Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Heisses Thema (Mehr als 10 Antworten) Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com> (Gelesen: 4070 mal)
 
bigbear
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam

Beiträge: 1325
Mitglied seit: 08. September 2009
Geschlecht: männlich
Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
18. Januar 2017 um 17:45
 
Hello! My name is Darya. I am 33 years old I live in Belgorod, Russia. I work as a beautician. I never been married and do not have kids! I like to meet new people, want to know more about you and your country. many women from Russia, found a good and kind man from another country, I'm sure I deserve normal happiness. I'm not looking for fun or sex games, I am looking only serious relationship. if you like my photos I'd be happy to answer your letter!! Darya.

Spoiler:
Delivered-To:xxx
Received: by 10.107.174.212 with SMTP id n81csp503660ioo;
        Tue, 17 Jan 2017 07:26:00 -0800 (PST)
X-Received: by 10.157.25.140 with SMTP id k12mr13587712otk.174.1484666760632;
        Tue, 17 Jan 2017 07:26:00 -0800 (PST)
Return-Path: <edxqkzb@host04.onlinenic.com>
Received: from host04.onlinenic.com (host04.onlinenic.com. [216.245.210.50])
        by mx.google.com with ESMTPS id b53si10166292otd.153.2017.01.17.07.26.00
        for <xxx>
        (version=TLS1 cipher=AES128-SHA bits=128/128);
        Tue, 17 Jan 2017 07:26:00 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of edxqkzb@host04.onlinenic.com designates 216.245.210.50 as permitted sender) client-ip=216.245.210.50;
Authentication-Results: mx.google.com;
       spf=pass (google.com: best guess record for domain of edxqkzb@host04.onlinenic.com designates 216.245.210.50 as permitted sender) smtp.mailfrom=edxqkzb@host04.onlinenic.com;
       dmarc=fail (p=NONE sp=NONE dis=NONE) Quelltext.from=gmail.com
Received: from edxqkzb by host04.onlinenic.com with local (Exim 4.87)
     (envelope-from <edxqkzb@host04.onlinenic.com>)
     id 1cTVe3-0002WB-4B
     for xxx; Tue, 17 Jan 2017 09:25:59 -0600
To: xxx
Subject: Greetings
X-PHP-Script: 216.245.210.50/~edxqkzb/bin1.php for 78.108.180.222
From: <pavlenkodarr@gmail.com>
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: PHP/5.5.32
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="1484666759SPB"
Message-Id: <E1cTVe3-0002WB-4B@host04.onlinenic.com>
Date: Tue, 17 Jan 2017 09:25:59 -0600
X-AntiAbuse: This Quelltext was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host04.onlinenic.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [891 162] / [47 12]
X-AntiAbuse: Sender Address Domain - host04.onlinenic.com
X-Get-Message-Sender-Via: host04.onlinenic.com: authenticated_id: edxqkzb/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: host04.onlinenic.com: edxqkzb
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/edxqkzb/public_html/bin1.php 
X-Source-Dir: edxqkzb.com:/public_html
X-Antivirus: avast! (VPS 170117-2, 17.01.2017), Inbound message
X-Antivirus-Status: Clean
« Zuletzt geändert: 02. Februar 2017 um 18:53 von Stiray » 
Grund: Betreffzeile korrigiert 

hi_022.jpg ( 49 KB | Downloads )
hi_022.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
trucker105
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11097
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #1 - 18. Januar 2017 um 18:09
 
« Zuletzt geändert: 18. Januar 2017 um 18:58 von Stiray » 
Grund: Betreffzeile korrigiert 
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 68379
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #2 - 18. Januar 2017 um 19:09
 
Der Scammer hat ein Script auf dem russischen Server Yes Networks Unlimited Ltd installiert. Er schreibt seine Mail über diesen
Server und versendet sie dann über den amerikanischen Server Limestone Networks. Das ist die totale Verschleierung.


Code
Alles auswählen
IP:	78.108.180.222
Decimal:	1315747038
Hostname:	mail.galaxy-file.com
ASN:	62160
ISP:	Yes Networks Unlimited Ltd
Organization:	Yes Networks Unlimited Ltd
Services:	Likely mail server
Assignment:	Static IP
Continent:	Europe
Country:	Russia
State/Region:	Kaluzhskaya Oblast'
City:	Obninsk 



Code
Alles auswählen
IP:	216.245.210.50
Decimal:	3639988786
Hostname:	host04.onlinenic.com
ASN:	46475
ISP:	Limestone Networks
Organization:	Limestone Networks
Services:	None detected
Type:	Corporate
Assignment:	Static IP
Continent:	North America
Country:	United States
State/Region:	Texas
City:	Dallas 



Zitat:
from [...] [216.245.210.50]) by mx.google.com with ESMTPS; Tue, 17 Jan 2017 07:26:00 -0800 (PST)
From: <pavlenkodarr@gmail.com>
Date: Tue, 17 Jan 2017 09:25:59 -0600


Zitat:
envelope-from <edxqkzb@host04.onlinenic.com>


Zitat:
X-PHP-Script: 216.245.210.50/~edxqkzb/bin1.php for 78.108.180.222


Zitat:
X-Mailer: PHP/5.5.32
« Zuletzt geändert: 26. Januar 2017 um 21:30 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
bigbear
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam

Beiträge: 1325
Mitglied seit: 08. September 2009
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #3 - 25. Januar 2017 um 16:51
 
Hi! It again Darya. I hope you received my Previous letter?
With impatience I shall wait from you the answer.
I have not received your letter.
Tell me if you don't like me!
I hope that all is well and you write me!

Spoiler:
Delivered-To: xxx
Received: by 10.107.174.212 with SMTP id n81csp1333000ioo;
        Mon, 23 Jan 2017 11:47:11 -0800 (PST)
X-Received: by 10.25.24.152 with SMTP id 24mr9908788lfy.12.1485200831294;
        Mon, 23 Jan 2017 11:47:11 -0800 (PST)
Return-Path: <pavlenkodarr@gmail.com>
Received: from mail-lf0-x243.google.com (mail-lf0-x243.google.com. [2a00:1450:4010:c07::243])
        by mx.google.com with ESMTPS id g7si10428168ljg.3.2017.01.23.11.47.10
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Mon, 23 Jan 2017 11:47:11 -0800 (PST)
Received-SPF: pass (google.com: domain of pavlenkodarr@gmail.com designates 2a00:1450:4010:c07::243 as permitted sender) client-ip=2a00:1450:4010:c07::243;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com;
       spf=pass (google.com: domain of pavlenkodarr@gmail.com designates 2a00:1450:4010:c07::243 as permitted sender) smtp.mailfrom=pavlenkodarr@gmail.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=gmail.com
Received: by mail-lf0-x243.google.com with SMTP id q89so14014044lfi.1
        for <xxx>; Mon, 23 Jan 2017 11:47:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=date:from:to:message-id:subject:mime-version;
        bh=GEfTwXMNFGji62wZvXrcFp2t29jvYIG8P9wOF7ReeP8=;
        b=KIhwdvvhgQqNwF7MZ+FFhrEibU/KwUmwk+Pen0eB0c1Y3LwTUX9fZ6+I9pbpCZ1b3i
         UBxcYXynN3YtSsqjzmfkptA93ZhQqZjts044QL9LP94BGAVVxfT+8icFM2xJOre48O54
         LR3IK9d+40pkQAleiWJkKAfLGvz9zJylzx/J1BU8iu7jkP15gq3vl1BUWtGdAV6awJIv
         +MOJiSW35lk+s3mA3HaCSHONhajXmTTp1dFeef6mYSpZGiYb2mLQJXNJwePXch/X2VZw
         fOQq2pg5NgWHd8BJawXLMpMlsLZ2LfDF/mNUcM7HkJvS/E19hFw94iXmnNArXOxc3JN9
         Z2aQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:date:from:to:message-id:subject:mime-version;
        bh=GEfTwXMNFGji62wZvXrcFp2t29jvYIG8P9wOF7ReeP8=;
        b=s58lMkCOw5/4fS3V7rNVt65E6BHcaRtZIsp26UNoPYgPZ3SGdEThwOVtRjuStL2eJY
         G+GMPVlLWeZeDzyOrI54MRtgR84giYq6mnK3YL4oRolywKGoz4kPOmBndwveb6etV/LL
         1IiwUjrbg4Q6uiHKEiStGlwG3+V6EDr4XOoVCiZxucuM7cCOGxy2mUFXHCRZC35tmjAK
         9IWk1yUQ5rld6W1N4MC/El8aXk6hJ0mKGjM0U5yaAecZsE1LpamKgHH3DpgwX3OTIe5J
         RulwZRhzditiL7inmXepe5l3lkkDfE/FkiusyMQD6YsWH48VSuETQEB4xWHvMHQorxzk
         sn+Q==
X-Gm-Message-State: AIkVDXIePzhoVHFsfRyPH9INSpBDaGt9MIt1y/xfnno5jDrBMtwC3n5Ddxvh0PgxnSqDPw==
X-Received: by 10.46.6.17 with SMTP id 17mr13061056ljg.14.1485200830359;
        Mon, 23 Jan 2017 11:47:10 -0800 (PST)
Return-Path: <pavlenkodarr@gmail.com>
Received: from [10.97.10.10] ([192.40.95.5])
        by smtp.gmail.com with ESMTPSA id u12sm6559018lja.19.2017.01.23.11.47.09
        for <xxx>
        (version=TLS1 cipher=AES128-SHA bits=128/128);
        Mon, 23 Jan 2017 11:47:09 -0800 (PST)
Date: Mon, 23 Jan 2017 21:19:14 +0300
From: "pavlenkodarr@gmail.com" <pavlenkodarr@gmail.com>
To: "xxx" <xxx>
Message-ID: <936764668.20170123211914@gmail.com>
Subject: Hi! It again Darya
MIME-Version: 1.0
Content-Type: multipart/mixed;  boundary="----------1011E412F21D89E10"
X-Antivirus: avast! (VPS 170123-0, 23.01.2017), Inbound message
X-Antivirus-Status: Clean
« Zuletzt geändert: 25. Januar 2017 um 19:48 von Stiray »  

For_you_005.jpg ( 127 KB | Downloads )
For_you_005.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 68379
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #4 - 25. Januar 2017 um 19:53
 
Mail über Finnland  Smiley

Code
Alles auswählen
IP:	192.40.95.5
Decimal:	3223871237
Hostname:	192.40.95.5
ASN:	46805
ISP:	CachedNet LLC
Organization:	CachedNet LLC
Services:	Network sharing device or proxy server
Recently reported forum spam source. (9)
Type:	Corporate
Assignment:	Static IP
Continent:	Europe
Country:	Finland
State/Region:	Uusimaa 



Zitat:
from [10.97.10.10] ([192.40.95.5]) by smtp.gmail.com with ESMTPSA; Mon, 23 Jan 2017 11:47:09 -0800 (PST)
Date: Mon, 23 Jan 2017 21:19:14 +0300
From: "pavlenkodarr@gmail.com" <pavlenkodarr@gmail.com>
  
Zum Seitenanfang
 
IP gespeichert
 
bigbear
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam

Beiträge: 1325
Mitglied seit: 08. September 2009
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #5 - 28. Januar 2017 um 19:29
 
Sie meckert...  Smiley und hat kein Foto mitgeschickt.

Now my working day is over, I wanted to see your letter,
I've been waiting for this all day, but you do not write me!!
sometimes I can not answer you, but for one reason, because I use the computer at work !!
I hope you can understand this???
I am very sad and lonely! Why not write me??
but for some reason you can't find 5 minutes of free time and write me a little letter?
for you it's difficult??? maybe my letter with my picture in the spambox?
you can check the spambox ?? I have bad Internet at work, it's 3G!!!
maybe I answered some of Your questions or thoughts??
Don't forget we speak different languages,
sometimes I can't understand Your questions!!
Ask me again Your question, I will answer all Your questions, I promise!!!
I hope you're well ??
maybe you forgot about the woman from Russia, that's so sad!!!
I just want to understand why you didn't write me??!!!!
can you tell me why???
I am an ordinary woman who wants to know more about you
I want to be closer to you!! it's bad for you???
Now go home, I'm sad !! I hope to get Your letter!
Please with me!! I'll be waiting!!
 
Darya.
 
Spoiler:
Delivered-To: xxx
Received: by 10.107.174.212 with SMTP id n81csp694871ioo;
        Sat, 28 Jan 2017 09:06:55 -0800 (PST)
X-Received: by 10.46.14.18 with SMTP id 18mr4784902ljo.67.1485623215378;
        Sat, 28 Jan 2017 09:06:55 -0800 (PST)
Return-Path: <pavlenkodarr@gmail.com>
Received: from mail-lf0-x242.google.com (mail-lf0-x242.google.com. [2a00:1450:4010:c07::242])
        by mx.google.com with ESMTPS id 83si4772553lfu.396.2017.01.28.09.06.55
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sat, 28 Jan 2017 09:06:55 -0800 (PST)
Received-SPF: pass (google.com: domain of pavlenkodarr@gmail.com designates 2a00:1450:4010:c07::242 as permitted sender) client-ip=2a00:1450:4010:c07::242;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com;
       spf=pass (google.com: domain of pavlenkodarr@gmail.com designates 2a00:1450:4010:c07::242 as permitted sender) smtp.mailfrom=pavlenkodarr@gmail.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=gmail.com
Received: by mail-lf0-x242.google.com with SMTP id x1so28069606lff.0
        for <xxx>; Sat, 28 Jan 2017 09:06:55 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=date:from:to:message-id:subject:mime-version
         :content-transfer-encoding;
        bh=pT/oH7Dim5WFSarFzbx+NjxjYMUprIX6th7mfh0g6NM=;
        b=Vo2Nx1kPjLQ+nimwL+0we6YTpUWmus4eeOFNZbmsMpCIQ/QJJNVx+gSXKa29H/z4Yr
         Ju1nUWTyKHOTQwHgMK2oBmrxH6AON1qNsb3FxG7aESub28EKjnRleqsbyIc6MJ6XHir1
         Jnwsu8fDLk4fp3AE5t/t0bPyiz8d9t0K4/hL+3ZObCXYTx7xNpjPTl0DD9DWC54ic+YI
         b68OJ+Ple0KVRojSGOqH/c+iBgiJWY1d5viUh3+L8DGj1ZjzhIUVBNGM3d0Q5hThkMdp
         iNoiFHVtujer/f+2DnPKljqRw+s9ts6XG+Zjvu2WuyvPgdXJaBAStrwDPsMClZ7ILOH3
         dR2Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:date:from:to:message-id:subject:mime-version
         :content-transfer-encoding;
        bh=pT/oH7Dim5WFSarFzbx+NjxjYMUprIX6th7mfh0g6NM=;
        b=INBRXtD+T+B/BFg2utB/uFoT8PcGtzKIvjg5hkhXkZ8x15T2LIG+PSJ1eqKPDa1mDr
         1YsN8FylYwjnbXRv3qsRt5zomt5/q14Vkf5PlJYVAq2g5HVnvH+wpR2d25U19+Rlw5WL
         pEglmnjITlBYOtv+VjhlgzyTTmZFnqhd7BADZ+LtcxqP5qYztuegMcr6YeyGYN0qa0D3
         ExmqByEKCWuB7245cCUeQ63qDAnIbtFHBxUNCVeblcUcNOrIEwyCB59JLyd120avHjCG
         24lUQCsRaj5Z9eRaAvKcPWvZ64rZIUaLi46TPlUCg1GEBVbscUzrlbCoZ5+gR5YoBLNj
         S2Jw==
X-Gm-Message-State: AIkVDXJghEN90kN89r6knc7cw9tdalSIsYvQju9PFBkLFquV3r05tjX32ybZFYNKssv/zg==
X-Received: by 10.25.33.212 with SMTP id h203mr4483969lfh.131.1485623214575;
        Sat, 28 Jan 2017 09:06:54 -0800 (PST)
Return-Path: <pavlenkodarr@gmail.com>
Received: from [10.45.10.10] ([192.40.95.7])
        by smtp.gmail.com with ESMTPSA id s10sm2225437lja.18.2017.01.28.09.06.53
        for <xxx>
        (version=TLS1 cipher=AES128-SHA bits=128/128);
        Sat, 28 Jan 2017 09:06:54 -0800 (PST)
Date: Sat, 28 Jan 2017 18:25:22 +0300
From: "pavlenkodarr@gmail.com" <pavlenkodarr@gmail.com>
To: "xxx" <xxx>
Message-ID: <1913997959.20170128182522@gmail.com>
Subject: I'm waiting for you!
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
X-Antivirus: avast! (VPS 170128-0, 28.01.2017), Inbound message
X-Antivirus-Status: Clean
« Zuletzt geändert: 28. Januar 2017 um 20:58 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 68379
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #6 - 28. Januar 2017 um 21:00
 
bigbear schrieb on 28. Januar 2017 um 19:29:
und hat kein Foto mitgeschickt.


@ bigbear

Dann schreibe etwas schönes, damit ich etwas zu tun bekomme. 

Mail über Finnland  Smiley

Code
Alles auswählen
IP:	192.40.95.7
Decimal:	3223871239
Hostname:	192.40.95.7
ASN:	46805
ISP:	CachedNet LLC
Organization:	CachedNet LLC
Services:	Network sharing device or proxy server
Recently reported forum spam source. (342)
Type:	Broadband
Assignment:	Static IP
Country:	Finland
State/Region:	Southern Finland
City:	Helsinki 



Zitat:
from [10.45.10.10] ([192.40.95.7]) by smtp.gmail.com with ESMTPSA; Sat, 28 Jan 2017 09:06:54 -0800 (PST)
Date: Sat, 28 Jan 2017 18:25:22 +0300
From: "pavlenkodarr@gmail.com" <pavlenkodarr@gmail.com>
  
Zum Seitenanfang
 
IP gespeichert
 
bigbear
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam

Beiträge: 1325
Mitglied seit: 08. September 2009
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #7 - 30. Januar 2017 um 17:35
 
Sie hat geantwortet...fast alles Lüge.

Hello dear xxx!!!
I like your name!
How have you been?
Thank you that you found time found time to write me!
I am happy that could interest you!!!!!
I'm writing this letter from my work, because I do not have a computer.
I have to wait for the salary and buying the laptop,
I'll be happy to get your letter every day on my work.
I will tell you about work!
I work 6 days a week.
I begin work at 10:00 in the morning.
And I finish work at 19:00 in the evening.
I can't answer your letter Sunday, because it's a 1 day weekend!
In my last letter said I work as a beautician and makeup artist.
My campaign has been selling Mary Kay cosmetics in Russia.
I am creating a certain image of the client.
During work I take into account the wishes of the customer,
his physical face shape, eyes, eyebrows, clothing style and lifestyle.
I have to consider trends and innovations of global cosmetic brands.
my goal is to emphasize the dignity of the client and to hide the flaws of face.
the make-up add shape to the eyes, lips, and other parts of the face. 
I live in a big town called Belgorod.
You can see my city in the Internet.
Moscow is the capital of Russia.
The distance to the city of Moscow about 668 kilometers from my town.
Have you ever been to Russia?
on a Dating site I browsed a lot of profiles.
but I have written only to you!
It is difficult to explain my choice, because I get acquainted for the first time thus!
Probably it prompted my heart that I should write a letter.
I trust my heart.
I want to ask you about the sincerity and respect.
I want to make our communication with you was based on trust.
Now we just got to know each other.
I hope that over time the trust will be between us.
In the future, I can give you my cell phone, it will be later,
because the calls is very expensive.
I'll tell you about me!
I'm neat and clean woman and for me it is important to be well-groomed and always be in good shape.
I am interested in your life.
Please do not forget to answer my questions.
What do you do in your spare time?
Today I send you my photos again and I'll be glad to see your photos in a new letter.
Thank you for your attention!
If you have a Skype, write it to me, I soon plan to buy laptop and make a Skype.
it is very convenient talk and see each other in real time.
I hope my letter was not boring and you enjoyed it!
I wish you a good day!
Darya

Spoiler:
Delivered-To: xxx
Received: by 10.223.176.253 with SMTP id j58csp228575wra;
        Mon, 30 Jan 2017 07:01:30 -0800 (PST)
X-Received: by 10.46.71.140 with SMTP id u134mr7665945lja.16.1485788489934;
        Mon, 30 Jan 2017 07:01:29 -0800 (PST)
Return-Path: <pavlenkodarr@gmail.com>
Received: from mail-lf0-x243.google.com (mail-lf0-x243.google.com. [2a00:1450:4010:c07::243])
        by mx.google.com with ESMTPS id c1si7779269lfd.314.2017.01.30.07.01.29
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Mon, 30 Jan 2017 07:01:29 -0800 (PST)
Received-SPF: pass (google.com: domain of pavlenkodarr@gmail.com designates 2a00:1450:4010:c07::243 as permitted sender) client-ip=2a00:1450:4010:c07::243;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com;
       spf=pass (google.com: domain of pavlenkodarr@gmail.com designates 2a00:1450:4010:c07::243 as permitted sender) smtp.mailfrom=pavlenkodarr@gmail.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=gmail.com
Received: by mail-lf0-x243.google.com with SMTP id q89so30665344lfi.1
        for <xxx>; Mon, 30 Jan 2017 07:01:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=date:from:message-id:to:subject:in-reply-to:references:mime-version;
        bh=SFoRcUz5mFWf3blJdcRqUqsZuM0WEzOZg3zfLAenWKU=;
        b=H7ele8xe5qtUPvr2/g2lMKHiq7wf4CUXWqiuGS/1BLNYPNmTG1OMEieQlfE0IXbfHX
         XC/PTKKsyQM0wo3AI4KBjP/sHF+AflnxbDaG88xD5a9EXwn5nXrUhQjF5wc+TAjjbnRK
         irGz9RR35CmoRiNVCU8vkqLNGdIU5QC6SM50hYyW8ecKHWBL4lF8r265EBHNmcJdoRMf
         7gh2oGVYDRi93gjGvA89ihm3NGQbo43vkz5xm10UB2QyF3LoQNSNch5VRoR8SbsImQGM
         fv1wzMIpifhr9J7hHvOmfrygkBQML4zvwKmIORfj2iD0jlY98E/2qNFXlZJLUMx7VXoo
         hsLw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:date:from:message-id:to:subject:in-reply-to
         :references:mime-version;
        bh=SFoRcUz5mFWf3blJdcRqUqsZuM0WEzOZg3zfLAenWKU=;
        b=BNcLjXJUBhG720yHuo2YTruD4/key3QQKmlGcOpyj9RozKx5haSdbJIpA/bBTQeckF
         n01PKY6rKND9mYxb50vcSVv/xzcK3HpwVI08fSqEfQuJi+nlHtXYOvKnrmIpX6Ci00aH
         RukdWC+HOW+IXFpZXY+LDb5IqsdzGtxbOcVUvSYapibZ9/rDUObeB3Tw2iFsweIc+4uI
         51Hboda3in41RHQ9xBdfBysmY8Z8L+iBAPznixoU9hyAlX16rHOqaKKwsYF9GWBLWRp3
         gVrPxbr8ae82p58uYvly6UkAoAXSLkCD35X0/y2PFhygknQ8GHbOaGS5wy8O6XeQ7+N8
         +wFA==
X-Gm-Message-State: AIkVDXLnlR28rNzZzy5fltGGkunmrvQXCN02bU0LU+vC/opE+LRjv/TXRl77gPu4EqVedA==
X-Received: by 10.25.86.2 with SMTP id k2mr7186110lfb.51.1485788489107;
        Mon, 30 Jan 2017 07:01:29 -0800 (PST)
Return-Path: <pavlenkodarr@gmail.com>
Received: from [10.51.10.6] ([192.40.95.10])
        by smtp.gmail.com with ESMTPSA id h23sm3799816lfi.6.2017.01.30.07.01.26
        for <xxx>
        (version=TLS1 cipher=AES128-SHA bits=128/128);
        Mon, 30 Jan 2017 07:01:28 -0800 (PST)
Date: Mon, 30 Jan 2017 17:48:31 +0300
From: pavlenkodarr@gmail.com
X-Priority: 3 (Normal)
Message-ID: <1778689848.20170130174831@gmail.com>
To: xxx <xxx>
Subject: it's my job
In-Reply-To: <xxx>
References: <1913997959.20170128182522@gmail.com> <xxx>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------04011714E2F01EF31"
X-Antivirus: avast! (VPS 170130-0, 30.01.2017), Inbound message
X-Antivirus-Status: Clean


------------04011714E2F01EF31
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
« Zuletzt geändert: 30. Januar 2017 um 19:01 von Stiray »  

I_working.jpg ( 279 KB | Downloads )
I_working.jpg
me_181.jpg ( 126 KB | Downloads )
me_181.jpg
my_colleagues_001.jpg ( 166 KB | Downloads )
my_colleagues_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 68379
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #8 - 30. Januar 2017 um 19:03
 
Mail über Finnland  Smiley

Code
Alles auswählen
IP:	192.40.95.10
Decimal:	3223871242
Hostname:	192.40.95.10
ASN:	46805
ISP:	CachedNet LLC
Organization:	CachedNet LLC
Services:	Network sharing device or proxy server
Recently reported forum spam source. (211)
Type:	Broadband
Assignment:	Static IP
Continent:	Europe
Country:	Finland
State/Region:	Uusimaa 



Zitat:
from [10.51.10.6] ([192.40.95.10]) by smtp.gmail.com with ESMTPSA; Mon, 30 Jan 2017 07:01:28 -0800 (PST)
Date: Mon, 30 Jan 2017 17:48:31 +0300
From: "pavlenkodarr@gmail.com" <pavlenkodarr@gmail.com>
  
Zum Seitenanfang
 
IP gespeichert
 
bigbear
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam

Beiträge: 1325
Mitglied seit: 08. September 2009
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #9 - 31. Januar 2017 um 19:28
 
Hi xxx!!
I waited your letter with impatience!
sorry I couldn't reply sooner, had a lot of work,
but I found the time to write a long letter and sent a photo of my work!
At work there was no Internet to write to you.
I went to visit his sister to write you a letter!
I'm not afraid. Our army is one of the strongest.
I want to develop our dialogue, I hope to learn about you and your life anymore!
Why do you search in a Internet instead in life? 
I will try to answer this question!!
I know many women who found a good man from other country for serious relations!
these women are now very happy! I asked myself! why don't I try to find a man via Internet!
for this reason, now you read my letter!!
what are you doing in your free time?
I love to read and listen to music! I listen music which to me it is pleasant, there is no certain genre!
I like to listen Roxette you heard about this musical group?
2 times in week I visit the pool! you like to swim? you visit the pool?
Sometimes I lay on a sofa and I look TV! It too rest! You agree?
I am pleased to read your letter.
When I write a letter to you, I want to tell you everything that happens in my life.
I want to know you better! I am interested to know more about your life.
It is a pity that the distance between us.
I can not even suggest how far you are.
What city do you live?
I can find it on the Internet.
If we lived nearby, we could meet in a cafe and talk endlessly.
I sincerely hope that you maintain my dreams.
I hope that one day our dreams will come true with you.
Do you have a dream?
I have hobbies, I enjoy cooking!
I really like to cook various dishes.
I would be happy to introduce you to Russian cuisine in the future.
I'm sure you will not refuse from my delicious dishes Smiley
I try to check my email every day, when I work.
Sometimes, I have a lot of work, I don't have time to check email.
Be assured that I always answer your letter as soon as possible.
I look will be waiting to read your new letter.
Darya

Spoiler:
Delivered-To: xxx
Received: by 10.223.176.253 with SMTP id j58csp388787wra;
        Tue, 31 Jan 2017 10:20:15 -0800 (PST)
X-Received: by 10.25.21.205 with SMTP id 74mr9633415lfv.182.1485886815104;
        Tue, 31 Jan 2017 10:20:15 -0800 (PST)
Return-Path: <pavlenkodarr@gmail.com>
Received: from mail-lf0-x22b.google.com (mail-lf0-x22b.google.com. [2a00:1450:4010:c07::22b])
        by mx.google.com with ESMTPS id u18si7280052lfd.134.2017.01.31.10.20.14
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 31 Jan 2017 10:20:15 -0800 (PST)
Received-SPF: pass (google.com: domain of pavlenkodarr@gmail.com designates 2a00:1450:4010:c07::22b as permitted sender) client-ip=2a00:1450:4010:c07::22b;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com;
       spf=pass (google.com: domain of pavlenkodarr@gmail.com designates 2a00:1450:4010:c07::22b as permitted sender) smtp.mailfrom=pavlenkodarr@gmail.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=gmail.com
Received: by mail-lf0-x22b.google.com with SMTP id z134so187170097lff.3
        for <xxx>; Tue, 31 Jan 2017 10:20:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=date:from:message-id:to:subject:in-reply-to:references:mime-version;
        bh=Sh0HvtXkjuCmNc0KtyqfdpxDuey3x+UHHlJF5sVzWbg=;
        b=lvYUrSQ7Yy0NktgAr/ykS/knlEh2BqMoGZsoEadK/aifC1xV984gN6AdYMoWjY/pbo
         aqA+1KX30XIWxtqPwpOaWEuuEv7lYiCD4trQbmaOl663JxQoYOuTdeJzxRvDUESrUvDw
         giMyen1+x4gILwjUWFXSfnd+H8Y5eINfybNuBsEIx7/alRBVD25DtmnwUpEYbuhffnUe
         /nZEfJpHnAMR0fgMVkUAvEP2kagahezEJFo6aWnAhg+CI0vXgrK3Th88tfhJtDEPIX/5
         Cz9zC6UA+NENPMLgwmhS3BpA9buetDb1LQXAcLLhUreRHlqOPDMFQSMs4e3HuyzQ0Rb2
         aIFQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:date:from:message-id:to:subject:in-reply-to
         :references:mime-version;
        bh=Sh0HvtXkjuCmNc0KtyqfdpxDuey3x+UHHlJF5sVzWbg=;
        b=p/krpByeWrQA/sMsbqEwBQb+edboQr3np/Af7hO4rgIGoScdMDpwfYEAu3SzigUsqa
         BQw1AJlELxkS7Xw+g0YmoX413C3Q7HX9DpBM0fDewnBZmOJSZB22ucGLo1/1MsinYqJd
         IIQPoGuWndD90tQf9hfgRk9H3asLy2dQKty8DX+T1gsPYtGAn8fls2rf/+CRpDaDtto5
         YDEnMYWDLEcLiGi8ZhsAgATHduBiZqFUNx4g6KGbIuzFJvKFDMEM+gCb8IQEUhCZq7qE
         D3l3odCktOujv+Bw6L/a56oXoEId4h7lCib3koatR/iFVHyZiMPqsuCYzSc+d3o60LH0
         h/qg==
X-Gm-Message-State: AIkVDXJwDm+d7n4MECdeFdxQhmMVGZ3U+2c7wz4AqTfCDxGOhk05HZCKrfsdF/yYsYeFHA==
X-Received: by 10.46.77.17 with SMTP id a17mr10853128ljb.2.1485886814349;
        Tue, 31 Jan 2017 10:20:14 -0800 (PST)
Return-Path: <pavlenkodarr@gmail.com>
Received: from [10.10.10.14] ([192.40.95.8])
        by smtp.gmail.com with ESMTPSA id o91sm4929489lfg.17.2017.01.31.10.20.12
        for <xxx>
        (version=TLS1 cipher=AES128-SHA bits=128/128);
        Tue, 31 Jan 2017 10:20:13 -0800 (PST)
Date: Tue, 31 Jan 2017 21:20:10 +0300
From: pavlenkodarr@gmail.com
X-Priority: 3 (Normal)
Message-ID: <1543818129.20170131212010@gmail.com>
To: xxx
Subject: your hobby?!
In-Reply-To: <xxx>
References: <xxx>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------02F1041FE00FD1105"
X-Antivirus: avast! (VPS 170131-2, 31.01.2017), Inbound message
X-Antivirus-Status: Clean

------------02F1041FE00FD1105
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
« Zuletzt geändert: 15. Juli 2017 um 20:27 von Stiray »  

Hi_006.jpg ( 81 KB | Downloads )
Hi_006.jpg
My_photo_025.jpg ( 93 KB | Downloads )
My_photo_025.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 68379
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #10 - 31. Januar 2017 um 21:24
 
Mail über Finnland  Smiley

Code
Alles auswählen
IP:	192.40.95.8
Decimal:	3223871240
Hostname:	192.40.95.8
ASN:	46805
ISP:	CachedNet LLC
Organization:	CachedNet LLC
Services:	Confirmed proxy server
Recently reported forum spam source. (252)
Type:	Broadband
Assignment:	Static IP
Country:	Finland
State/Region:	Southern Finland
City:	Helsinki 



Zitat:
from [10.10.10.14] ([192.40.95.8]) by smtp.gmail.com with ESMTPSA; Tue, 31 Jan 2017 10:20:13 -0800 (PST)
Date: Tue, 31 Jan 2017 21:20:10 +0300
From: "pavlenkodarr@gmail.com" <pavlenkodarr@gmail.com>
  
Zum Seitenanfang
 
IP gespeichert
 
bigbear
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam

Beiträge: 1325
Mitglied seit: 08. September 2009
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #11 - 02. Februar 2017 um 17:59
 
Hi my dear xxx!!!
How are you doing?
Of course I like sex!
My day is much happier today because I read your letter!
I'm wondering what you're doing at the moment?
It is a pity between us a great distance.
If you do not mind, I will continue to talk about my life and ask about your life.
I want to tell you about my family.
My mother she is already retired.
I have a sister. My sister has her own family, her husband and a charming son.
I sent a photo of my nephew, his name is Aleksey, 6 years old.
Photo of my mum and sister.
My father died six years ago, a heart attack.
It was a difficult time for our family, but we have tried to provide support for each other.
I love my family.
I try to help my mom. She lives alone.
I rent an apartment and live in the other side of town!
We often meet with the family at the family table.
Do you like to watch movies?
What movies do you like?
I can not forget the wonderful movie Romeo and Juliet, Lord of the Rings, Gone With The Wind.
I like different genres, but most of all I like to romance about love, with a happy ending.
I like romantic and classical music.
What is the most popular dish in your country?
Russia is a huge country.
There are many kinds of national dishes.
I think that the national dishes in Russia, it is burgers, pancakes and many soups.
In Russia, it is very popular soups.
I'm sure you will enjoy dishes of Russian cuisine.
As to my preferences in food.
The main thing that the food was prepared from natural products.
I like salads, vegetables and fish dishes.
xxx, you have a phone number at which you can make international calls?
I have a mobile, my number is +79030248192,
but I can not make and receive international calls,
I received a phone from my work and I do not have service calls abroad.
This is a old phone, it's not a smartphone. I've never had a need for an expensive phone.
I hope I'll buy smartphone  soon, we could possibly have a chat with you on the phone in the future.
When I'm planning to call you, I'll let you know.
I know that you are a good man and I like it.
We're talking different languages in daily life.
Our countries have a different mentality.
Do you agree with me?
Please tell me about your life.
I am very interested in your life.
We are all people, and I understand you, but you and I belong to different cultures.
Some things I probably do not know.
I will be very glad to hear it from you.
Your letters help me to better understand your world.
Write me soon!
Please send your photos if you can.
I will be waiting for your letter!
I try to check email every day.
Sometimes, because of the work I do not have time to check an email, I hope you understand me??
I will try always respond to your letters.
Today I wrote a long letter to you, I now have to go back to work.
Darya.

Spoiler:
Delivered-To:xxx
Received: by 10.223.176.253 with SMTP id j58csp50741wra;
        Thu, 2 Feb 2017 06:09:13 -0800 (PST)
X-Received: by 10.25.99.29 with SMTP id x29mr3282615lfb.104.1486044553788;
        Thu, 02 Feb 2017 06:09:13 -0800 (PST)
Return-Path: <pavlenkodarr@gmail.com>
Received: from mail-lf0-x229.google.com (mail-lf0-x229.google.com. [2a00:1450:4010:c07::229])
        by mx.google.com with ESMTPS id 126si13870024lfz.27.2017.02.02.06.09.13
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Thu, 02 Feb 2017 06:09:13 -0800 (PST)
Received-SPF: pass (google.com: domain of pavlenkodarr@gmail.com designates 2a00:1450:4010:c07::229 as permitted sender) client-ip=2a00:1450:4010:c07::229;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com;
       spf=pass (google.com: domain of pavlenkodarr@gmail.com designates 2a00:1450:4010:c07::229 as permitted sender) smtp.mailfrom=pavlenkodarr@gmail.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=gmail.com
Received: by mail-lf0-x229.google.com with SMTP id v186so4966188lfa.1
        for <xxx>; Thu, 02 Feb 2017 06:09:13 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=date:from:message-id:to:subject:in-reply-to:references:mime-version;
        bh=BqiQnmXp4SD3SLE702BphlS+/T+TamB1OqKHwDOZwtc=;
        b=StksVMhC/MkEQzdXuh1idP5eH8dR2av9TwlRoFIQ9lyxjAe2+7VgXHb8N/+Nc6M9HR
         mmcIQXYbr8mro6fUWMhyLwfdslGWT/ZtFxWEoL5WO4G6r6JbO5hH/is4FjiZnUVtq8LR
         CzSLPRRYoK9jxz5hy2GKx23rUITf48pKOoLkJtJFHjEwTWtRNQhxzpw197aRhe4wNhZo
         9tC3y1y/XktswC62da0jD27bRcAy71o1CZopw3KX21aZgvArj1Ck0igGiJ8cFs8v1wzL
         HifnZkG6sg/qXxEN9Vzr51hcK0RmxJlZfoOTf9tQAKIk/+IV8OxswaNIGWLQ3byk/nNj
         wwgw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:date:from:message-id:to:subject:in-reply-to
         :references:mime-version;
        bh=BqiQnmXp4SD3SLE702BphlS+/T+TamB1OqKHwDOZwtc=;
        b=g35Tj6oVz3vBG6/W6F55sTkojUAr3gqhIRHNl14W209EUVYZlXK+Mb5l1c/T15F9gj
         GkmSWOgXIAxgxZJk2Geakl1gp++o/oIQOJO/Ymvgb7yDRnf2KKJjgIz7v54ieOE4QpY3
         Hw0zc3nMt0Rxyg/Aio0dWLAhkQUXObpEyHiBVlTXu4zluvMiBUFsdKLJBHVVbO0YjYyR
         W3pcwvf2OkBxLSABiIbenJqDkXkqrknfHwht1qa2U7htz7HBj4/6vpW5rjZaYR3qwcmW
         eKw0vx4lnDTbzR74DcRV3U2Y5KLhWD8+0iMH22/i41bxlTqIJ7ZhadFQh/bnbvVOIW4N
         gWHA==
X-Gm-Message-State: AIkVDXJ1unPORUwXBBrfXPi5QjJjavg7tf4MOi7/34U8QG0HZn4DrHv26hSCvcdoiRNHbQ==
X-Received: by 10.25.66.70 with SMTP id p67mr2570341lfa.99.1486044552975;
        Thu, 02 Feb 2017 06:09:12 -0800 (PST)
Return-Path: <pavlenkodarr@gmail.com>
Received: from [10.42.10.10] ([192.40.95.10])
        by smtp.gmail.com with ESMTPSA id y29sm4416171ljd.41.2017.02.02.06.09.10
        for <xxx>
        (version=TLS1 cipher=AES128-SHA bits=128/128);
        Thu, 02 Feb 2017 06:09:12 -0800 (PST)
Date: Thu, 2 Feb 2017 17:09:07 +0300
From: pavlenkodarr@gmail.com
X-Priority: 3 (Normal)
Message-ID: <457490554.20170202170907@gmail.com>
To: xxx <xxx>
Subject: Tell me about yourself!
In-Reply-To: <xxx>
References: <xxx>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------0791B723E08A52840"
X-Antivirus: avast! (VPS 170202-0, 02.02.2017), Inbound message
X-Antivirus-Status: Clean

------------0791B723E08A52840
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
« Zuletzt geändert: 02. Februar 2017 um 18:52 von Stiray »  

me_and_mom_002.jpg ( 217 KB | Downloads )
me_and_mom_002.jpg
me_and_sister_001.jpg ( 144 KB | Downloads )
me_and_sister_001.jpg
my_nephew_verpixelt.jpg ( 114 KB | Downloads )
my_nephew_verpixelt.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 68379
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Darya <pavlenkodarr@gmail.com> <edxqkzb@host04.onlinenic.com>
Antwort #12 - 02. Februar 2017 um 18:56
 
Mail über Finnland  Smiley

Code
Alles auswählen
IP:	192.40.95.10
Decimal:	3223871242
Hostname:	192.40.95.10
ASN:	46805
ISP:	CachedNet LLC
Organization:	CachedNet LLC
Services:	Network sharing device or proxy server
Recently reported forum spam source. (211)
Type:	Broadband
Assignment:	Static IP
Continent:	Europe
Country:	Finland
State/Region:	Uusimaa 



Zitat:
from [10.42.10.10] ([192.40.95.10]) by smtp.gmail.com with ESMTPSA; Thu, 02 Feb 2017 06:09:12 -0800 (PST)
Date: Thu, 2 Feb 2017 17:09:07 +0300
From: pavlenkodarr@gmail.com
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema