Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: [1] 2  Thema versenden
Heisses Thema (Mehr als 10 Antworten) Kristina <kungurk@rambler.ru> <manager@postklos.com> (Gelesen: 8230 mal)
 
Merlin45201
Themenstarter Themenstarter
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 38
Standort: Bamberg
Mitglied seit: 03. November 2010
Kristina <kungurk@rambler.ru> <manager@postklos.com>
18. Januar 2011 um 17:50
 
Hallo,
und die nächste. Auch schon bekannt?



1. Mail

Spoiler:
[Return-Path: <kungurk@rambler.ru>
Delivered-To: GMX delivery to xxxxxxx
Received: (qmail invoked by alias); 09 Jan 2011 20:04:29 -0000
Received: from maile.rambler.ru (EHLO maile.rambler.ru) [81.19.66.15]
  by mx0.gmx.net (mx115) with SMTP; 09 Jan 2011 21:04:29 +0100
Received: from [188.187.131.227] (unknown [109.252.66.227])
     (Authenticated sender: kungurk@rambler.ru)
     by maile.rambler.ru (Postfix) with ESMTP id C60031A25064
     for <xxxxxxx>; Sun,  9 Jan 2011 23:04:26 +0300 (MSK)
Date: Sun, 9 Jan 2011 23:04:14 +0300
From: Kristina <kungurk@rambler.ru>
X-Mailer: The Bat! (v3.5.30) Professional
Reply-To: Kristina <kungurk@rambler.ru>
X-Priority: 3 (Normal)
Message-ID: <426723298.20110109230414@rambler.ru>
To: xxxxxxx<xxxxxxx>
Subject: Hello my xxxxxxx
In-Reply-To: <20110108081126.273070@gmx.net>
References: <52086891.20101221190735@rambler.ru>
<20101222132017.137980@gmx.net> <1506483830.20101223122052@rambler.ru>
<20101227220637.288600@gmx.net> <148874766.20101228161851@rambler.ru>
<20101230083019.94320@gmx.net> <1004324094.20101230123415@rambler.ru>
<20110101211527.147520@gmx.net> <709279237.20110103131959@rambler.ru>
<20110105235518.315430@gmx.net> <1863326985.20110106132247@rambler.ru>
<20110108081126.273070@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------F4DF16C2B4010AA"
X-GMX-Antivirus: 0 (no virus found)
X-GMX-Antispam: 0 (Mail was not recognized as spam);
Detail=5D7Q89H36p4WX0t+AtsdW2ORvUlAfcdSIdQlIL3FTSFQDxQiodii41fjuqHQd8jenp0+N
dNY0CcAB8WAv7r3OtvsaDOOiC4T8TWFW3c0h9kbMpE0/ou/MWvK8X//VR9J5RqCotAZER8h4O06e
mC19Q==V1;
X-GMX-UID: U3RlcJ9wESBNZEb1f2wmqj1yIDBmA0bj
X-Flags: 1411


 

Hello my xxxxx!
dear  xxxxx, please tell me more about the place where you live. What kind of people you live?
you like to live there? Why do I need? because I understand that my life can take place in another country ... 
And my message today - it's frank admission, I understand that I can not live a day without your letters. 
You have touched my soul, you're in my heart always thought of you warms my heart warms me. Maybe I love you? 
Talking about love can be endlessly .... I think about how it would be great to see each other. 
Thank you, that you responded to my last letter. It was my confession ... I am open to you ... 
I understand your letter, you can never be in something 100 sure I understand you are very scared to make a 
mistake in choosing a partner in the choice of men or girls in your case, but you need to listen the heart. 
And go on about him, because another chance might not be and then search for love could take a lifetime, 
I hope you understand me. I understand that we need a meeting between the letters and I think that you - a great man 
xxxxx, I would like to ask you whether you want to, I organized a trip for you? I can do it.
Nothing do not worry, I say this to you, because I had experiences on the internet is up to you. 
In general, I talked to a man Holland, who constantly asked me naked photos, 
but the beginning he was different, I believed him, but he played with me. 
My rule! - Never send it. I do not understand yet, why do men always think of one ... 
I want to find love here and I feel that I have found. It is you -  xxxxx, I want to meet you.
I am - strong girl and I can do a lot yourself. I'm not saying that you  xxxxx came to Russia,
because I did what I can to please you here. I live my life here and has long been mentally I am with her man in another country, 
I think about it constantly. If my life will be held in another country, 
I should arrive to you. Please think about what I told you and decide whether you can take me in? 
I will not say that I love you, (I realize that this high-sounding words, 
and they should be pronounced in the other case - when they met) but I really need you ... 
I can not stay away from that person, which I always think ... 
Please write me. I'll wait. 
I must go now, I need to get to the house - to change clothes and return to practice with the group dancing. 
Today I'll show them the new movements in dance. 
Well, I think of you ... and am looking forward to your letters ... 
With love, your Kristina


2. Mail

Spoiler:
[Return-Path: <kungurk@rambler.ru>
Delivered-To: GMX delivery to xxxxxxx
Received: (qmail invoked by alias); 11 Jan 2011 12:09:06 -0000
Received: from mailc.rambler.ru (EHLO mailc.rambler.ru) [81.19.66.27]
  by mx0.gmx.net (mx070) with SMTP; 11 Jan 2011 13:09:06 +0100
Received: from [188.187.131.227] (unknown [93.80.215.78])
     (Authenticated sender: kungurk@rambler.ru)
     by mailc.rambler.ru (Postfix) with ESMTP id 01B90621C0C
     for <xxxxxxx>; Tue, 11 Jan 2011 15:09:04 +0300 (MSK)
Date: Tue, 11 Jan 2011 14:43:33 +0300
From: Kristina <kungurk@rambler.ru>
X-Mailer: The Bat! (v3.5.30) Professional
Reply-To: Kristina <kungurk@rambler.ru>
X-Priority: 3 (Normal)
Message-ID: <03666042.20110111144333@rambler.ru>
To: xxxxxxx
Subject: Hello!!!!!!!
In-Reply-To: <20110110083650.319160@gmx.net>
References: <52086891.20101221190735@rambler.ru>
<20101222132017.137980@gmx.net> <1506483830.20101223122052@rambler.ru>
<20101227220637.288600@gmx.net> <148874766.20101228161851@rambler.ru>
<20101230083019.94320@gmx.net> <1004324094.20101230123415@rambler.ru>
<20110101211527.147520@gmx.net> <709279237.20110103131959@rambler.ru>
<20110105235518.315430@gmx.net> <1863326985.20110106132247@rambler.ru>
<20110108081126.273070@gmx.net> <426723298.20110109230414@rambler.ru>
<20110110083650.319160@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------31123E72C1DE208"
X-GMX-Antivirus: 0 (no virus found)
X-GMX-Antispam: 0 (Mail was not recognized as spam);
Detail=5D7Q89H36p4WX0t+AtsdW2ORvUlAfcdSIdQlIL3FTSFQDxQiodii41fjuqHQd8jenp0+N
dNY0CcAB8WAv7r3OtvsaDOOiC4T8TWFW3c0h9kbMpE0/ou/MWvK8X//VR9J5RqCotAZER8h4O06e
mC19Q==V1;
X-GMX-UID: U3RlcJ9wESBNZEb1f2wmBfdyILRQ/EbR
X-Flags: 1401




Hello my loved xxxxx!!!
Pleasure to read your letter! I'm happy that you understand me and willing to take me up. 
I can organize a trip in the shortest time, you know what I was abroad, 
so I have an international passport is enough for me to go to a travel agency. 
Tomorrow I will go there to give the necessary documents for visa in your country. 
I watched it on the internet long before the last letter to you. I have long thought to meet you. Smiley 
Today was a tough day. I passed the whole day on their feet. There was a meeting on youth of our city, 
represented our school there. Then did report to his director, as well as the organizational plan of action before the end of the year. 
Recently eat 2 times a day:) do not have time for breakfast in the morning, I have no appetite, 
dine later in school and stay home tonight, doing a light dinner, 
I'm still a girl must take care of her figure that you admire me for a meeting Smiley 
dear xxxxx, you are very nice, I always think of you throughout the day and sometimes I can not concentrate ... I do not know why so: (
My friends call me that night to meet, but in recent years so much work that I come home only with the idea of a shower, 
tidy himself up and go to sleep. Friends are invited to the cafe, but I refuse. I just think of you, 
I now no need, I want to be with you only. 
dear xxxxx, please tell me yet what you are looking for qualities in a girl? " what it should be,
so you can live with it long and happy family life? 
Dancing consuming energy - it's all the same sports, this movement, so I do not hold power, 
but lately I've been very tired ... 
Tomorrow I will go to a travel agency and tell about how soon I could already be in your country. 
I have to use a travel agency, as the most difficult to obtain a visa in our country. 
The thought of you constantly on me. I want to be with you all and I do not need anything else. 
Frankly, I'm working at the school had a year, but I do not think it's mine. Much of my work on the commitment, 
not on a good salary. I get a little, but I have a savings yet, 
from what I teach dance and I still do not spend it all when he arrived from India, I left it. 
Well, do not think that I am a desperate girl who can do no deliberate actions. 
I have long been all weighed and measured, I'm ready for big steps. Meeting with you - this is a big step. 
dear xxxxx, I wish you good day.
With love, your Kristina


3. Mail

Spoiler:
[Return-Path: <kungurk@rambler.ru>
Delivered-To: GMX delivery to xxxxx

Received: (qmail invoked by alias); 13 Jan 2011 10:44:35 -0000
Received: from maild.rambler.ru (EHLO maild.rambler.ru) [81.19.66.33]
  by mx0.gmx.net (mx088) with SMTP; 13 Jan 2011 11:44:35 +0100
Received: from [188.187.130.254] (unknown [88.184.120.107])
     (Authenticated sender: kungurk@rambler.ru)
     by maild.rambler.ru (Postfix) with ESMTP id 6CE318446C
     for <xxxxx>; Thu, 13 Jan 2011 13:44:31 +0300 (MSK)
Date: Thu, 13 Jan 2011 13:32:33 +0300
From: Kristina <kungurk@rambler.ru>
X-Mailer: The Bat! (v3.5.30) Professional
Reply-To: Kristina <kungurk@rambler.ru>
X-Priority: 3 (Normal)
Message-ID: <1056317248.20110113133233@rambler.ru>
To: xxxxx>
Subject: Why you have written nothing to me Ralf?
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-GMX-Antivirus: 0 (no virus found)
X-GMX-Antispam: 0 (Mail was not recognized as spam);
Detail=5D7Q89H36p77e5KAPs1l6v/Sb97LojnDdsJP22Xp5AnFpCD2om9lacOERzx/Ip5i6Um2J
iedNW8ZCSt+mDqp/XQkca5bEGIEcAYEUsqlXlEmmdVzW3zId1T+yHPawPINjDu/AwoYjA3LuI4jb
x7CGA==V1;
X-GMX-UID: ZGllQZZlCG9ydRLVbWVvBNJkdh2ql0Xu
X-Flags: 1411


 

Hello my dear xxxxx! how are you? I hope all is well.
Today I woke up very early, and sat and thought about you.
Today I checked the mail and did not see your letter, you already
do not write me a long time. What happened to me why you did not write?
I am very worried. I ask you to write me, what would I know that with you.
I like you very much. I hope you write me and we will
continue our excellent communication.
Kristina


4. und entscheidende Mail!!!! Die entscheidenden Stellen sind rot markiert. 
Ich habe gegoogelt und die Mailadresse bzw. Homepage wurden als Scammeragenturen eindeutig zugeordnet!!


Spoiler:
Return-Path: <kungurk@rambler.ru>
Delivered-To: GMX delivery to xxxxxxxx
Received: (qmail invoked by alias); 18 Jan 2011 14:26:14 -0000
Received: from maile.rambler.ru (EHLO maile.rambler.ru) [81.19.66.15]
  by mx0.gmx.net (mx096) with SMTP; 18 Jan 2011 15:26:14 +0100
Received: from [188.187.143.45] (unknown [89.20.141.5])
     (Authenticated sender: kungurk@rambler.ru)
     by maile.rambler.ru (Postfix) with ESMTP id 2B1F61A25041
     for <xxxxxxxx>; Tue, 18 Jan 2011 17:26:00 +0300 (MSK)
Date: Tue, 18 Jan 2011 17:21:19 +0300
From: Kristina <kungurk@rambler.ru>
X-Mailer: The Bat! (v3.5.30) Professional
Reply-To: Kristina <kungurk@rambler.ru>
X-Priority: 3 (Normal)
Message-ID: <1244411095.20110118172119@rambler.ru>
To: xxxxxxxx
Subject: xxxxxxxx
In-Reply-To: <20110117222759.154640@gmx.net>
References: <1056317248.20110113133233@rambler.ru>
<20110117222759.154640@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------209B4F60C65"
X-GMX-Antivirus: 0 (no virus found)
X-GMX-Antispam: 0 (Mail was not recognized as spam);
Detail=5D7Q89H36p4L00VTXC6D4q0N+AH0PUCnGL2vqOgpaBYL16oitsMrgDt/NQNpSCZFTiZEQ
GUFK/awTxogov2Yt0XA3QGCQnLmR0fVt5Li+Tjr8WcStdaFw3Sj1KmNGGCgquW/bpvswlc=V1;
X-GMX-UID: bm1iVL0xGHE3dU39KDQx1xcoLy31vYhr
X-Flags: 1411


 

Hello my darling xxxxxxx!!!
Today was a travel agency. It was interesting to talk to people working in the agency. 
But first I had a lot of work in school as well. it was necessary to prepare the documents for our director. 
All the documentation I have been doing ... But I think that I do not appreciate here ... I do not know why ... 
Well, I started writing about a travel agency. 
This is a good travel agency, so I do not worry about money for a visa, 
they painted me that I need to quickly and easily obtain the visa in your country. 
The main thing is to have an interview in Moscow in the Embassy. 
I was told that it is best if I get a tourist visa, so dear Ralf,
I ask you to contact your travel agent where I was today and send them your full name, address and the nearest airport, where I should go. 
E-mail: manager@postklos.com web site: journeytoadream.ru 
Here are my data for the travel agency, so they know which client you are saying. 
They know in their information for them to know this information, as well as you can leave them in my next letter, I will give them. 
Russia, 603145, Nizhny Novgorod region., Nizhny Novgorod, Lenin Street, 21a
I always feel pleasure when pronouncing your letter aloud and pronounce your sweet words. 
You have a unique man, whom I am very much afraid to lose. I hope you understand me. 
My journey is the fastest way to have a meeting and it will be easier for us both. 
I hope all is well with you and you can do it, I think it is not difficult. 
The thought of you xxxxxxx does not leave me. Talk with your letter gives me understand what you are unique man.
You have a very good man, which is impossible to find here in Russia - I will repeat over and over again is ... 
xxxx, yesterday when I went to bed, I imagined you in my dreams.
I imagined that we now are in some kind of home:) and quietly talking over tea, 
with your face to come down and smile that make me just starting to smile, 
through the curtain falls ray of sunshine that makes me wink at you and you just winks at me, 
then we laugh together ... Silly, but still. I do not consider myself an intelligent woman. 
I am a woman, who was only looking for a simple family happiness ... 
I'll wait for your letter. I hope you write me soon. 
miss you already .... Kisses ... and embrace ... 
With love, Kristina


Mal sehen, ich schicke ihr Pseudonamen usw., was dann passiert.
« Zuletzt geändert: 28. Januar 2011 um 18:52 von Webmaster » 
Grund: ru10365 
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Merlin45201
Themenstarter Themenstarter
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 38
Standort: Bamberg
Mitglied seit: 03. November 2010
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #1 - 19. Januar 2011 um 19:00
 
Und weiter gehts:

Spoiler:
Return-Path: <kungurk@rambler.ru>
Delivered-To: GMX delivery to xxxxxxxxxxx
Received: (qmail invoked by alias); 19 Jan 2011 07:21:14 -0000
Received: from maile.rambler.ru (EHLO maile.rambler.ru) [81.19.66.15]
  by mx0.gmx.net (mx101) with SMTP; 19 Jan 2011 08:21:14 +0100
Received: from [188.187.143.45] (unknown [95.64.196.133])
     (Authenticated sender: kungurk@rambler.ru)
     by maile.rambler.ru (Postfix) with ESMTP id 9E47D1A25083
     for xxxxxxxxx; Wed, 19 Jan 2011 10:21:12 +0300 (MSK)
Date: Wed, 19 Jan 2011 10:20:35 +0300
From: Kristina <kungurk@rambler.ru>
X-Mailer: The Bat! (v3.5.30) Professional
Reply-To: Kristina <kungurk@rambler.ru>
X-Priority: 3 (Normal)
Message-ID: <1475798549.20110119102035@rambler.ru>
To: xxxxxxxxxxxxxx
Subject: Good day my dear
In-Reply-To: <20110118162751.132270@gmx.net>
References: <1056317248.20110113133233@rambler.ru>
<20110117222759.154640@gmx.net> <1244411095.20110118172119@rambler.ru>
<20110118162751.132270@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------5D117342028786B"
X-GMX-Antivirus: 0 (no virus found)
X-GMX-Antispam: 0 (Mail was not recognized as spam);
Detail=5D7Q89H36p77e5KAPs1l6v/Sb97LojnDtMgfETrECMLUO9erHzOJe+OynZRhvlGqb5A0X
bbiCt2rAnnct/NAlbHMvoAL6GY+23tB3khNK7Y6oT1sPizBjJUAOds0oJBO/5TIz9C5741aj9GOJ
bE70Q==V1;
X-GMX-UID: Mjk4NcZiG21hZ1r9cjdMpNJFU3cxhZEH
X-Flags: 1401


Hello my dear xxxxx!
happiness of seeing your letter in my mailbox. Wrote a couple of minutes to write you a letter. 
Now this office closes, so I have to release him. 
today my papers were sent to Moscow for approval of a visa and put me in queue for an interview. 
Tomorrow I will say exactly when I'll have the trip to Moscow, It is not that far yet:) how to fly to you:). 
Distance to Moscow from Nizhny Novgorod, 406 km. I offered to fly the plane - it is only 1,5 hours, 
so I can be interviewed for a half day. Smiley Until then I have never flown by plane to Moscow. 
Of course, I flew on an airplane when traveling in India ... so I'm not afraid of heights. 
This morning when I went to work was an accident on the road, two vehicles collided, 
luckily no one was killed, and it was actually with me! It was very scary to look at the damaged cars and one of the driver, 
I saw blood on his forehead, but fortunately nothing happened, at first I was shocked, 
because it all happened within a few meters away from me! 
I want to tell you Ralf, I have a driver's license as well I can manage traffic, I'm sorry,
I do not have it, but I is not a bad experienced driver, and with little emotion sit behind the wheel. 
When I was in India I tried to go, but not all: (In India, 
had been with me a case where I was given a ride by a taxi driver and I dropped the phone in the car, 
I certainly did not notice it and went out of the taxi and was waiting when I met 
(I had to meet the choreographer who put Indian dance), I did not know where to go without him. 
Suddenly I see as I drove up to the same taxi driver and returns the phone to me, 
I did not even think about the phone at the moment and the Indian men was very good, 
I I think that there is in India, all these people, because everything has always been kind to me - an amazing country. 
I think I'm distracted, but now it's my phone that I returned to the taxi driver is still broken and is being repaired ... 
But no worries, I'm calling a little, now I'm more than typing a letter:) In all blame you - xxxxx) I like you very dear.
Again, you enclose your photo, which here is on the computer, I brought a photo folder, which I had. I hope you like it ... 
Well, I must run ... 
I think about you! 
Kristina
« Zuletzt geändert: 19. Januar 2011 um 19:58 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Webmaster
Forum Administrator
*****
Offline


Abgeschlafft und ausgepufft!!

Beiträge: 23882
Standort: Йошкар-Ола
Mitglied seit: 06. Januar 2008
Geschlecht: männlich
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #2 - 19. Januar 2011 um 19:30
 
Headerauflösungen


1. Mail

Code
Alles auswählen
inetnum:        109.252.0.0 - 109.252.127.255
netname:        MGTS-PPPOE
descr:          Moscow Local Telephone Network (OAO MGTS)
country:        RU
admin-c:        USPD-RIPE
tech-c:         USPD-RIPE
status:         ASSIGNED PA
mnt-by:         MGTS-USPD-MNT
source:         RIPE # Filtered

role:           Moscow Local Telephone Network NOC
address:        USPD MGTS
address:        Moscow, Russia
address:        Khachaturyana 5 



2 Mail

Code
Alles auswählen
inetnum:        93.80.0.0 - 93.80.255.255
netname:        CORBINA-BROADBAND
descr:       	  Broadband Customers in Moscow
country:        RU
admin-c:        CORB1-RIPE
tech-c:         CORB1-RIPE
status:         ASSIGNED PA
mnt-by:         RU-CORBINA-MNT
source:		RIPE # Filtered

role:           CORBINA TELECOM Network Operations
address:        CORBINA TELECOM/Internet Network Operations
address:        Kozhevnicheskij proezd, 1
address:        Moscow, Russia 




3. Mail

Code
Alles auswählen
inetnum:        88.174.0.0 - 88.187.255.255
netname:        FR-PROXAD-ADSL
descr:          Proxad / Free SAS
descr:          Static IP address (Freebox)
descr:          NCC#2007023917
country:        FR
admin-c:        ACP23-RIPE
tech-c:         TCP8-RIPE
status:         ASSIGNED PA
remarks:        Spam/Abuse requests: mailto:abuse@proxad.net
mnt-by:         PROXAD-MNT
source:         RIPE # Filtered

role:           Administrative Contact for ProXad
address:        Free SAS / ProXad
address:        8, rue de la Ville L'Eveque
address:        75008 Paris 




4. Mail

Code
Alles auswählen
inetnum:        89.20.140.0 - 89.20.143.255
netname:        TESONTEL
descr:          JSC Tesontel
country:        RU
admin-c:        TR1871-RIPE
tech-c:         TR1871-RIPE
status:         ASSIGNED PA
mnt-by:         TI-MNT
mnt-routes:     TESONTEL-MNT
remarks:        INFRA-AW
source:         RIPE # Filtered

role:           Tesontel Registry
address:        Tesontel
address:        25, Zhulebinskii boulevard
address:        Moscow, Russia 




Mail aus Antwort #1

Code
Alles auswählen
inetnum:        95.64.192.0 - 95.64.207.255
netname:        mksbalashihi
descr:          Closed Joint Stock Company MultyKabelnie Seti Balashihi
country:        RU
admin-c:        SF5295-RIPE
tech-c:         FS6615-RIPE
status:         ASSIGNED PA
mnt-by:         MKSBALASHIHI-MNT
source:         RIPE # Filtered

person:         Sergey Filimonov
address:        Sverdlova Street, 37
address:        Balashiha
address:        Russia 



So weit zu den Einlieferungen der Mails. Sie wurden alle via Proxy oder VPN eingeliefert.
Was jedoch der gute Vlad nicht weiß, der Quelltext verrät uns den tatsächlichen Absendeort und der ist Yoshkar-Ola.


Zitat:
Received: from [188.187.131.227] (unknown [109.252.66.227])


Zitat:
Received: from [188.187.131.227] (unknown [93.80.215.78])


Zitat:
Received: from [188.187.130.254] (unknown [88.184.120.107])


Zitat:
Received: from [188.187.143.45] (unknown [89.20.141.5])


Zitat:
Received: from [188.187.143.45] (unknown [95.64.196.133])


Code
Alles auswählen
inetnum:        188.187.128.0 - 188.187.159.255
netname:        ERTH-YOLA-PPPOE-1-NET
descr:          CJSC "Company "ER-Telecom" Yoshkar-Ola
descr:          Yoshkar-Ola, Russia 

« Zuletzt geändert: 19. Januar 2011 um 19:59 von Webmaster »  
Zum Seitenanfang
IP gespeichert
 
Merlin45201
Themenstarter Themenstarter
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 38
Standort: Bamberg
Mitglied seit: 03. November 2010
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #3 - 26. Januar 2011 um 17:15
 
Und hier der Beweis, diesmal mit Fledermaus!!!!

Spoiler:
[Return-Path: <kungurk@rambler.ru>
Delivered-To: GMX delivery to xxxxx
Received: (qmail invoked by alias); 26 Jan 2011 14:09:21 -0000
Received: from maile.rambler.ru (EHLO maile.rambler.ru) [81.19.66.15]
  by mx0.gmx.net (mx070) with SMTP; 26 Jan 2011 15:09:21 +0100
Received: from [188.187.132.157] (unknown [81.96.177.63])
     (Authenticated sender: kungurk@rambler.ru)
     by maile.rambler.ru (Postfix) with ESMTP id 7D9121A25048
     for xxxxxxxxxxx; Wed, 26 Jan 2011 17:09:18 +0300 (MSK)
Date: Wed, 26 Jan 2011 17:08:50 +0300
From: Kristina <kungurk@rambler.ru>
X-Mailer: The Bat! (v3.5.30) Professional
Reply-To: Kristina <kungurk@rambler.ru>
X-Priority: 3 (Normal)
Message-ID: <313687142.20110126170850@rambler.ru>
To:xxxxxxxxxxxx
Subject: hello my lovely
In-Reply-To: <20110126084903.290980@gmx.net>
References: <1056317248.20110113133233@rambler.ru>
<20110117222759.154640@gmx.net> <1244411095.20110118172119@rambler.ru>
<20110118162751.132270@gmx.net> <1475798549.20110119102035@rambler.ru>
<20110119180447.203920@gmx.net> <1615884396.20110120091451@rambler.ru>
<20110124011116.154610@gmx.net> <581173618.20110124184816@rambler.ru>
<20110124171756.180440@gmx.net> <1844908015.20110125152136@rambler.ru>
<20110126084903.290980@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------C92F17E22305460"
X-Antivirus: avast! (VPS 110126-0, 26/01/2011), Outbound message
X-Antivirus-Status: Clean
X-GMX-Antivirus: 0 (no virus found)
X-GMX-Antispam: 0 (Mail was not recognized as spam);
Detail=5D7Q89H36p5meYqtwVGKYxFpnzFHOlfd6NuyM4UcYwR2woVHdLmm5OPJ80hZlfzwXyE5K
0jFZ6ZfcwjzKORcbdPw1F56j2CmIIIDm5pTVm9qZ+Wyu3EKeG+af4HzApkyooRmvL9oHEAP3C5i5
6gy/mA6krYbQ8P5V1;
X-GMX-UID: Nzg1NLdbM0hEUlz1aWRtqqJkdRWu65PX
X-Flags: 1401
]



Hello my love xxxxx!!!
I do not know what to write and how to tell you. But continue. Today I received a letter from his uncle. 
He said that he could not solve the problem with his wife. My uncle's wife needs an operation on a kidney transplant. 
I am very upset by this. I've been thinking today during the day that I do. Uncle can not find the money for his wife. 
He did not give an advance on the job, can give only after 2 months, 
then he has completed a contract on the ship and he returns home, 
but now he can not do anything, because there is a delay of wages, 
their company is experiencing economic difficulties. his uncle asked him to help his wife's operation, 
I told him that I have money, but he did not know that I can fly to another country in the coming week. 
He did not think that I'll be going so fast for you. 
My uncle helped me my whole life - he has done more to my life than my parents. I love him very much! 
I met with the doctors and they told me that it is necessary to pay for high-quality surgery is an organ transplant. 
I also talked to relatives of his wife and could not help them to their finances. 
For me this was important because my uncle and his life is part of my destiny. 
Now I do not know what I do because I have no money to pay for their tickets and their dreams darling! 
I sacrificed my happiness for the life of my uncle's wife. 
For me it was basically! 
Dear I am very hurt and humiliated in front of you but I could not do otherwise. 
xxxx, I beg you to help me with money for tickets, because I was hoping deep down inside, from this letter,
that you can help, then our meeting will happen. I hope you understand me, I tried to solve the problem in other ways, 
I met with my friends and acquaintances and talking about your problem, but so far no one can help me. 
They just talked about you said that you could possibly help me with the arrival, as is our general meeting ... 
But I understand that I myself organized a trip for you and I - an independent girl, 
but now hard. I gave almost all my savings and now I have no money for tickets. 
I do not know what to do. 
Now I do not know how you will treat me after my request. 
I am very upset and ashamed to ask you for money. 
And yet, despite all the sudden difficulties, it is very eager to meet you, because you - xxxx- my dearest man,
I have no valuable rights now, as I do everything to meet you ... I think I love you ... 
Just ask your assistance and hope to meet you and start a new life together ... Must try ... Please email me ... 
With Love, Kristina
 


Na dann "sende" ich mal Geld mit der Maus.


Grüße



Merlin
« Zuletzt geändert: 26. Januar 2011 um 17:35 von vierauge »  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11770
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #4 - 26. Januar 2011 um 17:34
 
Verschleiert über Brighton/GB.

Code
Alles auswählen
81.96.177.63 - Geo Information
IP Address 81.96.177.63
Host cpc3-brig6-0-0-cust318.3-3.cable.virginmedia.com
Location  GB, United Kingdom
City Brighton, E2 -
Organization Virgin Media
ISP Virgin Media
AS Number AS5089 NTL Group Limited
 



Eigentliche Herkunft aber ist Yoshkar-Ola.

Code
Alles auswählen
188.187.132.157 - Geo Information
IP Address 188.187.132.157
Host net132.187.188-157.yoladom.ru
Location  RU, Russian Federation
City Yoshkar-ola, 45 -
Organization CJSC Company ER-Telecom Yoshkar-Ola
ISP ER-Telecom
AS Number AS41786 CJSC "Company "ER-Telecom" Yoshkar-Ola
 



Zitat:
Date: Wed, 26 Jan 2011 17:08:50 +0300
From: Kristina <kungurk@rambler.ru>
X-Mailer: The Bat! (v3.5.30) Professional


Zitat:
The Bat! (v3.5.30) Professional
Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11770
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #5 - 26. Januar 2011 um 17:37
 
Merlin45201 schrieb on 26. Januar 2011 um 17:15:
Na dann "sende" ich mal Geld mit der Maus.


Aber nicht, ohne vorher die Passkopie angefordert zu haben. Kein Pass - Keine Kohle.
« Zuletzt geändert: 26. Januar 2011 um 17:37 von vierauge »  
Zum Seitenanfang
 
IP gespeichert
 
Merlin45201
Themenstarter Themenstarter
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 38
Standort: Bamberg
Mitglied seit: 03. November 2010
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #6 - 27. Januar 2011 um 11:38
 
Hallo Vierauge,

das ist schon klar.

Aber hier die neueste Masche von ihr.

Sie gab mir die Mail von dieser Agentur, die im Netz als Scammer bekannt ist. Ich habe denen geschrieben und das hier erhalten. Witzig finde ich, dass ich um 11 Uhr ein Schreiben mit Good Night, Mr...... erhalte.

Noch zur Info: Eine Irina Bratuhina gibt es wirklich; anscheinend. Denn im Netz kann man Fotos von ihr sehen. Wäre schon ein Hammer, wenn es die "Endstation" bzw. "Drahtzieher" wäre.


Spoiler:
[Return-Path: <manager@postklos.com>
Delivered-To: GMX delivery to xxxxxxxxxx
Received: (qmail invoked by alias); 27 Jan 2011 10:28:28 -0000
Received: from mail-relay-01.mailcluster.net (EHLO mail-relay-01.mailcluster.net) [77.221.130.213]
  by mx0.gmx.net (mx005) with SMTP; 27 Jan 2011 11:28:28 +0100
Received: from in-relay-04.mailcluster.net (77.221.130.245.addr.datapoint.ru [77.221.130.245])
     by mail-relay-01.mailcluster.net (Postfix) with ESMTPA id CAEE6902A415
     for <xxxxxxxx>; Thu, 27 Jan 2011 13:30:15 +0300 (MSK)
Received: from [188.187.132.157] (unknown [188.187.132.157])
     (Authenticated sender: manager@postklos.com)
     by in-relay-04.mailcluster.net (Postfix) with ESMTPA id AFFB74F58C7
     for <xxxxxxx>; Thu, 27 Jan 2011 13:28:27 +0300 (MSK)
Date: Thu, 27 Jan 2011 13:28:13 +0300
From: postklos <manager@postklos.com>
X-Mailer: The Bat! (v3.5.30) Professional
Organization: travel agency
X-Priority: 3 (Normal)
Message-ID: <1224614853.20110127132813@postklos.com>
To: xxxxxxxxxxx>
Subject: Good night Mr. xxxx!
In-Reply-To: <20110127101634.193460@gmx.net>
References: <20110127101634.193460@gmx.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-GMX-Antivirus: 0 (no virus found)
X-GMX-Antispam: 0 (Mail was not recognized as spam);
Detail=5D7Q89H36p5xOp9NadjzZ9rC+aNFguZc4eovsSwQNeYdfpxWf+6cDNaPhdi2q4hnsRBH6
ss+IwRixJQFfwbz+d+tElHrv3bhv8GFKbnSaGoWhhPtGnr/PL3GbOgnUWdqkM74Lgb+lvaoaUg6R
Vxuxw==V1;
X-GMX-UID: YWl1M8gkTTEzaULuaWRLsaA3Ju8zD1Ke
X-Flags: 1401
]



Good night Mr. xxxx!
We have a bank account, but it only is used in our country, here again from foreign accounts, and payments of banks does not accept.
Therefore unique two methods it is system of Gram of Money of a remittance and the Western Union.
Through these systems you should send money to which address to our financial director, they will receive money, and we will provide at once
With the air ticket of our client Kristina. 
Here on this name transform transfer to the sum 650 euros, and we will accept your money for payment for the air ticket:
The name: Irina 
Surname: Bratuhina
The country: Russia 
Mr. xxxxx it is the information, there will be enough, simply our financial director who directly personally accepts payments through these systems.
All of us have let out also all according to the law.
Mr. xxxxxx as soon as will send money, sends us the confidential code of transfer. That to you will give, when you will go to do pass.
Gramme of Money very good system, But the Western Union hardly is hardly more expensive.
Write us at once the answer. I wait for it today.
Simply our client Kristina has told to us, that our letter not, has reached you...
We will hope to hear.
We thank for Cooperation.
Sincerely yours the Manager of travel agency Sergey


Ich halte Euch auf dem Laufenden.


Grüße



merlin
« Zuletzt geändert: 27. Januar 2011 um 13:42 von vierauge »  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11770
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #7 - 27. Januar 2011 um 13:46
 
Smiley

Code
Alles auswählen
188.187.132.157 - Geo Information
IP Address 188.187.132.157
Host net132.187.188-157.yoladom.ru
Location  RU, Russian Federation
City Yoshkar-ola, 45 -
Organization CJSC Company ER-Telecom Yoshkar-Ola
ISP ER-Telecom
AS Number AS41786 CJSC "Company "ER-Telecom" Yoshkar-Ola
 



Zitat:
Date: Thu, 27 Jan 2011 13:28:13 +0300
From: postklos <manager@postklos.com>
X-Mailer: The Bat! (v3.5.30) Professional


Zitat:
The Bat! (v3.5.30) Professional


Merlin45201 schrieb on 27. Januar 2011 um 11:38:
Witzig finde ich, dass ich um 11 Uhr ein Schreiben mit Good Night, Mr...... erhalte.


Noch witziger ist, das eine Agentur mit BAT schreibt. Zwinkernd
  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11770
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #8 - 27. Januar 2011 um 13:49
 
Merlin45201 schrieb on 27. Januar 2011 um 11:38:
Eine Irina Bratuhina gibt es wirklich; anscheinend. Denn im Netz kann man Fotos von ihr sehen. Wäre schon ein Hammer, wenn es die "Endstation" bzw. "Drahtzieher" wäre.


Wenn du nur den Namen bei Google eingibst, wirst du so ziemlich bei jedem Namen zig Einträge haben.
Über Meinen findet man sogar einen ziemlich bedeutenden Manager in Asien einer weltweit bekannten Elektronikfirma.
  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11770
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #9 - 27. Januar 2011 um 14:08
 
Ich hab mal hier was über manager@postklos.com:

Branch " Postklos " located at: Finlyadiya , Messuaukio 6, POBox 25, FIN-00521 Helsinki Postklos "befinden sich in: Finlyadiya, Messuaukio 6, Postfach 25, FIN-00521 Helsinki 

Tel. Tel. / fax: / Fax: +358207818886 +358207818886 

Tel.: Tel.: +358207818886 +358207818886 

Und Google fand noch das:

http://whois.domaintools.com/postklos.com

Über journeytoadream.ru fand Google noch das:

http://View translation.google.de/View translation?hl=de&sl=ru&u=http://domains.ihead.ru/domains/whois.html%3Fd%3DJOURNEYTOADREAM%26tld%3Dru&ei=qm1BTbKoIZGcOraI1YYC&sa=X&oi=View m.ru%26hl%3Dde%26prmd%3Divns

Vielleicht kann man damit was anfangen.
  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #10 - 27. Januar 2011 um 14:46
 
Merlin45201 schrieb on 27. Januar 2011 um 11:38:
Eine Irina Bratuhina gibt es wirklich; anscheinend. Denn im Netz kann man Fotos von ihr sehen.

Die sieht aber anders aus und kommt aus Riga!

Zum whois von postklos.com:
Code
Alles auswählen
Registration Service Provided By: Namemedia, Inc.
Contact: [FIND OUT MORE ABOUT THIS EMAIL ADDRESS][Who Is Domain]

Domain name: postklos.com

Administrative Contact:
-
Carl E. Whitmore
+1.6038865581
Fax:
14 Ferry Rd.
Nashua, NH 03064
US

Technical Contact:
-
Carl E. Whitmore
+1.6038865581
Fax:
14 Ferry Rd.
Nashua, NH 03064
US

Registrant Contact:
-
Carl E. Whitmore ()

Fax:
14 Ferry Rd.
Nashua, NH 03064
US

Status: Locked

Name Servers:
ns1.infobox.org
ns2.infobox.org

Creation date: 20 Sep 2010 21:12:49
Expiration date: 20 Sep 2012 21:12:00 



Interessanter ist aber, wo die gehostet sind:
Code
Alles auswählen
domain:   postklos.com
IPv4-adress:  77.221.130.38
addr-out:   srv038.infobox.ru



inetnum:    77.221.128.0 - 77.221.143.255
netname:    INFOBOX
descr:    Colocation and virtual hosting
descr:    For abuse, spam an other comliants mailto:abuse@infobox.ru
country:    RU
admin-c:    IBCD1-RIPE
tech-c:   IBCD1-RIPE
status:   ASSIGNED PA
mnt-by:   INFOBOX-MNT

role:     Infobox.ru contact data
address:    Viborgskaya nab, 29, Saint-Petersburg, Russia
fax-no:   +7 812 3312999
phone:    +7 812 3312999
abuse-mailbox:  abuse@infobox.ru
admin-c:    BAKH-RIPE
tech-c:   RN-RIPE
nic-hdl:    IBCD1-RIPE
mnt-by:   INFOBOX-MNT


route:    77.221.128.0/19
descr:    DATACENTER2
origin:   AS30968
mnt-by:   INFOBOX-MNT
 



Die Heimatadresse laut deren Homepage:
Zitat:
Russia, 603145, Nizhny Novgorod region., Nizhny Novgorod, Maxim Gorky street, 65a

Tel. / fax: +79177047573

Tel.: +79177047573


Die "Zweitadresse" in Finnland erinnert mich an unsere Fakereisbüros. Da hatten wir bereits gleiche Konstellation!

Und Bingo, die folgenden Dokumente haben wir schon bei dem Fakereisebüro Relaxation Tours!!!! Und schau mal da nach den Adressen!

Weiteres gibt es hier!
« Zuletzt geändert: 27. Januar 2011 um 15:15 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Merlin45201
Themenstarter Themenstarter
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 38
Standort: Bamberg
Mitglied seit: 03. November 2010
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #11 - 27. Januar 2011 um 22:22
 
Ok, ich habe gelernt. 
Aber dafür hier der Pass von ihr:



Spoiler:
Return-Path: <manager@postklos.com>
Delivered-To: GMX delivery to xxxxxxxx
Received: (qmail invoked by alias); 27 Jan 2011 13:51:54 -0000
Received: from mail-relay-01.mailcluster.net (EHLO mail-relay-01.mailcluster.net) [77.221.130.213]
  by mx0.gmx.net (mx097) with SMTP; 27 Jan 2011 14:51:54 +0100
Received: from in-relay-05.mailcluster.net (77.221.130.246.addr.datapoint.ru [77.221.130.246])
     by mail-relay-01.mailcluster.net (Postfix) with ESMTPA id 4825A902E1CC
     for <xxxxxxxxx>; Thu, 27 Jan 2011 16:53:41 +0300 (MSK)
Received: from [188.187.132.157] (unknown [188.187.132.157])
     (Authenticated sender: manager@postklos.com)
     by in-relay-05.mailcluster.net (Postfix) with ESMTP id 08DE567006A
     for <xxxxxxxx
>; Thu, 27 Jan 2011 16:51:45 +0300 (MSK)
Date: Thu, 27 Jan 2011 16:51:35 +0300
From: postklos <manager@postklos.com>
X-Mailer: The Bat! (v3.5.30) Professional
Organization: travel agency
X-Priority: 2 (High)
Message-ID: <1507288393.20110127165135@postklos.com>
To: xxxxxxxxxxx>
Subject: Good afternoon Mr. xxxxx!
In-Reply-To: <20110127115319.86660@gmx.net>
References: <20110127101634.193460@gmx.net>
<1224614853.20110127132813@postklos.com> <20110127104150.242210@gmx.net>
<302857266.20110127144352@postklos.com> <20110127115319.86660@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------23712A3051B70"
X-GMX-Antivirus: 0 (no virus found)
X-GMX-Antispam: 0 (Mail was not recognized as spam);
Detail=5D7Q89H36p4L00VTXC6D4q0N+AH0PUCnGL2vqOgpaBYL16oitsMrgDt/NQNpSCZFTiZEQ
GUFK/awTxogov2Yt0XA3QGCQnLmR0fVt5Li+Tjr8WcStdaFw2va3qbVCLUtjitP+P4+QPY=V1;
X-GMX-UID: ZmRoTcdwGXNoZFq3IzQz9icoJuSlQRDd
X-Flags: 1401



Mal sehn, was jetzt noch kommt von der Argentur.

Grüße

Merlin
« Zuletzt geändert: 27. Januar 2011 um 23:29 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #12 - 27. Januar 2011 um 22:47
 
Merlin45201 schrieb on 27. Januar 2011 um 22:22:
Aber dafür hier der Pass von ihr:

Wo? Das ist nur der Quelltext! Allerdings führt der uns direkt nach Scammers Paradise:

Code
Alles auswählen
IP-Adresse: 	188.187.132.157
Ländercode der IP: 	RU
Land der IP: 	ip address Russian Federation
Bundesland der IP: 	Mariy-El
Stadt der IP: 	Yoshkar-ola
Breitengrad der IP: 	56.6369
Längengrad der IP: 	47.8711
Provider der IP: 	ER-Telecom
Organisation: 	CJSC Company ER-Telecom Yoshkar-Ola
Host der IP: 	net132.187.188-157.yoladom.ru 


  
Zum Seitenanfang
 
IP gespeichert
 
deutschmann
Ex-Mitglied


Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #13 - 27. Januar 2011 um 22:54
 
Merlin45201 schrieb on 27. Januar 2011 um 11:38:
We have a bank account, but it only is used in our country, here again from foreign accounts, and payments of banks does not accept.


Wenn ich mich recht entsinne, hatte doch ein Bekannter von Dir ein Konto in Russland. Dann könnte doch er freundlicherweise ihr das Geld überweisen Zwinkernd
  
Zum Seitenanfang
 
IP gespeichert
 
Merlin45201
Themenstarter Themenstarter
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 38
Standort: Bamberg
Mitglied seit: 03. November 2010
Re: Kristina <kungurk@rambler.ru> <manager@postklos.com>
Antwort #14 - 28. Januar 2011 um 00:24
 
Sorry, konnte den Pass nicht hochladen, da kyrillische Datei.

Vielleicht jetzt ja. Wenn er nach den internationalen Regeln gemacht ist, dann ist er gefälscht. 
Geburtsdaten stimmen nicht mit den Sicherheitsdaten unten überein und auch nicht das Gültigkeitsdatum.



« Zuletzt geändert: 28. Januar 2011 um 18:51 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: [1] 2 
Thema versenden
Link zu diesem Thema