Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Mary <loginmary@yahoo.com> (Gelesen: 1921 mal)
 
Ohoo
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 130
Standort: Oberpullendorf
Mitglied seit: 13. November 2011
Geschlecht: männlich
Mary <loginmary@yahoo.com>
19. November 2011 um 09:43
 
Spoiler:
Delivered-To: XXXXX
Received: by 10.182.89.72 with SMTP id bm8cs78644obb;
        Sat, 19 Nov 2011 00:30:40 -0800 (PST)
Received: by 10.68.51.135 with SMTP id k7mr16502161pbo.72.1321691437757;
        Sat, 19 Nov 2011 00:30:37 -0800 (PST)
Return-Path: <loginmary@yahoo.com>
Received: from nm5-vm0.bullet.mail.sp2.yahoo.com (nm5-vm0.bullet.mail.sp2.yahoo.com. [98.139.91.204])
        by mx.google.com with SMTP id b9si10366450pbv.7.2011.11.19.00.30.34;
        Sat, 19 Nov 2011 00:30:37 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of loginmary@yahoo.com designates 98.139.91.204 as permitted sender) client-ip=98.139.91.204;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of loginmary@yahoo.com designates 98.139.91.204 as permitted sender) smtp.mail=loginmary@yahoo.com; dkim=pass (test mode) Quelltext.i=@yahoo.com
Received: from [98.139.91.69] by nm5.bullet.mail.sp2.yahoo.com with NNFMP; 19 Nov 2011 08:30:34 -0000
Received: from [208.71.42.198] by tm9.bullet.mail.sp2.yahoo.com with NNFMP; 19 Nov 2011 08:30:25 -0000
Received: from [127.0.0.1] by smtp209.mail.gq1.yahoo.com with NNFMP; 19 Nov 2011 08:30:25 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1321691424; bh=S/GMl4O0Tbpj1WchOy/NhUtEhAmSQwtDKB+D/aiajU0=; rsion:Content-Type; 08Mzyo9U/A/gY=
X-Yahoo-Newman-Id: 611631.32690.bm@smtp209.mail.gq1.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: Pm0sFF4VM1mjlulk1mmkTSvyxBx5lt0d3LY0n7gWzbdtC9v
97u1AQR7GBCysRI6t9.5fLu3Y.AslulgsyK6pnlmCMckFu1mVRPiEJgzqmVf
tDQN7ubpunGZNn3ch67RVjiwcbimmJ1RHZtddHQfhoTR04tuKo4aeUyqi.cz
6iYhobcG72Hjwu1mtwAhNqB.w4mPROS3xSFNQbWEIwqFvdLkgge5xycwPqx3
j4OYmA19iCbsQQfEF9RZP5WtUac90XpSnY2POVSa4FgSoNp2qzG7iDzjcIuz
ryj_rNnLz9gQdesYnTOCFU6dxaLYwvVgWKcdMrZycOqNiRgsQEGimJ0psMdT
y7oe.xdDbUFUe7myHUoHcbN7_F5sTXpvSyqNI8d8-
X-Yahoo-SMTP: sOxkE.GswBBQxHItQKP4qfJOQ9rQiw--
Received: from [192.168.1.101] (loginmary@85.24.238.107 with plain)
        by smtp209.mail.gq1.yahoo.com with SMTP; 19 Nov 2011 00:29:55 -0800 PST
Date: Sat, 19 Nov 2011 11:24:24 +0400
From: loginmary <loginmary@yahoo.com>
Reply-To: loginmary <loginmary@yahoo.com>
X-Priority: 3 (Normal)
Message-ID: <1764732672.20111119112424@yahoo.com>
To: XXXXXX
Subject: XXXXXX
In-Reply-To: <CAAaj6scMpB8T1LZJbpfrFSrJzmdYTFQ1fhersZ=YyRBeHJmCAg@mail.gmail.com>
References: <CAAaj6scMpB8T1LZJbpfrFSrJzmdYTFQ1fhersZ=YyRBeHJmCAg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------114792149D59D31"

------------114792149D59D31
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable




Hellooo,

I am pleased, thank you for contacting me. I hope you have
time to send me some messages and we could to learn each other.
well... Now about me though you already know a little from my profile.
I am 24 years old, my nickname is Mary, but the truth, it only friends
name me so. I was never married I live in a apartment of my parents. I
have good job. I work as as the manager in a beauty salon. It is very
difficult work, but i like it. Here at work are good collective, I
work with good people. most of them my friends. Tell to me about the
work. Do you like your work? I also like to travel and i like new
different places, but my work does not allow me to travel often. I
have many friends, we spent time together, usually we go to the cafe
to the movie to the concerts, we have many other entertainment. Also I
prefer healthy style of a life. 2-3 times in week I visit the gym (and
sometimes it is less :^) ) I hold my body in the healthy form. And you
have any sports in the life now? Tell to me. I send you my pictures i
hope you like. Also i want that you send to me some your pictures. And
tell about you about your interesting things what you like to do, your
hobby, what your character? I hope we shall have time for writing
other interesting letters to each other. We shall look what will be...
Write to me, I shall wait your letter.

             Your friend Mary
« Zuletzt geändert: 24. Dezember 2011 um 09:29 von Webmaster » 
Grund: ru10993 
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Ohoo
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 130
Standort: Oberpullendorf
Mitglied seit: 13. November 2011
Geschlecht: männlich
Re: Mary <loginmary@yahoo.com>
Antwort #1 - 19. November 2011 um 09:49
 
Laut Profil ist sie aus Des Moines, USA

« Zuletzt geändert: 24. Dezember 2011 um 09:32 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
patapaf
Scam Warners
*****
Offline


Power sucht Frau!

Beiträge: 483
Standort: Frankfurt am Main
Mitglied seit: 16. September 2011
Geschlecht: männlich
Re: Mary <loginmary@yahoo.com>
Antwort #2 - 19. November 2011 um 09:53
 
VOm ersten Bild liefern mir die EXIF-Daten nur ein (aktuelles) "modiefied"-Datum:

Code
Alles auswählen
Software                      : Adobe Photoshop CS4 Windows
Date modified                 : 2011:10:29 19:06:54 



Zweites Bild mit einer Nikon Coolpix L21 am 23.10.2011 aufgenommen, am 29.10. "modified":

Code
Alles auswählen
[Camera]
Image description             :           
Camera Manufacturer           : NIKON
Camera Model                  : COOLPIX L21
Orientation                   : top-left (1)
X Resolution                  : 72
Y Resolution                  : 72
Resolution unit               : Inch
Software                      : Adobe Photoshop CS4 Windows
Date modified                 : 2011:10:29 19:10:39
YCbCr Positioning             : co-sited (2)

[Image]
Exposure time [s]             : 1/30
F-Number                      : 3.1
Exposure program              : Normal (2)
ISO speed ratings             : 250
EXIF version                  : 02.20
Date taken                    : 2011:10:23 20:36:03
Date digitized                : 2011:10:23 20:36:03
Components configuration      : YCbCr
Compressed bits per pixel     : 2
Exposure bias value           : 0
Max aperture                  : F3.1
Metering mode                 : Multi-segment (5)
Light source                  : Unknown (0)
Flash                         : Flash fired
Focal length [mm]             : 6.7
FlashPix Version              : 01.00
Colour space                  : sRGB
EXIF image width              : 1024
EXIF image length             : 1079
File source                   : DSC
Scene type                    : A directly photographed image
Custom rendered               : Normal process (0)
Exposure mode                 : Auto (0)
White balance                 : Auto (0)
Digital zoom                  : 0
Focal length (35mm)           : 41
Scene capture type            : Portrait (2)
Gain control                  : High gain up (2)
Contrast                      : Normal (0)
Saturation                    : Normal (0)
Sharpness                     : Normal (0)
Subject distance range        : Unknown (0)

[Thumbnail]
Compression                   : 6
X Resolution                  : 72
Y Resolution                  : 72
Resolution unit               : Inch
Thumbnail offset              : 850
Thumbnail length              : 4771 


« Zuletzt geändert: 21. November 2011 um 06:42 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Opfer
General Counsel
***
Offline



Beiträge: 6224
Standort: Berlin
Mitglied seit: 28. März 2011
Geschlecht: männlich
Re: Mary <loginmary@yahoo.com>
Antwort #3 - 19. November 2011 um 09:55
 
Mail über Schweden  verschleiert

Code
Alles auswählen
85.24.238.107 - Geo Information
IP Address 	85.24.238.107
Host 	        h-238-107.a219.priv.bahnhof.se
Location 	SE SE, Sweden
City 	        Göteborg, 28 -
Organization 	Bahnhof Internet AB
ISP 	        Bahnhof Internet AB
AS Number 	AS8473 Bahnhof AB 


Zitat:
Date: Sat, 19 Nov 2011 11:24:24 +0400
From: loginmary <loginmary@yahoo.com>

Dieses Bahnhof Internet taucht in der letzten Zeit ganz schön oft hier auf...  Schockiert/Erstaunt
  
Zum Seitenanfang
IP gespeichert
 
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20631
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Mary <loginmary@yahoo.com>
Antwort #4 - 19. November 2011 um 11:50
 
 
Fassen wir zusammen:

- Sie will aus den USA sein.
- Verschickt ihre Mail verschleiert über Schweden.
- Die Datezeile verweist ins europäische Russland.

Ausserdem finden wir die gleiche Eingangsmail noch bei:

Mary <swon5maryu88@yahoo.com>
Katty <flowerkatty68@yahoo.com>

Smiley
« Zuletzt geändert: 19. November 2011 um 11:54 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
Bommo
Forum Administrator
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 19133
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Re: Mary <loginmary@yahoo.com>
Antwort #5 - 24. Dezember 2011 um 08:59
 
Die Dame hat auch mit mir Kontakt.

Mailttext wie im Eröffnungsthread, Bilder schon vorhanden.

Spoiler:

Delivered-To: xxxxxxxx@googlemail.com
Received: by 10.50.186.161 with SMTP id fl1cs50877igc;
        Tue, 20 Dec 2011 05:53:16 -0800 (PST)
Received: by 10.229.106.152 with SMTP id x24mr863446qco.2.1324389194335;
        Tue, 20 Dec 2011 05:53:14 -0800 (PST)
Return-Path: <loginmary@yahoo.com>
Received: from nm4.bullet.mail.sp2.yahoo.com (nm4.bullet.mail.sp2.yahoo.com. [98.139.91.74])
        by mx.google.com with SMTP id h4si918877anp.126.2011.12.20.05.53.11;
        Tue, 20 Dec 2011 05:53:14 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of loginmary@yahoo.com designates 98.139.91.74 as permitted sender) client-ip=98.139.91.74;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of loginmary@yahoo.com designates 98.139.91.74 as permitted sender) smtp.mail=loginmary@yahoo.com; dkim=pass (test mode) Quelltext.i=@yahoo.com
Received: from [98.139.91.66] by nm4.bullet.mail.sp2.yahoo.com with NNFMP; 20 Dec 2011 13:53:10 -0000
Received: from [208.71.42.199] by tm6.bullet.mail.sp2.yahoo.com with NNFMP; 20 Dec 2011 13:53:09 -0000
Received: from [127.0.0.1] by smtp210.mail.gq1.yahoo.com with NNFMP; 20 Dec 2011 13:53:09 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1324389189; bh=tAESz/WkYcTJc0Ds1S4NzIdUB8Mln/WNbY9/mcWAQBA=; rsion:Content-Type; jv25uStRS8LR8=
X-Yahoo-Newman-Id: 21889.22643.bm@smtp210.mail.gq1.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: lVv9OToVM1myZcWNFR1oOemi0AljFy8c1g_DIiVUgvqle5D
MOwLztduws.eWillZvkhpWqW.uHxb5Y67AI8avuAqbC8.pLLBIKjwIGx0LVe
lpGBwQfHHdsGEJId7z64CJnoPp6W45J27vun1dLnA3wP5xE2TsTW9dkGmSmP
yU8fIl9itUMI66w.fkC28MplaxAVlbK0gq02yvdJcqMqHhQ9bqYq1KMAc7cW
JLGhIpXIrQyFPxhEPVpA4ekup4SzjcIKnf7XExvclP3Rwln.1.w.Gvv2GQOg
rD_5Pf7d36ECXUFv629.Aait7ax3Zk5zqQuEDCzOIlmWrRjocGJxndGha84a
yG7Wh7IKUOt4LoxVypfC3f9MTVQoMfKZDgxZqAtBw4IOh8uyWHj3o04zDi7B
S26b46VG3InnYJTfQbL5gbtW5GgiGqCgryU4YVO9Hs2.1FTdNyHOV5q4t8Z1
QKCZSfsFIQCJ2Oxa41ld9
X-Yahoo-SMTP: sOxkE.GswBBQxHItQKP4qfJOQ9rQiw--
Received: from [192.168.1.101] (loginmary@217.108.74.76 with plain)
        by smtp210.mail.gq1.yahoo.com with SMTP; 20 Dec 2011 05:53:03 -0800 PST
Date: Tue, 20 Dec 2011 16:51:11 +0300
From: loginmary <loginmary@yahoo.com>
Reply-To: loginmary <loginmary@yahoo.com>
X-Priority: 3 (Normal)
Message-ID: <1455621125.20111220165111@yahoo.com>
To: xxxxxxxx xxxxxxxx <xxxxxxxx@googlemail.com>
Subject: Re: xxxxxxxx (xxxxxxxx) from saymehi.com
In-Reply-To: <201112192015.53728.xxxxxxxx@googlemail.com>
References: <201112192015.53728.xxxxxxxx@googlemail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary="----------1CEBCD2F151F6B"
X-Length: 430365
X-UID: 1388
Status: RO
X-Status: ORT
X-KMail-EncryptionState: N
X-KMail-SignatureState: N
X-KMail-MDN-Sent:  

------------1CEBCD2F151F6B
Content-Type: text/plain; charset=windows-1251
Content-Transfer-Encoding: quoted-printable


verschleiert über Frankreich:
Code
Alles auswählen
217.108.74.76 - Geo Information
IP Address 	217.108.74.76
Host 	217.108.74.76
Location 	FR FR, France
City 	Rai, 99 -
Organization 	Interconnection with RAEI backbone
ISP 	France Telecom
AS Number 	AS3215 France Telecom - Orange
 

« Zuletzt geändert: 24. Dezember 2011 um 09:02 von Bommo »  
Zum Seitenanfang
 
IP gespeichert
 
Bommo
Forum Administrator
*****
Offline


Anti-Scam ist wichtig!

Beiträge: 19133
Standort: schwebend zwischen den Welten
Mitglied seit: 13. Juli 2010
Geschlecht: männlich
Re: Mary <loginmary@yahoo.com>
Antwort #6 - 24. Dezember 2011 um 09:01
 
Erinnerungsmail aus Yoshkar-Ola.


My dear, I'm sorry you yesterday I did not write, I am not much hurt.
but now all is well, and we will continue our dialogue.
I hope that you are all well, and you answer me as soon as possible?
I'll wait for an answer from you. With love your Mary!!

Spoiler:

Delivered-To: xxxxxxxx@googlemail.com
Received: by 10.50.186.161 with SMTP id fl1cs181851igc;
        Fri, 23 Dec 2011 23:36:03 -0800 (PST)
Received: by 10.50.195.135 with SMTP id ie7mr17016936igc.6.1324712161538;
        Fri, 23 Dec 2011 23:36:01 -0800 (PST)
Return-Path: <loginmary@yahoo.com>
Received: from nm12-vm3.bullet.mail.ne1.yahoo.com (nm12-vm3.bullet.mail.ne1.yahoo.com. [98.138.91.142])
        by mx.google.com with SMTP id bg6si4158913igc.53.2011.12.23.23.36.01;
        Fri, 23 Dec 2011 23:36:01 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of loginmary@yahoo.com designates 98.138.91.142 as permitted sender) client-ip=98.138.91.142;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of loginmary@yahoo.com designates 98.138.91.142 as permitted sender) smtp.mail=loginmary@yahoo.com; dkim=pass (test mode) Quelltext.i=@yahoo.com
Received: from [98.138.90.52] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 24 Dec 2011 07:36:01 -0000
Received: from [98.138.226.132] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 24 Dec 2011 07:36:01 -0000
Received: from [127.0.0.1] by smtp219.mail.ne1.yahoo.com with NNFMP; 24 Dec 2011 07:36:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1324712161; bh=k5tWlVGITA/xdJ9DUF6WhutCl92abWDNB7+QEYcd15k=; rsion:Content-Type:Content-Transfer-Encoding; Y2gutSTzQP8c8=
X-Yahoo-Newman-Id: 270814.97400.bm@smtp219.mail.ne1.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: yqAhkJ0VM1kyNQFbAxQWZdou7hQiHsufkJGTMIMpTJvzVWF
RikaEiIhzrLNH9xUDMj.38rrLV_J045m7jAP8Ngmt1eBjjafJtRu1Pcqr_yW
ZisZ8_E9AQvMiwravAQZXpn2z2MAKFXP2AhGC.b6JEhsNxUlo1vGRVUHgMqG
3soXyLqfV89Ah9wfVziCV9WDFIdqRDv.ryys6ew.UANlYZxbOFQEhw7IpgZF
MnS3hsf4si9bNN3rdtie2bEcrRHKw6U5ONzHlpbmNOA1f4vJLUQy2mrU9bGk
o2oo9fHGD3Ys6rn5RStpeM1umvqs.2.2_4vWL5X1ElxRmWnvmRcuC0eigSYo
KUcHJTw7CI8coB6QjhFTDz42ZB1ExMJa4dJnEtkkf8jBx2Ix42uzCGKVqFhD
wRwW._0j7njG_R0BpMkHKCzbSsn9F1rogLpk-
X-Yahoo-SMTP: sOxkE.GswBBQxHItQKP4qfJOQ9rQiw--
Received: from [192.168.1.100] (loginmary@188.187.145.146 with plain)
        by smtp219.mail.ne1.yahoo.com with SMTP; 23 Dec 2011 23:36:01 -0800 PST
Date: Sat, 24 Dec 2011 10:36:00 +0300
From: loginmary <loginmary@yahoo.com>
Reply-To: loginmary <loginmary@yahoo.com>
X-Priority: 3 (Normal)
Message-ID: <864252427.20111224103600@yahoo.com>
To: xxxxxxxx xxxxxxxx <xxxxxxxx@googlemail.com>
Subject: Re: xxxxxxxx (xxxxxxxx) from saymehi.com
In-Reply-To: <201112192015.53728.xxxxxxxx@googlemail.com>
References: <201112192015.53728.xxxxxxxx@googlemail.com>
MIME-Version: 1.0
Content-Type: text/plain;
  charset=windows-1251
Content-Transfer-Encoding: quoted-printable
X-Length: 3301
X-UID: 1422
Status: RO
X-Status: R
X-KMail-EncryptionState: N
X-KMail-SignatureState: N
X-KMail-MDN-Sent:  


Code
Alles auswählen
188.187.145.146 - Geo Information
IP Address 	188.187.145.146
Host 	dynamicip-188-187-145-146.pppoe.yola.ertelecom.ru
Location 	RU RU, Russian Federation
City 	Medvedevo, 45 -
Organization 	CJSC Company ER-Telecom Yoshkar-Ola
ISP 	CJSC ER-Telecom Holding
AS Number 	AS41786 CJSC "ER-Telecom Holding"
 

« Zuletzt geändert: 24. Dezember 2011 um 09:24 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema