Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Olga <sweetbabygirla@hotmail.com> (Gelesen: 486 mal)
 
† Django Hurtig †
Themenstarter Themenstarter
General Counsel
***
Offline


Aufdeckung berichten

Beiträge: 1232
Mitglied seit: 06. September 2018
Geschlecht: männlich
Olga <sweetbabygirla@hotmail.com>
14. September 2018 um 18:40
 
Hello !

At first i am sorry for late reply to you, I had bad internet
connection 

Nice to "meet" you. Hope you are well. I found you on the dating site,
but i don't remember the name of it, because i was there not so long.
I would like to get to know each other better. So i will tell you more
about myself. First of all my name is Olga, I am single, and have no
kids, I have never been married I work as a manager in the beauty
saloon. My age is 28, i was born 15th of April. I live in Russia, in
the Tambov city. It is about 500 km far from Moscow.

This the first time I try to use this online dating stuff. I want to
see how it works, and hopefully to meet someone special, may be a man
who will be my fate... who knows? I know, all this on-line dating
stuff is very popular nowadays, so I think it is my turn to try

Well... will not talk a lot, think it is enough for the first time,
hope to hear from you soon, I also think, that it is interesting to
talk with a person of another nationality and culture. I send you
couple of pics, hope you like them. Have a good day, bye

Olga

Spoiler:
Return-path: <sweetbabygirla@hotmail.com>
Envelope-to: xxx@localhost
Delivery-date: Fri, 14 Sep 2018 12:51:31 +0200
Received: from localhost ([::1] helo=asus) by asus with esmtp (Exim 4.84_2)
(envelope-from <sweetbabygirla@hotmail.com>) id 1g0lhD-00026d-6i for
xxx@localhost; Fri, 14 Sep 2018 12:51:31 +0200
Delivered-To: xxx.xxx@xxx.com
Received: from jolnir.orangewebsite.com by asus with POP3
(fetchmail-6.3.26) for <xxx@localhost> (single-drop); Fri, 14 Sep 2018
12:51:31 +0200 (CEST)
Received: from jolnir.orangewebsite.com by jolnir.orangewebsite.com with
LMTP id OGL1FTKSm1v5eiwARr05yQ for <xxx.xxx@xxx.com>; Fri, 14
Sep 2018 10:49:22 +0000
Received: from mail-by2nam03hn0230.outbound.protection.outlook.com
([104.47.42.230]:28938 helo=NAM03-BY2-obe.outbound.protection.outlook.com)
by jolnir.orangewebsite.com with esmtps
(TLSv1.2:ECDHE-RSA-AES256-SHA384:256) (Exim 4.89) (envelope-from
<sweetbabygirla@hotmail.com>) id 1g0lf6-00CEXL-Tk for
xxx.xxx@xxx.com; Fri, 14 Sep 2018 10:49:22 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
heck;
bh=0bUznfbZxIowC9rtONuSYqYKDRuk50sJ+HxlT7IOO3k=;
CnzazdmVZyfqXRbe8egRgGhg==
Received: from BY2NAM03FT019.eop-NAM03.prod.protection.outlook.com
(10.152.84.53) by BY2NAM03HT031.eop-NAM03.prod.protection.outlook.com
(10.152.84.164) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.1143.11; Fri,
14 Sep 2018 10:48:38 +0000
Received: from BN7PR08MB5219.namprd08.prod.outlook.com (10.152.84.58) by
BY2NAM03FT019.mail.protection.outlook.com (10.152.84.221) with Microsoft
SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.20.1143.11 via
Frontend Transport; Fri, 14 Sep 2018 10:48:38 +0000
Received: from BN7PR08MB5219.namprd08.prod.outlook.com
([fe80::e12a:479e:2fdc:30d5]) by BN7PR08MB5219.namprd08.prod.outlook.com
([fe80::e12a:479e:2fdc:30d5%4]) with mapi id 15.20.1122.020; Fri, 14 Sep
2018 10:48:38 +0000
From: Sweet Baby <sweetbabygirla@hotmail.com>
To: xxx xxx <xxx.xxx@xxx.com>
Subject: Hello my new friend! Smiley
Thread-Topic: Hello my new friend! Smiley
Thread-Index: AQHUTBh+IiKL1QQxUkqJSwugNlnLEg==
Date: Fri, 14 Sep 2018 10:48:38 +0000
Message-ID: 
References: <1536862613.11634.12.camel@xxx.com>
In-Reply-To: <1536862613.11634.12.camel@xxx.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-clientproxiedby: VI1PR07CA0230.eurprd07.prod.outlook.com
(2603:10a6:802:58::33) To BN7PR08MB5219.namprd08.prod.outlook.com
(2603:10b6:408:31::14)
x-incomingtopheadermarker:
34271;SizeAsReceived:7522;Count:51
x-ms-exchange-messagesentrepresentingtype: 1
x-tmn: [+ufHvaLp9Yaevx7qoUJIC3c8+ztphIz0]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics:
idUn/tW+7W5OXs7CiyxJ3J9O7X1uEwUUj6+nCLWAsFCg
x-incomingheadercount: 51
x-eopattributedmessage: 0
x-microsoft-antispam:
0)(1701031045);SRVR:BY2NAM03HT031;
x-ms-traffictypediagnostic: BY2NAM03HT031:
x-exchange-antispam-report-cfa-test:
;RULEID:;SRVR:BY2NAM03HT031;
x-forefront-prvs: 07954CC105
x-forefront-antispam-report:
19.namprd08.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;A:1;MX:1;
received-spf: None (protection.outlook.com: hotmail.com does not designate
permitted sender hosts)
authentication-results: spf=none (sender IP is )
smtp.mailfrom=sweetbabygirla@hotmail.com; 
x-microsoft-antispam-message-info:
aW9EZQ6SOhbD/u4qAcCbBD+b/12n0lpiypOYzsq26KaC1/ts4VJvjZspBi+gKMdaukOmaeNmGuY=
Content-Type: multipart/mixed; boundary="_004_BN7PR08MB52190750D0B119B26C5109CCD6190BN7PR08MB5219namp_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
5dab7a8a-ebdc-4bd9-9cfd-67cde50b170b
X-MS-Exchange-CrossTenant-Network-Message-Id:
572ccff1-4a41-4e3d-74ee-08d61a2f9fc2
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg:
5dab7a8a-ebdc-4bd9-9cfd-67cde50b170b
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2018 10:48:38.1431
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2NAM03HT031
X-Evolution-Source: mbox:/var/mail/xxx

« Zuletzt geändert: 03. September 2022 um 21:12 von Stiray »  

1_1856.jpg ( 24 KB | Downloads )
1_1856.jpg
2_1383.jpg ( 21 KB | Downloads )
2_1383.jpg
3_1085.jpg ( 32 KB | Downloads )
3_1085.jpg
Zum Seitenanfang
IP gespeichert
 
Indikation
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Olga <sweetbabygirla@hotmail.com>
Antwort #1 - 22. September 2018 um 03:37
 
Gleiches Schreiben bei Ekaterina Novoselova <sladkayazhizn@mailboxhome.net. Ebenfalls aus Tambov bei scammers.ru https://scammers.ru/scammers/145908.htm
Ebenfalls in einem etwas konfusen Thread bei stop-scammers von einer Natalya in Letter 4 https://www.no_way.com/scam-email.asp?id=14442

Wird wohl aus dem gleichen Stall kommen, wie Evgeniya <kroshka@1st-email.org> <girl_88@mail-fast.org> <kroshka_89@wp.pl>
  
Zum Seitenanfang
 
IP gespeichert
 
† Django Hurtig †
Themenstarter Themenstarter
General Counsel
***
Offline


Aufdeckung berichten

Beiträge: 1232
Mitglied seit: 06. September 2018
Geschlecht: männlich
Re: Olga <sweetbabygirla@hotmail.com>
Antwort #2 - 02. Oktober 2018 um 10:33
 
Hello friend! How are you there?? Are you interested to know each other
better?? Let me know soon!! friend Olga


Spoiler:
Return-path: <sweetbabygirla@hotmail.com>
Envelope-to: xxx@localhost
Delivery-date: Mon, 01 Oct 2018 16:40:53 +0200
Received: from localhost ([::1] helo=asus) by asus with esmtp (Exim 4.84_2)
(envelope-from <sweetbabygirla@hotmail.com>) id 1g6zNV-00046s-AG for
xxx@localhost; Mon, 01 Oct 2018 16:40:53 +0200
Delivered-To: xxx.xxx@xxx.com
Received: from jolnir.orangewebsite.com by asus with POP3
(fetchmail-6.3.26) for <xxx@localhost> (single-drop); Mon, 01 Oct 2018
16:40:53 +0200 (CEST)
Received: from jolnir.orangewebsite.com by jolnir.orangewebsite.com with
LMTP id YLorDzgxslt2PBAARr05yQ for <xxx.xxx@xxx.com>; Mon, 01
Oct 2018 14:37:44 +0000
Received: from mail-oln040092000041.outbound.protection.outlook.com
([40.92.0.41]:26725 helo=NAM01-BN3-obe.outbound.protection.outlook.com) by
jolnir.orangewebsite.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89) (envelope-from <sweetbabygirla@hotmail.com>) id
1g6zKR-004VJp-Ea for xxx.xxx@xxx.com; Mon, 01 Oct 2018
14:37:44 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
heck;
bh=3a4pnWsHvCoB7NBZexpRT+m7V7OmIrPHS3B/3ypuRCM=;
Rc3EVrkRBSZXBuc9YTp697fg==
Received: from BY2NAM01FT014.eop-nam01.prod.protection.outlook.com
(10.152.68.54) by BY2NAM01HT047.eop-nam01.prod.protection.outlook.com
(10.152.69.133) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.1185.13; Mon, 1
Oct 2018 14:37:00 +0000
Received: from BN7PR08MB5219.namprd08.prod.outlook.com (10.152.68.56) by
BY2NAM01FT014.mail.protection.outlook.com (10.152.69.202) with Microsoft
SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.20.1185.13 via
Frontend Transport; Mon, 1 Oct 2018 14:37:00 +0000
Received: from BN7PR08MB5219.namprd08.prod.outlook.com
([fe80::9539:55b8:62c7:9bb3]) by BN7PR08MB5219.namprd08.prod.outlook.com
([fe80::9539:55b8:62c7:9bb3%2]) with mapi id 15.20.1185.024; Mon, 1 Oct
2018 14:37:00 +0000
From: Sweet Baby <sweetbabygirla@hotmail.com>
To: xxx xxx <xxx.xxx@xxx.com>
Subject: you there?
Thread-Topic: you there?
Thread-Index: AQHUWZQ2bjKxmbtSs02ubwP4hNun0w==
Date: Mon, 1 Oct 2018 14:37:00 +0000
Message-ID: 
References: <1536862613.11634.12.camel@xxx.com>
In-Reply-To: <1536862613.11634.12.camel@xxx.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-clientproxiedby: DB7PR03CA0008.eurprd03.prod.outlook.com
(2603:10a6:5::21) To BN7PR08MB5219.namprd08.prod.outlook.com
(2603:10b6:408:31::14)
x-incomingtopheadermarker:
039AC;SizeAsReceived:7452;Count:51
x-ms-exchange-messagesentrepresentingtype: 1
x-tmn: [ZKAsF4LOMS37U3LhXZKbVPmeUJ8vvF8i]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics:
d28LgQuZ5MYga9ZU+KLGqinsJmYrujQIbgbjNR2F1lz8
x-incomingheadercount: 51
x-eopattributedmessage: 0
x-microsoft-antispam:
5)(1701031045);SRVR:BY2NAM01HT047;
x-ms-traffictypediagnostic: BY2NAM01HT047:
x-exchange-antispam-report-cfa-test:
;RULEID:;SRVR:BY2NAM01HT047;
x-forefront-prvs: 0812095267
x-forefront-antispam-report:
PTR:InfoNoRecords;MX:1;A:1;
received-spf: None (protection.outlook.com: hotmail.com does not designate
permitted sender hosts)
authentication-results: spf=none (sender IP is )
smtp.mailfrom=sweetbabygirla@hotmail.com; 
x-microsoft-antispam-message-info:
F+vIJClRfBQ2kZs/QEB5IWyj+U6YaF1MeIe1jQUD1aJaIc8//4R6cKame7YUB4coPSmoTBF2eEU=
Content-Type: multipart/mixed; boundary="_002_BN7PR08MB52198266C0D8CA970A9A68ABD6EF0BN7PR08MB5219namp_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
5dab7a8a-ebdc-4bd9-9cfd-67cde50b170b
X-MS-Exchange-CrossTenant-Network-Message-Id:
0e26db6c-6ca5-464b-6fbf-08d627ab5814
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg:
5dab7a8a-ebdc-4bd9-9cfd-67cde50b170b
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Oct 2018 14:37:00.7191
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2NAM01HT047
X-Evolution-Source: mbox:/var/mail/xxx


--_002_BN7PR08MB52198266C0D8CA970A9A68ABD6EF0BN7PR08MB5219namp_
Content-Type: text/plain; charset="us-ascii"
Content-ID: <4F6E78157927E74A865B19B940E48D10@namprd08.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable


Microsoft Inline

Bild wie Beginn-Beitrag
  
Zum Seitenanfang
IP gespeichert
 
† Django Hurtig †
Themenstarter Themenstarter
General Counsel
***
Offline


Aufdeckung berichten

Beiträge: 1232
Mitglied seit: 06. September 2018
Geschlecht: männlich
Re: Olga <sweetbabygirla@hotmail.com>
Antwort #3 - 03. Oktober 2018 um 12:59
 
Hi xxx,

Thank you very much for your letter. It was very pleasant for me to
receive it. Thank you for telling me more about yourself. It was very
interesting to read. I would like to know more about you and get more
pics of you as well.

What work do i do? I work as a manager in a beauty saloon.

So, I would like to tell you more about me. My friends tell am a kind
and romantic. I like music, different kinds, from classical to popular
and rock music, depends on my mood. I also like to dance, but don't
visit clubs often, I think I am mostly home body. I am 56 kg weight
and 171 cm height, my favorite color is blue. I like sport and attend
aerobic classes, also like to swim and beachvolley in summer. Do you
like sport, xxx? One more activity I really like, to be outside to
have a picnic on the nature, making bbq, and just enjoy a good
weather.

You know, xxx, I am looking for a serious, honest, caring and
decent person, the person I could share my life and create a strong
relationship with, based on kindness, love, understanding and respect
to each other. What are you looking for, dear, xxx? How long do you
use this dating service, have you met somebody there?

Ok, I am finishing my letter now and I will be looking forward to your
next one!

Have a great day!!!

Olga

Spoiler:
Return-path: <sweetbabygirla@hotmail.com>
Envelope-to: xxx@localhost
Delivery-date: Wed, 03 Oct 2018 10:57:04 +0200
Received: from localhost ([::1] helo=asus) by asus with esmtp (Exim 4.84_2)
(envelope-from <sweetbabygirla@hotmail.com>) id 1g7cxr-0002c6-QO for
xxx@localhost; Wed, 03 Oct 2018 10:57:04 +0200
Delivered-To: xxx.xxx@xxx.com
Received: from jolnir.orangewebsite.com by asus with POP3
(fetchmail-6.3.26) for <xxx@localhost> (single-drop); Wed, 03 Oct 2018
10:57:03 +0200 (CEST)
Received: from jolnir.orangewebsite.com by jolnir.orangewebsite.com with
LMTP id 4L5ZAkiEtFseZQsARr05yQ for <xxx.xxx@xxx.com>; Wed, 03
Oct 2018 08:56:40 +0000
Received: from mail-oln040092000032.outbound.protection.outlook.com
([40.92.0.32]:30244 helo=NAM01-BN3-obe.outbound.protection.outlook.com) by
jolnir.orangewebsite.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89) (envelope-from <sweetbabygirla@hotmail.com>) id
1g7cxS-0038zt-W4 for xxx.xxx@xxx.com; Wed, 03 Oct 2018
08:56:40 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
heck;
bh=l03U2ekKa1Oz0D3r1DdrVrYcNKuUQj1XVqxy86HhpKw=;
uKFb/0gTH/2ZLVvbH4JppTEg==
Received: from BN3NAM01FT018.eop-nam01.prod.protection.outlook.com
(10.152.66.57) by BN3NAM01HT148.eop-nam01.prod.protection.outlook.com
(10.152.66.219) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.1185.13; Wed, 3
Oct 2018 08:55:57 +0000
Received: from SN6PR08MB5230.namprd08.prod.outlook.com (10.152.66.57) by
BN3NAM01FT018.mail.protection.outlook.com (10.152.67.234) with Microsoft
SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.20.1185.13 via
Frontend Transport; Wed, 3 Oct 2018 08:55:57 +0000
Received: from SN6PR08MB5230.namprd08.prod.outlook.com
([fe80::25b9:2b08:6327:d68]) by SN6PR08MB5230.namprd08.prod.outlook.com
([fe80::25b9:2b08:6327:d68%5]) with mapi id 15.20.1164.029; Wed, 3 Oct 2018
08:55:57 +0000
From: Sweet Baby <sweetbabygirla@hotmail.com>
To: xxx xxx <xxx.xxx@xxx.com>
Subject: More about me!
Thread-Topic: More about me!
Thread-Index: AQHUWvbmAQMipxbRIkOtLuuSCPP8Pg==
Date: Wed, 3 Oct 2018 08:55:57 +0000
Message-ID: 
References: <1536862613.11634.12.camel@xxx.com>
        >
         <1538467911.24062.0.camel@xxx.com>
In-Reply-To: <1538467911.24062.0.camel@xxx.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-clientproxiedby: HE1PR0402CA0020.eurprd04.prod.outlook.com
(2603:10a6:3:d0::30) To SN6PR08MB5230.namprd08.prod.outlook.com
(2603:10b6:805:77::13)
x-incomingtopheadermarker:
B1633;SizeAsReceived:7449;Count:49
x-ms-exchange-messagesentrepresentingtype: 1
x-tmn: [bE/t+LBC5UTPOjfgeY9WJ/lFCblFlnO5]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics:
ajM2zyypx1+ZRS91+/E4fljDEodsZFXFxtkYlXk4IXJr
x-incomingheadercount: 49
x-eopattributedmessage: 0
x-microsoft-antispam:
5)(1701031045);SRVR:BN3NAM01HT148;
x-ms-traffictypediagnostic: BN3NAM01HT148:
x-exchange-antispam-report-cfa-test:
;RULEID:;SRVR:BN3NAM01HT148;
x-forefront-prvs: 0814A2C7A3
x-forefront-antispam-report:
R:InfoNoRecords;MX:1;A:1;
received-spf: None (protection.outlook.com: hotmail.com does not designate
permitted sender hosts)
authentication-results: spf=none (sender IP is )
smtp.mailfrom=sweetbabygirla@hotmail.com; 
x-microsoft-antispam-message-info:
GzsyQYW1aVbWK3aPX+jjFcIX99cuTaYS9DbkFojL1EBSt90MBEv59P/gDcw0k4oUt9JIIRyI4BM=
Content-Type: multipart/mixed; boundary="_003_SN6PR08MB5230CAFCB820ADCFA3A6ED35D6E90SN6PR08MB5230namp_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
5dab7a8a-ebdc-4bd9-9cfd-67cde50b170b
X-MS-Exchange-CrossTenant-Network-Message-Id:
212fc808-e95c-4dbe-2474-08d6290e0712
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg:
5dab7a8a-ebdc-4bd9-9cfd-67cde50b170b
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Oct 2018 08:55:57.0664
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3NAM01HT148
X-Evolution-Source: mbox:/var/mail/xxx


--_003_SN6PR08MB5230CAFCB820ADCFA3A6ED35D6E90SN6PR08MB5230namp_
Content-Type: text/plain; charset="us-ascii"
Content-ID: <A48509B0E22E2D4CA4F56705B2F7DAE8@namprd08.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable


Microsoft Inline
« Zuletzt geändert: 04. Mai 2019 um 11:44 von vierauge »  

4_850.jpg ( 22 KB | Downloads )
4_850.jpg
5_729.jpg ( 44 KB | Downloads )
5_729.jpg
Zum Seitenanfang
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema