Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: [1] 2  Thema versenden
Heisses Thema (Mehr als 10 Antworten) Lena <creamy.berry_lena@yahoo.com> (Gelesen: 4916 mal)
 
trucker105
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11163
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Lena <creamy.berry_lena@yahoo.com>
21. Februar 2012 um 09:57
 
hello!
My name is Elena!!
I will wait from you the answer! Smiley
My address creamy.berry_lena@yahoo.com

Spoiler:
x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; sender-id=temperror (sender IP is 77.238.189.195) Quelltext.from=creamy.berry_lena@yahoo.com; dkim=pass (testing mode) Quelltext.d=yahoo.com; x-hmca=none
X-Message-Status: n:0:n
X-SID-PRA: creamy.berry_lena <creamy.berry_lena@yahoo.com>
X-DKIM-Result: Pass(t)
X-AUTH-Result: NONE
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD00
X-Message-Info: qOoI7ceuC1Qy2DYkmrPwEwVsBHCG6LAfDlxZg1ZrvyHlSmzB3jFmcTip7tw=
Received: from nm13-vm0.bullet.mail.ird.yahoo.com ([77.238.189.195]) by SNT0-MC1-F27.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
      Sun, 19 Feb 2012 10:41:47 -0800
Received: from [77.238.189.50] by nm13.bullet.mail.ird.yahoo.com with NNFMP; 19 Feb 2012 18:41:47 -0000
Received: from [217.146.188.166] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 19 Feb 2012 18:41:47 -0000
Received: from [127.0.0.1] by smtp134.mail.ird.yahoo.com with NNFMP; 19 Feb 2012 18:41:47 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1329676907; bh=wOpw1aFix0rUI5IjPWHmKhCWxWS6cXbPMk4R8LWssN8=; te:From:X-Mailer:X-Priority:Message-ID:To:Subject:MIME-Version:Content-Type; +DJ6kk3OfFFzs=
X-Yahoo-Newman-Id: 192147.58459.bm@smtp134.mail.ird.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: fxESLa4VM1k6NFxCLZQz_M.dqQo8_dylNoAS_rlxXxeq9O1
HnPE6VF60Z_CzLnJy3KSTCWiQFpkEOFbRWO3NpwEgdQLk5cLuF1C4Gpxlo7C
dcKZMHU2cUawnIFJZHDYEO7EOh3i4iGDcNz.biKuHNgcmzrnBz8tVN99.n.1
qnR7JzvcvEWiOp3S2BEZynMlsqJPrYCIGS3n5letMiLUsH7viFgZ5.0ddYRB
2TcXoQfpY.kx4q2zegCOJ9FOGlQE.dvO_C1jULvjoLuigOC1AAF_0.nC_xCw
SLUUTfWDaYx7HtcjjIzzB7hoMy6tniqeHPemtlkQMEaJaqv9aoz27q2a7T77
zUDWbOFzP_r1iYM0VsxyM8QO0t5yvr6eYI9FiGaw.2lA2Kje9IyWi0OGaHhZ
mgPBRwUZjO6qvmMhM_ADpIWOp91._ayLAVgN9jU41qS50
X-Yahoo-SMTP: rewgxhqswBA6k6yjNazzaKTAmwSplAM9pvFST5su
Received: from MICROSOF-107BDE (creamy.berry_lena@188.187.173.25 with plain)
        by smtp134.mail.ird.yahoo.com with SMTP; 19 Feb 2012 10:41:44 -0800 PST
Date: Sun, 19 Feb 2012 22:34:58 +0400
From: "creamy.berry_lena" <creamy.berry_lena@yahoo.com>
X-Mailer: The Bat! (v3.99.29) Professional
X-Priority: 3 (Normal)
Message-ID: <1695932105.20120219223458@yahoo.com>
To: 
Subject: Hi
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------1038A4F1AEDFFEC"
Return-Path: creamy.berry_lena@yahoo.com
X-OriginalArrivalTime: 19 Feb 2012 18:41:48.0061 (UTC) FILETIME=[22F44CD0:01CCEF36]

------------1038A4F1AEDFFEC
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
  

y_9158f4df.jpg ( 43 KB | Downloads )
y_9158f4df.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Poooh
Ex-Mitglied


Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #1 - 21. Februar 2012 um 10:10
 
Code
Alles auswählen
Abfrage nach IP-Adresse zu Name:  188.187.173.25
Zum Namen gehörende IP-Adresse :  188.187.173.25

Auskunft mit der Webseite https://www.mein-whois.de


Antwort des Whois-Servers whois.ripe.net:

% Information related to '188.187.168.0 - 188.187.175.255'

inetnum:        188.187.168.0 - 188.187.175.255
netname:        ERTH-YOLA-PPPOE-3-NET
descr:          CJSC "Company "ER-Telecom" Yoshkar-Ola
descr:          Yoshkar-Ola, Russia
descr:          PPPoE individual customers
country:        RU
admin-c:        ETHD12-RIPE
org:            ORG-CHYB3-RIPE
tech-c:         ETHD12-RIPE
status:         ASSIGNED PA
mnt-by:         RAID-MNT
source:         RIPE # Filtered
remarks:        INFRA-AW

organisation:   ORG-CHYB3-RIPE
org-name:       CJSC "ER-Telecom Holding" Yoshkar-Ola Branch
org-type:       OTHER
descr:          TM DOM.RU, Yoshkar-Ola ISP
address:        Leninsky prospekt, 12
address:        Yoshkar-Ola, Russia, 424000
phone:          +7 (8362) 30-40-70
fax-no:         +7 (8362) 30-40-70
e-mail:         ripe@ertelecom.ru
admin-c:        ETHD12-RIPE
tech-c:         ETHD12-RIPE
mnt-ref:        RAID-MNT
mnt-by:         RAID-MNT
source:         RIPE # Filtered

role:           Network Operation Center CJSC ER-Telecom Company Mari El branch
address:        12, Lenina st., 424000, Yoshkar-Ola, Russia
phone:          +7 8362 210035
fax-no:         +7 8362 210035
e-mail:         noc@yola.ertelecom.ru
admin-c:        SMS68-RIPE
tech-c:         ALB49-RIPE
tech-c:         AVA89-RIPE
nic-hdl:        ETHD12-RIPE
source:         RIPE # Filtered
mnt-by:         MNT-ERTHOLDING 



Smiley
« Zuletzt geändert: 21. Februar 2012 um 12:40 von † Rais † »  
Zum Seitenanfang
 
IP gespeichert
 
Poooh
Ex-Mitglied


Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #2 - 21. Februar 2012 um 10:12
 
Hier taucht die email-adresse auf 
https://mixer.pl/ksiega-gosci/555800/
  
Zum Seitenanfang
 
IP gespeichert
 
Opfer
General Counsel
***
Offline



Beiträge: 6196
Standort: Berlin
Mitglied seit: 28. März 2011
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #3 - 21. Februar 2012 um 10:43
 
Smiley

Code
Alles auswählen
IP:	        188.187.173.25
Decimal:	3166416153
Hostname:	dynamicip-188-187-173-25.pppoe.yola.ertelecom.ru
ISP:	        CJSC ER-Telecom Holding
Organization:	CJSC Company ER-Telecom Yoshkar-Ola
Services:	None detected
Type:	        Broadband
Assignment:	Dynamic IP
Country:	Russian Federation
State/Region:	Mariy-El
City:	        Yoshkar-ola 


Zitat:
Date: Sun, 19 Feb 2012 22:34:58 +0400
From: "creamy.berry_lena" <creamy.berry_lena@yahoo.com>

Zitat:
X-Mailer: The Bat! (v3.99.29) Professional

Smiley Smiley Smiley
  
Zum Seitenanfang
IP gespeichert
 
vierauge
Forum Administrator
*****
Offline


Ich tu nix. Ich will nur
spielen.

Beiträge: 11810
Standort: Toronto
Mitglied seit: 28. März 2010
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #4 - 21. Februar 2012 um 13:05
 
Zitat:
Hier taucht die email-adresse auf


Und hier auch, mit dem gleichen Text, auf einer polnischen Seite. Allerdings ohne Bild.

https://tlumaczangielskopolski.com/slownik770284-hello-my-na-en-pl.html
« Zuletzt geändert: 21. Februar 2012 um 13:06 von vierauge »  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11163
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #5 - 23. Februar 2012 um 11:26
 
Hi! How are you? I'm sorry if you waited a long time my letter. I am glad that you responded to my message, and leave me your e-mail. I'm waiting for this. I hope you leave me your email address correctly. And I was right with the addressee:)

My name - Elena. I was thinking how to begin our acquaintance, and to tell you about me. But now I can not focus my thoughts because I worry a little. I want to tell you immediately that this is my first acquaintance with a man on the Internet. So I hope you understand my little excitement. But I think that our acquaintance will be pleasant!

But now I would like to ask you a very important question for me. What do you expect from dating a woman? Just entertainment? Flirt? Marriage? This is important for me now. Because I am looking for a serious relationship in the future are going to marry. I do not want to play the flirting. I do not give my photos, which I'll be naked. I'm just ignoring similar requests. I need only reality and transparency in the relationship between a man and a woman. I want you to understand this right away. Of course, it is too early to decide what you and I expect in the future. This does not solve the letters, I think so. All will become clear when we are closer to each other. Therefore, prior to our first meeting, I want to learn as much about you. So that together we were ready for this serious step!

I would like you to sent your photo more and answered my questions honestly. I love the sincerity and truth. Whatever it is. Because it is important to continue our correspondence.

I send you my photo and hope that you like:)

How would you like me to call you by name? How do you call your friends?

I look forward to your answer, and I hope we will meet with you is not by accident.

Your new friend Elena

Spoiler:
C+aLvpnVkL1SlHe9guqsZ9y7SgCcwFYOSf+YJfvS8fy7J9zJTSA==
Authentication-Results: hotmail.com; sender-id=temperror (sender IP is 77.238.189.60) Quelltext.from=creamy.berry_lena@yahoo.com; dkim=pass (testing mode) Quelltext.d=yahoo.com; x-hmca=none
X-Message-Status: n:0:n
X-SID-PRA: creamy.berry_lena <creamy.berry_lena@yahoo.com>
X-DKIM-Result: Pass(t)
X-AUTH-Result: NONE
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MDtHRD0wO1NDTD0w
X-Message-Info: QMDx5I6pKwqh/Kk0jpRmsp1pws5H6Cu1C+sEtblLUMFMJrq/SHixDnbdtvs=
Received: from nm3.bullet.mail.ird.yahoo.com ([77.238.189.60]) by COL0-MC4-F3.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
      Wed, 22 Feb 2012 23:28:54 -0800
Received: from [77.238.189.51] by nm3.bullet.mail.ird.yahoo.com with NNFMP; 23 Feb 2012 07:28:54 -0000
Received: from [217.146.188.63] by tm4.bullet.mail.ird.yahoo.com with NNFMP; 23 Feb 2012 07:28:53 -0000
Received: from [127.0.0.1] by smtp105.mail.ird.yahoo.com with NNFMP; 23 Feb 2012 07:28:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1329982133; bh=XWbamiqBV+Wcabs4cOUziSrFBH7pALl4T0oPRIQVNZU=; rsion:Content-Type; r72uNEbdIIlTo=
X-Yahoo-Newman-Id: 618560.75557.bm@smtp105.mail.ird.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: Ujo6rdgVM1lrD6f.fAqkg0kU.YKKuXmWnQPVz_3Emx6mMRM
L1fM1PZ._Y5ucbwN7topVRev78qOl2TZ_sSCtgkOwDlDBA725uAa1cgFmGDG
u24k0ysCwV4Wx9OejehlvIFDoM5fpMedrnehydW5uHjTxC5LbgLOxDJbp77T
OtCw5whm2VCiMhnAdO_ShnH0Qk9aMad7D3b7DlunHzv33_mZyh2gMXHeiQwm
jzKN1qhosgjShNDneSBvvgLFmKo95z84Tigx2Odimtx9FHpq0e4oKsZ2e3M1
S1RFTEFRw6_zVJFg8iWAzYCMuGbpOcHtDo_UiJVMIFmJcL0GPrFCJmR51RoS
5AgJvfa87ELRNKUJ12L6wxtZOGzB2V9FmPC9KhqITMNq.7r.chkkWd9m79w-
-
X-Yahoo-SMTP: rewgxhqswBA6k6yjNazzaKTAmwSplAM9pvFST5su
Received: from MICROSOF-5A9443 (creamy.berry_lena@176.215.72.148 with plain)
        by smtp105.mail.ird.yahoo.com with SMTP; 22 Feb 2012 23:28:48 -0800 PST
Date: Thu, 23 Feb 2012 11:27:02 +0400
From: "creamy.berry_lena" <creamy.berry_lena@yahoo.com>
X-Mailer: The Bat! (v3.99.29) Professional
X-Priority: 3 (Normal)
Message-ID: <662188576.20120223112702@yahoo.com>
To:
Subject: hello
In-Reply-To: <COL102-W567B4F08997282F8CA43C091640@phx.gbl>
References: <1695932105.20120219223458@yahoo.com> <COL102-W567B4F08997282F8CA43C091640@phx.gbl>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------116D23796ECBDE"
Return-Path: creamy.berry_lena@yahoo.com
X-OriginalArrivalTime: 23 Feb 2012 07:28:55.0149 (UTC) FILETIME=[CC79D1D0:01CCF1FC]

------------116D23796ECBDE
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
  

x_89e5b390.jpg ( 20 KB | Downloads )
x_89e5b390.jpg
x_6e017a5f.jpg ( 24 KB | Downloads )
x_6e017a5f.jpg
x_6dfac05e.jpg ( 24 KB | Downloads )
x_6dfac05e.jpg
Zum Seitenanfang
 
IP gespeichert
 
† Rais †
General Counsel
***
Offline


I love Anti-Scam

Beiträge: 6317
Standort: Oberpfalz
Mitglied seit: 04. März 2008
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #6 - 23. Februar 2012 um 11:34
 
Smiley

Code
Alles auswählen
IP Details for 176.215.72.148

General IP Information
IP:	176.215.72.148
Decimal:	2966898836
Hostname:	dynamicip-176-215-72-148.pppoe.yola.ertelecom.ru
ISP:	CJSC ER-Telecom Holding
Organization:	CJSC ER-Telecom Holding Yoshkar-Ola branch
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Blacklist:
Geolocation Information
Country:	Russian Federation ru flag
State/Region:	Mariy-El
City:	Yoshkar-ola 



Zitat:
Received: from MICROSOF-5A9443 (creamy.berry_lena@176.215.72.148 with plain)
Date: Thu, 23 Feb 2012 11:27:02 +0400
From: "creamy.berry_lena" <creamy.berry_lena@yahoo.com>
X-Mailer: The Bat! (v3.99.29) Professional
« Zuletzt geändert: 23. Februar 2012 um 11:35 von † Rais † »  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11163
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #7 - 23. Februar 2012 um 11:43
 
Da stimmt wieder einiges nicht,
1. ich unterschreie jede Mail mit dem zur e-mail adresse passenden namen
2. ich habe ihr 2 mal geschrieben ich sei nur an einer ernsthaften laengerfristigen Beziehung interressiert
3. sie hat mich kontaktiert, obwohl ich seit 1,5 monaten auf keiner Datingseite mehr bin
  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30429
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #8 - 24. Februar 2012 um 19:00
 
Weitgehend identische Textpassagen und identische  Smiley bei
Yuliya <prinzesaledi@yahoo.com>
Elena <elena_bachelor.girl@yahoo.com>

Außerhalb der Scamszene sind diese Passagen nicht zusammenhängend nachweisbar.

Smiley
  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11163
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #9 - 29. März 2012 um 19:32
 
hat mir den Startbeitrag geschickt, hier der Quelltext:

Spoiler:
X-Message-Info-Pas: FM/VXkrDbocvjDt1
Delivered-To: stpac52@googlemail.com
Received: by 10.205.32.73 with SMTP id sj9csp184394bkb;
        Thu, 29 Mar 2012 08:06:38 -0700 (PDT)
Received: by 10.14.51.207 with SMTP id b55mr5043166eec.53.1333033597100;
        Thu, 29 Mar 2012 08:06:37 -0700 (PDT)
Return-Path: <creamy.berry_lena@yahoo.com>
Received: from nm23-vm5.bullet.mail.ukl.yahoo.com (nm23-vm5.bullet.mail.ukl.yahoo.com. [217.146.176.135])
        by mx.google.com with SMTP id n5si6610407wed.131.2012.03.29.08.06.36;
        Thu, 29 Mar 2012 08:06:37 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of creamy.berry_lena@yahoo.com designates 217.146.176.135 as permitted sender) client-ip=217.146.176.135;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of creamy.berry_lena@yahoo.com designates 217.146.176.135 as permitted sender) smtp.mail=creamy.berry_lena@yahoo.com; dkim=pass (test mode) Quelltext.i=@yahoo.com
Received: from [217.146.183.183] by nm23.bullet.mail.ukl.yahoo.com with NNFMP; 29 Mar 2012 15:06:36 -0000
Received: from [217.146.183.109] by tm14.bullet.mail.ukl.yahoo.com with NNFMP; 29 Mar 2012 15:06:36 -0000
Received: from [127.0.0.1] by smtp110.mail.ukl.yahoo.com with NNFMP; 29 Mar 2012 15:06:36 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1333033596; bh=KOZmO1FALZJwRSB8+wyAicAvsO0jsTdY1K+/C0BQb7Q=; te:From:X-Mailer:X-Priority:Message-ID:To:Subject:MIME-Version:Content-Type; NyVEgZJIOplGg=
X-Yahoo-Newman-Id: 292881.10891.bm@smtp110.mail.ukl.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: oBQ79FAVM1kyxVDSPv2n1erilmB7zfCwlpljmXvX8hFrFqJ
_9tmFgeeEMY3NeSUKUC3wEBEsuF3SNHvMIkCBJ4O.7Bix9FYQPBkDWwkIN4n
uxpnehHRe.UstwQq_snNHsfIvnFHrkTn1yfUFtTXEImLCYNfxPt5gEeKu2gM
9lNadWiq3EO23I.M1giTcWjSrvorV1194MwGbHySc6ewKcwz25AFfJgKUWIY
plzVZ1zKcapEI4l7vtZW87V8lkrgWTc5Q4mmu21J_UTxziIj1Ty.BnwAc08e
DjK7kaf7ujL7sI0lg.QVnTVGgcn9z7v4tmzINr3VUnagu7tJ0ZXUfo._j3Sh
FcwHslGq7MOegpOyY5KzYP38FRLg013x8MrCAgOqh
X-Yahoo-SMTP: rewgxhqswBA6k6yjNazzaKTAmwSplAM9pvFST5su
Received: from MICROSOF-993CBF (creamy.berry_lena@77.40.106.216 with plain)
        by smtp110.mail.ukl.yahoo.com with SMTP; 29 Mar 2012 08:06:28 -0700 PDT
Date: Thu, 29 Mar 2012 19:06:15 +0400
From: "creamy.berry_lena" <creamy.berry_lena@yahoo.com>
X-Mailer: The Bat! (v3.99.29) Professional
X-Priority: 3 (Normal)
Message-ID: <514199424.20120329190615@yahoo.com>
To: 
Subject: Hi
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------F51B216A3D297945"

------------F51B216A3D297945
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11163
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #10 - 29. März 2012 um 19:33
 
Post aus Mari El:

Code
Alles auswählen
General IP Information
IP:	77.40.106.216
Decimal:	1294494424
Hostname:	216.106.pppoe.mari-el.ru
ISP:	OJSC Rostelecom
Organization:	xDSL dynamic pools
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Blacklist:
Geolocation Information
Country:	Russian Federation ru flag
State/Region:	Mariy-El
City:	Yoshkar-ola
Latitude:	56.6369
Longitude:	47.8711 

  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 67867
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #11 - 29. März 2012 um 19:36
 
Zitat:
from MICROSOF-993CBF (creamy.berry_lena@77.40.106.216 with plain) by smtp110.mail.ukl.yahoo.com with SMTP; 29 Mar 2012 08:06:28 -0700 PDT
Date: Thu, 29 Mar 2012 19:06:15 +0400
From: "creamy.berry_lena" <creamy.berry_lena@yahoo.com>
X-Mailer: The Bat! (v3.99.29) Professional
  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11163
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #12 - 29. März 2012 um 19:37
 
Und nochmal der Starteitrag auf ne andere e-mail adresse:

Spoiler:
ONSpsiAmOnp48Ht6qoqQRy6USPQwdk7XBM9WDaP8mJ4+9zTOAJxWT96ifxe+Xo0QlLq+Cr6k=
Authentication-Results: hotmail.com; sender-id=none (sender IP is 217.146.183.192) Quelltext.from=creamy.berry_lena@yahoo.com; dkim=pass (testing mode) Quelltext.d=yahoo.com; x-hmca=pass
X-SID-PRA: creamy.berry_lena@yahoo.com
X-SID-Result: None
X-DKIM-Result: Pass(t)
X-Message-Status: n:0:n
X-AUTH-Result: PASS
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0yO1NDTD0w
X-Message-Info: mHouPe8hp4hpcOIE/FmbXpOvGsYBgl79F/hqXe/PNhNUbjvCp+EgUrBicFG6wJrn6werBA==
Received: from nm18.bullet.mail.ukl.yahoo.com ([217.146.183.192]) by COL0-MC2-F31.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
      Thu, 29 Mar 2012 08:16:33 -0700
Received: from [217.146.183.209] by nm18.bullet.mail.ukl.yahoo.com with NNFMP; 29 Mar 2012 15:16:32 -0000
Received: from [77.238.184.54] by tm2.bullet.mail.ukl.yahoo.com with NNFMP; 29 Mar 2012 15:16:32 -0000
Received: from [127.0.0.1] by smtp123.mail.ukl.yahoo.com with NNFMP; 29 Mar 2012 15:16:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1333034192; bh=vm95YmrdkbvEYBQXoGjixHQkFNlsgbGhDM6YRXcFy9Q=; te:From:X-Mailer:X-Priority:Message-ID:To:Subject:MIME-Version:Content-Type; uJaIX/Ly1f3vI=
X-Yahoo-Newman-Id: 461490.81100.bm@smtp123.mail.ukl.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: SGUlul0VM1mH8E3FMNm07OfzZvF_fuL.JOmjgazYNUahh5d
a9YZKul1N4Z5PAI9wo_nU21C41vc1jCz_ku2oHQEQlqGJt.H.cn5IhUGtpf0
ChHNXckiTFqxoTsRriFgaEHfPS72it5a7RYGI6q02_zyzTITkiGtM1SOdwx5
DleVOv0oghTbZbo1y1xrunur6_5uEjgWu6hdHvmlegVmgsdqvcJHaQCf0vcK
d2I7ff0wk4hUz_HA1EUZGKsgzAdQ8nrEfhB.YQcKHgxBU_LgL0S2jEsAikdk
Fo8SH_bDwERTvWdcpZPeF7SHTJSL3DNbLuUP30r8xP2PRzgp8Q_7dF1ozxaN
XaiqzhvNqSzyBdep.UklSg1YH4AJQvtjKh..W
X-Yahoo-SMTP: rewgxhqswBA6k6yjNazzaKTAmwSplAM9pvFST5su
Received: from MICROSOF-993CBF (creamy.berry_lena@77.40.106.216 with plain)
        by smtp123.mail.ukl.yahoo.com with SMTP; 29 Mar 2012 15:16:00 +0000 GMT
Date: Thu, 29 Mar 2012 19:12:43 +0400
From: "creamy.berry_lena" <creamy.berry_lena@yahoo.com>
X-Mailer: The Bat! (v3.99.29) Professional
X-Priority: 3 (Normal)
Message-ID: <441550301.20120329191243@yahoo.com>
To: 
Subject: Hi
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------6DAD3029345B84"
Return-Path: creamy.berry_lena@yahoo.com
X-OriginalArrivalTime: 29 Mar 2012 15:16:33.0821 (UTC) FILETIME=[ED34A4D0:01CD0DBE]

------------6DAD3029345B84
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11163
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #13 - 29. März 2012 um 19:38
 
Post aus Mari El:

Code
Alles auswählen
IP:	77.40.106.216
Decimal:	1294494424
Hostname:	216.106.pppoe.mari-el.ru
ISP:	OJSC Rostelecom
Organization:	xDSL dynamic pools
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Blacklist:
Geolocation Information
Country:	Russian Federation ru flag
State/Region:	Mariy-El
City:	Yoshkar-ola
Latitude:	56.6369
Longitude:	47.8711 

  
Zum Seitenanfang
 
IP gespeichert
 
trucker105
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11163
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Re: Lena <creamy.berry_lena@yahoo.com>
Antwort #14 - 29. März 2012 um 19:42
 
Und nochmal der Startbeitrag,hier der Quelltext:

Spoiler:
L84XtJf1vIEnm952IyX21bXKsvaetRiStgEvnd2kyTDGcjH1YPfvCv5o5/GdZo3ZAIHZT+es=
Authentication-Results: hotmail.com; sender-id=none (sender IP is 217.146.183.186) Quelltext.from=creamy.berry_lena@yahoo.com; dkim=pass (testing mode) Quelltext.d=yahoo.com; x-hmca=pass
X-SID-PRA: creamy.berry_lena@yahoo.com
X-SID-Result: None
X-DKIM-Result: Pass(t)
X-Message-Status: n:0:n
X-AUTH-Result: PASS
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0yO1NDTD0w
X-Message-Info: Rm9+9BS0ItSgC0+CMaf/2feGl/AWnY4bNiseNvF/XPnd1oi5+HlApHOUXckQ0PY8jd/I9A==
Received: from nm12.bullet.mail.ukl.yahoo.com ([217.146.183.186]) by BAY0-MC1-F3.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
      Thu, 29 Mar 2012 08:12:23 -0700
Received: from [217.146.183.184] by nm12.bullet.mail.ukl.yahoo.com with NNFMP; 29 Mar 2012 15:12:22 -0000
Received: from [77.238.184.69] by tm15.bullet.mail.ukl.yahoo.com with NNFMP; 29 Mar 2012 15:12:22 -0000
Received: from [127.0.0.1] by smtp138.mail.ukl.yahoo.com with NNFMP; 29 Mar 2012 15:12:22 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1333033942; bh=b/hpfuT66jqWk3Ar6URCtpN3s/R13DPsoZ75U30k54w=; te:From:X-Mailer:X-Priority:Message-ID:To:Subject:MIME-Version:Content-Type; c0gUGVMHnKw08=
X-Yahoo-Newman-Id: 310370.33267.bm@smtp138.mail.ukl.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: KKRacCsVM1m2HboyYYLIO.ga28sJ1nmrGNM3ft58_EVOYA8
9JPM3z2CL4dhNjrk646VLOiHAk_wTRwhdfVyjKgaBKdUTq8SHuNWHUfZhb92
O2PHnJL8gPRmmgnYDw.UHfVxOSRyRs.bXIai_9EJ.JJzbVI6V8DkaVovCaRX
RKSyTF2k5amy9cmo7OFPwbYG2MamGtZAkTtiSrNDLM4UpIGnHAtlaKkCYJ68
DQMnsuH8G4Ju4Zc40Q1RcCH65boLId4aD18Rs_xccDw6pjM6hAbOgZMzobT8
o0_Y4.dOWtAWTzGgmZNQRxA3Ai3qSJ1LCaM02W6yb9ik0UZDYtGQP7b5koUa
ZCF.3LYKrj7nbvkLXQefo3Nt3Lre2vW5ciPB_
X-Yahoo-SMTP: rewgxhqswBA6k6yjNazzaKTAmwSplAM9pvFST5su
Received: from MICROSOF-993CBF (creamy.berry_lena@77.40.106.216 with plain)
        by smtp138.mail.ukl.yahoo.com with SMTP; 29 Mar 2012 15:12:00 +0000 GMT
Date: Thu, 29 Mar 2012 19:08:41 +0400
From: "creamy.berry_lena" <creamy.berry_lena@yahoo.com>
X-Mailer: The Bat! (v3.99.29) Professional
X-Priority: 3 (Normal)
Message-ID: <1354493564.20120329190841@yahoo.com>
To: 
Subject: Hi
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------10A1DE15234894EA"
Return-Path: creamy.berry_lena@yahoo.com
X-OriginalArrivalTime: 29 Mar 2012 15:12:23.0991 (UTC) FILETIME=[584B9C70:01CD0DBE]

------------10A1DE15234894EA
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: [1] 2 
Thema versenden
Link zu diesem Thema