Information on romance scams and scammers.
by Tim Atem Sun Nov 29, 2015 11:30 am
Has been spamming me, but I haven't had time to look into it until today. There's no outright proof of scam, but the domain marryforever.com has been registered for a long time, but is privacy registered for one year at a time, no about us page, requires a Google login to register, the photos on the homepage are being used by numerous other names on Google+. This particular email led me to a log-in page where there's a log-in and password right there on the webpage. The fact that they want your Google log-in is a huge red flag and is probably a phishing attempt!

Delivered-To: <snipped>
Received: by 10.55.25.146 with SMTP id 18csp629661qkz;
Sun, 8 Nov 2015 05:36:56 -0800 (PST)
X-Received: by 10.68.138.233 with SMTP id qt9mr31284863pbb.99.1446989816168;
Sun, 08 Nov 2015 05:36:56 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.kvrplacements.com ([184.105.237.244])
by mx.google.com with ESMTP id gu5si15371404pbc.252.2015.11.08.05.36.55
for <<snipped>>;
Sun, 08 Nov 2015 05:36:56 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 184.105.237.244 as permitted sender) client-ip=184.105.237.244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 184.105.237.244 as permitted sender) [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=----_SmarterMail_NextPart_5522477883452248
Date: Sun, 8 Nov 2015 05:33:07 -0800
Subject: hi
From: [email protected]
Reply-To: [email protected]
To: <snipped>
Message-ID: <8b69df377d5c4315b8b965afd9442e33@b6303260a8424c5c9c5d80e5a067ec12>


kindly go through this profile
http://www.marryforever.com/members/pro ... 1ef4261c4e

check out all the photos, learn more about it

and email me how this profile suits you, so that i can proceed further
at [email protected]
so that i can follow up

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

by Tim Atem Thu Jan 28, 2016 12:16 pm
I've never signed up at this site nor replied to any of the spam emails they've sent, yet they continue to email me.

Delivered-To: <snipped>
Received: by 10.55.47.194 with SMTP id v185csp2939448qkh;
Wed, 20 Jan 2016 07:06:33 -0800 (PST)
X-Received: by 10.98.14.69 with SMTP id w66mr32973383pfi.144.1453302393725;
Wed, 20 Jan 2016 07:06:33 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.kvrplacements.com ([184.105.237.244])
by mx.google.com with ESMTP id y15si45464885pfa.162.2016.01.20.07.06.33
for <<snipped>>;
Wed, 20 Jan 2016 07:06:33 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 184.105.237.244 as permitted sender) client-ip=184.105.237.244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 184.105.237.244 as permitted sender) [email protected]
Message-Id: <[email protected]>
Received: from WIN-DV2CNI4B47H (WIN-DV2CNI4B47H [184.105.237.244]) by mail.kvrplacements.com with SMTP;
Wed, 20 Jan 2016 06:47:09 -0800
MIME-Version: 1.0
From: "Kiran Singh" <[email protected]>
To: <snipped>
Date: 20 Jan 2016 06:47:09 -0800
Subject: Hi
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Dear <snipped>,
i saw your profile on marryforever,i think i know you,
can i know more about you, when are you online to chat

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
by Tim Atem Fri Feb 26, 2016 10:01 am
Again, I do not have a profile at this site and have never signed up for anything at this site.
Delivered-To: <snipped>
Received: by 10.55.47.194 with SMTP id v185csp327475qkh;
Sat, 13 Feb 2016 19:13:34 -0800 (PST)
X-Received: by 10.98.93.2 with SMTP id r2mr13827404pfb.64.1455419614940;
Sat, 13 Feb 2016 19:13:34 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.jobdhundo.com (ns1.jobdhundo.com. [216.218.185.79])
by mx.google.com with ESMTP id ra2si32110536pab.209.2016.02.13.19.13.34
for <<snipped>>;
Sat, 13 Feb 2016 19:13:34 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 216.218.185.79 as permitted sender) client-ip=216.218.185.79;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 216.218.185.79 as permitted sender) [email protected]
Message-Id: <56bff0de.c28b420a.75e4a.fffffee7SMTPIN_ADDED_MISSING@mx.google.com>
Received: from WIN-7B51LLEKOUM (WIN-7B51LLEKOUM [216.218.185.79]) by mail.jobdhundo.com with SMTP;
Sat, 13 Feb 2016 19:13:15 -0800
MIME-Version: 1.0
From: "Priti Jain" <[email protected]>
To: <snipped>
Date: 13 Feb 2016 19:13:15 -0800
Subject: Hi <snipped>
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable


Dear <snipped>,
i saw your profile on marryforever,
can i know more about you, come online to chat on marryforever

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
by Tim Atem Thu Jul 28, 2016 8:13 am
Delivered-To: <snipped>
Received: by 10.55.116.197 with SMTP id p188csp1232650qkc;
Mon, 25 Jul 2016 08:22:54 -0700 (PDT)
X-Received: by 10.66.134.20 with SMTP id pg20mr30176695pab.98.1469460174651;
Mon, 25 Jul 2016 08:22:54 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.jobdhundo.com (ns1.jobdhundo.com. [216.218.185.79])
by mx.google.com with ESMTP id g90si34116865pfa.13.2016.07.25.08.22.54
for <<snipped>>;
Mon, 25 Jul 2016 08:22:54 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 216.218.185.79 as permitted sender) client-ip=216.218.185.79;
Authentication-Results: mx.google.com;
dkim=temperror (no key for signature) [email protected];
spf=pass (google.com: domain of [email protected] designates 216.218.185.79 as permitted sender) [email protected]
Message-Id: <[email protected]>
DomainKey-Signature: <snipped>
DKIM-Signature: <snipped>
Received: from WIN-7B51LLEKOUM (WIN-7B51LLEKOUM [216.218.185.79]) by mail.jobdhundo.com with SMTP;
Mon, 25 Jul 2016 08:22:31 -0700
MIME-Version: 1.0
From: "Sheetal Jain" <[email protected]>
To: <snipped>
Date: 25 Jul 2016 08:22:31 -0700
Subject: Marriage Proposal
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable



from: Sheetal Jain - [email protected]

Hi
Are you looking for marriage
we have a very good profile for you

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: Bing [Bot], ClaudeBot and 14 guests