DelphiFAQ Home Search:

Dating scammer IP-Address 91.144.161 (...)

 

comments397 comments. Current rating: 4 stars (71 votes). Leave comments and/ or rate it.

Name: IP-Address 91.144.161 (...)


Email:


Address:
Yoshkar Ola (but not really)


Other Comments:
This is an article I wanted to write for a long time. It is not on one special scammer (or is it?). It is on an IP- address, that links several scammers on Delphi and other anti-scamsites: 91.144.161 (...).

91.144.161 (...) leads to Yoshkar-Ola, the Red City, the Centre of Scam. Thatīs to say... Somebody wants us to believe that! IP 91.144.161 ... is forged.

This article will be full of links. I do my best to post pictures of supposed scammers in between.

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Information related to '91.144.160.0 - 91.144.163.255'

inetnum: 91.144.160.0 - 91.144.163.255
netname: ERTH-YOLA-NET
descr: ZAO 'Company 'ER-Telecom' Yoshkar-Ola address space
country: RU
admin-c: ETHD12-RIPE
tech-c: ETHD12-RIPE
status: ASSIGNED PA
mnt-by: MNT-ERTHOLDING
changed: ******@ertelecom.ru 20070123
source: RIPE

role: Network Operation Center CJSC ER-Telecom Company Mari El branch
address: 12, Lenina st., 424000, Yoshkar-Ola, Russia
phone: +7 8362 210035
fax-no: +7 8362 210035
e-mail: ***@yola.ertelecom.ru
admin-c: SMS68-RIPE
tech-c: ALB49-RIPE
tech-c: AVA89-RIPE
nic-hdl: ETHD12-RIPE
changed: ***@ertelecom.ru 20070123
notify: ***@ertelecom.ru
source: RIPE
mnt-by: MNT-ERTHOLDING

% Information related to '91.144.160.0/22AS41786'

route: 91.144.160.0/22
descr: 'Company 'ER-Telecom' Yoshkar-Ola route object
origin: AS41786
mnt-by: MNT-ERTHOLDING
changed: ******@ertelecom.ru 20061025
source: RIPE

% Information related to '91.144.161.0/24AS41786'

route: 91.144.161.0/24
descr: 'Company 'ER-Telecom' Yoshkar-Ola route object
origin: AS41786
mnt-by: MNT-ERTHOLDING
changed: ****@ertelecom.ru 20080402
source: RIPE



Content-type: text/html

Comments:

You are on page 23 of 27, other pages: 1 2 3 20 21 22 [23] 24 25 26 27
2009-04-29, 20:11:36
anonymous from Canada  
Irina ( letters from travel agent as well as picture when I asked to see a picture of her and her family )

Letter received from Brend tours Russia 91.144.161.161

First message from travel agent

Hello Mr xxxxx. I was in advance warned by Irina that you will write to me. Mr xxxxx, I ask you to concern with understanding to
everything, that will be told in my message. I should tell to you at once, that your relationships with Irina have no attitude to the
contract which has been signed between tourist agency and Irina. At all respect for you and at all my understanding of your problems with
madam Irina, I cannot affect on rules which are stipulated by the law of the Russian Federation. Mr xxxxx, we operate according to the law.
Our requirements have been coordinated with madam Irina and the law and any infringements from our party or from madam Irina can be
considered in court. She has signed the contract. The agency undertakes to carry out requirements which are specified in the
contract. We carry out these requirements, and we also demand, that madam Irina carried out these requirements. I completely understand
Irina's anxiety, but I cannot render illegal influence on process of preparation of her travel. I the tourist agent and my actions are
coordinated with tourist agency and the law. Our agency is kept with authority only owing to that we do everything that from us is required
and owing to that we never break the established rules. You are the third party. You have no attitude to the contract which have been signed
by madam Irina. We undertake to make everything that Irina could travel to your country, but if she will not pay for our services
when due hereunder, we have the full right to write the application in court. Mr xxxxx, We are with respect concern to our clients. But we
never break the established rules. I shall finish my message.


Andrey Lazarev .


Second message from travel agent 91.144.161.170

Hello Mr xxxxx. We have defined the expenses demanded for travel to Canada .
The canadian visa: 200 US dollars (50 US dollars - cost of the visa, 150 US dollars - visa gathering of embassy).
The insurance: 345 US dollars.
Reception of the medical information: 40 US dollars.
Air tickets: 1850 US dollars.
Hotel accommodation in Moscow: 90 US dollars within day.
Also in cost of travel are included charges for registration of other necessary documents.

Andrey Lazarev.



Keywords:
2009-04-29, 20:24:41
Dirk from Heerlen, Netherlands  
Anon from Canada,

The Ip-range 91.144.161.xxx leads to Yoshkar-Ola, Mari El Republic, Russia. These IP's are forged (like all of them). Let's have a look at X-Originating IP 76.13.13.41

IP address: 76.13.13.41
Reverse DNS: smtp102.prem.mail.ac4.yahoo.com.
Reverse DNS authenticity: [Verified]
ASN: 14778
ASN Name: INKTOMI-LAWSON
IP range connectivity: 2
Registrar (per ASN): ARIN
Country (per IP registrar): US [United States]
Country Currency: USD [United States Dollars]
Country IP Range: 76.12.0.0 to 76.15.255.255
Country fraud profile: Normal
City (per outside source): Sunnyvale, California
Country (per outside source): US [United States]
Private (internal) IP? No
IP address registrar: whois.arin.net
Known Proxy? No

http://private.dnss...13.13.41

http://www.ip-adres...13.13.41

http://www.delphifa..shtml?p=2

http://www.delphifa..html?p=36

http://www.dslrepor..ing-FRAUD

http://anti-scam.de..236598276

http://www.emailque..sses.html

http://anti-scam.de..723337/18

2009-04-30, 20:59:11
anonymous from United States  
Marianna
Received: from [10.76.1.247] (unknown [91.144.161.145])
(Authenticated sender: mariashkan@rambler.ru)
From: Marianna <mariashkan@rambler.ru
2009-05-01, 20:41:49
anonymous from Canada  
rating

They made a mistake!!!!

Irina related


In every letter until today there has always been a 9 hour difference. That would be in line with the time zones between where I live and Yoshkar-ola. Today in this letter it was only 3 hours. I received this letter at 2:35pm. There is a 3 hour time change between myself and the west coast of the US.


X-Apparently-To: sasha28@rogers.com via 216.39.53.224; Fri, 01 May 2009 11:35:59 -0700
X-Originating-IP: [76.13.13.93]
Authentication-Results: mta106.rog.mail.sp1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=neutral (no sig)
Received: from 76.13.13.93 (HELO smtp110.prem.mail.ac4.yahoo.com) (76.13.13.93)
by mta106.rog.mail.sp1.yahoo.com with SMTP; Fri, 01 May 2009 11:35:59 -0700
Received: (qmail 99184 invoked from network); 1 May 2009 18:35:58 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com; h= Received:X-YMail-OSG:X-Yahoo-Newman-Property:Date:From:X-Mailer: Reply-To:X-Priority:Message-ID:To:MIME-Version:Content-nt-Type:Content-Transfer-Encoding; b= 4LhIp1ICY+Of58M/TEEGixHsrrfLXpYV1SWRDa7IRWlSaOCtvBUOSdcWiRzjy2dd/ qrAz5kUn7Ogg7QwGB1YDEWxPrLzSzoulDy4WOt7XXElj5DWqNFoMOYMOYNJ00JAgonmHEnJa8R6SUOquCP9oeOoLapkF/5cVu5ISW+DC5SLtM= ;
Received: from unknown (HELO SPARCL) (martiangirrrl@91.144.161.156 with plain)
by smtp110.prem.mail.ac4.yahoo.com with SMTP; 1 May 2009 18:35:58 -0000
X-YMail-OSG: SUqnlKwVM1mTbIn_kWOaXvkuJ.zqXdsq03tt.JEObL. 3v1wxCZCIStjwRYPDOJxJbNiarplZO0rACcSZJT5v3_rWuKJDprcIfJsDuzQuzQxKyJ2wPbETRDDeI.r6y8_RXU_sT38HPHZ.bZ. cfnkebzw9oK895ZNCBkS5bNF3RKQ2zVcCqlGzSAcL6hMq94jQwAYbICjzRueRueLrZHxfi0bI6QDfzNA77zpEIWmHDxkLD0tFf7vY
Date: Fri, 1 May 2009 22:35:57 +0400
From: martiangirrrl@yahoo.com
X-Mailer: The Bat! (v3.0.1.33) Professional
Reply-To: martiangirrrl@yahoo.com
X-Priority: 3 (Normal)
Message-ID: <668546484.20090501223557@yahoo.com>
To: sasha28@rogers.com
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Del, my love, I am tired from all it. But I very strongly love you. I
have tears on eyes when I read your messages. But you do not need to
worry, because I shall prove to you, that I am real. Tomorrow I shall
send you copies of documents that you did not doubt that I really wish
to arrive to you. I love you Del, I shall make everything to prove to
you, that I am real. I understand your brother, but his mistrust to me
very strongly disturbs me. I shall write to you tomorrow now.
I love you!!!!!!!!

Yours and only yours Irina.
2009-05-02, 08:37:00
anonymous from Canada  
rating
Dirk



This is the visa that has been granted in less than 2 weeks to Irina. Russian woman age 29.
I sent a letter and recent photos asking for proof of her identity and they sent me this.

How badly done is it? I have never seen a visa before but don't the need a photo?

I also have travel documents sent with it. I have no idea of what the are. All in Russian.

I hope these help.


X-Apparently-To: sasha28@rogers.com via 216.39.53.224; Sat, 02 May 2009 03:06:51 -0700
X-Originating-IP: [76.13.13.44]
Authentication-Results: mta106.rog.mail.re2.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=neutral (no sig)
Received: from 76.13.13.44 (HELO smtp105.prem.mail.ac4.yahoo.com) (76.13.13.44)
by mta106.rog.mail.re2.yahoo.com with SMTP; Sat, 02 May 2009 03:06:51 -0700
Received: (qmail 6175 invoked from network); 2 May 2009 10:06:51 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com; h= Received:X-YMail-OSG:X-Yahoo-Newman-Property:Date:From:X-Mailer: Reply-To:X-Priority:Message-ID:To:MIME-Version:Content-nt-Type; b= MVwwB97yBqU5ncRwuBhCstTKaOCAv7XD9AWkmSv0LkNnV2etfQHPExsl9wNNssJ29ptFB2UlCNP9GAzpFEHzLTeMI pvFnK5TBIcZ98iHvN3h7K1PpPkSz5Sz5ShTIjGLqUBw/TflAgOW6e47So4duI2BQ2XVFPRUyszEWJTVSpqGj0= ;
Received: from unknown (HELO SPARCL) (martiangirrrl@91.144.161.156 with plain)
by smtp105.prem.mail.ac4.yahoo.com with SMTP; 2 May 2009 10:06:07 -0000
X-YMail-OSGCLPUKIAVM1kkcMDZk7wNDeZQq6HOnq Rm9pZDSyGZm00BbB8cmMoWZJIk7ToJToJQmHAKBAnXw7I9Zaognx2kh6KCxRXXi689f51UAsXL. 8NCKGWw5i5prhafyu5jHYWlQ25ulylaiZthMUwCo9O8XkOGu6gVMx6Fm3NxNNxNjl9vfHKCrf72dsq7XBhLKq2E3XPk092qm1.H82IFjjlJ6Rrj3CvL7R7OSYpQgUIw--
Date: Sat, 2 May 2009 14:05:45 +0400
From: martiangirrrl@yahoo.com
X-Mailer: The Bat! (v3.0.1.33) Professional
Reply-To: martiangirrrl@yahoo.com
X-Priority: 3 (Normal)
Message-ID: <13410412218.20090502140545@yahoo.com>
To: sasha28@rogers.com
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary='----------1109526330DF645'




Keywords:
2009-05-02, 09:12:20
anonymous from Canada  
rating



Keywords:
2009-05-02, 09:12:58
anonymous from Canada  



Keywords:
2009-05-02, 09:13:43
anonymous from Canada  



Keywords:
2009-05-03, 07:40:44   (updated: 2009-05-03, 07:50:21)
Dirk from Heerlen, Netherlands  
Canada,

From personal experience: There is a photo on the visa.

Send the visa to your Embassy in Moscow.They will check it. Please, share your info with us.

The Embassy of Canada
23 Starokonyushenny Pereulok
Moscow 119002 Russia
(near the Old Arbat street, Metro: Kropotkinskaya)
Tel.: + 7 (495) 925-6000
Fax: + 7 (495) 925-6025
Email: mosco@international.gc.ca

http://www.dfait-ma..u-eng.asp

2009-05-03, 09:18:17
anonymous from Canada  
rating
Hi Dirk thank you for your input. You are the expert!
She sent a passport today, please look at the sex on the passport 'W'
is this a new sex? Your site has saved me big time. Thank you so much!!!!!


Keywords:
2009-05-03, 09:49:13
anonymous from Canada  
rating
Thank you I have just sent the documents and have at tis minite received this e-mail from her. I have asked for photos with todays date this is her reply. I have used my brother as someone against this to have them send more info.

Del, everything, that I can tell to you, that I hate your brother.
I have sent you true documents and I do not know, why your brother
continues to not trust me. Why you listen to your brother constantly.
You love me and thus you listen to advice of your brother. If you will
continue to listen to your brother, you will lose me and I shall lose
you. Del, I shall not send you something now. I have sent you of that
proof, that I am real. I cannot so more. I do not know, what to me to
do, you force me to cry. I hate your brother. Del, if you love me we
shall meet if you do not love me we can stop our correspondence.
But I have no other proofs to send you.

Yours Irina.

X-Apparently-To: sasha28@rogers.com via 216.39.53.228; Sun, 03 May 2009 07:40:15 -0700
X-Originating-IP: [76.13.13.92]
Authentication-Results: mta110.rog.mail.sp1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=neutral (no sig)
Received: from 76.13.13.92 (HELO smtp109.prem.mail.ac4.yahoo.com) (76.13.13.92)
by mta110.rog.mail.sp1.yahoo.com with SMTP; Sun, 03 May 2009 07:40:15 -0700
Received: (qmail 81031 invoked from network); 3 May 2009 14:40:14 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com; h= Received:X-YMail-OSG:X-Yahoo-Newman-Property:Date:From:X-Mailer: Reply-To:X-Priority:Message-ID:To:MIME-Version:Content-nt-Type:Content-Transfer-Encoding; b= MRDv+fzl3FR7uIiVvjC2J1KuOpQGcudVVO1jYgILp075bjcNF7YcrOGiECCoMBo3RhlPht1CQB9wyxh/ muGySJgsEtE43saPCP5qGE57MJKCHSL+U7zOk4gk4gC8jKwzRfagLd5W82TI9pm/oxgwPiPQoO2qIXg2ErpVGD9r9SMEiw= ;
Received: from unknown (HELO SPARCL) (martiangirrrl@91.144.161.156 with plain)
by smtp109.prem.mail.ac4.yahoo.com with SMTP; 3 May 2009 14:40:13 -0000
X-YMail-OSG: 3FGvufMVM1lg17oApKiOlbaSIQ1EpRCNa. t4qTa3HQMIec4JYwFQIdBS4LGgV1qpc9uATc79agf1e7yTyuPxxpB9yS9AxKAxKmpSNAoe4xkYzMoAWh.eovOw0l2u9hLYfKHzURAKWkhdjvwH2wboQN0NTDC0. jFLY1UsVH5Tro9zmIgmDFATRuJ6iD0k5q6rf51sH06e6WklmW7Ps7mis8XyWXyWgMSZ.eWDzXty7xlPkTcA4KNgcc3YWJ4Jfttu.oa3mXBRTPft0kl2
Date: Sun, 3 May 2009 18:40:13 +0400
From: martiangirrrl@yahoo.com
X-Mailer: The Bat! (v3.0.1.33) Professional
Reply-To: martiangirrrl@yahoo.com
X-Priority: 3 (Normal)
Message-ID: <124869077.20090503184013@yahoo.com>
To: sasha28@rogers.com
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
2009-05-03, 12:58:27
Dirk from Heerlen, Netherlands  
IP address: 91.144.161.156

Reverse DNS: net161.144.91-156.yoladom.ru.
Reverse DNS authenticity: [Could be forged: hostname net161.144.91-156.yoladom.ru. does not exist]
ASN: 41786
ASN Name: ERTH-YOLA-AS (ZAO 'ER-Telecom' Company' Yoshkar-Ola ISP AS)
IP range connectivity: 3
Registrar (per ASN): RIPE
Country (per IP registrar): RU [Russian Federation]
Country Currency: RUR [Russia Rubles]
Country IP Range: 91.144.128.0 to 91.144.191.255
Country fraud profile: High
City (per outside source): Yoshkar-Ola, Mariy-El
Country (per outside source): RU [Russian Federation]
Private (internal) IP? No
IP address registrar: whois.ripe.net
Known Proxy? No

http://private.dnss..4.161.156

2009-05-03, 13:10:27
Dirk from Heerlen, Netherlands  
IP 91.144.161.156

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.


http://www.projecth..4.161.156

http://www.delphifa..html?p=33

http://www.romances..-bid-2841

http://www.romances..ighlight=

http://dating-partn..om/faker/

http://www.scammerl..rid/43964

http://antifraudint..p?p=47937

http://anti-scam.de..2542023/3

http://www.delphifa..510.shtml


This image was also posted here:
Dating scammer Natalya from Osinniki, Russia



Keywords:
2009-05-03, 13:11:32
Dirk from Heerlen, Netherlands  
IP 91.144.161.156




Keywords:
2009-05-03, 13:12:27
Dirk from Heerlen, Netherlands  
IP 91.144.161.156


This image was also posted here:
Dating scammer Natalya from Osinniki, Russia



Keywords:
You are on page 23 of 27, other pages: 1 2 3 20 21 22 [23] 24 25 26 27

 

 

Are you being scammed and this is your first visit here?
Read the welcome page/ primer for newbies.
Thanks to Eddie for writing it up.

Please also read Miss Marple's article about recognizing male dating scammers.

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture:
Picture Search

You have received photos and wonder if these photos has been posted here before? Because you suspect this could be a dating scammer, but you do not want to post this picture? Try the Picture Search