Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Heisses Thema (Mehr als 10 Antworten) Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org> (Gelesen: 7037 mal)
 
restevek
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 221
Standort: Nürnberg
Mitglied seit: 18. Juni 2014
Geschlecht: männlich
Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
28. September 2014 um 17:16
 
Hello xxxx its nice to see i have email form you today and its nice meeting you again.I hope you are doing great and safe right now.Thank you for telling me about your self and i hope in your next reply you will attach some of your photo.
Well let me tell you about my self now, my name is Carol i am 34 years, single,no kids and never been married,i am from Philippines but i have been here in China for almost 4 years working as a servant/nanny in a Chinese family.
My parents are still both alive, i am the eldest child and i have 1 brother and 1 sister but they have their own family and have their own kids now.
I register in the site to find the right man for me, the man who 
I hope to hear back from you again.Have a nice day and be safe.
Yours,
Carol Durchgedreht
p.s i attach some of my pictures here that i am with my family and friends

Spoiler für Header:
Return-Path: <sweet_carol1980@yahoo.com>
Received: from nm28.bullet.mail.bf1.yahoo.com (nm28.bullet.mail.bf1.yahoo.com [98.139.212.187])
     (using TLSv1 with cipher RC4-SHA (128/128 bits))
     (No client certificate requested)
     by mtaiw-mac03.mx.aol.com (Internet Inbound) with ESMTPS id CFB867000008C
     for <xxxx>; Sun, 28 Sep 2014 08:41:38 -0400 (EDT)
Received: from [66.196.81.174] by nm28.bullet.mail.bf1.yahoo.com with NNFMP; 28 Sep 2014 12:41:38 -0000
Received: from [98.139.212.209] by tm20.bullet.mail.bf1.yahoo.com with NNFMP; 28 Sep 2014 12:41:37 -0000
Received: from [127.0.0.1] by omp1018.mail.bf1.yahoo.com with NNFMP; 28 Sep 2014 12:41:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 556094.35475.bm@omp1018.mail.bf1.yahoo.com
Received: (qmail 19131 invoked by uid 60001); 28 Sep 2014 12:41:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1411908097; bh=qLNlz14+nEd4cVGm67/sSI/52l05dkM28asN3PNCwC0=; ontent-Type; DUh7JOefhccz4=
X-YMail-OSG: SGLyFcsVM1mBcd4nGY5uPGZmksl5iNE2Xm3aL1kpDnTrlsA
IfzH9zYlgHHWHjnfMjUFr6n6Z75YMlmPxU2TvfJNvG31SBDv4sTEJjTZxMSs
QRTwrgoLnflSSQOS1HLxLzkGNmLNIlbOFEk8iX91x0fAEiLGXUZQfI8pm2hG
Wkw.DTAn_H.V4i85LDDtrmvm2oiylTYLnmg7YEm9G9rVvABjYsXiv6k_AB0A


TciDx8i3SDxESjdmO27tB3WlFr0NEd6t04I9QdWsg01X8sRxVm50RSDkQo.e
GO2hYbtfkrt.GW2shdu4pdOoyLhYzcOWMkcom8Fyjspsh9nnz1Ltetes.yzH
eAO66ZClSzkHvbhlFWwDqcQydZtI9jAVBC77ALEI0Xn5BFBSpnx4._ugDeSM
18qvy19dB0snR.aByW1kBU6FBuzGJ2bm8qLj3JcqzqxBFL1rJM8aSqMGqxU5
8xLE45m7OKT9KVoNvYxi1LF_k3.Xf8K06iu4QWSx3lpvRNiTILAioZFdb1ki
nO5o_nF4HopnLXUYlKsTdbTAW.Fp1pTMNugRhkmBAKsd_mY9_EHREBPKAVWZ
9cck21OCZnD9qJBGYyHpctEtUub7.5_iudThzN2y_VZ450wnE
Received: from [113.83.125.50] by web161906.mail.bf1.yahoo.com via HTTP; Sun, 28 Sep 2014 05:41:37 PDT
X-Rocket-MIMEInfo: AQE-
X-Mailer: YahooMailWebService/0.8.203.696
References: <8D1A909B7D74D9D-E3C-2862C@webmail-vm052.sysops.aol.com>
Message-ID: <1411908096.88606.YahooMailNeo@web161906.mail.bf1.yahoo.com>
Date: Sun, 28 Sep 2014 05:41:36 -0700
From: carol villanueva <sweet_carol1980@yahoo.com>
Reply-To: carol villanueva <sweet_carol1980@yahoo.com>
Subject: Re: I start ...
To: xxxxxx>
In-Reply-To: <8D1A909B7D74D9D-E3C-2862C@webmail-vm052.sysops.aol.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="245827083-503900696-1411908097=:88606"
x-aol-global-disposition: G
X-AOL-VSS-INFO: 5600.1067/98281
X-AOL-VSS-CODE: clean
X-AOL-SCOLL-AUTHENTICATION: mtaiw-mac03.mx.aol.com ; domain : yahoo.com DKIM : pass
X-AOL-SCOLL-DMARC: mtaiw-mac03.mx.aol.com ; domain : yahoo.com ; policy : reject ; result : P
Authentication-Results: mx.aol.com;
     spf=pass (aol.com: the domain yahoo.com reports 98.139.212.187 as a permitted sender.) smtp.mailfrom=yahoo.com;
     dkim=pass (aol.com: email passed verification from the domain yahoo.com.) header.d=yahoo.com;
     dmarc=pass (aol.com: the domain yahoo.com reports that Both SPF and DKIM strictly align.) header.from=yahoo.com;
x-aol-sid: 3039ac1adec9542802026dbe
X-AOL-IP: 98.139.212.187
X-AOL-SPF: domain : yahoo.com SPF : pass

--245827083-503900696-1411908097=:88606
Content-Type: multipart/alternative; boundary="245827083-1588064072-1411908097=:88606"

--245827083-1588064072-1411908097=:88606
ContentReturn-Path:
« Zuletzt geändert: 05. April 2015 um 06:16 von Stiray » 
Grund: Themenbeschreibung 

image8.JPG ( 195 KB | Downloads )
image8.JPG
image31.JPG ( 303 KB | Downloads )
image31.JPG
image83.JPG ( 289 KB | Downloads )
image83.JPG
image119.JPG ( 179 KB | Downloads )
image119.JPG
jpg5.JPG ( 259 KB | Downloads )
jpg5.JPG
image25.JPG ( 201 KB | Downloads )
image25.JPG
Zum Seitenanfang
 
IP gespeichert
 
Indikation
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20646
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #1 - 28. September 2014 um 17:29
 
 
Die Mail kommt über China. Zwinkernd

Code
Alles auswählen
IP Address 	113.83.125.50
Host 	113.83.125.50
Location 	CN CN, China
City 	Guangzhou, 30 -
Organization 	China Telecom Guangdong
ISP 	China Telecom Guangdong
AS Number 	AS4134 Chinanet 

« Zuletzt geändert: 08. Dezember 2014 um 12:05 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20646
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #2 - 28. September 2014 um 17:56
 
@ restevek

Auch wenn du den Header 2 oder dreimal hintereinander reinkopierst, ändert sich nichts an meiner Auflösung. Zwinkernd

Möglich, daß sie echt ist, aber ob sie es ehrlich meint, wirst du wohl selbst herausfinden müssen.
Bisher ist nichts Verdächtiges zu entdecken - außer, daß sie 2 Accounts auf Skype mit dieser Email-Adresse hat.
Beide Accounts sagen, daß sie sich Carol Villanueva nennt; 1x aus Philippinen und 1x aus China.
« Zuletzt geändert: 05. April 2015 um 06:10 von Stiray »  

2014-09-28_175548.jpg ( 19 KB | Downloads )
2014-09-28_175548.jpg
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30555
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #3 - 30. September 2014 um 13:05
 
Möglich, dass sie echt ist, möglich aber auch, dass hier ein vorhandenes Profil gekapert wurde. Ich denke, dass hier noch viel Arbeit wartet und wir bis zum Bettelbrief warten müssen.
Aber auch dann wird vermutlich offen bleiben, ob es sich tatsächlich um Scam handelt oder um Bettelei. Da bin ich mal gespannt, wann und in welcher Form hier die Geldforderung (wenn überhaupt) kommt.
« Zuletzt geändert: 05. April 2015 um 06:11 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
restevek
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 221
Standort: Nürnberg
Mitglied seit: 18. Juni 2014
Geschlecht: männlich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #4 - 02. Oktober 2014 um 20:20
 
BEIWEISS !! Durchgedreht
Hello dear how are you? I hope you are enjoying your day at work today and thinking about us being together very soon. My dear i think you misunderstand what i said in my previous letter to you i didn't say your house is dirty i am just saying that we will help each other to make your house clean and beautiful because that i what partners do, helping each other.

I will not discuss to my madam if i am not yet ready to meet you , i want us to meet that is why i am trying every possible things needed for me to go there. The feeling i have for you is not just a simple want, the feeling i have for you is love.

I tried to call the agency this afternoon and they said i should send them email and write there anything i want to know and i should give them the airport name that i need to arrive there so they can check also the cost of the visa and the ticket.And as they said the easiest visa i can get here is a tourist visa.Please let me know what is the name of the airport name there dear so i can write them a letter tomorrow.

My Chinese madam said if i will go to German Embassy its more difficult to process with them because have many requirements needed and i need to travel and it will takes time and spend more money but if the agent will do all the processing for us all i need to do is give the important requirements needed and the payment for the visa and ticket and then i will wait for their email or call when i everything is ready.

I go to take my shower now and hope to hear back from you again my dear.Take good care of your self always because i care for you a lot.Hugs and kisses from me to you.

Yours,
Carol Kuss
« Zuletzt geändert: 05. April 2015 um 06:11 von Stiray »  

image61_verpixelt_001.jpg ( 146 KB | Downloads )
image61_verpixelt_001.jpg
Zum Seitenanfang
 
IP gespeichert
 
restevek
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 221
Standort: Nürnberg
Mitglied seit: 18. Juni 2014
Geschlecht: männlich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #5 - 03. Oktober 2014 um 12:42
 
This is the letter I've sent to the travel agency my dear.

From: carol villanueva <sweet_carol1980@yahoo.com>
To: "info@rainbowtraveltours.org" <info@rainbowtraveltours.org>
Sent: Friday, October 3, 2014 3:01 PM


Hello Sir/Ma'am,

My name is Carol Villanueva i am from Philippines but i have been working here in China for a few years i am the one who called the other day, as i have said i want to visit my boyfriend in Germany and my madam told me that you can help me to find out how is the processing and the cost of the visa and ticket to Munich Germany/ Frankfrut Germany and  you will process it for me .I hope to hear back from you soon.Have a great day.

Yours,
Carol VillanuevaThis is the letter I've sent to the travel agency my dear.

Spoiler:
Return-Path: <sweet_carol1980@yahoo.com>
Received: from nm38.bullet.mail.ne1.yahoo.com (nm38.bullet.mail.ne1.yahoo.com [98.138.229.31])
     (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
     (No client certificate requested)
     by mtaiw-aae01.mx.aol.com (Internet Inbound) with ESMTPS id 9A09470000086
     for <xxxx>; Fri,  3 Oct 2014 03:07:22 -0400 (EDT)
Received: from [127.0.0.1] by nm38.bullet.mail.ne1.yahoo.com with NNFMP; 03 Oct 2014 07:07:22 -0000
Received: from [98.138.100.118] by nm38.bullet.mail.ne1.yahoo.com with NNFMP; 03 Oct 2014 07:04:24 -0000
Received: from [66.196.81.171] by tm109.bullet.mail.ne1.yahoo.com with NNFMP; 03 Oct 2014 07:04:23 -0000
Received: from [98.139.212.198] by tm17.bullet.mail.bf1.yahoo.com with NNFMP; 03 Oct 2014 07:04:23 -0000
Received: from [127.0.0.1] by omp1007.mail.bf1.yahoo.com with NNFMP; 03 Oct 2014 07:04:23 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 800108.6875.bm@omp1007.mail.bf1.yahoo.com
Received: (qmail 25121 invoked by uid 60001); 3 Oct 2014 07:04:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1412319863; bh=YaitA2pOnBhNrAtcjRS4pNYb+qxQnDOvTIYakx2prkM=; ontent-Type; +WVj2z945zomg=
X-YMail-OSG: 13_pSxYVM1lMWDittuzJ37FYIx7vzM0k805v8bSBxf84S_C
iQy1Cvgl9qW2Zcsa_kGy0rs99POQayGVc24aZKhnn6_Wwt1WduSNJWQtRW0q


9MbZyXfhQNm2zL7rsAlC_nxhrtk2qapxnzTnXCK4g.hNr7.ygTt0XvlDMpGs
N7CEzZjD6ZTC6VbtxBd5byzmJn0fmHxJ7gNTg.abhLc8_YiftT140yn3aha0
gwYuGiGWwCBkwiAZjLa5rqSw0hB4Zx9VjTVqLkepgQOTj3iwXQKe1zIVtDYe
5OMKJejhPhxph4kyTyQUpfCxjk3dhLDTaqp8Nobpr5eJ0zM0HDVsc369k1BD
DYZ1N7NkJk9Cb2259yuylwTYHw4Le8lXmjWlGPiUzlttutwMPsmwkL.kIJ0n
.rUvlkz.OPq88_QB5iX9PXU5aJaHMMj6mpa0DJSY1NRkG02TjdxVc4l4nTzG
ED5Z7BVRK0sud7QFwF3wMj4PtguQCcGLIwKWnhGU5x8R5gTWgJMpJRV_XT3h
Ol7qb_1Cvg_FrDA--
Received: from [183.25.197.79] by web161904.mail.bf1.yahoo.com via HTTP; Fri, 03 Oct 2014 00:04:23 PDT
X-Rocket-MIMEInfo: AQE-
X-Mailer: YahooMailWebService/0.8.203.696
References: <1412319674.87697.YahooMailNeo@web161904.mail.bf1.yahoo.com>
Message-ID: <1412319863.89691.YahooMailNeo@web161904.mail.bf1.yahoo.com>
Date: Fri, 3 Oct 2014 00:04:23 -0700
From: carol villanueva <sweet_carol1980@yahoo.com>
Reply-To: carol villanueva <sweet_carol1980@yahoo.com>
Subject: Fw: Munich Germany/ Frankfrut German
To: xxxxxxxx>
In-Reply-To: <1412319674.87697.YahooMailNeo@web161904.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1435348337-1190928159-1412319863=:89691"
x-aol-global-disposition: G
X-AOL-SCOLL-AUTHENTICATION: mtaiw-aae01.mx.aol.com ; domain : yahoo.com DKIM : pass
X-AOL-SCOLL-DMARC: mtaiw-aae01.mx.aol.com ; domain : yahoo.com ; policy : reject ; result : P
Authentication-Results: mx.aol.com;
     spf=pass (aol.com: the domain yahoo.com reports 98.138.229.31 as a permitted sender.) smtp.mailfrom=yahoo.com;
     dkim=pass (aol.com: email passed verification from the domain yahoo.com.) header.d=yahoo.com;
     dmarc=pass (aol.com: the domain yahoo.com reports that Both SPF and DKIM strictly align.) header.from=yahoo.com;
x-aol-sid: 3039ac1b015b542e4b2a2c2b
X-AOL-IP: 98.138.229.31
X-AOL-SPF: domain : yahoo.com SPF : pass

--1435348337-1190928159-1412319863=:89691
Content-Type: text/plain; charset=us-ascii


Reiseagentur kennt Sie von Ihrem Arbeitgeber - "hoches Vieh " und die sind ewig unterwges . Der agentur ist " info@ rainbowtraveltours.org "
« Zuletzt geändert: 05. April 2015 um 06:19 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
rud
Ex-Mitglied


Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #6 - 03. Oktober 2014 um 12:53
 
« Zuletzt geändert: 05. April 2015 um 06:20 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65485
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #7 - 03. Oktober 2014 um 13:20
 
Mail über China

Code
Alles auswählen
IP:	183.25.197.79
Decimal:	3071919439
Hostname:	183.25.197.79
ISP:	China Telecom Guangdong
Organization:	China Telecom Guangdong
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Country:	China
State/Region:	Guangdong
City:	Huizhou 



Zitat:
from [183.25.197.79] by web161904.mail.bf1.yahoo.com via HTTP; Fri, 03 Oct 2014 00:04:23 PDT
X-Mailer: YahooMailWebService/0.8.203.696
Date: Fri, 3 Oct 2014 00:04:23 -0700
From: carol villanueva <sweet_carol1980@yahoo.com>
« Zuletzt geändert: 05. April 2015 um 06:20 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
restevek
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 221
Standort: Nürnberg
Mitglied seit: 18. Juni 2014
Geschlecht: männlich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #8 - 03. Oktober 2014 um 19:33
 
Hello my dear Kuss i showed to my madam this thing and she called the agent and they explain to her what happened why their agency is there in that scam site, they said there is one man from another country who inquire for his girlfriend and that man send the money to them direct and the girl go to their office to submit the requirements needed, but after a few days him and his girlfriend had misunderstanding and the girl back out because she find out that man is have bad attitude(crazy) and she feel scared now to meet him so she go to there office again to get her documents and the money and she send back the money of the man.Now that man get angry to the agency why they let her get her documents without telling to them maybe that is why he did something to make their agency to look bad to everybody.

My boss is a Chinese people my dear and i never see African people in my entire life, their color is black right and i never see black man here in China and how can African people can do that kind of such things here in China and this is not their country, China is very strict country they will not allow other people from another country ruin their country.

Sometimes when people get hurt specially when the person they really care and love hurt them they can't accept it that is why they do bad things to make their feelings better and that  man is a example of a desperate and get crazy when they fall in love, they do bad things to ruin the life of other people also.

Yours,
Carol Kuss

Spoiler:
Return-Path: <sweet_carol1980@yahoo.com>
Received: from nm33.bullet.mail.ne1.yahoo.com (nm33.bullet.mail.ne1.yahoo.com [98.138.229.26])
     (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
     (No client certificate requested)
     by mtaiw-aae05.mx.aol.com (Internet Inbound) with ESMTPS id A948F7004337E
     for <xxxx>; Fri,  3 Oct 2014 09:20:23 -0400 (EDT)
Received: from [127.0.0.1] by nm33.bullet.mail.ne1.yahoo.com with NNFMP; 03 Oct 2014 13:20:22 -0000
Received: from [98.138.101.130] by nm33.bullet.mail.ne1.yahoo.com with NNFMP; 03 Oct 2014 13:17:03 -0000
Received: from [98.139.212.151] by tm18.bullet.mail.ne1.yahoo.com with NNFMP; 03 Oct 2014 13:17:00 -0000
Received: from [98.139.212.228] by tm8.bullet.mail.bf1.yahoo.com with NNFMP; 03 Oct 2014 13:17:00 -0000
Received: from [127.0.0.1] by omp1037.mail.bf1.yahoo.com with NNFMP; 03 Oct 2014 13:17:00 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 668100.75480.bm@omp1037.mail.bf1.yahoo.com
Received: (qmail 51558 invoked by uid 60001); 3 Oct 2014 13:17:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1412342220; bh=Zrrzibh3Ho7DjsAUtw74WJ3gM/JNapYWiG2hu1L2k4k=; ontent-Type; lpN6kRV2ppncc=
X-YMail-OSG: gz0hqLwVM1nG.0a6hS379MtsrXrM5WmkY.7pDtbL7dyYE0X
UHW4mL96FqC8JyAyBUtTNM7UjVEUi3.Hg64eenNDhPJNnEpMofNlptQpUNhX
zl2IKF.DjqYsJh3_dm3nCxTt71y2XCAdxQTucdquXyLnj.oRQ92B7cbNM4np
BpSxf8m9oLphR4LtCR6nXJKNsh1DtwVDGhIoVolsC4lkyiGm53w28l38Evlf
VbBh6BOb4knH.Urf51OokgzhoCbUs9OIlDhjfucbwST5eNd3H5Zr02czIFd9
ZXvvoIB.n3Nt210ZF5ncJNtTEuxdphh.J0zndGDkAef8hNopkQMf44Pl.Zqg


DtnmVcHOnoCxZYezLjnq.iBEWj5EUyVGsXp0_1EhL.vXspKrmiZ2XDWYvZAW
RykLPu0WsDf_j8K0PIlZoGy4yeMkUoNO6YAHoM7kU6HUFXj8_XXEFRg0zJeD
7vI1y.VA0ToveKtOyUOcAsquHJus._oFAV0G_W3jRiqPmotZUQSttsIRyRI1
D1uP5ijIFSLJsuJUKp0U9LYGWIy4cklQaX4qoheCwlXzN2qyAMyR_c63KL_r
Yqj.o1Q--
Received: from [116.5.217.86] by web161901.mail.bf1.yahoo.com via HTTP; Fri, 03 Oct 2014 06:17:00 PDT
X-Rocket-MIMEInfo: AQE-
X-Mailer: YahooMailWebService/0.8.203.696
References: <8D1AD15FF077B8A-2074-12FD3@webmail-vm056.sysops.aol.com>
Message-ID: <1412342220.74310.YahooMailNeo@web161901.mail.bf1.yahoo.com>
Date: Fri, 3 Oct 2014 06:17:00 -0700
From: carol villanueva <sweet_carol1980@yahoo.com>
Reply-To: carol villanueva <sweet_carol1980@yahoo.com>
Subject: Re: please....
To: xxxxxx>
In-Reply-To: <8D1AD15FF077B8A-2074-12FD3@webmail-vm056.sysops.aol.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-159211915-231500345-1412342220=:74310"
x-aol-global-disposition: G
X-AOL-SCOLL-AUTHENTICATION: mtaiw-aae05.mx.aol.com ; domain : yahoo.com DKIM : pass
X-AOL-SCOLL-DMARC: mtaiw-aae05.mx.aol.com ; domain : yahoo.com ; policy : reject ; result : P
Authentication-Results: mx.aol.com;
     spf=pass (aol.com: the domain yahoo.com reports 98.138.229.26 as a permitted sender.) smtp.mailfrom=yahoo.com;
     dkim=pass (aol.com: email passed verification from the domain yahoo.com.) header.d=yahoo.com;
     dmarc=pass (aol.com: the domain yahoo.com reports that Both SPF and DKIM strictly align.) header.from=yahoo.com;
x-aol-sid: 3039ac1b015f542ea29764c6
X-AOL-IP: 98.138.229.26
X-AOL-SPF: domain : yahoo.com SPF : pass

---159211915-231500345-1412342220=:74310
« Zuletzt geändert: 05. April 2015 um 06:21 von Stiray » 
Grund: Tags schließen nicht an 
Zum Seitenanfang
 
IP gespeichert
 
restevek
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 221
Standort: Nürnberg
Mitglied seit: 18. Juni 2014
Geschlecht: männlich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #9 - 03. Oktober 2014 um 19:49
 
Hello my dear Kuss i hope you are enjoying your day right now, i feel sad and disappointed when i saw your last email about the travel agency but i feel okay now because the agency explain to me already about that issue.

My dear i hope you are still interested to me and didn't change your mind, i am not here for money my dear, i just want to be happy and what i feel for you is real.

You can call the agency also and ask about that problem also so they can explain to you better.

I do love you already and the days that we are exchanging emails makes me feel i am very special woman, i never feel like this before.

I go to bed now my dear and hope to hear your sincere reply.Hugs and kisses from me to you.

Yours,
Carol Kuss

Spoiler:
Return-Path: <sweet_carol1980@yahoo.com>
Received: from nm33.bullet.mail.ne1.yahoo.com (nm33.bullet.mail.ne1.yahoo.com [98.138.229.26])
     (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
     (No client certificate requested)
     by mtaiw-aam05.mx.aol.com (Internet Inbound) with ESMTPS id D963D700000AB
     for <xxxxx>; Fri,  3 Oct 2014 09:57:23 -0400 (EDT)
Received: from [127.0.0.1] by nm33.bullet.mail.ne1.yahoo.com with NNFMP; 03 Oct 2014 13:57:23 -0000
Received: from [98.138.101.129] by nm33.bullet.mail.ne1.yahoo.com with NNFMP; 03 Oct 2014 13:54:38 -0000
Received: from [98.139.215.140] by tm17.bullet.mail.ne1.yahoo.com with NNFMP; 03 Oct 2014 13:54:37 -0000
Received: from [98.139.212.234] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 03 Oct 2014 13:54:37 -0000
Received: from [127.0.0.1] by omp1043.mail.bf1.yahoo.com with NNFMP; 03 Oct 2014 13:54:37 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 33783.74627.bm@omp1043.mail.bf1.yahoo.com
Received: (qmail 83114 invoked by uid 60001); 3 Oct 2014 13:54:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1412344476; bh=nApJYvFQfw6goPctxdjUttA+mB3sp2KYa41k6r1RGFs=; ontent-Type; EJth7523cnjrU=
X-YMail-OSG: psAIySwVM1n9mGy.UZT1edlESVwBtEure89MY4uaFQSPzzU
h8kTD_N8aAOQGkzV6VT9gSh.iTMxUZ4DzrwXs8O8SY4kqYomRguOzaRXE3Ff
nw26oSk3QZIL96VDFM.zgs8mx6nrVxPzx5o1fTXDwyUeJ3K.ZTlswBCnfH_G
X3aH_q8YYzajwV28Ja8SBkoQoFLxBxMuWtJIEsxhrukytLNiIei_Dpupc64s
nFd5HQgYI8kbV0ugZX40yhqun3jJHL7LQv8c8Ch8y.gOnqdY09UY0BYLeVID
TPZKASDZtjnWWL3wkchJSLMmDFJtJ6IayzoIQpRk9c4Bna2Kq0RuG6vCUNFM


VRKSn7bP8cLgrSFbWZvH_Q.Y8.GoCdhByhaujy4QIUWy.gxhw0RgwiRwuJ7s
KwWUxI1n7YXe0Lb987mXVJVyZDzjxdsKzky4ppkdNcVkj_qy68ypMMb9tObO
PgEwoLXbQmmSUfM6vTHhCB0JTv2SLC5wyaJAsQDYnRaIyfC1BzlkjiXt0mS.
m5HqmN7WZ4ZN6DwGo8kBuz1jTjlomMS30tVRwyus2GYGsqEDBHXw-
Received: from [116.5.217.86] by web161901.mail.bf1.yahoo.com via HTTP; Fri, 03 Oct 2014 06:54:36 PDT
X-Rocket-MIMEInfo: AQE-
X-Mailer: YahooMailWebService/0.8.203.696
References: <8D1AD0946AC0BB0-1D10-13D4A@webmail-va082.sysops.aol.com>
Message-ID: <1412344476.84431.YahooMailNeo@web161901.mail.bf1.yahoo.com>
Date: Fri, 3 Oct 2014 06:54:36 -0700
From: carol villanueva <sweet_carol1980@yahoo.com>
Reply-To: carol villanueva <sweet_carol1980@yahoo.com>
Subject: Re: my little philipa ...
To: xxxxxx>
In-Reply-To: <8D1AD0946AC0BB0-1D10-13D4A@webmail-va082.sysops.aol.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-159211915-715555062-1412344476=:84431"
x-aol-global-disposition: G
X-AOL-SCOLL-AUTHENTICATION: mtaiw-aam05.mx.aol.com ; domain : yahoo.com DKIM : pass
X-AOL-SCOLL-DMARC: mtaiw-aam05.mx.aol.com ; domain : yahoo.com ; policy : reject ; result : P
Authentication-Results: mx.aol.com;
     spf=pass (aol.com: the domain yahoo.com reports 98.138.229.26 as a permitted sender.) smtp.mailfrom=yahoo.com;
     dkim=pass (aol.com: email passed verification from the domain yahoo.com.) header.d=yahoo.com;
     dmarc=pass (aol.com: the domain yahoo.com reports that Both SPF and DKIM strictly align.) header.from=yahoo.com;
x-aol-sid: 3039ac1b138f542eab4300e2
X-AOL-IP: 98.138.229.26
X-AOL-SPF: domain : yahoo.com SPF : pass

---159211915-715555062-1412344476=:84431
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


Zur Frage, wann will Sie kommen : Visum im Hand und lieber " sofort !"
warten bis märz - arbeitsvertrag läuft aus in Shenzen !!
« Zuletzt geändert: 05. April 2015 um 06:35 von Stiray » 
Grund: Tags schließen nicht an, Rechtschreibung 
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65485
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #10 - 03. Oktober 2014 um 19:53
 
Mails über China

Code
Alles auswählen
IP:	116.5.217.86
Decimal:	1946540374
Hostname:	116.5.217.86
ISP:	China Telecom Guangdong
Organization:	China Telecom Guangdong
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Country:	China
State/Region:	Guangdong
City:	Huizhou 



Zitat:
from [116.5.217.86] by web161901.mail.bf1.yahoo.com via HTTP; Fri, 03 Oct 2014 06:17:00 PDT
X-Mailer: YahooMailWebService/0.8.203.696
Date: Fri, 3 Oct 2014 06:17:00 -0700
From: carol villanueva <sweet_carol1980@yahoo.com>


Zitat:
Date: Fri, 3 Oct 2014 06:54:36 -0700
« Zuletzt geändert: 05. April 2015 um 06:23 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30555
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #11 - 08. Dezember 2014 um 12:03
 
restevek schrieb on 03. Oktober 2014 um 19:33:
My boss is a Chinese people my dear and i never see African people in my entire life


Der Satz verrät ihn! Es handelt sich weder um eine Philippino noch um einen Chinesen. Es handelt sich um Bimbo mit einem sehr mittelmäßigen Bildungsstand.
Wenn er einen Afrikaner sehen will, dann braucht er nur in den Spiegel zu schauen!

restevek schrieb on 03. Oktober 2014 um 12:42:

Reiseagentur kennt Sie von Ihrem Arbeitgeber - "hoches Vieh " und die sind ewig unterwges . Der agentur ist " info@ rainbowtraveltours.org "


Dann schaue ich mir einmal die Reiseagentur an!

Code
Alles auswählen
Address lookup
canonical name 	rainbowtraveltours.org.
aliases
addresses 	199.79.62.17
Domain Whois record

Queried whois.publicinterestregistry.net with "rainbowtraveltours.org"...

Query error: TimedOut
Network Whois record

Queried whois.arin.net with "n ! NET-199-79-62-0-1"...

NetRange:       199.79.62.0 - 199.79.63.255
CIDR:           199.79.62.0/23
NetName:        CONFUUS-TX1
NetHandle:      NET-199-79-62-0-1
Parent:         CONFLUENCE-NETWORKS (NET-199-79-60-0-1)
NetType:        Reassigned
OriginAS:       AS32787, AS40034
Customer:       Confluence Networks Inc. (C03095996)
RegDate:        2012-07-02
Updated:        2012-07-02
Comment:        Co-located at Data Foundry Austin TX.
Ref:            http://whois.arin.net/rest/net/NET-199-79-62-0-1

CustName:       Confluence Networks Inc.
Address:        Texas One,
Address:        4100 Smith School Rd
City:           Austin
StateProv:      TX
PostalCode:     78744
Country:        US
RegDate:        2012-07-02
Updated:        2012-07-02
Ref:            http://whois.arin.net/rest/customer/C03095996

OrgNOCHandle: NOCAD51-ARIN
OrgNOCName:   NOC Admin
OrgNOCPhone:  +1-415-223-2606
OrgNOCEmail:  noc@confluence-networks.com
OrgNOCRef:    http://whois.arin.net/rest/poc/NOCAD51-ARIN

OrgTechHandle: TECHA29-ARIN
OrgTechName:   Tech Admin
OrgTechPhone:  +1-415-358-0858
OrgTechEmail:  ipadmin@confluence-networks.com
OrgTechRef:    http://whois.arin.net/rest/poc/TECHA29-ARIN

OrgAbuseHandle: ABUSE3065-ARIN
OrgAbuseName:   Abuse Admin
OrgAbusePhone:  +1-917-386-6118
OrgAbuseEmail:  abuse@confluence-networks.com
OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE3065-ARIN 



rud machte aufmerksam auf diesen Artikel:

Zitat:


Für ein Reisebüro, dass es nach eigenen Angaben seit 1998 online geben will, ist die Domain aber noch recht jung. Auch würde ich nach 16 Jahren 
online mehr Infos im Internet finden, die es aber nicht gibt! Aber warum hat das Reisebüro eigentlich keinen Festnetzanschluss, sondern bloß Cellphone?

Zitat:
Information on phone number range +86 136XXXXXXXX
     
Number billable as      mobile number
Country or destination      China
City or exchange location      
Original network provider      China Mobile


Und jetzt das Lustigste:

Wie soll ich das Reisebüro bei Google Maps finden, wenn dort keine Karte aus China angezeigt wird, sondern von Florida?????
Und rufe ich die Adresse bei Google Maps direkt auf, gibt es keine Funde. Nachweisen konnte ich bei der Straße auch keine zweistelligen Hausnummern!
« Zuletzt geändert: 05. April 2015 um 06:33 von Stiray »  

rainbowtraveltours.jpg ( 51 KB | Downloads )
rainbowtraveltours.jpg
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30555
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #12 - 10. Dezember 2014 um 15:28
 
@ restevek

Ich hoffe nur, dass Du an diesem Scammer nur Gefühle investiert hast und kein Geld!
Ansonsten können wir mit dem Aufräumen schon etwas warten, da dieses Fake-Reisebüro bereits an anderer Stelle geoutet worden ist. 
Da es sich bei dem Reisebüro definitiv um Fake handelt, ist die Wahrscheinlichkeit groß, dass sie auch noch mit anderen schreibt.
« Zuletzt geändert: 05. April 2015 um 06:37 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Online


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65485
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Carol <sweet_carol1980@yahoo.com> <info@rainbowtraveltours.org>
Antwort #13 - 05. April 2015 um 06:46
 
restevek schrieb on 03. Oktober 2014 um 19:49:
warten bis märz


Uli schrieb on 08. Dezember 2014 um 12:03:
Es handelt sich um Bimbo mit einem sehr mittelmäßigen Bildungsstand.


Uli schrieb on 10. Dezember 2014 um 15:28:
Ansonsten können wir mit dem Aufräumen schon etwas warten, da dieses Fake-Reisebüro bereits an anderer Stelle geoutet worden ist.


Die Putzkolone war da!

Zitat:
working here in China


Zitat:
things here in China and this is not their country, China is very strict country


Smiley

  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema