Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Anna <akraft54@yahoo.com> (Gelesen: 1303 mal)
 
sappi007
Themenstarter Themenstarter
General Counsel
***
Offline



Beiträge: 6264
Standort: Muenster
Mitglied seit: 14. Februar 2009
Geschlecht: männlich
Stimmung: begeistert
Anna <akraft54@yahoo.com>
16. Januar 2010 um 12:07
 
I was very glad when I have see your letter in my mailbox. It is so nice receive of you! Frankly speaking I couldn’t hope for it. I don’t know what to say in my first letter, because I never got acquainted through internet before. It’s something new and unusual for me. But I’ll try write good letters to you.
I suppose you’ll be able to understand my words and what I will say to you. I hope that I'll find somebody, especially for me who can share this day with me! Little about me:  So, also I very much similarly to Sports competitions and everything, that to it connected, I - the borrowed gymnastics, I very much similarly to healthy the image of a life, and I think, similarly to which everyone owes it.
I wast married. I think first of all I need to know anything about my man, to spend a lot of time with him and only then I think the time will come and I will be able to decide he is for me or not. I hope that you can understand me. Maybe it's not right but I'm afraid of making mistakes. I understand that there is no life without mistakes but I would like, it has well learned concerning the friend the friend. My search is very serious. Please, try to believe me and to understand me. I would hope, that yours the purposes will be similar, I would like to hear yours ideas, which you desire during the future. I think, which we should understand and dismantle the friend the friend, and then meet. 
I would like to know more about your family and to learn a little bit more in detail about your birth? Markus you probably would like to learn more in detail about my character as I want to know more about your character. I can tell about it only according to mine familiar. I'm too open, simple girl. I can tell precisely by myself that the sociable and purposeful woman. I love to be in a circle of the cheerful, clever friends. In a circle of the people which I communicate with, I haven't found the man whom would be possible to connect the destiny with.
I have finished the university some years ago. So I work as the teacher. Markus you know that my student's years were the happiest in my life. We had cheerful, friendly company which had time simultaneously well to study and to have a rest.
With Internet I work for the first time. Difficultly something to speak about it, you see, Markus you are the first man whom I communicate with the help of Internet. I will be with impatience wait for your letter. I hope that my photo is pleasant to you. Please, send me your photos, WELL? I very happy will see them.
Your new friend, Anna!



Spoiler:
Return-Path: <akraft54@yahoo.com>
Received: from mtain-dc06.r1000.mx.aol.com (mtain-dc06.r1000.mx.aol.com [172.29.64.134]) by air-mc03.mail.aol.com (v126.13) with ESMTP id MAILINMC034-a8de4b50a7d539d; Fri, 15 Jan 2010 12:37:25 -0500
Received: from smtp106.plus.mail.re1.yahoo.com (smtp106.plus.mail.re1.yahoo.com [69.147.102.69])
     by mtain-dc06.r1000.mx.aol.com (Internet Inbound) with SMTP id 27F6C380000C0
; Fri, 15 Jan 2010 12:37:24 -0500 (EST)
Received: (qmail 3927 invoked from network); 15 Jan 2010 17:37:24 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  iority:Message-ID:To:Subject:MIME-Version:Content-Type;
  p++Gx8k2JWWiY=  ;
Received: from net166.187.188-205.yoladom.ru (akraft54@188.187.166.205 with plain)
        by smtp106.plus.mail.re1.yahoo.com with SMTP; 15 Jan 2010 09:37:20 -0800 PST
X-Yahoo-SMTP: y.4YHO2swBDVpM6wGrAC.8TsEtPr
X-Yahoo-Newman-Property: ymail-3
Date: Fri, 15 Jan 2010 20:35:43 -0800
From: Anna <akraft54@yahoo.com>
X-Mailer: The Bat! (v3.64.01 Christmas Edition) Home
Reply-To: Anna <akraft54@yahoo.com>
X-Priority: 3 (Normal)
Message-ID: <1204420373.20100115203543@yahoo.com>

Subject: I will be glad to learn you more close!
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------B31299F792254"
x-aol-global-disposition: G
X-AOL-VSS-INFO: 5400.1158/52684
X-AOL-VSS-CODE: Scan Clean
x-aol-sid: 3039ac1d40864b50a7d4164a
X-AOL-IP: 69.147.102.69
X-AOL-VSS-CODE: scan_error
« Zuletzt geändert: 16. Januar 2010 um 19:45 von »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
calle
Ex-Mitglied


Re: Anna <akraft54@yahoo.com>
Antwort #1 - 16. Januar 2010 um 12:15
 
Post aus Y-O 

Code
Alles auswählen
Received: from net166.187.188-205.yoladom.ru (akraft54@188.187.166.205 with plain)
      Hostname:	net166.187.188-205.yoladom.ru
      ISP:	ER-Telecom
      Organization:	CJSC Company ER-Telecom Yoshkar-Ola
      Proxy:	None detected
      Type:	Cable/DSL
      Blacklist:

Geo-Location Information

      Country:	Russian Federation
      State/Region:	45
      City:	Yoshkar-ola
      Latitude:	56.6369
      Longitude:	47.8711 

 

Smiley Smiley

Zitat:

Date: Fri, 15 Jan 2010 20:35:43 -0800
From: Anna <akraft54@yahoo.com>
X-Mailer: The Bat! (v3.64.01 Christmas Edition) Home


Typische Scammermail,
mal abwarten wo sie angibt zu wohnen   Zwinkernd
Bilder ..ja könnten wir schon haben  hä?
« Zuletzt geändert: 16. Januar 2010 um 12:17 von »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
Ex-Mitglied


Re: Anna <akraft54@yahoo.com>
Antwort #2 - 16. Januar 2010 um 17:41
 
In weiten Teilen identisch mit der Mail von

Irina <irinasot@yahoo.com> Smiley
Auch gleiche Fledermaus!

Irina <irinamo@ymail.com> Smiley

Olesya <olesyagas@yahoo.it> Smiley
Gleiche Fledermaus!

Olesya <olestuis@gmail.com> Smiley

Irina <irinanum@gmail.com> Smiley

Natalia <baby_girl160879@mail.ru> Smiley

Olesya <oafansa@yahoo.com> Smiley

Ich denke, dass da für das erste reichen sollte.
Schade, dass es sich in den verschiedenen Antiscam-Foren noch nicht durchgesetzt hat, Headerinfos mitzuposten. Daher ist bei manchen nicht wirklich sicher, ob lediglich gleiche Textbausteine benutzt werden oder identische Scammer sind. Textbausteine können auch Nichtscammer benutzen, die von Fremdsprachen wenig Ahnung haben und sind daher kein 100%er Beleg!
« Zuletzt geändert: 16. Januar 2010 um 17:42 von »  
Zum Seitenanfang
 
IP gespeichert
 
Tomcat
Ex-Mitglied


Re: Anna <akraft54@yahoo.com>
Antwort #3 - 16. Januar 2010 um 19:05
 
Habe heute (16.01.2010) nachmittag das identische Mail mit denselben Bildern erhalten mit derselben Email-Adresse. Kontakt kam über RussianEuro zustande, dort hat der Scammer anschliessend den Account gleich gekündigt.

Hier der Quelltext, wie er in Yahoo ersichtlich ist:

Spoiler für Quelltext YO:
From Anna Sun Jan 17 03:51:07 2010
X-Apparently-To: xxx@xxx.xxx via 98.136.167.132; Sat, 16 Jan 2010 08:51:51 -0800
Return-Path: <akraft54@yahoo.com>
X-YMailISG: 94xRdTXVGjLX15IaOyce0BCZZizLe5GuXvLw
X-Originating-IP: [69.147.102.66]
Authentication-Results: mta1102.mail.mud.yahoo.com  from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=neutral (no  sig)
Received: from 127.0.0.1  (HELO smtp103.plus.mail.re1.yahoo.com) (69.147.102.66)
  by mta1102.mail.mud.yahoo.com with SMTP; Sat, 16 Jan 2010 08:51:51 -0800
Received: (qmail 87621 invoked from network); 16 Jan 2010 16:51:51 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  tent-Type;
  MWaRYjdE+5DmI=  ;
Received: from net171.187.188-131.yoladom.ru (akraft54@188.187.171.131 with plain)
        by smtp103.plus.mail.re1.yahoo.com with SMTP; 16 Jan 2010 08:51:48 -0800 PST
X-Yahoo-SMTP: y.4YHO2swBDVpM6wGrAC.8TsEtPr
X-YMail-OSG: 1uQTp3IKldSP_cFc2DhWikqxPsvFVlTOY86siz6G0DsWPZmSA65wc6ux8ZHuZW9.e_i2HpOf
X-Yahoo-Newman-Property: ymail-3
Date: Sat, 16 Jan 2010 19:51:07 -0800
From: Anna <akraft54@yahoo.com>
X-Mailer: The Bat! (v3.64.01 Christmas Edition) Home
Reply-To: Anna <akraft54@yahoo.com>
X-Priority: 3 (Normal)
Message-ID: <1188732680.20100116195107@yahoo.com>
To: Xxx Xxx <xxx@xxx.xxx>
Subject: I will be glad to learn you more close!
In-Reply-To: <354380.31119.qm@web113901.mail.gq1.yahoo.com>
References: <354380.31119.qm@web113901.mail.gq1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------3146C0488254F"
Content-Length: 97285


Würde auch sagen, typischer Scammer-Text. Sie gab an, australische Staatsbürgerin zu sein.
« Zuletzt geändert: 16. Januar 2010 um 19:15 von »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
Ex-Mitglied


Re: Anna <akraft54@yahoo.com>
Antwort #4 - 16. Januar 2010 um 19:16
 
@ Tomcat

Benutze beim nächsten Mal das Fragezeichen rechts in der oberen Symbolleiste zum "Eintüten" des Headers. Dann ist es schon fast perfekt! Zwinkernd
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema