Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Vlada <vladalen.flames@gmail.com> <manuel.mancin.axtt@aliceposta.it> (Gelesen: 1363 mal)
 
Amirul
Ex-Mitglied


Vlada <vladalen.flames@gmail.com> <manuel.mancin.axtt@aliceposta.it>
17. September 2016 um 09:37
 
Write me, I worry.

Hello!
My name is Vlada.
I am looking for serious and long term relationship..
I will be glad to your answer.

Spoiler:
Return-Path: <manuel.mancin.axtt@aliceposta.it>
Received: from smtp201.alice.it ([82.57.200.97]) by mx-ha.web.de (mxweb107) with ESMTP (Nemesis) id 0M5dbw-1aqYPk3yfI-00xf3z for <xxxx>; Tue, 13 Sep 2016 11:57:49 +0200
Received: from XBKOFYMO (79.25.56.36) by smtp201.alice.it (8.6.060.43) (authenticated as manuel.mancin.axtt@aliceposta.it) id 57D7C3780000D8AE; Tue, 13 Sep 2016 11:57:45 +0200
Message-ID: <57D7C3780000D8AE@smtp201.alice.it> (added by postmaster@alice.it)
From: vladalen.flames@gmail.com
To: 
Subject: Write me, I worry.
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: The Bat v/10.005
Date: Tue, 13 Sep 2016 12:57:25 +0300
Mime-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Envelope-To: <xxx>
« Zuletzt geändert: 17. September 2016 um 13:59 von Stiray » 
Grund: Betreffzeile korrigiert 
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65751
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Vlada <vladalen.flames@gmail.com> <manuel.mancin.axtt@aliceposta.it>
Antwort #1 - 17. September 2016 um 14:01
 
Mail über Italien Smiley

Code
Alles auswählen
IP:	79.25.56.36
Decimal:	1327052836
Hostname:	host36-56-dynamic.25-79-r.retail.telecomitalia.it
ASN:	3269
ISP:	Telecom Italia
Organization:	Telecom Italia
Services:	None detected
Type:	Broadband
Assignment:	Dynamic IP
Continent:	Europe
Country:	Italy
State/Region:	Province of Forlì-Cesena
City:	Cesena 



Zitat:
from XBKOFYMO (79.25.56.36) by smtp201.alice.it (8.6.060.43) [...]; Tue, 13 Sep 2016 11:57:45 +0200
From: vladalen.flames@gmail.com
Date: Tue, 13 Sep 2016 12:57:25 +0300


Zitat:
X-Mailer: The Bat v/10.005


Hier http://antiscam.de/showthread.php?tid=13119 wurde über Leaseweb Deutschland verschleiert.

Zitat:
I live in the city of Kazan
« Zuletzt geändert: 17. September 2016 um 20:13 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Amirul
Ex-Mitglied


Re: Vlada <vladalen.flames@gmail.com> <manuel.mancin.axtt@aliceposta.it>
Antwort #2 - 17. September 2016 um 19:53
 
Hello! My name is Vlada! I looked at your profile.
You've got me interested! It is so unusual to write not familiar
person. I am a young woman with a serious attitude to life and a sense
of humor, interest in the general enthusiasm, active, honest, stable,
very sociable, as an independent and ambitious, creative. I love
nature, art, theater, good films, animals, walking and traveling. He
wants to meet with a good, loving man! I have beautiful blue eyes and
long black hair. I like to walk around the city. I like to read books
and listen to music. I send you my picture. If I like what you write
to me. I will be very glad to receive your letter and to answer you.
Your Vlada.

Spoiler:
X-Apparently-To: xxx; Sat, 17 Sep 2016 14:43:54 +0000
Return-Path: <vladalen.flames@gmail.com>
X-YahooFilteredBulk: 74.125.82.41
Received-SPF: pass (domain of gmail.com designates 74.125.82.41 as permitted sender)
X-YMailISG: ljBgfAkWLDvUC8CGQ4UiBaNs9xWpnq680_lagv1GGWRBuk9F
tGmmnY.3zslIhTXFX6MtlybbzoljAyp3ZB3FVq5kmToWx30zb2ltNf_0451a
RaspPvXehIJu8y7nttawJU1PVbtpIZJQOAMrKvfJ1ZYADmr76jRcEqZJnfOo
d0M2wd0E2fKo76SJPxGs.mNhv8YMlisQDspSUR4zVMmoVIlU7TABC7WyQxVd
Rp3N_AlC1DesIQk0HGW_GxKEyeimHk_pBittJBFnhdSbaAQlklVjXrHBHcNa
iAP_tkMJ4UUChAq5FVT6zevAkOGfTkoJ8rdY4jKMVLGir_mcLxjCLqRML4VG
_CTVyccWsDI2OhbPxHpOOQ.q0iL2R_fBqUFuxjZZaixk520F3ehK1JWX9nM3
vHhR_xinxJDNNFBVhgwBjuv53Umuzd_l5iQfQP9nXTrX8K6HVoiAfQu.hw3o
y5lH2PNE_YaOluHdNZ0Np6KQtLkIaueyUMhZ_8c6TD1hqTX_72BNEnQlnvNW
b5vxE7BXOY98DXKl81PpOLlyM6BdMU1li_.7zMGJib7efsdsTOtUAX425i0n
QchqJ57sIE8YtxKNaU49b8Xt.EU63Dr7hV_ryy3gvCL6gT1yBEVyGKP2JnTa
F4AmXEX3.7f4Pwx6ViqlMQfnNSUnDmndzpoGWZTvx7IG1EOkSXkUNz4wFXiy
6vFy2nUZQVD6jBc64B11unzQhj9EO74Z_xq15otZ9MUkEZLmPTNCXIKK4Goh
AXgkI8UirfQq7QJd2fL0S_92k.1PTwW2lDmVoRQdJGSbn1RmLRBe1i2fd4S1
f77flm4sdaf1oYBd8dnk1OUPqRU.R6JvBdF_AmMF.3qSLQmJFie6H8VE8BFO
Li3k4KOKMtaTb4VvsA4RDfb2kqWQqON4qa95muuxb9zIjL.v7i0HYeQjSPGp
VJCGhhQolf3yaw0KOmzRg4OVdpERamC_KvcbD_kE1lc4L_ab2KvnKrSG8TEo
zAMlosH5DF1q8q_uMXmjvHHMKwj98br7.UtOIBucx8YZ6RnCFSB7b3K7FPM3
_iekP4Z6U0fOwoHA516Ej5d9TG4tcDLikZQvra1vOMyUlV0o6Y2OoxL4T9rs
m7S8BrkFBtlcR9DmhGlWuvf82ZoU3OWj_UvNQRi7XlNIhlcf.NKXG7WK5LAU
_wFSw6.nGOH5g9w09rvqbkHVAQT6M5hTVvJGZecVY4RMr16J6cCJZbscKFWF
DgknTDWO.l8LA1GcAPXdYcyEahfXtzXQRLEUgo4tE_D.kV1YaLLpXmVzJtXH
DA.x535wE2haiS5MEEBq.UK34Nt62JnhMMjTNO3Qqj9NICy2teInCVL0zYr1
oTq993YGto8_jPhUXE3DbWWS41f9Hn5ZICLhCtgvoiZXQHexPtgWcSF8Xm5K
r5rmsk_pohelCYqb.WMUQMp3rKpjFkKN9YLXY.wcQR9rP9PdiETNC06_d3qm
M3uM.yZ2FwuzsEiaQ1hnzbMU_wzJuNXkYRKcW.STmopq0t271gmmi6XL07sW
aMsxl_UFNe0EyvGjn7FT6p6jn1iB1tyyG6tmMTgmfycrFBIGvfFz
X-Originating-IP: [74.125.82.41]
Authentication-Results: mta1163.mail.ir2.yahoo.com  from=gmail.com; domainkeys=neutral (no sig);  from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO mail-wm0-f41.google.com) (74.125.82.41)
  by mta1163.mail.ir2.yahoo.com with SMTPS; Sat, 17 Sep 2016 14:43:53 +0000
Received: by mail-wm0-f41.google.com with SMTP id 1so87664334wmz.1
        for <xxx>; Sat, 17 Sep 2016 07:43:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=date:from:organization:message-id:to:subject:in-reply-to:references
         :mime-version;
        bh=SPqSz8hYgqmemwySrtq3YlvzJiWcLWAWXaYL5/BwrMU=;
        b=A3xGKerD5wbcqbUDD6tclvUzb8mXIll2jzHNDgbh/QNSzR9CL81btsJStX/WNoB+0q
         CNx2XBjP4gz6b/d84ga/ILw3rZ4PSaYdYVzr2YSNI7RCaZgGOXsn0+kz2VzYKIrvgKr4
         oBiOyRVj4ENWWJ+rLK7cXq9hu3plWGfNdWV3z6uyApbNPK/Em5LWn0MJyl1Ijo6uy+r0
         pT6eMZ2tdZn2N3X6PwWw9tv7m6eu00dNtZTmWpx+tugtcdKwayrCqIeN/HuxwKXPEjQ0
         loZXD7MfSItH0Jnamd/8aAGs8OXtBhydAHwBxgkejEglKHPAQD2ner5LJZiyxzFjSUnJ
         5xPA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20130820;
        h=x-gm-message-state:date:from:organization:message-id:to:subject
         :in-reply-to:references:mime-version;
        bh=SPqSz8hYgqmemwySrtq3YlvzJiWcLWAWXaYL5/BwrMU=;
        b=IF1ltg6rzHSrvD44BsXGWppoJDZAobgvBYwegIeyRhig4UabLY979k1ohQehZpIaZ2
         i48txWgOf9HToNc4XtJcN+nMA4uhTuotsh90se9oHQIZ86y15zcMXelzSEH0lxQa7YZQ
         69T2t6ZRoqQ9SqOyIdZJWkaNGv7ZRTjLbNmqI/aQlOE+ZYy+uwvZ7NjzjawITS5l0Qic
         ULDH1PqOz36OvmeQIHOcmMsWX16QY4zbAWbGdIAQYLfiQfHEMXPVd8k72BR7r29hDCYq
         W9K3zMyyBPLkFSjUYM2r7BGOb/ht9H/8nohH6XAfGDHYh2LYcaaSHf9GHWuwQIqib8VQ
         i1+Q==
X-Gm-Message-State: AE9vXwOl32uVoReIhaQLaedhljQmHiSd74kKlv0O+RkH8/dSOnajt+HVa0j8MUZ0dkeG3A==
X-Received: by 10.194.242.200 with SMTP id ws8mr8993060wjc.205.1474123433199;
        Sat, 17 Sep 2016 07:43:53 -0700 (PDT)
Return-Path: <vladalen.flames@gmail.com>
Received: from [10.13.134.168] ([37.58.59.21])
        by smtp.gmail.com with ESMTPSA id n7sm13459397wjz.32.2016.09.17.07.43.49
        for <xxx>
        (version=TLS1_1 cipher=AES128-SHA bits=128/128);
        Sat, 17 Sep 2016 07:43:52 -0700 (PDT)
Date: Sat, 17 Sep 2016 16:43:34 +0200
From: vladalen.flames@gmail.com
Organization: vladalen.flames@gmail.com
X-Priority: 3 (Normal)
Message-ID: <268830914.20160917164334@gmail.com>
To: xxx
Subject: Hello
In-Reply-To: <1925793213.58135.1474097958785@mail.yahoo.com>
References: <1925793213.58135.1474097958785.ref@mail.yahoo.com> <1925793213.58135.1474097958785@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------0A718E1DD02C24E40"
Content-Length: 160313
  

Tkjxk9v5cWg__1_.jpg ( 61 KB | Downloads )
Tkjxk9v5cWg__1_.jpg
uUdMmr45Uiw.jpg ( 53 KB | Downloads )
uUdMmr45Uiw.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65751
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Vlada <vladalen.flames@gmail.com> <manuel.mancin.axtt@aliceposta.it>
Antwort #3 - 17. September 2016 um 20:12
 
Mail über Leaseweb Deutschland  Smiley

Code
Alles auswählen
IP:	37.58.59.21
Decimal:	624573205
Hostname:	37.58.59.21
ASN:	28753
ISP:	Leaseweb Deutschland GmbH
Organization:	Leaseweb Deutschland GmbH Cloudstack Premium
Services:	None detected
Type:	Corporate
Assignment:	Static IP
Continent:	Europe
Country:	Germany 



Zitat:
from [10.13.134.168] ([37.58.59.21]) by smtp.gmail.com with ESMTPSA; Sat, 17 Sep 2016 07:43:52 -0700 (PDT)
Date: Sat, 17 Sep 2016 16:43:34 +0200
From: vladalen.flames@gmail.com
  
Zum Seitenanfang
 
IP gespeichert
 
Amirul
Ex-Mitglied


Re: Vlada <vladalen.flames@gmail.com> <manuel.mancin.axtt@aliceposta.it>
Antwort #4 - 30. September 2016 um 00:34
 
Hi ! Why did not you answer my letter ??? How are
you? How are you feeling? My dear, dear write me, I am very pleased
about your letter. I am waiting for a letter from you. I miss you and
your letters. I'll be waiting for your letters. Your Vlada.

Spoiler:
X-Apparently-To: xxx; Tue, 27 Sep 2016 19:37:07 +0000
Return-Path: <vladalen.flames@gmail.com>
X-YahooFilteredBulk: 209.85.215.48
Received-SPF: pass (domain of gmail.com designates 209.85.215.48 as permitted sender)
X-YMailISG: 4VV_JdcWLDtJAnmwqdKvn7rBQyJUwpf4lEcXP3CmWlvnJb70
oOagdZBCs8GYNfHi7CZDM1OEH3y_OcUL1Dee0D.uxGaPr_km2C0xPPxS8sRx
MZm7HgJE_i63ATVEre0opvmLZaUaw1ZXl5HX4iIXrewKDQbIgrcKS1V3praa
DbhqXMlQEI.AnRQzLofYl6swoY6z21UINkz3QTDMSX66_P.IPpKZfpJM00D2
aDg.YeaMe_sNa3imPxpwE8jnznG1XHxlYuBD_wCJvbege5pMxdjIwXvyLCWc
EwfENZbK80CPF6Lyq90dGnw_tbOOKDX8_On3pqnPM0o1oO3JWYkqqy9nnmcI
rl24LBntoEwW3Kcxq9oWFBHjqopu1SDwYsfbGRz4M8soP0CiecEo5rio23ZW
ZP0TaKE9QUCA8Lx8KmcYX4Nqg4Q_46uS6rZ_kZ5iPs9seKuo8KQFeYzmgO8R
L.d3axJtVBvBeY3M809EX8deFEnTtF6CNxcIZ07d968nru8X9OMlwx0404aA
bHIZbDMmN6pPw8v1pBqDmAu26fkW3q_yxBjsqamaAxQ4JrhshZ37EcQkRZxs
KtSJWYuGFFJxq_xCAVrTihQxgM1UdrVLYEWJJJYIBJFNt6ZvMjRaOQuxd09K
EdFV_x7ASPYbkhn3FB.SfdwJBucbYyWsAg0NfncTz9t4UFIF2SZNyzPjVarF
ayhpZuMdGzcaUEmeXy16zqSwi5FnzpvkLEY5maWDFMDoT_ahS8WK9rklsyMv
j6pMQlJJkvi.FWp7n8HGcQiKVZhtemcbXQmRvTtAYbJjdhrYSWARV5Kdd05G
GphNtnmeRXVCA755J7IK_BWj2Wq48LJWQc06_FZIEKYHt_6h8r9r3Tzrgipv
2vCW7mZQO1QRc1klEcbryUfj.xbKwvM4a_1UTI3k_zeNK8.6OZa3spu5wqxj
52BAD7fcc4mMpi1zITIpxPr.cUFnKoVP7fKdxLnsqtc4HdbJourKyIuJ.lPp
9YelaA5WmZ1Byn0dtndedYWmZco_w5b5k6p6ugO7g1omhQ1VDl0ouS_z27k9
_z0vOesdcYt1wkeKf_iy0EtVjN317qe0KKdw4M7e.AlfmzV1kGINd_mf0ugb
QWKRmJFMddvogjAV5kxkjyjSCvnRbc_xaKQ_m6YTof4j.pISPk8l0Np__jgw
8oi34s.M17IZ8BlgMYrsx61lWAZjGkHNw0FQAJ.x6_pQ_z8Kga0tVStZnfhc
GL_QKJCvWHk_AskfbbsFssoMQljxzY90QwSsTe7E0NNatjCemn7g_pOCS5an
G5oFZJxsoF43jk79A1mncuLsP6TkzfrPQfxU.0ZlFujmePJ5kvK9hieBOLJK
k_BI3.Bx___1wLSXr1vrQwTL6R_h8Cyk4_q_hrxf_WBoTD.gdviiIpP8zwVg
HxJ_UMaCguQnvx9.zuZd9vomienwD_ML25KwC1LKzNYSywUviBXedBMcM57g
COKuPPprG5zo2aK_pSlV3xrR0Ribw7K3pmc_Z4mN_dKv8ipbR8GDgcnhflFx
6b1e
X-Originating-IP: [209.85.215.48]
Authentication-Results: mta1003.mail.ir2.yahoo.com  from=gmail.com; domainkeys=neutral (no sig);  from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO mail-lf0-f48.google.com) (209.85.215.48)
  by mta1003.mail.ir2.yahoo.com with SMTPS; Tue, 27 Sep 2016 19:37:07 +0000
Received: by mail-lf0-f48.google.com with SMTP id y6so33019367lff.1
        for <xxx>; Tue, 27 Sep 2016 12:37:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=date:from:organization:message-id:to:subject:mime-version;
        bh=x9vtYhkl0HYeFQenkElUive/3J3eKygHRi4BpN6XnP0=;
        b=cYosdzdZ5M5RvNZ6e3h9dyDpv6i+lnNrK4M2nXOEWeGR3BE8VmhidQdY6ZXYUZ5nBj
         bwVGUm85WhB+DPaFyM9ZVl24SG+o1KEXUKuKUYSU/BE8O/BBJQSSdMdDPp1gM2rZlKyZ
         qblhNilPRgqcH4gE+ek5MUzSQ9KnA1oaa2vuBn/yvZ2B0O9Pn/PZt2yocCNanei/7PzW
         rEaA7sX99yzVPr/guSnduG4+h4fvtZjQppYig8m/Pgt7UFvm3EqxwC3Qh8PLsYuiijBD
         pw199qupM344TDc7TAFRMcdXJIyJvnkEH3Lcu/5Hqo7EnHUWCcf75pmHbw7qZrbNKJoo
         EnyQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20130820;
        h=x-gm-message-state:date:from:organization:message-id:to:subject
         :mime-version;
        bh=x9vtYhkl0HYeFQenkElUive/3J3eKygHRi4BpN6XnP0=;
        b=dkPYGSwIlCfVA/K2sKQ4kwL3VRbmymtp3RiKauKxl94fJB6y4tImbu1VrrYn/k/5dA
         CBwDlQJps2tkFxyzjpgbEIN3r8LT6rVMxyPGSWnUOeYpWTD9KhEHtqQcI/bnhLNkPQsU
         jybVQfOJNFNP6Tilg+gFCfw4pv/MQd9xv7efR5YiCkZk/j/DqKQ1B1bp96APMBTw3HuC
         mwroWQJ3j7wi66X19VIfZhggmf3dcI3sutLN6Y45vjX03moID5phxy49Q1KUdmmFXycz
         sFFlNs0mfQyrK4u53cjgeoh/aHEOzYso9iGmqJ1372jfZay5Ddt5pbv5wLgw+/5k/AWj
         wPBg==
X-Gm-Message-State: AA6/9Rmjn8937ksv/G3brkftxXfr2j0mhYYbmRLQABYkdaBs1aWiMWhKap390DsBhxisjw==
X-Received: by 10.25.209.209 with SMTP id i200mr321272lfg.50.1475005026146;
        Tue, 27 Sep 2016 12:37:06 -0700 (PDT)
Return-Path: <vladalen.flames@gmail.com>
Received: from asus-PC ([188.162.54.55])
        by smtp.gmail.com with ESMTPSA id k63sm655921lfe.48.2016.09.27.12.37.02
        for <xxx>
        (version=TLS1_1 cipher=AES128-SHA bits=128/128);
        Tue, 27 Sep 2016 12:37:05 -0700 (PDT)
Date: Tue, 27 Sep 2016 21:37:01 +0200
From: vladalen.flames@gmail.com
Organization: vladalen.flames@gmail.com
X-Priority: 3 (Normal)
Message-ID: <253984320.20160927213701@gmail.com>
To: xxx
Subject: Hello
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------07E0010F5255ED804"
Content-Length: 166135
  

2xHIUFuuLOc.jpg ( 48 KB | Downloads )
2xHIUFuuLOc.jpg
3cHL9Bave8c.jpg ( 71 KB | Downloads )
3cHL9Bave8c.jpg
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65751
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Vlada <vladalen.flames@gmail.com> <manuel.mancin.axtt@aliceposta.it>
Antwort #5 - 30. September 2016 um 11:13
 
Mail über Russland mobil

Code
Alles auswählen
IP:	188.162.54.55
Decimal:	3164747319
Hostname:	client.yota.ru
ASN:	31133
ISP:	PJSC MegaFon
Organization:	PJSC MegaFon
Services:	None detected
Type:	Wireless Broadband
Assignment:	Static IP
Continent:	Europe
Country:	Russia
State/Region:	Chuvashia
City:	Cheboksary 



Zitat:
from asus-PC ([188.162.54.55]) by smtp.gmail.com with ESMTPSA; Tue, 27 Sep 2016 12:37:05 -0700 (PDT)
Date: Tue, 27 Sep 2016 21:37:01 +0200
From: vladalen.flames@gmail.com
« Zuletzt geändert: 30. September 2016 um 11:15 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema