DelphiFAQ Home Search:

Dating scammer Elena

 

comments263 comments. Current rating: 5 stars (3 votes). Leave comments and/ or rate it.

Name: Elena


Email: belosnegka@ok.kz


Address:
Russia, Perm, Kuibisheva street, 15, flat 4. An index 614007.
The address of bank Western Union: GUTA BANK. KOMSOMOLSKII
PROSPEKT, 7. PERM, the Index 614990


Other Comments:
From: Elena
Elena
X-Priority: 3 (Normal)
Message-ID: <15610157288.20050424162540@ok.kz>
References:
<5CABDECA4B92A740819A9064B195ED3327ED08@blrx2kmbgl401.blr.amer.dell.com>
<163612556.20050413200054@ok.kz>
<5dd22b4050413113629ed997d@mail.gmail.com>
<1441305989.20050414215003@ok.kz>
<5dd22b4050417132350dcd170@mail.gmail.com>
<248690123.20050418212605@ok.kz>
<5dd22b405041811395d30d667@mail.gmail.com>
<571563829.20050419211855@ok.kz>
<5dd22b405042107443e547280@mail.gmail.com>
<895916771.20050422174858@ok.kz>
<5dd22b405042211365df5dc8c@mail.gmail.com>
MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit

[Her dying mother]

Hello my dear $ukr!!! I to have very bad mood and to me is very sad. Today doctors informed me awful news. They to me to tell, that my mum will need to be performed operation. And the operation will be faster made, the it will be better for it. But a problem that this operation very expensive. If we to not have time to perform this operation my mum any more will not be in alive. She will die. I to not want, that my mother to die. Operation costs 800 euros. I to not know, where to me to find such big sum of money. Now I should devote time to search of money for operation to my mum. To me it will be very difficult to find the sum, but I shall try. On it I to finish the letter. I shall wait for your letter. I kiss you!!! Your Elena.

[My reponse: Boyfriends >> poor friend like me, who have to impose on friends]

Hello my dear Elena!!! I couldn't write to you earlier due to my travels.
Sorry to hear about you mother. I spoke about her to my friend in New York, who is an internationally famous surgeon. He is highly respected by many surgeons in Russia, who were his students. It is nice of him to have offered to help on the medical issue. I know, in the time he was with me on the phone, he was losing more than 800, the surgical cost you mention, because that is the kind of income he earns. He however wants to help me, out of respect for me. I am going to ask his help, ONLY AFTER you will send me some information.
However, it may be easier for you, to ask all your boyfriends, and they may happily give you 800, and more!
I again wish your mother well.

[Desparation]

Hello my darling $ukr!!! Thank you very much for the letter. Unfortunately I asked 800 euros my friends, but anybody from my friends has no such sum. So you can help me whether or not? Now I should come back to my mother I Wait for your following letter. I kiss you!!! Your Elena.

[My challenge - Доверие, но проверие - Boy they hate Stalin!]

Elena!!! [Taking care to repay everyone of her ! in kind and count]
I suggested you ask all your boyfriends. Many times, boyfriends will do lot more than friends.
If you want me to ask my doctor-friend, send me all these:
1) Hospital's name, full address, phone number, fax number, web-page address
2) The Doctor's name, full address, phone number and e-mail address
3) A copy of the doctor's diagnostic report
4) A copy of hospital's billing statement
5) A picture of you with your mother in or just outside the hospital
6) Your full name, address and phone number
7) Your mum's full name, address and phone number
They can all be in Cyrillic, it doesn't matter if you can't give them in English
The billing statement can be in Roubles, since hospitals in Perm accept Roubles, and you don't even need to worry about or $.
My friend will talk to the doctor about the diagnostics, and unlike me he understands all the medical details. After he understands the full details, he will then contact one of his students, who are now surgeons in Russia, and possibly have him visit you, your mother, and the hospital in Perm. After that he can pay the hospital in Roubles directly.
This is the easiest way of doing things for many reasons:
1) I can pay my friend any time in any currency. He is an extremely close friend of mine from my college days.
2) He can pay his Russian student surgeon in any currency. Although they may not want to accept from him, my friend will insist on paying them
3) The hospital and doctor bills can be paid directly to them and in Roubles, saving all the time and effort for them, and you in dealing with foreign currencies.
And most of all, here is the biggest advantage for you!!!
You do not have to become my girlfriend, but keep all your present Russian boyfriends, and perhaps get even more of them!
So think about it!


Comments:

You are on page 1 of 18, other pages: [1] 2 3 4 15 16 17 18
2007-09-08, 22:01:56   (updated: )
[hidden] from United States  



Keywords:
2007-09-08, 23:00:02   (updated: 2007-09-08, 23:15:06)
OJAS from United States  
The next 3 lines are not my words, but from a victim of Elena Solodovnikova

I send her $3911, which was £2173.05, WU 108 148 1141
I send her $620, which was about 480 euros through Western Union, WU 890 040 3792
I sent her $4000, which was £2222.30, WU 51 55 58 97 24

Back to my words:
Is ''my'' Elena same as Marina in
http://www.delphifa..=45#51211

I'll keep updated as my hard-disk recovery continues. In the original post my euro symbols had been rendered as ?. I replaced my name to look like Sucker, $ for s, cent symbol for c, euro symbol for e, somehow my old-gen comp discombobulated it.
2007-09-09, 14:12:07   (updated: 2007-09-09, 14:16:52)
OJAS from United States  
How blinded can I be calling this a $6000 scam?

http://www.google.c..z=1I7SUNA

To figure in constant dollars, this needs to be about 10% larger due to today's weekened $!

And my head is spinning! I'll need to work on Curriculum Vitae of Elena Solodovnikova some other time. For now I'll add she met me in friendfinder, claiming to be from Kansas.
2007-10-23, 10:48:34
OJAS from United States  
@newbies

Headers listing for Outlook 2007
__________________________

Open the mail
On the Message Tab, Select the Options Box
Message Options will pop up
On the Internet Headers Box, Single Click, CTRL-A (Select All), CTRL-C (Copy Selection)
Open a Wordpad, CTRL-P (Paste Selection)
Here's an Example of someone trying to scam.
__________________________________________________

Micricrosoft Mail Internet Headers Version 2.0
Received: from h228.227.28.71.ip.alltel.net ([71.28.227.228]) Mon, 22 Oct 2007 20:19:50 -0500
Received: from [71.28.227.228]; Mon, 22 Oct 2007 17:30:20 -0800
From: 'Kari Cabrera' <a-ahsley@acinet.com>
Subject: Where have you been?
Date: Mon, 22 Oct 2007 17:30:20 -0800
Message-ID: <01c814d1$38229510$e4e31c47@a-ahsley>
MIME-Version: 1.0
Content-Type: text/plain; charset='Windows-1252'
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
Importance: Normal
Return-Path: a-ahsley@acinet.com
X-OriginalArrivalTime: 23 Oct 2007 01:19:52.0011 (UTFILETIME= [CFCF19B0:01C81512]
______________________________________________________________________________

Notice I have removed my personal, organizationInfo

______________________________________________________________________________


Next Copy the Headers (Like above) and Paste on to Header Analysis here and Check Headers

http://headertool.a..lord.com/

The only IPs are 228.227.28.71 and 71.28.. 228
___________________________________________

Startinging with first IP, search delphi for 221.227.28.* [Note: The last octat 71 is irrelevent, we need the range, and unlike google, delphi search supports wildcard character *]
In this case, there's no hit
Next search delphi for 71.28.227.* no hiagain
_______________________________________________________________________________
We're back to first IP, and on the Header Analysis window, press WHOIS button for thoutput
_______________________________________________________________________________

WHOIS - 228.227.28.71
Email link to results
Generated by www.DNSstuff.com
Location: Unknown

[Caching always on for search engines and InfoPath]
[Note: Using 224.0.0.0 instead of 228.227.28.71, to save time and bandwidth]

Using 0 day old cached answer (or, you can get fresh results).
Hiding E-mail address (you can get results with the E-mail address).


OrgName: Internet Assigned Numbers Authority
OrgID: IANA
Address: 4676 Admiralty Way, Suite 330
City: Marina del Rey
StateProv: CA
PostalCode: 90292-6695
Country: US

NetRange: 224.0.0.0 - 239.255.255.255
CIDR: 224.0.0.0/4
NetName: MCAST-NET
NetHandle: NET-224-0-0-0-1
Parent:
NetType: IANA Special Use
NameServer: FLAG.EP.NET
NameServer: STRUL.STUPI.SE
NameServer: NS.ISI.EDU
NameServer: NIC.NEAR.NET
Comment: This block is reserved for special purposes.
Comment: Please see RFC 3171 for additional information.
Comment:
RegDate: 1991-05-22
Updated: 2002-09-16

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone: +1-310-301-5820
OrgAbuseEmail: *****@iana.org

OrgTechHandle: IANA-IP-ARIN
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone: +1-310-301-5820
OrgTechEmail: *****@iana.org

# ARIN WHOIS database, last updated 2007-10-22 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.    

__________________________________________________________________________
Next we logon to
http://www.ripe.net/
Paste 228.227.28.71 in the query box and get RIPE oupbelow
__________________________________________________________________________

% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html
% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag
% Information related to '0.0.0.0 - 255.255.255.255'
inetnum: 0.0.0.0 - 255.255.255.255
netname: IANA-BLK
descr: The whole IPv4 address space
country: EU # Country is really world wide
org: ORG-IANA1-RIPE
admin-c: IANA1-RIPE
tech-c: IANA1-RIPE
status: ALLOCATED UNSPECIFIED
remarks: The country is really worldwide.
remarks: This address space is assigned at various other places in
remarks: the world and might therefore not be in the RIPE database.
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: RIPE-NCC-HM-MNT
mnt-routes: RIPE-NCC-RPSL-MNT
source: RIPE # Filtered
organisation: ORG-IANA1-RIPE
org-name: Internet Assigned Numbers Authority
org-type: IANA
address: see http://www.iana.org
remarks: The IANA allocates IP addresses and AS number blocks to RIRs
remarks: see http://www.iana.org..esses.htm
remarks: and http://www.iana.org..s-numbers
e-mail: bitbucket@ripe.net
admin-c: IANA1-RIPE
tech-c: IANA1-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: Internet Assigned Numbers Authority
address: see http://www.iana.org.
e-mail: bitbucket@ripe.net
admin-c: IANA1-RIPE
tech-c: IANA1-RIPE
nic-hdl: IANA1-RIPE
remarks: For more information on IANA services
remarks: go to IANA web site at http://www.iana.org.
mnt-by: RIPE-NCC-MNT
source: RIPEFiltered
­­­­­­­­­­­­­­­­­______________________________________________________________________

NexNext we logon to
http://www.ip-adress.com/
and lookup the same address, get this output (after some cleaniout)
_________________________________________________________________________
IP address [?]: 228.227.28.71 (Copy)
IP address country: n/a
IP address state: n/a
IP address city: n/a
IP address latitude: n/a
IP address longitude: n/a
ISP [?]: n/a
Organization: n/a
Host: reserved-multicast-range-NOT-delegated.exam. com
________________________________________________________________________________
We can similarly analyze other IPs, when delphi search returns no hits.
If delphi returns hits, follow the links, since the homework has already been done!

[Who showed me how to do this homework? WHOIS - Skeet, RIPE - Eddie, My-IP address - Dirk]

PS If you enjoy scam-baiting, try this scammer
2007-10-29, 11:42:47
OJAS from United States  
@newbies who may be interested

From time to time, I may be using this thread to deposit ideas before they evaporate. I have ascertained from the originator of this thread that he has no objections.

A scammer tactic - interchange i, j, y - e.g. Natalia Natalja Natalya
Counter - Search delphi, Altavista, Hotbot using post-truncation Natal* will hit all of them.
Google does not support wilcard character *, it will decide where to stem. E.g. Googling for scam will hit scam, scams, scammed, scamming, scammer, scammers, etc., because it decides to stem after the root scam

And I had the pleasure of hearing from them not necessarily consistently from ioshkar-ola, joshkar-ola, yoshkar-ola

Hotbot supports pre-truncation, *oshkar-ola will hit all these

Far more challenging is the 3^2 = 9 possible permutations of iulia, iulija, iulya, julia, julja, julya, yulia, yulja, yulya

In this case 3 searches will do the job in delphi / altavista / hotbot for iul*, jul*, yul*

Often the verbs google and search are used interchangeably. In practice there are overlaps and also differences

This illustration is an application of efforts begun with

http://www.delphifa..=33#49010

I'll eventually organize in a newbie-friendly, homework-centric format

To be continued ...
2007-10-29, 11:44:05
OJAS from United States  
If you're a newcomer who found this thread via Google or whatever, PLEASE READ THIS:
SOME GENERAL INFO ABOUT RUSSIAN GIRLS AND RUSSIAN DATING SCAMMERS:
http://www.delphifa..p=0#56897
US Embassy http://moscow.usemb..datingscam
New US Passport processing time as of this post: 6 Months
Canadian Visa http://www.delphifa..?p=0#56706
UK and Switzerland are NOT Schengen-friendly
Schengen http://www.bbc.co.u..2/A1146115 http://www.netherla..index.aspx
http://www.eurovisa..tries.htm
Russian Visa Steps http://www.r-tg.com..rt/20.html
Travel to Ukraine http://www.delphi. =10#38245
=====================================================================
@Oldbies, once in a while please check these links for information currency
2007-10-31, 18:01:19
OJAS from United States  
NEVER send scammers any link to delphi, as it undermines our efforts - Don't lose heart though, there's plenty you can entertain them with!

What to send scammers and how
Send these links which do not undermine their sites. Copy / Paste and remove the space after http://

http:// www.smh.com.au/articles/2004/01/04/1072908963038.html
http:// news.bbc.co.uk/2/hi/africa/2665667.stm
http:// www.nytimes.com/2004/11/03/international/europe/03love.html?pagewanted=1&_r=2&oref=slogin
http:// www.nbcsandiego.com/news/3449864/det. html
Youtube clips
http:// www.youtube.com/watch?v=LstlXMDrv8s&mode=related&search=
http:// www.youtube.com/watch?v=o5xEMu__plc&mode=related&searc
______________________________________________________________________________________
Without the blank space, delphi will parse these with consecutive decimal points .. making it useless for copy paste, from here:
There are 2 ways to check before opening a link whether it ia valid.
1) Hover the mouse over the link and check the status bar at the bottom of Internet Explorer, if the .. has been resolved, and gone here, the link is good
2) Right click for properties and check if the .. are resolved. If yes, you can highlight the URL here with mouse hold & drag and copy /paste the good link
http://www.smh.com...63038.html
http://news.bbc.co...665667.stm
http://www.nytimes...ref=slogin
http://www.nbcsandi..49864/det. html

http://www.youtube...d&search=
http://www.youtube...ed&search=

Some words / phrases http://www.delphifa..=38#53646
Useful phrases lesson 1 http://www.delphifa..=38#53649
Useful phrases part 2 http://www.delphifa..=40#53967
Humerous ideas http://www.delphifa..086.shtml
Russian Slang http://www.russianb..an_slang/


Scam monkey
http://www.delphifa..117#57836
http://www.delphifa..p=2#58781

Phone numbers to give them http://www.delphifa..=60#56098
If they ask for your pictures send serial killers' - Bundy, Son of Sam, Shipman, Yorkshire Ripper, Dehmer - just google and find

Pictures after downloading for e-mail attachment

Do not send another person's pic without his knowledge. Cut out only the message from http://www.delphifa..p=8#50137
Middle finger from clown http://www.delphifa..11673.jpg
Secret desires http://www.delphifa..17926.jpg
Never be afraid to say what you feel http://www.delphifa../21940.jpg
2007-10-31, 19:25:22
OJAS from United States  
A Posting suggestion

As soon as you post a general info (to be reused) copy the new URL.

When you want to repost the same info on a new thread

Introductory phrase [e.g If you are a newcomer ...]
A single blank space at the end [You don't need carriage return]
Paste the URL that was copied
Post and test the link is good, leading back to the original post

This way

1) newbie-friendly will not be misinterpreted as being oldbie-hostile
2) won't seem to oldbies as being repetetive
3) Oldbies will scroll down quickly, since the second post onwards, will only be 1 or 2 lines
4) The first post may be a few kilobytes, but subsequent ones will only be a few bytes, I'm sure will gladden Admin Peter that we are considerate for him, as he is by letting us use space
2007-11-01, 08:12:04
O from United States  
Thanx P
Love it, I'll work on my Cyrillic version this weekend.
Instead of Your Sveta, Ludmila ... I prefer signing off Your Scammer Faggot in Cyrillic.
I'm sure you have no objection!

Have a nice day! O
2007-11-02, 10:33:10
OJAS from United States  
I want to modify the scamming ape signing off your sammer faggot in place of your Sveta, Ludmila, etc
So far I only have these to start with. Someone post here in Cyrillic the expression for Your scammer faggot - Thanks
pidar gnoinyj ~ pidar gnoinyj - rotten faggot note Mean expression used in the coal mines of Ukrainian Donbass. Literary means the passive gay who have gotten an aqute honorreia in his anus.Puts the conterpart way down


Keywords:
2007-11-02, 12:29:41
OJAS from United States  
2007-11-02, 13:18:12
OJAS from United States  
First - What NOT to send scammers - Don't lose heart yet, there's plenty you can entertain them with!

NEVER send scammers any link to delphi, as it undermines our efforts

Before the Grande Finale, while you are awaiting it -
If your scammer e-dress has .by (Belarus) .kz (Kazakhstan) .ru (Russia) .ua (Ukraine) (or the dots after the two characters) his computer is Cyrillic-capable, and preferred when available
Some words / phrases http://www.delphifa..=38#53646
Useful phrases lesson 1 http://www.delphifa..=38#53649
Useful phrases part 2 http://www.delphifa..=40#53967
Humorous ideas http://www.delphifa..086.shtml
Russian Slang http://www.russianb..an_slang/

NEVER give your phone number. Give instead from http://www.delphifa..=60#56098
NEVER send your pictures. Google for dead serial killers Bundy, Shipman, Dahmer, Tim McVeigh etc.

When you decide you have reached the Grande Finale
Copy / Paste to your e-mail from
Scam Monkey http://www.delphifa..=117#57836 http://www.delphifa..p=2#58781

Oh silly me almost forgot you owe them some pictures for Grand Finale parting memories

Downloads for e-mail attachment

Clown's middle finger http://www.delphifa..11673.jpg
Secret desires http://www.delphifa..17926.jpg
Scamming Ape http://www.delphifa..21930.jpg
Never be afraid to say what you feel http://www.delphifa..21940.jpg
Scammer Faggot http://www.delphifa../22657.jpg (Until a better one is posted on delphi)
2007-11-02, 20:07:29   (updated: 2007-11-02, 20:29:41)
OJAS from United States  
Posting Suggestion for Headers

For Header listing procedures see http://www.delphifa..=13#45816

From the Headers of your e-mail received the most important are
e-dress and name of the scammer
X-Mailer
Received FROM - The OLDEST time stamp entry - (Not to be confused with Received BY)

1) Copy and paste only these to Wordpad (or Notepad with Edit - Format unchecked Wordwrap)

IPs can also be extracted by pasting the headers (or even the full e-mail showing headers) into http://headertool.a..lord.com/
E.g. We take 228.227.28.71

2) This is an important step in the interest of economy
On delphi search box at top left type WHOIS 228.227.28.*

NB: The last octat 71 is irrelevent, it will be the same for all numbers from 0 to 255
Replace the last octat by wildcard character *
Unlike google delphi supports post-truncation with wildcard character *
delphi will hit all IPs that have been processed by BOTH RIPE and WHOIS

3) If delphi returns hits, read analyses of the hits
You can also Copy / Paste the URL of the hit (from the address bar) and post just the URL with any additional questions
This way you do not need to re-run RIPE / WHOIS

4) If delphi returns no hits paste the IP in http://www.ripe.net/
Copy / Paste the output for your post

4A) With no hits, you could also extract as in step 1) and click the WHOIS button, Copy / Paste as above

For a fully worked out example see http://www.delphifa..p=0#57630

Additional data http://www.delphifa..?p=2#50636
2007-11-03, 09:16:29
OJAS from United States  
An interesting point by Dirk http://www.delphifa..p=0#59153
All computers in scammer's household / office will show the same public IP 91.144.161.19 when they logon to http://www.ip-adress.com/
Within the unit is a router (A cheap 4 port sells for $25). Each of its ports can be connected to a swictch (A cheap 8 port switch sells for $25). With this set up 3 remaining router + 8 switch ports make 11 possible networking devices. If one is connected to a printer that leaves 10 available for scamming PCs. Get the idea of scammers' small business investment?

If you have a team of scammers but do not have regularly scheduled team meetings, the left hand doesn't know what the right hand did. That brings up another point. Scamming is a low-yield business. No reliable statistics are available, but underworld businesses in the same class would be lucky to show 3% retrun ratio. This translates into 6 victims for 200 tries. At $800 per victim it is roughly $5000. An ambitious ... make it greedy scammer has to correspond with 200 potential victims. He won't have the time to read each mail and answer specific questions. He may well be in competition with a fellow scammer and yes ... in his OWN building to win a race to fall in love with the SAME victim. He presupposes victims' vulnerabilty - stupidity, naivete at the top, compassion in the middle, ego, libido further down. But he doesn't have the time to determine where exactly is a victim most vulnerable. It is easier for him to assume ALL. Model Pix seves the supposed third organ weakness. His sob-story about loneliness, poverty, medical need and the likes serve his supposed middle organ weakness. Finally his premise that all foreigners are stupid because they don't speak Russian serves his supposed top organ weakness. So the scammer thinks he doesn't even need to determine exact vulnerabity of a victim. Scammers usually hate homework. This applies to run-of-the mill scammer. Yes there are exceptions, some scammers read mails, respond individually to low number of targets, take their time. There is no 100% fool-proof aginst scamming. But neither such as a perfect-scammer. Information is power. A well informed newbie will be armed to teeth facing a scammer. He may still be taken. But he'll refuse to go down without a fight. And this type sammer will have think hard whether his next victory will also be pyrrhic. http://dictionary.r..07/16.html
2007-11-03, 10:38:19   (updated: 2007-11-03, 10:41:36)
Eddie from Sweden  
$$ Из России, с любовью $$
Мой IP адрес 0.0.0.0

К моиA ериканцам
Канадцы
Европейцы
Ж
Жители Южной Америки
Выходцы из Азии

Я написал там письмо, некоторое время назад.
Почему ты не отвечаете на меня?
Tы не имеете никакого интереса во мне?
Я буду ждать таш ответ.
Tаш Sveta, Ludmila, Татиана, Ирина, и т.д.

it won't paste properly
You are on page 1 of 18, other pages: [1] 2 3 4 15 16 17 18

 

 

Are you being scammed and this is your first visit here?
Read the welcome page/ primer for newbies.
Thanks to Eddie for writing it up.

Please also read Miss Marple's article about recognizing male dating scammers.

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture:
Picture Search

You have received photos and wonder if these photos has been posted here before? Because you suspect this could be a dating scammer, but you do not want to post this picture? Try the Picture Search