Template wählen: 
Sprache wählen:
Google

World Wide Web anti-scam


  Anti-Scam › Ukraine › Ukrainische Scammer › Natalia <sweetladynatalie@gmail.com> Bottom
‹ Vorheriges Thema | Nächstes Thema ›
Seitenindex umschalten Seiten: 1 2 [3] 4  Thema versenden
Sehr heißes Thema (Mehr als 25 Antworten) Natalia <sweetladynatalie@gmail.com> (Gelesen: 9083 mal)
 
Neofox
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 3
Mitglied seit: 13. Mai 2018
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #30 - 27. Mai 2018 um 16:04
 
Hallo 
Diese Reisebüro hat mir schon mal eine ganz andere Frau aus der Ukraine empfohlen. Genau das selbe mit biometrische Pass machen usw. Die arbeiten irgendwie zusammen.
Ich poste mal nen schreiben vom Reisebüro mit Quelltext.

Good day dear MR. xxx,
Attached is invoice along  with  the bank  account  details.
Once the payment is completed please provide us a receipt of payment for us to make all necessary arrangements for the process of biometric passport application.
We will contact Ms Galchenko to make  an  appointment  with her in  the office.  She must provide us her Ukrainian  Id  and tax number in oder to  apply for    foreign  biometrical passport  and also personal  presence is needed for  biometric  capture. Our manager will give her all  details by e-mail.
Sincerely yours,
the manager of my "My World of Tourism"
Alexandra Dronova

Spoiler:
Return-path: <agent.tourism@ukr.net>
Delivery-date: Wed, 20 Sep 2017 12:32:45 +0200
Received: from [195.4.92.22] (helo=mx12.freenet.de)
     by mbox228.freenet.de with esmtpa (ID exim) (Exim 4.85 #1)
     id 1ducJB-0001D5-5L
     for xxx; Wed, 20 Sep 2017 12:32:45 +0200
Received: from frv199.fwdcdn.com ([212.42.77.199]:51964)
     by mx12.freenet.de with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (port 25) (Exim 4.89 #1)
     id 1ducJA-0001Jx-S6
     for xxx; Wed, 20 Sep 2017 12:32:45 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net;
     s=ffe; h=Content-Type:MIME-Version:References:In-Reply-To:Message-Id:To:
     Subject:From:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
     Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
     :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
     List-Post:List-Owner:List-Archive;
     bh=gw6AOEyy1ky06Um/kHogLFEw9DCCC26CfyirNqOROXw=; b=dj1lT+d4b7c6QwqgBkURyztj65
     y/TO6H4hsIsYzxhQ/DAbpmKi4KY7oV4I/X0mYkz0lKTQ9eNkAaq2rNxiesuA7aaGlDtx+c32x9r++
     BGI3m85ZtFmpfrJvQXaQAl7ZYbyZ1ieHxyaOPLrRcc0VlBaUWfxVoyzvhibzSJIBBCc0=;
Received: from [10.10.10.50] (helo=frv50.fwdcdn.com)
     by frv199.fwdcdn.com with smtp ID 1ducJ9-000EQU-S5
     for xxx; Wed, 20 Sep 2017 13:32:43 +0300
Date: Wed, 20 Sep 2017 13:32:43 +0300
From: Agent Tourism <agent.tourism@ukr.net>
Subject: Re[2]: Biometric Passport
To: xxx
X-Mailer: mail.ukr.net 5.0
Message-Id: <1505903003.432002686.hm61dv15@frv50.fwdcdn.com>
In-Reply-To: <6e8881a30622ed920d183992bb5ea066@email.freenet.de>
References: <6e8881a30622ed920d183992bb5ea066@email.freenet.de>
X-Reply-Action: reply
Received: from agent.tourism@ukr.net by frv50.fwdcdn.com;
     Wed, 20 Sep 2017 13:32:43 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-cBY7L5mCIzYB+L8W91Ds"
X-purgate-ID: 149285::1505903564-0000119B-9C3BA002/0/0
Delivered-To: xxx
Envelope-to: xxx
X-Originated-At: 212.42.77.199!51964
Delivered-To: xxx
« Zuletzt geändert: 13. Juni 2018 um 19:46 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
seiko
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28087
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #31 - 28. Mai 2018 um 16:48
 
Hello dear MR. xxx,
Yes,we remember your lady miss Natalie,she came to us last week and said you will write about trip to Vienna.
We can gladly help to organise all that is needed.The price of urgent biometric passport for your lady will be 120 euro.
The tickets will be wih 15% discount but we need to know the dates to book them.
I attach our tourist licence to this letter.
You can make a payment to our bank account or any quick system transfer like MoneyGram,RIA etc.
We will provide the invoice and the paying details on your demand.

Sincerely,
the travel manager Alexandra Korolenko

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ee03:0:0:0:0:0 with SMTP id i3-v6csp2686841ioh;
        Mon, 28 May 2018 05:52:21 -0700 (PDT)
X-Google-Smtp-Source: ADUXVKIucVLNC4qR5a3oJKMhNC29wus9R1Jl6oqQVEfkOYIy7DEsl9539P3nPb3b8ELO5yz4Kftn
X-Received: by 2002:a19:7:: with SMTP id 7-v6mr970415lfa.62.1527511941032;
        Mon, 28 May 2018 05:52:21 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527511940; cv=none;
        d=google.com; s=arc-20160816;
        b=K4lgcfymWnRiMriD5MkbDtmVqnL8fe2SNi1QkV13qwiv1sfvXlJ6LO/nVfLiX5YPOb
         5Kpin3uF1DHSoReQ/xweYv2nBDVAq2PY5z8p/Gq/HUl3rDxXalbETLA5yclRw9ejsk2Q
         9hcngLzza3J2Mut353bAf4WJnmm9H06fAnDsQoz5DXSE7je5hAn6XMZiGdOMVQvXJ2Rf
         91f4VZy73sm83huhqI9HuGH8xp++3OeLzgSndQ0Zu8qSpTGdnqZ5tgtCgPBBwJTk0bO0
         CQj5YhL5/ld/Kl/NrdqEY8k8mrvr9QvhBVZr/sIDZ/u47qUAxWNVC5HZHc/TOXYmUvf0
         0h3g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:references:in-reply-to:message-id:to:subject:from:date
         :dkim-signature:arc-authentication-results;
        bh=/QYyli5wnJYhQQyacVi0dBNmsWVarABHTSFB4QRmX4o=;
        b=e53caNihge8HvMhwQNXW1EjIIJ8OvkRqk1zn1sipf9FkmIM7EuR7+HYHeFn/Y2wfIK
         KBgqTfYtcyAKhJx1a9Cbhx+goDzCpakiHvWhMZu+1xqmJ9sZWqc2zgIJoGEumUMfzbxM
         32OTFL9Fpqav89douLtchThrmlTJarzKo5tYNqPC0gFJYflngZEzacAX4ERYXjQCc+rW
         DdmM/q/53CaD05WKpw9NW5cBgYVEybNrPl4lVl/3xFM8mJxF7MvexI4ns6yICkMkJDfm
         LbjaUQxH+q5xkujdkfLP08HbJca9DghvVscDYDpDyO+E21SX5FhCeUeMd8399DpRBuen
         xS3g==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=w5vpJwlN;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.197 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
Return-Path: <agent.tourism1@ukr.net>
Received: from frv197.fwdcdn.com (frv197.fwdcdn.com. [212.42.77.197])
        by mx.google.com with ESMTPS id a25-v6si14803757lji.353.2018.05.28.05.52.20
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Mon, 28 May 2018 05:52:20 -0700 (PDT)
Received-SPF: pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.197 as permitted sender) client-ip=212.42.77.197;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=w5vpJwlN;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.197 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=ffe; h=Content-Type:MIME-Version:References:In-Reply-To:Message-Id:To: Subject:From:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=/QYyli5wnJYhQQyacVi0dBNmsWVarABHTSFB4QRmX4o=; b=w5vpJwlNoL1fSGXZDSmlXPpPgI TDmAPsKpLmVhwUL8lLxiea5KBJ93t6HzvUzdjzI908EDXN85kx0MSU7rYYR+phQKTXfCp3cNk0WzE NtM5HFGmdZJlYCUvqn6b6yT+j9f/hOYWOPAu8Tn0EBm1LbmTP0mQNL9UF610CP1EnCjw=;
Received: from [10.10.10.34] (helo=frv34.fwdcdn.com) by frv197.fwdcdn.com with smtp ID 1fNHdL-000DWu-Jh for xxx; Mon, 28 May 2018 15:52:19 +0300
Date: Mon, 28 May 2018 15:52:19 +0300
From: Open Travel <agent.tourism1@ukr.net>
Subject: Vienna trip
To: xxx <xxx>
X-Mailer: mail.ukr.net 5.0
Message-Id: <1527511618.945380925.pkx4qmk8@frv34.fwdcdn.com>
In-Reply-To: <CAA_5ChA_8eDGM-zRrecNWTetLYWFqjs6Uo7hM1oYfXfY0Leg6w@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChA_8eDGM-zRrecNWTetLYWFqjs6Uo7hM1oYfXfY0Leg6w@mail.gmail.com>
X-Reply-Action: reply
Received: from agent.tourism1@ukr.net by frv34.fwdcdn.com; Mon, 28 May 2018 15:52:19 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-z7x0PHmo76gOdOYPUDWU"

--=-z7x0PHmo76gOdOYPUDWU
Content-Type: multipart/alternative; boundary="=-LXhIRD6AnQrOlBkwUKbK"

--=-LXhIRD6AnQrOlBkwUKbK
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: base64
« Zuletzt geändert: 06. Juni 2018 um 15:29 von Uli »  
580718_Mir_Tourisma_registration_document.jpg ( 111 KB | Downloads )
580718_Mir_Tourisma_registration_document.jpg
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28087
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com> <agent.tourism1@ukr.net>
Antwort #32 - 28. Mai 2018 um 18:57
 

Hello dear MR. xxx,

What is the return flight date?And do you have any preference about arrival flight time?Morning or evening?
We will be glad to find the best time of arrival and for a reasonable price.

Waiting for your confirmation and than we will send you all payment details and invoice.

Sincerely yours,
the travel manager Alexandra Korolenko

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ee03:0:0:0:0:0 with SMTP id i3-v6csp2826579ioh;
        Mon, 28 May 2018 08:02:26 -0700 (PDT)
X-Google-Smtp-Source: ADUXVKJbbK4wPiim+lj3VNTU0OSLqypmd0q/tgB+HkPGeZZGA9AAtwroQn0mxQrb35Q5pgMNqmmy
X-Received: by 2002:a19:1099:: with SMTP id 25-v6mr7247725lfq.112.1527519746617;
        Mon, 28 May 2018 08:02:26 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527519746; cv=none;
        d=google.com; s=arc-20160816;
        b=F8kDFw1tA4x2Iax8P2FixMG6yVjQmZ5GQe+Ny0idiYxPLZKhs2yo6K54c22p88No9k
         BSHXf35vRX1JfZp9vu9EDnMqaYvXe07Yp/H1QOqhIQNV97zhxhtvRd9Jpl+VjzhwcJHC
         auZZWW8/W1DgxcNjazmTnD6LVaiUs0HjyILdvRm8l1kop0ZPZRTXuf7cbBcZEImGvAFx
         8fUeAuIagT2c9QJAtxP6rESc0rjBE9YDlEQgydDlwsFR+GW4mrr/RrVOazCSCr6dmoOS
         kZ+23VI7+wMN+/nDawyBygMrEqpyUsKFrH++2dQ5LubWT6CP6kj9cCX60LS7Kvs4pi+Z
         wQcw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:references:in-reply-to:message-id:to:subject:from:date
         :dkim-signature:arc-authentication-results;
        bh=B491375v2sWpXS10REHXiM6efzB27/kQ0ry2ywFD5PA=;
        b=n00+5JS983ZWzd35bEQ/5Pm5PLlqzAkQEQ0Z4t6mtGnwY1dtaQpPKwhhERKEVj7Kgn
         0O/YA+a5vSciaiVXLzrtPk1i9YTvtbBsEZaW6dgBVJqAXZL+NCLAkkBtxWHvEG+VIrwA
         U0yBP11bLovRqBkq5ofF4w2Cm9rp7/U9MbqygF5aksOIxEMfSXutSjs8RvFw5mgPyZGd
         wU1J3ir2Il5OCwebx/hSstZjye8J4TBoztvXdQCqox7hqC7729vsQH2A/rbdoEHf3AQi
         isB56S3kSIJou0ygbHoSfnCTntUPMtl1fSLikEOENEwlqBIzHnqer83PCLBZYLLc5yzv
         Ljwg==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=b3ZMoJSP;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.197 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
Return-Path: <agent.tourism1@ukr.net>
Received: from frv197.fwdcdn.com (frv197.fwdcdn.com. [212.42.77.197])
        by mx.google.com with ESMTPS id y6-v6si12760647ljc.260.2018.05.28.08.02.26
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Mon, 28 May 2018 08:02:26 -0700 (PDT)
Received-SPF: pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.197 as permitted sender) client-ip=212.42.77.197;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=b3ZMoJSP;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.197 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=ffe; h=Content-Type:MIME-Version:References:In-Reply-To:Message-Id:To: Subject:From:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=B491375v2sWpXS10REHXiM6efzB27/kQ0ry2ywFD5PA=; b=b3ZMoJSPIa8xX8b1cGzgRxyFE3 KliSVyZnx03hHPFxTcOb5AEkuTsZDA8SfrUhndhH0jo+6AqP0ytr09B274BszeDXEhj5i8u5cFcyU +IkJxwPJCZMUHQUiNhG38mz2ZK9ELu/fLpt8/5Wi8eocQLcP/XRig06ypZhuVpkKnYas=;
Received: from [10.10.10.34] (helo=frv34.fwdcdn.com) by frv197.fwdcdn.com with smtp ID 1fNJfF-000DYO-Dd for xxx; Mon, 28 May 2018 18:02:25 +0300
Date: Mon, 28 May 2018 18:02:25 +0300
From: Open Travel <agent.tourism1@ukr.net>
Subject: Re[2]: Vienna trip
To: xxx <xxx>
X-Mailer: mail.ukr.net 5.0
Message-Id: <1527519586.323099853.upd845lk@frv34.fwdcdn.com>
In-Reply-To: <CAA_5ChC1U_2wnnF2JzzFy_6op1uOs0hdWKA_+wFLWSiKQU7Vjw@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChA_8eDGM-zRrecNWTetLYWFqjs6Uo7hM1oYfXfY0Leg6w@mail.gmail.com> <1527511618.945380925.pkx4qmk8@frv34.fwdcdn.com> <CAA_5ChC1U_2wnnF2JzzFy_6op1uOs0hdWKA_+wFLWSiKQU7Vjw@mail.gmail.com>
X-Reply-Action: reply
Received: from agent.tourism1@ukr.net by frv34.fwdcdn.com; Mon, 28 May 2018 18:02:25 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=-ZCGrRUHz3OioqaCIc9a3"

--=-ZCGrRUHz3OioqaCIc9a3
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: base64
  
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28087
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #33 - 29. Mai 2018 um 16:46
 
Hello dear MR. xxx,

There are few variants of flight on the 4 of June,with one stop or direct flight.
Direct flight will be 349 euro including tax and luggage,your lady will arrive at 14:35 local Austrian time at VIE airport.The flight will be with Austrian Airlines.
The flight with one stop starts from 196 euro including tax an luggage and Miss Sichkar can arrive at 13-40 local Austrian time  at VIE airport.The flight can be with Turkish Airlines or Onur Airlines or Pegasus Airlines.She will have a stop in Istanbul or Ankara.
Please confirm the flight plan and i will send you the invoice at once with the correct total amount.

Sincerely yours,
the travel manager Alexandra Korolenko

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ee03:0:0:0:0:0 with SMTP id i3-v6csp3848196ioh;
        Tue, 29 May 2018 05:50:01 -0700 (PDT)
X-Google-Smtp-Source: AB8JxZo60f1jcmVFoZTNhqLJHtqKT2FQU5BiewlyxPbxiX+vAJIaJeVypdXvd4KIg/HlD+yBXLMW
X-Received: by 2002:a2e:4255:: with SMTP id p82-v6mr11129433lja.16.1527598200893;
        Tue, 29 May 2018 05:50:00 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527598200; cv=none;
        d=google.com; s=arc-20160816;
        b=DcziugrWGqBHlWrQURezHSaFBwiTzaL7fyEY5flv+kHwqUHyNeR8Qo579dKLlK6mmT
         lWknfjF871tE4QhQA8gbgeQH2BAW2NrYx2wtOdbhNp+ZUn2pVtScOmiB3TJ5MuIxX5Xc
         f5ZHo/jJLY7TgRUkJUxZwUU9GA8HRI6OaPdyvnA8MseFBh+xvXU13afRWVcwKIfc9nM3
         A5ehS8l2kqZVkHi51udBGIYofZSzevcDgkVt/MgQ6LIZ7Ptxuv4gbHVGcSdldbEwmMGN
         Ro7DYPBFVs7Xi6eXo0W6V1gKNJWPgIz9fX1Sgvx5hMJPYmIhPw+oIxRUFceku7w2Nrlf
         N7RA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:references:in-reply-to:message-id:to:subject:from:date
         :dkim-signature:arc-authentication-results;
        bh=vfdb4u6FgzaafIv+H18f/R7jU3B2Hg7wmLuEGcrR1YY=;
        b=VPcTXKua18WPCmxA7q8UzDa/tZxVZl1u7VIRXjwG6wOiyq67k1YBiwsV1Qs0Yg/0pA
         X+4gESW9EO+OEaNSnjeBX2Dw9aYvhaOepXn30H7Qy73NOJtrCsKCYrkR+0aTzt2icXSi
         /c4BIL2WgDQLsT0y0JRRjpYRAHzYohZplo+oPz8InIWahIJP05tYjilApsAHz+Vcs6bm
         n1DONwz/KSbv55WJEi/t1cBnrUKEU3tRz0rrhy6VRQkSySp3LWxZxKZayuwsOzv5cSyU
         pyaWgqi67wcknR7piMXsTCd5LA9dKMd9EyJdWghSfSIMB4jT++7z0lXyf8ZAeb27SolA
         z+qA==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=aQEFMsvu;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.196 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
Return-Path: <agent.tourism1@ukr.net>
Received: from frv196.fwdcdn.com (frv196.fwdcdn.com. [212.42.77.196])
        by mx.google.com with ESMTPS id e21-v6si16490854ljg.344.2018.05.29.05.50.00
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 29 May 2018 05:50:00 -0700 (PDT)
Received-SPF: pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.196 as permitted sender) client-ip=212.42.77.196;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=aQEFMsvu;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.196 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=ffe; h=Content-Type:MIME-Version:References:In-Reply-To:Message-Id:To: Subject:From:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=vfdb4u6FgzaafIv+H18f/R7jU3B2Hg7wmLuEGcrR1YY=; b=aQEFMsvu+RQotN5ma7Vnam85s1 2dPfD0sLWyYgAr/jq0eHNzCzMWpkaXkW37vYUCE8L3oCn0C7G4BZcBCpcKFfEY4tfLLWmwuRCrVyQ 91WOx/bnzzIJx2fiykDjQHhv9mRiqqIyvyUJHQgmAgHkfe99qAS3LH1XQ5mO1h+qia5k=;
Received: from [10.10.10.34] (helo=frv34.fwdcdn.com) by frv196.fwdcdn.com with smtp ID 1fNe4d-000G4t-Nr for xxx; Tue, 29 May 2018 15:49:59 +0300
Date: Tue, 29 May 2018 15:49:59 +0300
From: Open Travel <agent.tourism1@ukr.net>
Subject: Re[2]: Re[2]: Vienna trip
To: xxx <xxx>
X-Mailer: mail.ukr.net 5.0
Message-Id: <1527597728.375660423.5rjfyefg@frv34.fwdcdn.com>
In-Reply-To: <CAA_5ChA1GyA91sjXPyGYhdDANwb9QOEJC7Y76ZqxoVikOOSm1Q@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChA_8eDGM-zRrecNWTetLYWFqjs6Uo7hM1oYfXfY0Leg6w@mail.gmail.com> <1527511618.945380925.pkx4qmk8@frv34.fwdcdn.com> <CAA_5ChC1U_2wnnF2JzzFy_6op1uOs0hdWKA_+wFLWSiKQU7Vjw@mail.gmail.com> <1527519586.323099853.upd845lk@frv34.fwdcdn.com> <CAA_5ChA1GyA91sjXPyGYhdDANwb9QOEJC7Y76ZqxoVikOOSm1Q@mail.gmail.com>
X-Reply-Action: reply
Received: from agent.tourism1@ukr.net by frv34.fwdcdn.com; Tue, 29 May 2018 15:49:59 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=-J0YkN1tPhSuyYzPeakQg"

--=-J0YkN1tPhSuyYzPeakQg
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: base64
  
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28087
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #34 - 29. Mai 2018 um 19:13
 

Hello dear MR. xxx,

Yes,we understand your wish and will book a direct flight for your lady.
I attach a correct invoice and correct amount to pay to this letter.
I also attach banking details,you will send a SWIFT bank transfer to the general manager of our company.
After proceeding the payment please send us the receipt paper from your bank that the payment went through.
Than we can contact your lady Miss Sichkar to come to our office and start the application for the biometric passport.
We will keep you informed about every step made and when your lady recieves the passport.

Sincerely yours,
the travel manager Alexandra Korolenko

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ee03:0:0:0:0:0 with SMTP id i3-v6csp4021645ioh;
        Tue, 29 May 2018 08:23:01 -0700 (PDT)
X-Google-Smtp-Source: AB8JxZoo7kW+bS0dpT8L9zg+eGLATJ4nT5Ox+Lv8AkcZcSduNUEGQz69086EcDmCwL75MVfrcMvX
X-Received: by 2002:a2e:2e17:: with SMTP id u23-v6mr11399533lju.77.1527607381330;
        Tue, 29 May 2018 08:23:01 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527607381; cv=none;
        d=google.com; s=arc-20160816;
        b=Keh/FiJsW+qZ44y0jHPDxXec5CgybNVJ9LXOih/zKZ0BgnbrEULgz7lrqRhQ6puYJZ
         iHNk3fqQ46iowJ1Kgx9YrWZ8KE/E/zMjZgm5ptTpzrzbGdWNaTnxUq3ooXfc2pLDwve8
         LAZxdDCJ15oQSc/E+LHBOR28w1ys7vnXQoRB4Jpijpn29v+CDw50eHp7+TJOnkf///xh
         1lRaXaOdm+s+MpzvL1C/ej2jZJvSCF1j6q2OF27NLkApq040voFfk4jgy8guAdkPxqTW
         UsogWUxPTOQC2k3YfxO/MBuciJa8YuXonJOeC29mby1BPYsqZDBI36pWnl4cX5vOkad0
         bWsA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:references:in-reply-to:message-id:to:subject:from:date
         :dkim-signature:arc-authentication-results;
        bh=kOLjF9GbXkhR2BQdSU3HTjeXg1QcOL48siXBbWYkl+0=;
        b=I4I/eYfHDTomlQYPBIO+oMKjR8CL1kJ6NS/O3IQjIsUailodTnMspYA8hdv76E5gsG
         K24b70oprJxjJbGZc0aK+d5Y8Um7wxiv2lBtKPJwhfbO4aop/LzgNp6FkVDeouJwzLDF
         X1Sp26hGGkI23HAHbok5nZ9Qxkls36JRri3ZhzfIRb0GqvIVLRrJJD7FJ5jRdMsPr5zG
         M9zH5e121ofU6mhBRkekX3YKqadnBSNg9Rx9+BLpu1Y/LSZAvOFyo1++SwGeG1Y9Ig83
         C1FmeoNr/Rjk4iPMdKPgaoDFsjZ6zcU/6B0a/EUtbdeBBfZU1khexBXe2FOhjQ0oRmae
         HlHQ==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=mj+5/dty;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.196 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
Return-Path: <agent.tourism1@ukr.net>
Received: from frv196.fwdcdn.com (frv196.fwdcdn.com. [212.42.77.196])
        by mx.google.com with ESMTPS id r4-v6si14205879ljg.254.2018.05.29.08.23.00
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 29 May 2018 08:23:01 -0700 (PDT)
Received-SPF: pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.196 as permitted sender) client-ip=212.42.77.196;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=mj+5/dty;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.196 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=ffe; h=Content-Type:MIME-Version:References:In-Reply-To:Message-Id:To: Subject:From:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=kOLjF9GbXkhR2BQdSU3HTjeXg1QcOL48siXBbWYkl+0=; b=mj+5/dtyInc93Av412bmi49A0K 0rPsSmiKINHYgHAhl19cuDSp9ahnnL9Wn/JWAoRtjhn+73ArrDsju4VA2qEu5RwogYBGlhbSxV0Fr 70UfGihn7iEDJrzrbmJU6DVykRbTINe3fBXu3D/p+ca2uUGdBSQR/PvoXhUzWx0Hnwxo=;
Received: from [10.10.10.34] (helo=frv34.fwdcdn.com) by frv196.fwdcdn.com with smtp ID 1fNgSh-000E4R-UG for xxx; Tue, 29 May 2018 18:22:59 +0300
Date: Tue, 29 May 2018 18:22:59 +0300
From: Open Travel <agent.tourism1@ukr.net>
Subject: Re[2]: Re[2]: Re[2]: Vienna trip
To: xxx <xxx>
X-Mailer: mail.ukr.net 5.0
Message-Id: <1527606439.900522846.lkfvxp73@frv34.fwdcdn.com>
In-Reply-To: <CAA_5ChCK2KA89JKLt4c0vRiNCzVgGNFR32-_B0CvrH3mRWhzvA@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChA_8eDGM-zRrecNWTetLYWFqjs6Uo7hM1oYfXfY0Leg6w@mail.gmail.com> <1527511618.945380925.pkx4qmk8@frv34.fwdcdn.com> <CAA_5ChC1U_2wnnF2JzzFy_6op1uOs0hdWKA_+wFLWSiKQU7Vjw@mail.gmail.com> <1527519586.323099853.upd845lk@frv34.fwdcdn.com> <CAA_5ChA1GyA91sjXPyGYhdDANwb9QOEJC7Y76ZqxoVikOOSm1Q@mail.gmail.com> <1527597728.375660423.5rjfyefg@frv34.fwdcdn.com> <CAA_5ChCK2KA89JKLt4c0vRiNCzVgGNFR32-_B0CvrH3mRWhzvA@mail.gmail.com>
X-Reply-Action: reply
Received: from agent.tourism1@ukr.net by frv34.fwdcdn.com; Tue, 29 May 2018 18:22:59 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-D7Jn4XspCDv4qvKRjfxF"

--=-D7Jn4XspCDv4qvKRjfxF
Content-Type: multipart/alternative; boundary="=-vf9/XpliWHROzfrIiE72"

--=-vf9/XpliWHROzfrIiE72
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: base64
  
in29092017_VA_038.pdf ( 85 KB | Downloads )
ACCOUNT_DETAILS_euro.rar ( 12 KB | Downloads )
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28087
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #35 - 30. Mai 2018 um 19:44
 
Hello dear MR. xxx,

We understand your situation and our general manager agreed to send you the photo copy of her passport,
I will attach the photo copy of it here.We do not usually practice it but for you made an exception due to your bank regulations.
Please send us the receipt paper as soon as the SWIFT transfer is done so we can start preparing the documents without delay.

Sincerely yours,
the travel manager Alexandra Korolenko

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ee03:0:0:0:0:0 with SMTP id i3-v6csp4814986ioh;
        Wed, 30 May 2018 00:44:50 -0700 (PDT)
X-Google-Smtp-Source: ADUXVKKwEBWoYuHcgitw1iNSml87d+p4DDrHVjVDweOVKSIHYxAZNk5hQgK2U9J656ZdQTNqjtdQ
X-Received: by 2002:a19:9dca:: with SMTP id g193-v6mr1036607lfe.65.1527666290224;
        Wed, 30 May 2018 00:44:50 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527666290; cv=none;
        d=google.com; s=arc-20160816;
        b=eiHMjIZs3NJ3VnamTwBA6vcn69MXLMouQBUJqNfYDpfT8blF9CEoJy3rmIcKPy4u+G
         SR+rXjtFK3c4iVMqkq1R+zo6uw5pRnoq99L8xB8rVU17SOJ9qY35uBgJGu9Id/Z9cpAt
         LBTsbMtagEZVyW/IdHOD/KHjBd3oB+0fapIOg0mYgJjY1RbksOGw5UohvZ9LyCcP5LQb
         lX6z5DRJLcdJWJY8VzmXRfU+rCA0q/P6IYHNipXUsHz3pyFgweeIPoMV8k3iEVErjPWo
         2ycozltz7Hsim3qn2pDQ0UW3lB/CruDe8N5vyVQ3nujmDXveMTTkAIJUwG3M9Q3CEmAG
         bsmA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:references:in-reply-to:message-id:to:subject:from:date
         :dkim-signature:arc-authentication-results;
        bh=Akgt8VZXLdGGBtZyxJfnLT8q5ndTCRgJo9lNTHSET2g=;
        b=GEa2Rb2pzugzMuZDBgcRhD1NQOg6kuY6npsVpbr2UvhLBxjHp1dFD6r6+rm1ck/jwC
         p9/EpwrhetqR56bAqlMzwgwbK2dT76pr5tieeLV1hW6BXKMRJD8ve2t9c8y9XSHDqr/O
         bbr8YCUp7POmtxTIHhV4Z5nXhdmavAGlbjUgaBJyDr7j+nt+odFS2NzGQXTQmZDrGLoP
         l3oLoD0lbGXyBh2VkLx4VWZMoBuZw75XU1tJsXKd56P2bZmXEO3c6N/0CzpyQRmQH+6H
         OAAfa6MnlkQ2VAAIc6jYE9BSYkXegSWaWWT1T3w+m+uKfkMv4xzV5U6jS0Yx+/tRYVfl
         Fsmg==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=JQa/pm2a;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.197 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
Return-Path: <agent.tourism1@ukr.net>
Received: from frv197.fwdcdn.com (frv197.fwdcdn.com. [212.42.77.197])
        by mx.google.com with ESMTPS id c19-v6si16927809lji.47.2018.05.30.00.44.49
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Wed, 30 May 2018 00:44:50 -0700 (PDT)
Received-SPF: pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.197 as permitted sender) client-ip=212.42.77.197;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=JQa/pm2a;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.197 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=ffe; h=Content-Type:MIME-Version:References:In-Reply-To:Message-Id:To: Subject:From:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=Akgt8VZXLdGGBtZyxJfnLT8q5ndTCRgJo9lNTHSET2g=; b=JQa/pm2ahvwSu4HPCRlh6KiD7n IKM2lSKQrXQUwxFJzt8BouOwv5cObc5gApomKTPmNlCXkjeD+X51LogxjowmWnj7KNU5XxzRhJKcp 3pMDhdPfuvMlQ7K5Q8opHItHgnMeCd6Hd9TqteN+yNeJvRySq4uICqE5nTeahcLV9Y1U=;
Received: from [10.10.10.34] (helo=frv34.fwdcdn.com) by frv197.fwdcdn.com with smtp ID 1fNvmq-000Blp-Ul for xxx; Wed, 30 May 2018 10:44:48 +0300
Date: Wed, 30 May 2018 10:44:48 +0300
From: Open Travel <agent.tourism1@ukr.net>
Subject: Re[2]: Re[2]: Re[2]: Re[2]: Vienna trip
To: xxx <xxx>
X-Mailer: mail.ukr.net 5.0
Message-Id: <1527665937.258754954.iopdc1yz@frv34.fwdcdn.com>
In-Reply-To: <CAA_5ChB7cNLbrtr_OjR4eeEyah0XRv6XNHS1KmgREZDVXam73w@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChA_8eDGM-zRrecNWTetLYWFqjs6Uo7hM1oYfXfY0Leg6w@mail.gmail.com> <1527511618.945380925.pkx4qmk8@frv34.fwdcdn.com> <CAA_5ChC1U_2wnnF2JzzFy_6op1uOs0hdWKA_+wFLWSiKQU7Vjw@mail.gmail.com> <1527519586.323099853.upd845lk@frv34.fwdcdn.com> <CAA_5ChA1GyA91sjXPyGYhdDANwb9QOEJC7Y76ZqxoVikOOSm1Q@mail.gmail.com> <1527597728.375660423.5rjfyefg@frv34.fwdcdn.com> <CAA_5ChCK2KA89JKLt4c0vRiNCzVgGNFR32-_B0CvrH3mRWhzvA@mail.gmail.com> <1527606439.900522846.lkfvxp73@frv34.fwdcdn.com> <CAA_5ChB7cNLbrtr_OjR4eeEyah0XRv6XNHS1KmgREZDVXam73w@mail.gmail.com>
X-Reply-Action: reply
Received: from agent.tourism1@ukr.net by frv34.fwdcdn.com; Wed, 30 May 2018 10:44:48 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-EcLoFXyfQxr6YJjES29P"

--=-EcLoFXyfQxr6YJjES29P
Content-Type: multipart/alternative; boundary="=-Gdii+tpKC42bB3nV8zZ2"

--=-Gdii+tpKC42bB3nV8zZ2
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: base64
« Zuletzt geändert: 06. Juni 2018 um 15:59 von Uli »  
FE937xxx_-_Gulieieva.jpg ( 100 KB | Downloads )
FE937xxx_-_Gulieieva.jpg
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28087
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #36 - 30. Mai 2018 um 19:52
 
Hello my dear xxx!Sure i will send you more photos with pleasure))I am glad that you asked me)))
Yes,we do not need to waist time and lets organise all soon and meet!I want it sooo much!
What are the news in general?How is your mom?
What did the travel agency tell you?
Kisses,
yours Natalie

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ee03:0:0:0:0:0 with SMTP id i3-v6csp4998138ioh;
        Wed, 30 May 2018 04:17:29 -0700 (PDT)
X-Received: by 2002:a62:ca98:: with SMTP id y24-v6mr2331047pfk.187.1527679049662;
        Wed, 30 May 2018 04:17:29 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527679049; cv=none;
        d=google.com; s=arc-20160816;
        b=fMdhj/hQcdfqsVb6we0HtzQk4X5KX33IXlCQwYwrmllYqZ3sguj59Fyt8wHLrH5e0x
         xu2Lss3SBYJ9tKGygAUorva1zGp0IdcUNRsuY8tMYgmjwmQagt2JcdLgkh69wlplHSBr
         mYEzVL4tYoHv0WxSBAINx3elP/b29ZgcSdLYBK33FV1vgkcVuf57eSARHN6r91lv9/2/
         aZN/agh7ioCVRGrtHoRSbuLeW2Q6QsZ2xwM6YU9sPKgNdiFrv4elWa0iCY4mY/7zOUrT
         KCJuiSic1A5xswc46htQC/TucEL7rv3l5K4lf7BrZ46CCJ0KPmN7os/q24i7Huq0Uv8I
         OwPw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:references:in-reply-to:mime-version
         :dkim-signature:arc-authentication-results;
        bh=cMkvhvs5uXW5YM3vSwkbW/qXN/l4MXYodeRkDWXQH0s=;
        b=bE4f73BrM4IkurcDXILan0RKTb+Slp95+XlDWH0VYtbdqF2VJwjtrUo950IBUzCP63
         enoVbggBsnaqXTverqq/3icriKOZSpOhvf5wdqxLF1AYToFYSoYdfz8VgbSqNxPUTE5u
         UVk59ZCrk71uWmTrv6WzqgLgrVcetzJzNZCNHF3r/KwaHZwS+z9Umce4z+UX/GEk7V6w
         Z6rFLcfogvKz2Ec+coFFM5KuVeVrRbdDfTKAgzoaXB6z3iU/mTd5xCtQwW+mGAbMowpE
         Ze2iv/QPnb+7DT8sxku3OREztM5f0bBHJinHvtl0TZD5esL4Pejq0aw3Ipx+zxkrxSBU
         GTnw==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=sp06jsmd;
       spf=pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sweetladynatalie@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
Return-Path: <sweetladynatalie@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
        by mx.google.com with SMTPS id l8-v6sor1025130pgp.397.2018.05.30.04.17.29
        for <xxx>
        (Google Transport Security);
        Wed, 30 May 2018 04:17:29 -0700 (PDT)
Received-SPF: pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=sp06jsmd;
       spf=pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sweetladynatalie@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
        bh=cMkvhvs5uXW5YM3vSwkbW/qXN/l4MXYodeRkDWXQH0s=;
        b=sp06jsmd82JMROlU14bqXrnBt9HToTJNm6Ho/efii8hgccEsYrkmWdeVTYPzvBIEJ2
         dnJA8yYuc4PbLTIXbSDIX/fw9N73qbnMLl66FzigP6w0TYEm6bfHn2GbE4IoHvZjlobl
         +D4Yfxnppw14irc+87INVdxjBKPPMVdTAjnuK2HEnaxmEGOA9GCpgf0McLaZ0d2wJa71
         zcIkbBSwo9TtU3QSB/ICCUiT+9Mxwdd/S8K+lD7HlyYSU58MGpQTshiWxCJbpnsO26m4
         6GFRBlz5nYp/BTFUCTl825ohuqe+lOBJcfYzVx+wCDzUfOHq5l7r/7bPM96MvTbYyH31
         RJgw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:in-reply-to:references:from:date
         :message-id:subject:to;
        bh=cMkvhvs5uXW5YM3vSwkbW/qXN/l4MXYodeRkDWXQH0s=;
        b=O37+uvEmvVTd0moprM3YAF6T7vnr12iI19aJvE1hkFsmRGJH+x43jL5kjTbaKPTni7
         eOr90aRBxaUuw5o4bsMmCseXH5fDNfXERY8sulD3K8p+fzyibyMdBUqIRw7+fd3WW6o2
         REDr0+Oh2/c+0BDQBWfxHNjTiAnQ470G72FqZ4CGRV3AXDlg9KcT4RgVj99Ay+C9j2la
         RoJTl63zq12/7RGPZ2VJI1ttXwfoOqmtWGW9JIR4g1j8UL33dF/Qn1dh4UEzGJNG9Elv
         VjFrExA1oWn54SxHsBEOPU2UQ957J8w6oQNtbSJ9e066X4s6HbVptF/7FBP4iOFnGNo3
         SeIA==
X-Gm-Message-State: ALKqPwc27Ow7uZY0sqPSzF65hmSOc5EYqHcqvev8J6JqPo/+BvD9p4z7 A5ymja4+lC0cvE9trkGvYVO4Mmm1Zm/lmucxEBY=
X-Google-Smtp-Source: r1lHHCLBIcI=
X-Received: by 2002:a63:6e05:: with SMTP id j5-v6mr1926742pgc.150.1527679048326; Wed, 30 May 2018 04:17:28 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90a:4e8f:0:0:0:0 with https; Wed, 30 May 2018 04:17:27 -0700 (PDT)
In-Reply-To: <CAA_5ChCU5Z7eP-1As83j7WVi1+MbLH96Q0Pvm3z4jVrr6a4ciQ@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChCU5Z7eP-1As83j7WVi1+MbLH96Q0Pvm3z4jVrr6a4ciQ@mail.gmail.com>
From: Natalia Sich <sweetladynatalie@gmail.com>
Date: Wed, 30 May 2018 14:17:27 +0300
Message-ID: <CACkU+X07UWVssB1OY06kd1AcgubM7WotfJsaRF79oq0e4=1n+g@mail.gmail.com>
Subject: Re:
To: xxx <xxx>
Content-Type: multipart/mixed; boundary="00000000000001cae8056d6a7fa2"

--00000000000001cae8056d6a7fa2
Content-Type: multipart/alternative; boundary="00000000000001cae6056d6a7fa0"

--00000000000001cae6056d6a7fa0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
  
bdhiude.jpg ( 113 KB | Downloads )
bdhiude.jpg
dnbdbhdfi.jpg ( 96 KB | Downloads )
dnbdbhdfi.jpg
nhrough4rgou4e.jpg ( 42 KB | Downloads )
nhrough4rgou4e.jpg
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28087
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #37 - 31. Mai 2018 um 11:11
 
Hello dear MR. xxx,

Is your order for the trip to Vienna still avaliable?
When shall we wait for the transfer?

Sincerely yours,
the travel manager Alexandra Korolenko

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ee03:0:0:0:0:0 with SMTP id i3-v6csp6079098ioh;
        Thu, 31 May 2018 01:09:02 -0700 (PDT)
X-Google-Smtp-Source: ADUXVKLb8knuOmf8mBAXUE37fcYvqIq2EZk59mqb+yD63IL/K2gB/no2G37Zt9YHfNGJeV+geUpv
X-Received: by 2002:a2e:83d7:: with SMTP id s23-v6mr4445253ljh.34.1527754142174;
        Thu, 31 May 2018 01:09:02 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527754142; cv=none;
        d=google.com; s=arc-20160816;
        b=Nqv4er1Iy+fHTdoiA7Yx2vQfrcu2vtbIryHCCW4k5GDbYN2jD5RoJgnuX1rI/Gq2hP
         SnvWwBo7xy4yQSmhxyVUFic+ft23Fa9wXGZkLQ5Vbqo4xccVM8L9P93UPbKntA2BViHn
         NlmhQJGVsqDcIW3L5+hFNNQfdB/ah7O+TRzly2O5b8o//ezRiCeoo/Mzjht2fN2luM9n
         A1S8fNM1jUylotkophd3atm5WQhCUrknNozwVPMQi6HFjMO/MR5Ubw/XItHZ4eF7xbV9
         lzkte/eSjGDvD2QxLI637LDmSFIpEl03bwQg79534W/Yi5hBUzRUBs7RMq9gXJqktQo8
         CDVw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:references:in-reply-to:message-id:to:subject:from:date
         :dkim-signature:arc-authentication-results;
        bh=rCOkXqgZfpsNst4Ra5zftWmbLKFMELE7PT1EJZqr9K4=;
        b=E0dJAK3apgmmni9Dmumlp9ozwD4xOOBlbtX8agWV9unNW2HOeSydfKFpp5mc2HXx3I
         e+QDKVpJKI1z1I/YmlY1uAajitzF3FpyHLMON3sF/A2jdgnsx5GF9UC+54S61vgmnZIw
         WdS/Hiwsmd56fbNh3DDUGMILJw0Rt5VNtWXl2YnNdmMO5nktuv6bFf9nR6D7Dq0swOu4
         gEiw84M0rlHWKNlZbz6hV1ApQbGu7Ui83tLJD+4tw7Oe9fAyoPVSBT0BFQqeenS9jFQA
         XkvkJ7eQT5JK1B48e4sZIBjSVTfUnc2EMMyn9fZFKIZlfdJhkxwAYVoKnTuWlccuUxlB
         hjzg==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=dv0d9Pbb;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.196 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
Return-Path: <agent.tourism1@ukr.net>
Received: from frv196.fwdcdn.com (frv196.fwdcdn.com. [212.42.77.196])
        by mx.google.com with ESMTPS id t74-v6si5557169lje.191.2018.05.31.01.09.01
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Thu, 31 May 2018 01:09:02 -0700 (PDT)
Received-SPF: pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.196 as permitted sender) client-ip=212.42.77.196;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@ukr.net Quelltext.s=ffe Quelltext.b=dv0d9Pbb;
       spf=pass (google.com: domain of agent.tourism1@ukr.net designates 212.42.77.196 as permitted sender) smtp.mailfrom=agent.tourism1@ukr.net;
       dmarc=pass (p=NONE sp=NONE dis=NONE) Quelltext.from=ukr.net
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=ffe; h=Content-Type:MIME-Version:References:In-Reply-To:Message-Id:To: Subject:From:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=rCOkXqgZfpsNst4Ra5zftWmbLKFMELE7PT1EJZqr9K4=; b=dv0d9Pbb6UG8jUZm9AXt3zrZtz G0nNfg/eU7R92I3t28jjVsKjskRD/JLpqFDRmVVOsVGwJ+sO6JDPSwXlPuPALIVAU5EdF266Rv+Pk qdlkPvRoTp80VsvIqW9nPq+PgEcwF117iXIwJ0Ea+ohic4wIiv5mSui2TnUWzGiu11MQ=;
Received: from [10.10.10.34] (helo=frv34.fwdcdn.com) by frv196.fwdcdn.com with smtp ID 1fOIdp-000DwS-4H for xxx; Thu, 31 May 2018 11:09:01 +0300
Date: Thu, 31 May 2018 11:09:01 +0300
From: Open Travel <agent.tourism1@ukr.net>
Subject: Re[2]: Re[2]: Re[2]: Re[2]: Vienna trip
To: xxx <xxx>
X-Mailer: mail.ukr.net 5.0
Message-Id: <1527754042.320317362.x3805no2@frv34.fwdcdn.com>
In-Reply-To: <CAA_5ChB7cNLbrtr_OjR4eeEyah0XRv6XNHS1KmgREZDVXam73w@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChA_8eDGM-zRrecNWTetLYWFqjs6Uo7hM1oYfXfY0Leg6w@mail.gmail.com> <1527511618.945380925.pkx4qmk8@frv34.fwdcdn.com> <CAA_5ChC1U_2wnnF2JzzFy_6op1uOs0hdWKA_+wFLWSiKQU7Vjw@mail.gmail.com> <1527519586.323099853.upd845lk@frv34.fwdcdn.com> <CAA_5ChA1GyA91sjXPyGYhdDANwb9QOEJC7Y76ZqxoVikOOSm1Q@mail.gmail.com> <1527597728.375660423.5rjfyefg@frv34.fwdcdn.com> <CAA_5ChCK2KA89JKLt4c0vRiNCzVgGNFR32-_B0CvrH3mRWhzvA@mail.gmail.com> <1527606439.900522846.lkfvxp73@frv34.fwdcdn.com> <CAA_5ChB7cNLbrtr_OjR4eeEyah0XRv6XNHS1KmgREZDVXam73w@mail.gmail.com>
X-Reply-Action: reply
Received: from agent.tourism1@ukr.net by frv34.fwdcdn.com; Thu, 31 May 2018 11:09:01 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=-AjD9QV4wurrVkNgK3yZ/"

--=-AjD9QV4wurrVkNgK3yZ/
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: base64
  
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28087
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #38 - 02. Juni 2018 um 16:52
 
Hello my dear xxx!Is everything ok?
I hope to hear from you soon!
I already took vacations from work from next week))so  i am free to come)
Kisses, Natalie

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ee03:0:0:0:0:0 with SMTP id i3-v6csp6649570ioh;
        Thu, 31 May 2018 10:52:28 -0700 (PDT)
X-Received: by 2002:a17:902:bc4c:: with SMTP id t12-v6mr7941400plz.177.1527789148709;
        Thu, 31 May 2018 10:52:28 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527789148; cv=none;
        d=google.com; s=arc-20160816;
        b=mlj0fX8GYRLBRbsjU0G1+wSyT9uXtSA5eUvY+w1GbiBT4LeaB+E9dWb0i/UoBeCC/r
         PMOInhMhmGC8HYWMKFxtMrbbgFj8RynpJOSIQmpoif8/8vyX4Ua3J9efKpBjZPJ1V8I3
         BYYD3R9pN6Q2XqSDh+1Do1BULPY7BJZbLpOzOlmWK6DqKsHP5hIHeq1e9I9801q2+RzU
         TNUVjiKJ0k3RdtZxCT+zVkOfD9YTLiv/cdUowy969vWBEc16Ct/OkRdFyjlHCs3JLzJP
         9YQPrYQTGKy8Y0jkhdMV9jMrU55P0JLz8sX62DHMV1RkfBWDHJVKG4LrvlgI9aLFslsy
         BPDw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:references:in-reply-to:mime-version
         :dkim-signature:arc-authentication-results;
        bh=CNqG/vwjMGR3TyfSDBMCl9fGwdBI/+kgsFm4aWZTxtE=;
        b=yvYarpKIPfuHGC5zbE7HclQ27hDBgJurxaGFR/5cqQTjyn3iZSfTYFHpwHWIx8uPKk
         6bM1hcYyvXDhtpffcx1GD3nmHIWt57cwPe66lluWSmk81KSTfYut+5DkadofC5pnnSOC
         42r0dTFf+SoQK8Wv79n7r0+cuc5TWMnoff2IVYszcyIm4u5KKAPoCFBknUy9qAiSoQuO
         4G9nOVeTM/p60wMtXSN5yiI6Nvht/k+5eCjBFpSAK0CVu9XboYamacZAZBGrSxEBPD2P
         pG9NswlXuS0lWsdkWNCj5NF6RYfhfsdfD1AmbsZVX+wEprzb7DzR2PYFyMMOvfPznfNN
         NuEg==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=XBXXkNbd;
       spf=pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sweetladynatalie@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
Return-Path: <sweetladynatalie@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
        by mx.google.com with SMTPS id 73-v6sor13407173pfz.58.2018.05.31.10.52.28
        for <xxx>
        (Google Transport Security);
        Thu, 31 May 2018 10:52:28 -0700 (PDT)
Received-SPF: pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=XBXXkNbd;
       spf=pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sweetladynatalie@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
        bh=CNqG/vwjMGR3TyfSDBMCl9fGwdBI/+kgsFm4aWZTxtE=;
        b=XBXXkNbd47S780/xLeJZLxRaxL35UyLZtmXjA6PIwqO0kJveWeybfjvsHQc6RQOOfj
         TH7xZLlkiHCLshllbClZKDe6NY0VECSpaAc9DBBFBR5sL0tHu8bcfIQU6h5EtEK9rBj/
         hbko3V06l/j7Hgy/+d/E1sjztLJaSa8jI3FT3CLJLrC3J9VQ/Hn8/oxFhBoLINtzj6sJ
         yxk1+2il8nr/AQ7U1ABZQ3XwlFqu6DFQLr/CcPtJnsbM+UDR8W4MzF7BTSTVx8HMFMAr
         SLKRGu+u46sDK/ujAWP2f38dAIMyRpohPS+YfzXsZZGnyauPs47R/Nt1+naZbsRIaTRJ
         3hKQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:in-reply-to:references:from:date
         :message-id:subject:to;
        bh=CNqG/vwjMGR3TyfSDBMCl9fGwdBI/+kgsFm4aWZTxtE=;
        b=Fz/7Bd4742YBfwUI4OXrT12WZqe4VlQSxkf1DTBRete+svq2exYtSP2m6If+t60cYn
         s5oqrkt41F7r0VzNsFtrtLK97Ysv/XbrP/rDhgaqeTuM5y5AbIL2v5+tGAN41m8WKTZm
         bWLQBNlQhFw227KDJzBXbac013lBVu+c7i2SlhkKnxFqwcQdD038452DwEquLbI/YSV6
         sq6/TJI3FdlAHU+3u/PBOR/gJOefpjRED7MB84VPRJMSvPD0YQ3dV7nGTBLdNigfMsVW
         X+km3vuPjFRgB4auwe2qSA2LTgvN7weCyvVlarECz5ETea1qAcp57eGSaQ8FIZZagINk
         iaJw==
X-Gm-Message-State: ALKqPwdNC1Ay0vYTR+GW5hvHBzi24+paW58Dc3O4516MdpGdkCZKEoq0 wx1V7YBFm3G7q/zGYBcGfvrjCkxskJhlLeqsudA=
X-Google-Smtp-Source: 9LXooM4khBo=
X-Received: by 2002:aa7:8589:: with SMTP id w9-v6mr1333078pfn.119.1527789147578; Thu, 31 May 2018 10:52:27 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90a:4e8f:0:0:0:0 with https; Thu, 31 May 2018 10:52:27 -0700 (PDT)
In-Reply-To: <CACkU+X07UWVssB1OY06kd1AcgubM7WotfJsaRF79oq0e4=1n+g@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChCU5Z7eP-1As83j7WVi1+MbLH96Q0Pvm3z4jVrr6a4ciQ@mail.gmail.com> <CACkU+X07UWVssB1OY06kd1AcgubM7WotfJsaRF79oq0e4=1n+g@mail.gmail.com>
From: Natalia Sich <sweetladynatalie@gmail.com>
Date: Thu, 31 May 2018 20:52:27 +0300
Message-ID: <CACkU+X0bO3N=VzG-7mg+21g-pfzG2kq39x3q5UKYV6pn7krSMw@mail.gmail.com>
Subject: Re:
To: xxx <xxx>
Content-Type: multipart/alternative; boundary="0000000000006ee4d4056d842155"

--0000000000006ee4d4056d842155
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable



Oh,what happened???
I am so sorry to hear that!How can i support you?
If you need to talk or something i am always here to listen!
Please take care!
I am very very sorry!

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ee03:0:0:0:0:0 with SMTP id i3-v6csp2096564ioh;
        Sat, 2 Jun 2018 07:50:18 -0700 (PDT)
X-Received: by 2002:a17:902:8b85:: with SMTP id ay5-v6mr14708794plb.30.1527951017939;
        Sat, 02 Jun 2018 07:50:17 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527951017; cv=none;
        d=google.com; s=arc-20160816;
        b=SF4AW/t9exOa74ACjO78zOUINvQV9dElaeVWawzzFEX8f793a/bzre2h2/i+4JhfD+
         Owiq9Q9YaRAk8iJUpdLfPQNmZRK63sYmE7/hq5Two+Db1EzrrIoNY6T9mitUQf5tJ5EA
         UOwzU6b/b2U2W0Ued5cNaoK7PHPmH9zPOlx+FHirgZ39TVlQpWbK44fTM7Rf8nBOsnpA
         rmMnr4BvCoTVpkG2FICVpoyfDDBFB00tKJUVQRSW4cyTAVLZrZ41QxlGzXreRIMSTM1O
         3mlwfxMNJgoAmjEiietoCioHvMJXfzMjHqDsdYXetoeJYjT4GBp1nBoDJhpXI0rdHo0M
         b8Dw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:references:in-reply-to:mime-version
         :dkim-signature:arc-authentication-results;
        bh=/blcDGIt7eQHQgsey9v58u4/bx+UM1d5rvZgqiQ/Taw=;
        b=hlYwDTZFGJ8JK7p908ZSNwWn4wRbxf39ArPWduRh5YWLITTG/hiXPIJtgoxdTrJ0iu
         5w172Zadd3Hbd0VNU8q0cL2H8glIiOPH9bgJUjx82CNnYajebHR2rb2jU7anrm9l4hpB
         3UaqM+2SMC73ITFod4l1GxIniZy+lg8DVFtAw46kb8iUS7wUc1vVzaWWvxUNVUDibSpL
         X3IgYC2j96X8VgHdtCDsWC+WPmTQ9IterLXRqmkuNuEq02xlQdjiUGf14avMDFjv6V1+
         R/sujxZy8JUC90l1StuAZuZQHgC8dp1GscAiwm06YDcpDV1twkqURsSYBbabCUPPq8p2
         n41g==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=O8fkKQLL;
       spf=pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sweetladynatalie@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
Return-Path: <sweetladynatalie@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
        by mx.google.com with SMTPS id z20-v6sor2983284pgu.259.2018.06.02.07.50.17
        for <xxx>
        (Google Transport Security);
        Sat, 02 Jun 2018 07:50:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=O8fkKQLL;
       spf=pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sweetladynatalie@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
        bh=/blcDGIt7eQHQgsey9v58u4/bx+UM1d5rvZgqiQ/Taw=;
        b=O8fkKQLLjxxlbaVUoS5NyNv66zuizSYwlKAzvI6PyBjmbUU9H76z9Mp+7J3GcX080y
         bUmMg22p3kBEV6KWD+VjSt0KBckqdNOrjdntzxw09K7hvRjlx4mi1xjTFB6gTLrhs0uT
         Awpmygb1/g0m4VGpjKbfCkGVZna7mGVzZoBFPD/Ymy62WvrT6uohpGYTUjfXJCFWLd0H
         DsdzEdW7iTjqylRzLgLqP0kGaSRTWHexwqqr9ns6ySg3wy56v7rGolGpKTlULjY1c3VU
         00BY+xuvlE4t32weSeobxZju+J1SYcOTufanhV0MVfhAN3SPqKPirp6anbbr5M08K5ya
         VaXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:in-reply-to:references:from:date
         :message-id:subject:to;
        bh=/blcDGIt7eQHQgsey9v58u4/bx+UM1d5rvZgqiQ/Taw=;
        b=pmEKGLrPDZ+BkxEOidSRE6P8FbeUbeJrXpvPEW8zqPO6My36MlZA8X4pAzBgr6j9iW
         I3hDuouCO2ZikrWJO2oVV2RUL7vsYMHw/bYI0tGZG/G0+u/O/IWIKyBfR+pg/SRziajx
         5YETFneKaK/6Wo5n+HF9qstLwRvyZx5alwEydLb81TpINZi0TYqZyzvxbWRwZEnb0cFY
         FVrLBcbupSRwotzlN8mW9MiiLV/bWWyMK9Hjd6PwCHd5RMQ1c1kfrfgQGJfbMr4T9FSw
         ZhBJSfK7lmdwadG5CE4RcMVmlyNWXQzdCqzBvLq1hIzr+v/78Vq9nMrpPQIBhvXjx6ru
         ECCQ==
X-Gm-Message-State: ALKqPwcW41ds9a7WcCJGweTNp05bz4q8APxuZJC6wn/jiXna0d1xHX2E oZbOVSUS+33CqFmEfCAy4VUAHCOGI3zEDYxrwhQ=
X-Google-Smtp-Source: vnOyClMoDLY=
X-Received: by 2002:a63:951c:: with SMTP id p28-v6mr12088439pgd.318.1527951017093; Sat, 02 Jun 2018 07:50:17 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90a:4e8f:0:0:0:0 with https; Sat, 2 Jun 2018 07:50:16 -0700 (PDT)
In-Reply-To: <CAA_5ChDy5vwsmff0eZdpw95vJ7kbiFszxBgcqnBrZOox1N6o+Q@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChCU5Z7eP-1As83j7WVi1+MbLH96Q0Pvm3z4jVrr6a4ciQ@mail.gmail.com> <CACkU+X07UWVssB1OY06kd1AcgubM7WotfJsaRF79oq0e4=1n+g@mail.gmail.com> <CACkU+X0bO3N=VzG-7mg+21g-pfzG2kq39x3q5UKYV6pn7krSMw@mail.gmail.com> <CAA_5ChDy5vwsmff0eZdpw95vJ7kbiFszxBgcqnBrZOox1N6o+Q@mail.gmail.com>
From: Natalia Sich <sweetladynatalie@gmail.com>
Date: Sat, 2 Jun 2018 17:50:16 +0300
Message-ID: <CACkU+X1DtqFZKAcBscHoU-asC1E+-Kz0v4Miub6qFd0=h_oN1Q@mail.gmail.com>
Subject: Re:
To: xxx <xxx>
Content-Type: multipart/alternative; boundary="0000000000009baeb5056da9d144"

--0000000000009baeb5056da9d144
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
« Zuletzt geändert: 05. Juni 2018 um 18:23 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Neofox
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 3
Mitglied seit: 13. Mai 2018
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #39 - 04. Juni 2018 um 16:55
 
Nein es war eine andere Frau aus Odessa Ihr Name war 
Yuliia Halchenko oder auch Julia Galchenko.
Hab auch eine Passkopie von Ihr. Bei Bedarf kann ich posten.
Langsam denke ich das da mehrere zusammen arbeiten.
Und das Reisebüro damit zu tun hat. 
Der Name von der Inhaberin ist zwar etwas anders.
Aber schau mal das selbe Registration Dokument.
« Zuletzt geändert: 06. Juni 2018 um 15:43 von Uli »  
580718_Mir_Tourisma_registration_document_001.jpg ( 111 KB | Downloads )
580718_Mir_Tourisma_registration_document_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30414
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #40 - 06. Juni 2018 um 15:05
 
seiko schrieb on 22. Mai 2018 um 16:53:
The biometric passport (urgent one) will cost 120 euro

Aber nur er mit Diamantverzierung. Der Pass in Eilausfertigung kostet 1168,62 Grivna, das sind aktuell 38,34 €!
Möglich, dass sie da noch Bestechungsgelder mit einberechnet, mit der man durchaus auch einen gefälschten Pass offiziell bekommen kann. Noch ist in der Ukraine nahezu alles käuflich.


Zu dem Reisebüro:
Zitat:
   Domain Name: ODESSALIKETRAVEL.COM
   Registry Domain ID: 2263199402_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.networksolutions.com
   Registrar URL: https://networksolutions.com
   Updated Date: 2018-05-14T14:31:26Z
   Creation Date: 2018-05-14T14:31:26Z
   Registry Expiry Date: 2019-05-14T14:31:26Z
   Registrar: Network Solutions, LLC.
   Registrar IANA ID: 2
   Registrar Abuse Contact Email: abuse@web.com
   Registrar Abuse Contact Phone: +1.8003337680
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: NS10.WIXDNS.NET
   Name Server: NS11.WIXDNS.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2018-06-06T13:11:29Z <<<

Queried whois.networksolutions.com with "odessaliketravel.com"...

Domain Name: odessaliketravel.com
Registry Domain ID: 2263199402_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: https://www.networksolutions.com/en_US/
Updated Date: 2018-05-14T14:31:27Z
Creation Date: 2018-05-14T14:31:26Z
Registrar Registration Expiration Date: 2019-05-14T14:31:26Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Reseller: 
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: 
Registrant Name: PERFECT PRIVACY, LLC
Registrant Organization: 
Registrant Street: 12808 Gran Bay Pkwy West
Registrant City: Jacksonville
Registrant State/Province: FL
Registrant Postal Code: 32258
Registrant Country: US
Registrant Phone: +1.9027492701
Registrant Phone Ext.: 
Registrant Fax: 
Registrant Fax Ext.: 
Registrant Email: 8rfjqk5dpqgpoa35ahdpfme62d@domaindiscreet.com
Registry Admin ID: 
Admin Name: PERFECT PRIVACY, LLC
Admin Organization: 
Admin Street: 12808 Gran Bay Pkwy West
Admin City: Jacksonville
Admin State/Province: FL
Admin Postal Code: 32258
Admin Country: US
Admin Phone: +1.9027492701
Admin Phone Ext.: 
Admin Fax: 
Admin Fax Ext.: 
Admin Email: 8rfjqk5dpqgpoa35ahdpfme62d@domaindiscreet.com
Registry Tech ID: 
Tech Name: PERFECT PRIVACY, LLC
Tech Organization: 
Tech Street: 12808 Gran Bay Pkwy West
Tech City: Jacksonville
Tech State/Province: FL
Tech Postal Code: 32258
Tech Country: US
Tech Phone: +1.9027492701
Tech Phone Ext.: 
Tech Fax: 
Tech Fax Ext.: 
Tech Email: 8rfjqk5dpqgpoa35ahdpfme62d@domaindiscreet.com
Name Server: ns10.wixdns.net
Name Server: ns11.wixdns.net
DNSSEC: Unsigned
Registrar Abuse Contact Email: abuse@web.com
Registrar Abuse Contact Phone: +1.8003337680
URL of the ICANN WHOIS Data Problem Reporting System: https://wdprs.internic.net/
>>> Last update of WHOIS database: 2018-06-06T13:11:46Z <<<


Die Domain gibt es erst seit Mai 2018, obwohl es das Reisebüro doch bereits seit 2012 geben soll!

Wie es aussieht, waren die unter der Adresse www.openfortravel.com seit Oktober 2017 aktiv, doch wurde die Seite aus dem Netz genommen (ist nur noch über den Cache aufrufbar):
Zitat:
   Domain Name: OPENFORTRAVEL.COM
   Registry Domain ID: 2172565423_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.networksolutions.com
   Registrar URL: https://networksolutions.com
   Updated Date: 2017-10-10T14:04:36Z
   Creation Date: 2017-10-10T14:04:35Z
   Registry Expiry Date: 2018-10-10T14:04:35Z
   Registrar: Network Solutions, LLC.
   Registrar IANA ID: 2
   Registrar Abuse Contact Email: abuse@web.com
   Registrar Abuse Contact Phone: +1.8003337680
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: NS10.WIXDNS.NET
   Name Server: NS11.WIXDNS.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2018-06-06T13:19:03Z <<<

Queried whois.networksolutions.com with "openfortravel.com"...

Domain Name: openfortravel.com
Registry Domain ID: 2172565423_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.networksolutions.com
Registrar URL: https://www.networksolutions.com/en_US/
Updated Date: 2017-10-10T14:04:37Z
Creation Date: 2017-10-10T14:04:35Z
Registrar Registration Expiration Date: 2018-10-10T14:04:35Z
Registrar: NETWORK SOLUTIONS, LLC.
Registrar IANA ID: 2
Reseller: 
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: 
Registrant Name: PERFECT PRIVACY, LLC
Registrant Organization: 
Registrant Street: 12808 Gran Bay Pkwy West
Registrant City: Jacksonville
Registrant State/Province: FL
Registrant Postal Code: 32258
Registrant Country: US
Registrant Phone: +1.9027492701
Registrant Phone Ext.: 
Registrant Fax: 
Registrant Fax Ext.: 
Registrant Email: 8aq224i926h0abn1fci18ciln5@domaindiscreet.com
Registry Admin ID: 
Admin Name: PERFECT PRIVACY, LLC
Admin Organization: 
Admin Street: 12808 Gran Bay Pkwy West
Admin City: Jacksonville
Admin State/Province: FL
Admin Postal Code: 32258
Admin Country: US
Admin Phone: +1.9027492701
Admin Phone Ext.: 
Admin Fax: 
Admin Fax Ext.: 
Admin Email: 8aq224i926h0abn1fci18ciln5@domaindiscreet.com
Registry Tech ID: 
Tech Name: PERFECT PRIVACY, LLC
Tech Organization: 
Tech Street: 12808 Gran Bay Pkwy West
Tech City: Jacksonville
Tech State/Province: FL
Tech Postal Code: 32258
Tech Country: US
Tech Phone: +1.9027492701
Tech Phone Ext.: 
Tech Fax: 
Tech Fax Ext.: 
Tech Email: 8aq224i926h0abn1fci18ciln5@domaindiscreet.com
Name Server: ns10.wixdns.net
Name Server: ns11.wixdns.net
DNSSEC: Unsigned
Registrar Abuse Contact Email: abuse@web.com
Registrar Abuse Contact Phone: +1.8003337680
URL of the ICANN WHOIS Data Problem Reporting System: https://wdprs.internic.net/
>>> Last update of WHOIS database: 2018-06-06T13:19:14Z <<<

« Zuletzt geändert: 06. Juni 2018 um 15:20 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30414
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #41 - 06. Juni 2018 um 15:39
 
@ Neofox


Die Lizenz ist identisch mit der in Antwort 31. Ausgestellt sind beide aber für ein Touristikunternehmen mit dem Namen Mir! Aber der Laden heißt doch "Odessa Like Travel" und nicht Mir!

Das Vorgänger-Reisebüro hatte noch die Handynummer +380636441240 oder +38063 644 12 40 als Geschäftstelefonnummer angegeben, die in dem aktuellen fehlt. Dort habe ich keine telefonische Kontaktmöglichkeit gefunden:
Beide firmieren auch unter der Mailadresse <agent.tourism@ukr.net>!
Zitat:


Information on phone number range +380 63XXXXXXX
     
Number billable as      mobile number
Country or destination      Ukraine
City or exchange location      
Original network provider*      life:)
« Zuletzt geändert: 06. Juni 2018 um 16:02 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30414
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #42 - 06. Juni 2018 um 16:01
 
Wie es aussieht, ist auch dieser Pass echt. Ist nur fraglich, ob die Iryna Gulieieva auch weiß, wozu ihr Pass benutzt wird.
Das Reisebüro halte ich definitiv für Fake. Dementsprechend wäre Iryna entweder beteiligt oder sie weiß nicht, wozu ihr Pass abfotografiert wurde.
  
Zum Seitenanfang
 
IP gespeichert
 
Neofox
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 3
Mitglied seit: 13. Mai 2018
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #43 - 07. Juni 2018 um 01:21
 
Und hier poste ich mal ein Text von Natalia. Mit mir möchte sie sich nähmlich in Prag treffen. Ich hab auch schon mal versucht die Email zurück zu verfolgen ob sie wirklich aus Odessa kommt aber das hab ich nicht geschaft.

Hello my dearest xxx!
I am so happy tohear from you!
I really missed you and was thinking about you all the time!
It is great that your parents have a home in Hungary)Hope you will help them to renovate it and so you can always come there with your son for rest)
My dear,i understand you have little free time and so much things to so and your son needs your attention too)
But i want to give us this chance for Prague))I made  a small surprise))I had some savings and already applied for passport))
It will be ready in a week or so))So no need to change our plans))And i think that in Prague we can have so much romantic time and moments and it is closer to you and your son)
Now will be too hot here already and we will not be able to walk long hours,only stay under air conditioner))It is +30 already))
Maybe better to explore Odessa in September?Will be mild and sunny here.
Kisses,
yours Natalie

Spoiler:

Return-path: <sweetladynatalie@gmail.com>
Delivery-date: Wed, 30 May 2018 13:21:35 +0200
Received: from [195.4.92.18] (helo=mx8.freenet.de)
     by mbox224.freenet.de with esmtpa (ID exim) (Exim 4.90_1 #2)
     id 1fNzAd-00073P-CI
     for xxx@01019freenet.de; Wed, 30 May 2018 13:21:35 +0200
Received: from mail-pf0-x230.google.com ([2607:f8b0:400e:c00::230]:44628)
     by mx8.freenet.de with esmtps (TLSv1.2:ECDHE-RSA-CHACHA20-POLY1305:256) (port 25) (Exim 4.90_1 #2)
     id 1fNzAc-0001tG-Hk
     for xxx@freenet.de; Wed, 30 May 2018 13:21:35 +0200
Received: by mail-pf0-x230.google.com with SMTP id q22-v6so8871227pff.11
        for <xxx@freenet.de>; Wed, 30 May 2018 04:21:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
        bh=OzSwD9hpWmArjLUCfsBGKxQNjTNUsn5MT6jKbEVPtp8=;
        b=oGiu2luJVIwOHyGf+2UESLroDXazrqAGIUtyltrhb8JBoRyHiupiBoPpQ4Qi2rXrfs
         zPejWEHOeGwSBBS/fiCpcE2qhgz4VIENO2FJnZNaI3YcDvCmSvs/g7EnZWcvCrgB29PV
         hTMtlD2cLrOfCESGfALe7VtfLY+lqcfpSwRxbnaoIWkD07wQ47XwFzlqZyTYKi7JaicD
         egDIhfkeg0SfVLuM7OO0fihObaPNONnaCr39B+434dX56cJ4mNo4dABFz2k2WZerRngb
         w0Ci9S6lAp2RYkDzLZMos9iAbR/7TXHR4qWbLZlU/zHMlA45l7AbVy9TE+Hv8/I62MSl
         eaEQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:in-reply-to:references:from:date
         :message-id:subject:to;
        bh=OzSwD9hpWmArjLUCfsBGKxQNjTNUsn5MT6jKbEVPtp8=;
        b=nCIaAxp8pZzBMBooSUC/R4lJOuNy8VCuvuwBO3GoE41Mj7ZsdV0lJPJVhUd7WruKHw
         C/e1rPuxZvI3AD/sJgAYyP9c8rIb+VwsqtTqHZwnLHUytvJNxG5g2faUDBcPZbJBVRBq
         FXSvGqhoBZusKI5Wv5/33m2RaQDvrEUQN42wr0xmAHVY+kFjF20MBZi+Z3CumH2o8rMR
         DwarkN1AVS8qvpK9FxKCjMA3Y2oAcTOnSc/8YTvfuUFlYmM3aDr8WDCJlujxBmLpsjtD
         uBr/F1arvba6k1XhsA54JiU6YczI7L6+B3cFPW7rM1g9BgDz0YvkLzJtwaLZoEIVbtFm
         Q8Gg==
X-Gm-Message-State: ALKqPwet+qy1L6vdbqajchM3g37OIg1BuC6n76mcymYmK68Sj5uOUfSm
     n1/DbbYIzTaI6Cs5/sEYIRTIDi45tlhlJd/bqYs=
X-Google-Smtp-Source: 6os6NHwx4MI=
X-Received: by 2002:a63:6e05:: with SMTP id j5-v6mr1938253pgc.150.1527679293027;
Wed, 30 May 2018 04:21:33 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90a:4e8f:0:0:0:0 with https; Wed, 30 May 2018 04:21:32
-0700 (PDT)
In-Reply-To: <31b3e0257f5dd66bd66aa8ab5d9a6157@email.freenet.de>
References: <31b3e0257f5dd66bd66aa8ab5d9a6157@email.freenet.de>
From: Natalia Sich <sweetladynatalie@gmail.com>
Date: Wed, 30 May 2018 14:21:32 +0300
Message-ID: <CACkU+X36J+j_5pbr-NmVC4ke9O+kog8a6vmaUuXWuX=AV6PEcQ@mail.gmail.com>
Subject: Re: Hello Natalie
To: xxx <xxx@freenet.de>
Content-Type: multipart/mixed; boundary="00000000000097a31e056d6a8d08"
X-Spam-score: -10.8
X-Spamreport: Action: no action
Symbol: RCVD_COUNT_THREE(0.00)
Symbol: PREVIOUSLY_DELIVERED(0.00)
Symbol: RCPT_COUNT_ONE(0.00)
Symbol: TO_DN_ALL(0.00)
Symbol: FREEMAIL_FROM(0.00)
Symbol: FROM_EQ_ENVFROM(0.00)
Symbol: FREEMAIL_ENVFROM(0.00)
Symbol: HAS_ATTACHMENT(0.00)
Symbol: R_DKIM_ALLOW(-0.20)
Symbol: MIME_GOOD(-0.10)
Symbol: TO_MATCH_ENVRCPT_ALL(0.00)
Symbol: FREEMAIL_TO(0.00)
Symbol: FROM_HAS_DN(0.00)
Symbol: DMARC_POLICY_ALLOW(-0.25)
Symbol: R_SPF_ALLOW(-0.20)
Symbol: NEURAL_HAM(-3.00)
Symbol: REPLY(-4.00)
Symbol: RCVD_TLS_LAST(0.00)
Symbol: ASN(0.00)
Symbol: DKIM_TRACE(0.00)
Symbol: FREEMAIL_ENVRCPT(0.00)
Symbol: IP_SCORE(-3.04)
Message: (SPF): spf allow
Message-ID: CACkU+X36J+j_5pbr-NmVC4ke9O+kog8a6vmaUuXWuX=AV6PEcQ@mail.gmail.com
X-FN-Spambar: 
Delivered-To: xxx@freenet.de
Envelope-to: xxx@freenet.de
X-Originated-At: 2607:f8b0:400e:c00::230!44628

  
dnbdbhdfi_001.jpg ( 96 KB | Downloads )
dnbdbhdfi_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
seiko
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28087
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Re: Natalia <sweetladynatalie@gmail.com>
Antwort #44 - 12. Juni 2018 um 17:40
 
I am so so so sorry!
I hope you have some work or somethign to keep you busy during the day!
Maybe there is a way to cheer you up somehow?
I worry about you and hope all will be fine!

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ed1a:0:0:0:0:0 with SMTP id n26-v6csp1060527iog;
        Thu, 7 Jun 2018 04:50:43 -0700 (PDT)
X-Received: by 2002:a63:648:: with SMTP id 69-v6mr1323654pgg.205.1528372242915;
        Thu, 07 Jun 2018 04:50:42 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1528372242; cv=none;
        d=google.com; s=arc-20160816;
        b=i7h+Ze7IWXt15kGj+J+I5ZfhnijSz3Q1Dm/TCfB/pVumrpWAjZM5RSeDNn0NcN6hrY
         slesfEft5UozDy42p5jIvsiQrYeBNtYL5E6WHmVXfg2Nh9a/mEeNKyulmEHhP5aWM9ZK
         gNJnP0VY7UiMarQGi9qzQKTsGl5v5SDS6WgGjBy2gwlPBc4emQd5T3w2JcJZJO8LlCXQ
         08INkd7PujgAzX3ryJ19VfeWs45VW9p69rHMDbGYxFELiV/byWMZ+EZ3hvSpv1qz/2pb
         UeZQAwgFoChBoQegaY/Jj2cg09GT0vIQwdZeT0+ycHMwDfjHnC6hz0in1fLVf3lsQSxA
         xG6w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:references:in-reply-to:mime-version
         :dkim-signature:arc-authentication-results;
        bh=0K5tOjKZQwPCZR3AayJ8N+c8AmA/qQhxXY/ZTZ8l8xw=;
        b=JM3vyWeoq1qRr7KwTT5OwgJ2UJKfjEniYzsu1l7x2UuCu/c6XtJjGRm61vkwzSGuOW
         OOx6qNtLqPRbbPU8/RZR0JRyNd0JV8a2xABmHYymETKQbJ39kGMRVYAjh82rL1J7EfcE
         9TQAwVGxFIHHYzoqosK1kbxn6r9KsvjMKGBE6kQ/cV6oZwgoxOxAAkeo0AYHYjj8zuTf
         lNh8YcmhxNUAUK1gFCLYNJ53OVDZnw3xTPnj94cezT306eh9ouweAhHrYwxS60ctV83z
         +R7D71QF2t5/lGufuothhM4KzyzCaDwZ8FZZDRArl3QjShgyzRCNbujH7nWqJFXuIarf
         V39Q==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=u5zVw5VS;
       spf=pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sweetladynatalie@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
Return-Path: <sweetladynatalie@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
        by mx.google.com with SMTPS id d6-v6sor7089291pln.49.2018.06.07.04.50.42
        for <xxx>
        (Google Transport Security);
        Thu, 07 Jun 2018 04:50:42 -0700 (PDT)
Received-SPF: pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=u5zVw5VS;
       spf=pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sweetladynatalie@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
        bh=0K5tOjKZQwPCZR3AayJ8N+c8AmA/qQhxXY/ZTZ8l8xw=;
        b=u5zVw5VS8U+ziIZtWaQW+1gYFcRYTHNixf7f/LLwO2cm5BwtFPWg8Kbwm4m7c0vyGZ
         ysBmXh+acekfsWK2cWc7+dB6CSKq7i5XIFBCrevOdzmqD/uIllIQWmDs+gsrEXQsRnDC
         HmvspqFNa4v/pNq+k7wzoi1a3g8tbS3gCssxoscAd1wdwAeQUD83FBWnZidwuzwqlHxX
         NO1uDnY7DALYcOmFHT/xvI8kG7k9aOKQSlHgadW5uLn4eKe/Vq5KXqN4TcO/p5OL8/J1
         +Z/x86My8tXqDLxWvEVxxbT//cMj2zuaOxZrPvu4BURQAWsFJRIgasi1Dk+pECFDePJo
         v4sQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:in-reply-to:references:from:date
         :message-id:subject:to;
        bh=0K5tOjKZQwPCZR3AayJ8N+c8AmA/qQhxXY/ZTZ8l8xw=;
        b=l9ul+lB5hMI5N9CB7aTdcTDS3IT9o0Qj7mahvUpJ/JfGazCECgPzhmwQ6Elfw6eszs
         vt6x0JwepR8fqqREloiDJ2un4gbniLGoubxgLF9SV1vhvjaafCihY8lyoo3nYnJu3ftw
         7b48Z7LZ/0eZGbv21DDVY1KLSf9mLX9/ZWL3trUcJ8HmXXHrlqhSdsJD2xABIdC/j77v
         IDkRotqAxa0XGC0fpX48TJ/IcnE4Zc9FjO8d1aUe9VisT3bIM7Gju+CHeVOZjh5GwEIs
         a9aHop3NT+6KI2+xmZCkFgvCe/9mfSTsiVL8d9riZdrfGs3hn1oDcy1foSRSYOKua6As
         XvOw==
X-Gm-Message-State: APt69E0Zf2ifcY7Ij9T18mX6DSDkxv995RiejdFD8Ywa9MrnPQz1M+jy KZMPBw1v5HiID/zDtvB8C5arUa/5c7LzsnbVKZY=
X-Google-Smtp-Source: F14H1EcOt34=
X-Received: by 2002:a17:902:700a:: with SMTP id y10-v6mr1701268plk.249.1528372241969; Thu, 07 Jun 2018 04:50:41 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90a:4e8f:0:0:0:0 with https; Thu, 7 Jun 2018 04:50:41 -0700 (PDT)
In-Reply-To: <CAA_5ChAZjvsAu6UCVsYAcO=yFfgWzGFcmd50+V1R_aMZwHW2Ng@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChCU5Z7eP-1As83j7WVi1+MbLH96Q0Pvm3z4jVrr6a4ciQ@mail.gmail.com> <CACkU+X07UWVssB1OY06kd1AcgubM7WotfJsaRF79oq0e4=1n+g@mail.gmail.com> <CACkU+X0bO3N=VzG-7mg+21g-pfzG2kq39x3q5UKYV6pn7krSMw@mail.gmail.com> <CAA_5ChDy5vwsmff0eZdpw95vJ7kbiFszxBgcqnBrZOox1N6o+Q@mail.gmail.com> <CACkU+X1DtqFZKAcBscHoU-asC1E+-Kz0v4Miub6qFd0=h_oN1Q@mail.gmail.com> <CAA_5ChAZjvsAu6UCVsYAcO=yFfgWzGFcmd50+V1R_aMZwHW2Ng@mail.gmail.com>
From: Natalia Sich <sweetladynatalie@gmail.com>
Date: Thu, 7 Jun 2018 14:50:41 +0300
Message-ID: <CACkU+X3DnTVnSESmwYcGrtg-1Od3R9sHidBoq7f0+6a8CB9K6Q@mail.gmail.com>
Subject: Re:
To: xxx <xxx>
Content-Type: multipart/alternative; boundary="0000000000009136c4056e0be467"

--0000000000009136c4056e0be467
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable



Hello dear xxx!Maybe you need to take vacation and come here?
Or maybe you need to travel to some nice place?Maybe you need to change somehow the place and just tryt o relax and to think all the time about what happened.
I am sure you can still find some good moments in life too and your last girlfriend is not the last women on planet.
All in your hands and you can still be happy.
So cheer up!
Natalie

Spoiler:
Delivered-To: xxx
Received: by 2002:a6b:ee12:0:0:0:0:0 with SMTP id i18-v6csp4825608ioh;
        Tue, 12 Jun 2018 06:41:35 -0700 (PDT)
X-Received: by 2002:a63:a557:: with SMTP id r23-v6mr383129pgu.336.1528810895209;
        Tue, 12 Jun 2018 06:41:35 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1528810895; cv=none;
        d=google.com; s=arc-20160816;
        b=jOx62bOCIeSSk6Otr1zGOIY5y+hbvZTv4kmbNrUN3ZA+TVdR3K5MpA/1d4P+mJr7k4
         pYanMR1i9CGQFgTd3jPDQFNMm/k4lGJwWQ7xMcvFP8Dny/N59U7SllXAqztwIsnIylj/
         Q9Z4uDuKiIGnuO6YyiCXiIvLox7q8ZEpye8q/lzC7NllRlxefEoxXo5lbljWMfkQAnWR
         /nyjioxBTF4GsPFsKDwI1KjZzcMgqoXdIvQq7GRyPhYaHjnWy+NiztoSqs8d7xVi7gHG
         rCrFctkJxyDldQUx0apgPSJxIDLinU5XBK4lHWZhyMn8ccKEB2Go05Q1ckqqDWmpjkrl
         65YA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:references:in-reply-to:mime-version
         :dkim-signature:arc-authentication-results;
        bh=3DcpGEL+i+aezhxJWwwBPyMsil04fvv9f49icpghW1c=;
        b=NQV1HHjStmYDMPKhhHw/+LDh9o5M8GkGa1OWhTLTZipfNfvD/5x3YomhwL3Fq0DNM9
         loijgbP2xmdCBz9LOuVpIxmcP8eEng+v3mEPR1TzILUrYxvGsdGhCizcy1amOcjJhr6k
         YoB7GLKzkmjpFGOJIfPq8eC0O6ZCnOxv1XNLpCOVgZKrIYn7MCzmwl1M2emGMR2oRVqe
         yrcGp+2IFoOyohIFb8+x9hefD6filjBlkWs8TpKUsxCS1SH118/4mvKAjAmtXfBHMbb9
         ZT0BYxLD4puq6pX/5huJxjPgBCoLMECyDnTj+KeI70JffsM4dPp4YVWTSNrttiPrPusK
         rNpA==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=EwmSpZfI;
       spf=pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sweetladynatalie@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
Return-Path: <sweetladynatalie@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
        by mx.google.com with SMTPS id t15-v6sor39858pgc.244.2018.06.12.06.41.35
        for <xxx>
        (Google Transport Security);
        Tue, 12 Jun 2018 06:41:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=EwmSpZfI;
       spf=pass (google.com: domain of sweetladynatalie@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=sweetladynatalie@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
        bh=3DcpGEL+i+aezhxJWwwBPyMsil04fvv9f49icpghW1c=;
        b=EwmSpZfIq9Ixel8ycoYhUvmoO0Vq2L0nPh/OgDUAhjJ4dr470+CaxWdJknUK/ngQPj
         6sdvPmeAJUO3I7K+EGSjzOlCfnKdOTBzSOtzknyI4mObV/b42ecvbv0Y8PybyUPWPoPh
         w61uOKjbySY/yIVG0pl3AhbMRfbTjX+NtesQDIa+f10ngoLFRqG4D9l53p5pbgZ3XMBs
         RMZRDmvv6tbHI0or+QboaVSkq5YJnVwl3eHX4GywaY68DqGr9tszedb90t0bLpUgUpgF
         Q/knEF1qFAa/j1Mmcq02U7oyXOByVHddqpnCf4VUbp9ROx3x9bCF0bf7twPKqgw15cE5
         MDxA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:in-reply-to:references:from:date
         :message-id:subject:to;
        bh=3DcpGEL+i+aezhxJWwwBPyMsil04fvv9f49icpghW1c=;
        b=LVdKBCSifqIWTtqZIcjDSKgvusXmxLJVlm1RHhHo/gvdOwQFpS/38ds/tXKK626XcI
         cKoMQ7fa13dLwUIQkO6c3fQX5x5iSo299CS5jDyeht40enXFw6jdfub+jE/PpXDS5+fH
         5ol4kWHyqJ4w5q+MoAThjHcI8ftkxFlI1SBf13eC1H4eT0iFw7iNx17iQo0GKhPB7Tlc
         +U08zEj5+sBhsRiSNDtwnUxRDs70ncpIzu0C/g9QlJdleuUL8G8W/7vZYSXmmGp1LSGn
         k+RdxH38RmOUyV4QU5PUwLZu8kzFGOmPOudFX+UZUR4fiKhV/Ejm2vbZh5X9KVPjnbK8
         cGpw==
X-Gm-Message-State: APt69E01c3BatbhU8uUFnfRedkqk+vrtaJnC4NRLQtgQdCoQ7QkWkZ9M zs2JJUYwBbvHpxlxoh9YBlJjnlRX5eFYPcz1xAA=
X-Google-Smtp-Source: JpHvpQUEwhM=
X-Received: by 2002:a65:6148:: with SMTP id o8-v6mr361751pgv.93.1528810894493; Tue, 12 Jun 2018 06:41:34 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90a:4e8f:0:0:0:0 with https; Tue, 12 Jun 2018 06:41:33 -0700 (PDT)
In-Reply-To: <CAA_5ChBCFdtp0fmD=3TmAZENCa6t4iXFoJOKek+UN9d7_MTpfQ@mail.gmail.com>
References: <CACkU+X0KvQbD2nuAFkr85A2DHC1csew7d=o4ORKXX+ZbY0baRA@mail.gmail.com> <5b07eead.1c69fb81.a6f2c.3dcb@mx.google.com> <CACkU+X0Fhw8gHNpS3MXA30SqfMVzZpsmRVpZ06XSpbobm7GjYw@mail.gmail.com> <CAA_5ChCU5Z7eP-1As83j7WVi1+MbLH96Q0Pvm3z4jVrr6a4ciQ@mail.gmail.com> <CACkU+X07UWVssB1OY06kd1AcgubM7WotfJsaRF79oq0e4=1n+g@mail.gmail.com> <CACkU+X0bO3N=VzG-7mg+21g-pfzG2kq39x3q5UKYV6pn7krSMw@mail.gmail.com> <CAA_5ChDy5vwsmff0eZdpw95vJ7kbiFszxBgcqnBrZOox1N6o+Q@mail.gmail.com> <CACkU+X1DtqFZKAcBscHoU-asC1E+-Kz0v4Miub6qFd0=h_oN1Q@mail.gmail.com> <CAA_5ChAZjvsAu6UCVsYAcO=yFfgWzGFcmd50+V1R_aMZwHW2Ng@mail.gmail.com> <CACkU+X3DnTVnSESmwYcGrtg-1Od3R9sHidBoq7f0+6a8CB9K6Q@mail.gmail.com> <CAA_5ChBCFdtp0fmD=3TmAZENCa6t4iXFoJOKek+UN9d7_MTpfQ@mail.gmail.com>
From: Natalia Sich <sweetladynatalie@gmail.com>
Date: Tue, 12 Jun 2018 16:41:33 +0300
Message-ID: <CACkU+X3Jksu9fmh6s5rd4_0Rq1mKSJWOP0-gO3pggJg1Z_GiSg@mail.gmail.com>
Subject: Re:
To: xxx <xxx>
Content-Type: multipart/alternative; boundary="0000000000004b8e0f056e7206a4"

--0000000000004b8e0f056e7206a4
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
« Zuletzt geändert: 13. Juni 2018 um 05:38 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1 2 [3] 4 
Thema versenden
‹ Vorheriges Thema | Nächstes Thema ›
Link zu diesem Thema
 
  « Übersicht ‹ Forum Top  

Anti-Scam » Powered by YaBB 2.6.12!
YaBB Forum Software © 2000-2025. Alle Rechte vorbehalten.

Valid RSS Valid XHTML Valid CSS Powered by Perl Source Forge