Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Tanya <tanechka_tanusha@underkit.com> (Gelesen: 2906 mal)
 
No-Nick
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Love Anti-Scam

Beiträge: 647
Standort: Laakirchen
Mitglied seit: 11. Februar 2013
Geschlecht: männlich
Tanya <tanechka_tanusha@underkit.com>
21. Mai 2013 um 16:09
 
Hope  you  are  in  good  mood  and have a little bit time to write me
answer  on  that mail. I want to know you better and hope that in your
answer  you  will  tell  me about yourself and send me at least one of
your photo.
Tanya


Spoiler:
From tanechka_tanusha@underkit.com Tue May 21 08:44:11 2013
X-Apparently-To: xxx via 46.228.36.226; Tue, 21 May 2013 07:44:16 +0000
Return-Path: <tanechka_tanusha@underkit.com>
Received-SPF: none (domain of underkit.com does not designate permitted sender hosts)
dHRsZSBiaXQgdGltZSB0byB3cml0ZSBtZSBhbnN3ZXIgb24gdGhhdCBtYWls
LiBJIHdhbnQgdG8ga25vdyB5b3UgYmV0dGVyIGFuZCBob3BlIHRoYXQgaW4g
eW91ciBhbnN3ZXIgeW91IHdpbGwgdGVsbCBtZSBhYm91dCB5b3Vyc2VsZiBh
bmQgc2VuZCBtZSBhdCBsZWFzdCBvbmUgb2YgeW91ciBwaG90by4gVGFueWEg
ATABAQEBA3RleHQvcGxhaW4DAzECSS5qcGcDSU1BR0UvSlBFRwMDMjYx
X-YMailISG: yml8GpgWLDstbhm1spZuGCez1SBHV4sIRoNq4TiHVTJhc7zo
RdKqFPoJK4XofBPuKURSG0sW648MeDmCQC_eJ_IvkxIDH0SiGdQkNjAnXSI4
7Df9xX1ps6uj2QS_wCi.kolfWXbFbKpT.O5MFfrcv1XYAopu_1xiJ.h2Hjbl
BmK_eXd5hJOuMxvxFtRGoDdXfqPwkM8AXuFDn5Nrk1Qkc58FZjrsUAcNnpqx
h_n6FgMLXPIgpDEgp4LvFW1Uk6TmBg8KHhLUFt.IqII60UdEspIVPd12Aphq
LL.sxyfGrskTTQ_CCN0TNhD.ox7qCY89xWwfHjrbnDtN6k8lUfuYz0xPAgnG
GW1pG4PYYqKA2oDKWk4D1YFvM_fKJ.nxS10WKX0YW3UGsTWPSdixwuCZJtPD
_qpS4WcpHqd1WCsoErBjSxQhjnwqO.c9HGtMEglCsprhLx1koZwOFNZtLVZX
qHbFcMXLoU_7M5xaUd4CRbmG3HBzrGOPi5UyqCUFxKuOcNs3lch.pQrN_TpD
RJ9Dkihf7p0D4Urut6.ATrm7apJUnxGRBAbOrjpGmiXBq.tZzSnITZ02uQfN
GC2v5FJtyr0COJ2dW2sjRfwrAhYkx.F93eRiKfrhiuULOFAJYvtR9qLNFdC2
3JYDW7E81Q3AJDeT.4CrpJN0F2jIrHxQ6wXi070QWXAomef53jySj7fxAqma
aNvMrmAO.b0IPSIxOZVt_xmI3cOnAamAmQ6m2uH_5TZoz_6uTde.KpbJA4ef
VItsT800HUV1CR_cLR9UL4_EDAEst_fDpKYY3F_meGqBFtd7F8q36UZOmZ0W
gEqc33Mn57GyMVvx1VAkDAsa2kWMiRO1TZQbIg79mi8FfcA2a3n_W80GmY7U
S6RKfNuNQi.7IkaB.ueWJA3.PRXZpBCq5dgYPZuyEDUbL.oINz5EBrJHFttU
gcRGojBXWRE1rvRP5yEJje5LxGKlJLtxXUMqG83LaNic52Eqok4m7I3gT_Sa
2fVcyDVpHBX01mZ8oODvk9hPkkeLPEhVnz2CDS5rLHqdNPp_Bx6emtL_N4bU
LuVO2wSZFOHLBFkaWoCEJs36I4LO73vrQA--
X-Originating-IP: [77.72.130.131]
Authentication-Results: mta1112.mail.ir2.yahoo.com  from=underkit.com; domainkeys=neutral (no sig);  from=underkit.com; dkim=neutral (no sig)
Received: from 127.0.0.1  (EHLO martafe.com) (77.72.130.131)
  by mta1112.mail.ir2.yahoo.com with SMTP; Tue, 21 May 2013 07:44:16 +0000
Received: from [92.112.123.64] (helo=localhost)
     by martafe.com with esmtpa (Exim 4.63)
     (envelope-from <tanechka_tanusha@underkit.com>)
     id 1UehEv-00011A-HB
     for xxx; Tue, 21 May 2013 11:44:15 +0400
Date: Tue, 21 May 2013 10:44:11 +0300
From: tanechka_tanusha@underkit.com
X-Priority: 3 (Normal)
Message-ID: <1381942083.20130521104411@underkit.com>
To: xxx
Subject: rc
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------1E1D1C013E1ADAD"
X-Antivirus: avast! (VPS 130520-1, 20.05.2013), Outbound message
X-Antivirus-Status: Clean
Content-Length: 267096



« Zuletzt geändert: 31. Mai 2013 um 19:34 von Webmaster »  

I_008_001.jpg ( 78 KB | Downloads )
I_008_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Wesermann
General Counsel
***
Verboten


I love Anti-Scam

Beiträge: 33992
Standort: Russia
Mitglied seit: 08. Oktober 2008
Geschlecht: männlich
Re: Tanya <tanechka_tanusha@underkit.com>
Antwort #1 - 21. Mai 2013 um 16:26
 
Ukraine

Code
Alles auswählen
General IP Information
IP:	92.112.123.64
Decimal:	1550875456
Hostname:	64-123-112-92.pool.ukrtel.net
ISP:	JSC Ukrtelecom
Organization:	JSC Ukrtelecom
Services:	None detected
Type:	Broadband
Assignment:	Dynamic IP
Blacklist:
Geolocation Information
Country:	Ukraine ua flag 

  
Zum Seitenanfang
 
IP gespeichert
 
Uli
Ex-Mitglied


Re: Tanya <tanechka_tanusha@underkit.com>
Antwort #2 - 21. Mai 2013 um 16:30
 
@ Opfer

Die Auflösung ist nicht korrekt. Die X-Originating-IP ist eigentlich nur relevant, wenn sie unterhalb der ersten Receivedzeile steht.
Die Mail kommt aus der Ukraine über martafe.com, aber deren Server steht in Deutschland:
Code
Alles auswählen
Service Provided By: UNLIM.UA LLC
Website: unlim.ua
Contact: +380 (57) 764-22-77

Domain Name: MARTAFE.COM

Creation Date: 29-Mar-2012
Modification Date: 29-Mar-2012
Expiration Date: 29-Mar-2014

Domain servers in listed order:
ns.martafe.com
ns.secondary.net.ua

Registrant:
Ivanov Dima
Bravory
Kyiv, 03187
UKRAINE
+380.445262272

Billing Contact:
Ivanov Dima
Bravory
Kyiv, 03187
UKRAINE
+380.445262272

Administrative Contact:
Ivanov Dima
Bravory
Kyiv, 03187
UKRAINE
+380.445262272

Technical Contact:
Ivanov Dima
Bravory
Kyiv, 03187
UKRAINE
+380.445262272

Status: ok 

  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 10876
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Tanya <tanechka_tanusha@underkit.com>
Antwort #3 - 21. Mai 2013 um 17:22
 
Hope you are in good mood and have a little bit time to write me answer on that mail. I want to know you better and hope that in your answer you will tell me about yourself and send me at least one of your photo. Tanya

Spoiler:
Return-path: <tanechka_tanusha@underkit.com>
Delivery-date: Tue, 21 May 2013 08:33:02 +0200
Received: from [195.4.92.20] (helo=10.mx.freenet.de)
     by mbox54.freenet.de with esmtpa (ID exim) (Exim 4.80.1 #3)
     id 1Ueg84-0001hg-1I
     for  Tue, 21 May 2013 08:33:02 +0200
Received: from martafe.com ([77.72.130.131]:33623)
     by 10.mx.freenet.de with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (port 25) (Exim 4.80.1 #3)
     id 1Ueg83-0002WS-Ii
     for ; Tue, 21 May 2013 08:32:59 +0200
Received: from [92.112.123.64] (helo=[192.168.1.5])
     by martafe.com with esmtpa (Exim 4.63)
     (envelope-from <tanechka_tanusha@underkit.com>)
     id 1Ueg7y-0008Sx-Me
     for ; Tue, 21 May 2013 10:32:59 +0400
Date: Tue, 21 May 2013 09:32:33 +0300
From: tanechka_tanusha@underkit.com
X-Priority: 3 (Normal)
Message-ID: <53634256.20130521093233@underkit.com>
To: 
Subject: rc
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------10813911C11FA64A1"
X-purgate-ID: 149285::1369117979-000006F4-2284BB5C/0-0/0-0
Delivered-To: 
Envelope-to: 
Delivered-To: 


Ukraine

Code
Alles auswählen
IP:	92.112.123.64
Decimal:	1550875456
Hostname:	64-123-112-92.pool.ukrtel.net
ISP:	JSC Ukrtelecom
Organization:	JSC Ukrtelecom
Services:	None detected
Type:	Broadband
Assignment:	Dynamic IP
Country:	Ukraine
 



Zitat:
Tue, 21 May 2013 10:32:59 +0400
Date: Tue, 21 May 2013 09:32:33 +0300
  

I_008.jpg ( 78 KB | Downloads )
I_008.jpg
Zum Seitenanfang
 
IP gespeichert
 
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20116
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Tanya <tanechka_tanusha@underkit.com>
Antwort #4 - 21. Mai 2013 um 18:18
 
 
underkit.com ist eine Fake-Domain.
Registrant ist Dima Ivanov, wie bei vielen anderen Fake-Domains auch.

Smiley

Code
Alles auswählen
UNDERKIT.COM - Domain Informationnew
Domain 	UNDERKIT.COM   [ Site Info  Traceroute  RBL/DNSBL lookup ]
Registrar 	CENTER OF UKRAINIAN INTERNET NAMES
Registrar URL 	https://www.ukrnames.com
Whois server 	whois.ukrnames.com
Created 	26-Jun-2012
Updated 	01-Nov-2012
Expires 	26-Jun-2013
Time Left 	35 days 7 hours 46 minutes
Status 	ok
DNS servers 	NS.NUMCNET.COM   77.72.133.14
NS.UNDERKIT.COM   77.72.130.131 



Code
Alles auswählen
UNDERKIT.COM - Geo Information
IP Address 	77.72.130.131
Host 	underkit.com
Location 	DE DE, Germany
City 	-, - -
Organization 	Colobridge GmbH
ISP 	Colobridge GmbH
AS Number 	AS197252 Colobridge gmbh 



Code
Alles auswählen
UNDERKIT.COM - Whois Information

Service Provided By: UNLIM.UA LLC
Website: unlim.ua
Contact: +380 (57) 764-22-77

Domain Name: UNDERKIT.COM

Creation Date: 26-Jun-2012
Modification Date: 26-Jun-2012
Expiration Date: 26-Jun-2013

Domain servers in listed order:
ns.underkit.com
ns.numcnet.com

Registrant:
Dima Ivanov domaintools@online.ua
Bravory
Kyiv, 03187
UKRAINE
+380.445262272 

  
Zum Seitenanfang
 
IP gespeichert
 
No-Nick
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Love Anti-Scam

Beiträge: 647
Standort: Laakirchen
Mitglied seit: 11. Februar 2013
Geschlecht: männlich
Re: Tanya <tanechka_tanusha@underkit.com>
Antwort #5 - 22. Mai 2013 um 15:37
 
I sent you mail, but still didn’t get your answer. 
I want to check if you get the mail, please write me as soon as possible.
Tanya

Spoiler:
From tanechka_tanusha@underkit.com Wed May 22 10:56:48 2013
X-Apparently-To: xxx via 46.228.36.224; Wed, 22 May 2013 09:56:38 +0000
Return-Path: <tanechka_tanusha@underkit.com>
Received-SPF: none (domain of underkit.com does not designate permitted sender hosts)
IHlvdXIgYW5zd2VyLiBJIHdhbnQgdG8gY2hlY2sgaWYgeW91IGdldCB0aGUg
bWFpbCwgcGxlYXNlIHdyaXRlIG1lIGFzIHNvb24gYXMgcG9zc2libGUuIFRh
bnlhIAEwAQEBAQN0ZXh0L3BsYWluAwMxAkkuanBnA0lNQUdFL0pQRUcDAzI2
MQ--
X-YMailISG: nDBXzekWLDuNd1Li1J4JhxF0HBs1wrh6YsHnW.cH6zsTRec2
0.PQ18ifGWZI9o4YlBknquw4JcfjXHpkfiNMYvdp481wSE_EJjVHyNjHzoXE
LbgPCqOLAeaXt.OboFNmKWZbNXaoH2Su2C7sMtnKfuQetm.ke.ZX9Gr3FGa4
g7_AVcZbiOEJmr.DNmpdz892tySYr8NJwbwnnamhSzKaZILSP4DtIRgEsgvC
hRYJt.ya3BXMAFyayGmuyOYL8Vf6c7SBAovaFu9HsSMRVJT.OjPXozqbtVlg
0YTq.VK2dqQ9ssSXXXCkhzJE9Xlox0UXN5uhfo3duONr6ctj.VojNKpqpgA6
vg2VAPqLuM79iAIf5MesmTASW1k0A7Pd09dtpc2d79XBA68Q3JmJ0YpFFlUZ
ul5UXRpwVhzGzIiBQw8dLsfzWWgJXevmLgpIojSqtgDl8cykeWrMfts01mDn
DVCIfjdUGIfJqAybVhaityK4I5JJ1R.OmmNw7x9IZmFxFaNg_JBPl_zXtDEI
prDWqmGv_na4yPktiBVTBsqM3p65ijRW4YrtwZWt_g5iqhkWpI2BlyEClJDb
0Jwnb1AVbpBaLYocgmdgZFQidP5Cs.katDWaxG23dLv4AOS1L0ikpN5oSrGd
qf9s42mkBBIYuACGVNOCBE38dFRXV4beT5u1mYrGDn6foNw.uTsXMJ1C1EWe
Z2k3Eh97rLLu.KcCXtLd_Exyyxz0G5.q.8gfhlv.uZsBdcwNuDfePIj3P3RM
VqBh0cmqZ32Zg99DL50J..MDUU1hvHMPHD4rMZLIOfe3AnRTLucljhFJyCeY
1U89flPixUDohcy4WctnfExbxHpTBS77bN.TTTpn4DxNiPzTmVkOOlEE1Fni
Guapw71Zq8AtMWI_eJ0Nthd0Ef1IrvTD5Ub0K6hZK686waXarnCsaH_omiS4
mqroJI5mHGJ4NvKAGRGEVKJffXM1bjIXBOYOtcT4DAu7p9Dc02_tnq2yJscl
i.wbC5D5knX7Dr_RBH9TACseU2FTjdfzuJmvXKnRG4v_5.GZwTDVtpx6P3sL
6TTLlSB9TQGZYugAaMQ-
X-Originating-IP: [77.72.130.131]
Authentication-Results: mta1079.mail.ir2.yahoo.com  from=underkit.com; domainkeys=neutral (no sig);  from=underkit.com; dkim=neutral (no sig)
Received: from 127.0.0.1  (EHLO martafe.com) (77.72.130.131)
  by mta1079.mail.ir2.yahoo.com with SMTP; Wed, 22 May 2013 09:56:38 +0000
Received: from [92.112.78.163] (helo=localhost)
     by martafe.com with esmtpa (Exim 4.63)
     (envelope-from <tanechka_tanusha@underkit.com>)
     id 1Uf5ma-0001xE-WA
     for xxx; Wed, 22 May 2013 13:56:37 +0400
Date: Wed, 22 May 2013 12:56:48 +0300
From: tanechka_tanusha@underkit.com
X-Priority: 3 (Normal)
Message-ID: <984275839.20130522125648@underkit.com>
To: xxx
Subject: russiancupid.com
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------380163425E179"
X-Antivirus: avast! (VPS 130522-0, 22.05.2013), Outbound message
X-Antivirus-Status: Clean
Content-Length: 266995

 
  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 10876
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Tanya <tanechka_tanusha@underkit.com>
Antwort #6 - 22. Mai 2013 um 16:00
 
Ukraine

Code
Alles auswählen
IP:	92.112.78.163
Decimal:	1550864035
Hostname:	163-78-112-92.pool.ukrtel.net
ISP:	JSC Ukrtelecom
Organization:	JSC Ukrtelecom
Services:	None detected
Type:	Broadband
Assignment:	Dynamic IP
Country:	Ukraine
State/Region:	Donets'ka Oblast'
City:	Makiyivka 



Zitat:
Wed, 22 May 2013 13:56:37 +0400
Date: Wed, 22 May 2013 12:56:48 +0300
  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 10876
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Tanya <tanechka_tanusha@underkit.com>
Antwort #7 - 22. Mai 2013 um 16:19
 
I sent you mail, but still didn’t get your answer. I want to check if you get the mail, please write me as soon as possible. Tanya

Spoiler:
Return-path: <tanechka_tanusha@underkit.com>
Delivery-date: Wed, 22 May 2013 11:38:58 +0200
Received: from [195.4.92.10] (helo=0.mx.freenet.de)
     by mbox54.freenet.de with esmtpa (ID exim) (Exim 4.80.1 #3)
     id 1Uf5VY-0004bo-AQ
     for ; Wed, 22 May 2013 11:38:58 +0200
Received: from martafe.com ([77.72.130.131]:51287)
     by 0.mx.freenet.de with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (port 25) (Exim 4.80.1 #3)
     id 1Uf5VX-0000aP-Hr
     for ; Wed, 22 May 2013 11:38:56 +0200
Received: from [92.112.78.163] (helo=localhost)
     by martafe.com with esmtpa (Exim 4.63)
     (envelope-from <tanechka_tanusha@underkit.com>)
     id 1Uf5VI-0001XX-Pa
     for ; Wed, 22 May 2013 13:38:55 +0400
Date: Wed, 22 May 2013 12:38:50 +0300
From: tanechka_tanusha@underkit.com
X-Priority: 3 (Normal)
Message-ID: <1796646353.20130522123850@underkit.com>
To:
Subject: russiancupid.com
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------FED312035D26F54"
X-Antivirus: avast! (VPS 130522-0, 22.05.2013), Outbound message
X-Antivirus-Status: Clean
X-purgate-ID: 149285::1369215535-000005FD-6143C82C/0-0/0-0
Delivered-To: 
Envelope-to: 
Delivered-To: 


Ukraine

Code
Alles auswählen
IP:	92.112.78.163
Decimal:	1550864035
Hostname:	163-78-112-92.pool.ukrtel.net
ISP:	JSC Ukrtelecom
Organization:	JSC Ukrtelecom
Services:	None detected
Type:	Broadband
Assignment:	Dynamic IP
Country:	Ukraine
State/Region:	Donets'ka Oblast'
City:	Makiyivka 



Zitat:
Wed, 22 May 2013 13:38:55 +0400
Date: Wed, 22 May 2013 12:38:50 +0300
  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 10876
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Tanya <tanechka_tanusha@underkit.com>
Antwort #8 - 25. Mai 2013 um 19:20
 
xxx, it is nice that I get your new mail:)
My   nickname  on  site is Yana, that's why you can't understand who I
am.  I  am with dark hair there. I tried to put also photos with blond
one, but I don't know why I can't see that administrator did it.
As you understand, I want to build serious relationship, so if you want
the same, let?s try to do it.
So, maybe we will need to start from the beginning. My real name is
Tanya. I am almost 28. I live in small town Roven?ki, country Ukraine.
Where do you live now? I want to see on google maps Smiley
I work at small firm, it sales cosmetics. I am a manager there.
And what does your work connect with?
I think for one mail is enough information, will wait a short story about
you and your life and some of your photos.
Tanya

Spoiler:
Return-path: <tanechka_tanusha@underkit.com>
Delivery-date: Fri, 24 May 2013 14:58:08 +0200
Received: from [195.4.92.13] (helo=3.mx.freenet.de)
     by mbox54.freenet.de with esmtpa (ID exim) (Exim 4.80.1 #3)
     id 1UfrZQ-0000Ia-4q
     for ; Fri, 24 May 2013 14:58:08 +0200
Received: from martafe.com ([77.72.130.131]:35121)
     by 3.mx.freenet.de with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (port 25) (Exim 4.80.1 #3)
     id 1UfrZN-00028u-1P
     for ; Fri, 24 May 2013 14:58:07 +0200
Received: from [92.112.130.59] (helo=[192.168.1.5])
     by martafe.com with esmtpa (Exim 4.63)
     (envelope-from <tanechka_tanusha@underkit.com>)
     id 1UfrZ2-0003Bv-J9
     for ; Fri, 24 May 2013 16:58:04 +0400
Date: Fri, 24 May 2013 15:57:39 +0300
From: tanechka_tanusha@underkit.com
X-Priority: 3 (Normal)
Message-ID: <1817642323.20130524155739@underkit.com>
To: 
Subject: Re: russiancupid.com
In-Reply-To: <9c1328aeeb478662eda3d53724769c19@email.freenet.de>
References: <9c1328aeeb478662eda3d53724769c19@email.freenet.de>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------468717F25C4995D"
Delivered-To: 
Envelope-to: 
Delivered-To: 



Donetsk, Urkraine

Code
Alles auswählen

IP:
92.112.130.59

Decimal:
1550877243

Hostname:
59-130-112-92.pool.ukrtel.net

ISP:
JSC Ukrtelecom

Organization:
JSC Ukrtelecom

Services:
None detected

Type:
Broadband

Assignment:
Dynamic IP
Country:Ukraine
State/Region:Donets'ka Oblast'
City:Donetsk
 



Zitat:
Fri, 24 May 2013 16:58:04 +0400
Date: Fri, 24 May 2013 15:57:39 +0300
« Zuletzt geändert: 31. Mai 2013 um 19:34 von Webmaster »  

at_home.jpg ( 89 KB | Downloads )
at_home.jpg
at_work_with_collegue.jpg ( 82 KB | Downloads )
at_work_with_collegue.jpg
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema