Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Nina <ninochkalovely@gmail.com> (Gelesen: 900 mal)
 
Hotdog
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam

Beiträge: 1112
Mitglied seit: 07. Dezember 2016
Geschlecht: männlich
Nina <ninochkalovely@gmail.com>
06. März 2019 um 15:53
 
Greetings! How are you? I believe you are fine and you will be happy to respond to my letter!
I am enourmously excited that I’ve got a chance to get acquainted with you.
I am Nina. Maybe you have grasped where I come from judging by my name.
I live a big beautiful country the Russian Federation. I am 33.
I’m looking for a guy for true friendship and probably for meaningful relaitonships.
If you liked me and got interested in me, I will be delighted to receive your respond.
I hope you will not let the lonely girl to get bored.
I will eagerly wait for your message as soon as possible.
If you respond me, I will provide you with more pictures of me.
So we will be able to see each other better and get to know each other better.
I hope you will also send me your image and tell me about yourself.
I want to know more information about you.
I wish you an excellent day and merry mood!
I am waiting on my Email: ninochkalovely@gmail.com 
Nina



Off Topic KommentarMore pictures in the gallery: Smiley


Spoiler:
Return-Path: <kristina.moersdorf@sven-mueller-design.de>
Received: from smtprelay02.ispgateway.de ([80.67.18.44]) by mx-ha.web.de (mxweb011 [212.227.15.17]) with ESMTPS (Nemesis) id 1MukmF-1hIc6J0HAJ-00riUS for <xxx>; Tue, 05 Mar 2019 09:31:24 +0100
Received: from [87.138.194.70] (helo=mail.sven-mueller-design.de) by smtprelay02.ispgateway.de with esmtpsa (TLSv1.1:ECDHE-RSA-AES256-SHA:256) (Exim 4.90_1) (envelope-from <kristina.moersdorf@sven-mueller-design.de>) id 1h15Sb-0000ti-5f for xxx; Tue, 05 Mar 2019 09:30:01 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=sven-mueller-design.de; s=mail; h=from:subject:date:message-id:to:mime-version:content-type; bh=I/hRuq0GZqGHSiCaQupwAp/XcoV4SjHdYuWvJGzpGUQ=; b=R7KbN2AC0svLUJsNalDSBcqx3j4zifCaeT1boXtDx0PjBoSdaZ1dTYLAMykzbT8x2POxQR1q6DPJC fpNYy9F2ZR6W6FFO6J6jzt8JUcemshCF6OOPqMPvNvo0x+FhKZ+jJamxS6HiclT3mLU7ge2qFIE4td 2FrX+tM9ZUD53UFnkyfDnrE0MeloVpx+vtq8X6YZIm4q9YXT0UWar3BK3Co/jQsDt6yfyF/SUHajRf SnRv5iDS4a5YXcnuEQvR7IB4latw4huo6vjxaOv0+IvDyNO6NiRPFwwORyKpIUDUOVmvYOc/XyKGqh BCAdAeLcYMC3rlPqw4MLzq4jrDvNAwQ==
Message-ID: <1291488690-210497536@mail.sven-mueller-design.de>
X-Footer: c3Zlbi1tdWVsbGVyLWRlc2lnbi5kZQ==
Received: from 178.162.197.145 ([178.162.197.145]) (authenticated user kristina.moersdorf@sven-mueller-design.de) by mail.sven-mueller-design.de (Kerio Connect 8.5.1) for xxx; Tue, 5 Mar 2019 09:31:18 +0100
From: "Nina J" <kristina.moersdorf@sven-mueller-design.de>
Subject: Hi there!
To: "xxx" <xxx>
Content-Type: multipart/related; boundary="shRvDb7=_hqjI9ww0COP0hXsMjF6mSbWdx"
MIME-Version: 1.0
Date: Tue, 5 Mar 2019 11:31:19 +0300
X-Antivirus: Avast (VPS 190304-4, 04.03.2019), Outbound message
X-Antivirus-Status: Clean
X-Df-Sender: bWFpbHZlcnNhbmRAc3Zlbi1tdWVsbGVyLWRlc2lnbi5kZQ==
Envelope-To: <xxx>
« Zuletzt geändert: 20. November 2020 um 15:54 von Webmaster » 
Grund: Scammer using Pictures by Aleksandra Kaschkowa 
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Razor Buzz
Forum Administrator
Paragraphenreiter Öffentlichkeitsarbeit
*****
Offline


Servus

Beiträge: 5947
Standort: Oberpfalz
Mitglied seit: 24. April 2008
Re: Nina <ninochkalovely@gmail.com>
Antwort #1 - 06. März 2019 um 16:24
 
Eingeliefert über Deutschland:

Code
Alles auswählen
Details for 178.162.197.145
IP:	178.162.197.145
Decimal:	2997011857
Hostname:	178.162.197.145
ASN:	28753
ISP:	Leaseweb Deutschland GmbH
Organization:	Leaseweb Deutschland GmbH
Services:	Suspected network sharing device
Type:	Corporate
Assignment:	Static IP
Blacklist:
Continent:	Europe
Country:	Germany de flag
Latitude:	51.2993  (51° 17′ 57.48″ N)
Longitude:	9.491  (9° 29′ 27.60″ E)
 




Zitat:
Date: Tue, 5 Mar 2019 11:31:19 +0300


Die Date-Zeile passt aber viel besser nach Russland...


Auch die Einlieferung über eine - vermutlich geknackte - Mailadresse macht die Sache nicht glaubwürdiger...


Zitat:
I live a big beautiful country the Russian Federation


Smiley Smiley Smiley
« Zuletzt geändert: 06. März 2019 um 16:27 von Razor Buzz »  
Zum Seitenanfang
ICQ  
IP gespeichert
 
seiko
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 28135
Mitglied seit: 15. Januar 2015
Geschlecht: männlich
Re: Nina <ninochkalovely@gmail.com>
Antwort #2 - 08. März 2019 um 18:32
 
Salute! How do you ?? I hope you are OK and you will be happy to respond to my letter!
I am enourmously happy that I’ve got an opportunity to get acquainted with you.
My name is Nina. Probably you have guessed where I am from judging by my name.
I live a big splendid country Russia. I am 33.
I’m searching for a guy for good acquaintance and probably for meaningful relations.
If you liked me and got interested in me, I will be pleased to receive your letter.
I hope you will not allow the lonely woman to get bored.
I will eagerly wait for your letter as soon as possible.
If you reply to my letter, I will send you more pictures of me.
Thus we could see each other better and get to know each other more closely.
I hope you will also send me your image and give me some information about yourself.
I’d like to find out more about you.
I wish you an excellent day and merry spirit!
I am expecting a letter from you on my Email: ninochkalovely@gmail.com 

Nina!



Spoiler:
Delivered-To: xxx
Received: by 2002:a17:906:e57:0:0:0:0 with SMTP id q23csp4868946eji;
        Tue, 5 Mar 2019 07:59:20 -0800 (PST)
X-Google-Smtp-Source: APXvYqyV4l6RyZB4L1X7N5Nv6pWpLEjVEKp12aaO3Z3das5dCD9UQdZXDioCgm7/HZbQT9LYn2t2
X-Received: by 2002:a0c:9dda:: with SMTP id p26mr2619432qvf.134.1551801560714;
        Tue, 05 Mar 2019 07:59:20 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1551801560; cv=none;
        d=google.com; s=arc-20160816;
        b=PhYsZqDjSlYbDdOpQcx72FxQ7cKYvAXPaAGJByO1rJN9Bw5UZy5hYjtIE/iGX3RVJ/
         yqjYxsB1p6CwhOHDMHMvyodvRM4CIAi52unYfpvW18/a3DvdPsuUZRRhDJllTG0nmYdb
         MPJnGeLtiaFtdVam+YZtTk1sHiPD8RXPps/MM82ftxyXUbrUNQHgzhEPYcN/GAneWXNy
         yF4oPSFTLfeKVr5dhu3PX9UZk4COvPXXQsXSWtC81rxQuHi9yrkurtrXD5K781wjKqJV
         zIhVCFV5aV+fxzQ2xNytYDD382CbSbdl87l5SV/nNmrcxRfz5To6ztfkSJjBm6drOyZx
         zGSw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=date:mime-version:to:subject:from:message-id;
        bh=9HYHviWredgegS18A/Y0l+2LxE2UJ4euCcIdgY4H4OQ=;
        b=o6+gcnuBn7P4BBMF8Qk9ljBArGZbUlXbUmZt2nLXDYWkddm+tKxAjPoP1DHrj2hq0X
         tDlGEAj0W+FvEvgMtmFIEwsug3zLBJD2zUiiNp31/s/bzYrC62OJrl2WP6Z/o39RqXQv
         U50bXxO3wRvbWZJBpiEfZsf0KV1Pu/8ASKE572WXu0GM1fxw4DxjhnWaL6h/T8eGg/mI
         b9R9OVsBoEIdWL4BqmbVoaIdoI/wI2e7TQ7Xi3chy75pIgEzrmKpVR2uLgkaWnO6VdYy
         +6GaLkGx/ktBy6NmAD1/S5V2Ynx0m/8YfUnRqykMqj6438Nkg3QxJYHxqH7CRenzB6uN
         LvzA==
ARC-Authentication-Results: i=1; mx.google.com;
       spf=neutral (google.com: 205.151.16.103 is neither permitted nor denied by best guess record for domain of b.lavoie@lubri-delta.com) smtp.mailfrom=b.lavoie@lubri-delta.com
Return-Path: <b.lavoie@lubri-delta.com>
Received: from smtp3b.xittel.net (smtp3e.xittel.net. [205.151.16.103])
        by mx.google.com with ESMTPS id 43si4270697qvx.184.2019.03.05.07.59.19
        for <xxx>
        (version=TLS1_2 cipher=AES128-SHA bits=128/128);
        Tue, 05 Mar 2019 07:59:20 -0800 (PST)
Received-SPF: neutral (google.com: 205.151.16.103 is neither permitted nor denied by best guess record for domain of b.lavoie@lubri-delta.com) client-ip=205.151.16.103;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 205.151.16.103 is neither permitted nor denied by best guess record for domain of b.lavoie@lubri-delta.com) smtp.mailfrom=b.lavoie@lubri-delta.com
Message-Id: <5c7e9cd8.1c69fb81.3cc99.a61bSMTPIN_ADDED_MISSING@mx.google.com>
Received: from relaisa.xittel.net ([205.151.16.26]) by smtp3b.xittel.net with esmtp (Exim 4.82) (envelope-from <b.lavoie@lubri-delta.com>) id 1h1CTP-0005k0-N8 for xxx; Tue, 05 Mar 2019 10:59:19 -0500
Received: from bfs99.xittel.net ([205.151.16.99]:37720) by relaisa.xittel.net with esmtp (Exim 4.72) (envelope-from <b.lavoie@lubri-delta.com>) id 1h1CTP-0005yc-LK for xxx; Tue, 05 Mar 2019 10:59:19 -0500
X-ASG-Debug-ID: 1551801558-05b06a12734a530001-Uic4gN
Received: from smtp2.xittel.net (smtp2.xittel.net [205.151.16.15]) by bfs99.xittel.net with ESMTP id i6NbCHl4qgqytTIt for <xxx>; Tue, 05 Mar 2019 10:59:18 -0500 (EST)
X-Barracuda-Envelope-From: b.lavoie@lubri-delta.com
X-Barracuda-RBL-Trusted-Forwarder: 205.151.16.15
Received: from [62.212.73.52] (port=58044 helo=62.212.73.52) by smtp2.xittel.net with esmtpa (Exim 4.82) (envelope-from <b.lavoie@lubri-delta.com>) id 1h1CTN-0007Nm-Me for xxx; Tue, 05 Mar 2019 10:59:18 -0500
From: Nina J <b.lavoie@lubri-delta.com>
X-Barracuda-RBL-IP: 62.212.73.52
X-Barracuda-Effective-Source-IP: UNKNOWN[62.212.73.52]
X-Barracuda-Apparent-Source-IP: 62.212.73.52
Subject: hi!
To: xxx<xxx>
X-ASG-Orig-Subj: hi!
Content-Type: multipart/related; boundary="=_6QUv8TddRoRxWR1CRWqSZDBCll4QcZx2"
MIME-Version: 1.0
Date: Tue, 5 Mar 2019 18:59:19 +0300
X-Antivirus: Avast (VPS 190305-0, 05.03.2019), Outbound message
X-Antivirus-Status: Clean
X-Barracuda-Connect: smtp2.xittel.net[205.151.16.15]
X-Barracuda-Start-Time: 1551801558
X-Barracuda-URL: https://205.151.16.99:443/cgi-mod/mark.cgi
X-Virus-Scanned: by bsmtpd at xittel.net
X-Barracuda-Scan-Msg-Size: 4679
X-Barracuda-BRTS-Status: 1
X-Barracuda-Spam-Score: 0.46
X-Barracuda-Spam-Status: No, SCORE=0.46 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=8.0 tests=HTML_MESSAGE, MISSING_MID, URI_HEX
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.68237 Rule breakdown below
      pts rule name
              description ---- ---------------------- -------------------------------------------------- 0.14 MISSING_MID
            Missing Message-Id: Quelltext 0.32 URI_HEX
                URI: URI hostname has long hexadecimal sequence 0.00 HTML_MESSAGE
           BODY: HTML included in message

--=_6QUv8TddRoRxWR1CRWqSZDBCll4QcZx2
Content-Type: multipart/alternative; boundary="Xty4QW8yJUZi5VKhuFi2jDqyWx35=_Nm0L"

--Xty4QW8yJUZi5VKhuFi2jDqyWx35=_Nm0L
Content-Type: text/plain; charset="windows-1251"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
« Zuletzt geändert: 20. November 2020 um 15:08 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65689
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Nina <ninochkalovely@gmail.com>
Antwort #3 - 10. März 2019 um 21:32
 
Mail über Niederlande  Smiley

Code
Alles auswählen
IP:	62.212.73.52
Decimal:	1054099764
Hostname:	62.212.73.52
ASN:	60781
ISP:	LeaseWeb Netherlands B.V.
Organization:	LeaseWeb Netherlands B.V.
Services:	Suspected network sharing device
Assignment:	Static IP
Continent:	Europe
Country:	Netherlands
State/Region:	North Brabant
City:	Spijk 



Zitat:
from [62.212.73.52] [...] with esmtpa; Tue, 05 Mar 2019 10:59:18 -0500
From: Nina J <xxx@lubri-delta.com>
Date: Tue, 5 Mar 2019 18:59:19 +0300
  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11770
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Nina <ninochkalovely@gmail.com>
Antwort #4 - 09. Oktober 2019 um 16:00
 
  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65689
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Nina <ninochkalovely@gmail.com>
Antwort #5 - 09. Oktober 2019 um 17:02
 
Die Bilder wurden bei Aleksandra Kaschkowa / Александра Кашкова aus Yoshkar Ola geklaut.

https://vk.com/id13662282
https://www.instagram.com/alek__sandrovna/

Weiteres Thema:

Olga <catty.smile967@gmail.com>
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema