Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Steve <steveharris89@yahoo.com> (Gelesen: 2712 mal)
 
x5dr
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4945
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Steve <steveharris89@yahoo.com>
30. August 2013 um 00:48
 
Neuer Kontakt! Er sagt, er käme aus Dallas.

Good morning,How are you doing and how was your night...Night has ended for another day, morning has come in a special way. May you smile like the sunny rays and leaves your worries at the blue blue bay and have a wonderful day.
hope to read from you soon


Spoiler für Quelltext Cox Communications USA:
From Steve Harris Sun Aug 18 22:39:34 2013
X-Apparently-To: 
Return-Path: <steveharris89@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
IGRpc3R1cmJpbmcgdS5JdCBtZWFucyB1IGFyZSB0aGUgbGFzdCBwZXJzb24g
YWJvdXQgd2hvbSBpIGFtIHRoaW5raW5nIGJlZm9yZSBjbG9zaW5nIG15IGV5
ZXMuIEdvb2QgTmlnaHQgATABAQEBA3RleHQvcGxhaW4DAzACA3RleHQvaHRt
bAMDMQ--
X-YMailISG: 8qpovMsWLDstL0IPll9lZl79DyrLwYM_3q7WYER4gPzdq7fs
BmRLQKN_mdWwk5wsPz3gIPeWQi66mLEmi522CDtvYwRJpYTZKf7_gqxesRMM
07epSA3ai_wTZRiGbCsEeS8qI3MgjmLWy82uuFatA6_EB6lG0vSNicyTlS8C
qXV_8PHamCZPjWtSeIzbDfYDxQrKo3k03gTvgYzxG.nW2cR1KN3W2fzMKatr
QymL_NS9O116Hgp2f1DHGJeRLZbmWWszMdLnhx2GRIODalGeX6oFaeGYWCqH
IbKnUw94psm8vXELRoh38yhM7xqbIsE2nF_G2RXORXrZhv.vs95SuPeYDhfS
6xTIbTd6GyH8J7bvWEocxKctgKfUpNaTD7qe0oIcYNnmusK6XTOR6JnojfCs
bHscR7kQHtKxM7Ld1DD_HW90iSyw8Fb_gtuK9kK97M0tjdvtR1MbMOIOk2QY
qsSnY8jVO6P1jz2uKDI3GCNbYMwRHKr8tRxLCRZMPgXutVnrAwinU_y391Oq
8hJUOQJjEnIlS3DRtwfWjkuZmz_69T5TQKPzt6HysiywX05iDvO0dhfvStWc
dfV024SY.qu3FFWChZ2RSTSv_PhVlzRxHOfVpua_fdXJvh4zQbmunb4vaH2r
OkMfb1qunjKcz6axTIefwp59gCskhGwb0E3Zlw9dRhXnLsNfuqJM_o7KAda6
f7sWUt8j0RLXMSYcSEn.y_h4jm7HpEE43ZtsE49loF0x.nwdYmMi_25bn.mv
EO0Ge.D4V8SOpnvRcA8T_PaZZB2CyUmpfr9ejXx4lvn.oSq7ifEICYNbEppB
&nbs p;2ZTk2ZHUDy6M8bfxRkkeB9QRtxP7ZNI.ZOJqktbBLsAHOJSVo96nrPcj62j0
eY8oAk6BZvnlKTYeMU8lYds4bFgjaRXZ_EcOq1oK4Cs3vaIB6h1U4Vip6tyM
UkWoXK792OZdIuI2lyx_YcWFL6V4eoJ3icOweKVSsko1ZvxOIsw.l6P6UZD9
qxgk3sjsDiG_KGvcWelpoj5RuqXc44nICz3PMeYTeqTyY_7ivrcYqiQk_9Od
WY_ECcsB8xm2BalCmdeAsHLAZIifaaXKMW8lIP8gSXx6DWvcecG5i_hfQLcR
w10R8u7ipC6FUlCp3B2Dak_dG4bXmwuJTA_6bnXDwkrqj4TtQ.rQ2xLQjdSA
KYVZmjqxn1b7XnvyZ1tCplVxSKk4pOBEVpr6tdtd4AUMxZ1ybUluJSHNWRkX
10eh75Nuom60FHP1r47.LYPCnGx_jOo-
X-Originating-IP: [98.138.120.48]
Authentication-Results: mta1001.mail.ir2.yahoo.com  from=yahoo.com; domainkeys=pass (ok);  from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO nm41.bullet.mail.ne1.yahoo.com) (98.138.120.48)
  by mta1001.mail.ir2.yahoo.com with SMTP; Sun, 18 Aug 2013 21:42:35 +0000
Received: from [127.0.0.1] by nm41.bullet.mail.ne1.yahoo.com with NNFMP; 18 Aug 2013 21:42:34 -0000
Received: from [98.138.226.180] by nm41.bullet.mail.ne1.yahoo.com with NNFMP; 18 Aug 2013 21:39:34 -0000
Received: from [98.139.212.153] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 18 Aug 2013 21:39:34 -0000
Received: from [98.139.212.207] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 18 Aug 2013 21:39:34 -0000
Received: from [127.0.0.1] by omp1016.mail.bf1.yahoo.com with NNFMP; 18 Aug 2013 21:39:34 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 552526.91827.bm@omp1016.mail.bf1.yahoo.com
Received: (qmail 55252 invoked by uid 60001); 18 Aug 2013 21:39:34 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1376861974; bh=C8hrIPL7VNCix0/yB5XcV1uFgD3ESDoTjYYBC1om2OY=; Subject:To:MIME-Version:Content-Type; 5n7/JjQlOwqJ8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  Subject:To:MIME-Version:Content-Type;
  K9WlcyxRr4AfU=;
X-YMail-OSG: QCiZuN0VM1mUU0yhFtvRj_aKc3udceFGyGI0unEk8TqWIzV
7B05lMrn9Jy4nHlMg19QqXxzw_7NbMmnD7j4l6wMXxd1PUjEyU52VRKt.QFS
imcvpzeRhWvPXitRyZPs0pdqHx2B59OVrbcevcA3A5uLcPCmdJMN8po3Hv1j
N6ybU6.efO75xpRc2QvglOJCg_YODGJNY9aNB.wmdtkAxr3oonONFfa3Ul00
7SbMmI.6XzyWTiLvqLbzixGN6ce1OJRSCyzdYc0agiRGIHVK6XGi.fV.2..w
9VkFP7P_qeJy2MveLBe1BL88g30cbxFAgyEzP5oQrLaodevevYjfTWV99.bA
64tMRiSm7cVJPnm8eC.jLZaU.aLzLLpeo8G7iFrcPNZNHUz8iPcIbk543Q2G
otXLHYfoGvRRNmFJ2o_aiex24uoY33OkHohsyOgPyT1NEWvOMApWGbrGss8s
4akXSzdxlRTU4_GM15bNFUTCvtIBjtqr0QQ4vZ9ZzWsET.k_dTpsY5YSO_P0
oMlGTM44M1YmWx738.5sRpVfAf8T8LY1DrfkFJCnU.fBbPARjwsySvBd8RHy
h1uSvu3_2BGxi3gjl
Received: from [24.234.211.233] by web161806.mail.bf1.yahoo.com via HTTP; Sun, 18 Aug 2013 14:39:34 PDT
X-Mailer: YahooMailWebService/0.8.154.571
Message-ID: <1376861974.55145.YahooMailNeo@web161806.mail.bf1.yahoo.com>
Date: Sun, 18 Aug 2013 14:39:34 -0700 (PDT)
From: Steve Harris <steveharris89@yahoo.com>
Reply-To: Steve Harris <steveharris89@yahoo.com>
Subject: hope to read from you soon
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1665047788-308859410-1376861974=:55145"
Content-Length: 719

Zitat:
Date: Sun, 18 Aug 2013 14:39:34 -0700 (PDT)
« Zuletzt geändert: 30. August 2013 um 13:21 von Opfer »  

1_105.jpg ( 21 KB | Downloads )
1_105.jpg
4_053.jpg ( 91 KB | Downloads )
4_053.jpg
Zum Seitenanfang
 
IP gespeichert
 
x5dr
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4945
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Steve <steveharris89@yahoo.com>
Antwort #1 - 30. August 2013 um 00:50
 
A late Night SMS doesn't mean that I am disturbing u.It means u are the last person about whom i am thinking before closing my eyes. Good Night


Spoiler:
From Steve Harris Mon Aug 19 07:10:23 2013
X-Apparently-To:
Return-Path: <steveharris89@yahoo.com>
X-YahooFilteredBulk: 98.138.120.55
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: i9oxGZAWLDtcRCZVO2TeyJwROwUK6S26hB7_2rvbcQc8Oet1
_YNYOwaFFqjqaYQardmRvIZwkZQXTM3GrDy9dHAwjnZcrEgaLPuJLHcZpZcr
3O7xvooKXrVQyRq9m0x9v77oqNoxyIYV7P9nTb6piPwd9HIiTY58gISPBTsx
TI.wIA2hKsJpa3MbP3vpgBsIKEyhRzyvHanGMiL19SJ_kwsRYKMmR9_Ud7na
pTHf51gl9kh72UUFD_Inn7KeLCJSnvnY4xoOwyo6WkpUAhOV5ID.REg0D2kB
xhLXPuparRfZDeT4GECcj__H.jb.7wiV3JNcjgxkRoHo2L5K8FD6VdDeGZ0r
c817RvLW_oApqsQ7J8EYl.k5MQXBBHeWH__kl.oZDBGpGc4CDkoxI03vLwl7
HyaR13C.BGVEUe8ssjm91lZLlc5IH0bLISQ83hpgY_naYjv7bqLpi3R6o.Lz
4qGfv2vS5hssxmRqP5GxeZImuqlua1mkSX0rIPuLPHztWar3U2QEFFlPGBB.
dpE2hOHD2yXw9Q11za1DxxhwCjAvOFt7t4MggT2W0Xh9rNQ3YLwEBd_TL8nU
VhBrGENlmmWinK3iysV0KfW92RuC0qem4PQGltF6VpJsQ2FXH0R49NQOLhI2
TcFKa4cMKw_nQFB14woLP_IUxZuZblCZQeSkoQfncEN0mDP1rGA.1NGRuofr
WgH_jR.KKmNH9ZBf7wMlFrg0uEjxCrpyi8.bozDbA.vks9bJFrbn6VitUIeo
nH0KnzJbWC9pMk9fVHrtj5QiwgO5x0us1qxScpPdnL0QHPV0DQcVLgV19wYs
&nbs p;Z3YCX4WGwCEgI_ayMlIGyD_9CNDCBijKG1M2v4.bDfy9OpHj8owP96hhc4vX
3kejG3.yQZQM8Att8gIJowHPJasplGyrqz7Y7IgEWMuR6KyJCqrGpL587yIT
1DoAypNnIradmgCrJWlnRNKDNxw2Zyhe0kHHDV7hhMNrrcsS8lE.Ocikqal8
jUfCAVsiVAro2Vpa2QUfi.KoTDvCWC7odetxxje.Jot1M4eMhb6eSLlH0Uu2
oXaQ7Y0wj16q3WsrCPXjXDBJoREn_pa.UKi9QYY.dNklkK3KQTrv3Pt3d2O5
wYFV1AXaMoJ.dWIovqywo2IYHU4DkOHFOdhdwsCWXnooeYOsaU9Xs8OuTM3S
DlquwAGxIB2xdxtuk2d3Nu3Qo1djCiEqOPsxXy7GyrfMG0rfO5vK68EAvxsA
v7H7sDEbwduXP0uGOGuOdpLUs5z4Np_2f5teLt_2bnwnDDJZHtsI_KhYqNk9
OV27qNEqgZgu0q9Io87oMMUvRNcka8WqUjuZ2QAc3kfRtFLB7lpeFsMKt9Rz
onk-
X-Originating-IP: [98.138.120.55]
Authentication-Results: mta1134.mail.ir2.yahoo.com  from=yahoo.com; domainkeys=pass (ok);  from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO nm48.bullet.mail.ne1.yahoo.com) (98.138.120.55)
  by mta1134.mail.ir2.yahoo.com with SMTP; Mon, 19 Aug 2013 06:12:57 +0000
Received: from [127.0.0.1] by nm48.bullet.mail.ne1.yahoo.com with NNFMP; 19 Aug 2013 06:12:56 -0000
Received: from [98.138.226.178] by nm48.bullet.mail.ne1.yahoo.com with NNFMP; 19 Aug 2013 06:10:24 -0000
Received: from [98.139.212.149] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 19 Aug 2013 06:10:24 -0000
Received: from [98.139.212.213] by tm6.bullet.mail.bf1.yahoo.com with NNFMP; 19 Aug 2013 06:10:24 -0000
Received: from [127.0.0.1] by omp1022.mail.bf1.yahoo.com with NNFMP; 19 Aug 2013 06:10:24 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 184200.23411.bm@omp1022.mail.bf1.yahoo.com
Received: (qmail 54691 invoked by uid 60001); 19 Aug 2013 06:10:24 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1376892623; bh=ajksgLf/Yfl8fHTVQp8W/GGwrHXPYYlTxlO8wqLW/AM=; 
Subject:To:MIME-Version:Content-Type; 

LDrETr26yaP9A=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  
Subject:To:MIME-Version:Content-Type;
  

wvg+xrfryFwJc=;
X-YMail-OSG: 5O3YwAAVM1mJKZX6I8_QArunajy7G1YjjCjCiOgWu6eov07
YuY4Z2zsLFqbCkiIVWRN6tfVW_wkpcMsLmUYetE5YG_L1CWAuQS2z1axu0i6
nmqARlHh6GY2p18w5LZoLe97SYbwpZAw6QCCjjPLdKLJnyIDWKLxmaRTh7s1
ZQPBY566Stnszuu6q19Gjqg.Ib_PS1KdLNbaAXUsG_O5KR6JWi.lSajVsho7
x2dlY5bt25IQtRTr8y.6lNvi0Cmg0O5er3NJoMoieMVm267m0soZBtejdNIC
QrYYxEEkLcw6NSLWvivjASOkqx1lvHfTpdcWJCuY625oE3DFp_IYXttpynnS
DiCitjgQrMGmuMHWOo3rbiDxxI9M23Zlf70MF0qBFhs_3GafRyr4bIWUTmTy
BPva8LWmxbMn3RNXkqFI0Dp_9AAwqU5ViXPZm8zCWnj5bQWzvcxu30hb2wXE
H1exSooKcCjUH9s04hwbuSwAVQyw11v9M8msF.WhDgq33jERqfZOD2X0CmC1
f5bzQbOalWKZN0gI1qgpSmrfVywVSkg--
Received: from [74.76.21.66] by web161802.mail.bf1.yahoo.com via HTTP; Sun, 18 Aug 2013 23:10:23 PDT
X-Mailer: YahooMailWebService/0.8.154.571
Message-ID: <1376892623.54634.YahooMailNeo@web161802.mail.bf1.yahoo.com>
Date: Sun, 18 Aug 2013 23:10:23 -0700 (PDT)
From: Steve Harris <steveharris89@yahoo.com>
Reply-To: Steve Harris <steveharris89@yahoo.com>
Subject: GOOD MORNING
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-2096837515-1147744985-1376892623=:54634"
Content-Length: 956
« Zuletzt geändert: 30. August 2013 um 13:22 von Opfer »  

2835656_1376625902_001.jpg ( 11 KB | Downloads )
2835656_1376625902_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65751
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Steve <steveharris89@yahoo.com>
Antwort #2 - 30. August 2013 um 01:18
 
Mail über USA

Code
Alles auswählen
IP:	74.76.21.66
Decimal:	1246500162
Hostname:	cpe-74-76-21-66.nycap.res.rr.com
ISP:	Time Warner Cable
Organization:	Time Warner Cable
Services:	None detected
Type:	Broadband
Assignment:	Dynamic IP
Country:	United States us flag
State/Region:	Massachusetts
City:	Pittsfield 



Zitat:
from [74.76.21.66] by web161802.mail.bf1.yahoo.com via HTTP; Sun, 18 Aug 2013 23:10:23 PDT
Date: Sun, 18 Aug 2013 23:10:23 -0700 (PDT)
From: Steve Harris <steveharris89@yahoo.com>
« Zuletzt geändert: 30. August 2013 um 13:19 von Opfer »  
Zum Seitenanfang
 
IP gespeichert
 
x5dr
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4945
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Steve <steveharris89@yahoo.com>
Antwort #3 - 30. August 2013 um 01:37
 
x5dr schrieb on 30. August 2013 um 00:48:
Er sagt, er käme aus Dallas.

Stiray schrieb on 30. August 2013 um 01:18:
City:      Las Vegas


Da stellt sich für mich gerade ein großes ?

Er sagt, er ist bei dieser Organisation beschäftigt http://www.dyn-intl.com/ als Ingineur.

Zitat:
steveharris89: i am Aeronautic Engineer
steveharris89: i work on aircraft
« Zuletzt geändert: 30. August 2013 um 11:12 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20631
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Steve <steveharris89@yahoo.com>
Antwort #4 - 30. August 2013 um 11:14
 
@ x5dr

Überprüf mal bitte die Quelltext - 2 Mails und die beiden Quelltext sind identisch - das kann nicht sein!

Änderung:
Repariert, richtigen Quelltext eingefügt...
« Zuletzt geändert: 30. August 2013 um 13:24 von Opfer »  
Zum Seitenanfang
 
IP gespeichert
 
Deltaromeo
Ex-Mitglied


Re: Steve <steveharris89@yahoo.com>
Antwort #5 - 30. August 2013 um 13:16
 
Code
Alles auswählen
Received: from [74.76.21.66] by web161802.mail.bf1.yahoo.com via HTTP; Sun, 18 Aug 2013 23:10:23 PDT

IP:		74.76.21.66
Decimal:	1246500162
Hostname:	cpe-74-76-21-66.nycap.res.rr.com
ISP:		Time Warner Cable
Organization:	Time Warner Cable
Services:	None detected
Type:		Broadband
Assignment:	Dynamic IP
Country:	United States
State/Region:	Massachusetts
City:		Pittsfield 



Zitat:
Date: Sun, 18 Aug 2013 23:10:23 -0700 (PDT)
From: Steve Harris <steveharris89@yahoo.com>



Code
Alles auswählen
Received: from [24.234.211.233] by web161806.mail.bf1.yahoo.com via HTTP; Sun, 18 Aug 2013 14:39:34 PDT

IP:		24.234.211.233
Decimal:	418042857
Hostname:	wsip-24-234-211-233.lv.lv.cox.net
ISP:		Cox Communications
Organization:	Cox Communications
Services:	None detected
Type:		Broadband
Assignment:	Static IP
Country:	United States
State/Region:	Nevada
City:		Las Vegas 



Zitat:
Date: Sun, 18 Aug 2013 14:39:34 -0700 (PDT)
From: Steve Harris <steveharris89@yahoo.com>


« Zuletzt geändert: 30. August 2013 um 13:16 von »  
Zum Seitenanfang
 
IP gespeichert
 
x5dr
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4945
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Steve <steveharris89@yahoo.com>
Antwort #6 - 30. August 2013 um 13:20
 
Zitat:
Date: Sun, 18 Aug 2013 23:10:23 -0700 (PDT)

Zitat:
Sun, 18 Aug 2013 14:39:34 -0700 (PDT)


Ich frage mich, wie er an einem Tag so schnell von A nach B kommt. hä? Pittsfield und Las Vegas liegen doch ein schönes Stück von einander entfernt.
« Zuletzt geändert: 30. August 2013 um 13:30 von x5dr »  
Zum Seitenanfang
 
IP gespeichert
 
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20631
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Steve <steveharris89@yahoo.com>
Antwort #7 - 04. September 2013 um 02:49
 
x5dr schrieb on 30. August 2013 um 00:48:
Er sagt, er käme aus Dallas.


Cox Communications bietet in Texas keinen Internetzugang an.

http://ww2.cox.com/

Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema