Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Ekaterina <Hilinysia@yahoo.com> (Gelesen: 1307 mal)
 
Uli
Themenstarter Themenstarter
General Counsel
***
Offline



Beiträge: 30520
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Ekaterina <Hilinysia@yahoo.com>
14. August 2011 um 12:07
 
Aus meinen externen Kontakten

Hallo, Wie geht es Ihnen?
Ich bin friendscout von Ekaterina. Wie versprochen, sende ich Ihnen einige meiner Fotos. Ich hoffe, dass ich es so und wir beginnen ein Gespräch ...))) Wenn meine Fotos nicht wie du, sag mir sofort. OK?
Bitte sagen Sie mir mehr über  dich und über dein Leben, und senden Sie mir einige Ihrer Foto, wäre ich sehr nice! Nachdem ich Ihnen sagen, über mich selbst so viel wie möglich aus und senden Sie meine neuen Fotos. Ich hoffe, dass Sie ein ernster Mann bist, und bald werde ich Ihre Antwort zu bekommen. Ich bin auf eine Antwort wartet. Ekaterina

Spoiler:
Delivered-To: xxx
Received: by 10.204.156.14 with SMTP id u14cs333058bkw;
        Thu, 7 Jul 2011 05:01:30 -0700 (PDT)
Received: by 10.220.169.14 with SMTP id w14mr235018vcy.206.1310040089024;
        Thu, 07 Jul 2011 05:01:29 -0700 (PDT)
Return-Path: <Hilinysia@yahoo.com>
Received: from nm7-vm0.bullet.mail.bf1.yahoo.com (nm7-vm0.bullet.mail.bf1.yahoo.com [98.139.213.151])
        by mx.google.com with SMTP id ef11si2955416vcb.119.2011.07.07.05.01.27;
        Thu, 07 Jul 2011 05:01:28 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of Hilinysia@yahoo.com designates 98.139.213.151 as permitted sender) client-ip=98.139.213.151;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of Hilinysia@yahoo.com designates 98.139.213.151 as permitted sender) smtp.mail=Hilinysia@yahoo.com; dkim=pass (test mode) Quelltext.i=@yahoo.com
Received: from [98.139.212.151] by nm7.bullet.mail.bf1.yahoo.com with NNFMP; 07 Jul 2011 12:01:27 -0000
Received: from [98.139.213.7] by tm8.bullet.mail.bf1.yahoo.com with NNFMP; 07 Jul 2011 12:01:26 -0000
Received: from [127.0.0.1] by smtp107.mail.bf1.yahoo.com with NNFMP; 07 Jul 2011 12:01:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1310040086; bh=GrI1uRohouDErFOC6gp0GlU9wpAuCiyFmoSRwcfAcUQ=; te:From:Reply-To:X-Priority:Message-ID:To:Subject:MIME-Version:Content-Type; J79HiGhSXtePA=
X-Yahoo-Newman-Id: 918332.51373.bm@smtp107.mail.bf1.yahoo.com
Received: from localhost (Hilinysia@195.204.18.167 with plain)
        by smtp107.mail.bf1.yahoo.com with SMTP; 07 Jul 2011 05:01:21 -0700 PDT
X-Yahoo-SMTP: dXsmyGiswBB0oEC49mUaRKdVcGqRHw--
X-YMail-OSG: ZJPXXUMVM1kBHWiIWtJ0JMyUpi5w2mH6k5pLUF395PtnOK3
RuuumBhxWH5GGwJ_HXUn8DWX0JnOfcaRTqOOM1laYdNZTuzOrdROlUOy.BXd
4TnPuUazhENSLoJGLS10FQ9IMhcaeTgEs6lhjsEV__quSZE9MA9bCcvqs2D0
36yk4CcCORORhj7et1fIwxNdvqd6KpymzsdwGeeKYkNvcAlO4mIrLO4kwNy4
KKBylBTypw1eUnB___VwO.JqlYjb5faJJFXFRSxRfQtFU_vnJ2h9xGdTgXha
gtub5RJPrti1OqOZjo_u1lmOYFF4qjtzTyeGQhUPrUrHH0eH79Q--
X-Yahoo-Newman-Property: ymail-3
Date: Thu, 7 Jul 2011 16:01:15 +0400
From: Hilinysia@yahoo.com
Reply-To: Hilinysia@yahoo.com
X-Priority: 3 (Normal)
Message-ID: <77906029.20110707160115@yahoo.com>
To: xxx
Subject: Ekaterina
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------1137D20B3840B490"

------------1137D20B3840B490
Content-Type: text/plain; charset=ISO-8859-15
Content-Transfer-Encoding: 8bit


Herkunft der Mail ist verschleiert über Norwegen:
Code
Alles auswählen
IP-Adresse: 	195.204.18.167
[Reverse IP]
Ländercode der IP: 	NO
Land der IP: 	ip address Norway
Bundesland der IP: 	Hedmark
Stadt der IP: 	Os
Breitengrad der IP: 	62.5000
Längengrad der IP: 	11.2000
Provider der IP: 	Ventelo Norge AS
Organisation: 	Infonet Roros AS  

  

QW__000341_jpg.jpg ( 52 KB | Downloads )
QW__000341_jpg.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Uli
Themenstarter Themenstarter
General Counsel
***
Offline



Beiträge: 30520
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Ekaterina <Hilinysia@yahoo.com>
Antwort #1 - 14. August 2011 um 12:14
 
Dann kamen noch drei Quelltext herein:

Quelltext 1:
Spoiler:
Delivered-To: xxx
Received: by 10.204.80.208 with SMTP id u16cs54536bkk;
        Mon, 18 Jul 2011 01:35:59 -0700 (PDT)
Received: by 10.42.155.1 with SMTP id s1mr6080898icw.189.1310978157777;
        Mon, 18 Jul 2011 01:35:57 -0700 (PDT)
Return-Path: <Hilinysia@yahoo.com>
Received: from nm12-vm6.bullet.mail.ne1.yahoo.com (nm12-vm6.bullet.mail.ne1.yahoo.com [98.138.91.105])
        by mx.google.com with SMTP id hu5si10829034icc.150.2011.07.18.01.35.56;
        Mon, 18 Jul 2011 01:35:57 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of Hilinysia@yahoo.com designates 98.138.91.105 as permitted sender) client-ip=98.138.91.105;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of Hilinysia@yahoo.com designates 98.138.91.105 as permitted sender) smtp.mail=Hilinysia@yahoo.com; dkim=pass (test mode) Quelltext.i=@yahoo.com
Received: from [98.138.90.54] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 18 Jul 2011 08:35:56 -0000
Received: from [98.138.84.43] by tm7.bullet.mail.ne1.yahoo.com with NNFMP; 18 Jul 2011 08:35:56 -0000
Received: from [127.0.0.1] by smtp111.mail.ne1.yahoo.com with NNFMP; 18 Jul 2011 08:35:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1310978156; bh=YQGZd4JcMPmEfAibI+12PS0xdL0Qd6nt67VJm2m2U9M=; rsion:Content-Type; g9If44hZSGbeY=
X-Yahoo-Newman-Id: 351381.52628.bm@smtp111.mail.ne1.yahoo.com
Received: from localhost (Hilinysia@89.141.38.153 with plain)
        by smtp111.mail.ne1.yahoo.com with SMTP; 18 Jul 2011 01:35:53 -0700 PDT
X-Yahoo-SMTP: dXsmyGiswBB0oEC49mUaRKdVcGqRHw--
X-YMail-OSG: 4Cre624VM1leg3MJrIEUpSXHhoSKIp6KD6Tf75Tw8TGp5RG
5k35bqiJi2TEm2CJH7Qf21UuemL99OEICHhmluzmyX35AwHsn2yoDFsbwMYU
JajfsWr0hxERL1gkhb8AIRVNbogWlalJN2JGt3Gm1zZ1qKiR2S3AKhsW_53P
OBcTy7xhGW7fliEVULX09DGW7EmlEt1F.570aYC2JyiKCwUTBQ4IZMD_Qnf5
_uCY6dMGZbFOQu_CVr8dE7vRWmn2TRubS0WJI26MFE53IVUPRDLpvfKX7OpA
QuTH5anUtKePzZ_VxaWKZfaRMKoo0nelzueBwdgeT1M0Fvjm4esIR2XVP90p
u
X-Yahoo-Newman-Property: ymail-5
Date: Mon, 18 Jul 2011 12:35:47 +0400
From: Hilinysia@yahoo.com
Reply-To: Hilinysia@yahoo.com
X-Priority: 3 (Normal)
Message-ID: <855271967.20110718123547@yahoo.com>


Herkunft verschleiert über Spanien:
Code
Alles auswählen
IP-Adresse: 	89.141.38.153
Ländercode der IP: 	ES
Land der IP: 	ip address Spain
Bundesland der IP: 	Madrid
Stadt der IP: 	San Fernando De Henares
Breitengrad der IP: 	40.4333
Längengrad der IP: 	-3.5333
Provider der IP: 	ONO
Organisation: 	MADRITEL CABLEMODEM
Host der IP: 	89.141.38.153.dyn.user.ono.com  


                                                                                                                                                                            Quelltext 2: 
Spoiler:
Delivered-To: xxx
Received: by 10.204.80.208 with SMTP id u16cs9712bkk;
        Sat, 16 Jul 2011 04:19:42 -0700 (PDT)
Received: by 10.42.146.136 with SMTP id j8mr4902140icv.369.1310815180472;
        Sat, 16 Jul 2011 04:19:40 -0700 (PDT)
Return-Path: <Hilinysia@yahoo.com>
Received: from nm20-vm4.bullet.mail.ne1.yahoo.com (nm20-vm4.bullet.mail.ne1.yahoo.com [98.138.91.180])
        by mx.google.com with SMTP id s7si5882156icy.47.2011.07.16.04.19.39;
        Sat, 16 Jul 2011 04:19:40 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of Hilinysia@yahoo.com designates 98.138.91.180 as permitted sender) client-ip=98.138.91.180;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of Hilinysia@yahoo.com designates 98.138.91.180 as permitted sender) smtp.mail=Hilinysia@yahoo.com; dkim=pass (test mode) Quelltext.i=@yahoo.com
Received: from [98.138.90.52] by nm20.bullet.mail.ne1.yahoo.com with NNFMP; 16 Jul 2011 11:19:38 -0000
Received: from [98.138.226.126] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 16 Jul 2011 11:19:38 -0000
Received: from [127.0.0.1] by smtp205.mail.ne1.yahoo.com with NNFMP; 16 Jul 2011 11:19:38 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1310815178; bh=72pGw2Bm55WWoKkmfhPgW4essxkMLIadSiES499d3uA=; rsion:Content-Type; n80/nnUZIR9qI=
X-Yahoo-Newman-Id: 460335.857.bm@smtp205.mail.ne1.yahoo.com
Received: from localhost (Hilinysia@84.52.232.3 with plain)
        by smtp205.mail.ne1.yahoo.com with SMTP; 16 Jul 2011 04:19:33 -0700 PDT
X-Yahoo-SMTP: dXsmyGiswBB0oEC49mUaRKdVcGqRHw--
X-YMail-OSG: 6AQ5bCQVM1lmfklO_TDO2s7lV3Em5CfpFaiDlM1RQNRsmrF
STaXhj.gmRW6.MMp5aPyyluYH7qYtn0gjC2lPdt2zim1N4S_AV2d7tstJMp2
asarSXIXgOaIzuyxi3zkmcvQPRN.J93Sm3Qqdmg0Wps7uePKI3qQGi5nuj6x
nAkzIHr4FxQkeGsyXPADL5dBHADE3a39JPK_zh5yctjWMLPqmucbESoCuNZH
Qir73QQTKYQHP63gkZRsGKbfkBY5YNWG0L1qMwlj3_0yfZfCtzXSz6tb83md
yKUONzq0E1XA02Iaqo_ADNla54on8R5oRIaPrgso0s8OpHVzJAg--
X-Yahoo-Newman-Property: ymail-3
Date: Sat, 16 Jul 2011 15:19:25 +0400
From: Hilinysia@yahoo.com
Reply-To: Hilinysia@yahoo.com
X-Priority: 3 (Normal)
Message-ID: <245538443.20110716151925@yahoo.com>


Herkunft verschleiert über Norwegen:
Code
Alles auswählen
IP-Adresse: 	84.52.232.3
Ländercode der IP: 	NO
Land der IP: 	ip address Norway
Bundesland der IP: 	Sor-Trondelag
Stadt der IP: 	Trondheim
Breitengrad der IP: 	63.4167
Längengrad der IP: 	10.4167
Provider der IP: 	Nord-Trondelag Elektrisitetsverk FKF
Organisation: 	NTE Bredband FTTH
Host der IP:: 	84-52-232.3.3p.ntebredband.no  



Quelltext 3:
Spoiler für Quelltext wie vorheriger:
Delivered-To: xxx
Received: by 10.204.80.208 with SMTP id u16cs5594bkk;
        Thu, 14 Jul 2011 00:54:55 -0700 (PDT)
Received: by 10.236.157.3 with SMTP id n3mr1638981yhk.3.1310630094034;
        Thu, 14 Jul 2011 00:54:54 -0700 (PDT)
Return-Path: <Hilinysia@yahoo.com>
Received: from nm4-vm0.bullet.mail.sp2.yahoo.com (nm4-vm0.bullet.mail.sp2.yahoo.com [98.139.91.190])
        by mx.google.com with SMTP id k26si25853yhm.92.2011.07.14.00.54.52;
        Thu, 14 Jul 2011 00:54:54 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of Hilinysia@yahoo.com designates 98.139.91.190 as permitted sender) client-ip=98.139.91.190;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of Hilinysia@yahoo.com designates 98.139.91.190 as permitted sender) smtp.mail=Hilinysia@yahoo.com; dkim=pass (test mode) Quelltext.i=@yahoo.com
Received: from [98.139.91.67] by nm4.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jul 2011 07:54:51 -0000
Received: from [98.136.185.46] by tm7.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jul 2011 07:54:50 -0000
Received: from [127.0.0.1] by smtp107.mail.gq1.yahoo.com with NNFMP; 14 Jul 2011 07:54:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1310630090; bh=dPbVFgwoMFWyNq2cFtlXFAzGl2VjxLe0X1qr/mGNdyk=; rsion:Content-Type; qOWSv3nhB9Q6c=
X-Yahoo-Newman-Id: 647385.61319.bm@smtp107.mail.gq1.yahoo.com
Received: from localhost (Hilinysia@84.52.244.3 with plain)
        by smtp107.mail.gq1.yahoo.com with SMTP; 14 Jul 2011 00:54:44 -0700 PDT
X-Yahoo-SMTP: dXsmyGiswBB0oEC49mUaRKdVcGqRHw--
X-YMail-OSG: W_cmddUVM1kzudPViSW3d.OhTuqWglaGzd4vZAawLBM9wTI
4aRxFF1iOVfKXy32N9GUqXOoEa2vMcdym2_3n2W7uAZVlpr5W2EiJ7t_WPkz
yQ7aeSPOEYWRhASAW6DEIJ9fv9kxaTQ5P9cgrvh6TyD3b4Ezkr.aMhTD.tpB
tRfR64aNooy5CbwA5R6LXh5zb1b_idFIZlSnZ7EyIcMEeIyCzKB2xZ7p11tN
jO15ZE3W1lueuQJbJEdy3HXes9HcV8rjAoxXEBrRo7D5_kOnzMT84RRHofPy
Pm_Tmq4uUdl1EpymAlqx8xhpdHRMWgOAQpNGaPk4PIkIV.QK5
X-Yahoo-Newman-Property: ymail-3
Date: Thu, 14 Jul 2011 11:54:34 +0400
From: Hilinysia@yahoo.com
Reply-To: Hilinysia@yahoo.com
X-Priority: 3 (Normal)
Message-ID: <429237721.20110714115434@yahoo.com>
  
Zum Seitenanfang
 
IP gespeichert
 
Uli
Themenstarter Themenstarter
General Counsel
***
Offline



Beiträge: 30520
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Ekaterina <Hilinysia@yahoo.com>
Antwort #2 - 14. August 2011 um 12:17
 
Und zum Abschluss ein Fragment eines Textes:

Anyway, here by my uncle:

Bank account: 40817978228641000120
Name Bank: VTB24 (JSC)
Beneficiary Bank SWIFT (IBAN): CBGURUMM
Bank Adresse: Moscow, 35 Myasnitskaya st.
Last name: Safiullin
Name: NAFIS
Payment details: Private transfer to Telebank client 10573016

Address of my uncle : Russia, Moscow,  117312,  Vavilova  22-40

Aus anderer Quelle habe ich noch ein weiteres Foto bekommen:
  

QW__0043_jpg.jpg ( 31 KB | Downloads )
QW__0043_jpg.jpg
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema