Booking

[Kilian99]

Das sieht doch auch wieder nach Betrug aus.........


From: - Fri Mar 16 xx:xx:xx 2012
X-Account-Key: account3
X-UIDL: [UID filtered]
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <apache [at] www.mlib.cnr.it>
Received: from www.mlib.cnr.it (UnknownHost [192.167.240.12]) by mail.bghosting01.de with SMTP; Thu, 15 Mar 2012 xx:xx:xx +0100
Received: from www.mlib.cnr.it (www.mlib.cnr.it [127.0.0.1]) by www.mlib.cnr.it (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
Received: (from apache [at] localhost) by www.mlib.cnr.it (8.13.1/8.13.1/Submit) ID: [ID filtered]
Date: Thu, 15 Mar 2012 xx:xx:xx +0100
Message-ID: [ID filtered]
To: Hotel@********.com
Subject: BOOKING
From: Robort Jackson <robinson.agency1 [at] ymail.com>
MIME-Version: 1.0
Content-Type: text/html
X-SmarterMail-Spam: Reverse DNS Lookup, ISpamAssassin 0 [raw: 0], DK_None
X-SmarterMail-TotalSpamWeight: 2
X-AntiVirus: checked (incoming) by AntiVir MailGuard (Version: 10.0.1.42; AVE: 8.2.10.22; VDF: 7.11.25.126)



Hello My name is Robort Jackson, I will want you to assist me to book hotel for two couples coming to your country for their honey moon trip and they intend to stay for 10 days. below is the details for the reservation couples names and details, choice of room..2 double deluxe rooms. check in Date:10th June 2012 Check out Date:20th June 2012 I will like you to book the room for the couples and email me the total cost for the 10 days stay in the 2 double deluxe rooms. Await your response and the quotations. Best wishes,

[Schnabelland]

Klar ist das Betrug - die Masche ist bekannt. Der wird Dir einen Scheck schicken, der zufällig auch noch höher als die Übernachtungskosten ausgestellt ist (oder nach der Buchung wird der Aufenthalt storniert) - und Dich darum bitten, den Differenzbetrag per Western Union zurückzuzahlen. Natürlich darfst Du großzügigerweise 500 Euro für Deinen Aufwand behalten. Nach 3-4 Wochen platzt dann der Scheck und das auf Deinem Konto gutgeschriebene Geld verschwindet wieder - das per WU überwiesene Geld bist Du dagegen los...

Oder der hat jemanden an der Hand, den er mittels einer 419-Geschichte o.ä. zu einer Geldzahlung gebracht hat. Dieses Geld geht dann - angeblich für den Hotelaufenthalt - an Dich, natürlich wieder zu hoch oder wieder mit Stornierung. Differenz oder Storno-Rückerstattung sollst Du ihm dann wieder per WU schicken - und nach ein paar Wochen steht die Polizei bei Dir vor der Tür, möchte das vom Opfer ergaunerte Geld zurückhaben und Du hast ein Verfahren wegen Geldwäsche an der Backe.

[albig]

Klar ist das Betrug - die Masche ist bekannt.
Mir ist auch so, dass ich das schon gesehen habe. Aber diese Mail war mir neu und man findet im Netz nur diese Seite.
Drum hier meine Variante:

Return-Path: <martinejoel23 [at] gmail.com>
Received: (qmail 58139 invoked by UID: [UID filtered]
Received: from mail2.bytecamp.net (212.204.60.30)
by mail.bytecamp.net with SMTP; 4 May 2012 xx:xx:xx +0200
Received: (qmail 85069 invoked from network); 4 May 2012 xx:xx:xx +0200
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on mail2.bytecamp.net
X-Spam-Status: No, score=3.9, required=8.0, tests=BAYES_20=-0.001,DCC_CHECK=4,
DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,FREEMAIL_FROM=0.001,
FREEMAIL_REPLYTO=1,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_LOW=-1, version=3.3.2
Received: from mail-ob0-f193.google.com (209.85.214.193)
by mail2.bytecamp.net with ESMTP; 4 May 2012 xx:xx:xx +0200
Received: by obbup19 with SMTP ID: [ID filtered]
for <MYEMAIL>; Thu, 03 May 2012 xx:xx:xx -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=u0/6jVUUd4KkGUwRZ1Kun4N/GtTE76WFIPN2ynlWW2M=;
b=G+BrAw5p4lz1nPWk7CmGvobyix5G1x6KtziZvg+66Sgz9AD3uPbTXhJqHHVVraBtAf
fUM0e71qPyTqiAvgd1scutu5o4oWw0rXIAT+3tjImco+6eCaQmwW3osIofoW/2IIfzVv
hmv6BDF/Uyh0bWoLJS7CULTlJ0qhgz4bqPeDJIlOWvl6R816IaHARMKtaFelMXIHNQgF
raTSCNCdxaNr/j01zQq6hMhwN4+6Vk+aVt5/4g+g0unlEYY4AM2FPfHjIVBT+GOQDDke
6xwLmFEoTbpqPwMXvy0LGI6RVvhEJjADhK1VDuGWO09FLply10GpaZwsVZzJf5H17sDj
G8SQ==
MIME-Version: 1.0
Received: by 10.182.172.100 with SMTP ID: [ID filtered]
Thu, 03 May 2012 xx:xx:xx -0700 (PDT)
Received: by 10.76.170.232 with HTTP; Thu, 3 May 2012 xx:xx:xx -0700 (PDT)
Reply-To: mcdonaldworker [at] yahoo.com
Date: Fri, 4 May 2012 xx:xx:xx +0100
Message-ID: [ID filtered]
Subject: accommodation
From: McDonald worker <martinejoel23 [at] gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=e89a8f83a1ddfefb4104bf2a5cee
Bcc: MYEMAIL


Hier der Text inklusive aller - auch neuer - Fehler:



Hello My name is Mario Hocker, I will want you to assist me to book hotel
for two couples coming to your country for their honey moon trip and they
intend to stay for 10 days. below is the details for the reservation,
choice of room..2 double deluxe rooms. check in Date:10th July 2012 Check
out Date:20th July 2012 I will like you to book the room for the couples
and email me the total cost for the 10 days stay in the 2 double deluxe
rooms. Await your response and the quotations. Best wishe,

[Kilian99]

Und wieder ein neuer Versuch:

From: - Sat May 12 xx:xx:xx 2012
X-Account-Key: account3
X-UIDL: [UID filtered]
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <stonejohn586 [at] yahoo.com>
Received: from smtp02.one2one.net (smtp02.one2one.net [149.254.192.174]) by mail.bghosting01.de with SMTP; Sat, 12 May 2012 xx:xx:xx +0200
Received: from localhost ([127.0.0.1]) by localhost with esmtp (Exim 4.72) (envelope-from <stonejohn586 [at] yahoo.com>) ID: [ID filtered]
X-Virus-Scanned: Debian amavisd-new at smtpbeckt01.t-mobile.co.uk
Received: from localhost ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP ID: [ID filtered]
Received: from [178.101.0.152] by localhost with smtp (Exim 4.72) (envelope-from <stonejohn586 [at] yahoo.com>) ID: [ID filtered]
Message-ID: [ID filtered]
Mime-Version: 1.0
From: DR JOHN STONE <stonejohn586 [at] yahoo.com>
To: Undisclosed-Recipients:;
Reply-To: drjohnstone296 [at] yahoo.com
Subject: RESERVATION( 2ND July 2012 - 21ST July 2012 )
Date: Sat, 12 May 2012 xx:xx:xx +0100
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
X-SA-Exim-Connect-IP: 127.0.0.1
X-SA-Exim-Mail-From: stonejohn586 [at] yahoo.com
X-SA-Exim-Scanned: No (on localhost); SAEximRunCond expanded to false
X-Rcpt-To: <info@**********.de>
X-SmarterMail-Spam: SPF_None, ISpamAssassin 0 [raw: 0], DK_None, DKIM_None
X-SmarterMail-TotalSpamWeight: 0
X-AntiVirus: checked (incoming) by AntiVir MailGuard (Version: 10.0.1.42; AVE: 8.2.10.64; VDF: 7.11.29.206)



Hello,
WE NEED TO MAKE A RESERVATION FOR 19 DAYS HOLIDAY / BUSINESS RESEARCH
IN YOUR AREA. AND WE NEED ACCOMMODATION FOR OUR GROUP;

(1) NO OF GUEST : 4 PEOPLE

(2) NO OF ROOMS : 2 DOUBLE OR 4 SINGLE
ROOMS/APARTMENT/HOUSE THAT CAN SLEEP 4

(3) NO OF DAYS : 19 DAYS

(4) ARRIVAL DATE : 2ND July 2012

(5) DEPARTURE DATE : 21ST July 2012

REPLY ME WITH THE GRAND TOTAL COST FOR 19 NIGHTS AS WELL AS REQUIRED
TAXES IF ANY.ENDEAVOR TO CALCULATE THE TOTAL COST.
I WAIT TO HEAR FROM YOU SOON.
Yours sincerely
John Stone
105, Hale Lane,
London, NW7 3NU
+447741115591