Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Olga <olgaloveyour@yahoo.com> <me@localhost.com> (Gelesen: 2598 mal)
 
Berger Louis
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Love Weißbier

Beiträge: 842
Standort: Cham
Mitglied seit: 25. Juli 2009
Geschlecht: männlich
Olga <olgaloveyour@yahoo.com> <me@localhost.com>
15. April 2011 um 20:14
 
Keine Ahnung, wie die an meine Adresse kommt....


Hello friend! My name is Olga. I want to get acquainted with you. I'm 27 years old. And I am lonely, and seeking long-term relations. I wish to find my second half which I have not met before. May be you? I hope, that you will answer me and it will be the beginning of our relations. I wish to find the love, I wish to create a family. I wish to find such man with whom I could construct relations, a family. I do not want game. Because to me the necessary mutual relations. The man who could make me happy which would love me is necessary to me. I send you a picture that you to see who I'm. More about myself I with pleasure will write you, if you answer me. Ask, if you have questions. I will be waiting for your answer. I hope, that you will not keep me waiting for a long time.



Off Topic KommentarMore pictures in the gallery: Smiley


Spoiler für Quelltext:
Received: from [62.149.158.116] (helo=smtpsmart2.aruba.it)
     by mx49.web.de with smtp (WEB.DE 4.110 #2)
     id 1QA8MY-0007U0-00
     for xxx-xxx@web.de; Thu, 14 Apr 2011 00:16:38 +0200
Received: (qmail 12223 invoked by uid 89); 13 Apr 2011 22:16:36 -0000
Received: by simscan 1.2.0 ppid: 8361, pid: 11491, t: 7.3954s
         scanners: clamav: 0.88.4/m:40/d:1945 spam: 3.1.4
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
     smtpsmart2.fe.aruba.it
X-Spam-Level: ***
X-Spam-Status: No, score=3.2 required=6.0 tests=BAYES_50,FORGED_YAHOO_RCVD,
     MISSING_MIMEOLE,RDNS_NONE autolearn=disabled version=3.2.5
Received: from unknown (HELO webs1202.aruba.it) (62.149.131.212)
  by smtpsmart2.fe.aruba.it with SMTP; 13 Apr 2011 22:16:28 -0000
Received: from webs1202 ([127.0.0.1]) by webs1202.aruba.it with Microsoft SMTPSVC(6.0.3790.4675);
      Thu, 14 Apr 2011 00:16:00 +0200
Date: Thu, 14 Apr 2011 00:16:00 +0200
Subject: Hello dear.
To: xxx-xxx@web.de
From: <olgaloveyour@yahoo.com>
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: PHP/5.2.12
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="1302732960SPB"
Message-ID: <WEBS1202SPw8GIgovck000072ee@webs1202.aruba.it>
X-OriginalArrivalTime: 13 Apr 2011 22:16:00.0725 (UTC) FILETIME=[5EDB3050:01CBFA28]
Return-Path: me@localhost.com

--1302732960SPB
Content-type: text/plain; charset="windows-1251"
Content-Transfer-Encoding: 8bit


--1302732960SPB
Content-Type: application/octet-stream;name="this is my foto.JPG"
Content-Transfer-Encoding:base64
Content-Disposition:attachment
« Zuletzt geändert: 17. April 2011 um 21:50 von scambuster » 
Grund: ru10539 
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Razor Buzz
Forum Administrator
Paragraphenreiter Öffentlichkeitsarbeit
*****
Online


Servus

Beiträge: 5948
Standort: Oberpfalz
Mitglied seit: 24. April 2008
Re: Olga <olgaloveyour@yahoo.com> <me@localhost.com>
Antwort #1 - 15. April 2011 um 20:16
 
Die Mail wurde mit einem PHP-Script über Italien versendet:

Code
Alles auswählen
62.149.131.212 - Geo Information
IP Address 	62.149.131.212
Host 	webs1202.aruba.it
Location 	IT IT, Italy
City 	-, - -
Organization 	Aruba S.p.A. - Shared Hosting and Mail services
ISP 	Aruba S.p.A.
AS Number 	AS31034 Aruba S.p.A. - Network
 

« Zuletzt geändert: 16. April 2011 um 21:39 von »  
Zum Seitenanfang
ICQ  
IP gespeichert
 
zapparella
General Counsel
***
Offline


...IST MEIN BESTER FREUND

Beiträge: 20631
Standort: Pians
Mitglied seit: 07. Mai 2009
Geschlecht: weiblich
Re: Olga <olgaloveyour@yahoo.com> <me@localhost.com>
Antwort #2 - 15. April 2011 um 20:23
 
Zitat:
X-Mailer: PHP/5.2.12


@ Razor Buzz

Das ist ein Mailprogramm.  Zwinkernd

Wir haben diesen Mail-Service und Webhoster Aruba aus Italien schon ein paar mal hier bei uns.

Das müsste sich einer, der sich auskennt, mal genauer anschauen.


Yahoo:

Zitat:
Olga Olga
Updates erhalten

    Weiblich - Charleston, West Virginia
    Mitglied seit: 07.04.2011
« Zuletzt geändert: 16. April 2011 um 21:40 von »  
Zum Seitenanfang
 
IP gespeichert
 
scambuster
General Counsel
***
Offline



Beiträge: 6761
Standort: Beuningen
Mitglied seit: 25. April 2010
Geschlecht: männlich
Re: Olga <olgaloveyour@yahoo.com> <me@localhost.com>
Antwort #3 - 15. April 2011 um 22:27
 
« Zuletzt geändert: 16. April 2011 um 21:40 von »  
Zum Seitenanfang
 
IP gespeichert
 
Webmaster
Forum Administrator
*****
Offline


Abgeschlafft und ausgepufft!!

Beiträge: 23873
Standort: Йошкар-Ола
Mitglied seit: 06. Januar 2008
Geschlecht: männlich
Re: Olga <olgaloveyour@yahoo.com> <me@localhost.com>
Antwort #4 - 16. April 2011 um 08:37
 
X-Mailer: PHP/5.2.12

ist ein Mailprogramm, welches normalerweise unter Linux läuft. Diese hier scheint für Windows umgearbeitet worden zu sein.
Der Server scheint ein Windows-Server zu sein. Das Skript ist anscheinend dort installiert. 
Glaube aber eher, dass der Scammer einen eigenen Server betreibt, da die Server IP fehlt und darauf im Returnpath auch hingewiesen wird.

Zitat:
Return-Path: me@localhost.com


Das Skript ist nur auf einem Server lauffähig.

Benutzt wurde der kyrillische Zeichensatz, was wohl auf Rußland hindeutet.

aruba ist ein reiner Webhoster, der keinen Internetzugang anbietet.

Spamversand. Solche Skripts eignen sich dazu bestens.
« Zuletzt geändert: 16. April 2011 um 21:40 von »  
Zum Seitenanfang
IP gespeichert
 
Berger Louis
Themenstarter Themenstarter
Scam Advisors
*****
Offline


I Love Weißbier

Beiträge: 842
Standort: Cham
Mitglied seit: 25. Juli 2009
Geschlecht: männlich
Re: Olga <olgaloveyour@yahoo.com> <me@localhost.com>
Antwort #5 - 17. April 2011 um 09:38
 
Meine neueste Flamme hat geantwortet....


Hello my new friend xxx.
I am very glad, that you became interested by me. I looked your questionnaire and would like to learn you better. 
As you know, my name - Olga. I the usual Russian girl actually not differing than from others.
My age of 27 years, growth: 169, weight: 51 Kg. My birthday on June, 24th, 1983. I never was married and,
hence I have no children. I yet do not know, how many I would like to have children, I while in it was not defined.
I have no bad habits, I do not smoke, and I do not drink alcohol, if only in small quantity on holiday.
From alcohol I drink only red wine. From food I prefer the Russian kitchen. Excuse me if I shall do many mistakes in the letter.
If to you something will be not clear, you ask me again. I wish to find the person who would love and respected with me.
I think, that good relations between the man and the woman should be constructed on trust and respect to each other.
I think, that we should learn each other better that our attitudes were stronger.
Please, also inform me concerning you directly. I do not search for the friend on correspondence. 
I search for the special person to develop true love, and to marry.
If you speak with me for the sake of entertainment, please, do not spend all for nothing time.
I wish to be with you frank, therefore you also should be frank with me!!!
On character I the cheerful person, try to enjoy each moment of my life and to overcome with a smile all difficulties
of my lonely life. In leisure I like to go to cinema and to listen to music of various directions on we wash mood.
Than you like to be borrowed in leisure?
Also I very much like to prepare, to bake various tasty pies to tea. Usually I like to apply slightly imagination in cooking.
I would like to ask to you some questions.
Why you have decided to find the friend through the Internet?
You long search for love on the Internet?
You have the correspondence with other girls from Russia?
On it I finish the letter, and very much I wait your answer. Olga 


Spoiler für Quelltext:

Received: from [98.138.91.19] (helo=nm3-vm2.bullet.mail.ne1.yahoo.com)
     by mx39.web.de with smtp (WEB.DE 4.110 #2)
     id 1QBCRl-0000IS-00
     for xxx-xxx@web.de; Sat, 16 Apr 2011 22:50:25 +0200
Received: from [98.138.90.52] by nm3.bullet.mail.ne1.yahoo.com with NNFMP; 16 Apr 2011 20:50:24 -0000
Received: from [98.138.84.34] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 16 Apr 2011 20:50:24 -0000
Received: from [127.0.0.1] by smtp102.mail.ne1.yahoo.com with NNFMP; 16 Apr 2011 20:50:24 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1302987024; bh=fpZMl5y8DZlX7Xnwjyqq9+yI/+8eA6o3aDMtoKrY8Mc=; s:MIME-Version:Content-Type; sS2zbxCo5CgB4=
X-Yahoo-Newman-Id: 145745.76428.bm@smtp102.mail.ne1.yahoo.com
Received: from [192.168.1.2] (olgaloveyour@80.88.218.204 with plain)
        by smtp102.mail.ne1.yahoo.com with SMTP; 16 Apr 2011 13:50:12 -0700 PDT
X-Yahoo-SMTP: T2DRSbyswBCw5nWvK4AAbtvkxD3rZEEJ6Q--
X-YMail-OSG: VpypkwIVM1nfkDzhARqv6kVUejjb0pQF_T1c9GIdpfXigWc
qjtnurQCmvAgZwwQJ9H1Y1NuYHskfhh3u01qT5G6shSmhq5bcFo5qGfs0a6v
29sDuikdS1.7YF5bnUG5HmoHVzB1Ipx_DamaiL2fq1u6zKQ7EgPIbFveVroP
9IkcQBK8IaPNxciPSBizLkUTh0jj8gPHd3oOuShgHLrEwwl_WEvESDq4xGAF
itEntJFiju1ZX5rhx9YYEI.6M75AOzpkZOuqUPj7_FVJYIx1jdvVWXZlLLV_
LHoEFa1ciG0YU3Dk_.rzqfbfxR6FqokqGiZMF2NP9lQIvMT7M
X-Yahoo-Newman-Property: ymail-3
Date: Sun, 17 Apr 2011 00:44:12 +0700
From: Olga <olgaloveyour@yahoo.com>
X-Mailer: The Bat! (v3.0) Professional
Reply-To: Olga <olgaloveyour@yahoo.com>
X-Priority: 3 (Normal)
Message-ID: <1732845179.20110417004412@yahoo.com>
To: xxx xxx <xxx-xxx@web.de>
Subject: Hello!!!
In-Reply-To: <4DA88BED.30007@web.de>
References: <WEBS1202SPw8GIgovck000072ee@webs1202.aruba.it>
<4DA88BED.30007@web.de>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------108221CA1621BBE3"
Return-Path: olgaloveyour@yahoo.com

------------108221CA1621BBE3
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable


« Zuletzt geändert: 17. April 2011 um 21:51 von scambuster »  
Zum Seitenanfang
 
IP gespeichert
 
Razor Buzz
Forum Administrator
Paragraphenreiter Öffentlichkeitsarbeit
*****
Online


Servus

Beiträge: 5948
Standort: Oberpfalz
Mitglied seit: 24. April 2008
Re: Olga <olgaloveyour@yahoo.com> <me@localhost.com>
Antwort #6 - 17. April 2011 um 09:43
 
Jetzt hat die Abteilung "Depp hat angebissen" übernommen.

Smiley

Code
Alles auswählen
80.88.218.204 - Geo Information
IP Address 	80.88.218.204
Host 	no-dns-yet-assigned.orbital.net
Location 	GB GB, United Kingdom
City 	Dover, G5 -
Organization 	OrbitalNet Ltd
ISP 	OrbitalNet Ltd
AS Number 	AS24916 OrbitalNet Ltd
 




Das passt so gar nicht zur Date-Zeile, aber sehr wohl zu dem hässlichen Nachtgetier, dass da herumflattert...

Zitat:

Date: Sun, 17 Apr 2011 00:44:12 +0700
From: Olga <olgaloveyour@yahoo.com>
X-Mailer: The Bat! (v3.0) Professional


Smiley Smiley Smiley
  
Zum Seitenanfang
ICQ  
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema