Forum Antiscam
Ekaterina <rmvaekat@yahoo.com> <katyaromua@yahoo.com> <2044@poczta.fm> - Druckversion

+- Forum Antiscam (http://antiscam.de)
+-- Forum: Sonstige Scam - Kontakte (/forumdisplay.php?fid=20)
+--- Forum: Scam aus dem Rest der Welt. (/forumdisplay.php?fid=21)
+--- Thema: Ekaterina <rmvaekat@yahoo.com> <katyaromua@yahoo.com> <2044@poczta.fm> (/showthread.php?tid=7953)



Ekaterina <rmvaekat@yahoo.com> <katyaromua@yahoo.com> <2044@poczta.fm> - abu1963 - 19.11.2013 14:37

Hey!
Great pleasure for me that i was lucky to write this message to you. My name is Ekaterina, I'm 26 years.
I found your page on dating source and you cause me interest.
Please excuse me beforehand if I've disturbed or bothered you with
something but i would want exchanging emails with you sometime. what
about you? I'm searching someone unique,worthy and noble. Oh Ok what
about my personality I'm open-hearted,open-armed,sincere person with
various hobbies,which make me many-sided woman.
I love sex. We can communicate and share pics, even erotic. That's one of my pics.

Please write to my private mail box: rmvaekat@yahoo.com

I hope that you will answer and tell me more about yourself, also you will send me
your juicy photo and your real name. Regards, Ekaterina

Spoiler :
Return-Path: 2044@poczta.fm
Received: from smtpo.poczta.interia.pl ([217.74.65.153]) by mx-ha.web.de
(mxweb105) with ESMTPS (Nemesis) id 0MhjO3-1W1xzH1guZ-00Mpxu for
xxx; Tue, 12 Nov 2013 19:09:12 +0100
Received: from smtpsender41 (unknown [64.120.177.210])
by http://www.poczta.fm (INTERIA.PL) with ESMTPA;
Tue, 12 Nov 2013 19:09:07 +0100 (CET)
From: "Sexy Ekaterina" <2044@poczta.fm>
Subject: I will wait for your response
To: xxx@yahoo.fr
Content-Type: multipart/mixed; charset=UTF-8; boundary="u=_ThXrFZJDa4Ll6u0fukMMkhm5zFuKPff"
MIME-Version: 1.0
Reply-To: katyaromua@yahoo.com
Date: Tue, 12 Nov 2013 13:09:05 -0500
X-Mailer: PocoMail 0.4 (1830) - Licensed Version
X-Interia-Antivirus: OK
Message-Id: <20131112180911.513A120038@poczta.interia.pl>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=interia.pl;
s=biztos; t=1384279751;
bh=tJLTY/ILK4UjG0ARJAtNpK75/gR2XijULG+tqOsjcio=;
h=Received:Received:From:Subject:To:Content-Type:MIME-Version:
Reply-To:Date:X-Mailer:X-Interia-Antivirus:Message-Id;
b=ncmDfkJba1uTSQwVlYv3DGThtFoGQtTBer1J8q+EBseC6y5BWpIdr8orJbgjkdAVl
aEWmgGpq9p0xTZ5YRVofIUe2f/qWYzImh80//pYWJxMmMFX4qhNjBK47L02oII8kWr
7oQDv5iNG5tsWcMQA7jac137k9KrPLYQFzCoElaU=
Envelope-To: xxx

Eingeliefert über die USA:
Code:
IP:    64.120.177.210
Decimal:    1081651666
Hostname:    64-120-177-210.static.hostnoc.net
ISP:    Network Operations Center
Organization:    Network Operations Center
Services:    None detected
Type:    Corporate
Assignment:    Static IP
Country:    United States us flag
State/Region:    Oregon
City:    Salem

Interessant bei der Einlieferung ist die eingestellte Rechnerzeit von -0500. Diese finden wir auch bei

http://antiscam.de/showthread.php?tid=7952&pid=19614#pid19614

ebenso die Einlieferung über den polnischen Freemail Anbieter (IP 217.74.65.153)!
Die Rechnerzeit passt bei keinem der beiden Themen zur gewählten Einlieferung...

Das Bild der Dame fiel bereits negativ auf:

http://anti-scam.de/cgi-bin/yabb2/YaBB.pl?action=print;num=1378580595

[Bild: picture_ab5ash.jpg]