project jira-projects / Miscellaneous avatar

jira-projects/MISC#37: Reply to spammer - Aidana



Issue Information

Issue Type: issue
Status: closed
Reported By: btasker
Assigned To: btasker

Created: 18-Jan-25 14:35



Description

It's a bit of an impulsive thing, but I was checking my spam folder and noticed one of those "I've watched you from afar" type emails.

Greetings! It was long time ago I run across your email address on the internet, though I couldn't dare to get in contact with you. It is not easy for me to message a man first. I'd like to say that I am a genuine and upstanding woman. I don't want to deal with scammers. Important, if you only have got an intention to ask me for my photos where I am naked or my money, never contact me back. Done? I've got an unusual name for you – AIDANA. I am 37 years old. I stay in Kazakhstan and it is a large country in Central Asia. To get the info where it is situated you can just google it. The difference in age is not something important to me, whatsmore I am more interested in older men. In case you have a spark looking at my photos and reading this email, I am waiting to get a message from you. I am eager to know the facts about yourself, your town and your country. Do you enjoy living there??? As kind reminder a nice idea to repeat that I am only looking for a serious and truthful relationship. My intention does not include any games, sharing photos with me naked or constant talks about sex intercourse.

I thought I might lead the scammer on a bit to see where it goes - obviously from a disposable account.



Toggle State Changes

Activity


assigned to @btasker

assigned to @btasker

OK, so the mail is this - I've blurred email addresses because the claimed sending mail is almost certainly an innocent but compromised account

Screenshot_20250118_141338

The attachment is a pretty woman eating a meal and holding up her wine.

A reverse image search didn't reveal any organic matches but did show a couple of anti-scam listings (like this). It looks like the scammer consistently uses the name Aidana, though the email they ask to be contacted on is different.

A quick search of my spam box for Aidana shows a number of different attempts

other_emails

Each came from a different email address - all have domains in southeast easia (most are .jp but there is a .tw)

The contact mail (kroxakzake@gmail.com) is consistent across almost all of them, apart from one which asks me to contact them at devochkamedikfialka@gmail.com.

Across these emails, there are 3 different photos - the one I described before, another which is that photo cropped in a bit and third which is of a completely different woman wearing a cat-ear headband and stretching her legs out in front of a Xmas tree.

I'm not attaching them here because I may make this ticket public at some point and they are not AI generated - they're photos of real women that have been stolen from somewhere.

There's no metadata on the image that's particularly interesting in telling us anything about the spammer.

However, they do all carry the IPTC tag iptc.application2.SpecialInstructions

image

That FBMD prefix tells us where the images came from. Facebook is known to add that metadata to uploaded images.

I used a random name generator to create myself a name

name_generate

And have set up an email address under that name

email_create

changed the description

I've put together a reply - as I writing it, I realised that I don't really know how their marks would normally respond.

So I kept it fairly short and simple

OMG Aidana, your gorgeous!

Khazakstan looks amazin, have you got any more pics of where you live?

I'm 53, divorced and live in Yorkshire in the UK. Its a pretty place to live, but there aren't any women who look nearly as good as your round ere and the evenings can be a bit slow

btw, how did you find my email, is there someone we both know or was it just luck? either way, nice to meet you

So, now we wait...

If I don't hear anything back I'll move this ticket to public so that others can find it

changed title from Reply to spammer to Reply to spammer{+ - Aidana+}

No reply... I've been jilted by a romance scammer...

OK, moving this to be public in case it helps someone the scammer does want to respond to.