Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Sheryll Goedert <sheryllclaiminc@yahoo.com> (Gelesen: 743 mal)
 
Roter Platz
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 291
Standort: Selzen
Mitglied seit: 25. Oktober 2012
Geschlecht: männlich
Sheryll Goedert <sheryllclaiminc@yahoo.com>
26. August 2020 um 17:05
 
Hallo

Der Ausbruch des Koronavirus ist nicht nur eine große Gesundheitskrise, sondern auch eine große wirtschaftliche Störung, die dazu führt, dass Menschen ihren Arbeitsplatz verlieren und es schwieriger wird, sich um ihre Familien zu kümmern. Wir haben gehört, dass ein wenig finanzielle Unterstützung viel bewirken kann.

Ich bin Sheryll Goedert aus Florida, die Gewinnerin eines Jackpots in Höhe von 396,9 Millionen US-Dollar aus der Power-Ball-Lotterie am 29. Januar 2020. Mein Jackpot war ein Geschenk Gottes an mich, daher hat meine ganze Familie zugestimmt, dies zu tun.

Wir spenden € 1.500.000,00 (eine Million fünfhunderttausend Euro), um 10 Einzelpersonen und kleinen Unternehmen zu helfen.

Kontaktieren Sie mich per E-Mail: sheryllclaiminc@yahoo.com
Kontaktieren Sie mich per E-Mail: sheryllclaiminc@yahoo.com
Kontaktieren Sie mich per E-Mail: sheryllclaiminc@yahoo.com
Kontaktieren Sie mich per E-Mail: sheryllclaiminc@yahoo.com
Kontaktieren Sie mich per E-Mail: sheryllclaiminc@yahoo.com

Für weitere / vollständige Details und bitte nehmen Sie dieses Zeichen als Geschenk von mir und meiner Familie an.

Freundliche Grüße,
Sheryll Goedert
sheryllclaiminc@yahoo.com
Sheryllclaiminc@yahoo.com
Sheryllclaiminc@yahoo.com
Sheryllclaiminc@yahoo.com
Sheryllclaiminc@yahoo.com

Spoiler:
Received: from 10.218.104.251
by atlas112.aol.mail.ne1.yahoo.com with HTTP; Tue, 25 Aug 2020 15:21:35 +0000
Return-Path: <investasi.migas@esdm.go.id>
Received: from 103.87.161.92 (EHLO asav.esdm.go.id)
by 10.218.104.251 with SMTPs; Tue, 25 Aug 2020 15:21:35 +0000
X-Originating-Ip: [103.87.161.92]
Received-SPF: pass (domain of esdm.go.id designates 103.87.161.92 as permitted sender)
Authentication-Results: atlas112.aol.mail.ne1.yahoo.com;
dkim=pass Quelltext.i=@esdm.go.id Quelltext.s=dkim_tm;
dkim=perm_fail Quelltext.i=@esdm.go.id Quelltext.s=460C09C8-081C-11E8-844E-0A7728A13B57;
spf=pass smtp.mailfrom=esdm.go.id;
dmarc=success(p=QUARANTINE,sp=QUARANTINE) Quelltext.from=esdm.go.id;
X-Apparently-To: thomas31855@aol.com; Tue, 25 Aug 2020 15:21:36 +0000
X-YMailISG: 4gTEiYgWLDsXnN3lpeGe_QeEpL_CsHbECRrnz98Elew6Sy64
TtrRHiabf4PX4c76VAMXbNvcXth9FBAADVpLVzbMATrEoLckaJGBiTLIlr.v
VZnsOkUkQsciwxHlNyLSDMVaOcEOx1bZJgwUrHZuaZy0lZyAl32piEQQj_cq
VYBJ.Ua07n2ODqL0MbopyPYk92hgXK0xhlCiwftZgpatxQi3go0o70cigdv5
ya8ZiRMXajkbQkES2oqOlnnmtEn9Qr2hyzTDkb8XXz6zCgHwK91T_lLuok.i
708H_lhGI_qHWUnJdU05YgXyrYsT0Hax3ub4E.h1gSStiipIvyjo_C9MA.S8
49Ew8Wj_zKWW8aaVilj4iO8epPHxaKfpKorNaeoDL.dtjY.cVzGOLHAH0JQh
_EX4PBgZFzKxVyYQqXS0J2CWsa97IiWsbOXmKXieC8ZnPNnB2aPn2pvpIlGV
ImrtgMrLkvdFAT8GcTdUf6ktCCEJTWOjQapV8kY2uDterShMyTAOeSkeSFgd
tVcbDd7PoMso2_c89TWqnXmd6tY.8uDa6eyHKhpf4zac_81mPWhlZBHkyrX8
pXdKuxRKbNHFo4IjWWA1JQg8gFoQRHrkEeZYJ9EKNTEDYiE7IiILM43vqyWX
MM8GXGiu7mjc7kUkvHCTtCUx2EnY6HFu8XdqtSusOxbHQ7.qXUAEUNTTGIag
XXvyc.zSLvwRBLAPUwxOUP1DGREYkNqRnx5YgUhzZOYBUpt_0hO3S97H8vC_
X0NAShABvgJ_QTmHQJoik7AjUKqDda9qOx0Xw0BRuH_C6M2mObjF1Dd6YfXZ
vAKjevo9scRpMldlLkOm6IOBTDh.ikOW1RTFDljaqW5UyqxyRPvcDhoB3bL_
ZdPwvMkMtvdNthHyGhd8_NejhGL2b2Rcj5BbV_AtbHsA9nhzsnjV9uklqgs2
gygUqiIRCslXKf5CSgEtST6MfycMp3atnDriWNA8j3tFlbtJeD.27eeuZ9ft
5MeD4JVAGeQj.w8eBL0lQfpExP9it.Je_eGnYgBHof7OsQlHRv5KXOzSmfKl
kGHm2Iw.scGRMwr7ajr_EL6u8ggSFi2kIkJ1K9G7PgVtVZzgg1aKRgjZJirM
UkonP4QQPRJ5WNFiPUFDQluysXK2R_Dd2Jd233vk0tbibPwbbNOQCus9fCfk
lSb8aQKiLZfx8WKLnpSSeKkPNA8lKu4zMFlf.FBGU5Wsb87GwCQTQV.wJ6Gn
Rvd6wD_EM2my7iplXCJ4PovtmG743ePWIJrP2d4WvOFDxDIoJMgrS8raG2Xj
Hj1Srlbmuo04oF1abq6xMytal7daaB.n3YicpYuVac0ZDQLVn7ay4GNhVGsf
nlzTB6Po53O5G.wBjLjbUh5DEzVv.xISzfzQHxDr1FdEytuz0.0niw41g1eC
Y3tvAPwybc4RJ3SeXZQ.8ETEMbBNPQUNnSLqALgHKlKvTH.s5iagOIbVRiyd
fQge_m91mLJskjpUxg0LSz97hq00xtsHFKMHGrvLrFa1CyOa47hN9yeZ0hsh
n5rgRXfrKs0QfHcS79rA0XRlGI7WLvS7yo48hXZe7E8jVB.o1WLGKlmlR1N_
0asDrDc0rOMU3XzYGGOgTasFPCZOQ0S4vTeSdFfvx2vSsMDGa3keYGgqWGL8
YSvsj7U3JzU.oVDkew7SMPcoSQdigL9HEibQGa7KBzxX8R2qmSHnMTff8wku
CcsFdPDF_ae1HEt__ykrcuq_xc9FLdheTDQjklXqBs2MJawEwQBd.cdvsxsH
1dl31TUXkiw8oY5Rh7.XLJlUT5vYS6vBN8mEqjrdTGfpITx6WZ5yvTFd3Yat
y3ejDLAIRxX0Vgqu6HwXn9C4u5LVsSm0rSdkneIy5vEMkkC_gM.ks8bAu.lu
fRFcjk8-
Received: from asav.esdm.go.id (unknown [127.0.0.1])
     by IMSVA (Postfix) with ESMTP id 8DA90C94CF;
     Tue, 25 Aug 2020 22:13:04 +0700 (WIT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=esdm.go.id; s=dkim_tm;
     t=1598368385; bh=Syasc4ZHmb/pjO74Op6BpDcw6htxnzniLWcqBG/eBwE=;
     h=Date:From:To;
     b=syhWVCVCYauLybSNSKrnPU/lTKn2XN6lyMZPr/DW48QduI9MY34x1PnG9ha3Wvy5W
      w4NdCc3WIuhtqC5o8meHxRy5gfXQtj0ENEneiV3RPy0TPBTnSIo2tiuoWMB98uJrog
      NDeZhjFF5KoLq2W6LFDm/iKeV7hryOngcYspPK7HnqtBT/LgpuAOYN98Ieh6uMkenn
      dRVPiDYdic71xi8ptU4ixTNC1jOOrw5IheU6MWVJ/MxteGYnn2A/tYqRobe23zMCby
      kX+pEl3ixks82rJ2zcc3sxocynoF7XszJy+LNgfTnd49ynZus2RWyMo8dy06AKMSN1
      WOOeJzxxK5D9w==
Received: from asav.esdm.go.id (unknown [127.0.0.1])
     by IMSVA (Postfix) with ESMTP id 76016C94C3;
     Tue, 25 Aug 2020 22:13:04 +0700 (WIT)
Received: from zkesdmta1.esdm.go.id (unknown [172.16.16.220])
     by asav.esdm.go.id (Postfix) with ESMTPS;
     Tue, 25 Aug 2020 22:13:04 +0700 (WIT)
Received: from localhost (localhost [127.0.0.1])
     by zkesdmta1.esdm.go.id (Postfix) with ESMTP id 662B14189FF4;
     Tue, 25 Aug 2020 22:18:58 +0700 (WIB)
Received: from zkesdmta1.esdm.go.id ([127.0.0.1])
     by localhost (zkesdmta1.esdm.go.id [127.0.0.1]) (amavisd-new, port 10032)
     with ESMTP id sFXYh-Cjr6MV; Tue, 25 Aug 2020 22:18:58 +0700 (WIB)
Received: from localhost (localhost [127.0.0.1])
     by zkesdmta1.esdm.go.id (Postfix) with ESMTP id D4DAC4189FE7;
     Tue, 25 Aug 2020 22:18:57 +0700 (WIB)
DKIM-Filter: OpenDKIM Filter v2.10.3 zkesdmta1.esdm.go.id D4DAC4189FE7
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=esdm.go.id;
     s=460C09C8-081C-11E8-844E-0A7728A13B57; t=1598368738;
     bh=Syasc4ZHmb/pjO74Op6BpDcw6htxnzniLWcqBG/eBwE=;
     h=Date:From:Message-ID:MIME-Version;
     b=C6wGe/8b3dvC0PGxscE7gpMDR1VuLSimafnbRMARFItNV0X9HNvOWGTS+6L7Z9UNo
      s/qblSURp41szZhggGj8I8PPBxoJhjbMieWpa7onjuRlhe4zvMgUSxFTLCjN53Hg8k
      EeaPNvn3AerI/JIqlxtV/iZnTkUexzd3WiKfTZ20=
X-Virus-Scanned: amavisd-new at zkesdmta1.esdm.go.id
Received: from zkesdmta1.esdm.go.id ([127.0.0.1])
     by localhost (zkesdmta1.esdm.go.id [127.0.0.1]) (amavisd-new, port 10026)
     with ESMTP id OYyOMc67FSTy; Tue, 25 Aug 2020 22:18:57 +0700 (WIB)
Received: from zkesdmbox3.esdm.go.id (zkesdmbox3act.esdm.go.id [172.16.16.217])
     by zkesdmta1.esdm.go.id (Postfix) with ESMTP id A786D4182B94;
     Tue, 25 Aug 2020 22:18:52 +0700 (WIB)
Date: Tue, 25 Aug 2020 22:13:39 +0700 (WIB)
From: Sheryll Goedert <investasi.migas@esdm.go.id>
Message-ID: <1683296359.5483720.1598368419667.JavaMail.zimbra@esdm.go.id>
Subject: SPENDE
MIME-Version: 1.0
Content-Type: multipart/alternative; 
     boundary="=_701dd987-bfe5-470f-8f8b-9d2da4437e51"
X-Originating-IP: [172.16.16.223]
X-Mailer: Zimbra 8.8.12_GA_3794 (ZimbraWebClient - GC84 (Win)/8.8.12_GA_3794)
Thread-Index: Xm7lrSvI3xnJoxpC6hLaO3CLD9svrg==
Thread-Topic: SPENDE
To: undisclosed-recipients:;
X-TM-AS-GCONF: 11111111
X-TM-AS-SMTP: 
     1.0 emtlc2RtdGExLmVzZG0uZ28uaWQ= aW52ZXN0YXNpLm1pZ2FzQGVzZG0uZ28uaWQ=
X-TM-AS-ERS: 172.16.16.220-127.9.0.1
X-TM-AS-Product-Ver: IMSVA-9.1.0.1600-8.6.0.1013-25626.000
X-TM-AS-Result: No-3.509-5.0-31-10
X-imss-scan-details: No-3.509-5.0-31-10
X-TM-AS-User-Approved-Sender: No
X-TMASE-Version: IMSVA-9.1.0.1600-8.6.1013-25626.000
X-TMASE-Result: 10-3.508700-10.000000
X-TMASE-MatchedRID: vOxYZG9z2pix5jSg9w/+4ZMgA7HxjxQjNhGbHEbMPGlrHpPM8nydcdSq
     ughkhJtI0XybfMpoTBIkAkQLN4nCtHsA4K6o1HElcjLMMEdbK+u+DavuWyFXZs1L9/s760UcL3c
     bWSYN50z8XBAq3URYF0rm4/LhsKJ7p4Jj3P4I5ysJeoSLtQ5H8xj1Bu6PxgYDLUZqAWpseRCzj8
     acNZPwF6rrf+RNKG+tfEoBxYI+88QnhfzWVCVGLP3pRNucgZGfPkCsNeKoHxs87kVjc+cqu/NO7
     flRFqXmQKVOVO1XsoXZPU+b5RcHaEPIUO20h2j8ydRP56yRRA99UE7z5Txou8O/l0Ny5PZ5idzG
     M77kSxb3aCtTBCBhl436uZ2JD8HYXHEPHmpuRH3guj5j5I67f2mRqNBHmBvejGzxQPJa3rUQHUb
     Qx1U5NSIQ5mZ5SqHPD4DXRnx3k0xPriMiylaevWgOxk6kY8QASEp1LRwl3JNRc0hFMNebd2U5vF
     Ld21EassXV5EqpXBwL4Vmg0yRPc0r9kFB1dD28T4rjybg1Y99NhP4J88Nmb1w7vnPzDNp2NLINU
     QCkhQmIDvDDkQ2+iviEHhZkhMRnFoir1bv8X6H9OW0+erf4zW8qTfjf5dvh+rL5VW+ofZc=
X-IMSS-DKIM-White-List: No
X-TMASE-SNAP-Result: 1.821001.0001-0-1-12:0,22:0,33:0,34:0-0
Content-Length: 4710

--=_701dd987-bfe5-470f-8f8b-9d2da4437e51
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


über Indonesien eingeliefert:
 
Code
Alles auswählen
 IP Address 	103.87.161.92
Country 	Indonesia [ID]
Region 	Jakarta Raya
City 	Jakarta
ISP 	Departemen Energi dan Sumber Daya Mineral
Domain 	esdm.go.id
Net Speed 	(COMP) Company/T1
IDD & Area Code 	(62) 021
ZIP Code 	10110
Weather Station 	Jakarta (IDXX0022)
Mobile Carrier 	-
Mobile Country Code - MCC 	-
Mobile Network Code - MNC 	-
Elevation 	13m
Usage Type 	(GOV) Government
Anonymous Proxy 	No
Proxy Type 	 



Zitat:
Date: Tue, 25 Aug 2020 22:13:39 +0700 (WIB)
« Zuletzt geändert: 26. August 2020 um 17:24 von Wesermann »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Roter Platz
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 291
Standort: Selzen
Mitglied seit: 25. Oktober 2012
Geschlecht: männlich
Re: Sheryll Goedert <sheryllclaiminc@yahoo.com> <haraldpoewe79@gmail.com>
Antwort #1 - 01. September 2020 um 17:15
 
Den ganzen Mist nochmal, gleiche Mail anderer Quelltext:

Spoiler:
Received: from 10.195.66.223
by atlas102.aol.mail.bf1.yahoo.com with HTTP; Tue, 1 Sep 2020 13:07:38 +0000
Return-Path: <haraldpoewe79@gmail.com>
Received: from 186.208.210.251 (EHLO webmail.unifenas.br)
by 10.195.66.223 with SMTPs; Tue, 1 Sep 2020 13:07:38 +0000
X-Originating-Ip: [186.208.210.251]
Received-SPF: softfail (domain of transitioninggmail.com does not designate 186.208.210.251 as permitted sender)
Authentication-Results: atlas102.aol.mail.bf1.yahoo.com;
dkim=unknown;
spf=softfail smtp.mailfrom=gmail.com;
dmarc=success(p=NONE,sp=QUARANTINE) Quelltext.from=gmail.com;
X-Apparently-To: xxxxxx@aol.com; Tue, 1 Sep 2020 13:07:39 +0000
X-YMailISG: raOAxAUWLDts1HV8.MJiB_G.uhaudW74EJGjy0i_xS7JD4El
RvKUihkXlgyxOtAwx0BHguRtWqxJ7yYCKYUsZvwX_saJsW3_qrrkWvtuWDqH
56rSnq7Q36RkX7mr4iW6eseKaIkV.cgKjEoHF.KGsrbiGnGOPWpMsjxd8M3y
Kha1jkgdkEoPk0MXOABtn6PZiJkdotaEEhuBvTvs1qrr5U9NTiFznasorHo1
jKwzm5n955ldp_J9Vjl2nbAicTFJu30C8oXUuggDDUJ2O8cJD1QfQNEAa9DY
iTgNYsjDSVAmAILzl8leublgj.z5ylvXUsm46jzwPK.EPnxpaKmtd7fzI2Uh
3s5VMOhmRZibyvsyxJY9KhcGTpvrig9K26gtJB6HMD44Sb928Fm2cAQNHKN5
kaT93jHL3zVsSp3OT04aakqqUq6rd0DjJdmyC24DYfJXVlfxKV8icVGv9dVx
AWMaoGE8DW7WVDYZe_2d8PnOI7LCNnFjaDv3ylOFjYx0T2xUPzaXQl8CWzce
obLzv5oZBgJCiLMvjiy3KuhmrltdZoFrNwLjI6FnARWZ.Mbb15unnd1v1Rvl
l6ydI9KA8NHImbtONQZHFPzrDVqU7uEdfxTxKO7TDcaW2gcWKM6O9ifgAUOJ
AyZSEhqfxk4WROEeIg05G_y.6MU.N1CFzYf5urbtnFiPoa4wXfFzdQlRY_V7
XqlKS0f9TtQ_m1T4cr95ZQMBVbv7ET5lWCBWbElfHa.NHkdAhwgla5N_GMIa
mAUZyMEqzwMecB5zs6Czj.MnPs669qO9Jql3VX4awnHgnYJQcVbiihxf.F4S
uaLYr50xZAWyxMC1vom1DBSDurO6k2I1QBmQ2mYS5CR96Dj3jdaZ87nLg9BS
0hEE_Y13coSHk9zKCVlLsRb8RupQHXRr4sa3M5SFZPidZtW8ibxuJlGfC3LK
WCG_uRSd07jelwfLh3ok8sBSS7w46RUFaye1PSi7s6fDIMQiq8ThtMPjwLPA
v5oV7R3s4YP9uomXv_..eZnDq_pYbsnCBBRdrZ0514u62Jk4L5tKNC3vPcKh
m3aRNXIYgSwubRTfpKq0sg5GTbm84UqZWC1Y1NpP5smfm8qYMis3JxYHVTIJ
ReFougOx7exrA7nCR7f9KG__f2OwFEGBf9sxee7l6FqUiT5IgM55a3nN0xes
Jom_YFB_jCvTYcWKWyUSKO77Qqj221j6psEXRXvDTlKd7pgCj14b7noX6Kzd
4xGegLN_8w--
Received: from localhost (localhost [127.0.0.1])
     by webmail.unifenas.br (Postfix) with ESMTP id 2E0931627225;
     Tue,  1 Sep 2020 10:05:52 -0300 (-03)
Received: from webmail.unifenas.br ([127.0.0.1])
     by localhost (webmail.unifenas.br [127.0.0.1]) (amavisd-new, port 10032)
     with ESMTP id G27I6I5D1g_3; Tue,  1 Sep 2020 10:05:52 -0300 (-03)
Received: from localhost (localhost [127.0.0.1])
     by webmail.unifenas.br (Postfix) with ESMTP id ECF071627227;
     Tue,  1 Sep 2020 10:05:51 -0300 (-03)
X-Virus-Scanned: amavisd-new at unifenas.br
Received: from webmail.unifenas.br ([127.0.0.1])
     by localhost (webmail.unifenas.br [127.0.0.1]) (amavisd-new, port 10026)
     with ESMTP id z-kYCgYnf-rd; Tue,  1 Sep 2020 10:05:51 -0300 (-03)
Received: from [154.127.53.6] (unknown [154.127.53.6])
     by webmail.unifenas.br (Postfix) with ESMTPSA id 0896011AC987;
     Tue,  1 Sep 2020 10:05:47 -0300 (-03)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: SPENDE
To: Recipients <haraldpoewe79@gmail.com>
From: "Sheryll Goedert" <haraldpoewe79@gmail.com>
Date: Tue, 01 Sep 2020 06:05:49 -0700
Reply-To: sheryllclaiminc@yahoo.com
Message-Id: <20200901130548.0896011AC987@webmail.unifenas.br>
Content-Length: 1395


Über VPN Server USA:

Code
Alles auswählen
IP Address 	154.127.53.6
Country 	United States of America [US]
Region 	Virginia
City 	Reston
ISP 	Digital Energy Technologies Limited
Domain 	host1plus.com
Net Speed 	(COMP) Company/T1
IDD & Area Code 	(1) 703
ZIP Code 	20190
Weather Station 	Reston (USVA0645)
Mobile Carrier 	-
Mobile Country Code - MCC 	-
Mobile Network Code - MNC 	-
Elevation 	100m
Usage Type 	(DCH) Data Center/Web Hosting/Transit
Anonymous Proxy 	Yes
Proxy Type 	(VPN) VPN Server 



Zitat:
Date: Tue, 01 Sep 2020 06:05:49 -0700
Reply-To: sheryllclaiminc@yahoo.com
« Zuletzt geändert: 01. September 2020 um 17:16 von Roter Platz »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema