Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Marina <marinasibir2@gmail.com> (Gelesen: 1111 mal)
 
trucker105
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11163
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Marina <marinasibir2@gmail.com>
23. November 2017 um 07:52
 
Good afternoon.I hope that our meet will be excitement. My name Marina, i'm 41. I live in Syberia, in a center of big Russian Federation. I'm not little girl to believe in the beautiful love stories. But i want to love and be loved. I want to change my life. I work as an accountant in a travel agency. I was in Spain, Greece, Turkey. I think my English is good. At school it was required studies. I don't think there will be any difficulty in understanding between us. I am waiting for your letter. Yours faithfully, Marinulya.



Off Topic KommentarMore pictures in the gallery: Smiley


Spoiler:
Received: from AM5EUR02HT070.eop-EUR02.prod.protection.outlook.com
(2603:10a6:208:1::49) by AM4PR02MB3171.eurprd02.prod.outlook.com with HTTPS
via AM0PR0202CA0036.EURPRD02.PROD.OUTLOOK.COM; Thu, 23 Nov 2017 03:23:29
+0000
Received: from AM5EUR02FT051.eop-EUR02.prod.protection.outlook.com
(10.152.8.54) by AM5EUR02HT070.eop-EUR02.prod.protection.outlook.com
(10.152.9.36) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.218.12; Thu, 23
Nov 2017 03:23:28 +0000
Authentication-Results: spf=pass (sender IP is 203.140.81.22)
smtp.mailfrom=ares.eonet.ne.jp; hotmail.de; dkim=pass (signature was
verified) Quelltext.d=ares.eonet.ne.jp;hotmail.de; dmarc=pass action=none
Quelltext.from=ares.eonet.ne.jp;
Received-SPF: Pass (protection.outlook.com: domain of ares.eonet.ne.jp
designates 203.140.81.22 as permitted sender)
receiver=protection.outlook.com; client-ip=203.140.81.22; helo=
mta02.eonet.ne.jp;
Received: from SNT004-MC1F43.hotmail.com (10.152.8.52) by
AM5EUR02FT051.mail.protection.outlook.com (10.152.9.5) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.20.239.4 via Frontend Transport; Thu, 23 Nov 2017 03:23:28 +0000
X-IncomingTopHeaderMarker: E41F5;SizeAsReceived:1609;Count:19
Received: from mta02.eonet.ne.jp ([203.140.81.22]) by SNT004-MC1F43.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
      Wed, 22 Nov 2017 19:23:26 -0800
Received: from mailmbsb19c4.mozu.eo.k-opti.ad.jp (mbs06.eonet.ne.jp [60.56.6.204])
     by mailauthmsa11.mozu.eo.k-opti.ad.jp  with ESMTP id vAN3N8k6006629;
     Thu, 23 Nov 2017 12:23:08 +0900
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ares.eonet.ne.jp;
     s=k02; t=1511407390;
     bh=YtdiOltE0ElbMoaCMX7wwanWG6ZyXWAI279rtMezpW4=;
     h=Date:From:Reply-To:To:In-Reply-To:Subject;
     b=XlKMpugLAQyU9CJi+lu/uXaV6toMHilYTxRn25Vnfc4QBD3L1vspXdqEuI6EBKZpc
      A+0UCA9MYfXXa0j0PToSFS8VJOCXoveDACDsz+sxGxY1bEIeFVxr0Gs1YUopiWy+V3
      G6C+VGN80TQonDbQhmqgjcFVec7+hWueTpqH9BFk=
Date: Thu, 23 Nov 2017 12:23:08 +0900 (JST)
From: Marinuska Marinusika <obata2010@ares.eonet.ne.jp>
Reply-To: Marinuska Marinusika <marinasibir2@gmail.com>
To: 
Message-ID: <1455755377.34364104.1511407388369.JavaMail.root@ares.eonet.ne.jp>
In-Reply-To: <1991125397.34364017.1511407375783.JavaMail.root@ares.eonet.ne.jp>
Subject: Woha my awesome friend.
Content-Type: multipart/mixed;
     boundary="----=_Part_34364101_1710491448.1511407388367"
X-Originating-IP: [::ffff:197.5.5.240]
X-Mailer: Zimbra Mailer (ZimbraWebClient - FF56 (Win)/0.0)
X-Authenticated-User: obata2010@ares.eonet.ne.jp
Thread-Topic: Woha my awesome friend.
Thread-Index: +xpuqYLuM151GLgUy0s60WKYCSMkZg==
Return-Path: obata2010@ares.eonet.ne.jp
X-OriginalArrivalTime: 23 Nov 2017 03:23:27.0059 (UTC) FILETIME=[6D54A230:01D3640A]
X-IncomingHeaderCount: 19
X-MS-Exchange-Organization-Network-Message-Id: 79c8d8be-f97c-462d-e514-08d5322190c4
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: 203.140.81.22
CMM-sending-ip: 203.140.81.22
CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is
203.140.81.22; identity alignment result is pass and alignment mode is
relaxed) smtp.mailfrom=obata2010@ares.eonet.ne.jp; dkim=pass (identity
alignment result is pass and alignment mode is relaxed)
Quelltext.d=ares.eonet.ne.jp; x-hmca=pass Quelltext.id=obata2010@ares.eonet.ne.jp
CMM-X-SID-PRA: obata2010@ares.eonet.ne.jp
CMM-X-AUTH-Result: PASS
CMM-X-SID-Result: PASS
CMM-X-Message-Status: n:n
CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
CMM-X-Message-Info: mJarLq7jJbALmIex
X-MS-Exchange-Organization-PCL: 2
X-MS-UserLastLogonTime: 11/23/2017 3:00:43 AM
X-Microsoft-Exchange-Diagnostics: KZeq2jQgVgPxIZbdjt9rk21xK3aGnyJleyPYDqp1R5ASwybUu97jPkognFgMCZMjmZ
X-MS-Exchange-Organization-AuthSource: AM5EUR02FT051.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 79c8d8be-f97c-462d-e514-08d5322190c4
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(5001022)(4604075)(4605076)(8291501071);SRVR:AM5EUR02HT070;
X-Microsoft-Exchange-Diagnostics: nZ3Qs8AGtZfREsnWBKC1000sN55XC5+k8FNeF5mrxufEI=
X-MS-TrafficTypeDiagnostic: AM5EUR02HT070:
X-Exchange-Antispam-Report-CFA-Test: );SRVR:AM5EUR02HT070;
X-Microsoft-Exchange-Diagnostics: jkfs=
X-Forefront-Antispam-Report: mail.com;FPR:;SPF:None;LANG:;
X-MS-Exchange-Organization-SCL: 5
X-Microsoft-Exchange-Diagnostics: iLLyrygh/BqXo7tIQh9IugJWcP3pmEF6w0luINPN+9sN1A1DFxpAI2Jm7MX9O
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: Default
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Nov 2017 03:23:28.0050
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 79c8d8be-f97c-462d-e514-08d5322190c4
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR02HT070
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.1265194
X-MS-Exchange-Processed-By-BccFoldering: 15.20.0239.006
X-Microsoft-Exchange-Diagnostics:




Bild ist schon aufgefallen, da nannte sie sich auch Marina:
https://www.no_way.com/forum/viewtopic.php?f=13&p=341260
« Zuletzt geändert: 28. Februar 2021 um 11:46 von vierauge »  

marinasibir2a.jpg ( 25 KB | Downloads )
marinasibir2a.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11789
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Marina <marinasibir2@gmail.com>
Antwort #1 - 23. November 2017 um 10:03
 
Mail kommt über Japan.

Code
Alles auswählen
IP Address 60.56.6.204
Host mbs06.eonet.ne.jp
Location JP JP, Japan
Organization K-Opticom Corporation
ISP K-Opticom Corporation
AS Number AS17511 K-Opticom Corporation 



Zitat:
Date: Thu, 23 Nov 2017 12:23:08 +0900 (JST)
From: Marinuska Marinusika <xxx@ares.eonet.ne.jp>
Reply-To: Marinuska Marinusika <marinasibir2@gmail.com>


Zitat:
I live in Syberia, in a center of big Russian Federation.


« Zuletzt geändert: 23. November 2017 um 23:00 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 67936
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Marina <marinasibir2@gmail.com>
Antwort #2 - 23. November 2017 um 16:38
 
vierauge schrieb on 23. November 2017 um 10:03:
Mail kommt über Japan.


Verschleierte Einlieferung

Code
Alles auswählen
IP:	197.5.5.240
Decimal:	3305440752
Hostname:	197.5.5.240
ASN:	2609
ISP:	Tunisie Telecom
Organization:	ATI - Agence Tunisienne Internet
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Continent:	Africa
Country:	Tunisia 



Zitat:
X-Originating-IP: [::ffff:197.5.5.240]
  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 67936
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Marina <marinasibir2@gmail.com>
Antwort #3 - 23. November 2017 um 16:41
 
trucker105 schrieb on 23. November 2017 um 07:52:
da nannte sie sich auch Marina


Pola

Das ist Category of the unknown / [02] Scammer using Pictures by ??? 

Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema