Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Heisses Thema (Mehr als 10 Antworten) Larisa <smirn.larisa@yahoo.com> (Gelesen: 2679 mal)
 
nelli
Themenstarter Themenstarter
Scam Warners
*****
Offline


Cherchez la Femme

Beiträge: 7
Standort: Eching
Mitglied seit: 19. August 2009
Geschlecht: männlich
Larisa <smirn.larisa@yahoo.com>
20. August 2009 um 09:30
 
Hallo,

seit 2 wochen krieg ich mails von einen gewisse Larissa. Alle e-mails sind so geschrieben, wie ich das hier gelesen hab, also sicher scammer. Kann mir jemand helfen, herausfinden, woher die mails kommen?
Anbei paar fotos, villeicht kennt jemand.

« Zuletzt geändert: 20. August 2009 um 16:22 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Larisa, smirn.larisa@yahoo.com
Antwort #1 - 20. August 2009 um 10:37
 
@ nelli

Bitte poste auch die Mails mit den Headern.
  
Zum Seitenanfang
 
IP gespeichert
 
nelli
Themenstarter Themenstarter
Scam Warners
*****
Offline


Cherchez la Femme

Beiträge: 7
Standort: Eching
Mitglied seit: 19. August 2009
Geschlecht: männlich
Re: Larisa, smirn.larisa@yahoo.com
Antwort #2 - 20. August 2009 um 11:03
 
smirn.larisa@yahoo.com
Sie kommt angeblich von Yoshkar-Ola

« Zuletzt geändert: 20. August 2009 um 15:14 von »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #3 - 20. August 2009 um 11:13
 
nelli schrieb on 20. August 2009 um 11:03:
Sie kommt angeblich von Yoshkar-Ola 

Eine Herkunft aus Yoshkar-Ola ist kein Indiz für Scam, da sicherlich nicht die ganze Bevölkerung von Yoshkar-Ola in diesen Betrug involviert ist.
Daher habe ich sie in den nichtöffentlichen Bereich verschoben.

Hier bleibt sie, bis klar wird, ob es sich um Scam handelt. Das wird aber nicht durch Bilder klar, sondern durch ihre Mails und die Quelltext der Mails!
« Zuletzt geändert: 20. August 2009 um 11:13 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #4 - 20. August 2009 um 11:14
 
Zu dem Foto:

Zitat:
# Original Datum/Zeit = 2008:02:27 12:29:00
# Digitalisierung Datum/Zeit = 2008:02:27 12:29:00
# Bild Beschreibung = OLYMPUS DIGITAL CAMERA
# Kamera Hersteller = OLYMPUS IMAGING CORP.
# Kamera Model = E-330
# Orientierung = normal (1)
# X-Auflösung = 300/1 ===> 300
# Y-Auflösung = 300/1 ===> 300
# X/Y-Auflösungseinheit = (null)
# Software/Firmware Version = ACD Systems Digital Imaging
# Letzte Änderung Datum/Uhrzeit = 2008:03:04 21:53:58
# Y/Cb/Cr Positionierung (Subsampling) = zentriert (1)
« Zuletzt geändert: 20. August 2009 um 11:15 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
nelli
Themenstarter Themenstarter
Scam Warners
*****
Offline


Cherchez la Femme

Beiträge: 7
Standort: Eching
Mitglied seit: 19. August 2009
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #5 - 20. August 2009 um 11:16
 
Danke Uli, hoffentlich kriegst was raus.
  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #6 - 20. August 2009 um 11:18
 
nelli schrieb on 20. August 2009 um 11:16:
Danke Uli, hoffentlich kriegst was raus. 

Dann poste endlich die Mails und die Quelltext!
  
Zum Seitenanfang
 
IP gespeichert
 
nelli
Themenstarter Themenstarter
Scam Warners
*****
Offline


Cherchez la Femme

Beiträge: 7
Standort: Eching
Mitglied seit: 19. August 2009
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #7 - 20. August 2009 um 11:33
 
Spoiler:
 
 
Received: from [68.142.237.94] (helo=n9.bullet.re3.yahoo.com)
by mx03.web.de with smtp (WEB.DE 4.110 #314)
id 1MddPt-0002ki-00
for xxxxx@web.de; Wed, 19 Aug 2009 07:08:57 +0200
Received: from [68.142.237.88] by n9.bullet.re3.yahoo.com with NNFMP; 19 Aug 2009 05:08:56 -0000
Received: from [66.196.97.144] by t4.bullet.re3.yahoo.com with NNFMP; 19 Aug 2009 05:08:56 -0000
Received: from [127.0.0.1] by omp202.mail.re3.yahoo.com with NNFMP; 19 Aug 2009 05:08:56 -0000
X-Yahoo-Newman-Id: 493728.53849.bm@omp202.mail.re3.yahoo.com
Received: (qmail 80210 invoked from network); 19 Aug 2009 05:08:56 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
tent-Type;
XbU3kbTtBa9Sk= ;
Received: from unknown (HELO PHILKA) (smirn.larisa@213.163.91.89 with plain)
by smtp103.plus.mail.re1.yahoo.com with SMTP; 19 Aug 2009 05:08:54 -0000
X-Yahoo-SMTP: nWtcR62swBB.hIQKzJ8TtsoiW7WZbIZDGQ--
X-YMail-OSG: VVvqBjtk0Ngyt__XXzTBsM6YZDEuvlC72_RzM3Wbps0-
X-Yahoo-Newman-Property: ymail-3
Date: Wed, 19 Aug 2009 08:55:28 +0400
From: Lariska <smirn.larisa@yahoo.com>
X-Mailer: The Bat! (v3.0.1.33) UNREG / CD5BF9353B3B7091
Reply-To: Lariska <smirn.larisa@yahoo.com>
X-Priority: 3 (Normal)
Message-ID: <1733552675.20090819085528@yahoo.com>
To: xxxxx@web.de
Subject: Hello Josef!!!!
In-Reply-To: <50905012@web.de>
References: <50905012@web.de>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------1173C351E482608"
Return-Path: smirn.larisa@yahoo.com

 
Änderung:
Bitte deine Mail-Adresse unkenntlich machen. Ich habe es dir hier rot gekennzeichnet. Es dient  zu deiner eigenen Sicherheit und schützt dich vor SPAM!!
 

 
« Zuletzt geändert: 20. August 2009 um 23:05 von Wesermann »  
Zum Seitenanfang
 
IP gespeichert
 
nelli
Themenstarter Themenstarter
Scam Warners
*****
Offline


Cherchez la Femme

Beiträge: 7
Standort: Eching
Mitglied seit: 19. August 2009
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #8 - 20. August 2009 um 11:34
 
Hallo Uli, sorry, wenn nicht so schnell geht, aber computertechnisch bin ich nicht so begabt!! Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
LeChuck
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 3705
Standort: Braunschweig
Mitglied seit: 13. Januar 2009
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #9 - 20. August 2009 um 11:36
 
Bei Romancescam gibt es eine Larisa <larisa_smirn@yahoo.com>, wir haben hier smirn.larisa@yahoo.com...... Die Frauen auf den Fotos haben jedoch kaum Ähnlichkeit. 
Smiley

« Zuletzt geändert: 20. August 2009 um 15:14 von »  
Zum Seitenanfang
ICQ  
IP gespeichert
 
nelli
Themenstarter Themenstarter
Scam Warners
*****
Offline


Cherchez la Femme

Beiträge: 7
Standort: Eching
Mitglied seit: 19. August 2009
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #10 - 20. August 2009 um 11:39
 
Hier zumbeispiel:

Hello Josef!!!!
I am very glad to see your letter. How are you doing, how your day?
Josef, I wish to tell to you, that my heart began to fight more often when I think of you.
I wish to have the favourite person nearby, feeling care and constant support a difficult minute, here to what to aspire each person in a life, and I too. 
I was close fortunately in the past, but my trust to break my heart. 
Josef, I wish to answer your questions. I heard about Msn much, but it is not possible on we wash the computer, I tried to establish it,
but is all the same useless. But I think, that it is possible to use other program for a chat - yahoo-messenger and as soon as I will
have more free time after work I will write to you. It is very pleasant to me to receive, your new photo.
In the world now so it is a lot of meanness and deceit that it is necessary to show consideration for people whom to surround you very much. I not to speak to you,
That it is necessary to concern about mistrust everyone, it is just necessary to know the person so that to be completely assured in it. I the nobility you not long, but I can tell,
That you very fair and opened and it very much to involve me and to allow to me to believe, that I can be with you.
My mum to learn me, that I should be always open. I to tell to her, that our relations to develop successfully, and she is happy for us.
She to dream, that I, at last, there was not one, and to have the favourite person. We are far apart. But it does not stir to our dialogue.
Though I already thought, that through the Internet it is not absolutely enough dialogue to understand each other more strongly. What do you think of it? I would like to see you.
But I do not know as it probably, because we very much far apart.
I had thoughts to leave the country. To tell the truth to me such life does not arrange. 
I work as the doctor. In the childhood I very much dreamt to become the doctor. But here do not appreciate work of medical workers. That concerning abroad.
I heard, that much Russian girls from a province find the present love in other country. I do not know as to explain this phenomenon.
I think, that the western men concern women in another way. 
You like me also I think, that our relations can be deeper. I do not know how to explain it words. I simply feel it.
Your letters do my mood high. To me it becomes joyful on a shower. I wish to ask you to write me your address, probably,
I will write you the hand-written letter. 
I will wait your answer.
I hope, that you will write to me soon.
Yours Larisa
 
 
Oder nochmal tipisch scam:

Hello Josef!!!
I am very glad, that you have answered my letter. It is very pleasant to me to read your next letter.
I with the great pleasure write now to you this letter.
So it is pleasant to me to receive your photo. You to me seem to darlings and it is valid so.
But I think you understand, that I search in you not for appearance, and your soul.
I do not wish you to upset, but I live in Russia. I never lived abroad and did not leave for limits of my country.
I think, that it does not become a hindrance to our relations. I badly still know the Internet and the manager the cafe Internet
have advised to me to be registered from other country and then I can find to myself the worthy person for friendship and is possible
something big.
I guess, that you likely wish to learn about me as much as possible information.
First of all Josef, I think, that you would like have learnt about the main lines of my character. I very quiet, I do not put never myself above others,
I do not like to be proud of something as do some. Pride does not paint the person, it spoils it. I cannot precisely describe character,
It is not too easy. I hope, that you learn about my character in process of our correspondence.
I very much love productive leisure. In the summer we with girlfriends go to bathe and sunbathe, and in the evening we walk. On our beautiful city.
In ours though and not the big city, there are many remarkable places
Where it is possible to have a rest and take a walk. Especially, I love walks on an evening city.
In the winter I like to ski and on the fads. Still I very much like to dance. And how you like to have a rest? 
You like to be engaged in what kinds of sports? You like to dance? 
I live in Russia. I work as the doctor in a local polyclinic. My speciality - the therapist. I very much love the work. I already at school dreamt to become the doctor.
I write to you on your native language. As I well understand your language
Also I can freely communicate, because I studied it at school, then I have continued training at university.
And in what city you live? And what your trade? I wake up in the half seventh mornings and I go to a shower. After that I go to have breakfast,
For a breakfast I eat sandwiches and I drink coffee with milk. In half eighth I leave the house and I go on a stop. I go for work by public transport.
Sometimes at a stop there are many people and I go for work on foot. In general I like to walk before my work from the house of 20 minutes of walking.
My working day lasts with 8 to 5 o'clock in the evening. After work I come very got tired and at once I go to accept a bathroom.
After that I feel restoration of forces.
We live together with mother. My mother very good person. I very much love it.
As I wish to write to you how we spend with äðóçüìè the days off.
In the summer we with äðüÿìè go to campaigns. We skate and on skis in the winter. Winter my most favourite season. Though at us also happens very coldly,
But I all the same love this season. In the winter at us I am very beautiful also I do not know with what to compare this beauty. Therefore I also love winter.
As on days off I with the girlfriend go to gymnastics to support myself in the sports form.
Josef hoping, that soon I will see the same big letter from you. In êîòðîì you as ðàññêàæü about the óâ treatments.
Míå it will be very pleasant, if you write me such big letters. To me it will be pleasant, to read and learn as much as possible about you.
I will be very glad, if I see your photo in your next letter.
I will expect your new letter and your photo.
Larisa 
 
  
Zum Seitenanfang
 
IP gespeichert
 
Webmaster
Forum Administrator
*****
Offline


Abgeschlafft und ausgepufft!!

Beiträge: 23882
Standort: Йошкар-Ола
Mitglied seit: 06. Januar 2008
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #11 - 20. August 2009 um 14:34
 
Zitat:
Received: from unknown (HELO PHILKA) (smirn.larisa@213.163.91.89 with plain)



Schön geoutet.

Smiley

Code
Alles auswählen
IPv4-adress:  213.163.91.89



inetnum:    213.163.91.36 - 213.163.91.238
netname:    SERVERBOOST
descr:    Serverboost IP space
country:    NL
admin-c:    SR4706-RIPE
tech-c:   SR4706-RIPE
status:   ASSIGNED PA
mnt-by:   SERVERBOOST-MNT

role:     Serverboost role
address:    Piet Paaltjensplein 62
address:    3027 TZ Rotterdam
address:    The Netherlands 




Zitat:
HELO PHILKA


Da brauche ich wohl nichts mehr dazu schreiben. 

Smiley

« Zuletzt geändert: 20. August 2009 um 14:34 von Webmaster »  
Zum Seitenanfang
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #12 - 20. August 2009 um 22:22
 
nelli schrieb on 20. August 2009 um 11:34:
Hallo Uli, sorry, wenn nicht so schnell geht, aber computertechnisch bin ich nicht so begabt!! Smiley

Das macht auch nichts. Aber darum weisen wir ja auch auf das Problem hin. So kannst Du lernen und es nächstes mal richtig machen! Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
nelli
Themenstarter Themenstarter
Scam Warners
*****
Offline


Cherchez la Femme

Beiträge: 7
Standort: Eching
Mitglied seit: 19. August 2009
Geschlecht: männlich
Re: Larisa <smirn.larisa@yahoo.com>
Antwort #13 - 21. August 2009 um 00:18
 
Danke für Euere hilfe, damit ist für mich die sache erledigt.
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema