Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 [2] 3  Thema versenden
Sehr heißes Thema (Mehr als 25 Antworten) Shawn <ricardoshawn74@yahoo.com> <shawnriccky@hotmail.co.uk> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com> (Gelesen: 13886 mal)
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65904
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #15 - 06. Januar 2012 um 14:10
 
Mail über Nigeria

Code
Alles auswählen
IP:	41.206.12.75
Decimal:	701369419
Hostname:	41.206.12.75.vgccl.net
ISP:	MTN Nigeria
Organization:	MTN Nigeria
Services:	Suspected network sharing device
Type:
Assignment:	Static IP
Country:	Nigeria
State/Region:	Lagos
City:	Lagos
Latitude:	6.4531
Longitude:	3.3958 



Zitat:
from [41.206.12.75] by web120905.mail.ne1.yahoo.com via HTTP; Thu, 15 Dec 2011 07:11:15 PST
X-Mailer: YahooMailWebService/0.8.115.331698
Date: Thu, 15 Dec 2011 07:11:15 -0800 (PST)
From: Shawn Ricardo <ricardoshawn74@yahoo.com>
« Zuletzt geändert: 08. Januar 2012 um 20:52 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
reigen
Ex-Mitglied


Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #16 - 06. Januar 2012 um 14:16
 
Vor dem "Abflug" noch eine Email:

My love I'll be out in a few minutes to the airport, my flight is in less than an hour. I miss you my love and here are some pictures my love.

Every night when I close my eyes, you fill my heart with joy, and every morning I wake up with smiles because you're the first thing on my mind. I'm in love with you, that's for sure, but I want to hug you, kiss you and adore you. If you're gonna be mine, you will make me the happiest man in this world. But either way, you will always be the greatest my love.

Love always,
Shawn

Spoiler:
From Shawn Ricardo Fri Dec 16 07:41:36 2011
X-Apparently-To: xxxxxxvia 87.248.117.115; Fri, 16 Dec 2011 07:41:40 +0000
Return-Path: <ricardoshawn74@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)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--
X-YMailISG: hICpkn0WLDuJVVHuhXmDIq79uMlRnxptBu9N263sbG6b99lB
.9g_qS1uKG4VeHEPgryokgtCxfZtUlsxTuqUbKHeN.En2ccDY7Wl4tVqe2Cp
bM7CnMCOShrs1XCnPR4TH4HHZpmex0GCHEzexkm.6VadoDbNjoJ9duO1wNeu
wzu0_S3DXIh5rYEqNZaiCxCMXgXG9Xn9pAUgDFqxViwuKQk7CJo2dJY4YM1O
j5F5YAuiRCxKPnLvGxiOD0fkYWubGVzSlRxCEeihrUqFPltY8LKTKGNTFfZj
EF4Kh1W_JDH4Pskc6Z1LMcQdoBxnUOvp7iTXRcMxzPXv0pE5UGWhbeiSdEP_
zfNWAaTNqACRudy6q8sxreAcagVQ2935i.KS79AvGqzcqUc2Qbi_LlHv8UNU
bfuTq8yUye7x8CQuapemWm2KJVnQ8q0NXsSjHlYvp52.ohor3yY_2h56.PEB
tokN01LT0QuS0ZlkFUyRWx9k30ZNh31sh_fO9lcHLaqo6XcYkPgpdHNWqlXF
oCytv185MHLzYS0_9FSGI6rI27wsOAe0js2PzJz25j0vyt8J4Z1R_qIQEY0Q
wZ8mEpT2tGPwIW0QCvHVHsOS6kxtUr47UNH_f9TUxAHJ6YI0UPQFBvATTQSR
0C4K4Nw8VmV7xi1Sq5P9l53M1FNMyvvbQm6UwV_riVnzjwzZdrLVhTYoYIpN
_izPdRHJCxcfKXpzdoSqN0UGC0L9WGjzeFSsIHgXfBQ3Icg1xU5ltFisvx68
Z6n.BF3OQfhAj1zpGs3mQLflF2f1zvWn44JWNbK7oas_.XI4UCM85eJP0AHW
A92e2FUQd4MELIsyzG.oLvNWjSKQSRC1lswQ8q500hLGLaA6xIW4GHPJ4tJc
p4CBTf7BT2WIDutBBbTs3my.jGqbLErvkidckVSn9qlxyhC5C9FDJDsgIoBL
5BylHcTv7qcI8fzCiAX7siT36QlC5URJtBZzCKViLW5pMc2eud.ZO.1Yfhlb
hbpxmc3vTdme5MXvkZeAqjLjzII5e37T2nsDN62kNlAY.RNxL7KvrJbGHLVo
d9jlJpv8..g2_cU3YAYP38tolsu0hsGGvZNh7T1tZlbZCRLiMWtg5YVBJ6WS
ZfLkpQuppX9vldyQQ_Y6ucQX4tBdI8iK3Tk9IYZfqfBeNRGEvZkSL1Ai
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1003.mail.ird.yahoo.com  from=yahoo.com; domainkeys=pass (ok);  from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1  (HELO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88)
  by mta1003.mail.ird.yahoo.com with SMTP; Fri, 16 Dec 2011 07:41:40 +0000
Received: from [98.138.90.50] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 16 Dec 2011 07:41:37 -0000
Received: from [98.138.226.161] by tm3.bullet.mail.ne1.yahoo.com with NNFMP; 16 Dec 2011 07:41:37 -0000
Received: from [127.0.0.1] by omp1062.mail.ne1.yahoo.com with NNFMP; 16 Dec 2011 07:41:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 196233.59253.bm@omp1062.mail.ne1.yahoo.com
Received: (qmail 22038 invoked by uid 60001); 16 Dec 2011 07:41:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1324021297; bh=rJ85I+B1sSf/az5MR8p0ztCm+7abFnEnomorW35OZFM=; 
:To:Cc:In-Reply-To:MIME-Version:Content-Type; 

poS3W53eIZ6zM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  
:To:Cc:In-Reply-To:MIME-Version:Content-Type;
  

tjFPjdNRFzWu0=;
X-YMail-OSG: 7FPhoOsVM1m_iC.KYPh93QkO.Dsh_yGdilO6acjJN4_E.R0
IGFZDlOm4jJKtBh0Chjh9kMqZSWJr2pxpruhRYu3ehXR3Fy2tcTZhCiZ30r9
MllJ6lrK0ByefKdf.Stx3FwwpIfbu1EPfd75bcGacGCBriHrEwunKb1vwiat
uPM90x2.d8ovhXlxOKdb4LxLOJcQaYJFomE5a729PgLfYom1uN8TF2Jnxxi2
zU.xPOIVmnYBvsR_ZBEkJyRLiMw_pkDZXU2ECGIpPIn7xMRQ.Od4vsCtzjq8
po3QJSke7O4VDBB6jT393jNltncLu7eYii63W3VB3RCiQVml7ZI2P56GJq5d
fbqIdRbrqhps7UBwFoVWpsjybmpQtRW0WOjr9dRsqPpLgGXfc0mJ8OvbIvOo
iXaaFz7bkf3ppdfkZFKqQOzrXUBm_tqTOEPH2p16A5SBKEJCrSTSqsy9b51j
pJPsvmw3poGt9gVlfD5K2CPZhABizpDt1hxrTd0_kOwK96VLOECPebfwRrJ3
N.RG34982pjGVywxzesT8G51EzqvPSFFfl7cPZqNUnUJd0qNvDC85pmjv5d0
M5TA4grX6yqw2EQD2.l4Tf5s0h4I8yroLD3JovWTAFFpWwDlt_A--
Received: from [74.115.0.2] by web120901.mail.ne1.yahoo.com via HTTP; Thu, 15 Dec 2011 23:41:36 PST
X-Mailer: YahooMailWebService/0.8.115.331698
References: <1323857911.83420.YahooMailNeo@web29819.mail.ird.yahoo.com>
Message-ID: <1324021296.10607.YahooMailNeo@web120901.mail.ne1.yahoo.com>
Date: Thu, 15 Dec 2011 23:41:36 -0800 (PST)
From: Shawn Ricardo <ricardoshawn74@yahoo.com>
Reply-To: Shawn Ricardo <ricardoshawn74@yahoo.com>
Subject: My trip
To: xxxxxxx>
In-Reply-To: <1323857911.83420.YahooMailNeo@web29819.mail.ird.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-2118997934-1551200338-1324021296=:10607"
Content-Length: 186906
« Zuletzt geändert: 08. Januar 2012 um 20:52 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65904
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #17 - 06. Januar 2012 um 14:32
 
Headereinlieferung Herkunft nicht feststellbar

Code
Alles auswählen
IP:	74.115.0.2
Decimal:	1249050626
Hostname:	74-115-0-2.anchorfree.com
ISP:	AnchorFree
Organization:	AFNCA
Services:	Confirmed proxy server
Type:	Corporate
Assignment:	Static IP
Country:	Anonymous Proxy 



Zitat:
from [74.115.0.2] by web120901.mail.ne1.yahoo.com via HTTP; Thu, 15 Dec 2011 23:41:36 PST
X-Mailer: YahooMailWebService/0.8.115.331698
Date: Thu, 15 Dec 2011 23:41:36 -0800 (PST)
From: Shawn Ricardo <ricardoshawn74@yahoo.com>


« Zuletzt geändert: 08. Januar 2012 um 20:52 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
reigen
Ex-Mitglied


Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #18 - 07. Januar 2012 um 13:31
 
Hallo,
ich habe mir den Quelltext noch mal angeschaut.
Abgeschickt 7.41 Uhr UK-Time, 8.41 Germany-Time angekommen.
Das stimmt. Aber weiter unten im Quelltext steht:
received from 74... 15.12.11 23.41.36 (uhrzeit).
Kann es sein, dass der Scammer an sich eine Mail geschickt hat?
Habe alles auch an das webmasterpostfach gesandt.
Sorry, wenn ich etwas falsch gemacht habe.
« Zuletzt geändert: 13. Januar 2012 um 08:58 von »  
Zum Seitenanfang
 
IP gespeichert
 
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20631
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #19 - 07. Januar 2012 um 19:45
 
Zitat:
Kann es sein, dass der Scammer an sich eine Mail geschickt hat?


@ reigen

Das mit den Zeiten im Quelltext ist ein bisschen kompliziert. Ich versuch es dir hier mal zu erkären:

Die Zeiten werden im Regelfall nach der Koordinierten Weltzeit = UTC angegeben.
Deutschland hat also eine Zeitdifferenz von +1 Stunde zur UTC, deshalb der Eingang der Mail um 8:41:40 Ortszeit am 16.12.
Abgeschickt hat der Scammer die Mail laut Datezeile:

Zitat:
Date: Thu, 15 Dec 2011 23:41:36 -0800 (PST)


PST = Pacific Standard Time, ist eine Zeitzone, die minus 8 Stunden zur UTC hat.
Rechnest du die 8 Stunden zur Datezeile vom 15.12. um 23:41:36 hinzu, kommst du auf 7:41:36 am 16.12.

Die Mail war also genau 4 Sekunden vom Versenden bis zur Ankunft auf deinem Mail-Account im Netz unterwegs. Zwinkernd





« Zuletzt geändert: 08. Januar 2012 um 20:53 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
reigen
Ex-Mitglied


Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #20 - 08. Januar 2012 um 20:51
 
My Darling

Oh baby... it was really a long flight baby and i am so tired baby. The inspiration I gained It came from knowing you as your words touched my loving affections grew special feelings inspired i shall remember evermore, the boost I had needed enabling my heart to soar interacting heart to heart, love came shining through you, you gave me inspiration of which I will forever value.

You are a beautiful landscape for my eyes to gaze upon, a painting of beauty, delighting my mind and senses, you’s so perfectly conducted as a simple angels song so soothingly through my lips to my hearts entrance.You are the essence of pure beauty in my eyes presence,rare as the rose in winter, in it’s most beautiful form you’s beautiful as the sea, my loving heart sails upon Sheltering me deeply with your love through the storm.


Here is my mobile number honey, It is on roam and you can get me anywhere I am in the world.  Honey here is the number:  + 447031846778, you can call me on it now and also send me a lovely SMS baby. As i wait for this two now.

Also i just sent you a mail from the manager's office as he told me there are no computers in the rooms, so I asked and made arrangement for one and it will be brought to my room but I do not know when baby.

To you Darling, You're Beautiful.

I had a safe trip, am in my hotel right now, but i had a little problem which I have been trying to solve well I miss you a lot, are you home, I want to talk with you.
Miss my darling, my queen.

Shawn



Spoiler:
From Shawn Ricardo Sat Dec 17 15:57:43 2011
X-Apparently-To: xxxxxx via 87.248.117.115; Sat, 17 Dec 2011 15:57:45 +0000
Return-Path: <ricardoshawn74@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
bG9uZyBmbGlnaHQgYmFieSBhbmQgaSBhbSBzbyB0aXJlZCBiYWJ5LiBUaGUg
aW5zcGlyYXRpb24gSSBnYWluZWQgSXQgY2FtZSBmcm9tIGtub3dpbmcgeW91
IGFzIHlvdXIgd29yZHMgdG91Y2hlZCBteSBsb3ZpbmcgYWZmZWN0aW9ucyBn
cmV3IHNwZWNpYWwgZmVlbGluZ3MgaW5zcGlyZWQgaSBzaGFsbCByZW1lbWJl
ciBldmVybW9yZSwgdGhlIGJvb3N0IEkgaGFkIG5lZWRlZCBlbmFibGluZwEw
AQEBAQ--
X-YMailISG: iPEOtCIWLDtwsva7osi6wsftfV5C1kxaLnYDO.p83H2eIXK1
bAHylIS1ENQmS1iHpi6fXf6ZQW03M3eUU7WJ95ML4WBzOQBrMEDdzQHfEMag
g8i8mLYo4T6aPVgI0eACYRtV9t0iulMLRIR4vJMJbe8C2rk9hI5MowNTclNf
3WZr0rXbhwvIvMbnl2A5w905xKOQN8nGLJe8v0b4dSrAGgBRQiS3FWApm7oG
g.CJTrAq4L153Qf5wET0XwHqsDZ5VfB1s0mYL1mOUwvUv5uAN4X8oe6llThG
KRefbnIGaGayEo.RZI3wBJkn3PMcy1ooJ._XD9Wbxx5cc8ukQcS6GFShsPQ9
vdZVD8QvM_.Af4FZcKDsZxJ2huv2_ao0KDu1zrHWb0.Gw4C4hJTLIdJ5zRXd
nAD2tmZU0kKehCZxqXrrhtigInjTKW62I.GvgP_2qtGZtEme2SsC2Q_qShzx
pxOU.l6Ro1yzmP7Qx7Ohmqu51w9VS7bUl6t8t73BS.ehphsAxA6hG4JYANj4
FNEzH5iarcKjjnTtw4q0YFezlPGUxBZpfIdiqXz4RzqtbIE._CNB4aSQ8x_P
OihINxhPljlubrlsMtb4yV9GynhsKiguNlLUIw7a4YVgjbTU1jDljDVVJ7yz
Bz6oj0nvSum189DCEaRRXf1GEnCwyJDhkMKGZjPVLSRmS_hqYbJKUq0GItPf
jWIiOoWKHW3l5GPdPjm2F9wym_bB2yZxixZ2hLct3nzcoiiXAwm1O1ngKW7t
8DKe8._OEYVVG3DRbWLIxNrvrCb9uhcEcqsY5ms8Qv86FMp86uReQvVCHvmX
oTonkArtzS6CJ54c849B5oSesUZxkWbPI9f36D75Korw5wv4ZKQVouQ9u23U
5yFmxVr8ZOQ_Rc32Kw99txH7Yn5LLmKBf3FUrP1B4gWjilJGneI.DYL46ikD
Wyqa5uWkohQSD9VaWlArv6k_9ciK0xqAY3f62svJaE8J8MkXCyerefOpnNcR
EUODxMcc44GO_kAZV2EXtTL9LHfRkr9GcPFIMsspv2k1PjYc.ryqzulGbk0_
J4biIGKBdLGKRcZAW8t7tsWdC_LDY8uzY6BENePP0EW7HIMaNbrghQvBVz0s
O09ctWm9BHvCl8JkB6Ypb22FbYgrHERQuP6kpq3VeDPm.i7j1K69OFkVBLnd
yNSYqUpoACE2MBseRGClP1HMuOUpvL6dJ9gYEaJ0wMebqo0Q9Ydyfdx28gmu
zG7jW.shqmZUaxXRSw--
X-Originating-IP: [98.138.90.67]
Authentication-Results: mta1081.mail.ukl.yahoo.com  from=yahoo.com; domainkeys=pass (ok);  from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1  (HELO nm4.bullet.mail.ne1.yahoo.com) (98.138.90.67)
  by mta1081.mail.ukl.yahoo.com with SMTP; Sat, 17 Dec 2011 15:57:45 +0000
Received: from [98.138.90.48] by nm4.bullet.mail.ne1.yahoo.com with NNFMP; 17 Dec 2011 15:57:43 -0000
Received: from [98.138.89.245] by tm1.bullet.mail.ne1.yahoo.com with NNFMP; 17 Dec 2011 15:57:43 -0000
Received: from [127.0.0.1] by omp1059.mail.ne1.yahoo.com with NNFMP; 17 Dec 2011 15:57:43 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 857104.28498.bm@omp1059.mail.ne1.yahoo.com
Received: (qmail 92842 invoked by uid 60001); 17 Dec 2011 15:57:43 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1324137463; bh=PwPuKLYJ0uUoR0oTAp9FoUah53yORB5rHtv3NlOnaf4=; :To:Cc:In-Reply-To:MIME-Version:Content-Type; 9juCPNSHj0zzg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  :To:Cc:In-Reply-To:MIME-Version:Content-Type;
  kvKY4HZOpqzrw=;
X-YMail-OSG: YnWvGmwVM1kqO1x.QtKpCncEX0hykGNPz2NkiS9qDMpzHGc
6RJjau.aSwLeB0XdNa7BOUsUuLxBxuIU8QcUlDcEJbVfon0DHcvp3v4xlUgW
pzl0xsbTNWwrqgSt84xtVKb3riP9wJCz_uvTsdeT78TCul_PvXHtT618imfz
uLtWrvm30g.9Rr5sBMoT5AcTxuLk6jWGHkiOhHJYVch2OPUw7gA9sYp3FHm8
BY5XZdXWk1jBv8Qt9rmL4F5nhUxmMXbtpMpNfjDbQtplCmT1JtKAAc12BBKb
LKGmWylAa5hUFCEkwTvQ1lmzxXnEB0DozwOU66tOSPnjlaUS_PwDfYIffiCb
sNhsZPGE8jjhV2ezqrE2eg6F3iE5wm81MOMt3_f6jDsf_J1wm3LoLo7J44cO
TNsmDuBOnfSklU9SZ.8mFelBsFS7yyPAPZDr7vA.4butYQR1DRVVkKDqHqL7
Qkp6mOfrg.rgZBc5.Fxdhly_AP5VcQUguZtCYN21KIXHKS3kLLOuZreDvh3e
pJ7PlwBaaLovrIa_ZdQQF4pHavbHpjQamt_TY.hNanXot.WlBH6LoXWhZBgY
-
Received: from [74.115.0.2] by web120903.mail.ne1.yahoo.com via HTTP; Sat, 17 Dec 2011 07:57:43 PST
X-Mailer: YahooMailWebService/0.8.115.331698
References: <1324114617.33434.YahooMailNeo@web29801.mail.ird.yahoo.com>
Message-ID: <1324137463.91072.YahooMailNeo@web120903.mail.ne1.yahoo.com>
Date: Sat, 17 Dec 2011 07:57:43 -0800 (PST)
From: Shawn Ricardo <ricardoshawn74@yahoo.com>
Reply-To: Shawn Ricardo <ricardoshawn74@yahoo.com>
Subject: My safe arrival to China
To: xxxxxx
In-Reply-To: <1324114617.33434.YahooMailNeo@web29801.mail.ird.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="357496409-670708046-1324137463=:91072"
Content-Length: 6041
« Zuletzt geändert: 23. Februar 2012 um 09:52 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20631
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #21 - 08. Januar 2012 um 20:55
 
 
Wieder über einen Proxy verschleiert.

Code
Alles auswählen
IP Address 	74.115.0.2
Host 	74-115-0-2.anchorfree.com
Location 	A1 A1, Anonymous Proxy
City 	-, - -
Organization 	AFNCA
ISP 	AnchorFree
AS Number 	AS18779 EGIHosting 

  
Zum Seitenanfang
 
IP gespeichert
 
reigen
Ex-Mitglied


Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #22 - 08. Januar 2012 um 21:14
 
Eine weitere Mail aus "China".....

My love. How are you? I have been calling you my love and you do not pick my calls or reply my messages. what is wrong my love? I need to talk to you my love.

Spoiler:
From Shawn Ricardo Sun Dec 18 12:46:10 2011
X-Apparently-To: xxxxxvia 87.248.117.171; Sun, 18 Dec 2011 12:46:11 +0000
Return-Path: <ricardoshawn74@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
bmcgeW91IG15IGxvdmUgYW5kIHlvdSBkbyBub3QgcGljayBteSBjYWxscyBv
ciByZXBseSBteSBtZXNzYWdlcy4gd2hhdCBpcyB3cm9uZyBteSBsb3ZlPyBJ
IG5lZWQgdG8gdGFsayB0byB5b3UgbXkgbG92ZS4KICAgICAgIEZyb206IEJl
YXRlIFNjaG1pZHQgPHNjaG1pZHRiZWF0ZTE3QHlhaG9vLmRlPgogVG86ICJy
aWNhcmRvc2hhd243NEB5YWhvby5jb20iIDxyaWNhcmRvc2hhd243NEB5YWhv
by5jb20BMAEBAQE-
X-YMailISG: VzwzDHYWLDuPpmYc9KVDfpkg_KDtkF6ay_AwZWxCrhrXm2C0
i.lxNTgw4KjUT7AaXH9WRkTrmhwUXwfcPsnwZMfT8iwKGAJiuH_2muuSz1uW
v3je5o42qHXpZv36r2AUU.JAJVOk9D7lHBhMfoW6QUs64Sgpg4HTnyGcUKIF
KP._c3apmkUbqhn5PMzJjKhwrjxRNI1r2.aTywby7yV72spmaPE_PapbIXi6
WVyEsVVZT9.y8Xv.Is6g2rkcnt0D2.JVdy.f7gV49sVUiLlNA8UGgCH2fJdC
B9fJsD9zYSsDlvZBJcg.fNvF5mlpljZZIElMBGpoCB9OelxxSMo0Uf7Unf0B
sYU6eLq6qEgQDpatoWAeZqVbU1lOuh8CUgiM2EzdUfSD72Z1sIE_hIx8Itoa
zxaBdEFfJNpd3vFlh8LK6Lqr3nr_Q6bvD3wfVwllEGtW11UNdtGCkuOwGAX3
X4rsVr0z12aj7t33bsM.irq8d2FJnY.5m_c8mdOw1ZcSTrlq1sq81x4QsyT5
_KxN8HXDebJoGKbJSKrwMzuvSjqwawK6239wX6Lko5DPL8V1AQubOE5QT1_M
1V0FyO7oy0fqifH5esglbMpwaQQWR1rOm81unyKS1Xh2ZDbeCPMFsAEZVSze
QiozxJIW7xnOwNp9RThRkCJ1KaCGXG7L5Uvjtl90Vop18O7IILCAGDDQvuoT
mKzmrjlmuxTSz7TEaZe.0h8lVMh3Em30Ub9qVfXCqmiNbdEtvBfafqy1chjZ
FHjXvbDKvYc0Oy2LdnQ2dP0u55qnnuD1rT2v7cL_OIh1J_16Wr.D7mAi5fl3
KQCdCNCuUbmusr.rK62EZ.b7HFntH_lvd_Tl2Nv0xuDCD9ZW7jFjhRK.sGXV
3ZYkN.4kfs9GsuaJFI.qbVRjOJZPmXF2IVRivfBAPZ.63Nhs2j0j2KaoDKsS
0aJWSvcvoKTIYoj6Cgo8qyfVfVaGzt625IzLdRuLCKmwzkfRyXzQNev0jkre
NNR.f7HrOgDSpU32J8MO.N2_JNne_gp0lY_iqvk6OU304MAvqiLO.rE3t3rx
oMoMQF6out.QflUX8WC3ozVLGnuxCfclPPxHX6svDeieF2L9CXTuMo2wEyNu
ZaJLOV5VKnQEK1UCU3q3yk28YodiAQkNA0HgdPtM.iTaKIZtcqBP2EX95BLO
d8uzIKh6Quj1.r.YlLNenFOz
X-Originating-IP: [98.138.90.67]
Authentication-Results: mta1047.mail.ukl.yahoo.com  from=yahoo.com; domainkeys=pass (ok);  from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1  (HELO nm4.bullet.mail.ne1.yahoo.com) (98.138.90.67)
  by mta1047.mail.ukl.yahoo.com with SMTP; Sun, 18 Dec 2011 12:46:11 +0000
Received: from [98.138.90.54] by nm4.bullet.mail.ne1.yahoo.com with NNFMP; 18 Dec 2011 12:46:10 -0000
Received: from [98.138.89.199] by tm7.bullet.mail.ne1.yahoo.com with NNFMP; 18 Dec 2011 12:46:10 -0000
Received: from [127.0.0.1] by omp1057.mail.ne1.yahoo.com with NNFMP; 18 Dec 2011 12:46:10 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 549024.87355.bm@omp1057.mail.ne1.yahoo.com
Received: (qmail 58449 invoked by uid 60001); 18 Dec 2011 12:46:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1324212370; bh=3khiQ+KaczyFM9BHWjb/pYZ4QR3HX8oRIEVzpVpT9aI=; :To:Cc:In-Reply-To:MIME-Version:Content-Type; bAeQHFTZJvlow=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  :To:Cc:In-Reply-To:MIME-Version:Content-Type;
  H5kimvUS2ToQU=;
X-YMail-OSG: INNArDcVM1nN07.cxTrLWq2M0G6JLw5_9mAczxIaRPa_BAJ
B6rbTYKmhyjjGigIlfW14vL2Omn8Q6pFcSQ9tY1fZ0.CTme4XVSbfI00b2oJ
7.RN_cBSfTy8thr_UIb8CVR.DilZpyqFrSlf18Ha_5A..la5Alhv8JfJxJOO
Xe9K1dSpzJCCbsOb46amr8T2XwONGDD0tmHpArXo3gXq07XXldC12Tz5ZtrE
KBJ_m8jqPCCcO_.DZyuhTwQzX9Jjhk0xoLLxbYjlRXecQja3rJZRsrGyAO5u
6genZp7o4R0P2_BS_tcg4W7uwLTaMsREqu_vRg52tTsfytgjnZIcjz4hssDE
7eWQ3CDBuhfBlsGZ5QIKGVlZ0rFmomwVzqQ36sO3xc2xycqEwu7jBKxfJPex
pue1F2P1j0pbEZRtSJJWLsPRLNBLUoGSQHO8LsH7dhkHh9A2j_sMeX.Hbc7E
4hZIg526teYvCb8xwno8w_ccBjYId3Q_J38aD4fwNfs7eRm0VN28-
Received: from [209.73.132.214] by web120906.mail.ne1.yahoo.com via HTTP; Sun, 18 Dec 2011 04:46:10 PST
X-Mailer: YahooMailWebService/0.8.115.331698
References: <1324114617.33434.YahooMailNeo@web29801.mail.ird.yahoo.com>
Message-ID: <1324212370.58049.YahooMailNeo@web120906.mail.ne1.yahoo.com>
Date: Sun, 18 Dec 2011 04:46:10 -0800 (PST)
From: Shawn Ricardo <ricardoshawn74@yahoo.com>
Reply-To: Shawn Ricardo <ricardoshawn74@yahoo.com>
Subject: Re: My Dear
To: xxxxx>
Cc: xxxxxxx>
In-Reply-To: <1324114617.33434.YahooMailNeo@web29801.mail.ird.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1260837014-43481520-1324212370=:58049"
Content-Length: 2905


« Zuletzt geändert: 08. Januar 2012 um 21:30 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20631
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #23 - 08. Januar 2012 um 21:27
 
Zitat:
Eine weitere Mail aus "China".....


Leider auch nicht aus China.
Die Mail wird wieder verschleiert über die USA.

Code
Alles auswählen
IP Address 	209.73.132.214
Host 	209.73.132.214
Location 	US US, United States
City 	San Jose, CA 95113
Organization 	Shantou
ISP 	EGIHosting
AS Number 	AS26642 AnchorFree Inc. 



EGIHosting ist ein reiner Webhoster und bietet zudem kein Internet an.
« Zuletzt geändert: 11. Januar 2012 um 07:56 von »  
Zum Seitenanfang
 
IP gespeichert
 
reigen
Ex-Mitglied


Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #24 - 09. Januar 2012 um 17:50
 
Es ist erstaunlich, wie er die vorgefundene Situation in "China" Laut lachend plausibel macht.

Good morning my love how was your night my love? I know it is morning there in berlin. It is past 3pm here in china. I just saw your email my love. I did not come with no camera to china as I came to work here and even if there is a camera there is no place to scan it and save it to send to you as I hardly know my way around and here is a very remote area and do not want to go missing as I also hardly know anyone here. I love you so much my love. I can not stand this. It is just too hard to be away from you. I am usually okay, but at times like this (especially this day) it just becomes too much to bear. I can not stop thinking of you.

I just have to tell you to share with you that sacred part of my inner, secret life, the thoughts I think that everyone has but does not always say. I know that sometimes pride gets in the way of expressing emotions. I believe that is the cause of my reticence in telling you how I feel sometimes, that and the fact that passion in an extreme state can be scary, you almost just want to shut it away for fear that it will eventually destroy you. I think of my feelings, my love for you not with craving or with hope or even desire, but just with a kind of wonder that such things could be. You have opened my eyes to how love should feel. I can promise you this, I will never again settle for less. You are all I desire in this life.

But, at this time in both of our lives, we are surrounded by possibilities of choice, open doors and wide horizons, which I know, may come between us. But I also know and hope that they could eventually bring us together, with both of us being better people for the time we spent apart. And so for now I function between maybe and maybe not. It's a strange mixture of love and sex and sorrow and hope and longing and faith. And even though you are far away, you're all that I can see, I carry you with me through all my days and I miss you more than I can say. Also, remember this - I love you no less than if you were right here now.

You're always lighting up my heart with the things you do and say. I feel so happy having you in my life. You're my baby, and will forever be my baby. You will always be the love of my life, and please never give up, always have faith in us and together we will gain the greatest gift of all, the gift of hope and love we righteously deserve.

I know I have a tendency to be impetuous at times - thus the reason for this mail. I think I will send it now, before I consider what you might think of it. I love you and am waiting for the day when I can feel your arms around me.

Yours forever,

Spoiler:
From Shawn Ricardo Tue Dec 20 07:22:54 2011
X-Apparently-To: xxxxxvia 87.248.117.115; Tue, 20 Dec 2011 07:22:56 +0000
Return-Path: <ricardoshawn74@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
IG15IGxvdmU_IEkga25vdyBpdCBpcyBtb3JuaW5nIHRoZXJlIGluIGJlcmxp
bi4gSXQgaXMgcGFzdCAzcG0gaGVyZSBpbiBjaGluYS4gSSBqdXN0IHNhdyB5
b3VyIGVtYWlsIG15IGxvdmUuIEkgZGlkIG5vdCBjb21lIHdpdGggbm8gY2Ft
ZXJhIHRvIGNoaW5hIGFzIEkgY2FtZSB0byB3b3JrIGhlcmUgYW5kIGV2ZW4g
aWYgdGhlcmUgaXMgYSBjYW1lcmEgdGhlcmUgaXMgbm8gcGxhY2UBMAEBAQE-
X-YMailISG: b8mQEAsWLDuijCXwk.L5YEPF2E60nVzEo6kO4wgesN6UKTzA
QvrMOJH9jQY.gD6K9CAMaL0YL1uMm8xvzUvR5cLh13_DtoloyMy2eLmNOfOj
S8iBfwo2Pi1oZaYaSTEpenbQ1MyJSyFg_iZk2aw1JpMn7t8ThNyHjSTSAfnl
xFTtCUQrSIDQsxX4rjdR1tVRsmbjsLpzFSoEBDM6dT.sUVFeQ0bPC0y3V6Va
jv7ar9AcTYwJ80QiW17BMrukYhd2DuH0kKlYmQBJvUMTtBTHR_193C3XXYLa
NC94oSJi8vMFoIFHpZ3peMVh5ALN23tb5_OLEyn_D5e5PmpIBK20SPrpuMxN
Zr1gl00fVOdcTURanCcgW0CWAURXFL8E11psZKFTMFlHKHIhC72d1djUwYyh
fZMROkSQFXRoZiM6wBs_qvTjV3.V1r0RkqubpGwkI_rnY4ijGInCXwkvPLeS
VdQrsX1FoJnODAJju3aru0HFVtSjdOS9QrEjz9A8bog0UlL_tMn_xMU2fafj
yg6YEV8U9cXQ9CE6IQ4Id.d5it2nps6GNCpTNC2ZdSgbDlVzvwTrP4DeNH_v
HwaRFW_ZM6_efMhyopwJ4NzuXZVqpe01NwLYpVx3wL8aC77Zixesyzh2FSm_
XrFeNo7w0QJdKlrWmqK2q4PZfIk2aC3Dmf6T4.S0A7X66EU2.XJpYxjbn5U7
TW2F88vN5p2qGhWo3VB4u.RPHXyTyzC1NrNhgB03hkRryuGDw7V64vXGhhhZ
bIftn_OItYgRpWW19XGppdmoWcn4.RpS_9U5YMp0wWjGTafpAUUllIsZjbrb
RhGdCkUW3dP_o9Ae_oMoYGArK1.l_VhVNRPyB6X5mq6TrJDQZouIo0intEOu
evmzeTFc9iHu3c4YJzAdg_Yl72ca9tmVAU6hBffzN0Elo9v5lLI0sao6QUPs
AEwPh7how.h_C6JkFq2pzzlrpmXfBhFaN7i7Q6cmZSZDO07cJ1e2GlApjNiB
95ClSKD6G3pUDpXbY67uCx2C53QC7_yeaQCIxVNgdYDiC9tOc2PaXzDFpakA
PHuGmFutAi71U7yvXQiZwtvAllNzLwO.ivHCzMHiUJoOpOr3WuEN0EGnmqMH
NYQbR3w8kIz8tAnfdsoJF.alARRHRlZKkr2gwK3fMDjY0Ro3nQEI
X-Originating-IP: [98.138.91.166]
Authentication-Results: mta1053.mail.ukl.yahoo.com  from=yahoo.com; domainkeys=pass (ok);  from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1  (HELO nm6-vm4.bullet.mail.ne1.yahoo.com) (98.138.91.166)
  by mta1053.mail.ukl.yahoo.com with SMTP; Tue, 20 Dec 2011 07:22:56 +0000
Received: from [98.138.90.54] by nm6.bullet.mail.ne1.yahoo.com with NNFMP; 20 Dec 2011 07:22:55 -0000
Received: from [98.138.87.8] by tm7.bullet.mail.ne1.yahoo.com with NNFMP; 20 Dec 2011 07:22:55 -0000
Received: from [127.0.0.1] by omp1008.mail.ne1.yahoo.com with NNFMP; 20 Dec 2011 07:22:55 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 65401.69608.bm@omp1008.mail.ne1.yahoo.com
Received: (qmail 81653 invoked by uid 60001); 20 Dec 2011 07:22:55 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1324365774; bh=no8nh/onBf/eexnkWjlpIISgkLvh+wu7n7GBegK5WrQ=; 
:To:Cc:In-Reply-To:MIME-Version:Content-Type; 

gxliXSuerCRpg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  
:To:Cc:In-Reply-To:MIME-Version:Content-Type;
  

oQ9JKZq0i5ZZI=;
X-YMail-OSG: dlZ4cNAVM1msBIbPMDHBpd85KW5R5B6PKaaLFgJ24bSWk.4
tnrNaRjETcBmDsQ6.BB7eIz44RFqbvTZqW8Ufjor7h9wy3ulYkvJ0juDoHME
iFp.kX.aa9beg9VAB8nSZvZXdsFJNFu8EZ5mhKDpNBnut7yxoq4FolrlBFfY
XH0BnoPgeSjpAks0gXJ0fDKxDq1cDtRBmaADMaxLrYpbwOq7C1fMIRCQPS6T
dpTUFt3MtBnvauP64Qxx.7QB_fuxqgdEq5AVEPbuBzkkNED.UFEdNVbk8BdQ
zLAPuRx557C6vWZ2Htoe2zgllFPrSVF63wNlYM_PYoJhG52RQlP.3mW30Wj.
tlcPcs7FwUwHJyWfCUdtkTiQW2dcYWBOYEDpUJmDYYAA9mCmwXDlzpfg._jw
4VvpcXavJZuV_uSWvuMPkjGSIazEaaMGL1BIsSg1VoPxQqDzb9OkJpu701T6
A0XLlsTbXWpkKQIhaM4BHEOEZyXrRkQGY3b_YyyzzOQowua5q
Received: from [41.220.69.71] by web120903.mail.ne1.yahoo.com via HTTP; Mon, 19 Dec 2011 23:22:54 PST
X-Mailer: YahooMailWebService/0.8.115.331698
References: <1324329192.33707.YahooMailNeo@web29801.mail.ird.yahoo.com>
Message-ID: <1324365774.51075.YahooMailNeo@web120903.mail.ne1.yahoo.com>
Date: Mon, 19 Dec 2011 23:22:54 -0800 (PST)
From: Shawn Ricardo <ricardoshawn74@yahoo.com>
Reply-To: Shawn Ricardo <ricardoshawn74@yahoo.com>
Subject: Re:
To: xxxxxx>
Cc: xxxxxxx>
In-Reply-To: <1324329192.33707.YahooMailNeo@web29801.mail.ird.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="357496409-45970445-1324365774=:51075"
Content-Length: 7585
« Zuletzt geändert: 11. Januar 2012 um 07:58 von »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65904
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #25 - 09. Januar 2012 um 18:01
 
Mail über Nigeria

Code
Alles auswählen
IP:	41.220.69.71
Decimal:	702301511
Hostname:	41.220.69.71.vgccl.net
ISP:	MTN Nigeria
Organization:	MTN Nigeria
Services:	Suspected network sharing device
Type:
Assignment:	Static IP
Country:	Nigeria
State/Region:	Oyo
City:	Ibadan
Latitude:	7.3878
Longitude:	3.8964 



Zitat:
from [41.220.69.71] by web120903.mail.ne1.yahoo.com via HTTP; Mon, 19 Dec 2011 23:22:54 PST
X-Mailer: YahooMailWebService/0.8.115.331698
Date: Mon, 19 Dec 2011 23:22:54 -0800 (PST)
From: Shawn Ricardo <ricardoshawn74@yahoo.com>
  
Zum Seitenanfang
 
IP gespeichert
 
reigen
Ex-Mitglied


Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #26 - 10. Januar 2012 um 23:39
 
Hallo,
möchte Euch noch kurz den Höhepunkt zur Novelle aus "China" mitteilen:
Wir chatteten und nach dem üblichen "How are you? ", kam dann seine Antwort " Not so good".
Nach meinem "What's the matter?"kam er dann raus mit der Sprache. Es hätte viel Stress in China,
er erhielt keine Verbindung zu seiner Onlinebank, er hätte noch Rechnungen zu zahlen und ob er mir denn vertrauen könne.
Ich meinte, er könne mit seiner Creditkarte überall auf der Welt bezahlen. 
Er antwortete mir, diese funktioniere hier natürlich auch nicht und ein Konto in China würde 2700 Pfund kosten.
Einzige Möglichkeit, ein Geldtransfer von seiner Bank auf meine und dann zu seiner Bank.
Er würde 78000 Pfund ca. 92000 Euro transferieren wollen und dann würde einem Treffen nichts mehr im Wege stehen.
Ich fragte noch, wo soll denn das Geld von meiner Bank aus hingelangen?
Das erledigt dann sein Bankmanager und ich erhalte alle Details, war die Antwort....
Das Fakeformular von der "Co-operativbank" habe ich euch schon gesandt.
Fakt ist, der Scammer versuchte meine Zweifel immer wieder zu zerstreuen, wie z.B."let my Bankmanager his work
does,you receive a protocoll, it's no risk for you." Ich bekäme Unkosten zurück. 
Auch mit psychologischen Mitteln, wie "wir sprechen morgen weiter" und er könne sonst nicht kommen, 
versuchte er mich zu überzeugen.
Aber es gab nur ein NO,NO,NO als Antwort Dank eurer Beiträge. 
Das wäre im Wesentlichen alles.

Er war übrigens auch über diese Email-Adresse zu erreichen:

shawnriccky@hotmail.cu.uk






« Zuletzt geändert: 11. Januar 2012 um 08:08 von »  
Zum Seitenanfang
 
IP gespeichert
 
reigen
Ex-Mitglied


Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #27 - 11. Januar 2012 um 22:19
 


I will want you to add me on messenger so that we can chat. my emails are 

ricardoshawn74@yahoo.com
shawnriccky@hotmail.co.uk

Spoiler:
Return-Path: <ricardoshawn74@yahoo.com>
Received: from mailin00.aul.t-online.de (mailin00.aul.t-online.de [172.20.26.42])
      by mhead606 (Cyrus v2.3.15-fun-3.2.12.0-1) with LMTPA;
      Sun, 13 Nov 2011 11:47:09 +0100
X-Sieve: CMU Sieve 2.3
Received: from nm15-vm3.bullet.mail.ne1.yahoo.com ([98.138.91.145]) by mailin00.aul.t-online.de
     with smtp id 1RPXaT-103HGK0; Sun, 13 Nov 2011 11:46:57 +0100
Received: from [98.138.90.51] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 13 Nov 2011 10:46:56 -0000
Received: from [98.138.89.232] by tm4.bullet.mail.ne1.yahoo.com with NNFMP; 13 Nov 2011 10:46:56 -0000
Received: from [127.0.0.1] by omp1047.mail.ne1.yahoo.com with NNFMP; 13 Nov 2011 10:46:56 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 759155.76617.bm@omp1047.mail.ne1.yahoo.com
Received: (qmail 55624 invoked by uid 60001); 13 Nov 2011 10:46:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1321181216; bh=YX4BRCtGjMZxkOjvvXYEUODr0RdhOIZ/Ya7m+G0yXE4=; :To:Cc:In-Reply-To:MIME-Version:Content-Type; sfPmli9CYsQxQ=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  :To:Cc:In-Reply-To:MIME-Version:Content-Type;
  3QuOvP/9SbKW0=;
X-YMail-OSG: g5GKTrAVM1nMW0VLTTgLfKKEleuQdjKs7.hTzI.8eifsT2X
Zr5V_lsAou6o46_VRvBgtxCGF_hHBfBpeG6RIr27w7BtZYjVN2NS4.B4QSzM
GXuK4GN5rdS29nanE7.woHYsuLrtTDs3wRBunbmhQqdwMljalDRsmjUGBfza
h.AjxGjew64f3tbu20G_fvIe7e6BdATqsUSDpQugZTMnYpFp1rJ_CowyzUAp
szUD2aj.LVPJpPdtSp4XAZ4w6ycvRkn1UQcNjdFrAWW1V4pdWp85z6YQ3dMl
WuiSibG96eqQVuIlpRQKasz9qF_MZtUtTkI5SKNIA.Rn8daNuJDfMCMl6Hfe
_uHcI91XM6fC.GOpTf48sssbxrGFhtVEOx0jFhyeNnpt.x8L9QgGXz30UILR
DewwiWpwkm73V
Received: from [41.206.12.20] by web120905.mail.ne1.yahoo.com via HTTP; Sun, 13 Nov 2011 02:46:56 PST
X-Mailer: YahooMailWebService/0.8.115.325013
References: <1ROkUj-0DdZOC0@fwd08.aul.t-online.de> <1321084185.33223.YahooMailNeo@web120916.mail.ne1.yahoo.com>
Message-ID: <1321181216.55225.YahooMailNeo@web120905.mail.ne1.yahoo.com>
Date: Sun, 13 Nov 2011 02:46:56 -0800 (PST)
From: Shawn Ricardo <ricardoshawn74@yahoo.com>
Reply-To: Shawn Ricardo <ricardoshawn74@yahoo.com>
Subject: waiting
To: "xxxxxx <xxxxxxxx>
In-Reply-To: <1321084185.33223.YahooMailNeo@web120916.mail.ne1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1517483800-2077134951-1321181216=:55225"
X-TOI-SPAM: u;0;2011-11-13T10:47:09Z
X-TOI-VIRUSSCAN: clean
X-TOI-EXPURGATEID: 149288::1321181218-00002401-ABD2C035/0-0/0-0
X-TOI-MSGID: 18a0be13-b23b-4216-82bb-e310150c7b5c
X-Seen: false
X-ENVELOPE-TO: <xxxxxxxx>

--1517483800-2077134951-1321181216=:55225
Content-Type: text/plain; charset=us-ascii


« Zuletzt geändert: 17. Januar 2012 um 00:09 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65904
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #28 - 11. Januar 2012 um 22:38
 
Mail über Nigeria

Code
Alles auswählen
IP:	41.206.12.20
Decimal:	701369364
Hostname:	41.206.12.20.vgccl.net
ISP:	MTN Nigeria
Organization:	MTN Nigeria
Services:	None detected
Type:
Assignment:	Static IP
Country:	Nigeria
State/Region:	Oyo
City:	Ibadan
Latitude:	7.3878
Longitude:	3.8964 



Zitat:
from [41.206.12.20] by web120905.mail.ne1.yahoo.com via HTTP; Sun, 13 Nov 2011 02:46:56 PST
X-Mailer: YahooMailWebService/0.8.115.325013
Date: Sun, 13 Nov 2011 02:46:56 -0800 (PST)
From: Shawn Ricardo <ricardoshawn74@yahoo.com>
  
Zum Seitenanfang
 
IP gespeichert
 
reigen
Ex-Mitglied


Re: Shawn <ricardoshawn74@yahoo.com> <imz.atcha@co-ooperativeservice.com> <infodept@co-ooperativeservice.com>
Antwort #29 - 11. Januar 2012 um 23:32
 
Hallo,
mir stellt sich folgende Frage: Der Scammer gibt eine Follow-me Tel.-Nr. an, also man wird weitergeleitet nach Nigeria 
und telefoniert z.B zu Jemandem in einem Internetcafe. Er hat aber auch eine Email-Adresse in UK. 
Wer beantwortet dann die Mails? Ein anderer Scammer ?
« Zuletzt geändert: 13. Januar 2012 um 08:56 von »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1 [2] 3 
Thema versenden
Link zu diesem Thema