Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Katya <kattiekitty89@ukr.net> (Gelesen: 1666 mal)
 
reismountain
Ex-Mitglied


Katya <kattiekitty89@ukr.net>
04. März 2013 um 10:47
 
Ist ohne Bezug am Freitag bei mir abgekommen. Den Text habe ich im wesentlichen bei 

Lina <linochka100nivi@ukr.net> 

gefunden, die Bilder sehen jedoch etwas anders aus.
Den Quelltext kann ich erst später liefern, ich muss mir noch was einfallen lassen, wie ich die Proxies umgehen kann, so dass ich in Citrix wieder reinkomme.


Dear,

My name is Katya.I am from Ukraine. I am a pretty, fun-loving, educated, kind, tolerant and loyal lady.I am a student, I finish university. My speciality is art.  I like to spend my free time with my friends or with my family . My friends say that I have a good taste in music.I know English, I write you myself, without the help of an interpreter!so if that is not so in my letter, I beg your pardon
I am interested to know you, how you live? your favorite activities?
I enjoy cooking, I enjoy cooking new dishes. I read a lot of books on traditional dishes from different countries.I have a healthy life. I  eat right. I think it is important in our life

in my education family comes first, to appreciate family values ??and respect for tradition!
I always go through life with a smile, the man who will be with me always be happy! 
on this site I would like to find my true love, the person with whom I connect my destiny! a man with whom I would be in one piece! I very much hope that it will be you!
looking forward to your letter!
Katya

Spoiler:
Microsoft Mail Internet Headers Version 2.0
Received: from b.mx.xxxxxxxxxxxxxxxxx with Microsoft SMTPSVC(6.0.3790.4675);
      Fri, 1 Mar 2013 13:21:04 +0100
Received: from localhost (localhost [127.0.0.1])
     by b.mxxxxxxxxxxxxxxxxxxxxx (Postfix) with ESMTP id C19A324231
     for <xxxxxxxxxxxxxxxx>; Fri,  1 Mar 2013 13:19:53 +0100 (CET)
X-Virus-Scanned: amavisd-new at xxxxxxxxxxxxx
X-Spam-Flag: NO
X-Spam-Score: 0.993
X-Spam-Level: 
X-Spam-Status: No, score=0.993 tagged_above=-999 required=6.31
     tests=[BAYES_50=0.001, DATE_IN_PAST_12_24=0.992, HTML_MESSAGE=0.001,
     SPF_PASS=-0.001]
Received: from fsm2.ukr.net (fsm2.ukr.net [195.214.192.121])
     (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits))
     (No client certificate requested)
     by b.mx.xxxxxxxxxxxxxxxx (Postfix) with ESMTPS id 4672424225
     for <xxxxxxxxxxxxxxxxxxxx>; Fri,  1 Mar 2013 13:19:47 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=fsm;
     h=Content-Type:MIME-Version:Subject:To:Message-ID:From:Date; bh=O+9gbWnuwZFtGGTdFHSo6FxXMA0Jgh2xDd1JpGxIkAs=;
     2TV/IlwAySN28=;
Received: from [195.16.88.106] (helo=localhost)
     by fsm2.ukr.net with esmtpsa ID 1UBOSZ-0004cJ-Pb
     for xxxxxxxxxxxxxxxxxxxxxx; Fri, 01 Mar 2013 13:49:09 +0200
Date: Thu, 28 Feb 2013 19:59:03 +0300
From: =?windows-1251?B?yuDy/w==?= <kattiekitty89@ukr.net>
X-Priority: 3 (Normal)
Message-ID: <136016092.20130228195903@ukr.net>
To: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Subject: nice to meet
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------14D0EB25954431"
Return-Path: kattiekitty89@ukr.net
X-OriginalArrivalTime: 01 Mar 2013 12:21:04.0813 (UTC) FILETIME=[3EA345D0:01CE1677]

------------14D0EB25954431
Content-Type: multipart/alternative;
boundary="----------6BE9FD24111D39"

------------6BE9FD24111D39
Content-Type: text/plain; charset=windows-1251
Content-Transfer-Encoding: quoted-printable

------------6BE9FD24111D39
Content-Type: text/html; charset=windows-1251
Content-Transfer-Encoding: quoted-printable


------------6BE9FD24111D39--
------------14D0EB25954431
Content-Type: image/jpeg;
name="ja.jpg"
Content-transfer-encoding: base64
Content-Disposition: attachment;
filename="ja.jpg"

------------14D0EB25954431
Content-Type: image/jpeg;
name="stoju.jpg"
Content-transfer-encoding: base64
Content-Disposition: attachment;
filename="stoju.jpg"


------------14D0EB25954431--



Änderung:
nachgereichter Quelltext eingefügt     Vierauge
« Zuletzt geändert: 11. April 2013 um 11:29 von Wesermann »  

ja_001.jpg ( 58 KB | Downloads )
ja_001.jpg
stoju.jpg ( 54 KB | Downloads )
stoju.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
reismountain
Ex-Mitglied


Re: Katya <kattiekitty89@ukr.net>
Antwort #1 - 06. März 2013 um 04:40
 
Und nun Email 2. Ich habe die Dame gefragt, wo sie denn meine Emailadresse her hat. So ganz genau weiss sie das wohl nicht oder will es mir nicht sagen  Ärgerlich Griesgrämig Schockiert/Erstaunt

Email 2

Hello xxxxxx


Thanks for your short letter. You leave me your email adress on dating sate.
I hope to learn more about you, write me about yourself! I fall to get a letter from you!

we are adults, I do not want to play in a sense, I want to build a serious relationship!

Katya

Und der Quelltext dazu

Spoiler:
Microsoft Mail Internet Headers Version 2.0
Received: from b.mx.xxxxxxxxxxxxx with Microsoft SMTPSVC(6.0.3790.4675);
      Mon, 4 Mar 2013 19:34:14 +0100
Received: from localhost (localhost [127.0.0.1])
     by b.mx.xxxxxxxxxx (Postfix) with ESMTP id E238924206
     for <xxxxxxxxxxxxxxxxxx>; Mon,  4 Mar 2013 19:33:02 +0100 (CET)
X-Virus-Scanned: amavisd-new at xxxxxxxxxxx
X-Spam-Flag: NO
X-Spam-Score: -0.185
X-Spam-Level: 
X-Spam-Status: No, score=-0.185 tagged_above=-999 required=6.31
     tests=[BAYES_40=-0.185, HTML_MESSAGE=0.001, SPF_PASS=-0.001]
Received: from fsm1.ukr.net (fsm1.ukr.net [195.214.192.120])
     (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits))
     (No client certificate requested)
     by b.mx.xxxxxxxxxx (Postfix) with ESMTPS id 1A91424204
     for <xxxxxxxxxxxx>; Mon,  4 Mar 2013 19:33:00 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=fsm;
     te; bh=dp3dyae4phpi1ktpvwrtvmjX6YnWMFxtPQH4eTTCJVU=;
     QtUQeGN35RdmA=;
Received: from [91.207.8.42] (helo=localhost)
     by fsm1.ukr.net with esmtpsa ID 1UCaC3-0000h2-OA
     for xxxxxxxxxxxxxxxxxxx; Mon, 04 Mar 2013 20:32:59 +0200
Date: Mon, 4 Mar 2013 21:32:58 +0300
From: =?utf-8?B?0JrQsNGC0Y8=?= <kattiekitty89@ukr.net>
X-Priority: 3 (Normal)
Message-ID: <1596904305.20130304213258@ukr.net>
To: =?xxxxxxxxxxxxxxxx>
Subject: Re: AW: nice to meet
In-Reply-To: <612720238698BA48A2A25CA33FCA31A0054541F0@mridexchange2.ka.lan>
References: <136016092.20130228195903@ukr.net> <612720238698BA48A2A25CA33FCA31A0054541F0@mridexchange2.ka.lan>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------1041310D26213F90"
Return-Path: kattiekitty89@ukr.net
X-OriginalArrivalTime: 04 Mar 2013 18:34:14.0377 (UTC) FILETIME=[DF18DD90:01CE1906]

------------1041310D26213F90
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

------------1041310D26213F90
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable


------------1041310D26213F90--
  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65917
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Katya <kattiekitty89@ukr.net>
Antwort #2 - 06. März 2013 um 05:40
 
Mail über den Webhoster Wibo Project LLC verschleiert.

Code
Alles auswählen
IP:	195.16.88.106
Decimal:	3272628330
Hostname:	pdeliev.hostlife.net
ISP:	Wibo Project LLC
Organization:	Wibo Project LLC
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Country:	Ukraine  



Zitat:
from [195.16.88.106] (helo=localhost) by fsm2.ukr.net with esmtpsa; Fri, 01 Mar 2013 13:49:09 +0200
Date: Thu, 28 Feb 2013 19:59:03 +0300
From: <kattiekitty89@ukr.net>


Mail über den Webhoster PP Andrey Kiselev verschleiert.

Code
Alles auswählen
IP:	91.207.8.42
Decimal:	1540294698
Hostname:	42.8.207.91.unknown.steephost.net
ISP:	PP Andrey Kiselev
Organization:	PP Andrey Kiselev
Services:	None detected
Assignment:	Static IP
Country:	Ukraine
State/Region:	Chernivets'ka Oblast'
City:	Kiselëv 



Zitat:
from [91.207.8.42] (helo=localhost) by fsm1.ukr.net with esmtpsa; Mon, 04 Mar 2013 20:32:59 +0200
Date: Mon, 4 Mar 2013 21:32:58 +0300
From: <kattiekitty89@ukr.net>
« Zuletzt geändert: 06. März 2013 um 05:44 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Deltaromeo
Ex-Mitglied


Re: Katya <kattiekitty89@ukr.net>
Antwort #3 - 05. April 2013 um 16:23
 
Sie hatte einen Gold-Account auf russiancupid.com ohne Bild. Sie hat "Interesse" gezeigt und ich habe ihr gleich eine Nachricht mit meiner Mail-Adresse zukommen lassen und der Bitte nach einem Bild.
Account ist schon abgeschalten. Ich habe leider keinen Screenshot gemacht.
  weinend

Dear XXX,

My name is Katya.I am from Ukraine. I am a pretty, fun-loving, educated, kind, tolerant and loyal lady.I am a student, I finish university. My speciality is art.  I like to spend my free time with my friends or with my family . My friends say that I have a good taste in music.I know English, I write you myself, without the help of an interpreter!so if that is not so in my letter, I beg your pardon
I am interested to know you, how you live? your favorite activities?
I enjoy cooking, I enjoy cooking new dishes. I read a lot of books on traditional dishes from different countries.I have a healthy life. I  eat right. I think it is important in our life

in my education family comes first, to appreciate family values ??and respect for tradition!
I always go through life with a smile, the man who will be with me always be happy! 
on this site I would like to find my true love, the person with whom I connect my destiny! a man with whom I would be in one piece! I very much hope that it will be you!
looking forward to your letter!
Katya

Spoiler:
Delivered-To: XXX@gmail.com
Received: by 10.194.17.98 with SMTP id n2csp269142wjd;
        Fri, 5 Apr 2013 07:03:15 -0700 (PDT)
X-Received: by 10.14.173.67 with SMTP id u43mr20021276eel.22.1365170594997;
        Fri, 05 Apr 2013 07:03:14 -0700 (PDT)
Return-Path: <kattiekitty89@ukr.net>
Received: from fsm2.ukr.net (fsm2.ukr.net. [195.214.192.121])
        by mx.google.com with ESMTPS id h2si16582690eeg.13.2013.04.05.07.03.14
        (version=TLSv1.2 cipher=RC4-SHA bits=128/128);
        Fri, 05 Apr 2013 07:03:14 -0700 (PDT)
Received-SPF: pass (google.com: domain of kattiekitty89@ukr.net designates 195.214.192.121 as permitted sender) client-ip=195.214.192.121;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of kattiekitty89@ukr.net designates 195.214.192.121 as permitted sender) smtp.mail=kattiekitty89@ukr.net;
       dkim=pass Quelltext.i=@ukr.net
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=fsm;
     h=Content-Type:MIME-Version:Subject:To:Message-ID:From:Date; bh=wBVzTQ8EeF/f33eahyYMgcAq+hyoLZfs6tKuQLQ1fBw=;
     kJdTKznU80Tdk=;
Received: from [195.16.88.106] (helo=localhost)
     by fsm2.ukr.net with esmtpsa ID 1UO7EW-000EW0-FM
     for XXX@gmail.com; Fri, 05 Apr 2013 17:03:13 +0300
Date: Fri, 5 Apr 2013 18:03:09 +0400
From: =?windows-1251?B?yuDy/w==?= <kattiekitty89@ukr.net>
X-Priority: 3 (Normal)
Message-ID: <197401886.20130405180309@ukr.net>
To: XXX@gmail.com
Subject: nice to meet
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------43D17D15FE147"

------------43D17D15FE147
Content-Type: multipart/alternative;
boundary="----------8313A256F59A5EB"


------------8313A256F59A5EB
Content-Type: text/plain; charset=windows-1251
Content-Transfer-Encoding: quoted-printable


Zitat:
Received: from [195.16.88.106] (helo=localhost)
     by fsm2.ukr.net with esmtpsa ID 1UO7EW-000EW0-FM
     for XXX@gmail.com; Fri, 05 Apr 2013 17:03:13 +0300
Date: Fri, 5 Apr 2013 18:03:09 +0400
From: =?windows-1251?B?yuDy/w==?= <kattiekitty89@ukr.net>

Gleiche IP wie in #1

Bilder waren auch gleich und lade ich nicht extra hoch.

Eigentlich hätte ich es mir gleich denken können. Was will eine 23-jährige von mir alten Dackel  unentschlossen  
also wieder einmal  Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
Deltaromeo
Ex-Mitglied


Re: Katya <kattiekitty89@ukr.net>
Antwort #4 - 06. April 2013 um 15:50
 
Sie hat mich schon wieder bei russiancupid.com angeschrieben. Account ist auch sofort abgeschalten worden.

Hello XXX

How are you?

I speak only English or Russian languish!
Please write me on English!!

I wait your answer!

Katya 

Spoiler:
Delivered-To: XXX@gmail.com
Received: by 10.194.17.98 with SMTP id n2csp312476wjd;
        Sat, 6 Apr 2013 06:33:55 -0700 (PDT)
X-Received: by 10.14.175.71 with SMTP id y47mr29533303eel.18.1365255235248;
        Sat, 06 Apr 2013 06:33:55 -0700 (PDT)
Return-Path: <kattiekitty89@ukr.net>
Received: from fsm2.ukr.net (fsm2.ukr.net. [195.214.192.121])
        by mx.google.com with ESMTPS id a1si21386655eez.93.2013.04.06.06.33.55
        (version=TLSv1.2 cipher=RC4-SHA bits=128/128);
        Sat, 06 Apr 2013 06:33:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of kattiekitty89@ukr.net designates 195.214.192.121 as permitted sender) client-ip=195.214.192.121;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of kattiekitty89@ukr.net designates 195.214.192.121 as permitted sender) smtp.mail=kattiekitty89@ukr.net;
       dkim=pass Quelltext.i=@ukr.net
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=fsm;
     te; bh=58i/ZSOMCrmqWsA7+Xc8ygHpBXZIvxUqhAAzWQnYbaM=;
     pNE82hL+ZKa8Q=;
Received: from [195.16.88.106] (helo=localhost)
     by fsm2.ukr.net with esmtpsa ID 1UOTFi-000Jfc-Bm
     for XXX@gmail.com; Sat, 06 Apr 2013 16:33:54 +0300
Date: Sat, 6 Apr 2013 17:33:50 +0400
From: =?utf-8?B?0JrQsNGC0Y8=?= <kattiekitty89@ukr.net>
X-Priority: 3 (Normal)
Message-ID: <1041298222.20130406173350@ukr.net>
To: XXX<XXX@gmail.com>
Subject: hi
In-Reply-To: <CACruSrg6Uq3uXv78m3aNJ+gh=6nqfuDnCv0OST_K8ZWqNr+nKQ@mail.gmail.com>
References: <197401886.20130405180309@ukr.net> <CACruSrg6Uq3uXv78m3aNJ+gh=6nqfuDnCv0OST_K8ZWqNr+nKQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------1A1D4EE12EA1A20"

------------1A1D4EE12EA1A20
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


Zitat:
Received: from [195.16.88.106] (helo=localhost)
[...]
Date: Sat, 6 Apr 2013 17:33:50 +0400
From: =?utf-8?B?0JrQsNGC0Y8=?= <kattiekitty89@ukr.net


Code
Alles auswählen
IP:	195.16.88.106
Decimal:	3272628330
Hostname:	pdeliev.hostlife.net
ISP:	Wibo Project LLC
Organization:	Wibo Project LLC
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Blacklist:
Geolocation Information
Country:	Ukraine 

« Zuletzt geändert: 06. April 2013 um 15:50 von »  
Zum Seitenanfang
 
IP gespeichert
 
Deltaromeo
Ex-Mitglied


Re: Katya <kattiekitty89@ukr.net>
Antwort #5 - 09. April 2013 um 12:08
 
Jetzt haben wir einen Wohnort.  Cool

Will wer telefonieren? Zwinkernd

Hello, Dear XXX

Thanks for your photo! I am pleased to see you!
you are very good in the red shirt! I love it!
I live in a village not far from Odessa.
Thank you very much for your answer!
I'll tell you about my Institute.
I will finish Institute this year, studying for 5 year ...
I love my profession. She reveals to me the world. I learn a lot of interesting things.with my classmate, we go to theaters, museums, galleries and the opera!
sometimes we go to another city for a tour to learn about and see the new pictures or see a good opera!I also play the piano, I like beautiful lyrical music.
where do you work? What do you do after work?
where love rest?
Besides the Institute, I work, because our time it is necessary to ensure yourself for life!
I work in a beauty salon, I like it when the girls are beautiful and well maintained. I help them with that. I am a makeup artist and hairdresser!
I can combine beauty, work and training!
Unfortunately I do not have a computer and I am writing to you with an internet cafe, I have not earned, to buy it myself. Hopefully soon!
After university, I come here for a few hours and then go to work.
I really will try to write to you more often.
I would love to be closer to you, hear your voice, feel you closer and of course it is possible if we talk on the phone.
I can give you my number and you can call me between 12-18pm by my time. I will be very glad to hear your voice! I am sure that it  would be very pleasant! So, here it is: +380939043872
I'll wait for your letter, I really want to know more about you!
Katya

Spoiler:
Delivered-To: XXX@gmail.com
Received: by 10.194.33.98 with SMTP id q2csp56419wji;
        Tue, 9 Apr 2013 02:55:01 -0700 (PDT)
X-Received: by 10.194.5.4 with SMTP id o4mr18066965wjo.40.1365501300869;
        Tue, 09 Apr 2013 02:55:00 -0700 (PDT)
Return-Path: <kattiekitty89@ukr.net>
Received: from fsm1.ukr.net (fsm1.ukr.net. [195.214.192.120])
        by mx.google.com with ESMTPS id bn1si3124843wjb.159.2013.04.09.02.54.55
        (version=TLSv1.2 cipher=RC4-SHA bits=128/128);
        Tue, 09 Apr 2013 02:55:00 -0700 (PDT)
Received-SPF: pass (google.com: domain of kattiekitty89@ukr.net designates 195.214.192.120 as permitted sender) client-ip=195.214.192.120;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of kattiekitty89@ukr.net designates 195.214.192.120 as permitted sender) smtp.mail=kattiekitty89@ukr.net;
       dkim=pass Quelltext.i=@ukr.net
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ukr.net; s=fsm;
     te; bh=qyoWCWxSb2jKg7l7/32L3zJLqpCYJmYq6jfT/0B11ms=;
     lagTm5hulmAIk=;
Received: from [195.16.88.106] (helo=localhost)
     by fsm1.ukr.net with esmtpsa ID 1UPVGD-000K3u-73
     for XXX@gmail.com; Tue, 09 Apr 2013 12:54:54 +0300
Date: Tue, 9 Apr 2013 13:54:39 +0400
From: =?utf-8?B?0JrQsNGC0Y8=?= <kattiekitty89@ukr.net>
X-Priority: 3 (Normal)
Message-ID: <857709384.20130409135439@ukr.net>
To: XXX<XXX@gmail.com>
Subject: hello from me:)
In-Reply-To: <CACruSriEre5pp4PLN-T+=T4+n7r5nU8dMyNMmiFo1yDRmSRPMw@mail.gmail.com>
References: <197401886.20130405180309@ukr.net> <CACruSrg6Uq3uXv78m3aNJ+gh=6nqfuDnCv0OST_K8ZWqNr+nKQ@mail.gmail.com> <1041298222.20130406173350@ukr.net> <CACruSriEre5pp4PLN-T+=T4+n7r5nU8dMyNMmiFo1yDRmSRPMw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------5316A249812CB6B"

------------5316A249812CB6B
Content-Type: multipart/alternative;
boundary="----------1141243D28FE44FC"


------------1141243D28FE44FC
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


Zitat:
Received: from [195.16.88.106] (helo=localhost)
[...]
Date: Tue, 9 Apr 2013 13:54:39 +0400
From: =?utf-8?B?0JrQsNGC0Y8=?= <kattiekitty89@ukr.net>

IP wie vor.
« Zuletzt geändert: 10. April 2013 um 19:44 von Webmaster »  

ja_002.jpg ( 64 KB | Downloads )
ja_002.jpg
ulica.jpg ( 84 KB | Downloads )
ulica.jpg
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema