I'm a little confused over an email conversation I've had for a few days now.
I met a woman on a swedish dating site and she wanted me to email her. She says she's from Nizjnekamsk, Russia.
But I looked up her first email on a trace email site and it told me that the senders IP comes from Kassel, Germany. I kept on conversating with her and a few emails later the location of the email header IP changed to Hudiksvall, Sweden.
You can look up this for yourself, I'll paste the first email header and the other email header when the location changed.
Should I worry about this? Is she a russian scammer??
I even looked up the exact location of the IP address. The german one comes from Auedamm 48 in Kassel. That is an address of a chinese restaurant and a minigolf club.
The second email headers IP comes from Humlegatan 39 in Hudiksvall. Address of a ordinary family living in a ordinary house.
Delivered-To: {removed}@example.com
Received: by 10.140.101.131 with SMTP id u3csp2058767qge;
Thu, 27 Jul 2017 07:41:25 -0700 (PDT)
X-Received: by 10.223.176.57 with SMTP id f54mr489581wra.194.1501166485365;
Thu, 27 Jul 2017 07:41:25 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1501166485; cv=none;
d=google.com; s=arc-20160816;
b=dpM3jIjzhI2TnJU6vlS1R1g59YX2Aijl4pPQEFu5H4nE2mD5lLXtOr7sn8aoZOj8KX
2Rl0By1/tpbQt76HuNxelAh+a+XIjv6Dj4rvPrA7ud6dAGpYJM6AWRdjuPRRb+bAgBQu
kW/my8b+yH3lJ10qiXYrugHyre3nUmh8V2cfWh9wk54xOb2Oa/vD/1OLXgoc/ObcsJjM
nTnCrMxv1+DEaEptxem9jeFE4/s73A+lvxY2qEq8I4dnp8OXzFWIWKU5XcZAu8PmjZdM
9qcQzD3hLO6XmhYpHBQeztZPZVXRvqOx62uSfnqlOBWbKQTp8AILZjJVWt9CZdD5Hb7M
oqQg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:references:in-reply-to:subject:to:message-id
rganization:from
dkim-signature:arc-authentication-results;bh=0JnN01zbBg01uj+BLW+8uViObPxaxosa36SNwBBa3HE=;
b=ArCB/n6pZT98NxP0wR5pvUCVKsGrf15BLszF2jEVuan+pecZJVaCutW24VCpMORpbQ
R+gnQuvCWU0xQAEmhkmpjtUYIB4deGii9WysW2HPdw3oI3P9CES0JrXe+XJNHUfKDa7u
1AHX6wsLos5s6ee+s+gEIQPRv21KBiwO9OHSVrymCHkI/1DSsIN5xwiV5TurjP9zp8bT
YB0w2RLeEbHEjuIa3hKIgy9T0EsqLyT35GgLz4xkzQu2mCojKYU6csXzMjhDl8+ojnxU
7n7Vi/RcrwO4p9TeK3/cWy76XeQNCF1yUbKuoYN52WWUpG6Zkhk3LY2mhqH5RgmvazTB
/5oQ==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.b=bnklofIE;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:400c:c0c::242 as permitted sender) smtp.mailfrom=[email protected];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Return-Path: <[email protected]>
Received: from mail-wr0-x242.google.com (mail-wr0-x242.google.com. [2a00:1450:400c:c0c::242])
by mx.google.com with ESMTPS id l33si19225444wrl.217.2017.07.27.07.41.25
for <{removed}@example.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 27 Jul 2017 07:41:25 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:400c:c0c::242 as permitted sender) client-ip=2a00:1450:400c:c0c::242;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.b=bnklofIE;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:400c:c0c::242 as permitted sender) smtp.mailfrom=[email protected];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Received: by mail-wr0-x242.google.com with SMTP id 12so15609161wrb.4
for <{removed}@example.com>; Thu, 27 Jul 2017 07:41:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=date:from:organization:message-id:to:subject:in-reply-to:references
:mime-version;
bh=0JnN01zbBg01uj+BLW+8uViObPxaxosa36SNwBBa3HE=;
b=bnklofIE/XGTx64ECy8H2fzvdeHJBj4TtZ1ZYWyZcv7rUFOVmji5NOJiAdlrc33X0U
ryu8Hcmlt1Hnr1dxbYk9iSL8Vr52XHA/rpaVFipamibmdZU+gP66/7whl0Pbu70XgUFt
hTB4yfZn7yE4Vl8nXEyxaHs16rlgZ7UhyaA1KQAaoqvrfBu/JvgG61vdvxArJ+HfMLVm
AO5Yg+Ih8eSvXU8c9Ot/WkrLTL4pXfoztSsEt6x+QONwzb7/aD4dd/sRe4hmrQPYc6pn
13kXZC+SwAXQLqVge7znjvs3RA6g/u2D6pBA7Z0XSvylIAn87YLiEOI5/cp+n+KVESs1
CXjg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state
from:organization:message-id:to:subject:in-reply-to:references:mime-version;
bh=0JnN01zbBg01uj+BLW+8uViObPxaxosa36SNwBBa3HE=;
b=kwiR/Tu8Op6GsvvZ8u5xAO3NFXWrYbBFazDu+Vsq+SWvO9ouowanD08MmPGc4ulMV7
YeW/5P+63dxVvQFb8Admehr8W5UAu4XRu2XGsSB9/pwfdsU5t4VuMD5HyFx5EHXwetke
b3oDxFlDRT0sWehrUSl43QCqddXDO8Dy9ojUvfrYiqrwG0AQRXTmz3r3igUd1Snk8cl4
8EsYULL5ZPGh/A+JnH5kuaCXAlV4O2/0l+60auDwXWdyi9VGWO7cSzQthocw0k8BTMhl
9avIGL8PwzdIvb/Ep+7naSpZTml2Zl8cLB58mEl0Pt1rI5BP3ZS1ZWQZYIyygg55qGdP
1QUw==
X-Gm-Message-State: AIVw113gm9ZwIIBKfSHrkd/guPh3uB2WDQ+NNE3pe73X/91mzOjnWAqI LeZs2Et8+zU4wBdV
X-Received: by 10.223.167.73 with SMTP id e9mr3643814wrd.205.1501166484582;
Thu, 27 Jul 2017 07:41:24 -0700 (PDT)
Return-Path: <[email protected]>
Received: from [192.168.137.21] ([37.58.59.21])
by smtp.gmail.com with ESMTPSA id i67sm20157765wri.61.2017.07.27.07.41.18
for <{removed}@example.com>
(version=TLS1_1 cipher=AES128-SHA bits=128/128);
Thu, 27 Jul 2017 07:41:24 -0700 (PDT)
Date: Thu, 27 Jul 2017 16:35:50 +0200
From: [email protected]
Organization: [email protected]
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: Removed Example <{removed}@example.com>
Subject: Hej))
In-Reply-To: <[email protected]om>
References: <[email protected]om>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------11206315D2E4C783C"
------------11206315D2E4C783C
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<html><head><title>Hej))</title>
</head>
<body bgcolor =3D >
<span style=3D" font-family:'Courier New'; font-size: 9pt;">Hej<br>
Jag är väldigt glad att du skrev till mig, och det vill jag svara=
dig. Men först vill jag berätta om mig själv så kan du=
få lite bättre vet jag och jag hoppas också att du kommer a=
tt berätta lite om dig själv så att vi bättre lära=
känna varandra. Jag tror att det för oss starkt kommer att bidra=
till att komma närmare vår dröm och vi kommer att hitta ett=
gemensamt språk. Jag söker någon för ett seriöst =
förhållande för att vara med honom och leva resten av mitt l=
iv.<br>
Jag bor i Ryssland är det mycket långt från ditt hus, och j=
ag vet inte om du någonsin i Ryssland. Min stad som heter Nizjnekamsk.=
Det är en vacker stad och jag älskar det här med att leva. =
Nu är jag 32 år gammal och jag har fortfarande inte hittat din pa=
rtner. Jag romantisk man, och trots att alla säger att kärlek vid=
första ögonkastet inte finns, jag tror det. Jag vill hitta denna=
person, så när jag hittade honom visste jag direkt att detta ver=
kligen är den jag alltid letat efter. Jag är glad och nästan=
alltid glad, jag gillar att känna en känsla av förtroende. =
Jag är glad när jag efter min axel är självsäker, =
stark man, vem som helst kan stå upp för sig själv och f=
6;r sin älskade kvinna.<br>
Om du visste att den sista tiden ryska män mycket kallt behandla kvinn=
or. De är mycket roligare att dricka alkohol eller att sitta med v=
8;nner. Jag har aldrig varit gift, men hade jag träffat ett par gå=
;nger och kan bara säga att efter några datum de har förlora=
t allt intresse. Berätta för mina enda vänner. Ryska mä=
n försämras, de är mer intresserade av alkohol, inte vackra =
ryska kvinnor och det är verkligen bums ut mig.<br>
Men ändå för mig att det är sådan spänning o=
ch mystik. Jag är mycket rädd för att göra misstag och =
bli besviken.<br>
Jag vill bara vara lycklig och älskad för den här mannen att=
jag är redo att gå på alla. Jag kommer att bryr sig om och =
respekterar honom. <br>
Jag vet att jag också älskar fitness. Jag har alltid gå till=
gymmet tre gånger i veckan. Jag försöker att se efter sig s=
jälva och sitt utseende, eftersom det är mycket viktigt för =
varje kvinna. Jag älskar också att vara ensam med naturen. Jag &#=
228;lskar att gå på kvällen runt staden. Vårt land =
8;r mycket vacker, vi har en mycket rik natur och många sjöar och=
floder. Jag älskar att titta ut genom fönstret på den vackr=
a solnedgången.<br>
<br>
om du vill lära känna mig närmare, du har att säga och=
jag ska berätta för dig. I nästa brev försök att =
berätta om sig själva och sina klasser. Om du kan skicka mig g=
28;rna din bild.<br>
Så jag skicka dig några bilder. <br>
<br>
Jag ser fram emot din nästa bokstav Kseniya !!!</body></html>
------------11206315D2E4C783C
Content-Type: image/jpeg; name="A18ckOBeRb0.jpg"
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="A18ckOBeRb0.jpg"
------------11206315D2E4C783C
Content-Type: image/jpeg; name="X7xxa088di0.jpg"
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="X7xxa088di0.jpg"
------------11206315D2E4C783C--
The second Email header with Hudiksvall as location:
Delivered-To: {removed}@example.com
Received: by 10.140.101.131 with SMTP id u3csp816106qge;
Thu, 3 Aug 2017 07:05:58 -0700 (PDT)
X-Received: by 10.25.25.197 with SMTP id 188mr693609lfz.93.1501769158733;
Thu, 03 Aug 2017 07:05:58 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1501769158; cv=none;
d=google.com; s=arc-20160816;
b=xib55Jt97EMAF/FVhhMh2oSmrMH2YPz8w5IwHbLmr5INjeEtoZapsBP+Hfy3KGOLun
l8Jussga3/zVtNTDO6w6i10FgFlDhKD5yKQd4IEZxfI+G6w5I3C9zFZcZBr7zQakAO4W
ChQGDYS+H1jwoO/nu5CVJS57OaNACkZDZSL0RtFsp47urZtD1NxgzTJg5SHKdUVAaPeV
QwEGGEdOWJX09cyzWCxp1mgkjGpzPiX5cMEQnDcupfUdI2PoJ1aJksBmgwJUL7cQ7N2d
f7TcEBmkPe4ZMHVw7hwOsy/IJ3g6FVCCoYieBh9aCkpZVyC4vKYlTP17EtC++2PJjsll
MSkA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:references:in-reply-to:subject:to:message-id
rganization:fromdkim-signature:arc-authentication-results;bh=WpIXSlLkTz8ot+s18Mz2oyvcH7G2XDRK1g8M+Wa7Sms=;
b=1Do8Hodng+jayUh4I/+we6PHgwW4rgdOrjzg6dYdKby7g9ra7npR2N6OIKZeaJuGeq
vrTqK29o5xy6JUgrIjOSS+Sey1q/56Nop9rufZYvsWDGLXR3+B8WzrVZ2vRbsrQ39Vi1
oQ3rBaNeqcTO5AqKb8IXVMC+TnzwhpGV0vm9n8V4QSAQCiyMoaHyUCKPPATnkNxj9rZa
+GraFUWLsJQPB8U7JfOC5OcW9JgIWb7FXhhmS9svpnXSbZ1YWGRK96mB+biNRjPtW71I
OtDjW4Dxbrf0MBkh01GY84996F+uSbKypd9YDeNfK924TkwBvkkI9wRxc5Tibpmgy81q
z+vw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.b=MWuQ0rlH;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c07::241 as permitted sender) smtp.mailfrom=[email protected];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Return-Path: <[email protected]>
Received: from mail-lf0-x241.google.com (mail-lf0-x241.google.com. [2a00:1450:4010:c07::241])
by mx.google.com with ESMTPS id r14si870456ljd.471.2017.08.03.07.05.58
for <{removed}@example.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 03 Aug 2017 07:05:58 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:4010:c07::241 as permitted sender) client-ip=2a00:1450:4010:c07::241;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.b=MWuQ0rlH;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c07::241 as permitted sender) smtp.mailfrom=[email protected];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Received: by mail-lf0-x241.google.com with SMTP id y15so937628lfd.5
for <{removed}@example.com>; Thu, 03 Aug 2017 07:05:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=date:from:organization:message-id:to:subject:in-reply-to:references
:mime-version;
bh=WpIXSlLkTz8ot+s18Mz2oyvcH7G2XDRK1g8M+Wa7Sms=;
b=MWuQ0rlHS/TK0bl36YxKkGH6sHLWe42sBMgPZca4x7Hhk5O+G97glHqNwzpOboaSOV
/VQtfEkfWNiQGi9sHgh8MwFkSgv8xLCT9FXHsfDQhwFY7c1dl/aQBzm4bIEv4TzMx3gt
xUdjxtTxtWmp6bm4Oir77YPMxLq4HrAk/QKeqaDukhPb2cileCxp5lOn4e6SF8KFv7lb
oIz3dNR8GDmnmmvvO8GuPB40NeM74Jpm1s+kKfdAzE4Q6yuo9GV0hA95F1X7awqP8ML+
YJb4PTpK5Ddeso0KGQOkVEMVugPQ6MueYUP8coCp+ZpUKq3HTsBJeaJP1LtdNL7MSPkj
U0Sw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state
from:organization:message-id:to:subject:in-reply-to:references:mime-version;
bh=WpIXSlLkTz8ot+s18Mz2oyvcH7G2XDRK1g8M+Wa7Sms=;
b=hyUlnWu41PuIlnh5RRjeCfhzJO31C4KjFhuscqGWsX6+SrXargh6fFHNW12dGVqMVo
57NTfKgiws6CaU/4LlCdNWLHOhbvfRh5r63nWzWrqUwu9AQ7IrRkoh3rDbblIhxSYvdQ
9yPJR1CxuuWtq0daNhyltxVgM5mNQ2sYMCGsj2cyTggzZUjZ0hHk3uz/i1e0D7PCR8Kl
eXKJ1JRTgI0j5ju1yzRfvIe5D6dmEt3f90EiQv/y+a1C6KloHwlbWY1LxqLVGzxCUhFH
UKpYaB7a6gwnZ8Bc84ShOWi0KuS85lB6A5dZR7yX2hwzDU5Y27KyHLra7ynnr/wLVVX+
3Jdg==
X-Gm-Message-State: AIVw110rtyuhjpYLVjp+qf93TIch3gwGpvPQnkSOsq4Ae+ovVL/cbIc6 EVt97iGUvedZcgTW
X-Received: by 10.46.21.72 with SMTP id 8mr785606ljv.115.1501769157803;
Thu, 03 Aug 2017 07:05:57 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ?.? ([95.143.193.61])
by smtp.gmail.com with ESMTPSA id g19sm1621328lfg.63.2017.08.03.07.05.52
for <{removed}@example.com>
(version=TLS1_1 cipher=AES128-SHA bits=128/128);
Thu, 03 Aug 2017 07:05:56 -0700 (PDT)
Date: Thu, 3 Aug 2017 16:05:46 +0200
From: [email protected]
Organization: [email protected]
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: Removed Example <{removed}@example.com>
Subject: Hello
In-Reply-To: <[email protected]om>
References: <[email protected]om>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------0D612E0143A7C2D59"
------------0D612E0143A7C2D59
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Hi dear!!!!!! I'm so happy again to receive from you the letter.Last
night when I went to bed, I thought about you and when I fell asleep I
had a dream. In the dream, we walked together, hand in hand, along the
ocean shore. And the ocean, playful as a kitten, licking our tracks
from the wet sand. Milky pink dawn was just born in the cloudless sky,
spraying waves with its Golden sparkle, light breeze plays with our
hair. Yes, of course I saw the video yesterday, which you I send. I
also liked your photo which you send me. Very sorry that you lost your
phone. Yes, of course we could in the future speak on the phone. I
prefer to write via mail. Because to write in "SMS", then too it is
not profitable in our country. I'm really glad that we met. Before our
acquaintance my life was boring and meaningless after all my failures.
And I thought that I will never be able to believe the man. However,
as communication with you I start to slowly change their minds. I
don't know why, but I like a little hang on your every word. Perhaps
for the time when I was alone, I was able to wean from it all. Don't
know, I still haven't figured out in my mind. But I'm glad we know
each other. I'm sorry that I can't take you today to write but I'm
very tired at work. I'll wait for your next letter! I really hope
you'll like my photos.
Yours Kseniya
------------0D612E0143A7C2D59
Content-Type: image/jpeg; name="43294HGf.jpg"
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="43294HGf.jpg"
------------0D612E0143A7C2D59
Content-Type: image/jpeg; name="f8HD7fd.jpg"
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="f8HD7fd.jpg"
------------0D612E0143A7C2D59
Content-Type: image/jpeg; name="H7f4FHF4G.jpg"
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="H7f4FHF4G.jpg"
------------0D612E0143A7C2D59--
Thanks for your help.
Regards DJ
