Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Elena <thebestgirl777intheworld@gmail.com> (Gelesen: 1186 mal)
 
seiko
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28135
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Elena <thebestgirl777intheworld@gmail.com>
19. November 2017 um 11:50
 
Good day! My name is Elena!
Iam looking your e'mail in the dating service.
I'have long been in look of a guy with whom I'm can have a serious relationships
and in the future to create a family. After I'm paid for the services of the agency,
they showed me a many profiles of lonely men, but Im choice you!!
Iam chose you from all! You really liked me and I'm wrote you this message,
with the hope that you like me too, and our sympathy will be mutual!!!
I"ll talking you a lot about me and attach you more of my pics if you reply me.
This is my email-box:
Thebestgirl777intheworld@gmail.com
I'm wish you a successful day. Have a good day!!

Spoiler:
Delivered-To: xxx
Received: by 10.107.48.77 with SMTP id w74csp2327733iow;
        Sat, 18 Nov 2017 19:17:24 -0800 (PST)
X-Google-Smtp-Source: AGs4zMaXxHaWfkahof1HUJjYVnTCHDQmk4Jl+5/gjqBDD7is9XnAfQw/vP6i7c9344Yu1SfoGXZO
X-Received: by 10.159.216.141 with SMTP id s13mr9888672plp.377.1511061444742;
        Sat, 18 Nov 2017 19:17:24 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1511061444; cv=none;
        d=google.com; s=arc-20160816;
        b=v1LDH6w9u2LwNFrazFdkw4jrtWRVE4Yd3QCGtZzfGspUrhCN+AaTRnwg+JVXM/Vw7q
         PsQlXw++5d1NtpqXgqxqNSqGauHvKx76uPnggL2vtp/VqKlo153yohhqLJCCNbaTCzVi
         OL311RoncQTog3eCTkOw91y7VRzeXZ3Xq6gh1CI5Ff/Ry3V2P633B9ByLV4uV3uyomX+
         FL+08oiSqFJlWbwK3URWHwITdT8Vz6ZqAsLDELSg6czuI5buJ5eEDFu/tFxOExhdiDrI
         nwFypqDUbfIthw0QyYhj36ic7FEWFIanzTOPHhN9WWa9LxL7lzNzqUcbaAgr87sP4h/9
         Iscw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=spamdiagnosticoutput:mime-version:date:subject:to:from:reply-to
         :message-id:dkim-signature:arc-authentication-results;
        bh=sn1tDcw+YGqzzMCi05wbLQ1ridrWK+SfiS9hb1Cm43w=;
        b=f8wFtZCKe98nzwxrvsh1G1NJxL80tDyvzEZI0ue9Le06JBG7b6GtwqHox44eWCSYEB
         FaFwmVA8HqNDNh+A4Gbpws6OJy+evW8rzQ2LiCAoK5xhkHsRM9iRGZWNmYENXOKfxdTp
         zV46H8gFYasiBr0EbjO1nG8i78Ymqxkpv7OXhS5qOUaYw2JerzFVjd3teV8khq5B9VC4
         K7mVl68taCUwjkDVHdC1qxuBZybHMTpX2/65Pjgf/XOumv7MP8C+g8H6ViCWosDJ1Juc
         zLEJdaj8fA0dSqD9uVPR/lzQQAHiV/g8EWbquwBcAne6Jnf/fmiG6acKq5k1SaE7ZT++
         /DXQ==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@gotarleton.onmicrosoft.com header.s=selector1-go-tarleton-edu header.b=TnaM3TKL;
       spf=neutral (google.com: 104.47.40.226 is neither permitted nor denied by best guess record for domain of xxx) smtp.mailfrom=xxx
Return-Path: <xxx>
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03hn0226.outbound.protection.outlook.com. [104.47.40.226])
        by mx.google.com with ESMTPS id a67si5319346pgc.233.2017.11.18.19.17.24
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
        Sat, 18 Nov 2017 19:17:24 -0800 (PST)
Received-SPF: neutral (google.com: 104.47.40.226 is neither permitted nor denied by best guess record for domain of xxx) client-ip=104.47.40.226;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@gotarleton.onmicrosoft.com header.s=selector1-go-tarleton-edu header.b=TnaM3TKL;
       spf=neutral (google.com: 104.47.40.226 is neither permitted nor denied by best guess record for domain of xxx) smtp.mailfrom=xxx
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gotarleton.onmicrosoft.com; s=selector1-go-tarleton-edu; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=sn1tDcw+YGqzzMCi05wbLQ1ridrWK+SfiS9hb1Cm43w=; 6XJYvCtpcPYJM=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=xxx;
Received: from 88.212.246.220 (210.245.33.200) by BN6PR0101MB2963.prod.exchangelabs.com (10.174.86.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.239.5; Sun, 19 Nov 2017 03:17:20 +0000
Message-ID: <B94300CE80547B588481C87EFA9B6BC2@go.tarleton.edu>
Reply-To: Elena <Thebestgirl777intheworld@gmail.com>
From: Elena <xxx>
To: <xxx>
Subject: Hi! How are u? How is your day? I would like to know more about you.
     -
     7:17:03 PM
Date: Sat, 18 Nov 2017 19:17:03 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="048ddde78e4d8c085cc400744ffd"
X-Originating-IP: [210.245.33.200]
X-ClientProxiedBy: PS1PR0601CA0102.apcprd06.prod.outlook.com (10.170.176.156) To BN6PR0101MB2963.prod.exchangelabs.com (10.174.86.146)
Return-Path: xxx
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 2159de2c-7731-40b2-04d1-08d52efc0d2d
X-Microsoft-Antispam: 201702281549075)(2017052603258);SRVR:BN6PR0101MB2963;
X-Microsoft-Exchange-Diagnostics: GGFYEUPG7DKKuy9ajmIMmWFgnkrh6MbxhsCNVR1Nj1keZUUsRMErKS+Xj+aEhtM=
X-MS-TrafficTypeDiagnostic: BN6PR0101MB2963:
X-Microsoft-Exchange-Diagnostics: Sw7QUCTAsNFNpw==
X-Microsoft-Antispam-PRVS: 
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: 101)(100110200095)(100000805101)(100110500095);SRVR:BN6PR0101MB2963;
X-Forefront-PRVS: 0496DF6962
X-Forefront-Antispam-Report: ords;A:0;MX:1;LANG:en;
Received-SPF: None (protection.outlook.com: go.tarleton.edu does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: rXf4/EYMPlsiDzp3n856aBHWtk2x6gHQ=
X-Microsoft-Exchange-Diagnostics: Kfews6rfvP4ZkhbLcqJ+SOyLn1NGD7
SpamDiagnosticOutput: 1:22
X-OriginatorOrg: go.tarleton.edu
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Nov 2017 03:17:20.8764 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 2159de2c-7731-40b2-04d1-08d52efc0d2d
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: b525d9fd-a639-4881-889f-25268a87b9c8
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR0101MB2963

--048ddde78e4d8c085cc400744ffd
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
« Zuletzt geändert: 17. Januar 2020 um 17:30 von Wesermann »  

thebestgirl777intheworl.jpg ( 6 KB | Downloads )
thebestgirl777intheworl.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65493
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Elena <thebestgirl777intheworld@gmail.com>
Antwort #1 - 19. November 2017 um 12:05
 
Mail über Vietnam  Smiley

Code
Alles auswählen
IP:	210.245.33.200
Decimal:	3539280328
Hostname:	210-245-33-megaoff-static-ip.hcm.fpt.vn
ASN:	18403
ISP:	The Corporation for Financing and Promoting Techno
Organization:	FPT Telecom Company
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Continent:	Asia
Country:	Vietnam
State/Region:	Ho Chi Minh City
City:	Ho Chi Minh City 



Zitat:
X-Originating-IP: [210.245.33.200]


Tatsächlich kommt die Mail über Russland

Code
Alles auswählen
IP:	88.212.246.220
Decimal:	1490351836
Hostname:	88.212.246.220
ASN:	7979
ISP:	United Network LLC
Organization:	Servers.com
Services:	None detected
Assignment:	Static IP
Continent:	Europe
Country:	Russia 



Zitat:
from 88.212.246.220 (210.245.33.200) [...] with Microsoft SMTP; Sun, 19 Nov 2017 03:17:20 +0000
Reply-To: Elena <Thebestgirl777intheworld@gmail.com>
Date: Sat, 18 Nov 2017 19:17:03 -0800


Auf RS gibt es auch schon ein Foto. Dort wurde die Mail über die Niederlande verschleiert.

Zitat:
from 88.212.246.220 (85.26.212.151) by DM5PR03MB3003.namprd03.prod.outlook.com (10.175.107.9) 
Reply-To: Elena <Thebestgirl777intheworld@gmail.com>
From: Elena <xxx@mail.greenriver.edu>
X-Originating-IP: [85.26.212.151]


https://www.romancescam.com/forum/viewtopic.php?f=6&t=114549
« Zuletzt geändert: 17. Januar 2020 um 17:26 von Wesermann »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema