Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Scammers abusing stolen photos of Kristina K.

This section deals specifically with online romance scams. The images used by the scammers are stolen from innocent people, usually from their social media pages.

Scammers abusing stolen photos of Kristina K.

Unread postby firefly » Thu Mar 14, 2019 8:45 pm

Email:

Good evening. My name is Natalya. I'm just twenty-nine years.
If an admirable companion - I will be happy to talk with you. Let's chat.
If a friend - with great satisfaction I will become one for you. I'm telling you, we'll be pair.
I need to get to know you better.
I like different types of music: when it's chilly - something soft and a little melancholy from the classics,
and when it's clear and sunshine - funny pop music.
I love sitting with a book in a chair late in the evening, I like Tolstoy, Bulgakov.
I like to cook, particularly I am doing good borscht and meat pies. I live with the red cat called Masha.
Please tell me about you.
I really wish to chat with such an interesting and nice person!
Waiting for your reply! Natalya
.

Header:

ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: best guess record for domain of achumba@halfback.dreamhost.com designates 208.113.157.50 as permitted sender) smtp.mailfrom=achumba@halfback.dreamhost.com
Return-Path: <achumba@halfback.dreamhost.com>
Received: from iad1-shared-relay1.dreamhost.com (iad1-shared-relay1.dreamhost.com. [208.113.157.50])
Received-SPF: pass (google.com: best guess record for domain of achumba@halfback.dreamhost.com designates 208.113.157.50 as permitted sender) client-ip=208.113.157.50;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of achumba@halfback.dreamhost.com designates 208.113.157.50 as permitted sender) smtp.mailfrom=achumba@halfback.dreamhost.com
Received: from halfback.dreamhost.com (halfback.dreamhost.com [173.236.184.137]) by iad1-shared-relay1.dreamhost.com (Postfix) with ESMTP id CC1ACB4005F
Received: by halfback.dreamhost.com (Postfix, from userid 12037247) id C68D7E00AC; Thu, 14 Mar 2019 09:20:00
To:
Subject: RE:hi. How u today??? u want to see my photos?
X-PHP-Originating-Script: 12037247:ris.php(1) : eval()'d code
Date: Thu, 14 Mar 2019 09:20:00
From: Natalya Tender <kawynnatasha33@null.net>

Originating IP: 208.113.157.50
Originating ISP: New Dream Network, Llc
City: Brea
Country of Origin: United States

Stolen picture received with the message:

Image

Gallery: https://scamsurvivors.com/piwigo/index. ... egory/1788

The real owner of the stolen picture used is Kristina K. The image was stolen from her social profile.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

womanlxurymusictoo@uymail.com

Unread postby firefly » Mon Oct 12, 2020 7:43 pm

Unsolicited email received:

How about getting to know each other better, interested.
Describe yourself to me a little..
I'm attractive to you, tell me honestly!!


Header:

Return-Path: <apache@www13.pipni.cz>
X-PHP-Script: crystalpool.cz/pepper.php for 138.201.28.198
Date: Fri, 9 Oct 2020 15:32:52 +0200
From: "% Cookie Monster Nataliya %" <womanlxurymusictoo@uymail.com>
Message-ID: <d9fde786f0b2ae503d62d419a790d6e6@crystalpool.cz>
X-Mailer: PHPMailer 5.2.2

Originating IP: 138.201.28.198
Originating ISP: Hetzner Online Gmbh
City: Weinheim
Country of Origin: Germany

Stolen pictures received with the message:

Image

+ the one already reported here.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

natalyafogra44@insurer.com

Unread postby firefly » Mon Oct 12, 2020 7:44 pm

Unsolicited email received:

I really need To find you.
---- When were you born?
How do you like my pictures, I want to know where you live.
Natali


Header:

Received: from chitwood.dreamhost.com (unknown [69.163.152.138])
Subject: Hey!! how a u today??? u want to see my photos??
Date: Sat, 10 Oct 2020 02:46:18 -0700
From: Cookie Monster <natalyafogra44@insurer.com>
Message-ID: <b982fe7fbc3655cc0342e032ebbc0927@danwellman.com>
X-Mailer: PHPMailer 5.2.2

Originating IP: 69.163.152.138
Originating ISP: Dreamhost-as
City: Brea
Country of Origin: United States

Stolen picture received with the message:

Image
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

nataliacereriel49@cheerful.com

Unread postby firefly » Mon Oct 12, 2020 9:56 pm

Unsolicited email received:

How about getting to know each other better, interested.
Tell about yourself, I would listen?
It is important for me to know if you liked me!!


Header:

Received: from canyonville.dreamhost.com (canyonville.dreamhost.com [64.90.48.21])
To:
Subject: RE:Good evening. h a u today???s!
X-PHP-Originating-Script: 2324884:pepper.php(1) : eval()'d code
Date: Fri, 9 Oct 2020 05:59:42 -0700
From: "# Natali Biscuit" <nataliacereriel49@cheerful.com>
Message-ID: <cddf82a5fdc9cb6f72b65151d6741fa8@kokoro-dojo.com>
X-Mailer: PHPMailer 5.2.2

Originating IP: 64.90.48.21
Originating ISP: Dreamhost-as
Country of Origin: United States

Stolen picture received with the message:

Image
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: natalyafogra44@insurer.com

Unread postby firefly » Mon Oct 12, 2020 10:01 pm

Email received:

I want To find happiness.
-- When is your birthday?
Tell me about your life, how you rest.
>>> Natali


Header:

Received: from www13.pipni.cz ([2a00:1ed0:1:500::a023]) id 1kRC4h-0004iV-4V
Subject: hello... h a y todayu want to see my photo
X-PHP-Script: crystalpool.cz/pepper.php for 138.201.28.198
Date: Sat, 10 Oct 2020 12:26:02 +0200
From: Biscuit MadaM <natalyafogra44@insurer.com>
Message-ID: <98f6463563181494abdafb08daeca5de@crystalpool.cz>
X-Mailer: PHPMailer 5.2.2

Originating IP: 138.201.28.198
Originating ISP: Hetzner Online Gmbh
City: Weinheim
Country of Origin: Germany

Stolen picture received with the message:

Image
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: natalyafogra44@insurer.com

Unread postby firefly » Mon Oct 12, 2020 10:13 pm

Email received:

I want To find you.
--- When were you born?
Tell me about your life, how you rest!
Natali


Header:

Received: from canyonville.dreamhost.com (canyonville.dreamhost.com [64.90.48.21])
To:
Subject: RE:Nice day how a y
Date: Sat, 10 Oct 2020 03:39:35 -0700
From: Music Lady <natalyafogra44@insurer.com>
Message-ID: <c1f94fa08cf21f3544d196820764c6d0@kokoro-dojo.com>
X-Mailer: PHPMailer 5.2.2

Originating IP: 64.90.48.21
Originating ISP: Dreamhost-as
Country of Origin: United States

Stolen picture received with the message:

Image
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

mishkal24anataliya@cheerful.com

Unread postby firefly » Fri Oct 23, 2020 7:49 pm

Unsolicited email received:

I really need To find faithful. What time of year is your birthday.

I want to make friends with you! Have a good day!!

How do you feel about my photography... *** Natali


Header:

Received: from users24.heteml.jp (users24.heteml.jp. [157.7.188.225])
Subject: Hi... h a y today?!
Date: Wed, 14 Oct 2020 20:07:23 +0900
From: Girl Honey <mishkal24anataliya@cheerful.com>
Message-ID: <036a9fb5c9fae1f785bbf140ab56ce28@haletoke.com>

Originating IP: 157.7.188.225
Originating ISP: Gmo Internet,inc
City: Tokyo
Country of Origin: Japan

The stolen picture received with the message is already reported here ( Mar 14, 2019).
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: mishkal24anataliya@cheerful.com

Unread postby firefly » Fri Oct 23, 2020 8:23 pm

Unsolicited email received:

I want stamp out reliable. Tell me when is your birthday and how you spent it.

I want to make friends with you!! Have a good day!!

You like my photos. -- NaTashKa


Header:

Received: from chiloquin.dreamhost.com (chiloquin.dreamhost.com [69.163.152.136])
Subject: Nice day h a you?? u want to see my photos??
Date: Wed, 14 Oct 2020 04:15:33 -0700
From: "Kiss YOu*" <mishkal24anataliya@cheerful.com>
Message-ID: <cc52b67fba664ca21ed22eb739a7169d@ipn.gilsson.com>
X-Mailer: PHPMailer 5.2.2

Originating IP: 69.163.152.136
Originating ISP: Dreamhost-as
City: Brea
Country of Origin: United States

Stolen picture received with the message:

Image
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

swinatalya34unytil@engineer.com

Unread postby firefly » Fri Oct 23, 2020 8:34 pm

Email received:

I want to meet you, and expect a photo!!!!
Friend you got a photo of where I am?
Lady Strict, sexy and just soulful!
Send me a photo of your place where you live...
Look in your eyes, they don't lie.


Header:

Received: from canyonville.dreamhost.com (canyonville.dreamhost.com [64.90.48.21])
Subject: RE:Hello! how are u???!!!
Date: Fri, 16 Oct 2020 07:06:27 -0700
From: Muffin Natasha <swinatalya34unytil@engineer.com>
Message-ID: <ac7455816a41e8bbb4d23bcad06986b9@kokoro-dojo.com>
X-Mailer: PHPMailer 5.2.2

Originating IP: 64.90.48.21
Originating ISP: Dreamhost-as
Country of Origin: United States

The stolen pictures received with the message are already reported here ( Mar 14, 2019 and Oct 12, 2020).
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

snowgirlnatali55@techie.com

Unread postby firefly » Fri Oct 23, 2020 8:45 pm

Email received:

I give you my attentio!!
You received a letter with my picture?
wom@N Attractive, at the same time, alone, but caring!
What is the name of your city, it must be beautiful..
Look into my eyes.


Header:

Received: from widmer.dreamhost.com (widmer.dreamhost.com [64.90.48.109]) by pdx1-shared-relay1.dreamhost.com (Postfix) with ESMTP id 59D433000033B
Subject: HELLO!! How u todayu want to see my photos???
Date: Fri, 16 Oct 2020 07:45:45 -0700
From: Sugar Natalya <snowgirlnatali55@techie.com>
Message-ID: <2fdb6ad6edd51cc466e87ec606162716@solar-fissure.com>
X-Mailer: PHPMailer 5.2.2

Originating IP: 64.90.48.109
Originating ISP: Dreamhost-as
Country of Origin: United States

The stolen pictures received with the message are already reported here.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Next

Return to Romance scams.

Who is online

Users browsing this forum: No registered users and 43 guests