Google

World Wide Web anti-scam

Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Clara <gazonyla@gmail.com> (Gelesen: 43 mal)
 
Kotelett
Themenstarter Themenstarter
General Counsel
***
Offline


Don´t call me Schnitzel

Beiträge: 2.616
Standort: Hamburg
Mitglied seit: 16. August 2010
Geschlecht: männlich
Clara <gazonyla@gmail.com>
21. November 2020 um 11:52
 
I think you also sit and miss at home?
I live in a European country! Have you visited Holland before?
The first letter is sent by the agency, but you can write directly to my house gazonyla@gmail.com

Spoiler:
Return-Path: <amiesiskohk9@mail.com>
Received: from mout-xforward.gmx.com ([82.165.159.131]) by mx-ha.gmx.net (mxgmx015 [212.227.15.9]) with ESMTPS (Nemesis) id 1M58C6-1khRsB0dUa-001BOA for <xxx>; Sat, 21 Nov 2020 07:00:23 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.com; s=dbd5af2cbaf7; t=1605938420; bh=TSo91nK2kPTWV8MdZhU8l4T8HNxSgxYxPh7/DJuRaEA=; h=X-UI-Sender-Class:From:To:Subject:Date; b=2gvF1sBguI6muQEAd4eAAxl92xFPx9aUlA659Z3shsrERsw98ShIWegWIYtMWwkTx cfz8ZmiRBAK/rv6j9E342qmZ6g9Z79paM/JH1laDg+jLRJ2wiaesLCucMspmbl+c/P C9xfGiJvuVbqjGks/ngjtfmZfQHO+Nj2y+/qBRds=
X-UI-Sender-Class: 214d933f-fd2f-45c7-a636-f5d79ae31a79
Received: from [103.99.30.236] ([103.99.30.236]) by web-mail.mail.com (3c-app-mailcom-lxa05.server.lan [10.76.45.6]) (via HTTP); Sat, 21 Nov 2020 07:00:20 +0100
MIME-Version: 1.0
Message-ID: >
From: Clara GQb <amiesiskohk9@mail.com>
To: xxx
Subject: Happy and delicious holidays!
Content-Type: multipart/mixed; boundary=sgnirk-07a006e5-9d01-4d6e-918c-d9fc3fcefca3
Date: Sat, 21 Nov 2020 07:00:20 +0100
Importance: normal
Sensitivity: Normal
X-Priority: 3
X-Provags-ID: V03:K1:L0qZOBJt4D97Yt7riT6DO0aD8HdNoG29EqKoUZ2YpsUooE4z7G+Ojq4aeIajweNJ/u44z RxTQDLSAmDux4igQTf99DfvCIW0ax4j83pekBjGwUUVyiFwF/S/ZEV1q3Ff1Z49IaAbzWvZL6EKd lh7sAzh52Z7xcKYzpYrvSh5FngPMiRSk7gmEEZvlHHf1V88b2BWFWHHIB37Zeenj6CRbrsm96P3p unT1oGLF1jIIhUraUqgs54bN9sG1CSmWGYIOcNS5FLE4fNsLRSJrMmwIyadg2nda/D5UoRu739K5 2Y=
X-Spam-Flag: YES
X-UI-Out-Filterresults: junk:10;V03:K0:5jxta1GaJN0=:34YjPIFedMdQ0nLYqLPGD7Fy /bRA9uAdpU0t+qCt6fTdE0gsjiwL4hBB/Wm4lZNkKmvP5z3HF5qgUb2tR7M48G+vnc7qhRm8W +fllehIi+zulX4w92lUgYgdYjoxeZpHlGLTHoZK3j8J6HlV8Yh677+eUes6vIIza1Y7pbOxyY sQhN6RDylOmGMh0HZN+bnLtWEeg3lwmL3d9sI2NfNjRPEjEu58Iu16XGVqDC9PfeR/0jmiVLC eVusi+SbLwureTYDI4CSF9Wtyyc7OAidQfs2yTpe5cbjTpv9m7PAbrtMM5qv6QfK/SoZDHjBz Ic1JxWThum+3OES0LeA1iujmio0tEz8HKZ4DF/6KQ+ngUFn2ks7c44d9I80bgXuaywZMUlNaP e8ZQCrV4d+r2Ct2hCu0C4SB12CdLSPDbx3gAI0uU/SSvcNGJ1ET7HqR/5vqdbrNl2uGpGzKR6 QI1RiihiI6B0re7V0LRw53anLEUmvTzhhjJTWblxyiKuixcFEDJkCtpwRVc30Yb/SbJdPtAIC +5Ji5Q4ii512trOOQhnLOhi5F9MlXqKWInzMYkL7tJW7rI+JCHfbHp8iU3uWkdLPvzIpNC9NS huq+QicJNLdSfkYsvSB3qa7nkDzCGVk/nPKCDut+FfPG3R9hQFyseO+e0l3+Tty6uTl0s50gb O+NUOrgqhyv+pqCU+ImEdAZt5ObPfcE2N9FkuDr5OnOIg==
Envelope-To: <richardhausmann@gmx.net>
X-GMX-Antispam: 5 (nemesis mail header analyzer); Detail=V3;
X-Spam-Flag: YES
X-UI-Filterresults: junk:10;V03:K0:HcgjEffEdqo=:9hw5epg72LEgf4ujEM8Tv6DAe+ii


Gleicher Text und Bild bei:

Clara <liedimile@gmail.com>
« Zuletzt geändert: 21. November 2020 um 19:38 von Stiray »  

3129555.jpg ( 16 KB | Downloads )
3129555.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
vierauge
Forum Administrator
*****
Online


Ich tu nix. Ich will nur
spielen.

Beiträge: 11.782
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Stimmung: gut druff
Re: Clara <gazonyla@gmail.com>
Antwort #1 - 21. November 2020 um 12:18
 
Über Myanmar.

Code
Alles auswählen
103.99.30.236 - Geoinformationen
IP-Adresse	103.99.30.236
Host	kunde2-236.vnet.cloud
Lage	MM MM, Myanmar
Stadt	Yangon, 17
Organisation	-
Isp	- 



Zitat:
Date: Sat, 21 Nov 2020 07:00:20 +0100


Zitat:
Have you visited Holland before?
  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Online


Ich tu nix. Ich will nur
spielen.

Beiträge: 11.782
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Stimmung: gut druff
Re: Clara <gazonyla@gmail.com>
Antwort #2 - 21. November 2020 um 12:24
 
Das Bild wurde bei Model Elya Pipkina / Elja Pipkina / Эля Пипкина aus Moskau geklaut.

https://vk.com/id245840351

https://vk.com/idpretty_titty
https://vk.com/id342687428

http://www.fashionbank.ru/models/user/125384.html

Weitere Themen:

Yulia <akyuliya9@gmail.com>
  
Zum Seitenanfang
 
IP gespeichert
 
Bommo
Consultant
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 6.938
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Re: Clara <gazonyla@gmail.com>
Antwort #3 - 21. November 2020 um 18:02
 
Quarantine gives us the opportunity to get to know.
Lives in Holland for many years.
The first letter is sent by the agency, but you can write directly to my house  gazonyla@gmail.com

Spoiler:
Return-Path: <kandacetia2o7@mail.com>
Received: from jolnir.orangewebsite.com
        by jolnir.orangewebsite.com with LMTP
        id wEyeNt5/uF+TuwAARr05yQ
        (envelope-from <kandacetia2o7@mail.com>); Sat, 21 Nov 2020 02:47:58 +0000
Return-path: <kandacetia2o7@mail.com>
Envelope-to: xxx
Delivery-date: Sat, 21 Nov 2020 02:47:58 +0000
Received: from mout.gmx.com ([74.208.4.201]:34877) by
jolnir.orangewebsite.com with esmtps  (TLS1.2) tls
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from
<kandacetia2o7@mail.com>) id 1kgIwQ-000CR0-EI for xxx;
Sat, 21 Nov 2020 02:47:58 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.com;
        s=dbd5af2cbaf7; t=1605926836;
        bh=RY4AscO0IVN85is08X+BYdny+oLmsJrZxcJREMdQM+U=;
        h=X-UI-Sender-Class:From:To:Subject:Date;
        b=LECXLvymZnyQ4pKWsAOjEGF1f/9Y169pcWX1O4lLvT1+9nOquzp4o6EM3J3kvZU7V
         xNL0pdHezChTit8tBkMI6OuT/PhG5C/andRzqbkaUvS5PTbqBUQUMEy/3fPQazopIu
         nL084vrz8bcz9aQyJZX/xH7xIaernVyOwXmwHbXE=
X-UI-Sender-Class: 214d933f-fd2f-45c7-a636-f5d79ae31a79
Received: from [177.136.66.228] ([177.136.66.228]) by web-mail.mail.com
(3c-app-mailcom-lxa11.server.lan [10.76.45.12]) (via HTTP); Sat, 21 Nov
2020 03:47:16 +0100
MIME-Version: 1.0
Message-ID: >
From: Clara CoE <kandacetia2o7@mail.com>
To: xxx, xxx@yahoo.com
Subject: Active and days!
Content-Type: multipart/mixed;
boundary=rekceb-7fed79d1-832a-4586-a9f3-b9573dbbbc9e
Date: Sat, 21 Nov 2020 03:47:16 +0100
Importance: normal
Sensitivity: Normal
X-Priority: 3
X-Provags-ID:


Zitat:
From: Clara CoE <kandacetia2o7@mail.com>
Date: Sat, 21 Nov 2020 03:47:16 +0100


Bild wie im Eröffnungstrhead
« Zuletzt geändert: 21. November 2020 um 19:52 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Bommo
Consultant
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 6.938
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Re: Clara <gazonyla@gmail.com>
Antwort #4 - 21. November 2020 um 18:04
 
We all know about the situation in the world.
I live in a European country! Have you visited Holland before?
The first letter is sent by the agency, but you can write directly to my house  gazonyla@gmail.com

Spoiler:
Return-path: <angham_2009@mail.com>
Envelope-to: xxx
Delivery-date: Sat, 21 Nov 2020 10:29:11 +0100
Received: from [::1] (helo=asus)
        by asus with esmtp (Exim 4.92)
        (envelope-from <angham_2009@mail.com>)
        id 1kgPCg-0002s9-Mk
        for xxx; Sat, 21 Nov 2020 10:29:11 +0100
Delivered-To: xxx
Received: from imap.gmail.com
        by asus with IMAP (fetchmail-6.4.0.beta4)
        for <xxx> (single-drop); Sat, 21 Nov 2020 10:29:10 +0100 (CET)
Received: by 2002:a17:906:7852:0:0:0:0 with SMTP id p18csp1994501ejm; Sat,
21 Nov 2020 01:29:04 -0800 (PST)
X-Google-Smtp-Source:
ABdhPJxNUT7fUvbTcs5vydf0lLDNERbXyaCs1IRmkhjV9tR+Boy1s+BZtO3hKXPJ14gnkcV+VVSW
X-Received: by 2002:a02:c482:: with SMTP id
t2mr23108311jam.17.1605950943890; Sat, 21 Nov 2020 01:29:03 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1605950943; cv=none; d=google.com;
s=arc-20160816;
b=MkWi84k7iQKSGZQ2Wbx4NsmNSGEXsirM+Vjix2GoiLRGfGu4KZIquh9+p1y0QEuCIB
RxTr8QS43AOGMJapViZrIZSdxcOqSA9ys/p1zQNjmgy8OXDrZA/zurNOIjhaKCbV2tG1
1etPbu36s+FTVYMDVkJZTDWz4N+5hTtQ5IG5EjlSMRrAakhg7eQ5X+I3Vx6CWyewTpii
ZN6F1ocaQJ9DmKpejgiWB2fIbufLpPA+Utlchfyv36jw87b66TnSJC9+8RZnwjRqIRYg
LO0GBtiUuXDM6SuSmkCp2qMYHjFu9rY2wiwB8OqaxFBbqu5yWXG43MHQdoVI2VNfuCze gpQA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
s=arc-20160816;
h=sensitivity:importance:date:subject:to:from:message-id:mime-version
:dkim-signature; bh=oFwzfdrR/YyZnQf/jLDtSPW75lxiJAXy2bN5iEIfwPU=;
b=QQ78FdrsMoOHj3Qp/XzDYyQ50rHxwRbSIYwRS1ydFGFy7WPazboBnVzCtjtZo3yZb8
PghSa8UJV9Kz8tEYciA4t3cxf45KG8pnrWIcbt+4mHsRF8Dm0YfuxvEznA6n7lCu/ZfE
tTMUahoNlYLomdaWXJ4IGj/yFGwuUKSgGUdzsm51nenuZPV5UFfUvZOin8hvXfz0vMid
Yao4VLlNf/+i6YkKLsLD52GA3Sn7WTWehnkHi17GyoG0U9bMikip4RUCKS0CCROTolWz
sHIfQKO//enZT6/r3vydRzQue7Vjl7LSqmeGCcObJoSxYhqKq9HptMrwGaxJqnFq3+HM rRug==
ARC-Authentication-Results: i=1; mx.google.com; dkim=pass
header.i=@mail.com header.s=dbd5af2cbaf7 header.b="n/Y7ZuEV"; spf=pass
(google.com: domain of angham_2009@mail.com designates 82.165.159.130 as
permitted sender) smtp.mailfrom=angham_2009@mail.com; dmarc=pass (p=NONE
sp=NONE dis=NONE) header.from=mail.com
Received: from mout-xforward.gmx.com (mout-xforward.gmx.com.
[82.165.159.130]) by mx.google.com with ESMTPS id
v6si5089827ilg.5.2020.11.21.01.29.03 (version=TLS1_3
cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 21 Nov 2020 01:29:03
-0800 (PST)
Received-SPF: pass (google.com: domain of angham_2009@mail.com designates
82.165.159.130 as permitted sender) client-ip=82.165.159.130;
Authentication-Results: mx.google.com; dkim=pass header.i=@mail.com
header.s=dbd5af2cbaf7 header.b="n/Y7ZuEV"; spf=pass (google.com: domain of
angham_2009@mail.com designates 82.165.159.130 as permitted sender)
smtp.mailfrom=angham_2009@mail.com; dmarc=pass (p=NONE sp=NONE dis=NONE)
header.from=mail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.com;
s=dbd5af2cbaf7; t=1605950942;
bh=T72ScHcr6LXrcBJ56E/TQ2gJ2D3ACD1xQc7x1ewqEX8=;
h=X-UI-Sender-Class:From:To:Subject:Date;
b=n/Y7ZuEVcH7OZpCa/LKVsMd0Q6txsNSRF8L1uQTUzi9YKtJO6UWUmKTjhx3GtB52D
rrD4mWuHy/vlNKwC1VRAnwo1C/jVnoNNRap05W7fnC9q6dKQgJM1+8lNGsTjaAqt7f
wO5sipmuuSWb5l1u/YLWm1IRzhyKGMde3P0O8GHI=
X-UI-Sender-Class: 214d933f-fd2f-45c7-a636-f5d79ae31a79
Received: from [176.88.31.133] ([176.88.31.133]) by web-mail.mail.com
(3c-app-mailcom-lxa02.server.lan [10.76.45.3]) (via HTTP); Sat, 21 Nov 2020
10:29:02 +0100
MIME-Version: 1.0
Message-ID: >
From: Clara QzN <angham_2009@mail.com>
To: xxx
Subject: Real friends!
Content-Type: multipart/mixed;
boundary=trekuen-0ea9a6cb-3f1b-4f30-a94c-11e98b03b5ac
Date: Sat, 21 Nov 2020 10:29:02 +0100
Importance: normal
Sensitivity: Normal
X-Priority: 3
X-Provags-ID:


Zitat:
From: Clara QzN <angham_2009@mail.com>
Date: Sat, 21 Nov 2020 10:29:02 +0100


Bild wie im Eröffnungsthread
« Zuletzt geändert: 21. November 2020 um 19:53 von Stiray » 
Grund: anonymisiert 
Zum Seitenanfang
 
IP gespeichert
 
Bommo
Consultant
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 6.938
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Re: Clara <gazonyla@gmail.com>
Antwort #5 - 21. November 2020 um 18:06
 
will it be interesting to know how you spend your time at home?
I live in the Netherlands, have you been to Holland?
The first letter is sent by the agency, but you can write directly to my house  gazonyla@gmail.com

Spoiler:
Return-Path: <armidacordy4cw5@mail.com>
Received: from jolnir.orangewebsite.com
        by jolnir.orangewebsite.com with LMTP
        id VgafAqn+uF81WwIARr05yQ
        (envelope-from <armidacordy4cw5@mail.com>); Sat, 21 Nov 2020 11:48:57 +0000
Return-path: <armidacordy4cw5@mail.com>
Envelope-to: xxx
Delivery-date: Sat, 21 Nov 2020 11:48:57 +0000
Received: from mout.gmx.com ([74.208.4.201]:46935) by
jolnir.orangewebsite.com with esmtps  (TLS1.2) tls
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from
<armidacordy4cw5@mail.com>) id 1kgRNw-000dsv-I3 for xxx;
Sat, 21 Nov 2020 11:48:56 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.com;
        s=dbd5af2cbaf7; t=1605959283;
        bh=lyv+a/R0WWuR9U0a5EjqfKV0GHkgPUkQxxN452wg6LA=;
        h=X-UI-Sender-Class:From:To:Subject:Date;
        b=bF8naevJ0IeP2zMSwa4QM7P605TpKJfTMnPSvzYkjHHE9Kt3sEdXoCKkOZeHAcnE2
         p2CJ5m2PAkxTwDq7PyNCrNhqi9G7qH/K1mwiHtxplxNU+yldvR8yg9gfaz/qWYmUDG
         pPH/yAIVosv4A9YXTWsu7K5vuywtjEsOUHsBFXCU=
X-UI-Sender-Class: 214d933f-fd2f-45c7-a636-f5d79ae31a79
Received: from [112.204.167.93] ([112.204.167.93]) by web-mail.mail.com
(3c-app-mailcom-lxa03.server.lan [10.76.45.4]) (via HTTP); Sat, 21 Nov 2020
12:48:03 +0100
MIME-Version: 1.0
Message-ID: >
From: Clara CuI <armidacordy4cw5@mail.com>
To: xxx, 
Subject: Active and days!
Content-Type: multipart/mixed;
boundary=nika-dc480534-603d-4dd4-b33d-337f411c77d4
Date: Sat, 21 Nov 2020 12:48:03 +0100
Importance: normal
Sensitivity: Normal
X-Priority: 3
X-Provags-ID:


Zitat:
From: Clara CuI <armidacordy4cw5@mail.com>
Date: Sat, 21 Nov 2020 12:48:03 +0100


Bild wie im Eröffnungsthread
« Zuletzt geändert: 21. November 2020 um 19:54 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
person recognition
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 56.872
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Stimmung: kreativ
Re: Clara <gazonyla@gmail.com>
Antwort #6 - 21. November 2020 um 19:39
 
vierauge schrieb on 21. November 2020 um 12:24:
Das Bild wurde bei Model Elya Pipkina aus Moskau geklaut.

Weitere Themen:

Yulia <akyuliya9@gmail.com>


Da die Galerie auf ihren Profilen bei Vkontakte nur bis 2015 bzw. bis 2016 geführt wurden, ist das Bild dort nicht zu finden.
Es enstand zu einem späteren Zeitpunkt und wurde auf ihren Instagramaccounts geklaut.

@pipkina_ely19
@elya1p

Externes Outing:

<yuliyaak9@gmail.com>

Weiteres Thema:

Clara <liedimile@gmail.com>
« Zuletzt geändert: 21. November 2020 um 19:42 von Stiray »  

elya1p_001.jpg ( 71 KB | Downloads )
elya1p_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
person recognition
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 56.872
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Stimmung: kreativ
Re: Clara <gazonyla@gmail.com>
Antwort #7 - 21. November 2020 um 20:00
 
Verschleierte Einlieferungen

Code
Alles auswählen
IP:	177.136.66.228
Decimal:	2978497252
Hostname:	177.136.66.228
ASN:	263600
ISP:	Radio Link Telecom
Organization:	Radio Link Telecom
Services:	None detected
Type:	Broadband
Assignment:	Likely Static IP
Continent:	South America
Country:	Brazil
State/Region:	Sao Paulo
City:	Ariranha 



Zitat:
from [177.136.66.228] [...] [10.76.45.12]) (via HTTP); Sat, 21 Nov 2020 03:47:16 +0100
From: Clara CoE <xxx@mail.com>
Date: Sat, 21 Nov 2020 03:47:16 +0100


Code
Alles auswählen
IP:	176.88.31.133
Decimal:	2958565253
Hostname:	176.88.31.133
ASN:	34984
ISP:	Turkcell Superonline
Organization:	Turkcell Superonline
Services:	None detected
Type:	Broadband
Assignment:	Likely Static IP
Continent:	Asia
Country:	Turkey
State/Region:	Ankara
City:	Ankara 



Zitat:
from [176.88.31.133] [...] [10.76.45.3]) (via HTTP); Sat, 21 Nov 2020 10:29:02 +0100
From: Clara QzN <xxx@mail.com>
Date: Sat, 21 Nov 2020 10:29:02 +0100


Code
Alles auswählen
IP:	112.204.167.93
Decimal:	1892460381
Hostname:	112.204.167.93.pldt.net
ASN:	9299
ISP:	Philippine Long Distance Telephone
Organization:	Philippine Long Distance Telephone
Services:	None detected
Type:	Broadband
Assignment:	Likely Static IP
Continent:	Asia
Country:	Philippines
State/Region:	Metro Manila
City:	Pasig 



Zitat:
from [112.204.167.93] [...] [10.76.45.4]) (via HTTP); Sat, 21 Nov 2020 12:48:03 +0100
From: Clara CuI <xxx@mail.com>
Date: Sat, 21 Nov 2020 12:48:03 +0100
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema