Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Svetlana <83ladyvamp@gmail.com> (Gelesen: 495 mal)
 
ManRS
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 250
Mitglied seit: 07. November 2020
Geschlecht: männlich
Svetlana <83ladyvamp@gmail.com>
08. Januar 2021 um 17:03
 
Kontakt über: https://russianflirting.com/en/viewprofile/Svetlanasweet

Hi,  xxx,  we've already had a little chat on a Dating site, but we
still don't really know each other, and I'd like to fix it .
About  me:  my  name  is Svetlana.I'm 37 years old. At the moment I am
studying  to  be a photographer , my friend is a photographer, and she
teaches  me  courses,  I  learn  from  her and gradually start working
independently.
I  am  not perfect, but I can become a part of your universe, I can be
the  brightest planet for you . It's easy with me, you just need to be
there  for  me.  Some  might think I'm crazy, but who's normal in this
world? Just give me time and I'll turn the Earth upside down.
If you like comfort and delicious food, then we are on our way. And if
you  sometimes  like to drink tea at home while watching a movie, then
we  are kindred spirits. I am a loyal, fun-loving girl and have a good
sense  of humor. I don't think you'll be bored with me. But I can also
be  serious  and responsible. I always achieve my goals and never give
up!
And Yes, I want to congratulate you, you found a lucky ticket, because
you  have  the  opportunity to write to me now, believe me, I can give
you  all my feminine warmth and a happy family life, because for me my
family will always be the most important thing. I really hope that you
were  interested  in  reading  my  letter,  and I look forward to your
response. xxx
please  tell  me  about  yourself  and your intentions.. What are your
plans for life and what do you expect from a woman?
Don't forget about me, because I really hope for your answer.

Svetlana

Spoiler:
Delivered-To: xxx
Received: by 2002:ab0:224f:0:0:0:0:0 with SMTP id z15csp463624uan;
        Fri, 8 Jan 2021 05:53:34 -0800 (PST)
X-Received: by 2002:a19:c4b:: with SMTP id 72mr1592905lfm.437.1610114013805;
        Fri, 08 Jan 2021 05:53:33 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1610114013; cv=none;
        d=google.com; s=arc-20160816;
        b=GpeB0uh1zHctl0JCB4ihkT/iNfbdntvRXJpFZ301CsaS9Dsi7jRLxQLS3RIxQqsQdv
         n/4wZjjjy3W0LsU9+wi0qjqY5gpfMdWxsf6lS/SycmYZR9HsTys7xYiVFE7SlKw9bo7a
         1eBP6D48sx6g3FHBBtq77/RDldZOzRo42J/qVUoQiaTi1VBxT+3RZl0YZY+/60KBVBgO
         IZLKQFrF1/RGm4clcjeHrXD7Mi2hctxZLZttb4q0Va5CO9v9+Xc/uFkya0Eln+80Mjqp
         zEMnnKSCsTwmV9sKoKI80+IK9fI8KqDT20KC6FhaIJp3YWCOrp0/4AsdyVim9Vw3tsit
         qi4A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:subject:to:message-id:date:from:dkim-signature;
        bh=Ypmt15FPSYoB071YCPxx7ON9kJOWYFRYaFYQ1y4hYnc=;
        b=nJQWQuccwA30vZW2HMkjtHuiwZ3Mlr3IhHD3LJpP1mu6/0igTMFkJNCf4uPygDCTeR
         OFlaMsPHTkwxqMMZVY/Nk+/NUOYi97fXKaPQdfwQsrFhYFh/wRiw0Zdjd8RfaKijDaWb
         JKXjpeolllnLhNRzNo/+mlIxu7hOF4uQpO9AYMY15TZMN94Yj1Se+DulmOoQTApnI9W6
         Ie6Y2m1Qn3mLzAWrGtpoAUVoOVzO7N3qcnMioY2UqAhq8fTX1KIAyRk7dN0GZfzTpPZ4
         5jLCVwKXLIGKdBBg6bYxScgCxa8qS+H/9Ughxo4bmNQkguK6yJBmwf1uYbL+9vPCQEAP
         ue2Q==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=fsKLPsNY;
       spf=pass (google.com: domain of 83ladyvamp@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=83ladyvamp@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
Return-Path: <83ladyvamp@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
        by mx.google.com with SMTPS id 184sor2081627lfl.160.2021.01.08.05.53.33
        for <xxx>
        (Google Transport Security);
        Fri, 08 Jan 2021 05:53:33 -0800 (PST)
Received-SPF: pass (google.com: domain of 83ladyvamp@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
       dkim=pass Quelltext.i=@gmail.com Quelltext.s=20161025 Quelltext.b=fsKLPsNY;
       spf=pass (google.com: domain of 83ladyvamp@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=83ladyvamp@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) Quelltext.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=from:date:message-id:to:subject:mime-version;
        bh=Ypmt15FPSYoB071YCPxx7ON9kJOWYFRYaFYQ1y4hYnc=;
        b=fsKLPsNYvRXZVXhUxFZXGmvWotiFBhakaY0lp+ffZk0xqG3zVMftZPlYdlotiGxAHw
         nPmgN+o34mm/WvcaXx2UFhCnktyOuhItQZwnOV4rVlzHI4KLvdN6uyV0eF3qmueG/FbA
         g0ZjsuM9bR14c4M83Nhv0feNppFovLD62ggTHF/jJ6MNCBjLdmw1SeMmnTbHUM5Zvkkv
         VKnDndF7euIn/azFEznAnI9J3hvAlIBSBhlWsQOkS6+DQjcT7YZrs344Tsdv/n0qy8qz
         jIs3M5io4nBn3ZJnexOaOVpO9Uz6h2N4cqw5RyzjRkx0oyBtmHWSIUkvGvgRy7TXXUPX
         PEVg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:from:date:message-id:to:subject:mime-version;
        bh=Ypmt15FPSYoB071YCPxx7ON9kJOWYFRYaFYQ1y4hYnc=;
        b=NJ2oSu7vkf8QC4oQHW6wWQ93UGJ3OD1F909ZvHAKuvLBG4pOE85TcUPX0Co3upa2EL
         94pEVYWF+zmL/C3JDI3sKMgzuqoPqDebSHb6Dl53Ejtuos55Q3zix4w++K19TjJysLzH
         Sr2wdwMl4/cxm4JPOlmCuJbB6pcWNtiTNda6dRnEl8YfbdpZYoKfwp4BM9QJMRt+hwus
         qtH43FruR0s/iQOLqlZYmMrCXt7d5v2NwGhGVh0/DbuX4JRaiB9YO1Y5UJ38rWKLXzQK
         qeN+zc01T5jXxtSGLsVZ8rasKtiL0W3h1UAJfiXyNHgU6BIb0lrbl9miJ47E+XAV3BVR
         P3CA==
X-Gm-Message-State: AOAM533ejh4sMJVVJo+JQKN+hLR6AwhXOOjyLJPGHM9CrY4ti7EYQdgE IzA2xU8YQQCNw5085oD3yYCMgrrBP1k=
X-Google-Smtp-Source: 
X-Received: by 2002:a19:2d44:: with SMTP id t4mr1550625lft.125.1610114013043;
        Fri, 08 Jan 2021 05:53:33 -0800 (PST)
Return-Path: <83ladyvamp@gmail.com>
Received: from [192.168.0.200] ([94.158.36.178])
        by smtp.gmail.com with ESMTPSA id c136sm1977543lfg.306.2021.01.08.05.53.32
        for <xxx>
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Fri, 08 Jan 2021 05:53:32 -0800 (PST)
From: 83ladyvamp@gmail.com
X-Google-Original-From: 83ladyVamp@gmail.com
Date: Fri, 8 Jan 2021 16:53:29 +0300
X-Priority: 2 (High)
Message-ID: <53650465.20210108165329@gmail.com>
To: xxx
Subject: Today is a great day to start dating, right?
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------04607F01B04A06703
« Zuletzt geändert: 19. Juli 2021 um 23:18 von Schnitzel »  

83ladyvamp1.jpg ( 57 KB | Downloads )
83ladyvamp1.jpg
83ladyvamp2.jpg ( 95 KB | Downloads )
83ladyvamp2.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 67937
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Svetlana <83ladyvamp@gmail.com>
Antwort #1 - 08. Januar 2021 um 19:43
 
Code
Alles auswählen
IP:	94.158.36.178
Decimal:	1587422386
Hostname:	masq178-36-158-94.lds.net.ua
ASN:	41709
ISP:	Lugansky Merezhy Ltd
Organization:	Lugansky Merezhy Ltd
Services:	None detected
Type:	Broadband
Assignment:	Likely Static IP
Continent:	Europe
Country:	Russia
State/Region:	Rostov Oblast
City:	Gukovo 



Zitat:
from [192.168.0.200] ([94.158.36.178]) with ESMTPSA; Fri, 08 Jan 2021 05:53:32 -0800 (PST)
From: 83ladyvamp@gmail.com
Date: Fri, 8 Jan 2021 16:53:29 +0300


Lugansky Merezhy Ltd ist Ukraine.
  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 67937
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Svetlana <83ladyvamp@gmail.com>
Antwort #2 - 08. Januar 2021 um 19:57
 
Die Profilbilder und die Bilder der Mail zeigen die gleiche Frau. Die Bilder wurden gespiegelt.

Die Bilder wurden bei Sängerin und Schuspielerin Alisa Vox / Alisa Woks / Алиса Вокс aus Sankt Petersburg geklaut.

https://vk.com/alisavox
https://vk.com/id1117105
https://www.instagram.com/alisavox/
https://www.facebook.com/alisavox.net/
https://ok.ru/alisavox

Stiray schrieb on 08. Januar 2021 um 19:43:
Lugansky Merezhy Ltd ist Ukraine.


Auf dem Profil gibt sie an aus Rostov zu kommen. Alles spricht aber für Ukrainescam.
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema