Scam ratten mail mit Vielen Weiterleitungen :


whois:http://4gelp.moosend.com/u%6E%73%75%62%73%63%72%69%62%65/f01caba4-8155-46c1-b69b-8990f6a3aa9e/0581f4a3-2149-4711-9ced-d0dcd44a6597/


dann zu whois:https://nicenfancy.com/0/0/0/ffcd1194cd95edaeffe3020a94d54a39/yusf?email=youssefmahjoub82%40gmail.com&name=machina scheinbar mit einer mailadresse eines scammers


dann zu whois:belismomio.com/index2.php?id=110&s1=350855&s2=628329383&s3=3133&s4=0&p=de5bit9c


whois:https://dreameersmin.com/?3f96c633dbe1dea165a78cc225734b44







header:
01: Return-Path: <0185555(at)gmail.com>
02: X-Original-To: (at)
03: Received: from mail-qt1-f172.google.com (mail-qt1-f172.google.com
04: [209.85.160.172])
05: by (Postfix) with ESMTPS ID: [ID filtered]
06: for <(at)>; Mon, 8 Nov 2021 xx:xx:xx +0100 (CET)
07: Received: by mail-qt1-f172.google.com with SMTP ID: [ID filtered]
08: for <(at)>; Mon, 08 Nov 2021 xx:xx:xx -0800 (PST)
09: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
10: d=gmail.com; s=20210112;
11: h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
12: bh=8njRMdJffgLp/PPnGalh6M0TMTTGfj9oudDpt7n4EM0=;
13: b=Dmn8fEo86AxLR3t4nRXdbM6epXwDk/rAx3wgrqyyZ+OxBjbYTi/DPjXyieW05ypj1k
14: hgGBk6hcicsNxmzj7GshF8Sd5Yy8mi0OZSO+bMsam3mlq/NcDvHJLI6Z8qSAqXCd/faD
15: rCJGWVS9fX6tDeYGGBV2X49EQRZaTPRXvo1fBuovCzHKc/3eB6xn2hoJLf3ZG4gK9JWj
16: o6Nn//j25Dh8wKCBC6Yb9N9tqQk392oS+U3XDH0AArkqM1OKUCK3mFmNisubBHi32QYE
17: L5FDWujBEK/XfrfcZ/dwgkcmher8Bse1M2ORWTzouh6ch7QO0HKdQ21mjc/r+zhgISFt
18: XuvA==
19: X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
20: d=1e100.net; s=20210112;
21: h=x-gm-message-state:mime-version:references:in-reply-to:from:date
22: :message-id:subject:to;
23: bh=8njRMdJffgLp/PPnGalh6M0TMTTGfj9oudDpt7n4EM0=;
24: b=lbfcoFJ03jExpQgVlhFGi6GT0yHDP0YNK/e+uQ2NWHeCDO0LkuZNcHqKJbyC9uvmBj
25: rdkPoUunbt0pXT4WSmQoWetNrn05p3b7+k0KKbpYf0tGgcTZ1E1tViY8NsnHipMZiwqA
26: WuCt0JkgXho+5aDc8vYoRYdKe0xUmPpmq3Cz3Jh+sIfKHXsuj6HOitAIg/lShACJRWQG
27: zuUGqzQVhDIATE2sRbIEPiR85PvL29Kkf6lSOK4uPwGT2O5G0czU2iAh7RWJ+lOp9cfM
28: eN9BlhfMRQhEJfDqGORnAOMo9ja4J288+8uohma9Z11ibQMg1iD9WmTAyQSpgZqzrM8e
29: 9l/g==
30: X-Gm-Message-State: AOAM533ZCqNTMh6KQWwf3fpswzyu9HFOujxoAOA3mx1rdNN3fF0lgXkY
31: gl6x+gYSFwOg0HU64cx48Aj1x2LyBbEsfdZtGqeXDm0a82I2iwfa
32: X-Google-Smtp-Source:
33: ABdhPJwW7+JrHB5sRWo5l/wwqLUyLGR87E+FxOshDDCOLgvdFYThVF1iHYxarLeVOGIH5UxwkoDH22ABCcJo6JORhN0=
34: X-Received: by 2002:a05:622a:19a7:: with SMTP ID: [ID filtered]
35: Mon, 08 Nov 2021 xx:xx:xx -0800 (PST)
36: MIME-Version: 1.0
37: References: <XNvNWctWwkqXyiGERaC3iZ(at)geopod-ismtpd-2-4>
38: In-Reply-To: <XNvNWctWwkqXyiGERaC3iZ(at)geopod-ismtpd-2-4>
39: From: Willkommen <01.85.555(at)gmail.com>
40: Date: Mon, 8 Nov 2021 xx:xx:xx +0000
41: Message-ID: [ID filtered]
42: Subject: =?UTF-8?B?UmU6IOKAnkthcGl0YWwtU2NobHVwZmxvY2jigJwgaEhG?=
43: To: dowdow <(at)>
44: Content-Type: multipart/alternative; boundary="0000000000007bfc6505d04a5a8e"
45: --0000000000007bfc6505d04a5a8e
46: Content-Type: text/plain; charset="UTF-8"
47: On Mon, Nov 8, 2021 at 5:07 PM dowdow <(at)> wrote:
48: > *Finanzielle Geheimnisse, um reich zu werden
49: > <http://4GElP.moosend.com/u%6E%73%75%62%73%63%72%69%62%65/f01caba4-8155-46c1-b69b-8990f
50: a3aa9e/0581f4a3-2149-4711-9ced-d0dcd44a6597/>*
51: >
52: > unsubscribe
53: > <http://jIZoLh5.moosend.com/u%6E%73%75%62%73%63%72%69%62%65/9778a891-cd6d-41cf-8977-614
54: a700d841/0ebaa66d-ca48-4477-be38-00614c10d7a1/>
55: >
56: >
57: --0000000000007bfc6505d04a5a8e
58: Content-Type: text/html; charset="UTF-8"
59: Content-Transfer-Encoding: quoted-printable
60: <div dir=3D"ltr"></div><br><div
61: class=3D"gmail_quote"><div dir=3D"ltr" clas=
62: s=3D"gmail_attr">On Mon, Nov 8, 2021 at 5:07 PM dowdow &lt;<a
63: href=3D"mailt=
64: o:(at)">(at)</a>&gt; wrote:<br></div><blockquote
65: class=3D"g=
66: mail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solID: [ID filtered]
67: ,204,204);padding-left:1ex">
68: <center>
69: <h2><em><span style=3D"color:rgb(255,0,0)"><a
70: style=3D"color:rgb(255,0,0)" =
71: href=3D"http://4GElP.moosend.com/u%6E%73%75%62%73%63%72%69%62%65/f01caba4-8=
72: 155-46c1-b69b-8990f6a3aa9e/0581f4a3-2149-4711-9ced-d0dcd44a6597/" target=3D=
73: "_blank">Finanzielle Geheimnisse, um reich zu
74: werden</a></span></em></h2><b=
75: r>
76: <br>
77: <img src=3D"https://www.jotform.com/uploads/youssefmahjoub82/form_files/Scr=
78: eenshot_53.png?nc=3D1" alt=3D""
79: usemap=3D"#m_-6464745652026640083_map162730=
80: 2588302">
81: <map id=3D"gmail-m_-6464745652026640083map1627302588302" name=3D"m_-6464745=
82: 652026640083_map1627302588302"><area shape=3D"rect"
83: coords=3D"3,0,765,782" =
84: title=3D"" alt=3D""
85: href=3D"http://X8K5jb.moosend.com/u%6E%73%75%62%73%63%7=
86: 2%69%62%65/f01caba4-8155-46c1-b69b-8990f6a3aa9e/0581f4a3-2149-4711-9ced-d0d=
87: cd44a6597/"></map>
88: <blockquote>
89: <p><a href=3D"http://jIZoLh5.moosend.com/u%6E%73%75%62%73%63%72%69%62%65/97=
90: 78a891-cd6d-41cf-8977-6145a700d841/0ebaa66d-ca48-4477-be38-00614c10d7a1/" t=
91: arget=3D"_blank">unsubscribe</a></p>
92: </blockquote>
93: </center>
94: </blockquote></div>
95: --0000000000007bfc6505d04a5a8e--