Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Nadezhda / Nadia / Nadya <nadyadover@gmail.com> (Gelesen: 3967 mal)
 
Dagger
Ex-Mitglied


Nadezhda / Nadia / Nadya <nadyadover@gmail.com>
15. Mai 2011 um 21:42
 
Kömmt ein Vögelein geflogen...

Die Betreiber der Scammer-Schleuder www.cuteonly.com sind zu blöd ein PERL-Skript
zu generieren, um eine E-Mail-Adresse im Profil zu detektieren. Oder ist das Absicht?



Mail:

Hello
My name is Nadia. I take your e-mail in your profile on cuteonly and I decided to write you.
If you are interested, something to communicate with me, write me a reply and send your
photos.
So, I send you my pictures on the site.
Awaiting your answer
Nadezhda



Off Topic KommentarMore pictures in the gallery: Smiley



Spoiler für Quelltext:
Received: from [209.85.161.65] (helo=mail-fx0-f65.google.com)
     by mx13.web.de with esmtp (WEB.DE 4.110 #2)
     id 1QLeYA-0007Zh-00
     for xxxxxxxx@xxxxxxxx; Sun, 15 May 2011 18:52:14 +0200
Received: by fxm10 with SMTP id 10so438960fxm.0
        for <xxxxxxxx@xxxxxxxx>; Sun, 15 May 2011 09:52:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:date:from:reply-to:organization:x-priority
         :message-id:to:subject:mime-version:content-type;
        bh=phxnYZCoA9HIxloqojHpqWR4LJ3hXtMc+fJ0ariSTL8=;
        b=PjGeZv4SfZ166pKoZ+ixSu13ODyeRd5o11dafepOhKm+g1C51l/FnieNjysurGgW3M
         aKMaMKTwPi2wXlqm7MrXkFTie+mtGuQSsOZ6ElCGEz+jg4CyNkbzoPmoWRJIwnpqsMzr
         InAm/408WT9aRWmSPUYFfAOoFuAQtTLTfwNPQ=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=date:from:reply-to:organization:x-priority:message-id:to:subject
         :mime-version:content-type;
        b=nYQ/+oIDFRXLn6jiFht408U7dB9IXa5Rv8YylNCjk1WPtobM0zkaZln6R8DErxhzEQ
         6RX9PGs/+ijMGCtnoYl5RnkmJFZRjYtNuGo0m2S2AclIvKMKFJN95DXhTHW/vlY37UxQ
         x148gNqIBVV7mSISpCn1riNspxGjskjLheXZQ=
Received: by 10.223.70.198 with SMTP id e6mr4465030faj.57.1305478333775;
        Sun, 15 May 2011 09:52:13 -0700 (PDT)
Received: from localhost (static-46-187-85-154.chebnet.ru [46.187.85.154])
        by mx.google.com with ESMTPS id g5sm1520485faa.26.2011.05.15.09.52.09
        (version=SSLv3 cipher=OTHER);
        Sun, 15 May 2011 09:52:10 -0700 (PDT)
Date: Sun, 15 May 2011 20:43:36 +0400
From: Nadezhda <nadyadover@gmail.com>
Reply-To: Nadezhda <nadyadover@gmail.com>
Organization: Internet-Cafe
X-Priority: 3 (Normal)
Message-ID: <1768702512.20110515204336@gmail.com>
To: xxxxxxxx@xxxxxxxx
Subject: Hello
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------2F103A32CA0D9EE"
Return-Path: nadyadover@gmail.com



Cuteonly Profiltext von NadezhdaDover:

Zitat:
Nadezhda, 25 
Samara, Russia show in Google Maps, Wikipedia
ID 171002

Appearance
5'6" (168 cm) height
110 lbs (50 kg) weight
Blue eyes
Blonde hair 
Marital status
Single, no children 
Education
Bachelor degree 
Occupation
Assistant 
About
Aquarius
Christian
Non-smoker
Social drinker 
Seeking
A guy 27-60 y.o.
My name is Nadezhda and I am 25 years old. I am very interesting and positive girl
who is tired of loneliness, as well as the coarseness of men! If you look at my
page, then get acquainted with me closer and write me. I am happy to answer
you and you will be able to get to know! 
« Zuletzt geändert: 05. Februar 2012 um 17:29 von scambuster » 
Grund: ru11080 
Zum Seitenanfang
 
IP gespeichert
 
Indikation
lemansue
General Counsel
***
Offline


trust no cheater

Beiträge: 32968
Mitglied seit: 12. November 2010
Geschlecht: männlich
Re: Nadezhda / Nadia / Nadya <nadyadover@gmail.com>
Antwort #1 - 15. Mai 2011 um 21:51
 
email over Russia

Code
Alles auswählen
46.187.85.154 - Geo Information
IP Address 	46.187.85.154
Host 	static-46-187-85-154.chebnet.ru
Location 	RU RU, Russian Federation
City 	-, - -
Organization 	LTD Internet Center
ISP 	LTD Internet Center
AS Number 	AS42420 Internet Center Ltd 



Zitat:
Date: Sun, 15 May 2011 20:43:36 +0400
From: Nadezhda <nadyadover@gmail.com>
Reply-To: Nadezhda <nadyadover@gmail.com>
Organization: Internet-Cafe
« Zuletzt geändert: 21. Januar 2012 um 01:31 von scambuster »  
Zum Seitenanfang
 
IP gespeichert
 
Wesermann
Forum Administrator
*****
Offline


I love Anti-Scam

Beiträge: 34945
Standort: Russia
Mitglied seit: 08. Oktober 2008
Geschlecht: männlich
Re: Nadezhda / Nadia / Nadya <nadyadover@gmail.com>
Antwort #2 - 16. Mai 2011 um 08:32
 
@ Dagger

Frage sie Bitte, wo sie wohnen will und wo sie ins Internet geht.
« Zuletzt geändert: 21. Januar 2012 um 01:31 von scambuster »  
Zum Seitenanfang
 
IP gespeichert
 
Dagger
Ex-Mitglied


Re: Nadezhda / Nadia / Nadya <nadyadover@gmail.com>
Antwort #3 - 17. Mai 2011 um 23:42
 
Shy and nice girl

Wie blöd ist Vlad? Ihren Namen hat er/sie doch schon in der ersten mail mitgeteilt.
Die mail ist wohl eher ein Standardtext.

IP-Adresse wie in Antwort #2
Bilder ohne EXIF-Daten


@ Wesermann

Die Frage stelle ich ihm/ihr in der nächsten mail.


Mail:

Hello my new friend xxxxxxxx
I am very glad to see your letter, to be honest I do not think you will answer me, but I was wrong.
I do not often write letters and do not know how to start them, but I'll try.
My name is Nadezhda, friends and parents call me Nadya, you can call me as you wish Smiley
I am 25 years old, I was born on February 14, 1986 year, my birthday coincides with the day of lovers, I was lucky: P
I went to school full course, you do not think it's interesting Smiley
After school I went to institute and entered the lawyer,
It was so easy to finish, but I did it!
I am currently working in public organizations - the Federal Security Service (FSB),
Maybe you heard about this? We deal with national security.
But I do not work in their field, the data time I pass probation and get work experience.
Officially my position  is a consultant trainee, but not officially Iam secretary:)
My job is to rewrite that would cause, and help my supervisor.
I do not have much to do, so sometimes I can sit on the internet and play in anything.
I hope I do not scare? Smiley That's why I do not wear a form and did not like the government worker.
I have parents, but no brothers and sisters.
My father name is Yuri, his 49 years he worked as a surgeon at the hospital.
My mother name is Kristina, her 47 years, she a teacher at the school, works with children in junior classes.
Hmmmmm ... I do not know what next to write:) Now re-read what you wrote and think too much.
I think that will send it to you, and you decide if you're interested in with me to communicate what you say - if not, then no fortune Smiley
Generally I do not believe fate, but the parents and place of birth, we do not choose ... this is a philosophical question!
I will finish the letter, if you want, in my next letter I will talk more about his life.
Just would like something you would have told about myself that I would learn more.
If you can send me your pictures and I'll send you in every letter.
I'll wait for your answer.
I wish you good day!
Your new friend Nadya

PS
I hope photos do not seem to you too outspoken?
I'm actually very shy and nice girl! Smiley




Spoiler für Quelltext:
Received: from [209.85.161.54] (helo=mail-fx0-f54.google.com)
     by mx04.web.de with esmtp (WEB.DE 4.110 #2)
     id 1QLzFv-0005Nc-00
     for xxxxxxxx@xxxxxxxx; Mon, 16 May 2011 16:58:47 +0200
Received: by fxm11 with SMTP id 11so6476688fxm.27
        for <xxxxxxxx@xxxxxxxx>; Mon, 16 May 2011 07:58:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:date:from:reply-to:organization:x-priority
         :message-id:to:subject:in-reply-to:references:mime-version
         :content-type;
        bh=Z6j6M59BkO/kTfCcvWgVkN6pjKKNz5+tAngFmc5LkG4=;
        b=Xo+Skpnb3vcerq2ikj2Z4AN1POdgeBn+nUm9Gc5xaqp/eJ9ojU2A53557BGODg+FdQ
         mu2ssLUEEy9YbCn2swOSTacHVFVbRIikdQYJGvPHwpfq4JUy1LwcwGfPEEQEySm7QYcQ
         I8wTlIP5oA14ptO+wdNEt9wHGDOeXYHGAEaew=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=date:from:reply-to:organization:x-priority:message-id:to:subject
         :in-reply-to:references:mime-version:content-type;
        b=kxBV8vDWsUOLhZrXCzofwdlXQ4wa1m5oDg0jo6b8VbM/eAzQHiIaneD7zHQ5oN2m4f
         ibRMA7ye+AN+xsmDZz8msbdf0GsaIJunMDreGZKKsHLLD1poxXnYTLfQlfKmEb6b+2lc
         o43M7x+m0S1PNcXRB9O/of4I79QqzxmWbtlog=
Received: by 10.223.76.212 with SMTP id d20mr3449723fak.5.1305557926905;
        Mon, 16 May 2011 07:58:46 -0700 (PDT)
Received: from localhost (static-46-187-85-154.chebnet.ru [46.187.85.154])
        by mx.google.com with ESMTPS id c24sm1890073fak.7.2011.05.16.07.58.41
        (version=SSLv3 cipher=OTHER);
        Mon, 16 May 2011 07:58:43 -0700 (PDT)
Date: Mon, 16 May 2011 18:27:24 +0400
From: Nadezhda <nadyadover@gmail.com>
Reply-To: Nadezhda <nadyadover@gmail.com>
Organization: Internet-Cafe
X-Priority: 3 (Normal)
Message-ID: <1296183429.20110516182724@gmail.com>
To: - <xxxxxxxx@xxxxxxxx>
Subject: Hello my new friend xxxxxxxx
In-Reply-To: <xxxxxxxx@xxxxxxxx>
References: <327728424.20110515204501@gmail.com> <xxxxxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------E201101664A78F"
Return-Path: nadyadover@gmail.com
« Zuletzt geändert: 21. Januar 2012 um 01:33 von scambuster »  
Zum Seitenanfang
 
IP gespeichert
 
abu1963
Ex-Mitglied


Re: Nadezhda / Nadia / Nadya <nadyadover@gmail.com>
Antwort #4 - 18. Mai 2011 um 08:24
 
Mail aus Rußland

Code
Alles auswählen
IP Details for 46.187.85.154
Hostname:	static-46-187-85-154.chebnet.ru
ISP:	LTD Internet Center
Organization:	LTD Internet Center
Proxy:	None detected
Type:	Unknown
Assignment:	Static IP
Geolocation Information
Country:	Russian Federation ru flag
State/Region:	Chuvashia
City:	Novocheboksarsk 



Zitat:
Date: Mon, 16 May 2011 18:27:24 +0400
From: Nadezhda <nadyadover@gmail.com>
Organization: Internet-Cafe
Received: from localhost (static-46-187-85-154.chebnet.ru
« Zuletzt geändert: 21. Januar 2012 um 01:36 von scambuster »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30520
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Nadezhda / Nadia / Nadya <nadyadover@gmail.com>
Antwort #5 - 20. Mai 2011 um 19:17
 
Zitat:
Organization: Internet-Cafe

Die ist hinreichend bekannt. Das ist Vlad' Hinterhofinternetscamcafe!!!!
Für ein normales Internetcafe fehlt leider der Webmailer! Auch hat chebnet eine statische IP und mit dieser IP kam am 11. Mai Mariya <prostomaria25@gmail.com> rein. Noch ohne Organisation!
« Zuletzt geändert: 21. Januar 2012 um 01:33 von scambuster »  
Zum Seitenanfang
 
IP gespeichert
 
Webmaster
Forum Administrator
*****
Offline


Abgeschlafft und ausgepufft!!

Beiträge: 23873
Standort: Йошкар-Ола
Mitglied seit: 06. Januar 2008
Geschlecht: männlich
Re: Nadezhda / Nadia / Nadya <nadyadover@gmail.com>
Antwort #6 - 22. Mai 2011 um 20:51
 
@ Uli

Julia und ich haben uns die Webseite von Chebnet angesehen. Ist ein lokaler Provider über Kabel, vergleichbar mit Kabel Deutschland.
Bietet Internet, Telefon und Fernseher über Kabel an. IP ist statisch, wie auch bei Kabel Deutschland.
Bietet allerdings auch VPN an. Wenn als jemand über Chebnet einliefert, sollte er auch in Chuvashia wohnen.
Allerdings sind nur die Städte verkabelt, nicht das gesamte Gebiet. Anliegende Oblaste werden nicht versorgt.

« Zuletzt geändert: 21. Januar 2012 um 01:34 von scambuster »  
Zum Seitenanfang
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30520
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Nadezhda / Nadia / Nadya <nadyadover@gmail.com>
Antwort #7 - 22. Mai 2011 um 21:37
 
@ Webmaster

Das ist die eine Sparte von chebnet. Es gibt noch eine zweite. Und darüber laufen offizielle Amtskanäle auch außerhalb von Chuvashia.
So weit bin ich mit meiner Infosammlung bereits gekommen.

Aber eines ist klar: Ein Internetcafe in Samara wird wohl kaum über chebnet reinkommen!
« Zuletzt geändert: 21. Januar 2012 um 01:34 von scambuster »  
Zum Seitenanfang
 
IP gespeichert
 
abu1963
Ex-Mitglied


Re: Nadezhda / Nadia / Nadya <nadyadover@gmail.com>
Antwort #8 - 22. Mai 2011 um 23:22
 
Ich spiele mal wieder den "advocatus diavolus": Augenrollen


Spoiler für Quelltext:
Return-Path: <xxx@googlemail.com>
Received: from edge04.upcmail.net ([192.168.13.239])
          by viefep14-int.chello.at
          (InterMail vM.8.01.02.02 201-2260-120-106-20100312) with ESMTP
          id <20110522200212.WIYQ6096.viefep14-int.chello.at@edge04.upcmail.net>
          for <xxx@kabelbw.de>; Sun, 22 May 2011 22:02:12 +0200
Received: from mail-ey0-f171.google.com ([209.85.215.171])
     by edge04.upcmail.net with edge
     id mk2B1g0163iTHp504k2CNk; Sun, 22 May 2011 22:02:12 +0200
X-SourceIP: 209.85.215.171
Received: by eydd26 with SMTP id d26so2382709eyd.16
        for <xxx@kabelbw.de>; Sun, 22 May 2011 13:02:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=googlemail.com; s=gamma;
        h=domainkey-signature:mime-version:date:message-id:subject:from:to
         :content-type;
        bh=4CKSBAtKlG5VEYJsityFhpN1sADULeq9ERR9fgqIsPM=;
        b=NZxrE0fvSnj2Tq8hLAVSHHjPyYGakm0LB4sBMyIDSNeuYh0XXNQwWCXH/O2k32P0j0
         i36AoECCO+3MQ8NClQ5IFnZ0sx+Mt0pdcyd9V/ilZsqkBKoLoqqoyjHYcXUJJAMqvRmI
         3EAk3ZAAq64v/HPCPzp97Ei+wUbcNAeocm+eA=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=googlemail.com; s=gamma;
        h=mime-version:date:message-id:subject:from:to:content-type;
        b=xEhK9BH39vbELVq7AEufAODz+K8QPKuuiDQsC18NtzKtfrbYDenaefDBaKrNqyDNqC
         ilgLUbVffFc7MrXUeo1626SBrK5YHnI4g99OL9ZYFoZdUBrf9LTP6iGqJ+e2FDg8csFL
         PY9hmuCZFP/nJU26LDVLNuoO1TuEzXLPoxHGM=
MIME-Version: 1.0
Received: by 10.14.9.214 with SMTP id 62mr534112eet.208.1306094531261; Sun, 22
May 2011 13:02:11 -0700 (PDT)
Received: by 10.14.47.74 with HTTP; Sun, 22 May 2011 13:02:11 -0700 (PDT)
Date: Sun, 22 May 2011 22:02:11 +0200
Message-ID: <BANLkTimtd8cQ2thaza_3nURRKEBubzfY7g@mail.gmail.com>
Subject: TEST
From: xxx <xxx@googlemail.com>
To: xxx@kabelbw.de
Content-Type: multipart/alternative; boundary=0016364c794b9436a904a3e2d4a2

Das ist der Quelltext einer Mail, die ich von meinem Gmailkonto (Website G-Mail) über meinen Kabel-Bw Anschluß an mein Kabel-BW Konto geschickt habe.
Es gibt auch hier keinen X-Mailer!

Zitat:
Für ein normales Internetcafe fehlt leider der Webmailer!

Dass die Ortsangabe "Samara" im Profil stimmt, nehme ich nicht an, Profile sind häufig falsch diesbezüglich.
Die Headerauflösung in Antwort #5 dürfte die zutreffende Ortsangabe (Novocheboksarsk) enthalten.
Und da ist Chebnet vertreten. Zwinkernd

Zitat:
Aber eines ist klar: Ein Internetcafe in Samara wird wohl kaum über chebnet reinkommen!

« Zuletzt geändert: 21. Januar 2012 um 01:37 von scambuster »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30520
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Nadezhda / Nadia / Nadya <nadyadover@gmail.com>
Antwort #9 - 01. Februar 2012 um 19:03
 
Habe noch eine Mail von ihr hereinbekommen, leider ohne Quelltext!


Mail:

Hi, my good and great xxx! 
Again, I am happy to see your letter. 
Each your letter brings much joy and warmth in my heart. 
With each your letter you are taking more and more place in my heart. 
I dream about the day when it's not a letter, and our long-awaited meeting. 
What's your weather? How is your mood my dear xxx? 
xxx, you say that you have lost any data as to send money, do not worry I'll write to you all! 
You will be able to send money via money transfer western union! 
I went to my travel agent and they told me that everything is in order and my documents are ready! 
I now have only to pay for everything, but I can do it only when you send me the money! 
xxx, as I learned how you can send me money, I do not explained in detail. 
I suggested using a simple transfer! 
Then I was advised to use a system of remittances as a "Western Union"!!! 
This is a very quick, easy and most importantly a reliable way to transfer money from one country to another! 
Dear xxx, so that you could send me the money, then you will need my full data. 
Here are my details: 

Name - Nadezhda 
Surname - Mironova 
Country - Russia 
City - Cheboksary 
Postal Code 428 000 

My angel, this data you will be enough that you could send me the money! 
But after you send me money, I will need your full data as well. Your full name, your full address, full name of the city and country from which you send me the money! But it is much easier if you will be able to send me a copy of the form Western Union, after you send me the money! 
I also will need a ten-code (MTCN) it will give you in your bank account. He will need me, because without him I could not get the money! 
So I explained to the travel agency. 
xxx, tell me you'll send the money in the coming days? 
You send money to this weekend? 
Just when you send the money before the weekend is already at the beginning of next week we'll be together! 
You understand this is xxx? Now the speed of our meeting depends on you xxx! 
at the expense of a passport, I already told you that I have no way to send you a copy and also will be better that we will submit our documents after I come! 
would be better if we will submit our documents together, you will agree with me xxx? 
In such a day is better to be outside and go for a walk in the fresh air. It is so nice. 
Also, it would be nice if we were together, and once went to the park together. we would walk side by side holding hands and we kiss each other. 
It will be good to leave town and be with you, my dear xxx in nature. It's wonderful. 
I know probably I am too romantic, and I love nature very much. What do you think about this? 
You would like it to happen as soon as possible? 
just now all at your fingertips xxx, I think that you understand all of it and send the money today or tomorrow! 
When I think of you, my loved one, I get so happy, and it's nice and happy in his heart. 
I understand that I can not live without you, without your words, without your hugs and kisses. I was looking for this all my life. 
You may meant to me by fate. I should connect life only with you my beautiful xxx. 
I am happy that you are mine. I appreciate it very much. I do not want to lose you ever. You - my life's meaning. 
Without you, I do not have anything to live in this world. I've always dreamed about such a man as you, so understanding and a loved one and the smart, interesting, and looking over the man. I want it, and I dream that we will be together. 
I will wait your letter soon. 
I hope to get it and be delighted to your answer. 
many kisses for you my lovely xxx! 
Your always love Nadezhda!
« Zuletzt geändert: 05. Februar 2012 um 17:28 von scambuster »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema