Site logo

     


Advert.
Switch to full style
This section deals specifically with online romance scams. The images used by the scammers are stolen from innocent people, usually from their social media pages.
Post a reply

Scammers abusing stolen photos of Maru

Fri Mar 22, 2019 9:28 pm

Email:

Good afternoon. How is it going? I want to make you friendship.. I dream to meet a person on the global web only for for creating a family!!!! I am not married, I do not have a child. You can call me Tatyana!! I'm a kind , faithful girl! I enjoy sports!!!! If you want to continuing our dating, I can write you more about me.. In which city do you living in? I want to know about you!! I ask you to send me your photo!!!! I propose to share photographs!! Waiting for your letter....


Header:

Return-Path: <vosemnafru@yunbex.info>
Received: from yundex.info ([92.63.103.109])
Received-SPF: pass (google.com: domain of vosemnafru@yunbex.info designates 92.63.103.109 as permitted sender) client-ip=92.63.103.109;
Authentication-Results: mx.google.com;
dkim=fail header.i=@yunbex.info header.s=dkim header.b=WgDZaVzu;
spf=pass (google.com: domain of vosemnafru@yunbex.info designates 92.63.103.109 as permitted sender) smtp.mailfrom=vosemnafru@yunbex.info
Received: from [68.68.102.99] (helo=ns1648.ztomy.com) by yundex.info with esmtpsa (TLS1.0:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.84_2) (envelope-from <vosemnafru@yunbex.info>) id 1h7Hwf-00024s-5w forxxx; Fri, 22 Mar 2019 14:02:47
From: sweet <vosemnafru@yunbex.info>
Subject: Good day..
To: xxx
Reply-To: Pretty <vosemnatru@yandex.com>
Date: Fri, 22 Mar 2019 14:04:26
Message-Id: <E1h7Hwf-00024s-5w@yundex.info>

Originating IP: 68.68.102.99
Originating ISP: Egihosting
City: San Jose
Country of Origin: United States

Stolen pictures received with the message:

Image
Image
Image
Image

The pictures belongs to Maru, Fitness / Fashion blogger, and are stolen from the real owner Instagram profile.

oduvanchik051@goooqle.info - oduvanchik051@yandex.com

Tue Mar 26, 2019 7:13 pm

Email:

Greetings you, dear stranger.. How is it going?!?!? I want to make you communication... I want to find a man in the Internet only for a serious relationship!!!! I am a free woman, I have no children! My name is Tatyana. I'm a kind and faithful woman!!!! I like to an active lifestyle. If you would like to continuing this acquaintance, I will write you more about myself!!! Where do you living in??? I am interested to know about your hobbies!!!! Please send me your photos!!!! Let's share fotos!!!! Waiting for your answer....


Header:

Return-Path: <oduvanchik051@goooqle.info>
Received: from yundex.info (yundex.info. [82.146.61.1])
Received-SPF: pass (google.com: domain of oduvanchik051@goooqle.info designates 82.146.61.1 as permitted sender) client-ip=82.146.61.1;
Authentication-Results: mx.google.com;
dkim=pass header.i=@goooqle.info header.s=dkim header.b="qZVPb1/v";
spf=pass (google.com: domain of oduvanchik051@goooqle.info designates 82.146.61.1 as permitted sender) smtp.mailfrom=oduvanchik051@goooqle.info
Received: from ip168.ip-91-134-219.eu ([91.134.219.168] helo=103.105.167.227) by yundex.info with esmtpsa (TLS1.0:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.84_2) (envelope-from <oduvanchik051@goooqle.info>) id 1h8VxM-0004BJ-4U for xxx; Mon, 25 Mar 2019 23:12:34
From: Gorgeous <oduvanchik051@goooqle.info>
Subject: Hello....
To:
Reply-To: Princess <oduvanchik051@yandex.com>
Date: Mon, 25 Mar 2019 23:12:26
Message-Id: <E1h8VxM-0004BJ-4U@yundex.info>

Originating IP: 82.146.61.1
Originating ISP: Jsc Ispsystem
City: n/a
Country of Origin: Russian Federation

Through:

Originating IP: 91.134.219.168
Originating ISP: Ovh Sas
Country of Origin: France

The stolen pictures received with the message are the same ones already reported here.
Post a reply