Scammer IP check

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Fri Jun 27, 2008 5:28 pm

Can someone take a look at this IP and tell me if they think it is a scammer or genuine.

Was thinking about trying a small bait but she seems quite genuine with nearly all conversation off script.

I know bat! is in there but is it a 100% certain that someone with bat! is a scammer?

She claims to be from Lugansk, Ukraine.

Thanks a million.

X-Message-Info: HKIYGN+H3D+QShLNGWNUtb8urlI/48fz0WaMEa4yBu+RyfrTjlCA4aE3ynsoZEQuoz7fljBM24I=
Received: from mxb.rambler.ru ([81.19.66.30]) by bay0-mc5-f18.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Wed, 11 Jun 2008 03:41:20 -0700
Received: from mailc.rambler.ru (mailc.rambler.ru [81.19.66.27])
by mxb.rambler.ru (Postfix) with ESMTP id EA3951BB806
for ; Wed, 11 Jun 2008 14:41:19 +0400 (MSD)
Received: from LENA (unknown [92.112.202.47])
(Authenticated sender: [email protected])
by mailc.rambler.ru (Postfix) with ESMTP id 682FE621D24
for ; Wed, 11 Jun 2008 14:41:19 +0400 (MSD)
Date: Wed, 11 Jun 2008 11:34:58 +0300
From: Liliya
X-Mailer: The Bat! (v3.99.3) Professional
X-Priority: 3 (Normal)
Message-ID: <[email protected]>

Not quite a Newb Joined: 14 Jul 2005 Posts: 41

What is the email?

The Bat! is enough for me to call 'bull', but I don't normally deal with these.[/list]

Posted: Fri Jun 27, 2008 5:46 pm

[email protected]

Thanks for the reply.

Posted: Fri Jun 27, 2008 6:56 pm

I agree with TSnerd.

The IP resolves to Kiev, Ukraine.
(JSC UKRTELECOM 18, Shevchenko blvd Ukraine, Kiev) plus 'The Bat' (does she claim perhaps to write from an internet cafe? If so - Inet cafes do not have The Bat).

Yep - it's a scammer. They do not all use scripts - the Ukrainians are getting sneakier.

Hello I'm New here! Joined: 24 Jun 2008 Posts: 10

If you posted the correspondence, I bet we could figure it out. Entirely possible that it's not scripted. For all you know, it could actually be female.
Doesn't mean it isn't a scam, though.

Posted: Sat Jun 28, 2008 12:55 pm

With the ukraine vlads, the pictures are also very telling. They like to steal pics from model or soft porn sites.

Posted: Tue Jul 01, 2008 4:15 am

If it actually comes from Kiev then it's a liar for a start. Get busy on it. Get the fall in love stuff. Get the money ask and headers, and stick it up in the various sites. You do need the "fall in love" and "money ask", and photos for the proof positive. Won't take long to get it all. When you post it get the email addy, name, and the IP into the heading. That will ensure Google and anyone else can find it easily.

Hello I'm New here! Joined: 05 Jan 2009 Posts: 5

Lambrun,

I ve been in contact with this girl Liliya from Lugansk. Same email at the begining [email protected].
Then she changed it for liliya golovkova @ yandex.ru

1) She claimed to write from internet cafes. She uses "The Bat!"
NO internet cafe in Ukraine would allow this progam, not because The Bat! means scam, but because it eats too much memory and slows down other application as Internet.
2) Headers in my emails also showed like in yours, HELO=LENA... isn't she supposed to be called Liliya??
3) This computer is private, not public.
4) Remember this first address [email protected]? It is blacklisted as scammer on datingnmore.com and awas-scam.blogspot.com
http://www.datingnmore.com/fraud/scam_email3.htm

Posted: Mon Jan 05, 2009 3:16 pm

NEXTWEBSECURITY has new tools and an email parser. We seem unable to get the public to use any of the advice and help available. This one is still in business when it should be having a lean time and given up by now.