlRsNIMM9pl46ia9uzo2inlEJtVScwn3T075HxMa+2C5pE8oNyXO9e97 hKyQ== X-Gm-Message-State: APjAAAXdKGOn9UHe66hjdPFa2CBzu0453qOPVcxN+lC07/sa9Cq8NAxW 3j9Xaz2PdtyWl5tR+lG4HW99fLSn X-Google-Smtp-Source: X-Received: by 2002:adf:ce03:: with SMTP id p3mr21075988wrn.94.1565299053123; Thu, 08 Aug 2019 14:17:33 -0700 (PDT) Return-Path: kostryvalusha@gmail.com Received: from [10.8.0.3] (kvmde58-16046.fornex.org. [5.187.1.235]) by smtp.gmail.com with ESMTPSA id l8sm189662070wrg.40.2019.08.08.14.17.28 for <xxx> (version=TLS1_1 cipher=AES128-SHA bits=128/128); Thu, 08 Aug 2019 14:17:31 -0700 (PDT) Date: Fri, 9 Aug 2019 00:17:22 +0300 From: kostryvalusha@gmail.com X-Priority: 3 (Normal) Message-ID: <1143143410.20190809001722@gmail.com> To: xxx Subject: Hi xxx MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------0471C10DF114113BE" X-IncomingHeaderCount: 16 X-MS-Exchange-Organization-ExpirationStartTime: 08 Aug 2019 21:17:33.7418 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: f2084b47-f664-478d-46bd-08d71c45d45d X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-Forefront-Antispam-Report: EFV:NLI; X-MS-Exchange-Organization-AuthSource: VI1EUR04FT047.eop-eur04.prod.protection.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-PublicTrafficType: Email X-MS-UserLastLogonTime: 8/8/2019 9:15:05 PM X-MS-Office365-Filtering-Correlation-Id: f2084b47-f664-478d-46bd-08d71c45d45d X-Microsoft-Antispam: 291501072);SRVR:VI1EUR04HT171; X-MS-TrafficTypeDiagnostic: VI1EUR04HT171: X-MS-Exchange-EOPDirect: true X-Sender-IP: 209.85.221.66 X-SID-PRA: KOSTRYVALUSHA@GMAIL.COM X-SID-Result: PASS X-MS-Exchange-Organization-PCL: 2 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Aug 2019 21:17:33.7128 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: f2084b47-f664-478d-46bd-08d71c45d45d X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1EUR04HT171 X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.6751202 X-MS-Exchange-Processed-By-BccFoldering: 15.20.2157.000 X-MS-Exchange-Organization-SCL: 6 X-Message-Info: Q2xl7vgfa0fXF/BYT3R5i0ungS7NsF1rS1yfIm7tless6bx2SDtujg== X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02 X-Microsoft-Antispam-Mailbox-Delivery: 74160)(4920090)(6375004)(4950130)(4990090)(9140004);RF:JunkEmail; X-Microsoft-Antispam-Message-Info: 1UFkKGiOnzWPembKIH0L/OiWEwmdjDKcQrAeYNpq/ptZjOhUHRUr7cFrjedWUbFbjlplLzuQsms=
	« Zuletzt geändert: 12. August 2019 um 10:22 von Webmaster »
	IMG_0_39856647_232__4_.jpg ( 67 KB \| Downloads ) IMG_0_39856647_232__5_.jpg ( 80 KB \| Downloads )
	IP gespeichert

Indikation

Uli General Counsel Offline Beiträge: 30521 Mitglied seit: 17. Januar 2008 Geschlecht:	Re: Valentina <kostryvalusha@gmail.com> Antwort #1 - 09. August 2019 um 10:50
	Herkunft der Mail wird über Deutschland verschleiert: Code IP: 5.187.1.235 Decimal: 96141803 Hostname: kvmde58-16046.fornex.org ASN: 44066 ISP: Fornex Hosting S.L. Organization: Fornex Hosting S.L. Services: None detected Type: Corporate Assignment: Likely Static IP Continent: Europe Country: Germany State/Region: Hesse City: Frankfurt am Main Warten wir die nächste Mail ab, um auszuschließen, dass hier eine professionelle Firma eine Erstmail abgesetzt hat. Vielleicht wird es auch Translationscam.
	« Zuletzt geändert: 12. August 2019 um 10:23 von Webmaster »

	IP gespeichert

Slash Themenstarter Scam Warners Offline I Love Anti-Scam Beiträge: 185 Mitglied seit: 02. Mai 2019 Geschlecht:	Re: Valentina <kostryvalusha@gmail.com> Antwort #2 - 14. August 2019 um 19:39
	Hi dear xxx! Thanks a lot for your mail and a phone number, I would be happy to continue in Whatsapp too. My phone number is +380665370618 Waiting for chating with you)) Valetina Spoiler: Received: from PU1APC01HT113.eop-APC01.prod.protection.outlook.com (2603:10a6:800:be::23) by VI1PR0101MB2190.eurprd01.prod.exchangelabs.com with HTTPS via VI1P194CA0013.EURP194.PROD.OUTLOOK.COM; Mon, 12 Aug 2019 20:57:44 +0000 Received: from PU1APC01FT031.eop-APC01.prod.protection.outlook.com (10.152.252.60) by PU1APC01HT113.eop-APC01.prod.protection.outlook.com (10.152.253.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2157.15; Mon, 12 Aug 2019 20:57:40 +0000 Authentication-Results: spf=pass (sender IP is 209.85.221.54) smtp.mailfrom=gmail.com; live.at; dkim=pass (signature was verified) Quelltext.d=gmail.com;live.at; dmarc=pass action=none Quelltext.from=gmail.com; Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates 209.85.221.54 as permitted sender) receiver=protection.outlook.com; client-ip=209.85.221.54; helo=mail-wr1-f54.google.com; Received: from mail-wr1-f54.google.com (209.85.221.54) by PU1APC01FT031.mail.protection.outlook.com (10.152.252.226) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2157.15 via Frontend Transport; Mon, 12 Aug 2019 20:57:39 +0000 X-IncomingTopHeaderMarker: A1814;SizeAsReceived:2665;Count:18 Received: by mail-wr1-f54.google.com with SMTP id g17so105783094wrr.5 for <xxx>; Mon, 12 Aug 2019 13:57:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=date:from:message-id:to:subject:in-reply-to:references:mime-version; bh=nrMOx38AOIIh2eetTSfpHdKtIClKnBGYVs324E31odg=; b=S4WrvBVsaihlPO4ttC6EzHuqonnjk1iOWcnGeORS1UhvRn8FnMn0mXU8fMcA7fTyIm asE0kL+M2xfGnuqqWGqmKVkgEdCs/jKCgAd5LFQpWTjzx5kmRVoDdG3c5rGkEajIvrs2 rhXFOJeeaXiQiivk7RfFCZZMyU6uWoM3FZPxDLwi1RjK4V2TEz/XJCf4Bm8XO/oe+E2c oMfoCezIvhBW2Ujc/wi/4xHUFfXJyZZcr6ZOdCdYB8kdR1BFRgo6V2/uM8vFWZNBM6bP v7FSXqh/csa2TlIcCrcLEcRxeusHnE41pgDHsSDteWfbc0NRJAXPM9Y2SQn34d5tuwl/ xf1w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:message-id:to:subject:in-reply-to :references:mime-version; bh=nrMOx38AOIIh2eetTSfpHdKtIClKnBGYVs324E31odg=; b=dNT35KoFS0LXdGRmF1g8gj0frfIVgLEe3NR/877ICgq18Bw8NUQjWFGmtfyKqtY3fI /GdQ4OqGFNVnSfhduH7kK397TPT2IV2OfW1mvobCmy/pL9T0/s8i3wWMhXvXcSh3fizJ oQQ5dhURgAG4ZbLHZNQVjRfrzzLX0uy5aBiQKpzy1wDs7MmHt22iChJTK+BK+qinz7vF wE1DY8pqQXet/WKVhxr8nT7Iw4+DXG15yY1fIuUXMFxjRsQS1aR0IYMnloI5DH2gHuK9 M1HeLMJ+1IEtVZ4ttw269u3qiAxeLQtTFPEbNyuoDvzUez1DBhXK5CRO/oxm5/dUGyu2 BCxQ== X-Gm-Message-State: APjAAAWwiUCcOp6IvKMbpyn4QBn/pSGTSj50NCRTlVclIEE5t7BN5XsD m+2PXVVVT0JaDFPniTrMQ+lbrShM X-Google-Smtp-Source: X-Received: by 2002:a5d:6606:: with SMTP id n6mr36749883wru.346.1565643457782; Mon, 12 Aug 2019 13:57:37 -0700 (PDT) Return-Path: kostryvalusha@gmail.com Received: from [10.8.0.3] (kvmde58-16046.fornex.org. [5.187.1.235]) by smtp.gmail.com with ESMTPSA id j20sm15348678wre.65.2019.08.12.13.57.32 for <xxx> (version=TLS1_1 cipher=AES128-SHA bits=128/128); Mon, 12 Aug 2019 13:57:36 -0700 (PDT) Date: Mon, 12 Aug 2019 23:57:30 +0300 From: kostryvalusha@gmail.com X-Priority: 3 (Normal) Message-ID: <1171980060.20190812235730@gmail.com> To: xxx <xxx> Subject: my phne) In-Reply-To: labs.com> References: <1143143410.20190809001722@gmail.com> labs.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------0FC0FC06028A96E0A" X-IncomingHeaderCount: 18 X-MS-Exchange-Organization-ExpirationStartTime: 12 Aug 2019 20:57:40.1052 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: 4ba9ac8b-1731-4c14-c762-08d71f67b68d X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-Forefront-Antispam-Report: EFV:NLI; X-MS-Exchange-Organization-AuthSource: PU1APC01FT031.eop-APC01.prod.protection.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-PublicTrafficType: Email X-MS-UserLastLogonTime: 8/12/2019 8:22:40 PM X-MS-Office365-Filtering-Correlation-Id: 4ba9ac8b-1731-4c14-c762-08d71f67b68d X-Microsoft-Antispam: 291501072);SRVR:PU1APC01HT113; X-MS-TrafficTypeDiagnostic: PU1APC01HT113: X-MS-Exchange-EOPDirect: true X-Sender-IP: 209.85.221.54 X-SID-PRA: KOSTRYVALUSHA@GMAIL.COM X-SID-Result: PASS X-MS-Exchange-Organization-PCL: 2 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Aug 2019 20:57:39.9380 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 4ba9ac8b-1731-4c14-c762-08d71f67b68d X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU1APC01HT113 X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.7262727 X-MS-Exchange-Processed-By-BccFoldering: 15.20.2157.000 X-MS-Exchange-Organization-SCL: -1 X-Message-Info: 199yMmnHa+MWCdXxwLkzCuXx8ZP1XnrDdN/O9nb+gBY/KbdFMMhYpQ== X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0tMQ== X-Microsoft-Antispam-Mailbox-Delivery: 0090)(6225004)(4950130)(4990090)(9110004); X-Microsoft-Antispam-Message-Info: XUdMSWnxJA9zZ8HcOHlmM43QvTpgqdRSzj+Xzg==

	9b58d60a-3438-4d70-b801-62e58afdbd58.jpg ( 251 KB \| Downloads ) IMG_512_08_232__1_.jpg ( 332 KB \| Downloads ) IMG_512_08_232__2_.jpg ( 145 KB \| Downloads )
	IP gespeichert

Slash Themenstarter Scam Warners Offline I Love Anti-Scam Beiträge: 185 Mitglied seit: 02. Mai 2019 Geschlecht:	Re: Valentina <kostryvalusha@gmail.com> Antwort #3 - 14. August 2019 um 19:42
	https://vk.com/elenalashvip


	IP gespeichert

Flame Ex-Mitglied	Re: Valentina <kostryvalusha@gmail.com> Antwort #4 - 20. August 2019 um 20:19
	Hello, my name is Elena, and I was really shocked to see my photos here! I don’t have any idea who is Valentina. And I have never do this crazy things about scam! I have good business, family, husband and kids. So I just want to ask you to delete my photos from here! I can send my private ID card (passport) and you will see who I am! Änderung: Da weder Paß noch ID-Card eintrafen, wurde das Mitglied nirvanisiert.
	« Zuletzt geändert: 27. August 2019 um 08:04 von Webmaster »

	IP gespeichert

Razor Buzz Forum Administrator Paragraphenreiter Öffentlichkeitsarbeit Offline Servus Beiträge: 5947 Standort: Oberpfalz Mitglied seit: 24. April 2008	Re: Valentina <kostryvalusha@gmail.com> Antwort #5 - 20. August 2019 um 21:25
	@ Flame No problem to delete the photos. Send a scan of your passport to abuse@anti-scam.de.


	ICQ IP gespeichert

Webmaster Forum Administrator Offline Abgeschlafft und ausgepufft!! Beiträge: 23881 Standort: Йошкар-Ола Mitglied seit: 06. Januar 2008 Geschlecht:	Re: Valentina <kostryvalusha@gmail.com> Antwort #6 - 21. August 2019 um 09:03
	Zitat: Hello, my name is Elena, and I was really shocked to see my photos here! I don’t have any idea who is Valentina. And I have never do this crazy things about scam! I have good business, family, husband and kids. So I just want to ask you to delete my photos from here! I can send my private ID card (passport) and you will see who I am! Das glaube ich weniger. Hat einer die IP des postings überprüft? Code IP: 188.166.60.227 Decimal: 3165011171 Hostname: 188.166.60.227 ASN: 14061 ISP: DigitalOcean Organization: DigitalOcean Services: None detected Assignment: Likely Static IP Continent: Europe Country: Netherlands State/Region: North Holland Da hat wohl einer unserer speziellen Freunde die Hand im Spiel.


	Homepage Skype/VoIP Facebook IP gespeichert

Uli General Counsel Offline Beiträge: 30521 Mitglied seit: 17. Januar 2008 Geschlecht:	Re: Valentina <kostryvalusha@gmail.com> Antwort #7 - 22. August 2019 um 16:43
	@ Slash Versuche, weiter im Kontakt zu bleiben. Vielleicht bekommen wir irgendwann eine Mail, bei der die Verschleierung versagt hat. Wie es aussieht, ist Flame das Original und die Geschichte wird ein Fall für die ukrainische Staatsanwaltschaft, sofern die nicht korrupt ist. Gibt es ein Profil von einer Datingseite von ihr oder kam die erste Mail aus dem Nichts?


	IP gespeichert

Seitenindex umschalten

Seiten: 1

Thema versenden

‹ Vorheriges Thema | Nächstes Thema ›

Link zu diesem Thema

HTML Code:
BBCode:
URL:

« Übersicht ‹ Forum Top

Top

Anti-Scam » Powered by YaBB 2.6.12!
YaBB Forum Software © 2000-2024. Alle Rechte vorbehalten.

Valid XHTML

Valid CSS

Powered by Perl

Source Forge