Good evening, Your mail I was given at a dating agency, dating through the Internet. It took me a long time to write this letter. The current situation in my life has given me confidence write a letter. It’s time to seriously change our life. I’m here looking for a man for a stable relationship! Are you a free man? Do you want to find a woman for a stable relationship? Let’s tie up our acquaintance and comfortable communication! My name is Eugenia. I am twenty-eight years old. I from UA. The city of Chernigov. Now, I forced moved to the city of Belgorod, in Russia. But I will not write about this in detail now. I think that distance is not a hindrance for you? I have heard about many examples of men and women from two different countries not a hindrance creating stable serious relationship. Perhaps we will repeat the same story! Each of us has a the right for happiness! If there’s a one chance in 1 000 000 chances that be together, let’s use it! I have a request, send me a reply ONLY if you are interested in a relationship! This is important to me! Waiting for your answer! More information about myself and my life write in the next letter after your reply letter. I am very glad to start our acquaintance.
Hello! I received a letter with exactly the same text! But the email is [email protected]
What should I do? Thank you in advance!
Oh my. Sounds like we have another horrible person out there. Just what the world needs… Smh. I find romance scammers to be especially disgusting. If anyone else has stories, I’m very interested in reading the messages.
@zarko1971 oh btw welcome!!
Thank you! I have other very strange emails!
Blocking the sender and deleting the email would be the smartest thing 
Thanks for your reply!
I could try reporting the mailbox if you’d like, you’d need to give the email headers too.
I feel like dating scams are especially reprehensible. It’s not just someone’s money but it’s their hearts that they take. Often, by the time the victim realizes that the person doesn’t exist, they’re in love. So disgusting.
I know. It happened to an ill and disabled woman I know. She’s intellectually and physically disabled, and somewhat emotionally ill. It was really sad, she lost almost all her money.
This seems to be a custom domain for this scam. If someone can send me an eml file or the full email + email headers, I might be able to get the domain suspended.
Hello! I uploaded the whole file! Is it possible to track whether an email was sent from Russia or the United States by IP address? My question is about another email, its IP address is in the US!
Delivered-To: [email protected]
Received: by 2002:ac8:73c3:0:0:0:0:0 with SMTP id v3csp4976797qtp;
Thu, 24 Mar 2022 18:54:47 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJySAu7PkvZWSJIx0N3u8qk9wffEmjd0vl1Ue6b4K2UTPs0NUT/RklNGjcyanfdgalt+wPjs
X-Received: by 2002:a0d:db86:0:b0:2dc:4494:3f53 with SMTP id d128-20020a0ddb86000000b002dc44943f53mr8288763ywe.217.1648173287360;
Thu, 24 Mar 2022 18:54:47 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1648173287; cv=none;
d=google.com; s=arc-20160816;
b=r58sO7gve6krJeqTqGAh2H/6V+ArOLMkAD7tUdJ5un6u33hb1Vpw710Gu/NF+QwAC/
a2uEs3kgzQ/yT01Q4TLaJQ1O0GtqDxG/F2ISlkbvZ7FeeU+0CNxejEI6OWYeowFr3kXL
i8pGS1Kbti4TNU0T2TXBUTz08O4TuANw0FscHtAHEc8cLTNWlauOYNfpBl5z9hvoAYiG
zWzaPiwTgQy6OXBKWToWrU8pv1+/zG89jJyR6lKJ97KPrufGZ0Z/xHRR52QQYHAiydo7
HyOObR7uagTtdbvt9hh/v/FHpLFLkOTLd2rlvw65ubNWu/dtgMxYewiLKR4g7WnvPgvZ
GCqQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=to:reply-to:mime-version:date:subject:from:message-id
:dkim-signature;
bh=fJkxb5qXxiu5RW1djIzhN3J2il/9WIZJzDzyOr0Q1r8=;
b=gQrN8ltr6yVkbAY77z4S93M5sRf349tdE+Yk1HsZ5vBcJCS4I1tkBJVAvSaNul+37R
8Wq5Hz3jmcNB+5y+EXq6e/sk7LcvEwRW1UKRrIo/QohKFGz3Zbr7cCIKVqTqJTYtP25k
ALfX2fqdCXLX5Q1Ln592vTA9Afu1u7hbRotJcdfsukYLinGrufSDxNqRI0z1v8AMhyIa
/RbBI6YotI5nqWHUcaILcXxu6+5/LEUB650nshfJYoiLmSK2XBLjxhBlxnTk8Im+9vx6
TuG9h4nqdCwAVLDsyMcVb9GkP+OWnS6/arqC9jSgLPSYQN/RcMxSYzzO7LKu0VJzKAKF
0Qyg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=smtpapi header.b=E7M6fnds;
spf=pass (google.com: domain of [email protected] designates 168.245.32.116 as permitted sender) smtp.mailfrom="[email protected]";
dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=belgorod-mail.com
Return-Path: [email protected]
Received: from xvfrnhtq.outbound-mail.sendgrid.net (xvfrnhtq.outbound-mail.sendgrid.net. [168.245.32.116])
by mx.google.com with ESMTPS id i184-20020a2554c1000000b0063465f75541si1009899ybb.155.2022.03.24.18.54.46
for [email protected]
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Thu, 24 Mar 2022 18:54:47 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 168.245.32.116 as permitted sender) client-ip=168.245.32.116;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=smtpapi header.b=E7M6fnds;
spf=pass (google.com: domain of [email protected] designates 168.245.32.116 as permitted sender) smtp.mailfrom="[email protected]";
dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=belgorod-mail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net; h=from:subject:mime-version:reply-to:x-feedback-id:to:content-type; s=smtpapi; bh=fJkxb5qXxiu5RW1djIzhN3J2il/9WIZJzDzyOr0Q1r8=; b=E7M6fndsDEt34URo1is4JNOW5S5ALNu4CepYfijkoIWTr6OEwPNjTMscvUkAqr6ZKrx9 xJXzzbbFSBBWfDMw3uUQugfse+Q4M3GpJVA7AzHyrCzKJqSDc+QAIrOoVzfj9E7xJPQg+p upatN1i/4V3F9XMfJDOOFps3L1fsPAcOA=
Received: by filterdrecv-7b5d7dc7c5-vwt99 with SMTP id filterdrecv-7b5d7dc7c5-vwt99-1-623D20E6-1D
2022-03-25 01:54:46.551690603 +0000 UTC m=+16595821.493998336
Received: from 127.0.0.1 (unknown) by geopod-ismtpd-6-2 (SG) with ESMTP id Oj0f4QEGQoiHuhaAuEIeSQ for [email protected]; Fri, 25 Mar 2022 01:54:46.236 +0000 (UTC)
Message-ID: [email protected]
From: Eugenia [email protected]
Subject: i came to say hello.
Date: Fri, 25 Mar 2022 01:54:46 +0000 (UTC)
MIME-Version: 1.0
Reply-To: Eugenia [email protected]
X-Feedback-ID: 26028551:SG
X-SG-EID: NjVYpqTNl83X6B72Nj7Z+PoEsEsrHY6UbNpzSPlRr17gWB9hBQ736fMr+KaZcwVZQo6X7KAVB/yXE1xPqItacun+igNXowJtzyzG8NI4tNj4B2ZfrhIGu4kP5BljKy2KL3lUJuekLG/8P0hGF2ewTByvve5DwBEozNcS9v6/Z+cBy5+nF8tUPBIrbmIUM3DlBAxeLpygZXAe5lLPZwl9dEUylnk1JHe/PED2wzzpRmLrnxsw5xEeONDSLdRaBseB9LgeGx8YLN2792t9dywToQ==
To: [email protected]
X-Entity-ID: ojQbbos+4EZaP9sqtwrTcQ==
Content-Type: multipart/alternative; boundary=“883a73d1b6644e5894c177dc19edc7ee75bfa1”
–883a73d1b6644e5894c177dc19edc7ee75bfa1
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Hello) Your e-mail I was provided at a marriage agency, dating online. I co=
uld not decide for a long time to write this letter. The combination of cir=
cumstances in my life has given me confidence write this is a message for y=
ou. It’s time to drastically change our life. I’m here looking for a man fo=
r a stable relationship! Are you a free man? Do you looking for a girl for =
a serious relationship? Let’s start our pleasant acquaintance and communica=
tion! My name Eugeniya. I am 28 years old. I from Ukraine. City of Chernigo=
v. At the moment, I forced temporarily moved to the city of Belgorod, in Ru=
ssia. But I will write about this in the next letter. I think that distance=
is not a hindrance for our communication? I have often heard about many ex=
amples of couples from different countries not a hindrance building stable =
serious relationship. Perhaps this is a story about us too! Each of us has =
a the right for happiness! If there’s a one chance in million chances that =
be together, let’s use it! I have a request, send me a message ONLY if you =
are interested in a relationship! This is very important! Waiting for your =
answer! More information about myself and my life write in the next message=
after your answer to my message. I am very glad to start our communication=
.
–883a73d1b6644e5894c177dc19edc7ee75bfa1
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
<META HTTP-EQUIV=3D"content-type" CONTENT=3D"text/html; charset=3Dutf-8">
Hello) Your e-mail I was provided at a marriage agency, dating online. I co=
uld not decide for a long time to write this letter. The combination of cir=
cumstances in my life has given me confidence write this is a message for y=
ou. It’s time to drastically change our life. I’m here looking for a man fo=
r a stable relationship! Are you a free man? Do you looking for a girl for =
a serious relationship? Let’s start our pleasant acquaintance and communica=
tion! My name Eugeniya. I am 28 years old. I from Ukraine. City of Chernigo=
v. At the moment, I forced temporarily moved to the city of Belgorod, in Ru=
ssia. But I will write about this in the next letter. I think that distance=
is not a hindrance for our communication? I have often heard about many ex=
amples of couples from different countries not a hindrance building stable =
serious relationship. Perhaps this is a story about us too! Each of us has =
a the right for happiness! If there’s a one chance in million chances that =
be together, let’s use it! I have a request, send me a message ONLY if you =
are interested in a relationship! This is very important! Waiting for your =
answer! More information about myself and my life write in the next message=
after your answer to my message. I am very glad to start our communication=
.
–883a73d1b6644e5894c177dc19edc7ee75bfa1–
Thank you!
I’m in love right now! She claims to be from Russia, but the IP address of the email is from the USA !!! What to do? Help me!!!
The registrar is Russian. It’s likely that the email server is in the US, so it’s masking the IP for privacy.
It is an obvious scammer, so knowing that, just play it out or ignore them. Found this info:
Source:
https://scamsurvivors.com/forum/viewtopic.php?f=11&t=96880
Summary
| ASN | AS11377 - SendGrid, Inc. |
|---|---|
| Hostname | xvfrnhtq.outbound-mail.sendgrid.net |
| Range | 168.245.0.0/18 |
| Company | SendGrid, Inc. |
| Hosted domains | 0 |
| Privacy | False |
| Anycast | False |
| ASN type | Business |
| Abuse contact | [email protected] |
Geolocation Data
| City | Ashburn |
|---|---|
| State | Virginia |
| Country | United States |
| Postal | 20147 |
| Local time | 05:18 PM, Sunday, April 03, 2022 |
| Timezone | America/New_York |
| Coordinates | 39.0437,-77.4875 |
Yes, I know, I’m trying to report the mailbox.
@zarko1971 @AngelFat The mail server provider is Dedicated Servers and Cloud based VPS - Reliable Hosting in Europe and US | FORNEX
Thanks