DelphiFAQ Home Search:

Dating scammer Tatyana

 

comments92 comments. Current rating: 5 stars (6 votes). Leave comments and/ or rate it.

Name: Tatyana


Email: tinsiles@gmail.com


Address:
live in Moscow


Other Comments:
This is the email of the scam: tinsiles@gmail.com
The scam named Tatyana wrote this email and attached these photographs.
I do not know who is this girl photos.
I would like to publish everything, to prevent others from falling into these traps.
Thank you


Content-type: text/html

Comments:

You are on page 2 of 7, other pages: 1 [2] 3 4 5 6 7
2009-05-21, 09:31:57   (updated: )
[hidden] from Italy  



Keywords:
2009-05-21, 09:31:57   (updated: )
[hidden] from Italy  



Keywords:
2009-05-21, 12:38:23
OJAS from United States  
Some posting guidelines http://www.delphifa..p=0#101855
2009-05-22, 03:00:08
anonymous  
I explain how to extract the IP address of the sender, the email received with windows live?
thanks
2009-05-22, 04:13:25
Dirk from Heerlen, Netherlands  
To see the full email including all header lines in Windows Live Hotmail:

To see the full headers of a message:
1. Windows Live Hotmail must be in 'Full Version' mode, not 'Classic' mode.
2. Right click on the link to the message in the column left of the preview pane.
3. A drop-down menu will appear and at the bottom will be 'View Source'.
4. Click on 'View Source' and the Full Header information will open in a new window.


See Full Email Headers in MSN Hotmail
To make MSN Hotmail display all header lines:

Select Options from the top MSN Hotmail navigation bar.
Make sure the Mail category is selected.
Choose Mail Display Settings.
Set Message Headers to Full.
Click OK.

Now you can go back to the MSN Hotmail Inbox (or any folder) to open a message with full headers.





2009-05-22, 09:50:59
anonymous from Italy  
X-Message-Delivery: Vj0xLjE7RD0wO2w9MQ==
X-Message-InfHKIYGN+ H3D+QShLNGWNUtb8urlI/48fz0WaMEa4yBu+RyfrTjlCA4aE3ynsoZsoZEQuoz7fljBM24I=
Received: from ey-out-1920.google.com ([74.125.78.144]) by snt0-mc2-f4.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
    Fri, 15 May 2009 07:25:18 -0700
Received: by ey-out-1920.google.com with SMTP id 3so549859eyh.16
for <*******************>; Fri, 15 May 2009 07:25:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h= domainkey-signature:received:received:date:from:x-mailer:re:reply-to
:x-priority:message-id:to:subject:in-reply-to:references
:mime-version:content-type:content-transfer-encoding;
bh=CO1zjySAV6PBrYA0EYpMHTicN5q3iUtNHOqtVSF4vWY=;
b= eDT2wInwT1PH140jOOnB0cOmlQSEtceE+iQAXN9REMt/xpzKcoyG9lefYDdYDdeWY8Aky
UacOwijxV7wbiCHS1tr4HviLkNlI7Y NxITbnjNW0tzIM2Dg1MBSR8zVPBpMhpMhVk0/zeT
8DPJcBvW5S7w29NOcjRBUyd2rOOajt0on42iw=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h= date:from:x-mailer:reply-to:x-priority:message-id:to:subjecject
:in-reply-to:references:mime-version:content-type
:content-transfer-encoding;
b= kf6clmDYPHi7PgOfgs5PX6/YYUnSBnxEY/QTSoakim+r8J8oC92TfZLvqfnqfnI+ltNAP
I6mbR0ax4FErbGhEh4s0/ KSn8LYmyogquj6ujZ0z0PCI6f86H2pP8o/gihBShBShejWJgLT
RqLSepnhy9XivTXc/7bIUxXAmIN7k6xH9VP9w=
Received: by 10.216.0.79 with SMTP id 57mr1272137wea.48.1242397517781;
Fri, 15 May 2009 07:25:17 -0700 (PDT)
Return-Path: <tinsiles@gmail.com>
Received: from 127.0.0.1 (host-72-250-248-29.ercbroadband.org [72.250.248.29])
by mx.google.com with ESMTPS id u14sm2841916gvf.5.2009.05.15.07.25.14
(version=SSLv3 cipher=RC4-MD5);
Fri, 15 May 2009 07:25:17 -0700 (PDT)
Date: Fri, 15 May 2009 18:19:45 +0400
From: tinsiles <tinsiles@gmail.com>
X-Mailer: The Bat! (v2.00.6) Business
Reply-To: tinsiles <tinsiles@gmail.com>
X-Priority: 3 (Normal)
Message-ID: <7328110218.20090515181945@gmail.com>
To:******************** <**********************>
Subject: bye
In-Reply-To: <COL115-W65B6C453E346AB28717B899C5E0@phx.gbl>
References: <COL115-W286467B3597C95DA7347F49C6B0@phx.gbl>
<4118839984.20090504145821@gmail.com>
<COL115-W65A96D41AC959962A67BA69C680@phx.gbl>
<8823331781.20090505162922@gmail.com>
<COL115-W4650B58D42DA17A26C69679C660@phx.gbl>
<15317317906.20090506165105@gmail.com>
<COL115-W9BD5E10FC2C7420D73A839C660@phx.gbl>
<14799304796.20090507153732@gmail.com>
<COL115-W29AF872F37356E17919A7E9C670@phx.gbl>
<15122162390.20090508163558@gmail.com>
<COL115-W45DF910999AF2EFE261C5D9C640@phx.gbl>
<13715599875.20090511154831@gmail.com>
<COL115-W925CE032857EB2B28CD6F9C630@phx.gbl>
<23464593.20090512114502@gmail.com>
<COL115-W585F6C8FB82A4210FB648E9C600@phx.gbl>
<3631718406.20090513182904@gmail.com>
<COL115-W1E0D2CBABBFC7683271369C610@phx.gbl>
<117344343.20090514134927@gmail.com>
<COL115-W65B6C453E346AB28717B899C5E0@phx.gbl>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-OriginalArrivalTime: 15 May 2009 14:25:18.0729 (UTC) FILETIME=[F8FB1790:01C9D568]




2009-05-22, 12:36:49
OJAS from United States  
Grazie Italia
1) From the header copy
X-Mailer: The Bat! (v2.00.6) Business
2) Copy the header and paste on to http://www.ip2locat..racer.aspx and hit the Find Location Button
Copy Sender IP 15.07.25.14
3) You only need to post scammer e-mail address and these two:
X-Mailer: The Bat! (v2.00.6) Business
IP 15.07.25.14

Ciao
2009-05-22, 16:56:40
OJAS from United States  
Danke, Schweiz. Bitte schreibe auch für die deutschsprachlichen Besucher http://www.delphifa..=101#85610
2009-05-22, 17:54:33
Dirk from Heerlen, Netherlands  
Anon from Italy,

Good job! Actually, all you need is this part of the Header:

Received: from 127.0.0.1 (host-72-250-248-29.ercbroadband.org [72.250.248.29])
by mx.google.com with ESMTPS id u14sm2841916gvf.5.2009.05.15.07.25.14
(version=SSLv3 cipher=RC4-MD5);
Fri, 15 May 2009 07:25:17 -0700 (PDT)
Date: Fri, 15 May 2009 18:19:45 +0400
From: tinsiles <tinsiles@gmail.com>
X-Mailer: The Bat! (v2.00.6) Business


72.250.248.29 is the IP (the fingerprint of the computer). The rest is technical abacadabra. Forget that, unless you are interested in it. This IP is (better: is meant to be):

IP address: 72.250.248.29
Reverse DNS: host-72-250-248-29.ercbroadband.org.
Reverse DNS authenticity: [Verified]
ASN: 27446
ASN Name: ERCWC-ASN
IP range connectivity: 24
Registrar (per ASN): ARIN
Country (per IP registrar): US [United States]
Country Currency: USD [United States Dollars]
Country IP Range: 72.250.0.0 to 72.250.255.255
Country fraud profile: Normal
City (per outside source): New York, New York
Country (per outside source): US [United States]
Private (internal) IP? No
IP address registrar: whois.arin.net
Known Proxy? No

http://private.dnss..50.248.29

This link gives you the tool I always use (DNSStuff.com). It is a free online IP-tracer. You learned how to find the Header. Now you can trace the IP's.

http://member.dnsst..tools.php

2009-05-22, 18:00:23
Dirk from Heerlen, Netherlands  
Anon from Switserland,

This is the REAL Tatyana Baranova. http://hu.dancespor..otos.aspx


This image was also posted here:
Dating scammer Tatyana Baranova



Keywords:
2009-05-23, 12:50:37
OJAS from United States  
@Switzerland, you understood how they steal names. To answer your question, whose pix they steal, here is an extremely small list of names:
Ekaterina Guseva
Alena Vodonaeva
Julia Parshuta
Natalia Rudova
Vera Brezhneva
Caylian Curtis
Melissa Midwest
Alison Angel
Raven Riley
Viktoria Kotova.
You could also find more in the German thread http://www.delphifa..101#85610
2009-05-23, 19:15:18
Dirk from Heerlen, Netherlands  
Looks like the Swiss comment moved.
2009-05-24, 10:08:05
anonymous  
@Dirk comment from swiss moved to it owns dating scammer tatyana baranova
2009-05-24, 15:21:17
anonymous  
Hello my new friend .......
I am very pleased so soon to receive your letter.
This very pleased that you have not left my letter unanswered.
I will happy to see your photos, and substitutions, I will send you mine.
I realize that you and I do not understand English.
My name is Anastasia. I am 32 years. My Birthday 03/03/1977 I was born in

Russia, in Urzhumka City, where we now live.
Date of birth - a very happy holiday for me.
On this day, I received many gifts from my family and friends.
When your birthday?
My growth of 165 centimeters, weight 54 kg. I have green eyes.
I send you my photo. I hope it will be pleasant for you.
I have higher education, and I work in advertising agency in a private company,

and pass courses in economics. Our company is engaged in advertising.
What work have you? Where you work now?
I live in Kirov region Urzhumka in town and about 800 km from Moscow.
In which city you live? I am a Russian woman. How do you feel about Russian

women?
I have never been married and no children. I had the experience of dialogue

directly with men in Russia,
But they were not adjusted seriously and family relationships
Russian men are very often used in the series of alcohol, I belong to the poor.
I think we do not have such habits.
I mean that I do not smoke and do not use strong drink alcohol (spirits), but

sometimes I can drink a little 'in good company, but this happens very rarely.
I have the mother and sister. My mother lived separately from me.
Now living alone in a small apartment in the city center which I pay

independently.
I have a lot of enthusiasm. I like sewing, knitted or crocheted, cook, read

various books, sports, love to draw, make art.
I also like a movie and listening to different music.
I love to travel, but I never left for limits of Russia.
I want to have a serious relationship with her, to find love and create happy

family.
I will very happy if you want this, like me.
I would like to inform you that I write letters from the Internet center.
Unfortunately, I have no home computer and phone.
I hope that is not a problem for our relationship?
I want to know more about you, your family, your enthusiasm.
I think that I might respond as soon as possible.
I wait for your letter.
Anastasia


Keywords:
2009-05-24, 15:23:44
anonymous  



Keywords:
You are on page 2 of 7, other pages: 1 [2] 3 4 5 6 7

 

 

Are you being scammed and this is your first visit here?
Read the welcome page/ primer for newbies.
Thanks to Eddie for writing it up.

Please also read Miss Marple's article about recognizing male dating scammers.

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture:
Picture Search

You have received photos and wonder if these photos has been posted here before? Because you suspect this could be a dating scammer, but you do not want to post this picture? Try the Picture Search