Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: [1] 2  Thema versenden
Heisses Thema (Mehr als 10 Antworten) Lera <moldlera@rambler.ru> (Gelesen: 8039 mal)
 
Headhunter
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 5288
Standort: Hinterposemuckeltonne
Mitglied seit: 05. Juli 2009
Geschlecht: männlich
Lera <moldlera@rambler.ru>
02. November 2010 um 17:23
 
Hello, dear))

So pleasant that you could reach me now, I was waiting for your answer) I was so impatient to get it from you, so let’s start from the very beginning) As you saw from my profile, my name is Valeriya. I am 22 years old, with height 166, weight 56. You can see how I look like from the photos, I am sending you some now and I hope you will like it)
The reason I am here is to find my love and the right man for life. I am a usual girl, and don’t need much, but I want the right attitude, worth of a real lady. 
A little about me. I am very home oriented and have a wonderful, though very little family. I live with dad and my mother. We all are best friends. Unfortunately I have no any brothers or sisters, I’m the only child in my family, but still not spoiled. That is  all for now about me, I just want to make sure you will get my letter. Answer, when you receive it. Hoping to hear from you soon. Please, write me more about you. I hope that soon we will become much closer to each other...) And I promise to tell you much more about me in next letters and answer all your questions. 
Sincerely, Lera



Off Topic KommentarMore pictures in the gallery: Smiley


Spoiler:
Return-path: <moldlera@rambler.ru>
Delivery-date: Tue, 02 Nov 2010 16:58:44 +0100
Received: from [195.4.92.21] (helo=11.mx.freenet.de)
     by 1.mbox4.freenet.de with esmtpa (ID exim) (Exim 4.72 #3)
     id 1PDJFy-0002dc-WB
     for ; Tue, 02 Nov 2010 16:58:43 +0100
Received: from maile.rambler.ru ([81.19.66.15]:49557)
     by 11.mx.freenet.de with esmtp (port 25) (Exim 4.72 #3)
     id 1PDJFy-0001Qd-Sa
     for ; Tue, 02 Nov 2010 16:58:42 +0100
Received: from J (unknown [212.150.147.230])
     (Authenticated sender: moldlera@rambler.ru)
     by maile.rambler.ru (Postfix) with ESMTP id 5F0B01A25049
     for ; Tue,  2 Nov 2010 18:58:41 +0300 (MSK)
Date: Tue, 2 Nov 2010 09:49:04 +0300
From: moldlera@rambler.ru
X-Mailer: The Bat! (v3.80.06) Professional
Reply-To: moldlera@rambler.ru
X-Priority: 3 (Normal)
Message-ID: <1779948370.20101102094904@rambler.ru>
To: 
Subject: Hi))
MIME-Version: 1.0
Content-Type: text/html; charset=windows-1251
Content-Transfer-Encoding: quoted-printable
X-purgate-ID: 149285::1288713522-00007537-B5C0E40C/0-0/0-0
Delivered-To: 
Envelope-to: 
Delivered-To: 









« Zuletzt geändert: 03. September 2011 um 18:12 von scambuster » 
Grund: ua10134 
Zum Seitenanfang
 
IP gespeichert
 
Indikation
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11770
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Lera <moldlera@rambler.ru>
Antwort #1 - 02. November 2010 um 17:32
 
Kommt über Haifa/Israel.

Code
Alles auswählen
212.150.147.230 - Geo Information
IP Address 212.150.147.230
Host 212.150.147.230
Location  IL, Israel
City Haifa, 04 -
Organization Loads
ISP NetVision
AS Number AS1680 013 NetVision Ltd.
 



Zitat:
Date: Tue, 2 Nov 2010 09:49:04 +0300
From: moldlera@rambler.ru
X-Mailer: The Bat! (v3.80.06) Professional


Zitat:
The Bat! (v3.80.06) Professional
Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
Wesermann
Forum Administrator
*****
Offline


I love Anti-Scam

Beiträge: 34946
Standort: Russia
Mitglied seit: 08. Oktober 2008
Geschlecht: männlich
Re: Lera <moldlera@rambler.ru>
Antwort #2 - 04. November 2010 um 09:53
 
itel Zeitzone:      Israel Standard Time (IST)
Titel Sommerzeit:      Israel Daylight Time (IDT)
Sommerzeit:      01.04.2011 um 03:00 bis 02.10.2011 um 01:59
Alle Zeitumstellungen
Standard-Differenz UTC:      +2:00 Stunden
Aktuelle Differenz UTC:      +2:00 Stunden
Aktuelle Differenz MEZ:      +1:00 Stunde

Also +0300 passt nicht zu Israel sondern zu Russland.

@ rexmundi

frage sie mal bitte wo genau sie wohnen will.

  
Zum Seitenanfang
 
IP gespeichert
 
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20631
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Lera <moldlera@rambler.ru>
Antwort #3 - 04. November 2010 um 10:34
 

Man darf allerdings nicht vergessen, dass rumbler.ru den Zeitstempel +0300 in der Datezeile setzt und nicht der israelische Provider.
Da der Provider in Moskau sitz, steht dort immer die westrussische Zeitzone, egal von wo die Mail versendet wurde.

Ähnliches kennen wir auch bei Yahoo oder Google.
  
Zum Seitenanfang
 
IP gespeichert
 
calle
Ex-Mitglied


Re: Lera <moldlera@rambler.ru>
Antwort #4 - 04. November 2010 um 14:16
 
Statische IP .
Ist bereits bei uns als Scam gelistet  Zwinkernd

Zitat:
Received: from J (unknown [212.150.147.230])




Olesya <dear-lesya@ro.ru>

Warten wir noch die Bilder ab , 
und dann in den offenen Bereich, vermute Ukraine Sektion .

Smiley
« Zuletzt geändert: 04. November 2010 um 14:17 von »  
Zum Seitenanfang
 
IP gespeichert
 
Headhunter
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 5288
Standort: Hinterposemuckeltonne
Mitglied seit: 05. Juli 2009
Geschlecht: männlich
Re: Lera <moldlera@rambler.ru>
Antwort #5 - 06. November 2010 um 16:27
 


Hello, dear Xxxxxx) 

You are a stranger for me now, though I don’t know why I already have such a good feeling about you… I hope this is not just a feeling and you are looking for the same here, and if we both are here for one thing, then we are here for each other. 
Well, I think you already know why I write you now. I like you, I sincerely do, and I am here not for games or Internet correspondence. I am waiting for love of my life, which still didn’t happen. I want to love and be loved, and I want my own family, my own little happiness with my soul mate. I am searching for a husband, and am ready to give this search a try through the Internet, though it is still something so new for me. Then why in the Internet? I do believe that foreign men are much more sincere, sensitive, loving, caring, tender, romantic…they are much more able to feel and give these feelings out then our men. I had some bad experience and will never come back to Ukrainian men again. And what about you? Why are you searching for a woman on-line? Tell me, ok?) I hope we can speak open enough about such matters, if we are going to become close people in future. I don’t want just a friendship or love letters with no future. I want everything to be real and have sense, and will open to you fully, let you go into my life. Just show me that you really need it. It’s so much important to have someone who loves you, who needs you and can’t spend a single moment without you…do you agree with me here, Xxxxxxx?) 
Well, now let me tell you a little more about me, ok?) Hope you are interested)) I am a usual girl, with a usual name Valeria. This is a full name, and my family calls me Lera) I am 22 years old. For a Slavic woman this is the very age when she is already independent, when she gets married. I live in a small city called Zhitomir, I was born here and grew up here, and I love this place with all my heart, though it is very small, with not many places to see and visit. Probably you didn’t ever hear about it, as it's not the most famous city in the world. But I love it at least for the tiny park not far from my house, where I spent half of my life together with my friends, or just alone with my thoughts. Xxxxxx, do you have any place in the world which you love so much and would share with a person you love?) Then you will understand me) 
Well, I don’t even know what else I could tell you, as I can’t know for sure what you are interested in, so please, don’t hesitate writing me back and ask any questions you are interested in, I will be happy to open to you and tell you everything) And please, tell me more about your personality, tell me, what are your strong sides, what are your positive features, what you think you are special in…Just don’t say you are not! I am sure you can be very special, at least for one person, and probably this person can be me… 
I am sending you two of my pictures, one was made by my friend in the beginning of autumn, and another one is just me, hope you will like them both. By the way, my friend was a good photographer, and now she got a job in Kiev so she left Zhitomir some months ago. I miss her so much as a friend, and to the top she was my private photographer)! I am also hoping to get some pictures of you too) 
Have a wonderful day, and write me back soon, ok?) Kisses to your cheeks) 
Lera 



Spoiler:
Return-path: <moldlera@rambler.ru>
Delivery-date: Sat, 06 Nov 2010 14:33:15 +0100
Received: from [195.4.92.18] (helo=8.mx.freenet.de)
     by 0.mbox4.freenet.de with esmtpa (ID exim) (Exim 4.72 #3)
     id 1PEitP-000434-6E
     for ; Sat, 06 Nov 2010 14:33:15 +0100
Received: from maild.rambler.ru ([81.19.66.33]:29453)
     by 8.mx.freenet.de with esmtp (port 25) (Exim 4.72 #3)
     id 1PEitO-00030v-IP
     for ; Sat, 06 Nov 2010 14:33:15 +0100
Received: from J (unknown [212.150.147.230])
     (Authenticated sender: moldlera@rambler.ru)
     by maild.rambler.ru (Postfix) with ESMTP id 4679084460
     for ; Sat,  6 Nov 2010 16:33:05 +0300 (MSK)
Date: Sat, 6 Nov 2010 14:40:40 +0200
From: moldlera@rambler.ru
X-Mailer: The Bat! (v3.80.06) Professional
Reply-To: moldlera@rambler.ru
X-Priority: 3 (Normal)
Message-ID: <856750421.20101106144040@rambler.ru>
To: 
Subject: Hello)
In-Reply-To: <43EF4A9B665847B58808BBAF968E347C@your0595711724>
References: <1779948370.20101102094904@rambler.ru> <43EF4A9B665847B58808BBAF968E347C@your0595711724>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------463A691067ECE3"
X-purgate-ID: 149285::1289050395-000065FA-A77174BC/0-0/0-0
Delivered-To: 
Envelope-to: 
Delivered-To: 
X-SpamFlt-Status: Not Detected
X-KASFlt-Status: Profiles 16978 [Nov 03 2010]
X-KASFlt-Status: Version: 4.4.2 (May 26 2010 17:02:10)
X-KASFlt-Status: Envelope from:
X-KASFlt-Status: {received from trusted sender <moldlera@rambler.ru>: white list}
X-KASFlt-Status: Rate: 0
X-KASFlt-Status: Status: trusted
X-KASFlt-Status: Method: white email list
X-SpamFlt-Phishing: Not Detected


« Zuletzt geändert: 14. November 2010 um 12:47 von † Rais † »  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11770
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Lera <moldlera@rambler.ru>
Antwort #6 - 06. November 2010 um 16:48
 
Kommt über Haifa/Israel.

Code
Alles auswählen
212.150.147.230 - Geo Information
IP Address 212.150.147.230
Host 212.150.147.230
Location  IL, Israel
City Haifa, 04 -
Organization Loads
ISP NetVision
AS Number AS1680 013 NetVision Ltd.
 



Zitat:
Date: Sat, 6 Nov 2010 14:40:40 +0200
From: moldlera@rambler.ru
X-Mailer: The Bat! (v3.80.06) Professional


Zitat:
The Bat! (v3.80.06) Professional
  
Zum Seitenanfang
 
IP gespeichert
 
calle
Ex-Mitglied


Re: Lera <moldlera@rambler.ru>
Antwort #7 - 06. November 2010 um 16:56
 
vierauge schrieb on 06. November 2010 um 16:48:
Kommt über Haifa/Israel.



Zitat:
I live in a small city called Zhitomir,


Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
Headhunter
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 5288
Standort: Hinterposemuckeltonne
Mitglied seit: 05. Juli 2009
Geschlecht: männlich
Re: Lera <moldlera@rambler.ru>
Antwort #8 - 06. November 2010 um 17:10
 
@ calle

weinend weinend weinend
  
Zum Seitenanfang
 
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11770
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Lera <moldlera@rambler.ru>
Antwort #9 - 06. November 2010 um 17:21
 
Die gleiche IP hatten wir heute schonmal:

Olesya <dear-lesya@ro.ru>

Kristina <samotnya@myrambler.ru>
« Zuletzt geändert: 06. November 2010 um 17:27 von vierauge »  
Zum Seitenanfang
 
IP gespeichert
 
solpet
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 2
Standort: Attendorf
Mitglied seit: 29. November 2010
Re: Lera <moldlera@rambler.ru>
Antwort #10 - 29. November 2010 um 13:39
 
Ende November immer noch fleißig am Werk, mit Telnr. (achtung 0900 darf Teuer sein!)
I am sending you one more photo of me and also a pic of me and Dasha so that you can see her too))) Hope you will still like me more after this…))))

Oh, what about a phone number, here it is- +380994686297. I do want to hear your voice so much, dear!!! Please, call me soon) But you know how busy I always am, so if it is not a problem for you, call at about 2-4 pm my time, this is my break in the university


Und die obligatorische "one new picture for you , Darling" (s.Anhang).
Kleine Tipp: - immer Bildgröße prüfen. Winzigkleine Bilder (etwa 400*600 pixel oder so)  stammen meißt aus web-Seiten, also
-Original verlangen (auch eine miese Kamera in alte Handy liefert 2Mpix, d.h. mindestens 1600*1200 pixel).
Nach erhalt von angenommene "Original"  EXIF -Datei auslesen,
Erstellungsdatum, Kameratyp merken....
Dürfte später nützlich sein  Cool 

« Zuletzt geändert: 02. Dezember 2010 um 17:16 von † Rais † »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Lera <moldlera@rambler.ru>
Antwort #11 - 29. November 2010 um 15:12
 
solpet schrieb on 29. November 2010 um 13:39:
EXIF -Datei auslesen,

Leider haben die Fotos keine Exif! Allerdings hätte ich noch gern den Quelltext zu der Mail.
  
Zum Seitenanfang
 
IP gespeichert
 
solpet
Scam Warners
*****
Offline


I love Anti-Scam

Beiträge: 2
Standort: Attendorf
Mitglied seit: 29. November 2010
Re: Lera <moldlera@rambler.ru>
Antwort #12 - 29. November 2010 um 17:38
 
Uli schrieb on 29. November 2010 um 15:12:
Leider haben die Fotos keine Exif!

Genau! 
Fotos ohne EXIF (oder EXIF-Eintrag praktisch leer)  sind d. erste Warnung dafür daß um von web "Abgesaufte" Bilder handeln könne, also mit Vorsicht genießen....

Als Nachtrag - anbei die IPs  (-->Quelltext) schaut alles so aus , als es wäre eine alte Bekannte  Ärgerlich  

Received: from maild.rambler.ru ([81.19.66.33])  by smtp2.xxxx.com with
ESMTP; 25 Nov 2010 11:00:12 +0100
Received: from S (unknown [67.212.81.92]) (Authenticated sender:
moldlera@rambler.ru) by maild.rambler.ru (Postfix) with ESMTP id 28A51844D7


  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Lera <moldlera@rambler.ru>
Antwort #13 - 29. November 2010 um 18:40
 
@ solpet

Bitte sende uns immer den Vollheader, da dort noch einige Informationen mehr enthalten sind.

Wenn ich diesen Rudimentärheader so sehe, dann scheint die Mail über Kanada verschleiert worden zu sein:
Code
Alles auswählen
IP-Adresse: 	67.212.81.92
Ländercode der IP: 	CA
Land der IP: 	ip address Canada
Bundesland der IP: 	Quebec
Stadt der IP: 	Laval
Postleitzahl der IP: 	h7w1k6
Breitengrad der IP: 	45.6000
Längengrad der IP: 	-73.7333
Provider der IP: 	Netelligent Hosting Services 



Zur genaueren Beurteilung fehlen die Datezeile, die Folgezeiten, möglicher X-Mailer.
  
Zum Seitenanfang
 
IP gespeichert
 
Headhunter
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 5288
Standort: Hinterposemuckeltonne
Mitglied seit: 05. Juli 2009
Geschlecht: männlich
Re: Lera <moldlera@rambler.ru>
Antwort #14 - 02. Dezember 2010 um 01:56
 
Hello, dear Xxxxx. Thank you for your letter and interest, I do appreciate this, but I can't understand a word from what you say. Could you please write to me in English if you are able to? I will be waiting for your answer soon) 
Lera

Spoiler:
Return-path: <moldlera@rambler.ru>
Delivery-date: Sat, 13 Nov 2010 10:23:37 +0100
Received: from [195.4.92.16] (helo=6.mx.freenet.de)
     by 1.mbox4.freenet.de with esmtpa (ID exim) (Exim 4.72 #3)
     id 1PHCKf-0008Jz-TC
     for ; Sat, 13 Nov 2010 10:23:37 +0100
Received: from mailc.rambler.ru ([81.19.66.27]:8724)
     by 6.mx.freenet.de with esmtp (port 25) (Exim 4.72 #3)
     id 1PHCKf-0001ma-Lr
     for ; Sat, 13 Nov 2010 10:23:37 +0100
Received: from S (unknown [85.13.236.162])
     (Authenticated sender: moldlera@rambler.ru)
     by mailc.rambler.ru (Postfix) with ESMTP id 85A21621C13
     for ; Sat, 13 Nov 2010 12:23:36 +0300 (MSK)
Date: Sat, 13 Nov 2010 11:23:36 +0200
From: moldlera@rambler.ru
X-Mailer: The Bat! (v3.80.06) Professional
Reply-To: moldlera@rambler.ru
X-Priority: 3 (Normal)
Message-ID: <1735629356.20101113112336@rambler.ru>
To: 
Subject: Hi)
In-Reply-To: <B3177731171C48929DCCCD3DFB0738BB@your0595711724>
References: <1779948370.20101102094904@rambler.ru> <43EF4A9B665847B58808BBAF968E347C@your0595711724> <856750421.20101106144040@rambler.ru> <B3177731171C48929DCCCD3DFB0738BB@your0595711724>
MIME-Version: 1.0
Content-Type: text/html; charset=koi8-u
Content-Transfer-Encoding: quoted-printable
X-purgate-ID: 149285::1289640217-00001DC9-4CB3CE9A/0-0/0-0
Delivered-To: 
Envelope-to: 
Delivered-To: 
X-SpamFlt-Status: Not Detected
X-KASFlt-Status: Profiles 17154 [Nov 12 2010]
X-KASFlt-Status: Version: 4.4.2 (May 26 2010 17:02:10)
X-KASFlt-Status: Envelope from:
X-KASFlt-Status: {received from trusted sender <moldlera@rambler.ru>: white list}
X-KASFlt-Status: Rate: 0
X-KASFlt-Status: Status: trusted
X-KASFlt-Status: Method: white email list
X-SpamFlt-Phishing: Not Detected


  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: [1] 2 
Thema versenden
Link zu diesem Thema