Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Olga <liseno4ek@yahoo.com> <wbo@nctta.org> (Gelesen: 1365 mal)
 
lemansue
Themenstarter Themenstarter
General Counsel
***
Offline


trust no cheater

Beiträge: 32986
Mitglied seit: 12. November 2010
Geschlecht: männlich
Olga <liseno4ek@yahoo.com> <wbo@nctta.org>
10. April 2012 um 12:49
 
found in my spambox

Hello
my name is Olga Smiley to me 35 years
I know you're thinking who am I?)) and from where I take your e-mail?
Now I explain how I got in contacted with you!
I used a services of dating agency.
I came to office agency in my city and said that I wanted to find a man abroad for a serious relationship.
They asked me what kind of men i like, they showed me a lot of profiles of single men, and of all the men I have chosen you. you really liked me.
To me give your e-mail and said that I tried to write to you, which I did now)))
This agency said me that your email address they found at dating site.
I will send you my photo if I like you I'll wait for a letter from you as soon as possible!
Take Care!!
Olga

Spoiler:
Delivered-To: xxxxx@gmail.com
Received: by 10.231.197.150 with SMTP id ek22csp97090ibb;
        Tue, 10 Apr 2012 03:31:19 -0700 (PDT)
Received: by 10.180.24.66 with SMTP id s2mr5753185wif.7.1334053878548;
        Tue, 10 Apr 2012 03:31:18 -0700 (PDT)
Return-Path: <wbo@nctta.org>
Received: from h14.prohosting.com.ua (h14.prohosting.com.ua. [91.207.44.25])
        by mx.google.com with ESMTPS id o60si17681076weq.139.2012.04.10.03.31.17
        (version=TLSv1/SSLv3 cipher=OTHER);
        Tue, 10 Apr 2012 03:31:18 -0700 (PDT)
Received-SPF: neutral (google.com: 91.207.44.25 is neither permitted nor denied by best guess record for domain of wbo@nctta.org) client-ip=91.207.44.25;
Authentication-Results: mx.google.com; spf=neutral (google.com: 91.207.44.25 is neither permitted nor denied by best guess record for domain of wbo@nctta.org) smtp.mail=wbo@nctta.org
Received: from [87.6.151.104] (helo=Unknown)
     by h14.prohosting.com.ua with esmtpa (Exim 4.68 (FreeBSD))
     (envelope-from <wbo@nctta.org>)
     id 1SHYLy-000JNH-Aq
     for xxxxx@gmail.com; Tue, 10 Apr 2012 13:31:17 +0300
Message-ID: <C12694F516694F4ABA67D55E5186E0C7@gzdrj>
Reply-To: "Olga" <liseno4ek@yahoo.com>
From: "Olga" <wbo@nctta.org>
To: <xxxxxx@gmail.com>
Subject: Just one question and say hello to you!
Date: Tue, 10 Apr 2012 13:31:06 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
     boundary="----=_NextPart_000_1648_01CD171E.2ECCE4D0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6001.18416
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18645
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - h14.prohosting.com.ua
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [26 6] / [26 6]
X-AntiAbuse: Sender Address Domain - nctta.org

This is a multi-part message in MIME format.

------=_NextPart_000_1648_01CD171E.2ECCE4D0
Content-Type: multipart/alternative;
     boundary="----=_NextPart_001_1649_01CD171E.2ECCE4D0"


------=_NextPart_001_1649_01CD171E.2ECCE4D0
Content-Type: text/plain;
     charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
  

IMG9123444.jpg ( 42 KB | Downloads )
IMG9123444.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
lemansue
Themenstarter Themenstarter
General Counsel
***
Offline


trust no cheater

Beiträge: 32986
Mitglied seit: 12. November 2010
Geschlecht: männlich
Re: Olga <liseno4ek@yahoo.com> <wbo@nctta.org>
Antwort #1 - 10. April 2012 um 12:50
 
email over Italy

Code
Alles auswählen
IP:	87.6.151.104
Decimal:	1460049768
Hostname:	host104-151-dynamic.6-87-r.retail.telecomitalia.it
ISP:	Telecom Italia
Organization:	Telecom Italia
Services:	None detected
Type:	Broadband
Assignment:	Dynamic IP
Blacklist:
Geolocation Information
Country:	Italy it flag
State/Region:	Campania
City:	Naples 



Zitat:
Date: Tue, 10 Apr 2012 13:31:06 +0300
  
Zum Seitenanfang
 
IP gespeichert
 
Webmaster
Forum Administrator
*****
Offline


Abgeschlafft und ausgepufft!!

Beiträge: 24024
Standort: Йошкар-Ола
Mitglied seit: 06. Januar 2008
Geschlecht: männlich
Re: Olga <liseno4ek@yahoo.com> <wbo@nctta.org>
Antwort #2 - 10. April 2012 um 13:52
 
... und wenn man jetzt die Received-Zeile um eine Zeile nach oben rutscht, dann sieht man den permitted-Sender.


Code
Alles auswählen
IP:	91.207.44.25
Decimal:	1540303897
Hostname:	h14.prohosting.com.ua
ISP:	First Ukrainian Internet Registrar LLC
Organization:	First Ukrainian Internet Registrar LLC
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Country:	Ukraine
Latitude:	49
Longitude:	32 



.. und das ist ein Webhoster, der keinen Internetzugang anbietet.
  
Zum Seitenanfang
IP gespeichert
 
Wesermann
Forum Administrator
*****
Offline


I love Anti-Scam

Beiträge: 34964
Standort: Russia
Mitglied seit: 08. Oktober 2008
Geschlecht: männlich
Re: Olga <liseno4ek@yahoo.com> <wbo@nctta.org>
Antwort #3 - 10. April 2012 um 19:05
 
Zitat:
Date: Tue, 10 Apr 2012 13:31:06 +0300


und wenn man sich dann noch die Datezeile anschaut, kann man problemlos sehen, dass die Herkunft verschleiert ist. Somit kann die Kleine umziehen.
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema