Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Anna <anutaannka@pochta.com> (Gelesen: 1550 mal)
 
Kotelett
Themenstarter Themenstarter
General Counsel
***
Offline


Don´t call me Schnitzel

Beiträge: 3112
Standort: Hamburg
Mitglied seit: 16. August 2010
Geschlecht: männlich
Anna <anutaannka@pochta.com>
06. Februar 2018 um 10:38
 
Hello my new dear friend!!!
How are you doing?
To tell the truth, I am trying to be acquainted trough Internet first time in my life so I don't really know what I should write but I will try. 
Fisrt of all I want to explain where did I find your e-mail address. I went to agency of acquaintance and said that I want to find a serious man through the Internet. I want to destroy the loneliness and to find the good person who, as well as me will want to share all pleasure of life. So they gave me your e-mail address and said that you are also trying to find a good and serious partner in life.
So let's communicate!
I want to tell you just a little bit about me.
My name Anna. I am 29 y.o. I amfrom Russia. I hope you don't mind that I am not from your country. My height is 5,7. My weight is 121,25 pounds. 
I have 2 high educations and now work by my diploma. I work in a computer store. I am selling computers and other staff. So you see I dont have any difficulties to write you e-mails. What are you doing in life? What is your occupation?
I have never been married and I don't have any children.
I hope you don't mand if I ask you some questions?
How old are you?
Where are you from?
Have you ever been married?
Do you have children?
What kind of relations are you trying to find?
I also want to send you some of my photos for you to understand who is talking to you. Hope you will like it.
I am looking forward to hearing from you soon. Please write me back.
Have a nice day!
Anna



Off Topic KommentarMore pictures in the gallery: Smiley


Spoiler:
Return-Path: <ste.cat@tin.it>  
Received: from vsmtpvtin3.tin.it ([212.216.176.241]) by mx-ha.gmx.net (mxgmx114 [212.227.17.5]) with ESMTP (Nemesis) id 1MYOBW-1eEZjB3miY-00UuIE for <xxx>; Mon, 05 Feb 2018 20:01:52 +0100  
Received: from QRJATYDI (82.57.16.100) by vsmtpvtin3.tin.it (8.6.060.43) (authenticated as ste.cat@tin.it) id 5A4788FE04B536BF; Mon, 5 Feb 2018 20:01:28 +0100  
Message-ID: <5A4788FE04B536BF@vsmtpvtin3.tin.it> (added by postmaster@tin.it)  
From: Anna <anutaannka@pochta.com>  
To:  
Subject:  
X-Priority: 3  
X-MSMail-Priority: Normal  
X-Mailer: IncrediMail 2 Plus v 6.29  
Date: Mon, 5 Feb 2018 18:38:4 +0400  
Mime-Version: 1.0  
Content-Type: multipart/related; boundary="=_NextPart_36531045514743262347"  
Envelope-To: <xxx>  
X-GMX-Antispam: 0 (Mail was not recognized as spam); Detail=V3;  
X-UI-Filterresults: notjunk:1;V01:K0:5hDqxrfRwt4=:CFleRGrhNPScrFfn+DetzAOmdW afmrqWkDQLFDAfDd3IrfqTytyn2HeQejOaqR1EE4s5JxLYCAXLx57btqoLAepMa62H2BVy1z9 qZOb3in/MeTDcZpxZF0/GRhxjX/o0sYW4rP+VlKn1MhM/69wvf6Nh/BaOJM6ZrObGPiZRqkrI yJjtgmBt4moFLCOCwqzBNM7QhmMEdHEej4MdZHr6rEuZM6P4i+9BvGIZfb3cyd/pNGUA6Pz6B DU2dtkxafSs92/XZDiRCW69rKydnK6OZ2Yoqx74yiS1Q1htmiLYYECH7MuiHV5pELTBeMY1cw bUwVefLWXrtQj4eV9pOPri6Db7vPIefQJsH4sFvM2vn9SnW1LgGenTwHaOpvIHsu8KUTdPy6E ftleRPazXxEjco20Pmt5l7OphqrTPK6Mev5QwtjJugcpD7FN5/vy6fpM29/I/NWlbVUAUCvsH Yo9fI74YQ189ptglqyPamfwKJqQ86eQLpLIqgz7CfYStZDYV2fiqDkXGp+iqo2SiadjfTgPCp uSfeIb5/F9MZYN0+Oc4f1Ki0eNaCu33Opn5/ztD64pbSMATIOCvGzl0ZSjWdvnnHkvUTdUxvK nfVATKodX240GvQtLqst+KoA5z/nlRlHDrXyjRbs0zNeggJk1RKLsDm1KqlEd1kdcjOPBwU+0 bolEnA2LUqKA6BqhNuy5q+45etsuJlUlDicMxRWhlssjT7Irwtmq7OwU9wbhbN+o8dasSVqzH Ej44fc9cntuGm94iqJL56xXOgfDP9XBTq+V/wmrxpj2404QZrP5sU7nm26iPRh6BfcCMwG6qi NzRUkw8a0/vZ1F4b8F4Ad3Y329ukCM6SyTeTPsuWU2WoghtSElHq5HyRa7PGcaGZu/r0Y/r7M ImZT7P/CMskmJUjT+Dc/DY/arKeBjbsnEuLdbMRpACCYZX+ov7qxCwxOteOxegoC/V0UIm1Mw QMVjkq8Af1trJKjKq6Z81sRnH6kBQLDzpT6xIjfUwZPRN0lOyNrVQJs1Q9Np2dmh0fPRlQZVe kxfGiltS0ykfZV9KsUnk0vM4vhLkaKJbiixXEIOb54JSRf4dMO/Cy9mvyGSENK13U6zTcMUzU sp3I38KDirUEdUncCuGfVwu7q6dz4MBlCJZyAWS7Wag3aJ3/7X78ultfbCuaGcYSUvtqYUU0f QfbN8fwgYwepzqMdz1qUTJSd2wZZknVd2v7x5qO52f8pEtoxqnhU9ZHi6Dav9p3p9o3wgDGRM STrx9Whe+xHXHggalgbvsvTULsXBqX/6NY3vZzmNZxA16fFMzZT6cprVOg6BvJa5f9Zhel3fO l8upmVe1d6KH1Zk9qyYjOvd25RqMVTWS7/S/LbsA3PKXI2AklVJ+LS7eCSo0IUvTPPce6V1h+ iEKIPhzyWsepWNp1IUfIL+xgrkiGYLRtfSkRHF5UbFaLmY7AFRvZQQuqZOvRE8cDXnlAtd6VD CcO0q/ZaHw6C5ApFs4xR6e9cbMFbqcigT5/iyds5eeywOT2MXk0iuRz8YD1uaQY9sllDqiz6l rVTCzBkZsAznnkF3O+Y5U9slnwjjFV2HgZWjVbEv80XGBNq3B2Z0Tnthoe5biNuoYQTd4+KeR W5rwTD1JbxpUnoU+T19Xy6JC7SvN8hE4
« Zuletzt geändert: 29. März 2021 um 13:12 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Anna <anutaannka@pochta.com>
Antwort #1 - 06. Februar 2018 um 11:16
 
Die Mail kommt über Italien rein:

Code
Alles auswählen
Address lookup
canonical name 	host100-16-dynamic.57-82-r.retail.telecomitalia.it.
aliases
addresses 	82.57.16.100 



Das QRJATYDI ist schon häufig bei Scammern aufgefallen.

Bis jetzt bist du im Kontakt mit dem Mastermind. Weitere Mails werden wohl von seinen "Untergebenen" kommen.
« Zuletzt geändert: 16. Oktober 2019 um 17:18 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Hotdog
General Counsel
***
Offline


I Love Anti-Scam

Beiträge: 1112
Mitglied seit: 07. Dezember 2016
Geschlecht: männlich
Re: Anna <anutaannka@pochta.com>
Antwort #2 - 06. Februar 2018 um 13:44
 
Gleiche Mail, gleiches Foto



Spoiler für Quelltext wie vorheriger:
Delivered-To:xxx
Received: by 10.25.43.5 with SMTP id r5csp3104867lfr;
        Mon, 5 Feb 2018 11:10:40 -0800 (PST)
X-Google-Smtp-Source: AH8x227aFjQ3Gvz07+yMj/DXWjwydD43V8IGm2MyWFPItQrMGO7adsn3d/68ttTxlZWSMU9ALAqh
X-Received: by 10.223.150.36 with SMTP id b33mr29842865wra.240.1517857840578;
        Mon, 05 Feb 2018 11:10:40 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517857840; cv=none;
        d=google.com; s=arc-20160816;
        b=BN9iPtfUaf6QVsInNOqzI76l6B07STbkdCXcsVwDExfxKvbdaKdb6inVpG5x8N9qKd
         9tgrhbo4ApQNBoeRzmQJV4kBF5Pn+SX1l/dbriBfpx0Q5EvGEIV5+wEUmHI9CugT1SvX
         dyqbRJzmRtMXqlzolu1p+CEgHZGPQmcQLWlrbxzKV5GdKa0w5C+5m7vdxCwGfBR7D3+R
         drkJLiz0xcSktWWANl0kihabFxadWQlhdzlwtRj06xXo1zcb9R2ET+FMYnEAsdXVWdxC
         umryyy45ZFzlL240yCSbaDdVQ+yOshrkfYlNSX0Z1w63Nl9YogxzILuMBeunJ7cjCbNT
         X27g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:date:subject:to:from:message-id
         :arc-authentication-results;
        bh=UgAHfLjlpwghmjnN2YruWP2yfwzZbJx5pzUtUixUFAg=;
        b=SG+2V5REPN825ZHwqDXNnd0+r4pdzfwoqI7X39HXjfoHvL2ojtN1VOFfYXhNi9gP5Q
         9+iNSn2WKIR1wl5nTk8wzgLT7fBpOZPLMxoNceZ9ofNUryN5Ht3Bp5te5OYn3jVPAYCd
         rwWOpS8iSPyXN4q+F0s8SgpWwcjBa0iMb14zWCcmdO94wBQHu+DZmk5L9j5drcWtr5OB
         fohIX8EsbZOGJKYb4YXMbvh9p2KLi5qeqRWoiaYo9ROX2bVJA2wAKsyItocvNWCRpqCE
         ZaIvC8PBKXEPJeLMfFm2xC90P1XKsszilDxTINCYdUIJ7gT40uMBFc/Hku6l08RJTzRK
         Qpjw==
ARC-Authentication-Results: i=1; mx.google.com;
       spf=pass (google.com: best guess record for domain of ste.cat@tin.it designates 212.216.176.105 as permitted sender) smtp.mailfrom=ste.cat@tin.it;
       dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) Quelltext.from=pochta.com
Return-Path: <ste.cat@tin.it>
Received: from vsmtpvtin1.tin.it (vsmtpvtin1.tin.it. [212.216.176.105])
        by mx.google.com with ESMTP id 38si7042937wry.550.2018.02.05.11.10.39;
        Mon, 05 Feb 2018 11:10:40 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of ste.cat@tin.it designates 212.216.176.105 as permitted sender) client-ip=212.216.176.105;
Authentication-Results: mx.google.com;
       spf=pass (google.com: best guess record for domain of ste.cat@tin.it designates 212.216.176.105 as permitted sender) smtp.mailfrom=ste.cat@tin.it;
       dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) Quelltext.from=pochta.com
Message-ID: <5a78ac30.e986df0a.5d404.9809SMTPIN_ADDED_BROKEN@mx.google.com>
X-Google-Original-Message-ID: <5A38B67205C64002@vsmtpvtin1.tin.it> (added by postmaster@tin.it)
Received: from QRJATYDI (82.57.16.100) by vsmtpvtin1.tin.it (8.6.060.43) (authenticated as ste.cat@tin.it)
        id 5A38B67205C64002; Mon, 5 Feb 2018 20:10:39 +0100
From: Anna <anutaannka@pochta.com>
To: 
Subject: 
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: IncrediMail 2 Plus v 6.29
Date: Mon, 5 Feb 2018 18:38:4 +0400
Mime-Version: 1.0
Content-Type: multipart/related; boundary="=_NextPart_36531045514743262347"

--=_NextPart_36531045514743262347
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
« Zuletzt geändert: 23. Dezember 2019 um 20:06 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65640
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Anna <anutaannka@pochta.com>
Antwort #3 - 06. Februar 2018 um 17:10
 
Nachtrag zum Startbeitrag:

Mail über Italien  Smiley

Zitat:
from QRJATYDI (82.57.16.100) [...]; Mon, 5 Feb 2018 20:01:28 +0100 
From: Anna <anutaannka@pochta.com> 
Date: Mon, 5 Feb 2018 18:38:4 +0400


Zitat:
X-Mailer: IncrediMail 2 Plus v 6.29


Uli schrieb on 06. Februar 2018 um 11:16:
Anna <anutkakaan@pochta.com> <anutkakaan@gmail.com>
Viktoria <vikusyavikaa@yandex.com>


vierauge schrieb on 06. Februar 2018 um 11:18:
Es ist auch die gleiche Dame.


Externe Outings:

<elenalena868@yandex.com>
<superrnastyaaa@gmail.com> 
<olyaerywi@yandex.com>
<vikusyavikaa@yandex.com> 
<ilenchikyitr@yandex.com> 
<yalkayla@yandex.com>

Die Bilder wurden bei Olesya Ustinova / Lesya Ustinova / Олеся Устинова / Леся Устинова aus Skopin Oblast Rjasan geklaut.

https://m.ok.ru/profile/509769675079
https://my.mail.ru/mail/oleustin/
https://vk.com/id61256340 hierbei muß es sich um das echte Profil handeln
http://vkontakte.info/id61256340
https://vk.com/abely1997 sehr fraglich
https://vk.com/id205938560 sehr fraglich
https://vk.com/club14285785
http://misvk.com/ryazan/lesya-ustinova
https://www.instagram.com/lesyausti/
https://twitter.com/LesyaUsti
https://www.facebook.com/people/%D0%9B%D0%B5%D1%81%D1%8F-%D0%A3%D1%81%D1%82%D0%B...
https://www.facebook.com/people/%D0%9B%D0%B5%D1%81%D1%8F-%D0%A3%D1%81%D1%82%D0%B...
http://smm-proffessors.ru/members/simfa.337/

Smiley
« Zuletzt geändert: 23. Dezember 2019 um 19:27 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema