Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Natalia <kanfiti1@yahoo.com> (Gelesen: 1217 mal)
 
Schnupphase
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam!

Beiträge: 19
Standort: Neumarkt
Mitglied seit: 16. Februar 2009
Natalia <kanfiti1@yahoo.com>
20. März 2009 um 09:40
 
Einen schönen guten Morgen an Alle,

ich habe heute eine e-mail bekommen von einer Natalia, angeblich aus Weißrussland, Stadt-Murom. Scheint mir sehr verdächtig zu sein, da sie ja laut ihrem Profil aus den USA kommen soll.
Hier erst einmal der Quelltext, der Rest folgt noch, Mail und Fotos.

Seid Ihr so nett und würdet den Quelltext mal überprüfen, ob die mail tatsächlich von dort kommt?

Grüße von Rico



Spoiler für Quelltext:
E-Mail Quelltext anzeigen
Return-Path: <kanfiti1@yahoo.com>
X-Original-To: xxxxxxxxx@arcor.de
Received: from mail-in-15.arcor-online.net (mail-in-15.arcor-online.net [151.189.21.55])
       by mail-in-15-z2.arcor-online.net (Postfix) with ESMTP id C07F472427E
       for <xxxxxxxxx@arcor.de>; Fri, 20 Mar 2009 03:20:53 +0100 (CET)
Received: from n9.bullet.re3.yahoo.com (localhost [127.0.0.1])
       by mx.arcor.de (Postfix) with ESMTP id A528135E5BB
       for <xxxxxxxxx@arcor.de>; Fri, 20 Mar 2009 03:20:53 +0100 (CET)
X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 mx.arcor.de A528135E5BB
Authentication-Results: mx.arcor.de; domainkeys=pass (testing) Quelltext.from=kanfiti1@yahoo.com
X-DKIM: Sendmail DKIM Filter v2.8.2 mx.arcor.de A528135E5BB
Received: from 68.142.237.94 (helo=n9.bullet.re3.yahoo.com)
       by mx.arcor.de with ESMTP (eXpurgate 3.0.2)
       (envelope-from <kanfiti1@yahoo.com>)
       for <xxxxxxxxx@arcor.de>; Fri, 20 Mar 2009 03:20:52 +0100
Received: from [68.142.237.90] by n9.bullet.re3.yahoo.com with NNFMP; 20 Mar 2009 02:20:52 -0000
Received: from [66.196.97.154] by t6.bullet.re3.yahoo.com with NNFMP; 20 Mar 2009 02:20:51 -0000
Received: from [127.0.0.1] by omp207.mail.re3.yahoo.com with NNFMP; 20 Mar 2009 02:20:51 -0000
X-Yahoo-Newman-Id: 687602.48520.bm@omp207.mail.re3.yahoo.com
Received: (qmail 8116 invoked from network); 20 Mar 2009 02:20:51 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
 s=s1024; d=yahoo.com;
ntent-Type;
QYiMD7IXcOIlD8= ;
Received: from unknown (HELO comp3) (kanfiti1@216.229.90.187 with plain)
 by smtp115.plus.mail.re1.yahoo.com with SMTP; 20 Mar 2009 02:20:42 -0000
X-YMail-OSG: toqXjrYsSyfT..7e0ZsXcse_uQ_Df0T0G989CAGr9PsrGd0sDaZQn71FU03LprVGVc2EWLJq
X-Yahoo-Newman-Property: ymail-3
Date: Fri, 20 Mar 2009 04:49:14 +0300
From: kanfiti1@yahoo.com
X-Mailer: The Bat! (v3.0.1.33) Professional
Reply-To: kanfiti1@yahoo.com
Organization: internet cafe
X-Priority: 3 (Normal)
Message-ID: <65242261.20090320044914@yahoo.com>
To: xxxxxxxxxx@arcor.de
Subject: Hello
In-Reply-To: <31129600.1237500492264.JavaMail.ngmail@webmail08.arcor-online.net>
References: <31129600.1237500492264.JavaMail.ngmail@webmail08.arcor-online.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------E318C1FA39AD05A8"
X-purgate-ID: 149493::1237515653-00001284-36CFEBD2/0-0/0-0
X-purgate-type: clean
X-purgate-size: 245384
X-purgate: This mail is considered clean (visit http://www.eleven.de for further information)
X-purgate: clean
X-DCC-ARCOR-Metrics: mail-in-15-z2 1241; Body=1 Fuz1=1 Fuz2=2
X-Arcor-Antispam: EXPURGATE_MARK_CLEAN SPF_PASS RECEIVED_FROM_UNKNOWN
X-ArcorSpamBlocker: Spamcount: -9 Sensitivity: 10


Diese mail soll sie angeblich aus einem Internet-Cafe geschrieben haben, ich hab da so meine Zweifel.
« Zuletzt geändert: 20. März 2009 um 19:55 von Webmaster » 
Grund: Spoiler-Quelltext 
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Schnupphase
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam!

Beiträge: 19
Standort: Neumarkt
Mitglied seit: 16. Februar 2009
Re: Natalia <kanfiti1@yahoo.com>
Antwort #1 - 20. März 2009 um 09:47
 
Hier die e-mail.

Betreff: Hello 
Hello Rico! How are you?


My  real  name  Natalia:)  I  am very pleased to receive your response
Rico! I do not even know where to start my first letter to a man
from  another country ... I hope that my e-mail was a surprise for you
also, yes?

Perhaps you can ask me why I did not seek rights in their country?

Fairly to admit Very much it is pleasant to me the your country, and I
think, that other people living in our region of one Opinions with me!
I  like  people from the your country, I think they are not similar to
us.  People  from  the your country are more intellectual, Are polite,
noble, sociable, amicable and as it seems to me they better concern to
women,  That you will not tell about our men. Men from Russia and want
to offend or humiliate the woman, They do not reflect that we the same
people  as  well as they. Still men from Russia Like to drink a lot of
alcoholic  drinks,  I  think  it to not like any normal person, and In
particular to women! I can speak and write the English language, and I
decided  to  find  people from your country, and I decided to write to
you  with letter, Rico. Well, Rico, let me tell more about
themselves  ...  As  you  read  on  my questionnaire me - 29 years, My
growth  of  5.6.  My  weight  53  kg,  I - "Capricorn" on the zodiac My
birthday  18 january 1980:) I - White Russian girl on nationality. With
regard  to  religion, Christian, I Rico, and I believe in God. I
never  been married, and I do not children, I am the only child in the
family.  I  am sensitive, Thoughtful Moreover, it easily surprised. My
close  friends  and  talk  about  me  that  I - warm, funny, smart and
Intelligent,  purposeful, sociable. About my city where I live?Smiley I am
I  would  like  to  inform you that I live in the city here in Russia.
Murom  it is located about 300 kilometres from our Russian capital
of  Moscow.  Timezone Murom - GMT +6. Our city Murom - one of
the most beautiful cities Russia, I love my city very much remarkable.
There are many beautiful streets, squares and other attractions in our
city.  But it is so cold here, frost forced people to continue Streets
in  warm  clothes,  and  what about your weather? On cold or heat you?
Most  of  all I want to say to you that my favorite season - summer! I
like  when  the  sun  shine on the streets, this is - this is party to
vote  birds,  He  - this is so romantic. And you love summer?Smiley Also I
would  like  to  inform  you  of  my  education.  I Investigation into
Murom  University.  In  addition, I want to speak with you about I
learned  English  when I studied at university, Can I speak in English
without  any  problems,  I think ... But I see that I do many spelling
mistakes,  I  think  I  I hope that you will can understand my English
language without any problems? Indeed, Rico? Please let me about
this  in its next e-mail, okay? Also, I would to inform you that after
graduating   from  university,  I  received  a  diploma  in  specialty
"Business  and  accounting." But, unfortunately, I do not demanded the
formation  of  my  However,  as  well  as  in Russia, as in many Other
countries,  it  -  it  is  very difficult to find good jobs above Good
specialty.  Now  I  work as a dental assistant in a dental hospital. I
enjoys  working  here  in  our  domestic  and  our  visitors  --  good
customers.  I  have  no  computer  in  my house, and I to use Internet
cafes. Probably, I finish my e e-mail. Rico, I would be grateful
if  you want to write me about you directly as I did so. I would like,
if  you  tell  me,  for  example, about their family, whether your big
family?  About  Yours  City, where - do you live, I never was in other
countries,  and  I would be happy to learn about your country. Well,
let  me  finish my e-mail, I hope to see your answer soon! I Photo Use
of Mines, I hope that you will find my photographs of the goods. Well,
goodbye,  Rico,  look  forward  to  your  message is fast! Care,
Sincerely, Your new Russian friend, Natalia.

P.S. You may ask why I am in my profile I write that I am from another
country.  I explain to you. When I create a profile on the dating site
I  give  Russia their country but when I move to the next page to fill
your  profile  I  speak  Error.  I  had  to  enter  another country to
registration on this site dating. I think you understand me.
 
« Zuletzt geändert: 20. März 2009 um 17:32 von † Rais † »  
Zum Seitenanfang
 
IP gespeichert
 
ole
General Counsel
***
Offline


Je vois tout :-)

Beiträge: 2190
Standort: Antibes
Mitglied seit: 30. Dezember 2008
Geschlecht: männlich
Re: Natalia <kanfiti1@yahoo.com>
Antwort #2 - 20. März 2009 um 10:06
 
@ Schnupphase

Schnupphase schrieb on 20. März 2009 um 09:47:
I live in the city here in Russia.
Murom  

Schnupphase schrieb on 20. März 2009 um 09:47:
Timezone Murom - GMT +6. O



Mail wurde über die USA eingeliefert.

Smiley



Code
Alles auswählen
Abfrage nach IP-Adresse zu Name:  216-229-90-187-cablemodem-roll.fidnet.com
Zum Namen gehörende IP-Adresse :  216.229.90.187
OrgName:    Fidelity Communication International Inc.
OrgID:	FIDN
Address:    64 N.Clark
City:	 Sullivan
StateProv:  MO
PostalCode: 63080
Country:    US 






Zitat:
Date: Fri, 20 Mar 2009 04:49:14 +0300
From: kanfiti1@yahoo.com
X-Mailer: The Bat! (v3.0.1.33) Professional

Smiley
« Zuletzt geändert: 20. März 2009 um 17:33 von † Rais † »  
Zum Seitenanfang
 
IP gespeichert
 
Schnupphase
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam!

Beiträge: 19
Standort: Neumarkt
Mitglied seit: 16. Februar 2009
Re: Natalia <kanfiti1@yahoo.com>
Antwort #3 - 20. März 2009 um 10:18
 
Vielen Dank für die schnelle Hilfe, na da hat sich die junge Dame ja nicht lange gehalten bei Scam oder nicht Scam. Schade.

Danke nochmals.

viele Grüße aus der Oberpfalz, Rico
« Zuletzt geändert: 20. März 2009 um 17:33 von † Rais † »  
Zum Seitenanfang
 
IP gespeichert
 
Schnupphase
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam!

Beiträge: 19
Standort: Neumarkt
Mitglied seit: 16. Februar 2009
Re: Natalia <kanfiti1@yahoo.com>
Antwort #4 - 21. März 2009 um 19:26
 
Neue e-mail von Natalia, weil ich nicht geantwortet habe.


Rico, I heard that some women use the Internet to receive money by
deceit way. They play feelings of the people and break their hearts...
I never would make it, because I also was deceived by that man, which
liked. I know all those feelings which the man tests, when him
deceive. I even never had ideas to deceive other man... I consider
what is it very bad to earn money on another's frustration. But I do
not think that such people exist in our city. In Internet - cafe from
which I write you, there is a special service of protection, which
provides the control above it. Therefore I do not think that here
there are those people, which deceive others.
  
Zum Seitenanfang
 
IP gespeichert
 
Schnupphase
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam!

Beiträge: 19
Standort: Neumarkt
Mitglied seit: 16. Februar 2009
Re: Natalia <kanfiti1@yahoo.com>
Antwort #5 - 21. März 2009 um 19:29
 
Eingeliefert über die USA:

Code
Alles auswählen
IPv4-adress:  74.64.81.6
addr-out:   cpe-74-64-81-6.hvc.res.rr.com
whois.nic.mil [0] Undefined error: 0

OrgName:  Road Runner HoldCo LLC
OrgID:  RRNY
Address:  13241 Woodland Park Road
City:   Herndon
StateProv:  VA
PostalCode: 20171
Country:  US
NetRange: 74.64.0.0 - 74.79.255.255
CIDR:   74.64.0.0/12
NetName:  RRNY
NetHandle:  NET-74-64-0-0-1
Parent:   NET-74-0-0-0-0
 


Hier der Quelltext der mail.

Spoiler für Quelltext:
E-Mail Quelltext anzeigen
Return-Path: <kanfiti1@yahoo.com>
X-Original-To: xxxxx@arcor.de
Received: from mail-in-06.arcor-online.net (mail-in-06.arcor-online.net [151.189.21.46])
       by mail-in-14-z2.arcor-online.net (Postfix) with ESMTP id 4FCE820100F
       for <xxxxx@arcor.de>; Sat, 21 Mar 2009 15:08:19 +0100 (CET)
Received: from n6.bullet.re3.yahoo.com (n6.bullet.re3.yahoo.com [68.142.237.91])
       by mx.arcor.de (Postfix) with SMTP id EB6B939ABE6
       for <xxxxx@arcor.de>; Sat, 21 Mar 2009 15:08:18 +0100 (CET)
X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 mx.arcor.de EB6B939ABE6
Authentication-Results: mx.arcor.de; domainkeys=pass (testing) Quelltext.from=kanfiti1@yahoo.com
X-DKIM: Sendmail DKIM Filter v2.8.2 mx.arcor.de EB6B939ABE6
Received: from [68.142.237.90] by n6.bullet.re3.yahoo.com with NNFMP; 21 Mar 2009 14:08:18 -0000
Received: from [216.252.111.166] by t6.bullet.re3.yahoo.com with NNFMP; 21 Mar 2009 14:08:18 -0000
Received: from [127.0.0.1] by omp101.mail.re3.yahoo.com with NNFMP; 21 Mar 2009 14:08:18 -0000
X-Yahoo-Newman-Id: 413356.63689.bm@omp101.mail.re3.yahoo.com
Received: (qmail 69015 invoked from network); 21 Mar 2009 14:08:18 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
 s=s1024; d=yahoo.com;
sfer-Encoding;
xW7HxYpkSlefvU= ;
Received: from unknown (HELO comp3) (kanfiti1@74.64.81.6 with plain)
 by smtp109.plus.mail.re1.yahoo.com with SMTP; 21 Mar 2009 14:08:17 -0000
X-YMail-OSG: sBzuIRg5wtiio3xmmqlM6YLaXc7ITO3M0CRm3H_02dlEivDe7CGVV6YAYC3fM3v4uuUtD55p
X-Yahoo-Newman-Property: ymail-3
Date: Sat, 21 Mar 2009 17:08:04 +0300
From: kanfiti1@yahoo.com
X-Mailer: The Bat! (v3.0.1.33) Professional
Reply-To: kanfiti1@yahoo.com
Organization: internet cafe
X-Priority: 3 (Normal)
Message-ID: <556524188.20090321170804@yahoo.com>
To: xxxxx@arcor.de
Subject: why you think it?
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-DCC-ARCOR-Metrics: mail-in-14-z2 1241; Body=1 Fuz1=1 Fuz2=1
X-Arcor-Antispam: SPF_NONE RECEIVED_FROM_UNKNOWN
X-ArcorSpamBlocker: Spamcount: 2 Sensitivity: 10
« Zuletzt geändert: 21. März 2009 um 19:41 von bandit »  
Zum Seitenanfang
 
IP gespeichert
 
calle
Ex-Mitglied


Re: Natalia <kanfiti1@yahoo.com>
Antwort #6 - 21. März 2009 um 19:50
 
Schnupphase schrieb on 21. März 2009 um 19:29:
Eingeliefert über die USA:


Herkunft der Mail wurde verschleiert 


Zitat:
Received: from unknown (HELO comp3) (kanfiti1@74.64.81.6 with plain)
 
Date: Sat, 21 Mar 2009 17:08:04 +0300
From: kanfiti1@yahoo.com
X-Mailer: The Bat! (v3.0.1.33) Professional
Reply-To: kanfiti1@yahoo.com
Organization: internet cafe


Date Zeit verweist aber auf Russland
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema