Site logo

     


Advert.
Switch to full style
This section deals specifically with online romance scams. The images used by the scammers are stolen from innocent people, usually from their social media pages.
Post a reply

golo37molo@qamail.rest - golo37molo@gmail.com

Wed Jul 21, 2021 6:24 pm

Unsolicited email received:

Hey!
I'm Tatyana. speak English and also study other foreign languages.. Do you want to find new friends? I am interested to communicate with you!
I think we would get an interesting conversation. I like sports!! I love reading magazines and cook good food!!
I lead an active lifestyle.. I also ride a bike. Write to me if you you want to chat with me too!!
We could start a nice dialogue and get to know each other ! I also propose to share fotos with you.
I believe that you will answer to me as soon as possible!!!


Header:

ARC-Authentication-Results: i=1; mx.google.com;
dkim=temperror (no key for signature) header.i=@qamail.rest header.s=dkim header.b=FhF8H18J;
spf=neutral (google.com: 178.208.94.181 is neither permitted nor denied by best guess record for domain of golo37molo@qamail.rest) smtp.mailfrom=golo37molo@qamail.rest
Return-Path: <golo37molo@qamail.rest>
Received-SPF: neutral (google.com: 178.208.94.181 is neither permitted nor denied by best guess record for domain of golo37molo@qamail.rest) client-ip=178.208.94.181;
Authentication-Results: mx.google.com;
dkim=temperror (no key for signature) header.i=@qamail.rest header.s=dkim header.b=FhF8H18J;
spf=neutral (google.com: 178.208.94.181 is neither permitted nor denied by best guess record for domain of golo37molo@qamail.rest) smtp.mailfrom=golo37molo@qamail.rest
Received: from [45.86.200.59] (helo=45.86.200.59) by p504404.kvmvps with esmtpsa (TLS1.0:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.92) (envelope-from <golo37molo@qamail.rest>) id 1m1Jg4-0008Fw-GW
From: charming <golo37molo@qamail.rest>
Subject: Greetings to you dear stranger.
To:
Content-Type: multipart/mixed; boundary="ffWCLn=_BC6IsiG3icyOR3y2TVOQpyVc8L"
MIME-Version: 1.0
Reply-To: good <golo37molo@gmail.com>
Date: Thu, 8 Jul 2021 05:22:11 +0300
Message-Id: <E1m1Jg4-0008Fw-GW@p504404.kvmvps>

Originating IP: 45.86.200.59
Originating ISP: Security Firewall Ltd
Country of Origin: Netherlands

Stolen picture received with the message:

Image

Re: qamail.rest

Wed Jul 21, 2021 6:30 pm

The domain name qamail.rest is reported for spam activities on various websites. In this case, the domain name is used for spamming romance scam formats.

From the domain name registration:

Domain Name: QAMAIL.REST
Updated Date: 2021-07-03
Creation Date: 2020-11-18

Registry Expiry Date: 2021-11-18
Registrar: Registrar of Domain Names REG.RU, LLC

Domain Status: ok
Registrant Organization:
Registrant State/Province: --
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru
Post a reply