Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Liliya <kueoroliliya@yandex.com> (Gelesen: 1901 mal)
 
Atarianer
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam!

Beiträge: 482
Standort: Weinsberg
Mitglied seit: 13. Juni 2009
Geschlecht: männlich
Liliya <kueoroliliya@yandex.com>
16. April 2014 um 02:13
 
Forgive me, but I at all do not know that to begin the letter to you.
And here I have decided to write to you what will get acquainted with you.
Fairly it wash the first experience dialogue on the Internet and I at all do not know from what to begin my letter.
Well in the first my name is Liliya, I from Russia to me 33 years.. My city is called Alatir
I think that you perfectly know the country Russia. After all it is the greatest country in the world!
And to you the city likely hardly to you is known, because it is a small country town.
And where do you live? What your city? To you is that interesting to tell to me?
I work in post branch. As I grew without parents to itself could not provide worthy formation. As soon as I was disaccustomed at school to me it was necessary to go at once to work.
And you as whom work? You like your work?
I work mail of Russia post!I like my work .
I can tell about myself that I the beautiful girl, at me very beautiful eyes. I think you estimate it =)
As I very kind also like to help all. I do not like to stand aside if who be requires the help and I can help it.
As I very active, love sports, rest on the nature. IN THE MORNINGS I do warm-up and I would run what to hold the body in a tone.
As I do not have bad habits, I do not smoke and I do not drink. I have no against those men which drink for taste (instead of as at us in Russia, men will get drunk, then beat the girls and feel heroes... It I hate!) 
I do not drink and I do not smoke, because I realise that I the future mother. I love children and I want. And consequently I would conduct a healthy way of life that in the future to give birth to healthy children.
Why you have solved gets acquainted on the Internet?
I have solved will get acquainted on the Internet because I could not find the worthy man at home, and on sites of acquaintances have been told that foreign men better. They are careful, want a strong family and respect girls. Therefore I have decided to try to find the love in the Internet. And you why search for the girl on the Internet?
I send you the photos. I hope that they will like you also I will cause interest in you.
I with the big impatience will wait for your following letter.
Also I will read it with the big interest.
You are very interesting to me
I hope that I was pleasant to you and you shortly to me write.
Your new friend Liliya !

Это сообщение свободно от вирусов и вредоносного ПО благодаря защите от вирусов avast!
https://www.avast.com



Off Topic KommentarMore pictures in the gallery: Smiley


Spoiler für Quelltext:
From - Wed Apr 16 00:15:46 2014
X-Account-Key: account1
X-UIDL: ABNVfbwAABERU01KTwAAAPAQspg
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Mozilla-Keys:                                                                                 
X-Apparently-To: xxx@xxx.xx via 188.125.83.999; Tue, 15 Apr 2014 15:03:43 +0000
Received-SPF: pass (domain of yandex.com designates 84.201.143.143 as permitted sender)
X-YMailISG: ugiNtsIWLDtQxVAv.Egb7mLvQj_Af3QUu32XuXhCYmy6MiDL
HgUNOLe9.gh_cLF5YRFEUBsPDV96VE8com2mTNu6t4ll473Lo4Nj2hZl_0T7
_boQBF85B9XJS1y1V1shryaub1VaRT66QfFPPbV9jPuMs.s23JwIp9q7Xz1r
z1CjY8RLAdlhFZbVo7bqk0a4bFXDWr6yH9f0cJFkyXHWPmCdKwteCkfTg3VS
qU89jJ7ZACAYuExYPDvcbtHrxe1aZcvMPhBV00pJg.ZcewnfJPxhsA7.Lopm
qnZvAUg3Y5jwP1t.VXhCixKSbngCG8QgMJCIVQqC_HliJyzK4tnyLZwhf8y.
N2QrqzJnVcun3YXN_BduWn5JPd3uFkbliUFaLnvkBz837CgpT.0GuaThq9f0
CNgLB0o99Kcf1CaZeJ0dm9KUVpIcMTl.yqkrQHK0.8uCHq1FXTXeuUz3QxCv
hou.TRHOg7Iy.4PD28tfii_ZJGn6DXiy8rmPZCViPQolkI.1f5KfVv2o1rzr
nGLsRvAc5g1PjdbnoLJpS37AS2imKgV0vUz8XUUY8tpNKDxQt6bEmom9u3CH
pMXCsn38IdFPfqvSW0NQGtAl1wnzg94xbTvGyptfqvnmiBpuli1akAgbhH9b
ufMGMAPHTFDdMJt73DBCLqqxCy7SWLn2foJFPFbo._ECUR7qlIq5fC4lw8.b
JGWgL5cmMZHKZtNB_6Y6L2TnV_vjGCKHo.6JeJa8PTBoZ13mHgN5_8IC2usp
C0.7fgSAbVoDXHUyCnH15kQ9SyvB5YVGcrTWD2dNzrd7PF3UB1GS4KHUsg5.
LS_IIghM.OceRuCa2FZt6BJNJnlKm3nGsVJIHcgWPTO4TiAStt6gVpnBRfey
Q_Qh1njvFbEXDS99W.gyapupjBn3A2AfmYzUrVnc.2UzryiqyD.yB7mUZThX
EXsnfAZdaEAz15uM1gznuihnTH2jLGBEmgkXFzSdcVXCjbBG39fCBp6BxTv3
J4WmCXYctjand6jUBQCSzokhJZJSOw8CwmdYMFqJy5MHHRMB1cI3eHYbuB7.
CARiIeq09pao3jST2GYo6ddLFlfKjRm9H2XxhvWyht6OLApO2n93NLo.aQYz
.hevgk0VWGgnAEtL3tbWh2VSF63ypW7GTu.z9tNBhsdnrGnDcyyIYt5PkecE
GkglvSK0B6rFggVMpzfNDAtbV7sjaHXWBsPVM.8O9myHy9Tm8pIriw.TwQoX
x3elf2nVoKHgnFCJg5pKI8vWOZWEmr_0mFRO45So.DnR7SqPeJt4eYd3Ax15
Ke5WA0oj8ZhmrH8v1dpcOdr9O_47PQaTQfZ3ZUZ5_nGpIxVEzT2cPRjkcJ_4
_l379Cu.pKewgfLSXF26gaOBJWLKxM1Jllngb8En1gIBzOUVpU_YdcdznzNS
oh3GAIsnhQS65SMNAbRJImjv3YsBnm3mFg6pKzgl4nLnGbYLFdlQZ4bx7UEC
mJsbc5GCOJkYU6vrt1Dp2FjDFDtwOniBkBvlXaPKI3PVIuQdVz64wROsodsd
vBh01XzqPpJZ5o9e1YQUSNEeoqvcGAweQh595lk-
X-Originating-IP: [84.201.143.143]
Authentication-Results: mta1070.mail.ir2.yahoo.com  from=yandex.com; domainkeys=neutral (no sig);  from=yandex.com; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO forward10l.mail.yandex.net) (84.201.143.143)
  by mta1070.mail.ir2.yahoo.com with SMTPS; Tue, 15 Apr 2014 15:03:42 +0000
Received: from smtp4h.mail.yandex.net (smtp4h.mail.yandex.net [84.201.186.21])
     by forward10l.mail.yandex.net (Yandex) with ESMTP id 8DA53BA1082
     for <xxxx@xxx.xx>; Tue, 15 Apr 2014 18:55:46 +0400 (MSK)
Received: from smtp4h.mail.yandex.net (localhost [127.0.0.1])
     by smtp4h.mail.yandex.net (Yandex) with ESMTP id 487222C352A
     for <xxx@xxx.xx>; Tue, 15 Apr 2014 18:55:46 +0400 (MSK)
Received: from ppp109-252-2-98.pppoe.spdop.ru (ppp109-252-2-98.pppoe.spdop.ru [109.252.2.98])
     by smtp4h.mail.yandex.net (nwsmtp/Yandex) with ESMTPA id gLVc95FFl5-tiXGpEqH;
     Tue, 15 Apr 2014 18:55:44 +0400
X-Yandex-Uniq: c09729d8-5479-413a-a72d-47b00b363634
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1397573745;
     bh=AB5mcSuRl3nEEGqp1U7dy9EvD3bsDHEX+bT+h4Jn9sI=;
     h=Date:From:X-Mailer:Reply-To:X-Priority:Message-ID:To:Subject:
      Mime-Version:Content-Type:X-Antivirus:X-Antivirus-Status;
     b=Wkb4c6qZoL46SclqokCCJYH2Y69kV2nOMsAw6OAJS7rRIU/XNCA++FF87/G8yxlx4
      kJ1ILrbO5fUxroYAKDQNlGqhfgJ7sKWLaeWt3/50qvuRlb6GxZOD6mrhPYEVE8hDye
      eeG/ZcMHptl/rTxWW2wE1hF6ilJVwEIkuIT7P6+Q=
Authentication-Results: smtp4h.mail.yandex.net; dkim=pass Quelltext.i=@yandex.com
Date: Tue, 15 Apr 2014 18:39:44 +0400
From: Liliya <kueoroliliya@yandex.com>
X-Mailer: The Bat! (v3.5.30) Professional
Reply-To: Liliya <kueoroliliya@yandex.com>
X-Priority: 3 (Normal)
Message-ID: <1398280618.20140415183944@yandex.com>
To: xxx <xxx@xxx.xx>

Content-Type: multipart/mixed; boundary="----------4C712E39E679A7"
X-Antivirus: avast! (VPS 140415-0, 15.04.2014), Outbound message
X-Antivirus-Status: Clean
Received: from 188.125.83.108 (188.125.83.108) by 46.228.37.60(46.228.37.60); Tue, 15 Apr 2014 15:03:43 +0000

------------4C712E39E679A7
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable


Hört sich ja nicht ganz schlecht an. Schön, dass sie auch gleich ein Foto beilegt. Ob es vielleicht schon hier vorhanden ist?
Siehe an: Mal wieder eine einfache Russin, die Bat benutzt! Das riecht doch stark nach Scam.
« Zuletzt geändert: 16. April 2014 um 14:07 von Stiray » 
Grund: ru10822 

jd334.jpg ( 37 KB | Downloads )
jd334.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Uli
General Counsel
***
Offline



Beiträge: 30365
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Liliya <kueoroliliya@yandex.com>
Antwort #1 - 16. April 2014 um 03:07
 
Das Gesicht ist bereits hinreichend bekannt. Die Mail soll aus Alatir kommen, doch warum über eine lokale Telefongesellschaft aus Moskau????

Code
Alles auswählen
IP-Adresse: 	109.252.2.98
Ländercode der IP: 	RU
Land der IP: 	ip address Russian Federation
Region der IP: 	Moscow City
Stadt der IP: 	Moscow
Postleitzahl der IP: 	109431
Breitengrad der IP: 	55.7522
Lägengrad der IP: 	37.6156
ISP dieser IP: 	OJS Moscow city telephone network
Organisation: 	Moscow Local Telephone Network (OAO MGTS)
Hostname der IP: 	ppp109-252-2-98.pppoe.spdop.ru 



Identische Eingangsmail bei Liliya <lilabnostik@yandex.com>!
« Zuletzt geändert: 16. April 2014 um 03:09 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 68550
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Liliya <kueoroliliya@yandex.com>
Antwort #2 - 16. April 2014 um 13:52
 
In dem Fall sind die anderen Daten auch interessant.

Zitat:
from ppp109-252-2-98.pppoe.spdop.ru (ppp109-252-2-98.pppoe.spdop.ru [109.252.2.98]) by smtp4h.mail.yandex.net (nwsmtp/Yandex) with ESMTPA; Tue, 15 Apr 2014 18:55:44 +0400
Date: Tue, 15 Apr 2014 18:39:44 +0400
From: Liliya <kueoroliliya@yandex.com>
X-Mailer: The Bat! (v3.5.30) Professional


Gerade herein gekommen:

Zitat:
from ppp109-252-2-98.pppoe.spdop.ru (ppp109-252-2-98.pppoe.spdop.ru [109.252.2.98]) by smtp6.mail.yandex.net (nwsmtp/Yandex) with ESMTPA; Tue, 15 Apr 2014 18:50:05 +0400
Date: Tue, 15 Apr 2014 18:43:36 +0400
From: Liliya <lilieyuigbosr@yandex.com>


Uli schrieb on 16. April 2014 um 03:07:
Identische Eingangsmail bei Liliya <lilabnostik@yandex.com>!


@ Uli

Nicht nur identische Eingangsmail sondern auch identische Dame.

Galerielinks: 

ru10822 https://www.dating-fraud.de/thumbnails.php?album=3970
ua11037 https://www.dating-fraud.de/thumbnails.php?album=7609

« Zuletzt geändert: 16. April 2014 um 14:03 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Atarianer
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam!

Beiträge: 482
Standort: Weinsberg
Mitglied seit: 13. Juni 2009
Geschlecht: männlich
Re: Liliya <kueoroliliya@yandex.com>
Antwort #3 - 26. April 2014 um 01:21
 
Nachdem ich nun ein paar Tage ihr nicht antwortete, bekomme ich nun die gleiche email wie zuvor. Exakt der gleiche Text, den ich hier wohl nicht zu wiederholen habe. Auch das gleiche Foto wurde wieder mitgeschickt! Auch hier erspare ich mir, dieses Bild wieder einzustellen. Aber der Kopf der email könnte aufschlussreich sein!? Hier ist er:

Spoiler:
From - Fri Apr 25 18:23:17 2014
X-Account-Key: account1
X-UIDL: AO5EfbwAAAKcU1pk5gAAAHfvLbk
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
X-Apparently-To: xxxx@xxx.xx via 188.125.68.777; Fri, 25 Apr 2014 13:36:38 +0000
X-YahooFilteredBulk: 84.201.143.139
Received-SPF: pass (domain of yandex.com designates 84.201.143.139 as permitted sender)
X-YMailISG: XMkkLlYWLDuhAaYeIGpBAGKqozHSzswZZAP0XVgOoFsAqtGF
9uFArRQOGOygl9SvY9ySH5GEfGsSCxhisk.4SfNu0hZUlHr8xab9e5wUxS6t
cEifxM8mg3zn._q__Zdv7ITH3Bkjr23RAzyPG1lJnfI6kB..Guti_DspM2Si
MAonmMAK7iJlPhBQfll9wOd5PVkMlCpvvxD7AzXGHgPjYj0M28eZApB_1hCv
tkUXyZFpOlvsGGocuXucUSjtFNt4mn6lF1cRGl8WPwzOlVPaEJKyFpn8gBLb
3cg8qTD_o9Rf_jMAQjOVjNgwG375fpgujVF082GCd1YMdMuwtunkpddhA9te
jt9Q1Ek5ebVNU5h25SQcv8KCu6IxUmC0BAL4v2DM7APB.NeX7vmIahrTu2AE
NEg_zaOZhuqOJSxwGBBH5v3Nclc7CvcJLrrwvvbtywIxxUSwOttnJ9MKiyNy
4_uQ0pSziIA4JZDNJOpwQigeJxMsbtAMhGtaR1kwd6LJJp_hwJqABzarAHSL
NNxt8k5oRt3.gFoJOrEdicNfYG6qRQvB.Q41iuU0LDHP_zxdXjBgPfEfvE2c
JZMkYKw8ybZe4A4teq5T1WanX9Wgt1dDETnvuXcUI5ttA026VcVZpXehR.CH
qEZBe1X6DJXnOQ49pir4qy.qLZZmC2MAkfJGQZCuSRVSe_z_NVSM4GEXYUlX
U11ESICW90Ofpw44SNh5XPPy.Dp6KzLvbXnmIKnTfc4U9jpqFgC.C5htTMVp
mmRJTy2OAyn7eEIZ98kB.wE3_QpJ1i1BuESuxcDVuga0R36mkx2LAkFhkM29
J1YxLhqREbERhG2cQSY4maVeQ8vYoEXVEYtVG7dwwWr1XD1OdzUd8CrpIxl_
HBN9VLtsPUilT.QLaok0WXi.XwtAJbUCZO5UI60UokMwBXMzjZdeqhMTM7If
PeEOcFu64r4dsRMLiSxSU8.taMW6jVtptZFWUnXe5mv5iPv_89OavvgNErrG
uDRU0s0puzLOMpEScDbxFlrm0BZ1LIas1mvKPRucu_BftH7wOxjV0VhbqyHA
wduw8aYzfshkraQ9OB6_Q5q2XVK22puWtrBMPmAgkSW5FOfRPp106xs_VLP5
hnlF0SrBiQSpyYaGdXT.EKfEvHqZTAltffVH6EG3RUo5yUC._OlZG2U6dVf9
nmlbxoeq8Qxiy2euul5VvveswYJKvE8duvGxUh6NNjCEPPQoyl7JUIrmwtXy
5o0G9HO9B_Vgcq_g2KZed9jw.h.XBY58uF9JgfqYsTWdhmEVt5_t4BLWCqvp
sg1seZiSxpo1pZ7JBzIV2ZpiTqF5NuMc1PIo9vgjwLflaNecb2QgFHR5p6Pu
UPrjTLSgPIwz_dI5Y.TMWa4c16uRQTObz0DenqzbvaO65JqX_7oB.qsO61l6
gnfWpdP.JFyg_FIPdr5sN21t96Dt_gBvRV3aQM1xhAUR1iVxnvhgBgnk8Yk7
UOEfLSp8FfQohwsvglDwFFdUSobYgUEqEdCLZK09hkvDZQ--
X-Originating-IP: [84.201.143.139]
Authentication-Results: mta1096.mail.ir2.yahoo.com  from=yandex.com; domainkeys=neutral (no sig);  from=yandex.com; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO forward6l.mail.yandex.net) (84.201.143.139)
  by mta1096.mail.ir2.yahoo.com with SMTPS; Fri, 25 Apr 2014 13:36:38 +0000
Received: from smtp18.mail.yandex.net (smtp18.mail.yandex.net [95.108.252.18])
     by forward6l.mail.yandex.net (Yandex) with ESMTP id DF7D614E135C
     for <xxx@xxx>; Fri, 25 Apr 2014 17:35:06 +0400 (MSK)
Received: from smtp18.mail.yandex.net (localhost [127.0.0.1])
     by smtp18.mail.yandex.net (Yandex) with ESMTP id 5673D18A0786
     for <xxx@xxx>; Fri, 25 Apr 2014 17:35:06 +0400 (MSK)
Received: from ppp158-255-161-73.pppoe.spdop.ru (ppp158-255-161-73.pppoe.spdop.ru [158.255.161.73])
     by smtp18.mail.yandex.net (nwsmtp/Yandex) with ESMTPA id nTPOK28in9-Z5NSO0aZ;
     Fri, 25 Apr 2014 17:35:05 +0400
X-Yandex-Uniq: 1a10d586-1ebf-4966-8d01-90ed1de6519d
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.com; s=mail; t=1398432906;
     bh=4NfpFoaXHvPXYx7c5QO0McVrEskqocnpSHYWOJl6dj0=;
     h=Date:From:X-Mailer:Reply-To:X-Priority:Message-ID:To:Subject:
      Mime-Version:Content-Type;
     b=IBxwsxFE/y5Q8WchCPeJ14+Pe+SFG/Y7zR0vIw0Dnu2BcNPJBDTaaeOKRd4Un7nrM
      ldhd9iNouNihfsJ8ddqox02961L9vl8j2++e04W1H+Ldv3vfURpNRCjP/lE8jNzrBJ
      ZzH69hS7gwQXzmf7r1YR7e1VyosZeo671u/31CIE=
Authentication-Results: smtp18.mail.yandex.net; dkim=pass Quelltext.i=@yandex.com
Date: Fri, 25 Apr 2014 17:11:17 +0400
From: Liliya <kueoroliliya@yandex.com>
X-Mailer: The Bat! (v3.5.30) Professional
Reply-To: Liliya <kueoroliliya@yandex.com>
X-Priority: 3 (Normal)
Message-ID: <1993286121.20140425171117@yandex.com>
To: xxx <xxx@xxx>
 

Wie üblich wurde wieder Bat benutzt!
« Zuletzt geändert: 26. April 2014 um 01:22 von Atarianer »  
Zum Seitenanfang
 
IP gespeichert
 
x5dr
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4914
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Liliya <kueoroliliya@yandex.com>
Antwort #4 - 26. April 2014 um 01:49
 
Mail über Russland mit dem gleichen, lokalen Telefonanbieter wie vorher! Smiley

Code
Alles auswählen
IP:	158.255.161.73
Decimal:	2667553097
Hostname:	ppp158-255-161-73.pppoe.spdop.ru
ISP:	OJS Moscow city telephone network
Organization:	Moscow Local Telephone Network (OAO MGTS)
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Country:	Russian Federation
State/Region:	Moscow City
City:	Moscow 



Atarianer schrieb on 26. April 2014 um 01:21:
Wie üblich wurde wieder Bat benutzt!


Smiley

Zitat:
Date: Fri, 25 Apr 2014 17:11:17 +0400
From: Liliya <kueoroliliya@yandex.com>
X-Mailer: The Bat! (v3.5.30) Professional


Smiley Smiley Smiley
« Zuletzt geändert: 30. April 2014 um 00:20 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema