ladysweet6@spbmail.org

[jannat]

from: PrettyY <tumad@jjkacekhekaffbge.teens-angels.com>
reply-to: PrettyY <ladysweet6@spbmail.org>
to:
date: Thu, Apr 16, 2015 at 7:11 AM
subject: How are you?
mailed-by: jjkacekhekaffbge.teens-angels.com
signed-by: jjkacekhekaffbge.teens-angels.com


Hello! How are you doing? I write to you with my personal email so write to me at any time.
I will be always glad to answer you. I with pleasure will tell to you about me and about my life.
I send you my photo if it is pleasant to you, I will send to you more. I'm from Russia, I hope this is not a problem for us.
I also will be glad to see your photos.

[firefly]

Additional email address reported online with the same script and the same picture: prettylady7@spbmail.org.

[firefly]

Out of the blue:

Nice to meet you!
What is your name, age and where do you live?
I want to know you better and to tell you more about myself.
I hope you are interested in acquaintance with me too. I am a young lady from Georgia.
I am 28 years old. My measurements are 5'7" height and 124lb weight.
I am attaching photos of mine to this e-mail that you could totally appreciate my appearance.
I am interested very much if you like it or not. I want to meet a good guy for serious relations.
It would be great if you tell me more about yourself and we could communicate. I want to know about your interests, your place of living, maybe your job.
Tell me anything you want to share with me. I’ll be waiting for your answer with impatience and you make me happy if you send your photos.
You can send your answer to this e-mail
Bye-bye!

P.S. Oh dear! I am looking for a man who is ready for serious relations and not younger than 32 years old.
I don’t want to disappoint you but I’ll not answer if you are younger. I am very interested in you.

---
Deniz
denizsu640@gmail.com

Return-Path: <noreply@mailspb.info>
Received: from [88.198.46.19]
From: Deniz <denizsu640@gmail.com>
Subject: Re: tell me more about you..
Sender: noreply@mailspb.info

Originating IP: 88.198.46.19
Originating ISP: Hetzner Online Ag
City: Nürnberg
Country of Origin: Germany

Pictures received with the email:

[firefly]

To convince "me" we were in contact before, "she" put in the same email an exchange of messages "we" supposedly had a year ago, when her initial message was:

> On 30 March 2016 at 18:00, Deniz <denizsu640@gmail.com> wrote:
>
> > Hi, I am sorry that I could not reply you earlier, but it was because I
> > hadn’t seen your letter.
> > It was along ago (almost a one year!!!) and just it happened to be in the
> > SPAM.
> > Really, I don’t know what the reason to set it there was.
> > In fact I hope that my letter will be received by you and not placed in
> > the same folder.
> > Still, I think I will switch off the SPAM filter.
> >
> > P.S. here some of my pics, hope you like it.
> >
> > ---
> > Deniz
> > denizsu640@gmail.com

[firefly]

For bombing their mass-mail messages to the potential victims - mostly people previously targeted in another romance scam, the scammers created a site for the basic email address noreply@mailspb.info:

IP: 88.198.46.19
Originating IP: 88.198.46.19
Originating ISP: Hetzner Online Ag
City: Nürnberg
Country of Origin: Germany

WhoIs:

Domain Name: MAILSPB.INFO
Domain ID: D54637837-LRMS
WHOIS Server:
Referral URL: http://www.ukrnames.com
Updated Date: 2016-03-11T22:10:19Z
Creation Date: 2015-03-03T15:12:48Z
Registry Expiry Date: 2017-03-03T15:12:48Z
Sponsoring Registrar: Center of Ukrainian Internet Names (UKRNAMES)
Sponsoring Registrar IANA ID: 1436
Domain Status: ok https://icann.org/epp#ok
Domain Status: autoRenewPeriod https://icann.org/epp#autoRenewPeriod
Registrant ID: UANS-00001077167
Registrant Name: Alex Bar
Registrant Organization:
Registrant Street: Urb Ponce de Leon
Registrant City: Guaynabo
Registrant State/Province: PR
Registrant Postal Code: 00969
Registrant Country: US
Registrant Phone: +1.7876050327
Registrant Email: rhqq222@yahoo.com

MailsPb.info is hosted in Kharkiv, Kharkivs'ka Oblast', UA at 91.231.86.19 and expires on 2017-03-03.

The same registrant was using few previous fake sites for the same actions, most of those ones being deleted now:

- internetcafespb.com / rentserv.in / spbmail.org - reported also in viewtopic.php?f=11&t=28499 and viewtopic.php?f=11&t=30174
- Supp2.com - expired

The person behind all those fake sites and fake profiles pretending to be women is a male and his online name is Abby Rhq / barryk26 on Skype:

[firefly]

Email:

I am so sorry that I cant write every day..
Tell me more about you and your country..

Return-Path: <noreply@mailspb.info>
Received: from desk-204.mailspb.info (desk-204.rentserv.in. [5.9.255.204])
Received: from [88.198.46.19] (helo=localhost)
by desk-204.mailspb.info with esmtpsa (TLSv1:AES256-SHA:256)
(Exim 4.71)
(envelope-from <noreply@mailspb.info>)
From: Deniz <denizsu640@gmail.com>

Originating IP: 88.198.46.19
Originating ISP: Hetzner Online Ag
City: Nürnberg
Country of Origin: Germany


Picture received with the email:

[firefly]

Email:

I am very glad, that you have answered to me.
I would like to begin concerning you more very much.
Just for you to know…I really want to find the right person for me, whom I can spend the rest of my life.
I guess you understand me, because it is very simple wish.
I am a single. I don't have boyfriend right now.
I am very choosy, so I don’t want to make any mistake in this search. For the very beginning I would like to know everything about you.
My plans are very serious.

Return-Path: <noreply@mailspb.info>
Received: from ns.zone.eu ([217.146.66.65] helo=localhost)
by desk-216.mailspb.info
From: Deniz <denizsu640@gmail.com>
Sender: noreply@mailspb.info

Originating IP: 217.146.66.65
Originating ISP: Zone Media Ou
City: Tallinn
Country of Origin: Estonia

Picture received with the email:

Same picture is part of a gallery used on three different online marriage agency sites, by someone having another name and a different location.

[firefly]

Email:

I live in Georgia (country) I am 28 y.o., my height is 165 cm., weight is
56kg. I have never been married and have no children.
I would very much like to have a close friend.
Some person that will let me cry on his shoulder, who will let me tell him everything, who will manage to calm me down,
someone who will love and to whom I can give my love. I am a very caring person I can devote myself completely to the one I love.
For me it is something special to see the person I like smiling and happy.
As all in loved people I always tend to see the pros. We are not perfect and to love means to accept the way we are.
And what about you?

P.S. do you like my pics?

Return-Path: <noreply@mailspb.info>
Received: from ns.zone.eu ([217.146.66.65] helo=localhost)
by desk-201.mailspb.info
From: Deniz <denizsu640@gmail.com>
Sender: noreply@mailspb.info

Originating IP: 217.146.66.65
Originating ISP: Zone Media Ou
City: Tallinn
Country of Origin: Estonia

Pictures received with the email: