170 comments. Current rating: (9 votes). Leave comments and/ or rate it.
Name: Gallina P
Address: Gives her address as a village just out of Sumy, Ukraine
Hurinovka House 33
Other Comments: Met her in Ukraine through UADREAMS agency. Writes about having a future together and will travel to meet with me. After I returned home she sent an email reminding me that she needed money for English lessons. After sending her some, she didn't reply. Wrote to her at the agency and she denies asking for money (against agency policy), and states there is no future now as I am not as she imagined!
Her full name Gallina Petrenko
Send a message to
You are on page 10 of 12, other pages: 1237891112
I will make a request to remove the articles containing the links you give. As you know, we don't use any private information from you to get these links. There seems something wrong with their web page design and configuration. Or, perhaps a deliberate cookie / tracking embedded with your account info, since you are now a problem customer. Wonder if it has other problem customers' account info! But we are not going to investigate the innards of these web pages.
Try this: Clear cache, cookies, forms, password date from your browser(s)
With some sites, their cookies they place in your computer(s) can compromise your personal info. After you clear all these, tif you like tory clicking on an experimental link from UADreams, I will post temporairily here, let's know.
Vicoz, G'Day mate!
As we say, ''Every die is a good die in Australia'' - Finally the Baggy Greens heard you! LOL ! !
Like I said, clear all your private data from your browsers. These are variously called cache, cookies, temporary internet files, forms, passwords, etc. You will need to regularly do this house-keeping, you never know which sites puts a tracking cookie in your computer, and for what reason.
Also post X-Mailer from the headers from future scammer mails.
I am tempted to use your Lydia email@example.com as an illustration for newbies.
OJAS from United States
There are many similarities among non-Baltic FSU countries. A good deal of anti-scam material about Russian scammers, is also applicable to these countries. Simply replace ''Russian'' with ''non-Baltic FSU''
Unfortunately they don't give details of their research, it is up to us to find out ''how to'' do research
Starting with Lydia, ''she'' contacts first - A wake up call!, Look for possible scam signs!
firstname.lastname@example.org we look at the second part of ''her'' email addy, and it is an American domain http://www.delphifa..p=6#145537 - A possible scam sign
Vicoz posts her sender IP from Holland - Another definite scam sign
In the German thread Klaus posted his observations:
1) Girl contacts you unexpectedly
2) Girl living in FSU, writing as never been abroad
3) Writes scamlish German (Sceutsch)
4) Has German email address (de)
5) Uses German IP
For Anglophones, just some minor changes ...
3) Writes scamlish - This is called butchering English
4) Has mail domain in US / UK / Canada / AU / NA / ZA, etc.
5) Uses IPs from above countrires, or other countries outside FSU
Dirk updated me on the developments.
I request Dirk to send you my greetings and my e-mail address.
Write to both of us.
I am fuming at what they are doing to you, try restraining myself from unpleasant language here.
I'll be out a good part of tomorrow, some 200 km away, I'll follow events when I get to a computer.
Thanks for your ideas! I just wrote a curt letter to UADREAMS about the abuse of privacy and confidentiality by them exposing and even adding further personal details about me, on the internet, through Gallinas file...!!!
And that they are the ONLY ones with those particular details about ME!!!
I've asked that they facilitate your idea of a new profile for me, because ALL my details and letter translation credits etc would need to be transferred!!!!!
Also informed them that 'agencies' as well as FBI have been notified of their behavior!!!
Its not a check mate move...BUT, at least I've got them in check position also...
Making up the rules to this chess game as we go along...LOL...
OJAS...Thanks for the comments mate...Look forward to hearing from you.....Enjoy the weekend!
Dirk from Heerlen, Netherlands
DOC from United States
I tried to write Lydia at the addy you posted and I received a failure notice, that it could not be sent.
On the second one.....email@example.com; she wrote
> My name is Lydia. how are you? I hope you are fine!
> I'm sorry, I have forgotten the password to mine old email.
> And if all of you are still interested then drop me a line
> when you have time at firstname.lastname@example.org
Maybe she forgot her password again?????...LOL...
This is IP header.....minus my email addy...
Received: from smtpout2.provider.nl ([184.108.40.206]) by SNT0-MC4-F8.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 29 Jul 2009 09:52:35 -0700
Received: from localhost (smtpout2.provider.nl [127.0.0.1])
by smtpout2.provider.nl (Postfix) with ESMTP id 097996EBFA7
for <xxxxxxxxxxx.com>; Wed, 29 Jul 2009 18:52:32 +0200 (CEST)
X-Virus-Scanned: amavisd-new at provider.nl
X-Amavis-Alert: BAD HEADER, MIME error: error: part did not end with expected
Received: from smtpout2.provider.nl ([127.0.0.1])
by localhost (smtpout.provider.nl [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id bsIk7+bKmV4E for <xxxxxxxxxxxxl.com>;
Wed, 29 Jul 2009 18:52:31 +0200 (CEST)
Received: from ws34.provider.nl (unknown [220.127.116.11])
by smtpout2.provider.nl (Postfix) with ESMTP id F049F3B0303
for <xxxxxxxxxxxx.com>; Wed, 29 Jul 2009 18:46:19 +0200 (CEST)
Received: by ws34.provider.nl (Postfix, from userid 19317)
id E4243503AA; Wed, 29 Jul 2009 18:47:04 +0200 (CEST)
Subject: Hello again.
Content-Type: multipart/mixed; boundary='1248886024SPB'
Date: Wed, 29 Jul 2009 18:47:04 +0200 (CEST)
X-OriginalArrivalTime: 29 Jul 2009 16:52:35.0843 (UTC) FILETIME=[F94AED30:01CA106C]
In addition to scammer e-mail address, the 2 other useful fields from the header are:
2) Sender IP. This can be extracted by pasting the header in http://ip2location...racer.aspx and hit find location.
Other encrypted fields are not useful for most of us. They can only be of use for Law Enforcement Authorities who can issue warrants