DelphiFAQ Home Search:

Dating scammer Gallina P


comments170 comments. Current rating: 4 stars (9 votes). Leave comments and/ or rate it.

Name: Gallina P


Gives her address as a village just out of Sumy, Ukraine
Belopolye Region
Hurinovka House 33

Other Comments:
Met her in Ukraine through UADREAMS agency. Writes about having a future together and will travel to meet with me. After I returned home she sent an email reminding me that she needed money for English lessons. After sending her some, she didn't reply. Wrote to her at the agency and she denies asking for money (against agency policy), and states there is no future now as I am not as she imagined!
Her full name Gallina Petrenko

Content-type: text/html


You are on page 10 of 12, other pages: 1 2 3 7 8 9 [10] 11 12
2009-08-07, 07:59:21   (updated: 2009-08-07, 08:41:40)
OJAS from United States  
Sorry Vicoz,
I will make a request to remove the articles containing the links you give. As you know, we don't use any private information from you to get these links. There seems something wrong with their web page design and configuration. Or, perhaps a deliberate cookie / tracking embedded with your account info, since you are now a problem customer. Wonder if it has other problem customers' account info! But we are not going to investigate the innards of these web pages.

Try this: Clear cache, cookies, forms, password date from your browser(s)
With some sites, their cookies they place in your computer(s) can compromise your personal info. After you clear all these, tif you like tory clicking on an experimental link from UADreams, I will post temporairily here, let's know.

Guys, please delete these articles:
OJAS 2009-08-06, 22:32:06 (updated: 2009-08-06, 22:36:58)
Dirk 2009-08-06, 18:50:31 (updated: 2009-08-06, 19:05:43)
Dirk 2009-08-06, 18:51:44 (updated: 2009-08-06, 19:11:29)
Ring http://www.delphifa..=8#100280

Wish he had it for Victoria from Poltava

Guys, pleae bait Lydia and post up to translation money letter. Thx

Ukrainian Grande Finale http://www.delphifa..p=1#99840
Ukrainian Grande Finale Translation http://www.delphifa..p=1#99841
2009-08-07, 16:56:33
OJAS from United States  
Vicoz, G'Day mate!
As we say, ''Every die is a good die in Australia'' - Finally the Baggy Greens heard you! LOL ! !

Like I said, clear all your private data from your browsers. These are variously called cache, cookies, temporary internet files, forms, passwords, etc. You will need to regularly do this house-keeping, you never know which sites puts a tracking cookie in your computer, and for what reason.

Also post X-Mailer from the headers from future scammer mails.

I am tempted to use your Lydia as an illustration for newbies.
2009-08-07, 16:57:33
OJAS from United States  
There are many similarities among non-Baltic FSU countries. A good deal of anti-scam material about Russian scammers, is also applicable to these countries. Simply replace ''Russian'' with ''non-Baltic FSU''

Plesae read this and the next article: http://www.delphifa..85#151076

And these:

Many guys are succesful, after their homework http://www.delphifa..p=1#88551

Unfortunately they don't give details of their research, it is up to us to find out ''how to'' do research

Starting with Lydia, ''she'' contacts first - A wake up call!, Look for possible scam signs! we look at the second part of ''her'' email addy, and it is an American domain http://www.delphifa..p=6#145537 - A possible scam sign

So we expect ''she'' has traveled and a reasonable level of English. But she writes perfect scamlish in http://www.delphifa..p=8#163529 - Definite scam sign

Vicoz posts her sender IP from Holland - Another definite scam sign

In the German thread Klaus posted his observations:
1) Girl contacts you unexpectedly
2) Girl living in FSU, writing as never been abroad
3) Writes scamlish German (Sceutsch)
4) Has German email address (de)
5) Uses German IP

= Scammer

For Anglophones, just some minor changes ...
3) Writes scamlish - This is called butchering English
4) Has mail domain in US / UK / Canada / AU / NA / ZA, etc.
5) Uses IPs from above countrires, or other countries outside FSU

= Scammer
2009-08-07, 17:30:11
OJAS from United States  
2009-08-07, 19:08:22
Dirk from Heerlen, Netherlands  

Why don't you remove your profile on that site? Set up a new one. Your info won't be visible anymore in the links we posted.

We can't delete the links. We need an Edit-button for it (right below). If the comments are deleted, we lose all info in it. That would be a pity.

Some (forged or hijacked) IP's from The Netherlands are being used these days. Wonder when mine pops up. LOL

This image was also posted here:
Dating scammer Natalya from Osinniki, Russia
How you recognize male scammers.

2009-08-07, 21:24:16
OJAS from United States  
Dirk updated me on the developments.
I request Dirk to send you my greetings and my e-mail address.
Write to both of us.
I am fuming at what they are doing to you, try restraining myself from unpleasant language here.
I'll be out a good part of tomorrow, some 200 km away, I'll follow events when I get to a computer.

... See Y'all ...
2009-08-07, 23:33:04   (updated: 2009-08-07, 23:34:27)
Vicoz from Australia  
Hi Dirk
Thanks for your ideas! I just wrote a curt letter to UADREAMS about the abuse of privacy and confidentiality by them exposing and even adding further personal details about me, on the internet, through Gallinas file...!!!
And that they are the ONLY ones with those particular details about ME!!!

I've asked that they facilitate your idea of a new profile for me, because ALL my details and letter translation credits etc would need to be transferred!!!!!
Also informed them that 'agencies' as well as FBI have been notified of their behavior!!!
Its not a check mate move...BUT, at least I've got them in check position also...
Making up the rules to this chess game as we go along...LOL...

OJAS...Thanks for the comments mate...Look forward to hearing from you.....Enjoy the weekend!
2009-08-08, 19:24:58
Dirk from Heerlen, Netherlands  

2009-08-09, 10:01:28
DOC from United States  

I tried to write Lydia at the addy you posted and I received a failure notice, that it could not be sent.
2009-08-09, 12:53:28
OJAS from United States  
Hi Vocoz, RE: DOC's post
Is ''her'' email correct from? http://www.delphifa..=8#163529

I'll EM you later ...
2009-08-09, 17:46:08
OJAS from United States  
2009-08-09, 22:10:35   (updated: 2009-08-09, 22:44:06)
OJAS from United States  
UADreams Agency Thread http://www.delphifa..332.shtml

Dirk recently wrote about Forged IPs. Proxy, Socks, GPRS - see #3 http://www.delphifa..?p=3#58164
2009-08-10, 20:41:40   (updated: 2009-08-10, 21:25:41)
Vicoz from Australia  
The 'lady' sent me these 2 email addys<>;

On the second; she wrote

> My name is Lydia. how are you? I hope you are fine!
> I'm sorry, I have forgotten the password to mine old email.
> And if all of you are still interested then drop me a line
> when you have time at

Maybe she forgot her password again?????...LOL...

This is IP header.....minus my email addy...

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9Mw==
X-Message-Status: n:0
X-Message-InfJGTYoYF78jGt8y0Y/ 651RTDYfRJ7keYaepP0WQ/lMuZL7G6TdpJjBtYPCsaS/aS/iJIqLP9ZNWMJsbfcf0YE9x4pK038JUmwLWY
Received: from ([]) by with Microsoft SMTPSVC(6.0.3790.3959);
    Wed, 29 Jul 2009 09:52:35 -0700
Received: from localhost ( [])
    by (Postfix) with ESMTP id 097996EBFA7
    for <>; Wed, 29 Jul 2009 18:52:32 +0200 (CEST)
X-Virus-Scanned: amavisd-new at
X-Amavis-Alert: BAD HEADER, MIME error: error: part did not end with expected
Received: from ([])
    by localhost ( []) (amavisd-new, port 10024)
    with LMTP id bsIk7+bKmV4E for <>;
    Wed, 29 Jul 2009 18:52:31 +0200 (CEST)
Received: from (unknown [])
    by (Postfix) with ESMTP id F049F3B0303
    for <>; Wed, 29 Jul 2009 18:46:19 +0200 (CEST)
Received: by (Postfix, from userid 19317)
    id E4243503AA; Wed, 29 Jul 2009 18:47:04 +0200 (CEST)
To: xxxxxxxxxxxxxxxxx
Subject: Hello again.
From: <>
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: PHP/5.2.6
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary='1248886024SPB'
Message-Id: <>
Date: Wed, 29 Jul 2009 18:47:04 +0200 (CEST)
X-OriginalArrivalTime: 29 Jul 2009 16:52:35.0843 (UTC) FILETIME=[F94AED30:01CA106C]

2009-08-11, 09:03:30   (updated: 2009-08-11, 09:04:07)
OJAS from United States  
In addition to scammer e-mail address, the 2 other useful fields from the header are:
1) X-Mailer
2) Sender IP. This can be extracted by pasting the header in http://ip2location...racer.aspx and hit find location.

Other encrypted fields are not useful for most of us. They can only be of use for Law Enforcement Authorities who can issue warrants
2009-08-11, 10:34:50
Dirk from Heerlen, Netherlands  
You are on page 10 of 12, other pages: 1 2 3 7 8 9 [10] 11 12



Are you being scammed and this is your first visit here?
Read the welcome page/ primer for newbies.
Thanks to Eddie for writing it up.

Please also read Miss Marple's article about recognizing male dating scammers.

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture:
Picture Search

You have received photos and wonder if these photos has been posted here before? Because you suspect this could be a dating scammer, but you do not want to post this picture? Try the Picture Search