Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.04 (built Feb 8 2005))
id <0J3W00001CATUJ@mail.usask.ca> (original mail from email@example.com)
for ******@mail.usask.ca; Sat, 12 Aug 2006 12:08:10 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [188.8.131.52])
(iPlanet Messaging Server 5.2 HotFix 2.04 (built Feb 8 2005)) with ESMTP id
<0J3W001HKD17CH@mail.usask.ca> for ******@mail.usask.ca; Sat,
12 Aug 2006 12:08:10 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
by localhost (Postfix) with SMTP id 4EBEA2031FF for <******@mail.usask.ca>;
Sat, 12 Aug 2006 12:07:56 -0600 (CST)
Received: from main.rus-host.net (unknown [184.108.40.206])
by spamf2.usask.ca (Postfix) with ESMTP id 98A562031F9 for
<******@mail.usask.ca>; Sat, 12 Aug 2006 12:07:44 -0600 (CST)
Received: from [220.127.116.11] (helo=COMP) by main.rus-host.net with esmtpa
(Exim 4.52) id 1GBxtO-0000qi-0Y for ******@mail.usask.ca; Sat,
12 Aug 2006 21:07:05 +0300
Date: Fri, 11 Aug 2006 22:07:33 +0400
To: **** <******@mail.usask.ca>
X-Mailer: The Bat! (v18.104.22.168) Professional
Content-type: multipart/mixed; boundary='Boundary_(ID_HrUQS3yIesX96NCBUkFf4Q)'
X-Priority: 3 (Normal)
X-AntiAbuse: This header was added to track abuse,
please include it with any abuse report
X-AntiAbuse: Primary Hostname - main.rus-host.net
X-AntiAbuse: Original Domain - mail.usask.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - exitgro. com
X-PMX-Versionion: 22.214.171.1244296, Antispam-Engine: 126.96.36.1994935,
X-PerlMx-Spam: Gauge=X, Probability=10%, Report='DATE_IN_PAST_12_24 0.776,
NO_REAL_NAME 0, __BAT_BOUNDARY 0, __BAT_MSGID 0, __CP_NAME_BODY 0, __CT 0,
__CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __HAS_MSGID 0, __HAS_X_MAILER 0,
__HAS_X_PRIORITY 0, __MIME_VERSION 0, __SANE_MSGID 0, __THEBAT_MUA 0'
Original-recipient: rfc822;******@mail.us. ca
Content-ty-type: text/plain; charset=Windows-1251
my full name is Ivanova Anastasiya Vladimirovna.
I have found your address on a site afinitidate.
I am 23 years old. I live in Joshkar - Ola with my mother,
and I don't have brothers, sisters, children and ex - husbands.
I work as an office- manager in one of town's firm,
it manes me more independent and broad- minded.
As you can see, I am charming, sociable and intelligent woman,
but I don't know, why Russian men don't appreciate it.
Unfortunately, I am not lucky in love, but I hope,
that it will be all right and very soon I'll find my love.
I'd like to spend my lea sure time traveling,
that is why I have a great number of friends and acquaintances,
who live not only in Russia.
Traveling gives me opportunity to communicate
with people from other countries,
to learn something new just to change a scene.
I really enjoy sea, because it manes me calm
and I forget about all my problems.
I'd live snow and it gives me wonderful opportunity to ski,
to breath fresh air and to be in from.
Of course I can't say that I am a fan of sport,
on the contrary sport isn't for me.
But sometimes I have a great wish to do south
for my health and I go to the gymnasium. But I feel,
that my life is empty without my second half.
I want to fall in love, to feel that there is a man,
who, can help my in hard situation, who understands me,
who takes care of me and loves me.
I am waiting for you, my dear!
N.B. Does this look familiar? Look at the first email I posted with full headers for
this scammer. It's word for word, verbatim as this email above. I did a search for
the domain exitgroups.com on godaddy.com and here's what I found out:
Registration Service Provided By: RUS-HOST
Domain Name: EXITGROUPS.COM
Creation Date: 30-May-2006
Expiration Date: 30-May-2007
Domain servers in listed order:
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: EXITGROUPS.COM
Registrar: ESTDOMAINS, INC.
Whois Server: whois.estdomains.com
Referral URL: http://www.estdomains.com
Name Server: NS1.RUS-HOST.ORG
Name Server: NS2.RUS-HOST.ORG
Updated Date: 30-may-2006
Creation Date: 30-may-2006
Expiration Date: 30-may-2007
>>> Last update of whois database: Sun, 01 Apr 2007 16:32:16 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.