Hello & Welcome to our community. Is this your first visit? Register
Results 1 to 10 of 10

Thread: Calling ndikta

  1. #1

    Default Calling ndikta

    Hi,

    what can you tell about this piece of e-mail header:

    Recieved: from unknown (HELO localhost.localdomain)[10.50.30.160](envelope sender<olgua555@list.ru>


    Alex

    Non veritas verba amanda

  2. #2
    Join Date
    Jun 2005
    Posts
    4

    Default

    All I can tell is I wonder what some of you are trying to find in those headers? They easily can be changed to any you want.
    Local host and ip 10.50.30.160. Ip looks like from Vladivostok but I'm not quite sure. However maybe it was your neighbour who decided to laugh at you.

  3. #3

    Default

    My neighbour, haha, I don't think so.

    Source IP is :Recieved from aqua,relinfo.ru(ns.mari-el[195.161.208.130], which gets you as far as volgatelecom.

    Well, I'm interested in just who was trying to shaft me.

    Alex

    Non veritas verba amanda

  4. #4
    Join Date
    Jun 2005
    Posts
    4

    Default

    Dial-up was used, hu?
    SMTP server -

    Organization Name......: Lingva University
    Street Address.........: Ugo-Vostok, Gulder 1-13-68
    City...................: Karaganda
    State..................:
    Postal Code............:
    Country................: KZ

    Administrative Contact/Agent
    NIC Handle.............: AI149-SL
    Name...................: Anort Inc
    Phone Number...........: 455774
    Fax Number.............: 455774
    Email Address..........: ulan1986@rambler.ru

    Servers
    Primary server.........: ns1.anort.com
    Primary ip address.....: 217.107.234.227

    Secondary server.......: ns.mari-el.ru
    Secondary ip address...: 195.161.208.130

  5. #5

    Default

    Hi,

    Yes a dialup server. COMP2.mshome.net(214.237.dialup.mari-el.ru[217.107.237.214] by aqua.reinfo.ru(8.12.11/8.12.11) with ESMTP id j4PxTiV001085

    Alex

    Non veritas verba amanda

  6. #6

    Default

    That place, Karanganda, is like in the middle of nowhere, Kazakstan. Given the address for the money wire was in Kazan, what's going on ?

    ALex

    Non veritas verba amanda

  7. #7
    Join Date
    Jun 2005
    Posts
    4

    Default

    Alex, do you have many her emails? It's needed to look at all or several full headers to tell where she sticks. I bet she is in Kazaxstan, as for Kazan, probably there is her 'workmate' or relative there.
    Anyway, I don't want to tell scammers how to become smarter here, can tell you via email how I've found a person once cos of dial-up. Ha-ha. Dial-up - das ist gut.
    Or you email me mvg2130@mail.com







  8. #8

    Default

    Hi Ndkita,

    I have about 8 I think, I'll forward all the headers to you tonight by e-mail.

    Cheers,

    Alex

    Non veritas verba amanda

  9. #9
    imported_admin Guest

    Default

    Secondary server.......: ns.mari-el.ru
    Secondary ip address...: 195.161.208.130

    Kazan, Cheboksary, Yoshkar-Ola, etc. -> all in Mari-El (Russia)

    Regards,
    Admin

  10. #10

    Default

    Thanks admin,

    that's my original take. I'll be interested to see how Ndtika worked that out.

    Alex

    Non veritas verba amanda

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
All times are GMT. The time now is 12:41 PM.
Powered by vBulletin® Version 4.2.3
Copyright © 2016 vBulletin Solutions, Inc. All rights reserved.
Username Changing provided by Username Change (Free) - vBulletin Mods & Addons Copyright © 2016 DragonByte Technologies Ltd.
vBulletin Skin By: PurevB.com