Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Iryna <i.forever560@gmail.com> (Gelesen: 925 mal)
 
† Django Hurtig †
Themenstarter Themenstarter
General Counsel
***
Offline


Aufdeckung berichten

Beiträge: 1232
Mitglied seit: 06. September 2018
Geschlecht: männlich
Iryna <i.forever560@gmail.com>
14. September 2018 um 17:55
 
Hi there) xxx what are your plans for weekend?
I feel uneasy to show my interest to you)
But  I  can't  miss  a chance to know you better!! May we talk and get
friends and maybe more?))
Iryna

Spoiler:
Return-path: <i.forever560@gmail.com>
Envelope-to: xxx@localhost
Delivery-date: Fri, 14 Sep 2018 12:15:48 +0200
Received: from localhost ([::1] helo=asus) by asus with esmtp (Exim 4.84_2)
(envelope-from <i.forever560@gmail.com>) id 1g0l8e-0001on-49 for
xxx@localhost; Fri, 14 Sep 2018 12:15:48 +0200
Delivered-To: xxx.xxx@xxx.com
Received: from jolnir.orangewebsite.com by asus with POP3
(fetchmail-6.3.26) for <xxx@localhost> (single-drop); Fri, 14 Sep 2018
12:15:48 +0200 (CEST)
Received: from jolnir.orangewebsite.com by jolnir.orangewebsite.com with
LMTP id CPQNI1KKm1vmvCsARr05yQ for <xxx.xxx@xxx.com>; Fri, 14
Sep 2018 10:15:46 +0000
Received: from mail-lj1-f195.google.com ([209.85.208.195]:38041) by
jolnir.orangewebsite.com with esmtps
(TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from
<i.forever560@gmail.com>) id 1g0l8b-00C1hU-U5 for
xxx.xxx@xxx.com; Fri, 14 Sep 2018 10:15:46 +0000
Received: by mail-lj1-f195.google.com with SMTP id p6-v6so7072412ljc.5 for
<xxx.xxx@xxx.com>; Fri, 14 Sep 2018 03:15:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com;
s=20161025;
h=date:from:organization:message-id:disposition-notification-to:to
:subject:mime-version; bh=ueDJrR9Y6uDTgG7HEnApbEgzwefD57J3iN07Y3sjsMU=;
b=Dpb7K45LjGKL4YEXDXwNbqOH4T1ioBjbYWPz8b2WUxIHaisJED/XxjVJmfmdQk76SL
FHQ2Y5QRyt+5WgXCIm89F4Rxs4pR13bgSiGm+hM4zGDrfq4tQ8jpmre48uMS3YU7+cwg
Dm6BYPbUL1FK7k6aMe4gTQbw8t2pIoIwj9qQB3tP/jcD1nF+4KcjO+5W+qu8nVsZJMAU
7Q85QlPMXxcBtymBNsXnlucv1VfigITePK8qNhjySoftDW1nxHPdz2LJlh3pqkV6bS7k
eNGBvfXfv2USyqeH3j+67g3X1nocFUQI0Tf+sQPuo29bGH+7aq35fb+NbHLRHYHkQ41S dMmA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
s=20161025; h=x-gm-message-state:date:from:organization:message-id
:disposition-notification-to:to:subject:mime-version;
bh=ueDJrR9Y6uDTgG7HEnApbEgzwefD57J3iN07Y3sjsMU=;
b=nqBz0V23uImVPbt1JAYdlXzV5CihyIhpthVgOHwWtqFvxfClGV0dJdZf0xiXuc+36e
bh4L9fdcWF0R+0BAl67ZCXBsvGzKBVUSKgwZWRnpA0PHZilgW9EKmQBXNvnH/KKOUd1m
uVia3H20DFd0ewO642qOq39zDiQojizNVl3vFVKZQwB7UBOS744sUp1qS51812u1zFyx
sqnIeXqrbZM0k1Y6FVu5QCVh1jtJ5Cc+uOeKBT0SGdNyg/EzMYXN3BzRU3ie9tr1OjyN
5kO7G5GmUCQ1qtYWFb16Q4iYBHGds7brIciKy07MOEAtbE7lmvjKGtiMsbLLwXfXbDDR s+Fw==
X-Gm-Message-State:
APzg51DrPMP/0ILoc2oCVJbMs9a9fMOFZYADnXXKCqJKDZEnGWIRWygL
16IS7aWJdsZubkvUZSJoo7YMMwjg
X-Google-Smtp-Source:
 
X-Received: by 2002:a2e:7406:: with SMTP id
p6-v6mr7610715ljc.5.1536920104947; Fri, 14 Sep 2018 03:15:04 -0700 (PDT)
Received: from pc2 ([176.109.231.185]) by smtp.gmail.com with ESMTPSA id
b26-v6sm1186453lfc.68.2018.09.14.03.15.02 for
<xxx.xxx@xxx.com> (version=TLS1 cipher=AES128-SHA
bits=128/128); Fri, 14 Sep 2018 03:15:03 -0700 (PDT)
Date: Thu, 13 Sep 2018 14:41:16 +0300
From: "I.forever560" <i.forever560@gmail.com>
Organization: gmail.com
X-Priority: 3 (Normal)
Message-ID: <135593456.20180913144116@gmail.com>
X-Confirm-Reading-To: i.forever560@gmail.com
Disposition-Notification-To: i.forever560@gmail.com
To: xxx.xxx@xxx.com
Subject: xxx what are your plans for weekend?
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------AA7DB9F399BC"
X-Evolution-Source: mbox:/var/mail/xxx


Code
Alles auswählen
IP:	176.109.231.185
Decimal:	2959992761
Hostname:	host185-231-109-176.lds.net.ua
ASN:	41709
ISP:	Dovecom LLC
Organization:	Lugansky Merezhy Ltd
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Continent:	Europe
Country:	Ukraine
State/Region:	Luhans'ka Oblast'
City:	Luhansk 



Zitat:
Date: Thu, 13 Sep 2018 14:41:16 +0300

  

_waw.jpg ( 83 KB | Downloads )
_waw.jpg
_streetcofee.jpg ( 52 KB | Downloads )
_streetcofee.jpg
Zum Seitenanfang
IP gespeichert
 
Indikation
† Django Hurtig †
Themenstarter Themenstarter
General Counsel
***
Offline


Aufdeckung berichten

Beiträge: 1232
Mitglied seit: 06. September 2018
Geschlecht: männlich
Re: Iryna <i.forever560@gmail.com>
Antwort #1 - 17. September 2018 um 14:42
 
xxx are you still single?
I think love is friendship that has caught fire. It is quiet understanding, mutual confidence, sharing and forgiving.
It  is loyalty through good and bad times. Do you agree with me ? I want to find such love!!! And you? Iryna)

Spoiler:
Return-path: <i.forever560@gmail.com>
Envelope-to: xxx@localhost
Delivery-date: Mon, 17 Sep 2018 14:35:06 +0200
Received: from localhost ([::1] helo=asus) by asus with esmtp (Exim 4.84_2)
(envelope-from <i.forever560@gmail.com>) id 1g1sk6-0007PH-2t for
xxx@localhost; Mon, 17 Sep 2018 14:35:06 +0200
Delivered-To: xxxxxx@zoho.com
Received-SPF: pass (zoho.com: domain of _spf.google.com designates
209.85.208.66 as permitted sender) client-ip=209.85.208.66;
envelope-from=i.forever560@gmail.com; helo=mail-ed1-f66.google.com;
Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zoho.com:
domain of _spf.google.com designates 209.85.208.66 as permitted sender) 
smtp.mailfrom=i.forever560@gmail.com; dmarc=pass(p=none dis=none) 
Quelltext.from=gmail.com
Received: from pop.zoho.com [65.154.166.208] by asus with POP3
(fetchmail-6.3.26) for <xxx@localhost> (single-drop); Mon, 17 Sep 2018
14:35:06 +0200 (CEST)
Received: from mail-ed1-f66.google.com (mail-ed1-f66.google.com
[209.85.208.66]) by mx.zohomail.com with SMTPS id
1537187585545245.8692602113349; Mon, 17 Sep 2018 05:33:05 -0700 (PDT)
Received: by mail-ed1-f66.google.com with SMTP id f38-v6so12729197edd.8 for
<xxxxxx@zoho.com>; Mon, 17 Sep 2018 05:33:04 -0700 (PDT)
Received: from pc2 ([176.109.231.185]) by smtp.gmail.com with ESMTPSA id
h3-v6sm7513766ede.42.2018.09.17.05.33.00 for <xxxxxx@zoho.com>
(version=TLS1 cipher=AES128-SHA bits=128/128); Mon, 17 Sep 2018 05:33:02
-0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com;
s=20161025;
h=date:from:organization:message-id:disposition-notification-to:to
:subject:mime-version; bh=ecx62QH/co1WTmo1ThdknUtpgEjbYtvzcosk81yKTJ4=;
b=Oz6GyM5u+L/twOdICVzNE4sJqys+e+hIqcdUJ/Ugl38LbiK5WWfOxZKBDYlWsJCNfK
0IcOv3sW9AZ2jJlCq3szEz02Zn/PsKZpX7YkyBrgvn3JZRam8FSUFK5QhxzPf9pHM36g
oVlwXlzFhm3te6e0vUokBtcQERBaDNVUkRZxXZQxj6rpr38vTtpnX7uSBShKsNqHVnWP
Q70Z2l0plH6y6tVrZ4pohRf3eziCZN5BBP8nOGxJQysmTgfnN+1z0eYbxNGKp/7wYd8k
Ia7vCAq66aSfGgE0k34l4Rbdlt+MkXOqhlQ+oEfz/qqCuP2k0tqINPhq3nFQniYSOnuI uBUg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
s=20161025; h=x-gm-message-state:date:from:organization:message-id
:disposition-notification-to:to:subject:mime-version;
bh=ecx62QH/co1WTmo1ThdknUtpgEjbYtvzcosk81yKTJ4=;
b=SXXILo9JcjEVsLjQUMlM1LND05e2tIIyqF9xXcGmR5jCgUqP5yBrRF7YVhO7bRtVT5
KqbhCNSm9gGivYcJknf61gAyAl885tKpgbmpiq6jes06TEaEKuRT8/mvlkeo5yl0xS1l
+E3CLP3G1WEO3nHghZiFWwsigXK4UXO8rTyn6bhU1BFQH3pF8L+oeQhIGTgXOHgN9WbV
5p7eOvxyYDtjx/k/stloR4TLZa+lcK8CQ+2fHAQ6KLkja9n3iv5bfZ5Y09+JZXtZP7+C
9L10mUlxWyh9+/bgxupWjTdo3KzYzpJrD/L7cezzmbfEfV1rsPJmzblEGU9dc9UDCMfx Vg1w==
X-Gm-Message-State:
APzg51Ddbn478MNOUO3syvOYG11vf9eWLpN+fUsxhakGLi7mKMHIgGm0
hkOHP3t/z6nuhiXpQ/WQjrHNEBHp
X-Google-Smtp-Source:
 
X-Received: by 2002:a50:b2a6:: with SMTP id
p35-v6mr41039611edd.215.1537187582779; Mon, 17 Sep 2018 05:33:02 -0700 (PDT)
Date: Mon, 17 Sep 2018 08:38:36 +0300
From: "I.forever560" <i.forever560@gmail.com>
Organization: gmail.com
X-Priority: 3 (Normal)
Message-ID: <975124736.20180917083836@gmail.com>
X-Confirm-Reading-To: i.forever560@gmail.com
Disposition-Notification-To: i.forever560@gmail.com
To: xxxxxx@zoho.com
Subject: xxx are you still single?
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------18117BC5DE4C63"
X-Zoho-Virus-Status: 1
X-ZohoMail-DKIM: pass (identity @gmail.com)
X-ZohoMail-Owner:
<975124736.20180917083836@gmail.com>+zmo_1_i.forever560@gmail.com
X-ZohoMail-Sender: 176.109.231.185
X-ZohoMail: RDMRC_0  RDKM_0  RSF_0  Z_177098406 SPT_1  IS_0 PIW FMWL Ex_2
SS_1 EML_0 DMN_0 EDR_100 RCV_NDMHL_0 TSCM_0 UNK_U_0 SFP_WHTLST_0 ATP_0
ZXHF_CMIDF_10 ZXHF_OR_MRH_1 ZXHF_XP_MRH_2 ZMHF_D1_1 SIP_KN_0 RPD_KGR_0 
SC_14 SGR1_1_2_0_172_58 ZMSCP
X-Evolution-Source: mbox:/var/mail/xxx


Code
Alles auswählen
IP:	176.109.231.185
Decimal:	2959992761
Hostname:	host185-231-109-176.lds.net.ua
ASN:	41709
ISP:	Dovecom LLC
Organization:	Lugansky Merezhy Ltd
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Continent:	Europe
Country:	Ukraine
State/Region:	Luhans'ka Oblast'
City:	Luhansk 


  

_friday08.jpg ( 88 KB | Downloads )
_friday08.jpg
_for_you.jpeg ( 74 KB | Downloads )
_for_you.jpeg
Zum Seitenanfang
IP gespeichert
 
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65586
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Iryna <i.forever560@gmail.com>
Antwort #2 - 17. September 2018 um 17:07
 
Die Bilder wurden bei Arina Kireeva (Pastushenko) / Арина Киреева aus Moskau geklaut.

https://vk.com/id1868419
https://www.instagram.com/arina_kireeva/
https://www.facebook.com/doctorkireeva/
https://arinakireeva.ru/

Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
† Django Hurtig †
Themenstarter Themenstarter
General Counsel
***
Offline


Aufdeckung berichten

Beiträge: 1232
Mitglied seit: 06. September 2018
Geschlecht: männlich
Re: Iryna <i.forever560@gmail.com>
Antwort #3 - 07. Oktober 2018 um 11:55
 
xxx,  do you still look for your woman? Is there chance to know you better  and become more than friends?
Write to me please, if you still single. Iryna

Spoiler:
Return-path: <i.forever560@gmail.com>
Envelope-to: xxx@localhost
Delivery-date: Sun, 07 Oct 2018 11:11:17 +0200
Received: from localhost ([::1] helo=asus) by asus with esmtp (Exim 4.84_2)
(envelope-from <i.forever560@gmail.com>) id 1g955p-0007G0-If for
xxx@localhost; Sun, 07 Oct 2018 11:11:17 +0200
X-Apparently-To: xxx.xxx@yahoo.com; Thu, 04 Oct 2018 12:32:48 +0000
X-YahooFilteredBulk: 209.85.208.65
Received-SPF: pass (domain of gmail.com designates 209.85.208.65 as
permitted sender)
X-YMailISG: c3O8ux0WLDsEU_3LsQvXJwSSmXujudbkdQ32C5iYmlHIsdog
H_tJKv1842CW.FuqPgP9xZSiLSkSsPXNGPrqSwLIEzPBoVyP4ioyMDOnwhO6
izOWX72.OZvRTsNdcwdU2b5.K6eTgUS9INOI2J9zB_rRLPj4HNKeXAmr5fvL
1BHpzGc0RRL7F83Ph.5uZPjcZ4bmsjpODRkxptxY3mEGmYTKjjCG4cna.lN5
tCMoRigBtK4HJnKUbIb4574YCA5pKDFvfp6jX3.z0WI4FSCfSUPKlYqbfK9j
0IDKzZ.EB3FnT.2VahgPsvIDW7CSxeaI25ZrM4qUloAtXveZLTJiveYCTYBE
lVX1ousp9RCOcr9xJCfRmBLdkGoKaip0.T5wI8mn6WWUFEFKi3_PhGo6j5iB
XpaXrT7Lf._gnxOHnnQ4D5qoWDQ2AfRcCK1OGzfXHsmJUrqgiB8imd.1WnLw
8LimMvZKGxtZIpaM2AcizywH4hrhcR3LYOvFs.iXCbowOYhj6cp3o6J4uj43
dVJ4wWTKH46S4nU6H1eKD26GpccL2tbeRHvVtS3qIxCYv7YFds06G4LApbrE
WVUUd14TXllrc63PyeOnOuAuF35jZMmlSDxHdCsaOFMR8Xyi676Fk2_Kfnqe
h7U90CHAvI0NQhUQ_DDbJb7QtgirENzKtXA0a8nCiEnfXRHvQ8TW9ZxBnJOu
JK93kAc_JJf6QtO0ZODIhUry5n8WRm.sVa0IgTgCw42b.LkHskdmQvF4VmqF
cy8eeWEQ.kjalAK_thXiE82KPqe0hxtUSieDZbfIWpKcHrfl8EvQOGHQBxHI
XJS2G4QuyakLr5mSn6BaJiQn9JaqUhRe32mN3SJqjJV8XJ_KTAU1eS.7rrJv
O0ypahpTtvRxweTJNjdGhQ1mWcFW4pGlbXDATYDV_06nnlC64GjwjhVoouQ_
QARjN9arIkoppfWQmiwGxOb11vK3T7A2udzkETHO4Y6Ntty.V5UIEjKBsLn_
eq29KPm8.UcLEz.YPtOULpQrDA00hABIa_E9p3XAXP1imX0Y01kmxd9ADMsQ
c_7vcdSUjsfvsNxgKIIAanZ1REPPh4UrGkz2i3lR7NqBfl5VOh52jbQ-
X-Originating-IP: [209.85.208.65]
Authentication-Results: mta4409.mail.gq1.yahoo.com  from=gmail.com;
domainkeys=neutral (no sig);  from=gmail.com; dkim=pass (ok)
Received: from global-jpop.mail.gm0.yahoodns.net by asus with POP3
(fetchmail-6.3.26) for <xxx@localhost> (single-drop); Sun, 07 Oct 2018
11:11:17 +0200 (CEST)
Received: from 127.0.0.1  (EHLO mail-ed1-f65.google.com) (209.85.208.65) by
mta4409.mail.gq1.yahoo.com with SMTPS; Thu, 04 Oct 2018 12:32:47 +0000
Received: by mail-ed1-f65.google.com with SMTP id c22-v6so8380883edc.4 for
<xxx.xxx@yahoo.com>; Thu, 04 Oct 2018 05:32:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com;
s=20161025;
h=date:from:organization:message-id:disposition-notification-to:to
:subject:mime-version; bh=fw4GUpsb1PivA9jg/Yx56auWKJlfFEt3Pe5iw95OZpc=;
b=hG1izCK5rtgb+6WzLI96gD47s2AaqFRjy7/+J46oHGeBAICa1hSVVTeKJRHJnT6usN
PCdtO0NkppVrFkVQt7TEUTfC93/gFra/mkERehNrDhw0vbDQ2T2SAu8TBklk8AYhigaR
diotnh/hVRYoX9XsaicaaZYwkXQXxPXGF7roKi2WdkCnWp/ViQFlQ8lNtGIlhu5eIAmD
IxtgXz90o7kmPDlL3oWhDr5vwuxP8y6+i+lLN6DZJS0w1JvgAuVj29VZgYeBFzVvc01H
hWCgsav+QZ9QMJZQ1djWlwlCtMRZTme6jccExopa0RjZ0gLUVhHte93jISxDGpv7mQ9g VfkA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
s=20161025; h=x-gm-message-state:date:from:organization:message-id
:disposition-notification-to:to:subject:mime-version;
bh=fw4GUpsb1PivA9jg/Yx56auWKJlfFEt3Pe5iw95OZpc=;
b=VMiaDJMs+/TZ9hdp4rMKtz4+eCnIxU8x5Ri4k4pRMXsV7IZBSM5b6Qyvz61+2HpUeC
8bwfDgVkvPxJ69x+2FKAbxQwOlInxpcekDxIuif2E2NAARG43Elm0e4FlYBcimYD/QzS
/QbqFkIGhIG94lrXINXhg3cUgFolW7fFARhS6UgY19V4Kl2/y8lEZaL48MYYz0TC1yD3
XiGRRaRk8I02OEwRmpdbAvGZHDRcfG2tZOu4/hzSNE6vqTRpJ+gzettV5Pk+PETZPhJp
nztl4gZBpOo8Gld1nUGzR5Ceu7//nvTLCiAr26fpFdg2yc5HbxYlsj8o1y6dbejUaXKW ZG+g==
X-Gm-Message-State:
ABuFfojxiGZZBXgUWld5MxAKpnLYs6CkGxTVExyRAGnHyyaHRP9ztOd5
3t31LklASiz43D5z5HNf3GUHLHFk
X-Google-Smtp-Source:
 
X-Received: by 2002:a50:baae:: with SMTP id
x43-v6mr8313973ede.65.1538656366198; Thu, 04 Oct 2018 05:32:46 -0700 (PDT)
Received: from pc2 ([176.109.228.124]) by smtp.gmail.com with ESMTPSA id
d15-v6sm92067eja.48.2018.10.04.05.32.43 for <xxx.xxx@yahoo.com>
(version=TLS1 cipher=AES128-SHA bits=128/128); Thu, 04 Oct 2018 05:32:45
-0700 (PDT)
Date: Thu, 4 Oct 2018 09:51:54 +0300
From: "I.forever560" <i.forever560@gmail.com>
Organization: gmail.com
X-Priority: 3 (Normal)
Message-ID: <286008260.20181004095154@gmail.com>
X-Confirm-Reading-To: i.forever560@gmail.com
Disposition-Notification-To: i.forever560@gmail.com
To: xxx.xxx@yahoo.com
Subject: xxx,  do you still look for your woman?
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------CB11624418A6ECE6"
Content-Length: 235573
X-Evolution-Source: mbox:/var/mail/xxx


------------CB11624418A6ECE6
Content-Type: text/plain; charset=windows-1251
Content-Transfer-Encoding: quoted-printable


Mail über Ukraine

Code
Alles auswählen
IP:	176.109.228.124
Decimal:	2959991932
Hostname:	host124-228-109-176.lds.net.ua
ASN:	41709
ISP:	Dovecom LLC
Organization:	Lugansky Merezhy Ltd
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Continent:	Europe
Country:	Ukraine
State/Region:	Luhans'ka Oblast'
City:	Luhansk 


« Zuletzt geändert: 05. Januar 2019 um 11:20 von Stiray »  

__813888_n.jpg ( 56 KB | Downloads )
__813888_n.jpg
__0188593_n.jpg ( 112 KB | Downloads )
__0188593_n.jpg
Zum Seitenanfang
IP gespeichert
 
Voortrekker
Global Moderator
*****
Offline



Beiträge: 1173
Mitglied seit: 14. Juli 2009
Geschlecht: männlich
Re: Iryna <i.forever560@gmail.com>
Antwort #4 - 31. Januar 2019 um 16:46
 
Ich habe sie mit dieser Emailadresse seit heute auch an der Backe. Mail eingeliefert über Lugansk. Sie mixed allerdings ihre Bilder. In ihrem Profil auf 24FD verwendet sie diese Bilder:

https://anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1402432051/13

...... in ihrer ersten Mail verwendet sie Bilder von diesem Post. Sie fragt nur in einem Satz ob man noch immer einen Partner sucht.
« Zuletzt geändert: 31. Januar 2019 um 16:48 von Voortrekker »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema