Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Sonia <soniadeerow@gmail.com> (Gelesen: 77 mal)
 
Bommo
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 33608
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Sonia <soniadeerow@gmail.com>
17. Mai 2025 um 14:08
 
Hello my good friend I travel back with my family to Senegal to visit
Reverend and some of my friends in refugee camp and i went to the bank that
issued the ATM VISA CARD, the bank manager told me that the ATM CARD has
expired but the money is still in they bank so i cash the money, now to
avoid any government tax i package the money with two envelop as my
photograph (picture) being sent to a friend overseas this morning i went
and deposited it with Courier Delivery Company, Dakar Senegal,

For your information, i have paid for the delivery charges, they will only
demand the sum of ($98)ninety eight dollars for security and demurrage fees
which you will send to the courier & security company to deliver the
package direct to your postal address in your country.

Courier delivery company do not know the contents of the parcel.I
registered it as my photographs (pictures) being sent to a friend overseas.
They do not know that it contains some amount of money.This is to avoid
them tampering with the package,do not let them know the content,

Again, do not be deceived by anybody to pay more than $98,i would have paid
for you but the security department warns that i should not pay for
security reasons,they really need to hear from you and demands that the
payment comes direct from your destination to avoid some unwarranted
mistakes.Therefore you need to contact the courier & security company
immediately and pay for the charges which will not exceed the sum of $98

Below are the contact information of the delivery company:

E-mail:(dhl_dakar@yahoo.com)
Registration Number:  wwdsc/xxx/100/2025
Reference Number: /wwdsc/0000453
Code Number: xxxdcsc/6545

Finally, make sure that you reconfirm your postal address and direct
telephone number to them again to avoid any mistake on the delivery and let
me repeat again,try to write them through their email as soon as you
receive this mail to avoid any further delay and remember to pay them their
security keeping fee of $98 for their immediate action. You should also let
me know through email as soon as you receive the package. i am waiting to
hear the good news from you.
Have a nice day,

Spoiler:
Return-Path: <soniadeerow@gmail.com>
Received: from xxx
     by xxx with LMTP
     id ZucsBq57KGifaAEAHUz1PQ
     (envelope-from <soniadeerow@gmail.com>); Sat, 17 May 2025 14:06:06 +0200
Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com
[209.85.216.46]) by xxx (Postfix) with ESMTPS id
A7E8E166082D for <xxx>; Sat, 17 May 2025 14:06:05
+0200 (CEST)
Authentication-Results: xxx; dkim=pass Quelltext.d=gmail.com
Quelltext.s=20230601 Quelltext.b=kIVMWl4u; dmarc=pass (policy=none)
Quelltext.from=gmail.com; spf=pass (xxx: domain of
soniadeerow@gmail.com designates 209.85.216.46 as permitted sender)
smtp.mailfrom=soniadeerow@gmail.com
Received: by mail-pj1-f46.google.com with SMTP id
98e67ed59e1d1-30dfd9e7fa8so3688133a91.2 for <xxx>;
Sat, 17 May 2025 05:06:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com;
s=20230601; t=1747483565; x=1748088365; darn=xxx;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to; bh=/GKXaIxlrHwRxEv2wTAO37mzhtI4v+SpWpcNa+vGxV8=;
b=kIVMWl4utGUTPYiXg55QuWzAx+60cRONli1dD7iMY6r3GLCptuRP0+nBi+2ZeVLbxf
gRrwi2L48dlZ0/567T6UP9cAsbnI/Yf24g5seeCeltP6UgT1CwJ2CGKMwx+7S/qSEokT
eGDdEk/MVNiCZEkUYcpwAMisoUbIfkFAIovSRhQqzFz10ciDb6+VCEA9JwKy6sbiLDtr
ieIwvPCzqv5aovjQZAoT+Gcm9P1QLgvAIEY1zkn3l4YNi6CbP2GOzE0CYNtpw7l7IoeA
Am5nKfBCQVTr1bHfmw3UOoY8m+EzSFdi8DOAp2y2rd40SV0P1wHgU+QZ0X+m1jGKilcO UI4A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
s=20230601; t=1747483565; x=1748088365;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=/GKXaIxlrHwRxEv2wTAO37mzhtI4v+SpWpcNa+vGxV8=;
b=YXzCeTsMEBBgzcTE0xFDn6do5UEzw7tO/GPfDslPmiuWDOf0NAMg/+YcP/n2yyo+s6
TE5OeBkh6x8gCa9aBgrQK9eT8VM5UC3Srm/Ekdfj8Jk2KLUIuK92/RaK5lEQWzCI2zYV
mOztDuy0kchSCKM0uExUWf2boLy7I2WEINg+2hhkAEy83glM6aArN5wVQ/JMvS0yoiQ0
Ao9Dkk73mU6jjk6bPT0VVb+xgYnSFuFJxiXebEgdwaEIRGEgEoUEu147quMhk9/f/Jtg
pauSeoYz1i7Vf3ZqZY1Zu1JFWQcIbheciBi8qX5b6L3H0431ronFBLONNgi8zWBBBh/A JSrg==
X-Forwarded-Encrypted: i=1;
anSouhU=@xxx
X-Gm-Message-State:
AOJu0Yy74I+rNcdY3o0L4XmHR9MPozhaJvZLMCa41mnovNYXr2aKWkQ6
0TkIpq3nd5mnZ62fUEtdyhVK/5fceBYBAWBYKM4kZ8pfJFKCVp67oJpyf7/mNdjebclWOjBfhT4
HVga+ZVR1dHUsAQiubfA0DbMPrOt4cBvrVT0D07RF3Q==
X-Gm-Gg:
ASbGncuiZfjmVN7Hfsh3eNhNFrDO/cIcmxcbh8LnOanwuIlYMZ5pI+Zk0vB4GvWkViD
yOk5GSdR856Hasd/xn5+mWZ4IZ/JLohRCZHO3XFUG4o96/Yr+41ijsjI1grCUWJ4ySF9fcZ8sAH
Czo7IJItq0E8L8+vRH8akJXmR79qm0Irw=
X-Google-Smtp-Source:
2KLZk1aW6CA=
X-Received: by 2002:a05:6902:2a8c:b0:e7b:8523:5d5d with SMTP id
3f1490d57ef6-e7b85235dc0mr3727002276.47.1747483063758; Sat, 17 May 2025
04:57:43 -0700 (PDT)
MIME-Version: 1.0
From: sonia deerow <soniadeerow@gmail.com>
Date: Sat, 17 May 2025 12:57:33 +0100
X-Gm-Features:
AX0GCFsrmYKJP0lyMuvkcmkY-I-uhBxdnIHULA6jFks76sbXNbHW2yC4yLe7jew
Message-ID: <CAANKEicOvvoNJ4U77Ja22efhR47fYBHe3QHrJZhdT6jda_LG7A@mail.gmail.com>
Subject: FROM YOUR FRIEND
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004438690635539beb"
X-Spamd-Result: default: False [5.10 / 15.00];
     R_UNDISC_RCPT(3.00)[];
     FORGED_RECIPIENTS(2.00)[m:,s:xxx];
     SUBJ_ALL_CAPS(1.20)[16];
     DMARC_POLICY_ALLOW(-0.50)[gmail.com,none];
     R_DKIM_ALLOW(-0.20)[gmail.com:s=20230601];
     R_SPF_ALLOW(-0.20)[+ip4:209.85.128.0/17];
     RWL_MAILSPIKE_GOOD(-0.10)[209.85.216.46:from];
     MIME_GOOD(-0.10)[multipart/alternative,text/plain];
     GREYLIST(0.00)[pass,body];
     RCPT_COUNT_ONE(0.00)[1];
     MIME_TRACE(0.00)[0:+,1:+,2:~];
     ARC_NA(0.00)[];
     DWL_DNSWL_NONE(0.00)[gmail.com:dkim];
     FREEMAIL_FROM(0.00)[gmail.com];
     RCVD_TLS_LAST(0.00)[];
     FROM_HAS_DN(0.00)[];
     FREEMAIL_ENVFROM(0.00)[gmail.com];
     NEURAL_HAM(-0.00)[-0.969];
     MID_RHS_MATCH_FROMTLD(0.00)[];
     FROM_EQ_ENVFROM(0.00)[];
     TO_DN_ALL(0.00)[];
     ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US];
     MISSING_XM_UA(0.00)[];
     RCVD_COUNT_ONE(0.00)[1];
     DKIM_TRACE(0.00)[gmail.com:+];
     RCVD_IN_DNSWL_NONE(0.00)[209.85.216.46:from]
X-Spam-Level: *****
X-Spam-Status: No, score=5.10
X-Spamd-Bar: +++++
X-Evolution-POP3-UID: UID102421-1732734001
X-Evolution-Source: 35f605c29ef5a1cc1f927a4ea7f3e584a6d86cd9

  
Zum Seitenanfang
 
IP gespeichert
 
Bommo
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 33608
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Re: Sonia <soniadeerow@gmail.com>
Antwort #1 - 17. Mai 2025 um 18:04
 
Hallo mijn goede vriend, ik reis met mijn familie terug naar Senegal om de
eerwaarde en een paar vrienden in het vluchtelingenkamp te bezoeken. Ik ben
naar de bank gegaan die de ATM VISA CARD heeft uitgegeven. De bankmanager
vertelde me dat de ATM CARD verlopen was, maar dat het geld er nog steeds
op stond, dus ik heb het geld geïnd. Om overheidsbelasting te ontlopen,
verpak ik het geld in twee enveloppen, want mijn foto werd vanochtend naar
een vriend in het buitenland gestuurd. Ik heb het gestort bij een
koeriersbedrijf in Dakar, Senegal.

Ter informatie: ik heb de bezorgkosten betaald. Ze vragen alleen een bedrag
van ($98) achtennegentig dollar voor beveiliging en liggeld. Deze kosten
moet u aan het koeriers- en beveiligingsbedrijf betalen om het pakket
rechtstreeks naar uw postadres in uw land te bezorgen.

Het koeriersbedrijf kent de inhoud van het pakket niet. Ik heb het
geregistreerd als mijn foto's die naar een vriend in het buitenland worden
gestuurd. Ze weten niet dat er een geldbedrag in zit. Dit is om te
voorkomen dat ze met het pakket knoeien. Vertel hen niet wat erin zit.

Nogmaals, laat u door niemand misleiden om meer dan $ 98 te betalen. Ik had
voor u betaald, maar de beveiligingsafdeling waarschuwt dat ik om
veiligheidsredenen niet moet betalen. Ze moeten echt van u horen en eisen
dat de betaling rechtstreeks van uw bestemming komt om onnodige fouten te
voorkomen. Neem daarom onmiddellijk contact op met de koerier en het
beveiligingsbedrijf en betaal de kosten, die niet hoger zijn dan $ 98.

Hieronder vindt u de contactgegevens van het bezorgbedrijf:

E-mailadres: (dhl_dakar@yahoo.com)
Registratienummer: wwdsc/xxx/100/2025
Referentienummer: /wwdsc/0000453
Codenummer: xxxdcsc/6545

Zorg er ten slotte voor dat u uw postadres en telefoonnummer opnieuw
bevestigt om problemen te voorkomen. Ik herhaal het nog een keer: probeer
ze zo snel mogelijk na ontvangst van deze e-mail te mailen om verdere
vertraging te voorkomen. Vergeet niet om de borg van $ 98 te betalen voor
hun onmiddellijke actie. Laat het me ook per e-mail weten zodra je het
pakket ontvangt. Ik wacht op het goede nieuws.
Fijne dag!

Spoiler:
Return-Path: <soniadeerow@gmail.com>
Received: from xxx
     by xxx with LMTP
     id CYVIHjOAKGh5dgEAHUz1PQ
     (envelope-from <soniadeerow@gmail.com>); Sat, 17 May 2025 14:25:23 +0200
Received: from mail-yb1-f171.google.com (mail-yb1-f171.google.com
[209.85.219.171]) by xxx (Postfix) with ESMTPS id
0EB2C166006D for <xxx>; Sat, 17 May 2025 14:25:23 +0200
(CEST)
Authentication-Results: xxx; dkim=pass Quelltext.d=gmail.com
Quelltext.s=20230601 Quelltext.b="hKEQ3/Lt"; dmarc=pass (policy=none)
Quelltext.from=gmail.com; spf=pass (xxx: domain of
soniadeerow@gmail.com designates 209.85.219.171 as permitted sender)
smtp.mailfrom=soniadeerow@gmail.com
Received: by mail-yb1-f171.google.com with SMTP id
3f1490d57ef6-e7b7b4eaca1so1259559276.0 for <xxx>; Sat, 17
May 2025 05:25:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com;
s=20230601; t=1747484722; x=1748089522; darn=xxx;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:from:to:cc:subject:date:message-id:reply-to;
bh=th08RuXnuYsl5qYKLjeBc2BokwHRjSl0Cf3TGmmcLWo=;
b=hKEQ3/Ltd9jeX07189xFPsOfNgqwAwtwHwt8MoAoBM2120q0sC5+nMXfhaUboKd0Nw
UT5byVFJBKLE+ape6jhEuhaCo9826GGtg3b5hCPOj22SOXRMcXzqNSXPav3+9pbPDWWQ
2FDLwj4ApkuS7Or1yg5HsGhjVsF7qmepwd2PhbETWOpeR7l/rbW8af5t6Z4eBN7iDoyy
Xr9YgZi8bo0i2/vxq2ZnZLlw5yUq/Of1v/B3vvbnWlzQpSQ0VSbzsSU6924eRGqejBZV
INldvntjb1U17V2REkb0LmvQ7YO+K2MMCRYYtSlVpaOVgvBrbON12j9SV3cCGKwbhE6W geHA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
s=20230601; t=1747484722; x=1748089522;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=th08RuXnuYsl5qYKLjeBc2BokwHRjSl0Cf3TGmmcLWo=;
b=JCeLRDrkDSS4aB095otOEZr2b8Z9x5Yj3Ca/XvvmAqAPMEAaKbShSKL+SoDR18xNgF
v5r8J6ZBVQr7+5b4Rwgdb9aGHsswO/OoY4p9dNyseXhSH3ZA9qIKITi/8N0hbm9Vahj3
hS8QPxBbfjiZHq2ebjK1VdBRvW2TQHoZWivbKTP1QJfdhegCau19w3dJN618mfVUkDmN
2duEfaaGDTSBMXaiIZO165Cjta9h6Q0ipnlI5wb+pnfvLmpTuku5Vrhtb+v4vgIshA3E
wKFYFqLTKMuwywdg7e4l+NeBSobfB41vCakuVyqSWngfb5+D0lLyAMx895gZ2BMA7XtC 0ryw==
X-Gm-Message-State:
AOJu0Yx9hXFlbqYdz/1kq6QKP1GGIJOUwbnvll8ab1d+y/YfTET7Km+7
r8zcKjFjH+4x6Zna/0O1sgLsP4p2oz+MpHd7mpVA6rIG6WU6pTma4WjacFUGC8GTrv6L607DQ5I
gBR7AetPsGvTcHfFVW0694HII0szBYVJZpmM6+ds=
X-Gm-Gg:
ASbGnctfVdvp3A9wss27J8t274UEJPevjf5+JCRa2WcdF6RhWunu6hZ8RujH+ygEXPu
fI3GabOTVpudH97w/ZrxWsMO/BsieAjJG9R5KcptFG+I/ubXXJOaOP+XemtZ4P8BSXKTX/I3CL5
+PnybRU03/mvljIHo/Dp18ekTN31YRSAE=
X-Google-Smtp-Source:
b6awxLGciMY=
X-Received: by 2002:a05:6902:1614:b0:e78:f20c:9b9a with SMTP id
3f1490d57ef6-e7b6d71ab3cmr8354291276.45.1747484722115; Sat, 17 May 2025
05:25:22 -0700 (PDT)
MIME-Version: 1.0
References: <CAANKEicOvvoNJ4U77Ja22efhR47fYBHe3QHrJZhdT6jda_LG7A@mail.gmail.com>
<28622dd22ed3b663c275a409b9bba67905fa3344.camel@xxx>
In-Reply-To: <28622dd22ed3b663c275a409b9bba67905fa3344.camel@xxx>
From: sonia deerow <soniadeerow@gmail.com>
Date: Sat, 17 May 2025 13:25:11 +0100
X-Gm-Features:
AX0GCFssboRnn2GCNpbIoW63CnNZMLQL5EfyC30L2Kc76SvharZ9u6zxyG6FmfI
Message-ID: <CAANKEifnJ3SmS1ob+4h4rFWfuZR0APbhSbKi=k7bRgfhE7h8Bw@mail.gmail.com>
Subject: Re: FROM YOUR FRIEND
To: xxx xxx <xxx>
Content-Type: multipart/alternative; boundary="0000000000001cbbe9063553fe21"
X-Spamd-Result: default: False [-3.80 / 15.00];
     REPLY(-4.00)[];
     SUBJ_ALL_CAPS(1.20)[16];
     DMARC_POLICY_ALLOW(-0.50)[gmail.com,none];
     R_DKIM_ALLOW(-0.20)[gmail.com:s=20230601];
     R_SPF_ALLOW(-0.20)[+ip4:209.85.128.0/17];
     MIME_GOOD(-0.10)[multipart/alternative,text/plain];
     FREEMAIL_ENVFROM(0.00)[gmail.com];
     TO_DN_ALL(0.00)[];
     TO_MATCH_ENVRCPT_ALL(0.00)[];
     RCPT_COUNT_ONE(0.00)[1];
     RCVD_TLS_LAST(0.00)[];
     MIME_TRACE(0.00)[0:+,1:+,2:~];
     FREEMAIL_FROM(0.00)[gmail.com];
     ARC_NA(0.00)[];
     FROM_HAS_DN(0.00)[];
     DKIM_TRACE(0.00)[gmail.com:+];
     MID_RHS_MATCH_FROMTLD(0.00)[];
     PREVIOUSLY_DELIVERED(0.00)[xxx];
     FROM_EQ_ENVFROM(0.00)[];
     DWL_DNSWL_NONE(0.00)[gmail.com:dkim];
     NEURAL_HAM(-0.00)[-0.961];
     ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US];
     RWL_MAILSPIKE_POSSIBLE(0.00)[209.85.219.171:from];
     MISSING_XM_UA(0.00)[];
     RCVD_COUNT_ONE(0.00)[1];
     RCVD_IN_DNSWL_NONE(0.00)[209.85.219.171:from]
X-Spamd-Bar: ---
X-Spam-Status: No, score=-3.80
X-Evolution-POP3-UID: UID102428-1732734001
X-Evolution-Source: 35f605c29ef5a1cc1f927a4ea7f3e584a6d86cd9

  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema