Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Antonina <bauntynina@gmail.com> (Gelesen: 844 mal)
 
Bommo
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 18968
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Antonina <bauntynina@gmail.com>
16. Dezember 2020 um 17:20
 
I cannot access my rosebautina@gmail.com mail. I don't know what happened. So I create a new mail. Please write to me here. I am looking forward to your letter.
Your Nina.

Spoiler:
Return-Path: <bauntynina@gmail.com>
Received: from esja.orangewebsite.com
        by esja.orangewebsite.com with LMTP
        id mB9ZJkgv2l/GySUApuHJtg
        (envelope-from <bauntynina@gmail.com>); Wed, 16 Dec 2020 16:01:12 +0000
Return-path: <bauntynina@gmail.com>
Envelope-to: xxx
Delivery-date: Wed, 16 Dec 2020 16:01:12 +0000
Received: from mail-lf1-f47.google.com ([209.85.167.47]:36568) by
esja.orangewebsite.com with esmtps  (TLS1.2) tls
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.93) (envelope-from
<bauntynina@gmail.com>) id 1kpZEm-00AOgn-AE for
xxx; Wed, 16 Dec 2020 16:01:12 +0000
Received: by mail-lf1-f47.google.com with SMTP id o13so26421003lfr.3 for
<xxx>; Wed, 16 Dec 2020 08:00:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com;
s=20161025; h=date:from:message-id:to:subject:mime-version;
bh=xy28ZDRUUOZxqcNn1/t8TP6BdrSPd2EnpxWSfW78zp8=;
b=LL/7VNlqtk1xurgq0+LXXEi5Qht6MCGWtO+ffAS8PDPTnm1VASLy0DzFTJllOVp4tx
X7dmKZMNuhbNu92ixyQzTc2CTzzk33LLjQOlmVREO0Uapla31TKwpwdzR8irkYiAZXeq
DzKT9pR5AoY8lwaH1eP0HosojiE3fSZ48zVwyl5/oS0pTwXljpC6q/JgLFjmz5szYHf8
pxUHJPf5WPXGzjdzrcK4//k2gNTjZejgKRCObcXUCSJqvyC/+M5gdFW7js7wJl+sm/ag
v/Te7HK9zQDWsf3L8WhhhZfTmFNe6F0RojuJuNdbAKCTd3kvDUiWuOAAC0eVABOn+RoU JYBA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
s=20161025;
h=x-gm-message-state:date:from:message-id:to:subject:mime-version;
bh=xy28ZDRUUOZxqcNn1/t8TP6BdrSPd2EnpxWSfW78zp8=;
b=aK8gqU22lrTRqpESzXpczSaS2kFHan5AzQyiLyamAVE6VpchanCPXyWXAhUMNDRFSs
zYFQUEMrr9nbxbG5x9voLEzgzDO4Ta1MwfSU6q10AQ5NLo2Ox4QpbSaOEGR2QhVpEjur
ldxfVNXOVFU1K4jhFSqId071czuAGyVwtGUYGFdSilwFOJBWGwGuEYoFwMZIkZMmkOwD
UOzNuiQQhlJ0PTsw9TxDOpUnbBBcClPN5ny1LnQ9XrXXZAalW27xYREB/BxD6dtpDMax
2lN0AWvAAk52fXxRIqa8S8JaGwXR4INByLaHnLtcOEhL/GBZmF0FCeMYg/8h+jAub8wB Gpow==
X-Gm-Message-State:
AOAM531XCn0GN4K2VXtSMlyaIFdE3KOVaisXLnFMcHEdy5VegKa8nqzX
83BRSEZd4smfZQQ6K++H6PEBoDPnkq4=
X-Google-Smtp-Source:
 
X-Received: by 2002:a05:651c:1b8:: with SMTP id
c24mr14775382ljn.4.1608134431215; Wed, 16 Dec 2020 08:00:31 -0800 (PST)
Received: from [192.168.0.102] ([85.26.232.255]) by smtp.gmail.com with
ESMTPSA id t5sm269549lfc.79.2020.12.16.08.00.29 for
<xxx> (version=TLS1_2
cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 16 Dec 2020
08:00:30 -0800 (PST)
Date: Wed, 16 Dec 2020 17:00:26 +0100
From: bauntynina@gmail.com
Message-ID: <211981547.20201216170026@gmail.com>
To: xxx
Subject: Good evening my dear xxx.
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------0A915E06525EB97F5"
X-From-Rewrite: unmodified, forwarded message
X-Evolution-POP3-UID: UID81165-1463477672
X-Evolution-Source: 35f605c29ef5a1cc1f927a4ea7f3e584a6d86cd9


------------0A915E06525EB97F5
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


Ein berichteter Wechsel der Mailadresse. Vorgängerthread ist hier:

Antonina <rosebautina@gmail.com>
« Zuletzt geändert: 17. Juli 2021 um 22:35 von Schnitzel »  

bauntynina1.jpg ( 58 KB | Downloads )
bauntynina1.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65734
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Antonina <bauntynina@gmail.com>
Antwort #1 - 16. Dezember 2020 um 17:30
 
Mail über Russland mobil

Code
Alles auswählen
P:	85.26.232.255
Decimal:	1427826943
Hostname:	85.26.232.255
ASN:	31133
ISP:	PJSC MegaFon
Organization:	PJSC MegaFon
Services:	None detected
Type:	Wireless Broadband
Assignment:	Likely Static IP
Continent:	Europe
Country:	Russia
State/Region:	Samara Oblast
City:	Samara 



Zitat:
from [192.168.0.102] ([85.26.232.255]) with ESMTPSA; Wed, 16 Dec 2020 08:00:30 -0800 (PST)
Date: Wed, 16 Dec 2020 17:00:26 +0100
From: bauntynina@gmail.com
  
Zum Seitenanfang
 
IP gespeichert
 
Bommo
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 18968
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Re: Antonina <bauntynina@gmail.com>
Antwort #2 - 16. Dezember 2020 um 17:48
 
I do not know why you did not receive my previous letter. Therefore, I am sending my letter again:

My xxx. Help me!
I am in great pain right now and my eyes are full of tears. I do not want to lose you, but I see no other way out. I have a small problem, but if it is not resolved, I will not be able to come to your country.
I got to Moscow without incident, but I have bad news. Now I am very sad and difficult to say that it seems that we should stop our communication.
The problem is a small amount of money, but I am ashamed to ask you for help. I tried to fix the problem myself, but it didn't work. I am afraid that you will not listen to my problem and will not be able to help me.
You have become a dear person to me, to whom I have a special attraction. Now I am at a loss, afraid of losing you and my future life forever.
I was so stupid that I thought that I would soon meet you and my new life would begin! The problem is that I have a tax debt. The total debt is euro 420. I only have euro 150. But to pay the tax debt I need another euro 270.
I cannot leave the country if I am in debt. This law was adopted due to the fact that people take loans from banks and then do not pay, do not pay for housing and taxes, so that people could not hide from debts in another country. The law says that if a citizen has monetary debts, he cannot leave the country, he will simply be arrested at customs.
Now I cannot continue my journey because of this debt. The debt must be paid first. Can you help me with euro 270?
I tried to find money, but in Moscow I have no acquisitions or friends. I also tried to get money from the program that I travel to you. But I was told that they will pay all my travel expenses, but not my debt!
I really hope for your help, I promise that I will return the money to you as soon as I arrive in Germany and receive euro 7000 at the embassy. But first I have to come. I really hope for your help!
There is a MoneyGram fast money transfer office near the hotel where I am staying. Can you make a money transfer via this service soon?
For a money transfer you need my full name:
Name: Antonina
Middle name: Vladimirovna
Surname: Bautina
And my address of residence: Russia, city Saransk, Lenin street, house 56, apartment 25.
You are the only person who can help me. If you refuse me, then my future will be destroyed, and most importantly, I will not be able to meet with you. I need euro 270 and the problem will be solved.
Please try to help me, I have no one else to turn to. I will be waiting for your reply urgently.
Your Nina.

Spoiler für wie zuvor:
Return-Path: <bauntynina@gmail.com>
Received: from esja.orangewebsite.com
        by esja.orangewebsite.com with LMTP
        id wN1PEkk22l+R8SYApuHJtg
        (envelope-from <bauntynina@gmail.com>); Wed, 16 Dec 2020 16:31:05 +0000
Return-path: <bauntynina@gmail.com>
Envelope-to: xxx
Delivery-date: Wed, 16 Dec 2020 16:31:05 +0000
Received: from mail-lf1-f53.google.com ([209.85.167.53]:34870) by
esja.orangewebsite.com with esmtps  (TLS1.2) tls
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.93) (envelope-from
<bauntynina@gmail.com>) id 1kpZhg-00AiFk-Af for
xxx; Wed, 16 Dec 2020 16:31:05 +0000
Received: by mail-lf1-f53.google.com with SMTP id a9so49858504lfh.2 for
<xxx>; Wed, 16 Dec 2020 08:30:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com;
s=20161025;
h=from:date:message-id:to:subject:in-reply-to:references:mime-version;
bh=YYDaBbQG7Qsjv4GAxzFeIocThbZLV71h2+Q9RJcg/oI=;
b=QRfhynY5R7mGyCSPtn0wLN+IhpD39Bae7BwVbOw5+15Hm4VdAbr+YQx9C/xYsek5Uh
eH9XpwPUa2xfz31zBu9ocvumZJEXpuYxRSOOaHjHgeZflOXO2Ceoz3548kDYyTsWaHtZ
RkYDRkWhQhwfCLOa3rITGBlPgfP3MmwqCsYxAgUdbY6kOhavpT/h27u7F/UAbun8dX+a
Hw8nZMxSMWIJir54MriaHBKfBbgHUSSTOHm8fRe5/Mk+uw57GLxc811XPWPw/hzeNVlY
VMIM5NUz3mefm+S3S/voNsLm5s9GYIvTBH7YlrquOEZ0YbSE1//Hu6fLTZyREVGuIM/A mYlA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
s=20161025;
h=x-gm-message-state:from:date:message-id:to:subject:in-reply-to
:references:mime-version; bh=YYDaBbQG7Qsjv4GAxzFeIocThbZLV71h2+Q9RJcg/oI=;
b=Q8c65pGcqGAOPyuWKHs9Zzz6cdmcMqdiwbBNdvqyMAFA8bqltEBeM/RU8keJVcaDyj
gHvuKQIDEP1NcAIBYOFVAqLRJwe7EavQsdinuUaDWMmuMpPccRhYdnEVO07a+gIwevlX
OQrcuf6CwoHTt1WEOFj0vI6z2zvWF2WFpip29g/6Ip+czU6uxeE0rOGSWXL/N3cQOFLK
G+qmHKhzc60uu3UlHdqKC7rBQhx7gHi1DF2oqeBwdeLakF16igMuT5ard28km+85Jfs+
AeZ7mOyb6hfAscpJmZambwRS8Kdg7SHMGaEv9Kyf74x+Rn4gKxjPTiFDsOLXrL4Fo//D z4Jw==
X-Gm-Message-State:
AOAM533E2/hrNBnlDAFOrhHkuULYZKML23pvmnmkH9owgOEJ3UZwPuud
aTNP8Y4XRTJ4nj9eqfzK0kvaMtOvD9k=
X-Google-Smtp-Source:
 
X-Received: by 2002:a2e:3201:: with SMTP id
y1mr11032516ljy.12.1608136223108; Wed, 16 Dec 2020 08:30:23 -0800 (PST)
Received: from [192.168.0.102] ([85.26.232.255]) by smtp.gmail.com with
ESMTPSA id n1sm277834lfg.162.2020.12.16.08.30.16 for
<xxx> (version=TLS1_2
cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 16 Dec 2020
08:30:22 -0800 (PST)
From: bauntynina@gmail.com
X-Google-Original-From: rosebautina@gmail.com
Date: Wed, 16 Dec 2020 17:30:13 +0100
Message-ID: <457621849.20201216173013@gmail.com>
To: xxx xxx <xxx>
Subject: Dear xxx!
In-Reply-To: <fea47a8a93d757a51695c69b25232a84225aabc7.camel@servicedh.com>
References: <5C0B850B-E5C5-B1D8-A4D5-224A3B8B2949@ig.com.br>  
  <8c1c3cde1badf867893e3729f5f46882042fee5d.camel@servicedh.com>
  <1463213333.20201206225035@gmail.com>
  <6d923e4b7ca966d04d15d61c7a9b64e3babd1825.camel@servicedh.com>
  <42539837.20201207220950@gmail.com>
  <ba7ef3179e2dac6aad198757360de8aa6778b600.camel@servicedh.com>
  <1957813869.20201208173800@gmail.com>
  <c94dde7330edfce4826db504babdd2776d27aa74.camel@servicedh.com>
  <963481548.20201209184300@gmail.com>
  <2982dae4128f63a6e94f3392eabf2504a9414c5c.camel@servicedh.com>
  <1689176249.20201210201330@gmail.com>
  <ee94d55bc04895d5a86d56342e66d79ffd256dd9.camel@servicedh.com>
  <541865540.20201211171045@gmail.com>
  <4c2260b62f72af55c09be63380e09dac9226c36c.camel@servicedh.com>
  <1864817386.20201212164530@gmail.com>
  <fea47a8a93d757a51695c69b25232a84225aabc7.camel@servicedh.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------1280CB02A2D553AEF"
X-From-Rewrite: unmodified, forwarded message
X-Evolution-POP3-UID: UID81175-1463477672
X-Evolution-Source: 35f605c29ef5a1cc1f927a4ea7f3e584a6d86cd9


------------1280CB02A2D553AEF
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
« Zuletzt geändert: 16. Dezember 2020 um 20:39 von Razor Buzz »  

IMG_602.jpeg ( 453 KB | Downloads )
IMG_602.jpeg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65734
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Antonina <bauntynina@gmail.com>
Antwort #3 - 16. Dezember 2020 um 19:36
 
Achtung: 

Der Scammer ist mit einer Emailadresse und innerhalb einer Emailadresse mit unterschiedlichen Bildern unterwegs. 

Externe Outings mit gleichen Bild:

<helenaflower84@gmail.com>
<olha.satrsss@gmail.com> 

Externe Outings des gleichen Scammers:

<olhakukolka@gmail.com>
<flowersolha@gmail.com>

Weitere Themen:

Olha <olha.satrsss@gmail.com>
Antonina <rosebautina@gmail.com>
Polina <polinadancebabe@gmail.com>
Polina <sweetpolina24@gmail.com>
Polina <polinasundancer@gmail.com>
Polina <sweeetisflora@gmail.com>
Polina <polinakameta@gmail.com>
« Zuletzt geändert: 17. Juni 2021 um 13:02 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Razor Buzz
Forum Administrator
Paragraphenreiter Öffentlichkeitsarbeit
*****
Offline


Servus

Beiträge: 5947
Standort: Oberpfalz
Mitglied seit: 24. April 2008
Re: Antonina <bauntynina@gmail.com>
Antwort #4 - 16. Dezember 2020 um 20:46
 
Auswertung des gefälschten russischen Reisepasses:


Passnummer: 72 5491294

Passinhaberin: Antonina Vladimirovna Bautina


Das Teil sieht eigentlich gar nicht mal so schlecht aus. Selbst den Regenbogeneffekt auf der Sicherheitsfolie haben sie mit eingebaut. Schlechter sieht es allerdings aus, sobald es ans Eingemachte geht: In der maschinenlesbaren Zone ist zwar die Passnummer mit Kontrollziffer drin. Auch ein Geburtsdatum steht da - allerdings nicht das Geburtsdatum der guten Antonina! Auch für ein Ablaufdatum hat es noch gereicht - aber auch das ist nicht das des vorliegenden Passes.

Fazit für den Fälscher: Trotz glänzender Ansätze jämmerlich versagt...
  
Zum Seitenanfang
ICQ  
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65734
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Antonina <bauntynina@gmail.com>
Antwort #5 - 17. Juni 2021 um 12:34
 
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema