Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Heisses Thema (Mehr als 10 Antworten) Irina <irineperm@yandex.ru> (Gelesen: 1546 mal)
 
Slash
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 185
Mitglied seit: 02. Mai 2019
Geschlecht: männlich
Irina <irineperm@yandex.ru>
06. Februar 2020 um 04:59
 
Hello! How are you?
I am Irina from Ukraine. I am really interested in our communication and I think it is a good way to learn each other better)))).
I am looking for serious relationship. I am full of zest for life. I am active, cheerful, optimistic and easy-going. I am purposeful and try to achieve my aims in life. I want to enjoy life with someone special. I hope this man will be you)))). First of all I think we should try to know more about each other.
I hope that you will get my letter and I will receive your reply soon. I had attached several photos for you. And I will be very glad to receive your photos too and know more about you!!!
Looking impatiently for your reply,
Irina.

Spoiler für Yandex inline:
Received: from HE1EUR04HT164.eop-eur04.prod.protection.outlook.com
(2603:10a6:803:8c::43) by VI1PR01MB4351.eurprd01.prod.exchangelabs.com with
HTTPS via VI1PR06CA0114.EURPRD06.PROD.OUTLOOK.COM; Wed, 29 Jan 2020 08:37:24
+0000
Received: from HE1EUR04FT062.eop-eur04.prod.protection.outlook.com
(10.152.26.55) by HE1EUR04HT164.eop-eur04.prod.protection.outlook.com
(10.152.26.82) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2665.18; Wed, 29 Jan
2020 08:37:23 +0000
Authentication-Results: spf=pass (sender IP is 77.88.28.109)
smtp.mailfrom=yandex.ru; live.at; dkim=pass (signature was verified)
Quelltext.d=yandex.ru;live.at; dmarc=pass action=none
Quelltext.from=yandex.ru;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of yandex.ru designates
77.88.28.109 as permitted sender) receiver=protection.outlook.com;
client-ip=77.88.28.109; helo=forward106p.mail.yandex.net;
Received: from forward106p.mail.yandex.net (77.88.28.109) by
HE1EUR04FT062.mail.protection.outlook.com (10.152.27.51) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.2686.25 via Frontend Transport; Wed, 29 Jan 2020 08:37:23 +0000
X-IncomingTopHeaderMarker:
80FDE;SizeAsReceived:1828;Count:16
Received: from forward103q.mail.yandex.net (forward103q.mail.yandex.net [IPv6:2a02:6b8:c0e:50:0:640:b21c:d009])
     by forward106p.mail.yandex.net (Yandex) with ESMTP id 835961C81499
     for <xxx>; Wed, 29 Jan 2020 11:37:22 +0300 (MSK)
Received: from mxback1q.mail.yandex.net (mxback1q.mail.yandex.net [IPv6:2a02:6b8:c0e:39:0:640:25b3:aea5])
     by forward103q.mail.yandex.net (Yandex) with ESMTP id 7AF1961E0008
     for <xxx>; Wed, 29 Jan 2020 11:37:22 +0300 (MSK)
Received: from vla4-a16f3368381d.qloud-c.yandex.net (vla4-a16f3368381d.qloud-c.yandex.net [2a02:6b8:c17:d85:0:640:a16f:3368])
     by mxback1q.mail.yandex.net (mxback/Yandex) with ESMTP id i99oCwiXPP-bMSed7WY;
     Wed, 29 Jan 2020 11:37:22 +0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1580287042;
     bh=SGsGt3VkR8aawbNizFoyHrcp7QyhiT9w1W4cfo/TwTQ=;
     h=In-Reply-To:Subject:To:From:References:Date:Message-ID;
     b=oUf+FAzw3H9giofQvxPUyAVMlt9Y1utwFjJSFGnSHmAgXx3eFECc0wiaeu179fiK+
      XlgbzgcLrlxClkE6uKtpNyG8FFI0NyFQaC7iPHYlnKG914VUontYkD8UgRDaM8Hu5L
      f72WZnykWjRy6DTiTJADSwRDIjPm2H5dnvQo7UEg=
Authentication-Results-Original: mxback1q.mail.yandex.net; dkim=pass
Quelltext.i=@yandex.ru
Received: by vla4-a16f3368381d.qloud-c.yandex.net (smtp/Yandex) with ESMTPSA id 6OX45gFvIi-bKXKbUEr;
     Wed, 29 Jan 2020 11:37:20 +0300
     (using TLSv1.1 with cipher AES128-SHA (128/128 bits))
     (Client certificate not present)
Date: Wed, 29 Jan 2020 11:37:27 +0300
From: irineperm@yandex.ru
X-Priority: 2 (High)
Message-ID: <1656031402.20200129113727@yandex.ru>
To: xxx
Subject: Hello))
In-Reply-To: <5387851580115116@iva8-8aca73b241e5.qloud-c.yandex.net>
References: <5387851580115116@iva8-8aca73b241e5.qloud-c.yandex.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------0D51BE13B2D64092A"
X-IncomingHeaderCount: 16
Return-Path: irineperm@yandex.ru
X-MS-Exchange-Organization-ExpirationStartTime: 29 Jan 2020 08:37:23.4703
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
18f66edf-7d14-4d7b-a948-08d7a4967666
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
HE1EUR04FT062.eop-eur04.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 1/29/2020 8:28:43 AM
X-MS-Office365-Filtering-Correlation-Id: 18f66edf-7d14-4d7b-a948-08d7a4967666
X-MS-TrafficTypeDiagnostic: HE1EUR04HT164:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 77.88.28.109
X-SID-PRA: IRINEPERM@YANDEX.RU
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Antispam: BCL:0;
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jan 2020 08:37:23.2702
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 18f66edf-7d14-4d7b-a948-08d7a4967666
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR04HT164
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.6354076
X-MS-Exchange-Processed-By-BccFoldering: 15.20.2665.027
X-MS-Exchange-Organization-SCL: 6
X-Message-Info:
     5CoY22t65Qfx95+aMH3ZNgVhZomYPnHLg6rmw0c89HqP+yEiJIqqKw==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Microsoft-Antispam-Mailbox-Delivery:
     8390011)(8390131)(4920090)(6375004)(4950130)(4990090)(9140004);RF:JunkEmail;
X-Microsoft-Antispam-Message-Info:
     vmE6svO+tf4919wz
« Zuletzt geändert: 23. Juli 2021 um 23:52 von vierauge »  

irineperm1.jpg ( 65 KB | Downloads )
irineperm1.jpg
irineperm2.jpg ( 56 KB | Downloads )
irineperm2.jpg
irineperm3.jpg ( 70 KB | Downloads )
irineperm3.jpg
irineperm4.jpg ( 72 KB | Downloads )
irineperm4.jpg
irineperm5.jpg ( 58 KB | Downloads )
irineperm5.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11771
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #1 - 06. Februar 2020 um 12:08
 
Die Mailadresse ist auf einer fragwürdigen Such-Seite auch bekannt.
  
Zum Seitenanfang
 
IP gespeichert
 
x5dr
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4945
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #2 - 06. Februar 2020 um 20:59
 
Ich denke die Brille auf dem Bild irineperm1 wurde nachträglich hinzugefügt.
« Zuletzt geändert: 23. Juli 2021 um 23:35 von vierauge »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65757
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #3 - 06. Februar 2020 um 21:06
 
x5dr schrieb on 06. Februar 2020 um 20:59:
Ich denke die Brille auf dem Bild btfne.jpg wurde nachträglich hinzugefügt.


Keine große Sache mit einem Smartphon.
  
Zum Seitenanfang
 
IP gespeichert
 
Slash
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 185
Mitglied seit: 02. Mai 2019
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #4 - 07. Februar 2020 um 09:33
 
Hello, xxx!
I was glad to receive your letter and photos! I hope you are well now. So what were you doing in Russia?)
I am glad that we have common interests with you. I also like nature very much. 
I am 30, single, never married, have no kids. I am from Alchevsk, a small town in the east of Ukraine. If I find my man, I am ready to relocate. It is more important whom to live with than where. I love nature a lot.
As for my job I work as a sales manager with local food products.  
I am the only kid in my family. We are close with my parents. But I have many relatives, I attached my family photos for you.
I  will be glad to know more about your life. Tell me about your job, please.
I am looking forward to your letter.
Have a nice day, Irina.

Spoiler für Yandex inline:
Received: from DB3EUR04HT128.eop-eur04.prod.protection.outlook.com
(2603:10a6:802:14::33) by VI1PR01MB4351.eurprd01.prod.exchangelabs.com with
HTTPS via VI1PR02CA0062.EURPRD02.PROD.OUTLOOK.COM; Fri, 7 Feb 2020 08:28:00
+0000
Received: from DB3EUR04FT006.eop-eur04.prod.protection.outlook.com
(10.152.24.53) by DB3EUR04HT128.eop-eur04.prod.protection.outlook.com
(10.152.25.183) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2707.21; Fri, 7 Feb
2020 08:27:59 +0000
Authentication-Results: spf=pass (sender IP is 5.45.198.243)
smtp.mailfrom=yandex.ru; live.at; dkim=pass (signature was verified)
Quelltext.d=yandex.ru;live.at; dmarc=pass action=none
Quelltext.from=yandex.ru;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of yandex.ru designates
5.45.198.243 as permitted sender) receiver=protection.outlook.com;
client-ip=5.45.198.243; helo=forward102j.mail.yandex.net;
Received: from forward102j.mail.yandex.net (5.45.198.243) by
DB3EUR04FT006.mail.protection.outlook.com (10.152.24.75) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.2707.21 via Frontend Transport; Fri, 7 Feb 2020 08:27:59 +0000
X-IncomingTopHeaderMarker:
1BF7E;SizeAsReceived:1758;Count:15
Received: from mxback11o.mail.yandex.net (mxback11o.mail.yandex.net [IPv6:2a02:6b8:0:1a2d::62])
     by forward102j.mail.yandex.net (Yandex) with ESMTP id 6B662F20C30
     for <xxxt>; Fri,  7 Feb 2020 11:27:58 +0300 (MSK)
Received: from sas2-b157fac3b6f2.qloud-c.yandex.net (sas2-b157fac3b6f2.qloud-c.yandex.net [2a02:6b8:c08:b282:0:640:b157:fac3])
     by mxback11o.mail.yandex.net (mxback/Yandex) with ESMTP id n2SoaHrmtt-RwxmURFI;
     Fri, 07 Feb 2020 11:27:58 +0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1581064078;
     bh=ZS3oAs3tWofd8xEazmrAloGZFgCcRz6cIoM9hWBa/8Y=;
     h=In-Reply-To:Subject:To:From:References:Date:Message-ID;
     b=hidWabZhEzJ+isjzKjSABhpcVqgdLwhvCUFsBzs2yM43DMuIUA3YmnDb5n+N+rmQW
      Fri3tJofTmA57o1wxlBUn5/RKM6/hXoOXi680SKko9YE+cYupaKxOaamLOHilWPWDJ
      RQaqebk3OQe6EM9yZ2ooG6kMjrS29+w+ngym6CVY=
Authentication-Results-Original: mxback11o.mail.yandex.net; dkim=pass
Quelltext.i=@yandex.ru
Received: by sas2-b157fac3b6f2.qloud-c.yandex.net (smtp/Yandex) with ESMTPSA id QtORX3LCU4-RuYe13iq;
     Fri, 07 Feb 2020 11:27:56 +0300
     (using TLSv1.1 with cipher AES128-SHA (128/128 bits))
     (Client certificate not present)
Date: Fri, 7 Feb 2020 11:28:09 +0300
From: irineperm@yandex.ru
X-Priority: 2 (High)
Message-ID: <1107036054.20200207112809@yandex.ru>
To: xxx <xxxt>
Subject: More about me
In-Reply-To: .com>
References: <5387851580115116@iva8-8aca73b241e5.qloud-c.yandex.net> 
  <1656031402.20200129113727@yandex.ru>
  .com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------00905F0B9167926AD"
X-IncomingHeaderCount: 15
Return-Path: irineperm@yandex.ru
X-MS-Exchange-Organization-ExpirationStartTime: 07 Feb 2020 08:27:59.3917
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
7c3910ee-4795-4b51-d874-08d7aba7a3e6
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
DB3EUR04FT006.eop-eur04.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 2/7/2020 8:21:42 AM
X-MS-Office365-Filtering-Correlation-Id: 7c3910ee-4795-4b51-d874-08d7aba7a3e6
X-MS-TrafficTypeDiagnostic: DB3EUR04HT128:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 5.45.198.243
X-SID-PRA: IRINEPERM@YANDEX.RU
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Antispam: BCL:3;
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Feb 2020 08:27:59.2376
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 7c3910ee-4795-4b51-d874-08d7aba7a3e6
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB3EUR04HT128
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.2755978
X-MS-Exchange-Processed-By-BccFoldering: 15.20.2707.017
X-MS-Exchange-Organization-SCL: -1
X-Message-Info:
     CIND1iwsT59lqzjJt2I3ib+r6PdDwQt3W1Gd9DeOk/Ev+P3ZOv4/Aw==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0tMQ==
X-Microsoft-Antispam-Mailbox-Delivery:
     11)(4920090)(6225004)(4950130)(4990090)(9110004);
X-Microsoft-Antispam-Message-Info:
     =?us-ascii?Q?JZH8q0WT1w2sjbvbnU7VsYA3TaGgwle7rV/tF1XwzOe3U8vqerdYKSEtQazH?=
=?us-ascii?Q?uAUi8zO1KV5jxC7hs7fMQDgZN/ip3myesi9XORO8YKyiiqB08vjVHQVgO2z5?=
=?us-ascii?Q?TOksQyXgJR0btPKa04qxvoTVxLGRds1U8MQrRnQUMIqCEr/FPcIz0qry9/c3?=
=?us-ascii?Q?5wXDpOMXmtA+KexsGdmMm9/BYOnXdLDhIdgxbNW+5GaamswPU9uxLN5weFbQ?=
=?us-ascii?Q?mbKjeXjAE5QenViMJqguhEjW/FkRkxLFJGJ0xQ7mlcu1ukYGC7tHAUrKE/Jx?=
=?us-ascii?Q?3ZXePKKFPvHyFZ3WhJtReuVfcI0rsvTECmut76HPd0C7prcrcEqNjPD8wzz5?=
=?us-ascii?Q?dpmYuAkloC7uD+WChyMO+05aHXOHuOpizcjJKEsFNva8nA7dED7Qkl6+4ki8?=
=?us-ascii?Q?9N4ZC5kfxomSzbcQGYusEFYkFlWVw/MlWgDl5qM6IzyiWCnLgGoCsILohOSn?=
=?us-ascii?Q?KxUDcoA9oBbYvwbcMJyyxBeFgTJsdXBSvcD/YXPDxK/RPWXOrmCBVA3/Z1FD?=
=?us-ascii?Q?ET3ksEe9/ZZ30xkIhY/M24+8PU34lHXpczvs2FfIkCoXVHVr+pAq6a8qofDS?=
=?us-ascii?Q?liRX5ekE4eroh40vnAVkinJLQM+poSaB3lzJ3od+SjFgVBhSVjWKazLxnJzs?=
=?us-ascii?Q?Ykx935Y+vREnMExHAaC027FxP7lMhy0oOVgDV/TaleWOnOfk9/mdaZE20Mjt?=
=?us-ascii?Q?lCWJc/SfNPgbgGO7Doy0MyQ4bJwG7+s7cbZKq4rqgfMzTDK7n6jYv5x+zOXo?=
=?us-ascii?Q?F7+6W2KyIhzrkX/gceezknw+8x44DdLgEmJquGNBoAJokbKWgaq1ZCzbwl0Y?=
=?us-ascii?Q?znoO+7crpzv3lN5V/ZjUpmYhYbUYbk1RhhMDtva/QjdXxT8hiMCqiugD1c0B?=
=?us-ascii?Q?QI7APB1IZXXxYdqtx5gVLRkY5VB6TYpKIFwRluDYqMfkSIS02jCDv0od2gX5?=
=?us-ascii?Q?THzElTsF89Hgw1qiVbJufzPKJWyWW+sffGpgCnW+fpp0t3aD/6qq1oQv1cxH?=
=?us-ascii?Q?HoDQ?=
« Zuletzt geändert: 23. Juli 2021 um 23:53 von vierauge »  

irineperm6.jpg ( 54 KB | Downloads )
irineperm6.jpg
irineperm7.jpg ( 62 KB | Downloads )
irineperm7.jpg
irineperm8.jpg ( 60 KB | Downloads )
irineperm8.jpg
irineperm9.jpg ( 86 KB | Downloads )
irineperm9.jpg
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11771
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #5 - 07. Februar 2020 um 12:59
 
Slash schrieb on 07. Februar 2020 um 09:33:
I am from Alchevsk, a small town in the east of Ukraine.


Na ja, ist ja mal ein Anfang.  Zwinkernd
  
Zum Seitenanfang
 
IP gespeichert
 
Slash
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 185
Mitglied seit: 02. Mai 2019
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #6 - 10. Februar 2020 um 08:55
 
Hello xxx, I was happy to receive a letter from you.
I agree with you that real feelings and and care for each other means more than any luxury in this world. I want to find my soul mate to share the rest of life together, to make each other happy. I think that Austria is a very beautiful country, so it doesn't matter which city or village you live in there. My dream of course is to live in a beautiful country likes yours and build a happy family. It doesn't matter what I will do for life as I am not afraid of work and I want to do something in life, not just stay at home. i want to travel sometimes and see other countries, learn different traditions, see landscapes and architecture, try new tastes. I have never been abroad. But the more important that I want to do it with my beloved man. 
I am quite active and I enjoy sport. Several days a week I go to the gym. I like skiing and skating. I love walking and cycling. I like fishing, picking up mushrooms and working in the garden. I love nature, especially mountains and lakes, but sea is good for me too
I enjoy cooking and I will be glad to learn to cook what you like. 
My dear xxx, I will wait for your letter with great impatience.
Have a nice day,
your Irina. 

Spoiler:
Received: from DB5EUR03HT048.eop-EUR03.prod.protection.outlook.com
(2603:10a6:803:f0::20) by VI1PR01MB4351.eurprd01.prod.exchangelabs.com with
HTTPS via VI1PR04CA0122.EURPRD04.PROD.OUTLOOK.COM; Mon, 10 Feb 2020 07:39:36
+0000
Received: from DB5EUR03FT055.eop-EUR03.prod.protection.outlook.com
(10.152.20.54) by DB5EUR03HT048.eop-EUR03.prod.protection.outlook.com
(10.152.21.129) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2665.18; Mon, 10 Feb
2020 07:39:35 +0000
Authentication-Results: spf=pass (sender IP is 37.140.190.177)
smtp.mailfrom=yandex.ru; live.at; dkim=pass (signature was verified)
Quelltext.d=yandex.ru;live.at; dmarc=pass action=none
Quelltext.from=yandex.ru;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of yandex.ru designates
37.140.190.177 as permitted sender) receiver=protection.outlook.com;
client-ip=37.140.190.177; helo=forward103o.mail.yandex.net;
Received: from forward103o.mail.yandex.net (37.140.190.177) by
DB5EUR03FT055.mail.protection.outlook.com (10.152.21.30) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.2665.18 via Frontend Transport; Mon, 10 Feb 2020 07:39:35 +0000
X-IncomingTopHeaderMarker:
4E82F;SizeAsReceived:1933;Count:15
Received: from mxback20g.mail.yandex.net (mxback20g.mail.yandex.net [IPv6:2a02:6b8:0:1472:2741:0:8b7:320])
     by forward103o.mail.yandex.net (Yandex) with ESMTP id 8709E5F811D6
     for <xxx>; Mon, 10 Feb 2020 10:39:34 +0300 (MSK)
Received: from myt6-016ca1315a73.qloud-c.yandex.net (myt6-016ca1315a73.qloud-c.yandex.net [2a02:6b8:c12:4e0e:0:640:16c:a131])
     by mxback20g.mail.yandex.net (mxback/Yandex) with ESMTP id 5hQ4acKdVa-dYkGw04U;
     Mon, 10 Feb 2020 10:39:34 +0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1581320374;
     bh=QzBbBln8HzGEu9bK/rpplHEcCC6UCU0G92WSpKqu/d8=;
     h=In-Reply-To:Subject:To:From:References:Date:Message-ID;
     b=oTWpfor7Cih63eEoEHL/ADWxkQCusvlrE+0tI/nVgLr/X9WSS+2L/1rn3+uuMRANL
      uu7M0JelsLWPlYu0vpTmJgPESvRrVhMoOtT0x7MUffva/wwSClgFPdSDhNwnxuUiiO
      kgpHwC5eXXoHN4RxayY6jKpw80z2FHOa2rzlEaKY=
Authentication-Results-Original: mxback20g.mail.yandex.net; dkim=pass
Quelltext.i=@yandex.ru
Received: by myt6-016ca1315a73.qloud-c.yandex.net (smtp/Yandex) with ESMTPSA id qSKFs955Ko-dWVm12CN;
     Mon, 10 Feb 2020 10:39:32 +0300
     (using TLSv1.1 with cipher AES128-SHA (128/128 bits))
     (Client certificate not present)
Date: Mon, 10 Feb 2020 10:39:31 +0300
From: irineperm@yandex.ru
X-Priority: 2 (High)
Message-ID: <289905689.20200210103931@yandex.ru>
To: xxx <xxx>
Subject: =?utf-8?Q?What_=C2=A0I_=C2=A0like_=C2=A0doing?=
In-Reply-To: .com>
References: <5387851580115116@iva8-8aca73b241e5.qloud-c.yandex.net> 
  <1656031402.20200129113727@yandex.ru>
  .com>
  <1107036054.20200207112809@yandex.ru>
  .com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------11E0A30951A257955"
X-IncomingHeaderCount: 15
Return-Path: irineperm@yandex.ru
X-MS-Exchange-Organization-ExpirationStartTime: 10 Feb 2020 07:39:35.5007
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
f1cf5c35-4f70-4458-7d74-08d7adfc6049
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
DB5EUR03FT055.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 2/10/2020 7:37:44 AM
X-MS-Office365-Filtering-Correlation-Id: f1cf5c35-4f70-4458-7d74-08d7adfc6049
X-MS-TrafficTypeDiagnostic: DB5EUR03HT048:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 37.140.190.177
X-SID-PRA: IRINEPERM@YANDEX.RU
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Antispam: BCL:0;
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Feb 2020 07:39:35.3406
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f1cf5c35-4f70-4458-7d74-08d7adfc6049
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5EUR03HT048
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.5462415
X-MS-Exchange-Processed-By-BccFoldering: 15.20.2707.030
X-MS-Exchange-Organization-SCL: -1
X-Message-Info:
« Zuletzt geändert: 23. Juli 2021 um 23:54 von vierauge »  

irineperm10.jpg ( 67 KB | Downloads )
irineperm10.jpg
irineperm11.jpg ( 62 KB | Downloads )
irineperm11.jpg
irineperm12.jpg ( 63 KB | Downloads )
irineperm12.jpg
irineperm13.jpg ( 79 KB | Downloads )
irineperm13.jpg
irineperm14.jpg ( 49 KB | Downloads )
irineperm14.jpg
Zum Seitenanfang
 
IP gespeichert
 
Slash
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 185
Mitglied seit: 02. Mai 2019
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #7 - 15. Februar 2020 um 08:54
 
hier ist das Bild gespiegelt

https://russianflirting.com/en/viewprofile/Irissshka

Zitat:
I am a self-sufficient person, but I feel so lonely without love and beloved man in my life. I am ready for serious relationship. My parents are a good example of a loving family for me. I want to create a family of my own with close relationship and stable family traditions. I am caring and loving, I will support my man. He will always feel loved by me. I look after myself and eat healthy food as I want to look good for my man and to be healthy. I will be your queen and treat you like my king.


« Zuletzt geändert: 16. Februar 2020 um 14:20 von Stiray »  

2020-02-16_132725.jpg ( 24 KB | Downloads )
2020-02-16_132725.jpg
Zum Seitenanfang
 
IP gespeichert
 
Slash
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 185
Mitglied seit: 02. Mai 2019
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #8 - 17. Februar 2020 um 09:40
 
Hello my darling xxx! Thanks a lot for your thoughtful and romantic letter. I feel that you are my man. I can easily imagine us living together and enjoying life no matter what we do.
You know xxx, I would never believe that it is possible to meet your future life partner through the Internet. I don’t know why but I never believed in such stories when I heard them before. It was really amazing for me how one can fall in love with a person whom he has never seen and only corresponded.  And now I am here myself and writing you and I feel very close to you. I feel that we have a connection with you and that we are soul mates with you.
xxx, I am really glad that I met you and I hope it was our destiny to meet here. 
So let me wish you a nice day and I hope you will reply me soon.
Yours warmly, Irina. 

Spoiler:
Received: from VE1EUR03HT198.eop-EUR03.prod.protection.outlook.com
(2603:10a6:800:bc::12) by VI1PR01MB4351.eurprd01.prod.exchangelabs.com with
HTTPS via VI1PR0602CA0002.EURPRD06.PROD.OUTLOOK.COM; Mon, 17 Feb 2020
08:32:39 +0000
Received: from VE1EUR03FT061.eop-EUR03.prod.protection.outlook.com
(10.152.18.53) by VE1EUR03HT198.eop-EUR03.prod.protection.outlook.com
(10.152.19.63) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2665.18; Mon, 17 Feb
2020 08:32:35 +0000
Authentication-Results: spf=pass (sender IP is 5.45.198.246)
smtp.mailfrom=yandex.ru; live.at; dkim=pass (signature was verified)
Quelltext.d=yandex.ru;live.at; dmarc=pass action=none
Quelltext.from=yandex.ru;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of yandex.ru designates
5.45.198.246 as permitted sender) receiver=protection.outlook.com;
client-ip=5.45.198.246; helo=forward103j.mail.yandex.net;
Received: from forward103j.mail.yandex.net (5.45.198.246) by
VE1EUR03FT061.mail.protection.outlook.com (10.152.19.220) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.2665.18 via Frontend Transport; Mon, 17 Feb 2020 08:32:35 +0000
X-IncomingTopHeaderMarker:
6A422;SizeAsReceived:1697;Count:15
Received: from mxback24g.mail.yandex.net (mxback24g.mail.yandex.net [77.88.29.174])
     by forward103j.mail.yandex.net (Yandex) with ESMTP id E945F6741398
     for <xxx>; Mon, 17 Feb 2020 11:32:34 +0300 (MSK)
Received: from vla1-ee05250d997a.qloud-c.yandex.net (vla1-ee05250d997a.qloud-c.yandex.net [2a02:6b8:c0d:3495:0:640:ee05:250d])
     by mxback24g.mail.yandex.net (mxback/Yandex) with ESMTP id VNO576oxv1-WYsavpBY;
     Mon, 17 Feb 2020 11:32:34 +0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1581928354;
     bh=Eys8nCelRhOXtYEqS2nkIFdKOCpjosL4FUT8hquVZ/o=;
     h=In-Reply-To:Subject:To:From:References:Date:Message-ID;
     b=nuA8uXLlrYhLcQeOBw2VJT6VXN8TFuWx24A6YPGfiabpvX/aZZ04eJnwDEQQd6SEe
      syKXqr0yjSxnxXLRbsKExb3MRb0Ma9yjEqdbMY3+fjfEiNNy9259a9lKYK4jLYVmvA
      7ThHxjyXhPsqPXapSvPhzTcX/i0RfNXogVz5yBfM=
Authentication-Results-Original: mxback24g.mail.yandex.net; dkim=pass
Quelltext.i=@yandex.ru
Received: by vla1-ee05250d997a.qloud-c.yandex.net (smtp/Yandex) with ESMTPSA id q4EENfiWB8-WV1m04i4;
     Mon, 17 Feb 2020 11:32:31 +0300
     (using TLSv1.1 with cipher AES128-SHA (128/128 bits))
     (Client certificate not present)
Date: Mon, 17 Feb 2020 11:03:09 +0300
From: irineperm@yandex.ru
X-Priority: 2 (High)
Message-ID: <332433097.20200217110309@yandex.ru>
To: xxx <xxx>
Subject: =?utf-8?B?SSDCoGFtIMKgd2l0aCDCoHlvdSDCoGFuZCDCoEkgYW0gaGFwcHk=?=
In-Reply-To: .com>
References: .com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------1170AA12618BCA63C"
X-IncomingHeaderCount: 15
Return-Path: irineperm@yandex.ru
X-MS-Exchange-Organization-ExpirationStartTime: 17 Feb 2020 08:32:35.7816
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
0a6998c6-58f9-444e-16d8-08d7b383f0c6
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
VE1EUR03FT061.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 2/17/2020 8:29:30 AM
X-MS-Office365-Filtering-Correlation-Id: 0a6998c6-58f9-444e-16d8-08d7b383f0c6
X-MS-TrafficTypeDiagnostic: VE1EUR03HT198:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 5.45.198.246
X-SID-PRA: IRINEPERM@YANDEX.RU
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Antispam: BCL:0;
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Feb 2020 08:32:35.5963
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 0a6998c6-58f9-444e-16d8-08d7b383f0c6
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR03HT198
X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.3630185
X-MS-Exchange-Processed-By-BccFoldering: 15.20.2729.017
X-MS-Exchange-Organization-SCL: -1
X-Message-Info:
     lt+dWvqYEJx8WTuuspHQepmx5P8wBG4P+28aN4Lv2it4ghcufgOFkA==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0yO1NDTD0tMQ==
X-Microsoft-Antispam-Mailbox-Delivery:
     0)(6225004)(4950130)(4990090)(9110004);
X-Microsoft-Antispam-Message-Info:
     =?us-ascii?Q?j5jJm9kYaOTZn/rwuNMgrUW7y3gTV3NInleT1C3dHMM2zuBnLyBN9BsQJDnd?=
=?us-ascii?Q?epyZbWi/Kqs/geYFn0VFvCEXGF6rHPKIHYaRld86cOEDn86VOidrHM1Bt0YH?=
=?us-ascii?Q?miH+lppEy2bYcGPACiUVytFIBMWhVBbjGrTQsi/d3M8O3x4Bpfh+Yk4nC4ds?=
=?us-ascii?Q?gljdsoUp29vWytrZ5meJOqNudxZQINUR6WqQKGm9yF/AW9b7tU4EisFRFmTv?=
=?us-ascii?Q?CjEQD7ir1Q4TPzo6OqIAmCE9UFU8NXbRc7b989t5u2fHxGBgh6nCzvHyDFvZ?=
=?us-ascii?Q?KRFKxBkVv095cfc7Acv5FbhENkiN6YS8jViPYAXKNx22bUaB5KKt7kfUP/us?=
=?us-ascii?Q?+lxCbCk1mK5z54HCTTUhjDWvBjWRrspb3J6m3BPOiQdB5pkkzv3LWfjxVLeE?=
=?us-ascii?Q?2r12mY+ItTzbanASqPXRO3Wmy+6qUij1VnoNVJtZgTsmhLjXmo8SYZp38yL/?=
=?us-ascii?Q?woRbUhAVjymTZXk7qO0Ss3yUm+SyWA/kgCag3I2dROF1hesx7YSNSvQPqD7a?=
=?us-ascii?Q?vpGRtJMvQW973SIjaYvU+6mdZY8zKa1W8oVuOQUu2qxMxeTxZCU0gf8sqBhR?=
=?us-ascii?Q?nKSFOTQWPqOgIJ4Kow1CydP/3KgyW03ICOb8hAdvao+91XTnCrYKqf4adJYv?=
=?us-ascii?Q?F+6QgE24XZj8Wn0olcey56BuwnDj6tdkpXEE1aru8UbO/pjtsNIWKacFGC23?=
=?us-ascii?Q?4o+HyzGEljM+z7eS9N5lBD8dGqIjtWJYdXkHKhdlCiEbaROaQ6NkraHzQiJF?=
=?us-ascii?Q?PLst83zcueWJSnEL2n/7NHPwR53oTq9lVC6DuZMjvaYPQTBvPCUjYRPlZrcG?=
=?us-ascii?Q?IMcjawT4yiRF/j/9x+rgNlnecfQ0EMwTyCgrjWGUmydEbvKKQCo/7/PKptHS?=
=?us-ascii?Q?+r/whNjA/q8MUCITxwQ3j43+EwrVzL1kXXGzkiNXzoq2QtWHtOUyIXtfpk28?=
=?us-ascii?Q?lGJbwDP4Xcy7L5qxelyDpPn4gGBmDjbnCNCnjsYm67f8ofT4UXHpNU1ZfbE5?=
=?us-ascii?Q?wLpLfTtBR/58FY9Cdlg4Wp7rfrCwMF2m5C4nFrucV6KlIsU7TMk6AC4aptrv?=
=?us-ascii?Q?+0eTkLWu?=


Ich werde sie um ein Videochat bitten, dann haben wir die Antwort ob es ein Scammer ist oder nicht.  Zwinkernd
« Zuletzt geändert: 23. Juli 2021 um 23:54 von vierauge »  

irineperm15.jpg ( 57 KB | Downloads )
irineperm15.jpg
irineperm16.jpg ( 158 KB | Downloads )
irineperm16.jpg
irineperm17.jpg ( 133 KB | Downloads )
irineperm17.jpg
Zum Seitenanfang
 
IP gespeichert
 
Slash
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 185
Mitglied seit: 02. Mai 2019
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #9 - 18. Februar 2020 um 13:09
 
Nach dieser Antwort meine ich 100% Scam..

My darling xxx, I like you and I want to meet. I think it is important for us to build relationship in real life.
I live in a conflict zone, video is low here and video calls are blocked, but I want to meet you very much, to see you and share time in person.
You  know,  xxx,  I  often think of you. I think we should meet for at least 1 week for the first time to see how we feel together and I want to see  your country very much and learn more about life and traditions there.
xxx,  I can easily imagine how I will arrive at the airport in your country and will try to find you in the crowd of people waiting for their closest people. And you are among them. I hope you will be with flowers))). I bet you would find me first and I would search for you for some time. While I am so lost and can’t find you, you would use this moment to gaze at me)). Maybe you would even smile at me, being so helpless)) But then all of a sudden as though I felt your look on me, I would turn and our eyes would meet. I would smile to you and you would recognize how happy I am because I have finally found you))  You would kiss me and tell me how long you have been waiting for me….))) I would hug you warmly and we would enjoy being so close to each other finally))
Darling when it happens I will be the happiest person in the world))
I am sure that we will have nice romantic dinner with you. I want it with candle lights and soft music, no matter we are in a restaurant or having dinner at home. Do you like it, dear? It is more important that finally we will be together, looking into each other’s eyes, holding hands, kissing and having nice time together.
I am sure we would talk a lot and laugh and have fun…
I can’t wait to hear from you)))
Enjoy your day.
A kiss from me, your Irina 

Spoiler:
Received: from DB8EUR05HT051.eop-eur05.prod.protection.outlook.com
(2603:10a6:802:5a::44) by VI1PR01MB4351.eurprd01.prod.exchangelabs.com with
HTTPS via VI1P195CA0055.EURP195.PROD.OUTLOOK.COM; Tue, 18 Feb 2020 08:37:15
+0000
Received: from DB8EUR05FT037.eop-eur05.prod.protection.outlook.com
(2a01:111:e400:fc0f::38) by
DB8EUR05HT051.eop-eur05.prod.protection.outlook.com (2a01:111:e400:fc0f::236)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2729.22; Tue, 18 Feb
2020 08:37:14 +0000
Authentication-Results: spf=pass (sender IP is 5.45.198.248)
smtp.mailfrom=yandex.ru; live.at; dkim=pass (signature was verified)
Quelltext.d=yandex.ru;live.at; dmarc=pass action=none
Quelltext.from=yandex.ru;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of yandex.ru designates
5.45.198.248 as permitted sender) receiver=protection.outlook.com;
client-ip=5.45.198.248; helo=forward105j.mail.yandex.net;
Received: from forward105j.mail.yandex.net (5.45.198.248) by
DB8EUR05FT037.mail.protection.outlook.com (10.233.239.194) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.2729.22 via Frontend Transport; Tue, 18 Feb 2020 08:37:14 +0000
X-IncomingTopHeaderMarker:
435D6;SizeAsReceived:1809;Count:15
Received: from mxback28j.mail.yandex.net (mxback28j.mail.yandex.net [IPv6:2a02:6b8:0:1619::228])
     by forward105j.mail.yandex.net (Yandex) with ESMTP id 861F3B21807
     for <xxx>; Tue, 18 Feb 2020 11:37:13 +0300 (MSK)
Received: from iva5-057a0d1fbbd8.qloud-c.yandex.net (iva5-057a0d1fbbd8.qloud-c.yandex.net [2a02:6b8:c0c:7f1c:0:640:57a:d1f])
     by mxback28j.mail.yandex.net (mxback/Yandex) with ESMTP id n4zsTxmida-bDvmstEx;
     Tue, 18 Feb 2020 11:37:13 +0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1582015033;
     bh=nMtzOTMEMF118ZNmvMm2zNgLVBQknH8sgcCqzlSZ8wU=;
     h=In-Reply-To:Subject:To:From:References:Date:Message-ID;
     b=vxOHQfkl3jpXOpW2BpE8Wf4t/Xr+i34Nun7FFZbrMpTtoLvCragwNRjhpuj89Cu4P
      qYyL7P4JqHck8HDtP//SHcsg628PLFhuAK9+bj+nNnM8hKahR3um16y0Cp5/YWcfmt
      +KkAks592XWRqc5hLKVBw/Zk8vm9aWjTrNTPV2xw=
Authentication-Results-Original: mxback28j.mail.yandex.net; dkim=pass
Quelltext.i=@yandex.ru
Received: by iva5-057a0d1fbbd8.qloud-c.yandex.net (smtp/Yandex) with ESMTPSA id 8XzJJ5cNoW-bB18qLbk;
     Tue, 18 Feb 2020 11:37:11 +0300
     (using TLSv1.1 with cipher AES128-SHA (128/128 bits))
     (Client certificate not present)
Date: Tue, 18 Feb 2020 11:37:13 +0300
From: irineperm@yandex.ru
X-Priority: 2 (High)
Message-ID: <1213410691.20200218113713@yandex.ru>
To: xxx <xxx>
Subject: I am looking forward to our meeting
In-Reply-To: .com>
References: .com> 
  <332433097.20200217110309@yandex.ru>
  .com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------0481C51013810C2F8"
X-IncomingHeaderCount: 15
Return-Path: irineperm@yandex.ru
X-MS-Exchange-Organization-ExpirationStartTime: 18 Feb 2020 08:37:14.1999
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
de60c75f-91cf-447b-1b9e-08d7b44dc123
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
DB8EUR05FT037.eop-eur05.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 2/18/2020 8:24:18 AM
X-MS-Office365-Filtering-Correlation-Id: de60c75f-91cf-447b-1b9e-08d7b44dc123
X-MS-TrafficTypeDiagnostic: DB8EUR05HT051:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 5.45.198.248
X-SID-PRA: IRINEPERM@YANDEX.RU
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Antispam: BCL:3;
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Feb 2020 08:37:14.1248
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: de60c75f-91cf-447b-1b9e-08d7b44dc123
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB8EUR05HT051
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.3938367
X-MS-Exchange-Processed-By-BccFoldering: 15.20.2729.032
X-MS-Exchange-Organization-SCL: -1
X-Message-Info:
     B3QTFcuUDCUpz6apAYSyQutEA+Q2reBphP+dAjuTKcIRWbsYig5NtQ==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0tMQ==
X-Microsoft-Antispam-Mailbox-Delivery:
     11)(4920090)(6225004)(4950130)(4990090)(9110004);
X-Microsoft-Antispam-Message-Info:
     =?us-ascii?Q?aMNQ+nWweJ/Bg6QDU4eMoyKJHTd+AZVZ2fkAw+OKvBGojwvAxrIqdZMs+/7T?=
=?us-ascii?Q?+3ZQtN+s9M1GVbjcPxm8QFyJcqezL20e3r59toQ9lL8wrnBXawQkbLR/Pp3v?=
=?us-ascii?Q?SLrBzOSCbC2rjp4ylIbNfmYla9GTSIvQcyV3NmP3yHvWrvseQ831fDhK6Bm3?=
=?us-ascii?Q?Z+URy66EoQQAUDKo6Q9YrPLUubyK1pnwRf4WjBDUoQPVU71cIJRXA5yP5+6R?=
=?us-ascii?Q?JHK86y+C4rJcVuiatSPL2EWlP9QDQRXRK+FUOb9tZZJPDzQpsB9BhJOYNV+O?=
=?us-ascii?Q?vJKpJDmQbrH4z7aDhM5U/e0MuVxig/EvQ2xUo39jN4Swum4DJy/sdFl+tjAz?=
=?us-ascii?Q?omQ0c0Y8BUxSSdbcD9JxFpBCg7/kByEFo7xWpS9doh4ew0cmhL+mxa0jTV9r?=
=?us-ascii?Q?4tbsA9PuDaOkIUTMuTW/8nM1DrF0l4kZwD4bJpSapCuD3yARGkF1OBa98AfS?=
=?us-ascii?Q?NPMIywaLuauj4eajdyPypvwSAKjyquLtE1suphg3gQzMa6m/cfP3kP6Cgzwc?=
=?us-ascii?Q?z9YJD0OV/gHXdEFj+GvUIEfCWfQMg+XTzgn87AzdigrTjDH18Nmd7DNhghMj?=
=?us-ascii?Q?Q/CMXrl/xecuPWFr2PNdxrrrwcPWeEQ75ScSsyb6AGOYzBLDSSBZe5XjFYzQ?=
=?us-ascii?Q?680cCy6BXyszR9UnQw2iFcmf5e0F5g2NQa3JPQss/OvtOATt22akafWcxvZU?=
=?us-ascii?Q?jWvsTD6D8LfeSkSNkjfS3SNEK2JA7U0nKRRtMWKrjg2H812/fBAeCuJZPAtP?=
=?us-ascii?Q?Rz6Z/eFBMCfcm4Voy2J7uvQVUuHjS26YaEEdLy49Q+TgkPZmy90LZHUdDkcE?=
=?us-ascii?Q?XG+c0SGRcRoYzaS9QWVSH8niVYbeEGt5JFMixlxT09eG0iZRM71mYUweN4o8?=
=?us-ascii?Q?erlIyzJ4XGL6mo5Sgf7tlk9kLvg97NA0x62EL/D0muvUFve8MsgpCyF95C2e?=
=?us-ascii?Q?8Owrth7oABgVuSYMHrW8oA/te3fnV5EFWUkIh8ymZ9LlWJ0486Xkvlq54C8+?=
=?us-ascii?Q?oRl8oBQ4dsQj0BTyhSaWPESIME4kJcN44GPi36AC2gbvtoBzkGLDy4BOWcbb?=
=?us-ascii?Q?8u+JKrVPTkedfIcs5NokUmTZsuZef8M8DpSAWXHHlC5EdEJB2GE=3D?=
« Zuletzt geändert: 23. Juli 2021 um 23:55 von vierauge »  

irineperm18.jpg ( 157 KB | Downloads )
irineperm18.jpg
irineperm19.jpg ( 128 KB | Downloads )
irineperm19.jpg
irineperm20.jpg ( 43 KB | Downloads )
irineperm20.jpg
Zum Seitenanfang
 
IP gespeichert
 
Slash
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 185
Mitglied seit: 02. Mai 2019
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #10 - 19. Februar 2020 um 10:38
 
Hello, honey, you don't understand, it is impossible to have video call in my area, and to see how we feel together it is better to meet in person
yours Irina

Spoiler:
Received: from HE1EUR04HT099.eop-eur04.prod.protection.outlook.com
(2603:10a6:802:3e::11) by VI1PR01MB4351.eurprd01.prod.exchangelabs.com with
HTTPS via VI1PR07CA0163.EURPRD07.PROD.OUTLOOK.COM; Wed, 19 Feb 2020 07:53:10
+0000
Received: from HE1EUR04FT010.eop-eur04.prod.protection.outlook.com
(10.152.26.52) by HE1EUR04HT099.eop-eur04.prod.protection.outlook.com
(10.152.26.101) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2729.22; Wed, 19 Feb
2020 07:53:10 +0000
Authentication-Results: spf=pass (sender IP is 5.45.198.240)
smtp.mailfrom=yandex.ru; live.at; dkim=pass (signature was verified)
Quelltext.d=yandex.ru;live.at; dmarc=pass action=none
Quelltext.from=yandex.ru;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of yandex.ru designates
5.45.198.240 as permitted sender) receiver=protection.outlook.com;
client-ip=5.45.198.240; helo=forward100j.mail.yandex.net;
Received: from forward100j.mail.yandex.net (5.45.198.240) by
HE1EUR04FT010.mail.protection.outlook.com (10.152.27.24) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.2729.22 via Frontend Transport; Wed, 19 Feb 2020 07:53:10 +0000
X-IncomingTopHeaderMarker:
70691;SizeAsReceived:1957;Count:16
Received: from mxback21o.mail.yandex.net (mxback21o.mail.yandex.net [IPv6:2a02:6b8:0:1a2d::72])
     by forward100j.mail.yandex.net (Yandex) with ESMTP id 9CED850E0A4F
     for <xxx>; Wed, 19 Feb 2020 10:53:09 +0300 (MSK)
Received: from sas8-6bf5c5d991b2.qloud-c.yandex.net (sas8-6bf5c5d991b2.qloud-c.yandex.net [2a02:6b8:c1b:2a1f:0:640:6bf5:c5d9])
     by mxback21o.mail.yandex.net (mxback/Yandex) with ESMTP id HAZAgdetbs-r9giR2bw;
     Wed, 19 Feb 2020 10:53:09 +0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1582098789;
     bh=Y4Bx+DZogdbli8EsXM/GIFySJxrWK+MHrqbLJDclSfQ=;
     h=In-Reply-To:Subject:To:From:References:Date:Message-ID;
     b=TQuKt4ZMSCYheoMCQo6YmoBEqwIcMvLMnXE4taUZlnyAR2DdWi6L4rTRceDBlCHp+
      pjIFJrjgbwlE9Oad6OnnCoqrxF3xT7OPG+mQxMQLxmkDCPYfb8dLEvB7zUikfHmWQ8
      RTiHqcV0dQ48dQN+yJhpuYM0SAd9xtXwFeUSVz/I=
Authentication-Results-Original: mxback21o.mail.yandex.net; dkim=pass
Quelltext.i=@yandex.ru
Received: by sas8-6bf5c5d991b2.qloud-c.yandex.net (smtp/Yandex) with ESMTPSA id qDwypQZ8a7-r9uK1Hkc;
     Wed, 19 Feb 2020 10:53:09 +0300
     (using TLSv1.1 with cipher AES128-SHA (128/128 bits))
     (Client certificate not present)
Date: Wed, 19 Feb 2020 10:53:15 +0300
From: irineperm@yandex.ru
X-Priority: 2 (High)
Message-ID: <1087630917.20200219105315@yandex.ru>
To: xxx <xxx>
Subject: Re: I am looking forward to our meeting
In-Reply-To: .com>
References: .com> 
  <332433097.20200217110309@yandex.ru>
  .com>
  <1213410691.20200218113713@yandex.ru>
  .com>
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-IncomingHeaderCount: 16
Return-Path: irineperm@yandex.ru
X-MS-Exchange-Organization-ExpirationStartTime: 19 Feb 2020 07:53:10.4267
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
71149561-8ac6-4cda-15fe-08d7b510c3bd
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
HE1EUR04FT010.eop-eur04.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 2/19/2020 7:46:53 AM
X-MS-Office365-Filtering-Correlation-Id: 71149561-8ac6-4cda-15fe-08d7b510c3bd
X-MS-TrafficTypeDiagnostic: HE1EUR04HT099:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 5.45.198.240
X-SID-PRA: IRINEPERM@YANDEX.RU
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Antispam: BCL:0;
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Feb 2020 07:53:10.3337
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 71149561-8ac6-4cda-15fe-08d7b510c3bd
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR04HT099
X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.5152229
X-MS-Exchange-Processed-By-BccFoldering: 15.20.2729.032
X-MS-Exchange-Organization-SCL: -1
X-Message-Info:
     FwALClzjOP1TaEsBRNHe4NNixnzEK8MVopPrBdG2dhbpe7cDm4qAxQ==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0tMQ==
X-Microsoft-Antispam-Mailbox-Delivery:
     0)(6225004)(4950130)(4990090)(9110004);
X-Microsoft-Antispam-Message-Info:
     =?us-ascii?Q?qem2j944PVSGTPB0+XT+/+QbDFCtJdJuUWtjTDZ0BWj4VbdI6hBdKM9+o376?=
=?us-ascii?Q?jO9jfZ4FnulI7qVCq4fB0STZQ9Y1qD8egf5TnwsWGiApdMcGL5vCGpdMtQRm?=
=?us-ascii?Q?K+gFBNzgGnjNXFMPvTSxIfYQdxZyWQdf5T0cdsxnNP6QRaGLEdJFqJi+De4k?=
=?us-ascii?Q?2qTG3cRKjomLeOiLpK52OexolvWf3LXKU7gbKa5Bmf57NZ67CqEzbeX03/+V?=
=?us-ascii?Q?urMQY3CenvCnDAHz+b7ZL+TcggVLPldIIKgnul5qhW+fSlr6+/ocZgCT4KXt?=
=?us-ascii?Q?U30/OzrDnVp8PNheXI4j9p9mTAV0xCRO9HeAuI886te9NXOSzLddSztAYddf?=
=?us-ascii?Q?XrpkReUDy+VnQbaZLWvRDitigwkg+2mpYpaUncecQVU0G2Asdxq3CMKUD+ss?=
=?us-ascii?Q?OQyP5rgdsIJB4j0tIsBEjkLBfbQmSu932ntxfy5Vg9n8WjQoRiMY1yT6hcBT?=
=?us-ascii?Q?c75Mt4o9N3GlUwhJrUCDxSqxaG6h+8PZnzcrxdfjeWpSVu5tSRK4oIKrYCc+?=
=?us-ascii?Q?34TL1YlI1A2k4aQkOzP0aycGyjDfPiKPWNXMAafJ2chRJBqdFXHILWqoB9EH?=
=?us-ascii?Q?103OpMUubJOIh2U5esBFNVVIaKbhfnZfXqWcpu183wSBtu7j3SoXeIyAqyV4?=
=?us-ascii?Q?6WvgkGqoV0jiGsAXqDWPLTe5z4FSEAwCCy6caKWsZFXST0hLJhpQIbFkL8qX?=
=?us-ascii?Q?tyB4/WCxu1OKqKGGqUhG87MNfqBw6IwaaecDIaKsd/M6YZgdmI8y+N4PoGfy?=
=?us-ascii?Q?f151CCAeobdj77Y5AnrV1xr1/EvgOwgC9hFCPVyiwQ8C7GehgMcMsx7pQjFd?=
=?us-ascii?Q?g4eFyoPEiJLBZx4zy8tP6PASSl3hSGjSyC0c4ElwNpKKizEdJBjpjs5Zlwvf?=
=?us-ascii?Q?J5p6ZoHEe7v+A7yJxz7WicF8nqfS+qSLMk0MFgXUvhAW/0Qhzh2JFDg60Vev?=
=?us-ascii?Q?bA/v/yPuiUM8/guOoOVNhhspYo8Wj3Xkf+oOe9/cSExUb5Q+m2heoZ4kEDFr?=
=?us-ascii?Q?Tvej0nH4pj2DR4Y9m5YBeiOZZxqM/U1JDxCgdLMjbeQhkMTae5WO2SJ47Oh0?=
=?us-ascii?Q?Eng0pgtN?=
  
Zum Seitenanfang
 
IP gespeichert
 
HannesZ
Scam Warners
*****
Offline



Beiträge: 307
Mitglied seit: 24. November 2008
Re: Irina <irineperm@yandex.ru>
Antwort #11 - 23. Februar 2020 um 21:09
 
Keines der Fotos hat EXIF-Daten.
Luxuriöse junge Dame in luxuriöser Umgebung im "Kriegsgebiet", ca. 25 km von der Frontlinie entfernt.
rmjryrjk.jpg - Knapp bekleidet auf einem Berg, wo es offensichtlich etwas kalt ist.

Ohhh... ohhh... Ärgerlich

Hat sie einen ukrainischen oder einen russischen Pass?
Oder so ein wertloses Dings von der "Volksrep. Luhanst"?
  

Front.jpg ( 118 KB | Downloads )
Front.jpg
Zum Seitenanfang
 
IP gespeichert
 
HannesZ
Scam Warners
*****
Offline



Beiträge: 307
Mitglied seit: 24. November 2008
Re: Irina <irineperm@yandex.ru>
Antwort #12 - 24. Februar 2020 um 11:31
 
Slash schrieb on 15. Februar 2020 um 08:54:
hier ist das Bild gespiegelt


Ja richtig, eine ganze Reihe Fotos sind gespiegelt.
Erkennt man daran:
  

sdkyil1.jpg ( 20 KB | Downloads )
sdkyil1.jpg
Zum Seitenanfang
 
IP gespeichert
 
Webmaster
Forum Administrator
*****
Offline


Abgeschlafft und ausgepufft!!

Beiträge: 23868
Standort: Йошкар-Ола
Mitglied seit: 06. Januar 2008
Geschlecht: männlich
Re: Irina <irineperm@yandex.ru>
Antwort #13 - 26. April 2020 um 18:24
 
Slash schrieb on 18. Februar 2020 um 13:09:
Nach dieser Antwort meine ich 100% Scam..


Ich auch, und der Satz ist 100% gelogen.

Zitat:
video is low here and video calls are blocked


vierauge schrieb on 06. Februar 2020 um 12:08:
Die Mailadresse ist auf einer fragwürdigen Such-Seite auch bekannt.


Auf dieser verteufelten Seite hat jemand nur die Mailadresse in deren Suchfunktion eingegeben, 
die natürlich sofort in deren Datenbank gelandet ist. Einen Nachweis sucht man vergeblich.
« Zuletzt geändert: 26. April 2020 um 18:26 von Webmaster »  
Zum Seitenanfang
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema