Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: [1] 2 3  Thema versenden
Sehr heißes Thema (Mehr als 25 Antworten) Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com> (Gelesen: 12795 mal)
 
Siggi
Ex-Mitglied


Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
02. November 2009 um 07:32
 
Hello!  My name is Katya. You gave your e-mail on the dating site.
I want to test is it rights. I will wait for your answer.
p.s. I send you pictures and hope to see you too.

 

 



 

Off Topic KommentarMore pictures in the gallery: Smiley


Spoiler für Header:
Return-Path: <beautugirl@gmail.com>
Received: from mailin15.aul.t-online.de (mailin15.aul.t-online.de [172.20.27.49])
      by mhead603 with LMTP;
      Sat, 31 Oct 2009 12:01:56 +0100
X-Sieve: CMU Sieve 2.3
Received: from mail-qy0-f181.google.com ([209.85.221.181]) by mailin15.aul.t-online.de
     with esmtp id 1N4BiM-03EBbU0; Sat, 31 Oct 2009 12:01:46 +0100
Received: by qyk11 with SMTP id 11so1955622qyk.13
        for <xxxxxxxx>; Sat, 31 Oct 2009 04:01:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:received:received:date:from:x-priority
         :message-id:to:subject:mime-version:content-type;
        bh=fq137iBflUNM2TLwTfilwOWpkyVsqQQzUQjgbBZhfBk=;
        b=RI57o2VFO4L4xB9g9Qb5DrqdNwWBacs9wAQ8+ErboBr3CoATMqOr9QPXG5xAqwDDRz
         144SIgEzi9y/kt0NkYJOUCLifigd9mKXiG3EO2P0AxCf9Mt6jn7MrAvSjtrQdAwcDr/R
         hE/qfVEYdyZh6p9GPrMHi+1ZPGKLgHZTBcS/o=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=date:from:x-priority:message-id:to:subject:mime-version
         :content-type;
        b=nvZleauJHT9mbHopT6gC7AB13ITCg6awJMeB8Umk9IRMj/We+KweYv98jgoKKuCG20
         jWdfSISH8xQjZvorS10ww717sPfF2C5+U0sh9OrUCbED4kvJiiYus/DqP5Ioj4JNpc2k
         CvY/F5wlOuMsjCApPDPshiV/ymrXQZ4dxDmzA=
Received: by 10.224.114.30 with SMTP id c30mr1588454qaq.345.1256986905220;
        Sat, 31 Oct 2009 04:01:45 -0700 (PDT)
Received: from NB2 (CPE000d9d9cd831-CM001bd7a69380.cpe.net.cable.rogers.com [99.227.16.163])
        by mx.google.com with ESMTPS id 21sm2840909qyk.8.2009.10.31.04.01.36
        (version=SSLv3 cipher=OTHER);
        Sat, 31 Oct 2009 04:01:44 -0700 (PDT)
Date: Sat, 31 Oct 2009 13:58:21 +0300
From: Katya <beautugirl@gmail.com>
X-Priority: 3 (Normal)
Message-ID: <1848587419.20091031135821@gmail.com>
To: xxxxxxxxxxxx
  
« Zuletzt geändert: 02. Februar 2014 um 18:45 von scambuster » 
Grund: ru10058 
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Razor Buzz
Forum Administrator
Paragraphenreiter Öffentlichkeitsarbeit
*****
Offline


Servus

Beiträge: 5947
Standort: Oberpfalz
Mitglied seit: 24. April 2008
Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #1 - 02. November 2009 um 09:21
 
Smiley

Und zwar über Kanada:

Code
Alles auswählen
99.227.16.163
      Rogers Communications Inc.
      Domain Admin
      333 Bloor St. East., 9th Floor .
      Toronto, ON M4W 1G9
      CA
      Email: domadmin@rci.rogers.com
 




Zitat:

Date: Sat, 31 Oct 2009 13:58:21 +0300
From: Katya <beautugirl@gmail.com>


Date-Zeile verweist aber nach Russland

Smiley
« Zuletzt geändert: 03. Oktober 2010 um 15:18 von Webmaster »  
Zum Seitenanfang
ICQ  
IP gespeichert
 
Lüsi
Ex-Mitglied


Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #2 - 19. November 2009 um 14:41
 
Vlad hat mich erinner das ich noch nicht geantwortet habe Lippen versiegelt

Privet  xxxxx,  in  russia  this  mean "Hello", today was very nice

weather and after walking to home after work, i check my email and did

not  see  your le  tter. Hope to see the answer soon, may be tomorrow?

Smiley Ok, just will wait. Bye, Katya


Spoiler für Header:

Return-Path: <beautugirl@gmail.com>
Received: from mailin02.aul.t-online.de (mailin02.aul.t-online.de [172.20.26.43])
      by mhead802 with LMTP;
      Thu, 19 Nov 2009 12:37:33 +0100
X-Sieve: CMU Sieve 2.3
Received: from ey-out-2122.google.com ([74.125.78.24]) by mailin02.aul.t-online.de
     with esmtp id 1NB5KK-08kXUe0; Thu, 19 Nov 2009 12:37:28 +0100
Received: by ey-out-2122.google.com with SMTP id 25so835eya.3
        for <xxxxxxxxxxxxxx>; Thu, 19 Nov 2009 03:37:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:received:received:date:from:x-priority
         :message-id:to:subject:in-reply-to:references:mime-version
         :content-type:content-transfer-encoding;
        bh=YsrEXPCcIoWVaFQVMz1lSyLS6/JlVA8IZ38Y8zxFOo8=;
        b=qC9MbMG2McrnLmB8FPWflIpr8Dqu8bJ+3ECFFvh1Eu6fvmkeUePrl7026CqxiAurbQ
         ux/FLlDdosnjQnhHvXvM4S0eux3gc15x+DK0XUi6J/4IRJFSBVyNmQJpie8oZIEhK978
         UVwg2iN6oxOU/jxVOHcpIJt9eBSzr7za6wzD8=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=date:from:x-priority:message-id:to:subject:in-reply-to:references
         :mime-version:content-type:content-transfer-encoding;
        b=XbBzZ3g3WLvGFDY4HBNRmmy5peK8SztiOrslzjrTnwrEFfRiHjgFdihehWiwoSPeBw
         wNcdvs33CJfRDB74acCIwSRAxJiqFej6GQ8vB7MzsJXRcDMkSM4I1F/QjHns10sumntd
         lN+h22C30PGDnTmbO6ao5D8qhiiyMU6UTIgns=
Received: by 10.213.96.83 with SMTP id g19mr1481902ebn.20.1258630648317;
        Thu, 19 Nov 2009 03:37:28 -0800 (PST)
Received: from NB2 (mich2.fusa.be [213.251.177.77])
        by mx.google.com with ESMTPS id 7sm115192eyg.25.2009.11.19.03.37.26
        (version=SSLv3 cipher=OTHER);
        Thu, 19 Nov 2009 03:37:27 -0800 (PST)
Date: Thu, 19 Nov 2009 14:21:06 +0300
From: Katya <beautugirl@gmail.com>
X-Priority: 3 (Normal)
« Zuletzt geändert: 27. November 2009 um 18:16 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Razor Buzz
Forum Administrator
Paragraphenreiter Öffentlichkeitsarbeit
*****
Offline


Servus

Beiträge: 5947
Standort: Oberpfalz
Mitglied seit: 24. April 2008
Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #3 - 19. November 2009 um 14:45
 
Smiley


Diesmal über Frankreich:

Code
Alles auswählen
inetnum:        213.251.176.0 - 213.251.183.255
netname:        OVH
descr:          OVH SAS
descr:          Dedicated Servers (2006)
descr:          http://www.ovh.com
country:        FR

 

« Zuletzt geändert: 27. November 2009 um 18:16 von Webmaster »  
Zum Seitenanfang
ICQ  
IP gespeichert
 
meester
Ex-Mitglied


Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #4 - 27. November 2009 um 04:02
 
Hi, schreibe seit ein paar Tagen mit der nachfolgenden Dame,
ich denke Scamer, möchte euer Urteil.
Danke im voraus
Meester 




Ekaterina" <lovedkatya@googlemail.com

Hello again,
It's Ekaterina, but you can call me just Katya. You left me his email
from russianeuro, my nickname Klybnichka. I get your email and
decided to delete my profile from this site, in the hope that we can
know each other better. I send this letter to verify that your email
is correct or not. If you receive this letter. I await your reply
soon. A new friend from Russia Katya.

Code
Alles auswählen
IPv4-adress:  188.187.171.108
inetnum:    188.187.168.0 - 188.187.175.255
netname:    ERTH-YOLA-PPPOE-3-NET
descr:    CJSC "Company "ER-Telecom" Yoshkar-Ola
descr:    Yoshkar-Ola, Russia
descr:    PPPoE individual customers
country:    RU
admin-c:    ETHD12-RIPE
tech-c:   ETHD12-RIPE
status:   ASSIGNED PA
mnt-by:   RAID-MNT

role:     Network Operation Center CJSC ER-Telecom Company Mari El branch
address:    12, Lenina st. , 424000, Yoshkar-Ola, Russia
phone:    +7 8362 210035
fax-no:   +7 8362 210035
e-mail:   noc@yola.ertelecom.ru
admin-c:    SMS68-RIPE
tech-c:   ALB49-RIPE
tech-c:   AVA89-RIPE
nic-hdl:    ETHD12-RIPE
mnt-by:   MNT-ERTHOLDING 




Mail 2:

Hello dear friend Wolfgang,
I am glad to receive your letter. I can not tell you a long letter
today. I am very tired, tomorrow I have a bad day. 
Wolfgang tomorrow I leave to my aunt, and come back only on sundays, I can
not write to you, she has no computer at home. I hope you will not
forget me:) I write to you on sunday, when I get home. I finish my
letter. I'll think of you. Bye bye. Your friend from Russia Katya.

Code
Alles auswählen
IPv4-adress:  98.221.248.18
addr-out:   c-98-221-248-18.hsd1.pa.comcast.net
whois.nic.mil [0] Undefined error: 0
Comcast Cable Communications, Inc.  JUMPSTART-5 (NET-98-192-0-0-1)
            98.192.0.0 - 98.255.255.255
Comcast Cable Communications, Inc.  PA-38 (NET-98-221-0-0-1)
            98.221.0.0 - 98.221.255.255

Abfrage nach IP-Adresse zu Name:  c-98-221-248-18.hsd1.pa.comcast.net
Zum Namen gehörende IP-Adresse :  98.221.248.18
Auskunft mit der Webseite http://www.mein-whois.de

Antwort des Whois-Servers whois.arin.net:

Comcast Cable Communications, Inc. JUMPSTART-5 (NET-98-192-0-0-1)
                                  98.192.0.0 - 98.255.255.255
Comcast Cable Communications, Inc. PA-38 (NET-98-221-0-0-1)
                                  98.221.0.0 - 98.221.255.255



OrgName:    Comcast Cable Communications, Inc.
OrgID:      CMCS
Address:    1800 Bishops Gate Blvd
City:       Mt Laurel
StateProv:  NJ
PostalCode: 08054 



Der Hostname c-98-221-248-18.hsd1.pa.comcast.net wird im DNS zu der
IP-Adresse 98.221.248.18 aufgelöst.

sehr merkwürdig alles  hä?


3 mail:
Hello dear Wolfgang,

I am glad that you have not forgotten me. Thank you for your letter. I
wanted as soon as possible to return home to write you a letter. I was
scared, thinking that you will not forget me if I will not be 3 days.
Wolfgang I'm glad that all is well. How are you? How is your weather? It
has weekend? I think that now we can continue our correspondence
further, and strive to establish better relations. I will end my
letter, I'm tired and want to get some rest. I look forward to a
response. Your friend from Russia Katya. 


Code
Alles auswählen
IPv4-adress:  71.81.182.241
addr-out:   static.unknown.charter.com
whois.nic.mil [0] Undefined error: 0
Charter Communications NETBLK-CHARTER-NET (NET-71-80-0-0-1)
            71.80.0.0 - 71.95.255.255
Charter Communications FRT-TX-71-81-176 (NET-71-81-176-0-1)
            71.81.176.0 - 71.81.183.255

Abfrage nach IP-Adresse zu Name:  71.81.182.241
Zum Namen gehörende IP-Adresse :  71.81.182.241
Auskunft mit der Webseite http://www.mein-whois.de

Auskunft durch den Whois-Servers whois.arin.net

Charter Communications NETBLK-CHARTER-NET (NET-71-80-0-0-1)
                                  71.80.0.0 - 71.95.255.255
Charter Communications FRT-TX-71-81-176 (NET-71-81-176-0-1)
                                  71.81.176.0 - 71.81.183.255

% see also  http://www.mein-whois.de/info?71.81.182.241



OrgName:    Charter Communications
OrgID:      CC04
Address:    12405 Powerscourt Dr.
City:       St. Louis
StateProv:  MO
PostalCode: 63131
Country:    US 




mail von gestern:

Good day Wolfgang, how are you? I want to start to tell you a little bit
about myself. I am unique woman Smiley You will never find woman like me
Smiley I like to joke, like to see smile at people, like in russia says -
laugh will long your life Smiley I am very beauty woman, you think so as
i? If not, see my picture and you will see this Smiley Do not think if i
am beauty i am silly, this is not right, i am intelegent and kind
woman, i have end the universaty of Kazan, i have master degree, but
in russia we call this high education. I am dantist, do you have a
good teeth? Smiley If not, i will come to you and help you Smiley I was born
at 1974 years and i am 35 years, in 12 of november i was born to this
life, to make all world with white teeth Smiley But really, help in local
clinik. Where you work? What is your birthday? Why are you want to
find russian woman? In my search, i want to find man who will look in
my thoughts, who can touch my heart, but not only touch my body Smiley I
want to find serious man, here, i tired to do this, i work and my
salary is good, for life is enough, but i do not enough the true love
in my life, and from me this i am sad and lonely. I live alone in one
room flat, with my cat, his name is Marta Smiley Kind and funny name. Do
you have pets? Think, i talk to much about me, can do this for many
hours Smiley I send you some photos, enjoy. Have a nice day at work and
home. Advise me, how to start talk through internet, it is first time
for do this, unusually do not see person with whom you talk, but i may
be it would be a little adventure for us?Zwinkernd Bye-bye. With impatience
wait your letter, Ekaterina.


IPv4-adress:  90.150.211.21
inetnum:    90.150.208.0 - 90.150.223.255
netname:    USI_ADSL_USERS1
descr:    Dynamic distribution IP's for broadband services
descr:    OJSC Uralsvyazinform, Perm subsidiary
country:    RU
admin-c:    UPAS1-RIPE
tech-c:   UPAS1-RIPE
status:   ASSIGNED PA
mnt-by:   MFIST-MNT

role:     Uralsvyazinform Perm Administration Staff
address:    11, Moskovskaya str.
address:    Yekaterinburg, 620014
address:    Russian Federation
e-mail:   radiusmaster@permonline.ru
admin-c:    SK2534-RIPE
admin-c:    DK2192-RIPE
admin-c:    SK3575-RIPE
admin-c:    TA2344-RIPE
tech-c:   DK2192-RIPE
tech-c:   SK3575-RIPE
tech-c:   TA2344-RIPE
nic-hdl:    UPAS1-RIPE
mnt-by:   MFIST-MNT


Code
Alles auswählen
route:    90.150.208.0/20
descr:    for Perm department
origin:   AS12705
mnt-by:   MFIST-MNT


Abfrage nach IP-Adresse zu Name:  90.150.211.21
Zum Namen gehörende IP-Adresse :  90.150.211.21
Auskunft mit der Webseite http://www.mein-whois.de

Antwort des Whois-Servers whois.ripe.net:
inetnum:        90.150.208.0 - 90.150.223.255
netname:        USI_ADSL_USERS1
descr:          Dynamic distribution IP's for broadband services
descr:          OJSC Uralsvyazinform, Perm subsidiary
country:        RU
admin-c:        UPAS1-RIPE
tech-c:         UPAS1-RIPE
status:         ASSIGNED PA
mnt-by:         MFIST-MNT
source:         RIPE # Filtered

role:           Uralsvyazinform Perm Administration Staff
address:        11, Moskovskaya str.
address:        Yekaterinburg, 620014
address:        Russian Federation 




sehr flexibel die junge Frau  Laut lachend Laut lachend

und nun noch die Bilder, wer kennt sie ???
Gruß Meester


« Zuletzt geändert: 28. November 2009 um 18:47 von »  
Zum Seitenanfang
 
IP gespeichert
 
Drum
Ex-Mitglied


Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #5 - 27. November 2009 um 05:17
 
Die nette Dame kenn ich . Habe aber nur noch Bilder keine Mail mehr. Ist im Forum bekannt

« Zuletzt geändert: 28. November 2009 um 18:40 von »  
Zum Seitenanfang
 
IP gespeichert
 
Drum
Ex-Mitglied


Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #6 - 27. November 2009 um 05:23
 
Hab sie im Forum gefunden

Katya <beautugirl@gmail.com>
« Zuletzt geändert: 28. November 2009 um 18:42 von »  
Zum Seitenanfang
 
IP gespeichert
 
meester
Ex-Mitglied


Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #7 - 09. Dezember 2009 um 21:48
 
Sie scheint etwas durcheinander, die Bilder und Mails habe ich selbst reingesetzt.
Dann hat sie mich zweimal angeschrieben.

Meester
  
Zum Seitenanfang
 
IP gespeichert
 
strong
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 280
Standort: SHA
Mitglied seit: 21. November 2009
Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #8 - 27. Dezember 2009 um 22:11
 
Wieder was neues von Katya. Hab (wieder mal) keine Ahnung woher die meine Adresse hat!

In der Kürze...:

Hello! My name is Katya. You gave your e-mail on the dating site.
I want to test is it rights. I will wait for your answer.
p.s. I send you pictures and hope to see you too.



Spoiler für Header:
Received: from [74.125.92.25] (helo=qw-out-2122.google.com)
by mx25.web.de with esmtp (WEB.DE 4.110 #314)
id 1NOr4E-0002KY-00
for xxx.de; Sun, 27 Dec 2009 12:13:46 +0100
Received: by qw-out-2122.google.com with SMTP id 9so2079699qwb.7
for <xxx.de>; Sun, 27 Dec 2009 03:13:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:received:received:date:from:x-priority
:message-id:to:subject:mime-version:content-type;
bh=w2glLQc5tggZL0pG1z6T5VVhxVJrVsUgfTJ33EjSnr4=;
b=kRI5E1yyWve3scZHBdrcIeGG/NaFIT2/wRxMxsun8dGxD4YC28ROc85+QOsgYwx0T2
qKlm869PZknOb6Rf2Z1prhpYUl4IVEHQaHbjTMX0+08CsUbFCNeREJoyDblF+mrHTAjo
1M4NUF9xIQA7qzLwkBBcJTVm24RN9MPLaIfZs=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=date:from:x-priority:message-id:to:subject:mime-version
:content-type;
b=c+CnEZwdr/lswUQD/sXQ3Qav4IoIV9xMCiBi/RKQ/Cm8X0EFUtYgPIRCMgDHwYmgGm
LWXGg5JybVeWMLq5/m2v6M+GrdBp7YdmVMYo0b5cL55TJrJJMEuVgKmYt4DuMp6cAVUS
zNQ5AjPccaRV+BefMR7mTvg84SI7EwH71sPJ0=
Received: by 10.229.93.41 with SMTP id t41mr6068811qcm.81.1261912425324;
Sun, 27 Dec 2009 03:13:45 -0800 (PST)
Received: from NB2 (pool-141-156-195-247.res.east.verizon.net [141.156.195.247])
by mx.google.com with ESMTPS id 23sm9575640qyk.7.2009.12.27.03.13.32
(version=SSLv3 cipher=OTHER);
Sun, 27 Dec 2009 03:13:44 -0800 (PST)
Date: Sun, 27 Dec 2009 14:08:31 +0300
From: Katya <beautugirl@gmail.com>
X-Priority: 3 (Normal)
Message-ID: <1277061087.20091227140831@gmail.com>
To: xxx.de
Subject: Hi from russianeuro!
MIME-Version: 1.0
Return-Path: beautugirl@gmail.com
Content-Type: multipart/mixed; boundary="DORIS16691EDF"


Mit Bild

PS: Die kann Feindflieger haben! Ich will Tata!
« Zuletzt geändert: 28. Dezember 2009 um 00:27 von † Rais † »  
Zum Seitenanfang
 
IP gespeichert
 
calle
Ex-Mitglied


Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #9 - 27. Dezember 2009 um 22:36
 

Über die USA  Smiley

Code
Alles auswählen
Received: from NB2 (pool-141-156-195-247.res.east.verizon.net [141.156.195.247])
      Hostname:	pool-141-156-195-247.res.east.verizon.net
      ISP:	Verizon Internet Services
      Organization:	Verizon Internet Services
      Proxy:	None detected
      Type:	Cable/DSL
      Blacklist:

Geo-Location Information

      Country:	United States
      State/Region:	DC
      City:	Washington
      Latitude:	38.9097
      Longitude:	-77.0231
      Area Code:	202 



Zitat:
Date: Sun, 27 Dec 2009 14:08:31 +0300
From: Katya <beautugirl@gmail.com>
« Zuletzt geändert: 27. Dezember 2009 um 22:36 von »  
Zum Seitenanfang
 
IP gespeichert
 
strong
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 280
Standort: SHA
Mitglied seit: 21. November 2009
Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #10 - 28. Dezember 2009 um 13:09
 
Fortsetzung:

Good day xyz, how are you? I want to start to tell you a little bit
about myself. I am unique woman Smiley You will never find woman like me
Smiley I like to joke, like to see smile at people, like in russia says -
laugh will long your life Smiley I am very beauty woman, you think so as
i? If not, see my picture and you will see this Smiley Do not think if i
am beauty i am silly, this is not right, i am intelegent and kind
woman, i have end the universaty of Kazan, i have master degree, but
in russia we call this high education. I am dantist, do you have a
good teeth? Smiley If not, i will come to you and help you Smiley I was born
at 1974 years and i am 35 years, in 12 of november i was born to this
life, to make all world with white teeth Smiley But really, help in local
clinik. Where you work? What is your birthday? Why are you want to
find russian woman? In my search, i want to find man who will look in
my thoughts, who can touch my heart, but not only touch my body Smiley I
want to find serious man, here, i tired to do this, i work and my
salary is good, for life is enough, but i do not enough the true love
in my life, and from me this i am sad and lonely. I live alone in one
room flat, with my cat, his name is Marta Smiley Kind and funny name. Do
you have pets? Think, i talk to much about me, can do this for many
hours Smiley I send you some photos, enjoy. Have a nice day at work and
home. Advise me, how to start talk through internet, it is first time
for do this, unusually do not see person with whom you talk, but i may
be it would be a little adventure for us?Zwinkernd Bye-bye. With impatience
wait your letter, Katya.



Spoiler für Header:
Received: from [209.85.221.187] (helo=mail-qy0-f187.google.com)
by mx28.web.de with esmtp (WEB.DE 4.110 #314)
id 1NPCup-0001Bi-00
for xxx.de; Mon, 28 Dec 2009 11:33:31 +0100
Received: by qyk17 with SMTP id 17so4344777qyk.2
for <xxx.de>; Mon, 28 Dec 2009 02:33:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:received:received:date:from:x-priority
:message-id:to:subject:in-reply-to:references:mime-version
:content-type;
bh=b4wztigcNYJR3lEzbBtcK5V9tmV/rpq9daiS3kxdbf8=;
b=OLgxqOotGbec2Lyf1GKrJ22xdH+gZ3KaioirtTxWoQSlQ197fnqMk6i3/Zhbu4Rnj0
nbl6Lt3bB8EzF8dWc19x8bSQsL94DDgdrtKaqF45vRUh3oeuBw7uXRxyeFi++Z3HEEC2
Hn7GDcMIudiSs8xcDMskMjd93btDWUonCqerA=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=date:from:x-priority:message-id:to:subject:in-reply-to:references
:mime-version:content-type;
b=BtEB4JYgAqDSwzrgfCLqY5HBIK6LbAIg66G2GX8qxb6L7KZ/Be/d/3S4KBNbxjwq9B
t5eJHtFuzhgSWuIsfeNqpPjnUo0r2VP65WWYf0yJrphMRSMvVssx3rqmNPL44aZ6x/WU
Js1tNuRnuHlRSs89yG7jyiu61QBTFIOtcVVWs=
Received: by 10.224.78.71 with SMTP id j7mr4136535qak.371.1261996410738;
Mon, 28 Dec 2009 02:33:30 -0800 (PST)
Received: from NB2 (CPE000ea629db89-CM0012c90f8378.cpe.net.cable.rogers.com [99.227.12.174])
by mx.google.com with ESMTPS id 8sm31309576qwj.33.2009.12.28.02.33.05
(version=SSLv3 cipher=OTHER);
Mon, 28 Dec 2009 02:33:29 -0800 (PST)
Date: Mon, 28 Dec 2009 12:51:21 +0300
From: Katya <beautugirl@gmail.com>
X-Priority: 3 (Normal)
Message-ID: <1136902413.20091228125121@gmail.com>
To: xxx.de
Subject: Hi xyz!
In-Reply-To: <376589459@web.de>
References: <376589459@web.de>
MIME-Version: 1.0
Return-Path: beautugirl@gmail.com
Content-Type: multipart/mixed; boundary="DORIS1680015D"


Bild Iam hab ich den Namen geändert, da sonst i am überschrieben worden wäre

braucht ihr mehr?
« Zuletzt geändert: 28. Dezember 2009 um 16:01 von † Rais † »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30555
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #11 - 28. Dezember 2009 um 13:20
 
Herkunft verschleiert:

Code
Alles auswählen
IPv4-adress:  99.227.12.174
addr-out:   CPE000ea629db89-CM0012c90f8378.cpe.net.cable.rogers.com
whois.nic.mil [0] Undefined error: 0
Rogers Cable Communications Inc.  ROGERS-CAB-99 (NET-99-224-0-0-1)
            99.224.0.0 - 99.255.255.255
Rogers Cable Inc.  YM HSI (NET-99-227-12-0-1)
            99.227.12.0 - 99.227.13.255
 



Zitat:
Content-Type: multipart/mixed; boundary="DORIS1680015D"
« Zuletzt geändert: 28. Dezember 2009 um 13:21 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30555
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #12 - 28. Dezember 2009 um 13:24
 
Zu den Fotos:

Iam.JPG:
Zitat:
# Kamera Hersteller = Digital
# Kamera Model = Digital Cam
Software/Firmware Version = M5021M-1011
# Original Datum/Zeit = 2005:01:02 02:51:58
# Digitalisierung Datum/Zeit = 2005:01:02 02:51:58
# Software/Firmware Version = M5021M-1011
# Letzte Änderung Datum/Uhrzeit = 2005:01:02 02:57:54


Me.JPG:
Zitat:
# Bild Beschreibung = DIGITAL CAMERA ;
# Kamera Hersteller = Digital
# Kamera Model = Digital Cam
# Original Datum/Zeit = 2005:01:02 02:51:58
# Digitalisierung Datum/Zeit = 2005:01:02 02:51:58
# Software/Firmware Version = M5021M-1011
# Letzte Änderung Datum/Uhrzeit = 2005:01:02 02:55:11
  
Zum Seitenanfang
 
IP gespeichert
 
strong
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 280
Standort: SHA
Mitglied seit: 21. November 2009
Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #13 - 31. Dezember 2009 um 16:56
 
Hello again and again, my new friend xyz? Interesting to see your
letter, i hope we will continue our adventure of knowing each other,
do you agree? To visit colourful world of communication? I hope, it
really would be a nice trip to somewhere Smiley
How is your doing? How is your day? Work? I am fine, in great mood,
from first bum of sun i wake up with nice mood, with excellent mood
for starting work. I think you know, that most of people do not like
dantist, they scare people of my profession, but i am not woman which
need scare, in future you will know that i really kind, wonderful,
interesting, cheerful woman Smiley I always try to be positive way. Today,
i feel myself like small young girl, after work i a buy an ice-cream
and jumping with it Smiley Pity that you do not see my joy, but feel it in
my letter Smiley Did you know, why people sometimes feel themself like
childrens? I do not know Smiley Forget one thing, i meet a little boy, in
a view he was look like he do not have parents and live in streets, i
have bought for him an ice-cream, he was happy like i bought for him
something valuable, and also, i give him a little money. Did you do
something like this? Do you like to help people? In my thoughts,
become a little dream, to give all ice-cream to childrens Smiley
I think, my letter is very long and it can be boring you. I think, i
will end my letter, do not panic of size of it Smiley Enjoy it and i wait
for your replay xyz, Send a huge hello to you. Waiting back the same
Smiley That is all for today, have a great evening. Bye-bye, Katya.




Spoiler für Header:
Received: from [209.85.211.182] (helo=mail-yw0-f182.google.com)
by mx04.web.de with esmtp (WEB.DE 4.110 #314)
id 1NQ1av-0001wH-00
for xxx.de; Wed, 30 Dec 2009 17:40:21 +0100
Received: by ywh12 with SMTP id 12so12941723ywh.21
for <xxx.de>; Wed, 30 Dec 2009 08:40:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:received:received:date:from:x-priority
:message-id:to:subject:in-reply-to:references:mime-version
:content-type;
bh=kejUEdaMrYR/t+HKj2yzUgRfq+2s0S6cpdql54PrrRI=;
b=HAObEKDEEBdcL4XoepkqBgPREbXuG4LVoBRIDp08MRj8AuhwdHiKsKDq4KEaJQThRQ
IQpYC/HZc2Vu8L3g0ElDKadYy24KFuYNf3K39eH/1VjqCYPucRvy5bhATiKxUZIkLxI0
WwHgrzj63VC2hRWkSFGljVbwzmaMLCvPvEGNo=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=date:from:x-priority:message-id:to:subject:in-reply-to:references
:mime-version:content-type;
b=jPd/N3RmFR4gt2TmmnfYqSco4oarsu0onNWozAeOQeDurNydnmql5VBL7w/gOLRlMg
FQRk7hTJ+Qbemvtu/0izQstICl7cIcfwMu3aX5wN+PhGeytvYtNDmsCP5ffo7L0BpvOJ
jWtG1sczznbbhKjdxdDaxn/ZATVhkFqxQlxTo=
Received: by 10.101.56.17 with SMTP id i17mr27111173ank.167.1262191217766;
Wed, 30 Dec 2009 08:40:17 -0800 (PST)
Received: from NB2 (24-122-231-235.dr.cgocable.ca [24.122.231.235])
by mx.google.com with ESMTPS id 6sm4775104ywd.37.2009.12.30.08.39.30
(version=SSLv3 cipher=OTHER);
Wed, 30 Dec 2009 08:40:15 -0800 (PST)
Date: Wed, 30 Dec 2009 19:22:06 +0300
From: Katya <beautugirl@gmail.com>
X-Priority: 3 (Normal)
Message-ID: <17242023.186413.1262256891316.JavaMail.fmail@mwmweb025>
To: xxx.de
Subject: Hi xyz!
In-Reply-To: <377539285@web.de>
References: <377539285@web.de>
MIME-Version: 1.0
Return-Path: beautugirl@gmail.com
Content-Type: multipart/mixed; boundary="DORIS16C13F26"


« Zuletzt geändert: 31. Dezember 2009 um 18:58 von »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30555
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Katya / Ekaterina <beautugirl@gmail.com> <lovedkatya@googlemail.com>
Antwort #14 - 31. Dezember 2009 um 17:21
 
Herkunft verschleiert über Kanada:

Code
Alles auswählen
IPv4-adress:  24.122.231.235
addr-out:   24-122-231-235.dr.cgocable.ca
whois.nic.mil [0] Undefined error: 0
COGECO Cable Canada Inc.  RAPIDUS-02 (NET-24-122-0-0-1)
            24.122.0.0 - 24.122.255.255
COGECO Cable Canada Inc.  COQB-AE03 (NET-24-122-224-0-1)
            24.122.224.0 - 24.122.239.255
 



Auch diese drei Fotos sind mit der unbekannten Digitalkamera 2005 aufgenommen worden.

Zitat:
Content-Type: multipart/mixed; boundary="DORIS16C13F26"


Bis jetzt bin ich mit DORIS noch nicht weitergekommen. Habe es bisher auch nur bei http://anti-scam.de/cgi-bin/yabb2/YaBB.pl?num=1261846491/0 noch gefunden. Das mag daran liegen, dass manche Header zu früh abgeschnitten wurden.
Ich habe die Vermutung, dass beide ein gleiches Grundmuster einer Mail benutzen, dass sich dann in Text bzw. Fotos ändert. Aber dazu muss ich die Geschichte noch weiter beobachten. Aber viellciht findet ja noch jemand anderes etwas über "diese DORIS" heraus.
« Zuletzt geändert: 31. Dezember 2009 um 17:44 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: [1] 2 3 
Thema versenden
Link zu diesem Thema