Template wählen: 
Sprache wählen:
Google

World Wide Web anti-scam


 ‹ Vorheriges Thema | Nächstes Thema ›
Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Yuliia <yuliiacompttion@gmail.com> (Gelesen: 365 mal)
 
Etching9110
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 305
Mitglied seit: 11. August 2023
Geschlecht: männlich
Yuliia <yuliiacompttion@gmail.com>
21. September 2023 um 18:56
 
Hi, XXX, how nice to get your answer, It's unexpected
To be honest, I doubted that you would answer me. I turned to an online dating agency in order to find a man. I paid $50 and they sent you an email.
It took me a long time to decide on this step. And I really hope I won't regret it.
XXX my intentions and goals are serious.
My name is Yuliia, I am 30 years old, I am from Kiev, this is the capital of Ukraine, I live and work here too. I'm writing to you and, frankly, I'm a little worried
because a good first impression is very important and I want to interest you 
I will send you my photos and hope that you will like me and receive your reply letter.
I really want to get to know each other better and I am very interested in establishing a pleasant communication.
I'm lonely, and I'm interested in hearing your story... I can't wait for your answer

P.S. could you send your photos too, so that I understand who I'm communicating with

Spoiler:
Return-Path: <yuliiacompttion@gmail.com>
X-Original-To: xxx@xxx.xx
Delivered-To: xxx@xxx.xx
Authentication-Results: mailin029.protonmail.ch; dkim=pass (Good 2048
    bit rsa-sha256 signature) Quelltext.d=gmail.com Quelltext.a=rsa-sha256
Authentication-Results: mailin029.protonmail.ch; dmarc=pass (p=none dis=none)
Quelltext.from=gmail.com
Authentication-Results: mailin029.protonmail.ch; spf=pass smtp.mailfrom=gmail.com
Authentication-Results: mailin029.protonmail.ch; arc=none smtp.remote-ip=209.85.208.196
Authentication-Results: mailin029.protonmail.ch; dkim=pass (2048-bit key)
Quelltext.d=gmail.com Quelltext.i=@gmail.com Quelltext.b="s2DFi57m"
Received: from mail-lj1-f196.google.com (mail-lj1-f196.google.com [209.85.208.196])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
  key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No
client certificate requested) by mailin029.protonmail.ch (Postfix) with ESMTPS id
4RkrSq1RKMz9vNPq for <xxx@xxx.xx>; Mon, 11 Sep 2023 15:37:47 +0000 (UTC)
Received: by mail-lj1-f196.google.com with SMTP id 38308e7fff4ca-2b703a0453fso77750591fa.3
        for <xxx@xxx.xx>; Mon, 11 Sep 2023 08:37:47 -0700 (PDT)
Received: from [192.168.0.253] ([77.40.3.78])
        by smtp.gmail.com with ESMTPSA id
o1-20020a056512050100b005007fc9ccd0sm1367239lfb.113.2023.09.11.08.37.44
        for <xxx@xxx.xx>
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Mon, 11 Sep 2023 08:37:44 -0700 (PDT)
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20221208; t=1694446666; x=1695051466; darn=pm.me;
        h=mime-version:references:in-reply-to:subject:to:message-id:from:date
         :from:to:cc:subject:date:message-id:reply-to;
        bh=pbymTi9typIudYLhWypk2VZzVZX6vWSaqoLdZ4BBLho=;
        b=s2DFi57mT2aK7NpOasNokL/pkkyuDiqBXUJZw9K47TZXORRpx9rz1mKha4Upg1CQXF
         FQRmjk8PUnIUWj9OqtCwlF/a17v9u2MrMU/u/VXvFcbmrfWrxAZqePLnX2EpGd/qBHqb
         t2ud7vysT8kiviHorL4AAQu9MAnDYeHQMvRHkpJU8BTUrM28eFnNis8fXu/ZN2OM1+vm
         KC9WhXVCD88kTNfDweN/btP+ifrUwMKjwhgl+dx6uf1pLT6oOv78AmjsSuCYdOt38AHH
         D4vhfVJ0hLy9AB6f8qGgiQUtXuNRQm0IcgcsfaSc93LMUdiDwob/UIUp49VV+QtA+Zro
         b7tA==
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1694446666; x=1695051466;
        h=mime-version:references:in-reply-to:subject:to:message-id:from:date
         :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
        bh=pbymTi9typIudYLhWypk2VZzVZX6vWSaqoLdZ4BBLho=;
        b=OC+iAXJzpneKW0TjBrvEHdEugnvNqzDpSdZ/DU9dBP3bvyIVDi39Yq5CXuae5UQIm9
         4w0nr2dQHBrIQGudHRqOzjD+cJ4EMY7IEykPXPejV29QlCdFA/A59dVgja5eQnHFk8gE
         8N10pugSoljHSq4b+XVjyVvzER5TwB2Z9qRFTbdMtN+OhlxrtpDA8RfkS6YCqVx7JbHB
         ts+qt7wLa12D2NNM0rfHM1n7ly4DrdEUzPWPfC6/FzbDj7mQuBQMavScssK6J+lpafVt
         3wMV/g3/oQWC8VBeQhw2E/GT3KZHs8vw7WnA9CbGNP4DL1bVdqMjLkmLmPdpiKCOgSgB
         TTsQ==
X-Gm-Message-State: AOJu0YwBAxMUkpaFhHtQGfwMdiMUcMyCHeVkn7NbJw/tCB2lHMHJgAba
G6+AC0WpcTSExvabukxLlsb0Rn3hjZ9wuQ==
X-Google-Smtp-Source: 
X-Received: by 2002:a05:6512:3ba9:b0:502:c950:592e with SMTP id
g41-20020a0565123ba900b00502c950592emr109041lfv.25.1694446665845;
        Mon, 11 Sep 2023 08:37:45 -0700 (PDT)
Date: Mon, 11 Sep 2023 18:37:44 +0300
From: yuliiacompttion@gmail.com
Message-Id: <1462552396.20230911183744@gmail.com>
To: xxx@xxx.xx
Subject: Re: Hi
In-Reply-To: 0UPwwJ6InSflf67Zun_fIaXX_2_0=@pm.me>
References: 0UPwwJ6InSflf67Zun_fIaXX_2_0=@pm.me>
Mime-Version: 1.0
Content-Type: text/plain
X-Rspamd-Queue-Id: 4RkrSq1RKMz9vNPq
X-Rspamd-Server: cp3-mailin-029.plabs.ch
X-Spamd-Result: default: False [0.99 / 25.00]; INTRODUCTION(2.00)[];
DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20221208];
R_SPF_ALLOW(-0.20)[+ip4:209.85.128.0/17:c];
MIME_GOOD(-0.10)[multipart/mixed,text/plain]; BAYES_HAM(-0.01)[46.18%];
FROM_EQ_ENVFROM(0.00)[]; NEURAL_HAM(-0.00)[-1.000]; RCVD_TLS_LAST(0.00)[];
ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US]; FROM_NO_DN(0.00)[];
RCVD_COUNT_TWO(0.00)[2]; ARC_NA(0.00)[]; RCPT_COUNT_ONE(0.00)[1];
MID_RHS_MATCH_FROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~,3:~];
RCVD_VIA_SMTP_AUTH(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; TO_MATCH_ENVRCPT_ALL(0.00)[];
PREVIOUSLY_DELIVERED(0.00)[xxx@xxx.xx]; HAS_ATTACHMENT(0.00)[]; TO_DN_NONE(0.00)[];
RECEIVED_SPAMHAUS_PBL(0.00)[77.40.3.78:received]
X-Rspamd-Action: no action
X-Pm-Spam:
« Zuletzt geändert: 21. September 2023 um 19:38 von Stiray »  
IMG_1309.JPEG ( 173 KB | Downloads )
IMG_1309.JPEG
IMG_1387_001.JPEG ( 144 KB | Downloads )
IMG_1387_001.JPEG
Zum Seitenanfang
 
IP gespeichert
 
Etching9110
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 305
Mitglied seit: 11. August 2023
Geschlecht: männlich
Re: Yuliia <yuliiacompttion@gmail.com>
Antwort #1 - 21. September 2023 um 18:57
 
My beloved, can you help me?? Or am I wrong?
I'm sorry, I don't know what you need to say. my darling, my darling, my beauty, I was so happy to read your letter. you gave me hope. I was very glad that you responded to my request and did not leave me alone with my problem. I am so grateful to you for your responsiveness. I can see that you're serious about me. I won't get tired of thanking you, my dear! after all, you're helping us to be together, and that means a lot to me. My dear, I am sending you my bank account details. Thanks! I won't get tired of saying thank you for your help! you are my savior! I am very nervous and worried that everything could collapse. I will be insanely grateful to you, dear, for your help and I will not get tired of thanking you!! I want so much now just to wrap myself in your arms and feel your warmth, feel calm and safe next to you. I want to be with you so much right now! My beloved, I will wait for an answer from you. I hope you will please me with good news. My favorite, or to make it all faster, you can use Western union, because it is a fast payment system! Only my data is needed there: SHATROVA YANA , the country of Ukraine, the city of Kiev, 38 Taras Shevchenko Boulevard street. It will be better and faster this way! Don't forget the most important thing is to send me a receipt! I'm so grateful to you, I can't find the words! I forgot to say in general I need 360 dollars.
here are my bank account details :
Beneficiary: SHATROVA YANA
Beneficiary's Bank: JSC CB PRIVATBANK
Bank address: 1D HRUSHEVSKOHO STR., KYIV, 01001, UKRAINE
Account number: 4149 4993 8936 0627
IBAN: UА743052990000026200904103367
SWIFT CODE/BIC: PBANUA2X

Correspondent Bank: Citibank N.A., NEW YORK, USA
SWIFT CODE/BIC: CITIUS33
Account of the beneficiary's bank in the correspondent bank: 36445343

Spoiler:
Return-Path: <yuliiacompttion@gmail.com>
X-Original-To: xxx@xxx.xx
Delivered-To: xxx@xxx.xx
Authentication-Results: mailin035.protonmail.ch; dkim=pass (Good 2048
    bit rsa-sha256 signature) Quelltext.d=gmail.com Quelltext.a=rsa-sha256
Authentication-Results: mailin035.protonmail.ch; dmarc=pass (p=none dis=none)
Quelltext.from=gmail.com
Authentication-Results: mailin035.protonmail.ch; spf=pass smtp.mailfrom=gmail.com
Authentication-Results: mailin035.protonmail.ch; arc=none smtp.remote-ip=209.85.167.66
Authentication-Results: mailin035.protonmail.ch; dkim=pass (2048-bit key)
Quelltext.d=gmail.com Quelltext.i=@gmail.com Quelltext.b="Me4G814P"
Received: from mail-lf1-f66.google.com (mail-lf1-f66.google.com [209.85.167.66]) (using
TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
  key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No
client certificate requested) by mailin035.protonmail.ch (Postfix) with ESMTPS id
4RqqDV3kQ7z9vNQ1 for <xxx@xxx.xx>; Tue, 19 Sep 2023 17:59:22 +0000 (UTC)
Received: by mail-lf1-f66.google.com with SMTP id 2adb3069b0e04-50306b2920dso98360e87.0
        for <xxx@xxx.xx>; Tue, 19 Sep 2023 10:59:22 -0700 (PDT)
Received: from [192.168.0.253] ([77.40.15.196])
        by smtp.gmail.com with ESMTPSA id
f25-20020a19ae19000000b004fb8a2b9485sm2371994lfc.248.2023.09.19.10.59.20
        for <xxx@xxx.xx>
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 19 Sep 2023 10:59:20 -0700 (PDT)
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20230601; t=1695146361; x=1695751161; darn=pm.me;
        h=content-transfer-encoding:mime-version:references:in-reply-to
         :subject:to:message-id:from:date:from:to:cc:subject:date:message-id
         :reply-to;
        bh=+ox+K4ouIodXbyv6V3J+z/uV5tjFbNlLDfLnYUrZu2c=;
        b=Me4G814PUzm/3h9kbjV99RvghXRs0iH6sk68G6xpx459+ei5ZeotnuU7/wTYc7/06J
         79QkuyYIrqGcTPA+6roOb9kp0ONMGP96jn7XTpIWW1y3azSLF7wh9K3ah2RfKEZVT0YB
         /mItw5+NuUtqRgiwZ5PuBzC3xqraT4BTI+r9G8fDOgQXQUvntCYO1wpZ9D6EzhlMob0W
         Cv5bUhqi67rybG89HepXVYBtaSLyGw+r7r//UEzhChkxGryi3vaOI/h1kW5JTyqtySWd
         dO7oIy2gHSj4kQGDzMP2VYDs93LGs3+8XWad8SPSVwxGDBDTdLKPx60NaHVJH7Y7Oa7S
         Qyjg==
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1695146361; x=1695751161;
        h=content-transfer-encoding:mime-version:references:in-reply-to
         :subject:to:message-id:from:date:x-gm-message-state:from:to:cc
         :subject:date:message-id:reply-to;
        bh=+ox+K4ouIodXbyv6V3J+z/uV5tjFbNlLDfLnYUrZu2c=;
        b=LalwRsRN4NVq8hKgAjGlL6IfoiRHscUmQnitSBshWoXCYUOeQqaUg8nxVLXpp68eoO
         tS5yIa7JCo/NKJOezZjLCx3BHLkV6syFdIQw/VAAoieLecmC4X1sCj8Y2fyXoE0dDztc
         AB8u2yTvP/j0VCSn6Mp34YduyCF4Y2H0QEm36lSFYMsnOGmLgSiKmCa02nvf3fm+KlGi
         Ikd/Trlwq9WSs4jm2JddfPCU3oYb3K1DYO78/1d5wL0TrJv16hq65jnNX9AaUwVGp5CB
         c88zRGYTee1ZNIyrNXTEPaqz8UMA0Jxge1vAKEJID8FwjBy5Kj6Cr4GF0o6sIapN7yFu
         O23A==
X-Gm-Message-State: AOJu0Yxx3Iohd0WYUPDTwz1YvJ0dF7e+HFneaNkYO5Z6XZREdZSBduyy
JXKPBHbn89mjCc5DJvu4H9bj2ln6Be+okw==
X-Google-Smtp-Source: 
X-Received: by 2002:a05:6512:3b0c:b0:503:2879:567 with SMTP id
f12-20020a0565123b0c00b0050328790567mr158711lfv.28.1695146361260;
        Tue, 19 Sep 2023 10:59:21 -0700 (PDT)
Date: Tue, 19 Sep 2023 20:59:18 +0300
From: yuliiacompttion@gmail.com
Message-Id: <1536448614.20230919205918@gmail.com>
To: xxx@xxx.xx
Subject: Re: Hi
In-Reply-To: kbU5ty_pKt13egiQ5D11dPgIXryw=@pm.me>
References: 0UPwwJ6InSflf67Zun_fIaXX_2_0=@pm.me>
  
TeV7KcAjYMD6tOFCwWcuoQ7dFdr0=@pm.me>
  <1894271210.20230916121403@gmail.com>
 
uEXawAVS2jxAF5tf63HENg8Cm7Po=@pm.me>
  <44836680.20230917130532@gmail.com>
 
2Iq2gBPLiMpMlMvoQ-cKf_sUcn58=@pm.me>
  <38841851.20230918125821@gmail.com>
 
Kvz1HGlocZk5w2nQt-TqSdKyr4RI=@pm.me>
  <1635256705.20230919122118@gmail.com>
 
kbU5ty_pKt13egiQ5D11dPgIXryw=@pm.me>
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
X-Pm-Spam:
« Zuletzt geändert: 21. September 2023 um 19:39 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Etching9110
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 305
Mitglied seit: 11. August 2023
Geschlecht: männlich
Re: Yuliia <yuliiacompttion@gmail.com>
Antwort #2 - 21. September 2023 um 18:58
 
My dear this is my mom! Because my account cannot accept international transfers! How are you doing?

The Passport

« Zuletzt geändert: 21. September 2023 um 20:28 von Razor Buzz »  
Passport_yuliiacompttion_001.jpg ( 330 KB | Downloads )
Passport_yuliiacompttion_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 66446
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Yuliia <yuliiacompttion@gmail.com>
Antwort #3 - 21. September 2023 um 19:46
 
Die Bilder wurde bei Ekaterina Zvereva / Екатерина Зверева aus Kotelnitsch geklaut.

Екатерина Зверева / Катя Зверева / Katya Zvereva, 26 октября 2001, Котельнич

https://vk.com/id180783390 gleiche Daten, nur Fremdbilder
https://vk.com/id202223691 Kinderprofil
https://vk.com/murrrka2222
https://vk.com/id428047681 numerische ID
https://ok.ru/profile/531363514142

Externe Outings:

<mariiacherryy@gmail.com> <mariiasunnydays@gmail.com> <lovelyymariiia@gmail.com> 
<kateryna.angel@outlook.com> <mariiakolswe@outlook.com> <markiss.dream@outlook.com>
<mariiapretswe@outlook.com> <mariia.kisa.love@outlook.com> <marushka.kisa.dream@outlook.com>
<mlenmariia@outlook.com> <grafmariia@outlook.com> <grufmariia@outlook.com>
<milomariia@outlook.com> <mariiacharm@outlook.com> <mariiakryi@outlook.com>
<mariiakruf@outlook.com> <mariiacharming@outlook.com> <mariiakindsoul@outlook.com>
<mari.dance.kiss@outlook.com> <mariia.kisss@outlook.com> <mariiakopert@outlook.com>
<mariiasus@outlook.com> <mariia.culte@outlook.com> <mariia.kiss@outlook.com>
<mariianyammy@outlook.com> <mariiapie@outlook.com> <mariiaorkn@outlook.com>
<maru.dream.kiss@outlook.com> <mariiawem@outlook.com> <mar.kiss.love@outlook.com>
<mariianesa@outlook.com> <mariia.piot@outlook.com> <mariia.reut@outlook.com>
<mariia.utia@outlook.com> <marianafilitil@outlook.com> <mariiasky@ukrbist.com>
<grif.mariia@outlook.com> <mariia.graf@outlook.com> <mariia.gruf@outlook.com>
<mariiaeri@outlook.com> <mariiafytu@outlook.com> <mariiaorla@outlook.com>
<mariiachovany@outlook.com> <mariiabris@outlook.com> <mariiaushka1@outlook.com>
<mariiaskil@outlook.com> <mariia.libre@outlook.com> <mariiawaters@outlook.com>
<mariia.nrodi@outlook.com> <mariiakatilinny@outlook.com> <mariiaaqrt@outlook.com>
<mariia.dexina@outlook.com> <dariachiji@outlook.com> <mariiabunnylike@liveukr.com>
<mariialovekiss@outlook.com> <mariiamashunya@outlook.com> <mariiamalinka@outlook.com> 
<mariia.kisslove@outlook.com> <mariiablugt@outlook.com> <mariiahim@outlook.com>
<mariiahimi@outlook.com> <mariiahomin@outlook.com> <annagrennvet@outlook.com>
<mariiagilkins@outlook.com> <mariia@liveukr.com> <mariia.chalotty@outlook.com>
<mariia.caletto@outlook.com> <mariia.xfox@outlook.com> <mariia.marveto@outlook.com>
<mariiamickeymouse@outlook.com> <mariiayummy@outlook.com> <mariiabravetto@outlook.com>
<mariia.bert@outlook.com> <mariiaric@outlook.com> <mariia.kimito@outlook.com>
<mariiabrown@outlook.com> <mariiavollak@outlook.com> <mariia.wing@outlook.com>
<mariiasweetsunny@outlook.com> <velbs.4.2@googlemail.com> <velbs42@googlemail.com>
  
Zum Seitenanfang
 
IP gespeichert
 
Razor Buzz
Forum Administrator
Paragraphenreiter Öffentlichkeitsarbeit
*****
Offline


Servus

Beiträge: 5951
Standort: Oberpfalz
Mitglied seit: 24. April 2008
Re: Yuliia <yuliiacompttion@gmail.com>
Antwort #4 - 21. September 2023 um 20:33
 
Auswertung des gefälschten ukrainischen Reisepasses:


Passnummer: FF310266

Passinhaberin: Yuliia Prudnikova


Ach ja - Passfälschen ist nicht jedermanns Sache.

Auf den ersten Blick fällt auf, dass die Zeichen im maschinenlesbaren Bereich nicht immer genau untereinander stehen - damit steht das Ergebnis eigentlich schon fest.

Wenn man genauer schaut, dann merkt man auch, dass der verhinderte Meisterfälscher die falschen Daten in die maschinenlesbare Zone geschrieben hat. Vermutlich ist die zweite Zeile der MRZ von einem Originalpass - ich bin aber zu faul nachzurechnen weil das Teil sowieso falsch ist.
  
Zum Seitenanfang
ICQ  
IP gespeichert
 
Webmaster
Forum Administrator
*****
Offline


Abgeschlafft und ausgepufft!!

Beiträge: 23882
Standort: Йошкар-Ола
Mitglied seit: 06. Januar 2008
Geschlecht: männlich
Re: Yuliia <yuliiacompttion@gmail.com>
Antwort #5 - 21. Dezember 2023 um 07:20
 
Dieses Thema wurde in dieses Forum von [07] Scammer using Pictures by ??? [move by] Webmaster.
  
Zum Seitenanfang
HomepageSkype/VoIPFacebook  
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
‹ Vorheriges Thema | Nächstes Thema ›
 
  « Übersicht ‹ Forum Top  

Anti-Scam » Powered by YaBB 2.6.12!
YaBB Forum Software © 2000-2024. Alle Rechte vorbehalten.

Valid RSS Valid XHTML Valid CSS Powered by Perl Source Forge