Hello

[Kelp444]

hi i'm new here, i'm not sure if this is the right place to be posting this but i'm sure the moderator will correct me if i'm wrong,

Hi Everyone, i'd like to briefly introduce myself i'm an English guy living in France and the other day i received an e-mail from Dina, where the hell they/she/he got my
e-mail from i don't know as i'm not registered on any dating sites, i'm married (happily) and the only groups i belong to are discussion groups, anyway i have heard alot about the dating scams/pro daters/Nigerian gold/diamond mines on various web sites but this is the first time i have received a message from one, i have done a search for the e-mail address but haven't turned up anything (it is probably a newly created one) it is blatently a scam as i have seen this message on so many sites before. All i am actually doing here is posting the e-mail address to forewarn anybody just in case this person/people decide to use this address using a slightly more original (convincing) message. the address is dinara@freemailserv.net

The first message i received (sorry i dumped it) went on about how the person really likes me bla bla bla to which i replied :

how do you know you like me?, you don't even know me, you don't
even know if i'm male or female fish or fowl.

and this is what i got as a response, obviously didn't read my reply, i have not copied it in it's entirity as i'm sure you've all seen it a hundred times

Hi my new friend
Im glad to see that you have decided to reply,I see it is very short
 letter.
It is all right because you are astonished to get my letter.
I want you to know that I have only good intentions and I have not any
 secrets.
The thing is that I will work in your country for three months or so
 and
I would like to meet a nice man to fall in love or just be closest
 friends.
I don't want to live in Russia because I have not any chances here,
it is hardly possible to explain from first time but I want you to know
 my plans.
I will work in any shop, bar or restaurant the agency that i am going
 through will suggest me some locations.

OK said my piece, just wanted to circulate the email address. Cheers, Kelp.

[SANDRO43]

Thanks for the heads-up Kelp (from Essex ?), and welcome to RWD. Yes, definitely a typical scammer's introduction & follow-up, the latter completely disregarding whatever you may have written in your response.

[Kelp444]

Hi Sandro43,
Thanks for the welcome, i was born in london but spent my school years in Essex (your quite correct! ) before moving over to France.
I actually replied to the message i pasted in my post still waiting for a reply
(they/she/hairy Boris must be really busy trying to scam as many as possible). i've got my fake photo's and personna all ready, i'm going to play along i thought what the f**k, it's kinda fun as i'm not looking for anyone and not emotionally involved, i really feel for the guys that have believed they've found someone only to get stung. Kelp.

[Kelp444]

Hi, i have attached (hopefully) two pictures i was sent, has anybody been sent these pictures before or seen them anywhere, the second picture, i could be wrong but it looks like a photo shoot or something as the people in the back ground seem to be watching something. I'm playing this by ear at the moment as this person is definitely not chatty at all here's the message that came with the photo's.

"Hello! I have forgotten to send the photos It I."

If anyone has seen her please let me know.

cheers. Kelp

[SANDRO43]

the second picture, i could be wrong but it looks like a photo shoot or something as the people in the back ground seem to be watching something.

Could be a wedding (or funeral ?), considering the formal black dress, and she certanly doesn't look a very outgoing and chatty type there. Never seen her before, but I wouldn't waste much time with this would-be bartender/waitress, unless you fancy a little game-playing .

[Kelp444]

Thanks for your insight Sandro43

[wxman]

For all we know, she doesn't even know her pictures are being used. It could be an ex boyfriend, ex husband, or a former friend, who took the pictures, and are now using them to scam men. So many possibilities, but no real possibility. My guess is a funeral, with all the people in the background holding flowers.

[troutrivers]

Dating scammers in Russia typically use 'BAT' email software. Of course any unslocited email is a big flag to begin with, as another post mentions about the Nigerian scammers. Strange how they always seem the find you as a possilbe next of kin, dear one, true friend in God, etc.

Getting back to the Russian dating scammers, look at any suspect email with full headers - if you use Yahoo mail it is easy - the button for full header is in the lower right. When the full head displays read a few lines down and 99.9% of the time you will see 'BAT' and the version, often Professional. Whatever version the scammer is using, this is a mass email management software package, and is not cheap. The only reason why the sender - be it he or she - is using BAT is because the person is sending dozens if not hundreds of email messages daily and this program allows the scammer to manage the mass volume of mail he/she is sending - and on the scammers part - hopefully receiving.

This allows the scammer to send the scam messages to any given mark in the correct order. The scammer is probably working several marks at any given time, so it behoves the scammer not to re-send the intro letter to a mark that he/she has been working for several messages, just at a new mark should not get an advanced message that solicts funds right away either.

One such scammer once told me "this is the email program at the Internet cafe I use, so I have no choice". I wrote back and asked if that excuse had been hatched at a skull session, as it was plausible except that it meant that the cafe had purchased something that was totally unneeded, and by the way I had used cafes in Russia, Ukraine. Lithuania and other places and had never found an internet cafe that had added such uneeded software. The scammer gave up on me after that.

Also, looking at the full header yeilds the originating ISP. This is another way to check for a scammer. As an example, I was contacted in a board just last week by a 'female' whose profile said that she was in Woburn, MA - just outside of Boston. So not far from me at all! I gave the person my email, and soon received an email that traced to London, England. For a few giggles I let the person chat in Yahoo for a few minutes. The scammer was clearly flumoxed when I asked what 'she' was doing in England. Three different answers came back, the final one being "oh, I am actually in Africa visiting my moma coz she needs......."

So good luck and goodbye scammer. And oh, by the way, I forwarded the email with full headers to abuse@yahoo.com (and if hotmail used, abuse@hotmail.com too). They will shut off access to the account. Of course the scammer can make a new acount - and sometimes I get a scam email that begins with "Good news, I have a new email account! You can write to me......"

So the scammer gets a message "Good news, you will have another new email account next week! And then another, and another and as many as you want so long as you keep me in your mailing list!"

[Kelp444]

Hello everyone, I'd like to thank you all for your replies and insights, on further examination I think you are right Sandro43 and wxman, it is a funeral or something of that nature.
I received another email over the weekend I have done as you suggested troutrivers and looked at the full header here is the result, and thanks for the info very interesting.

Printable View This message is not flagged. [ Flag Message - Mark as Unread ]
From Dina Mon Oct 29 22:09:09 2007
X-Apparently-To:   kelp444@yahoo.com via 68.180.197.91; Sat, 29 Sep 2007 23:31:55 -0700
X-YahooFilteredBulk:   77.91.228.130
X-Originating-IP:   [77.91.228.130]
Return-Path:   <dinara@freemailserv.net>
Authentication-Results:   mta502.mail.mud.yahoo.com from=freemailserv.net; domainkeys=neutral (no sig)
Received:   from 77.91.228.130 (EHLO mailzervis.net) (77.91.228.130) by mta502.mail.mud.yahoo.com with SMTP; Sat, 29 Sep 2007 23:31:52 -0700
Received:   (qmail 15493 invoked by uid 89); 30 Sep 2007 13:31:08 -0000
X-Mail-Scanner:   Scanned by qSheff-II-2.1-r2 (http://www.enderunix.org/qsheff/)
Received:   from unknown (HELO HOME-358DD12C3B) (83.149.87.156) by mail.mailzervis.net with SMTP; 30 Sep 2007 13:31:05 -0000
Date:   Tue, 30 Oct 2007 10:09:09 +0500
From:   "Dina" <dinara@freemailserv.net>   Add to Address Book   Add Mobile Alert

2,300]X-Mailer:   The Bat! (v3.99.1) Professional
Reply-to:   Dina <dinara@freemailserv.net>
X-Priority:   3 (Normal)
Message-ID:   <1353831405.20071030100909@freemailserv.net>

As a point of interest (and for future reference) if a message has the BAT professional as highlighted in red, in the message header does that automatically mean scammer? in the last message there were three photos attached (here are two of them), with an extremely long message, which i won't post (unless anyone is interested) in the message some of my question were answered but I'm not sure if that was just a fluke or coincidence, as the rest of it is quite vague and just waffled on i.e "want to meet my right man", "it would be so great to meet my love" etc. etc. "comme d'habitude".
Cheers.
Kelp.

[jb]

http://www.delphifaq.com/faq/russian_marriage_scams/f2195.shtml?p=4

I just googled the IP addy and look what jumped up.

[SANDRO43]

I just googled the IP addy and look what jumped up.

JB, an IP address cannot tell much about an individual, except where she is writing from. In this case:

inetnum: 77.91.228.32 - 77.91.228.255
netname: WEBALTA-NET
person: Dmitry Lazarev
address: WEBALTA / Internet Search Company
address: Andropova pr. 22
address: Moscow, Russia

WEBALTA-NET (Internet Search Company ?) could well be a provider, with those 223 IPs assigned.

Tatyana Davydova's photos do not much look like Dina's (though one of the two recent ones doesn't, either), and the email address (davy_777@yahex.net) is also different.

Kelp, laisse tomber .

[Kelp444]

oui, Je comprendre, merci Sandro43

but just out of interest i wonder who the "person: Dmitry Lazarev" character is.

Kelp.

[SANDRO43]

but just out of interest i wonder who the "person: Dmitry Lazarev" character is.

Whoever (owner/manager/etc.) registered WEBALTA-NET with RIPE:

The RIPE NCC is one of five Regional Internet Registries (RIRs) providing Internet resource allocations, registration services and co-ordination activities that support the operation of the Internet globally.

[troutrivers]

Using BAT means that the person who is sending this email is sending several hundred messages each day.

Is it a scam? You can be 99.999% assured that the answer is yes. But if you need the 100%, absolute proof, you want to play along for a few days, sooner or later the scam will be revealed. A request for money to pay for email access, or other need of some nature. Or a suggestion that the lady visit you - you might even get a trip itinerary with real flights to and from Moscow. Or some other variation but these two are are the basic international dating scam.

But, if by some small miracle, this really is a lady writing to you, who really is interested in you, who wants you to travel to Moscow to meet her, do you really want to meet a lady whose "interest" is being managed amonst at least several dozen men? Do you want to go to Moscow to meet a professional dater? Now we are into another scam scenario. You might well have a nice trip, but you will be spending a lot of time in fine restaurants and going shopping with the scammer.

[Kelp444]

Thanks again troutrivers for the info,

I might actually play along to see how quickly the person gets round to the money letter, i have heard of the pro-daters and gold diggers out of these and the scammers I'm not sure what's worst.

As you stated :
"But, if by some small miracle, this really is a lady writing to you, who really is interested in you, who wants you to travel to Moscow to meet her"

As you can see in my introduction and first post, I'm already married, and i have a slight suspicion that my wife wouldn't let me go

Kelp.

[Rolandos147]

Hey mate!!! I received same stuff only i had more pictures and they looked pretty real. i send her an answer but received some random letter with out any kind of answers on my questions, so i decided ti check this shit out this is what i found    http://akisiya.bolhost.com/pr003/pr0031.php?e=00091  probadly whit the same pictures you where talking about only i didn't had any of them..... so i think thats proper FAKE!!!!! but i will do the same play with it see how far we will get, if something interesting will appear ill let ya know!!!! 

[Kelp444]

Hi Rolanos147,

Well this one is just about played out for me, i received 7 messages in total containing 11 pictures, plus 1 fake visa, the last message i received was on the 6 October it was in reply to one i sent him/her where i said it would be safer if i paid for a ticket and she/he picked it up at the airport but her/his reply was just complete gibberish, i wonder what "in general full a brothel" means ???(I've pasted it below) so i didn't bother to answer. Just today i put a report into Stop-Scammers.com, she's already on that site (under newcomers) it will take a few days for them to process the report i sent but there you will be able to see all the letters and photos i was sent, i got the typical semi-nude (topless in bath) just before the money letter (but I'm not sure they'll post that one).

Congratulations my Love Martin!!!
I am very glad, it - you have answered me
Not the bad idea to send given by mail if does not trust the Internet
But the problem - with mail - is not present more: happens long goes,
 or does not reach in general and if will reach
That everyone aspires to steal and check someone's box with mail, in
 general full a brothel
Thus I think, that through the Internet quickly also are more safe,
 here not who will not steal, and will not check.
The western union of work for us, it is good, even it is probable to
 tell absolutely.
My love also, that for to wait days, superfluous divisions between us,
 it it is intolerable - time already
The friend frienda will reunite on always in gentle embraces.
I hope, that you also with impatience wait for a meeting with me.
My love which I want to you as it is probable to arrive more quickly.
    With gentle Love, yours Dina.

Kelp

[BillyB]

i got the typical semi-nude (topless in bath) just before the money letter

What was her e-mail address again? I'd like to get that money letter myself.

Here are some more anti-scam sites you can send your scammer info to. Russiantearoom seems to not be working anymore. I wonder if they shut down?

http://www.russianwomendiscussion.com/index.php?pid=3

[catzenmouse]

What was her e-mail address again? I'd like to get that money letter myself.

Here are some more anti-scam sites you can send your scammer info to. Russiantearoom seems to not be working anymore. I wonder if they shut down?

http://www.russianwomendiscussion.com/index.php?pid=3

Last I heard from BJ was that he had some issues with the domain name and was selling it to a restaurant or club in NYC with the same name and was in the process of setting up a new site. Have to check if he did that or not.

Ken

[Kelp444]

Hiya,
As requested here's the email and the address being used, i have also attached the maximum ammount of photo's allowed that were attached in the messages i received as i think it's a good idea to get them circulated, in the topless photo i have covered up the chest area so not to offend any bodies sensibilities.

dinara@freemailserv.net

My address here (the flat i am renting)
Country : Russia, City : Moscow,
Address : Bogdanova 17-20, zip 119618
Full Name DINA NEVOLINA (right writting in English)

[troutrivers]

Often the scammer is an Ivan, not an Irina. In this instance the photos of this lady might actually be the girlfriend of the scammer. In any event, the photos are all good quality and move in a nice progression from demure to sexy.

You made the scammer waste a lot of time and effort here. Be assured that even if you never hear from the scammer again, that the scammer is pissed that the pot of gold that he/she thought was just within reach in fact never materialized.