DelphiFAQ Home Search:

Dating scammer Anna from Kazan, Russia

 

comments73 comments. Current rating: 5 stars (58 votes). Leave comments and/ or rate it.

Name: Anna þÁÐÁÊËÉÎÁ


Email: elenka1978_78@mail.ru,glvinaa@rambler.ru


Address:
Apartment 36, 28 Petrov Street
Kazan Russia


Other Comments:
She gave the above postal information as her postal address, when she contacted me for money. However, her initial IP address she emailed me from is from none other than Joshar-Ola, in Mariy-El Republic
My IP address: 217.107.237.79 (copy)
IP country: Russian Federation
IP Address state: Mariy-El
IP Address city: Yoshkar-Ola
IP latitude: 56.636902
IP longitude: 47.871101
isp: RTComm.RU
organization: Mari El Net
your speed:
http://ip-adress.com/

I have only 2 photographs of this woman, if that's really her in the photos. These will be added as soon as I'm given permission to post them. In the meantime, go to this photoalbum to see them for yourself.
http://s67.photobucket.com/albums/h287/eldiablonacho/anna/
These photos were attached to the first email sent to me by her. I will do detailed email analysis as time permits, in terms of search engines, IP address analysis, email account analysis, and name analysis.



Content-type: text/html

Comments:

You are on page 4 of 5, other pages: 1 2 3 [4] 5
2007-04-10, 20:29:34
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9000B01I74DK@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Sun, 19 Nov 2006 22:46:06 -0600 (CST)
Received: from spamf4.usask.ca (spamf4.usask.ca [128.233.150.98])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J90000RMIKQYE@mail.usask.ca> for ******@mail.usask.ca; Sun,
19 Nov 2006 22:46:02 -0600 (CST)
Received: from spamf4.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 8A70277028     for <******@mail.usask.ca>;
Sun, 19 Nov 2006 22:46:03 -0600 (CST)
Received: from f77.mail.ru (f77.mail.ru [194.67.57.177])
    by spamf4.usask.ca (Postfix) with ESMTP id 17B6777025     for
<******@mail.usask.ca>; Sun, 19 Nov 2006 22:46:03 -0600 (CST)
Received: from mail by f77.mail.ru with local     id 1Gm12f-000OgZ-00     for
******@mail.usask.ca; Mon, 20 Nov 2006 07:46:01 +0300
Received: from [217.107.236.1] by win.mail.ru with HTTP; Mon,
20 Nov 2006 07:46:01 +0300
Date: Mon, 20 Nov 2006 07:46:01 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Song_that_you_wrote_for_me?=
In-reply-to: =?koi8-r?Q?
<1163984310.4560fdb68ba23=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.236.1]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1Gm12f-000OgZ-00.elenka1978_78-mail-ru@f77.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8BIT
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.19.203432
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CHARSET_IS_KOI8R 0,
__CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0,
__HAS_X_MAILER 0, __HIGHBITS 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0,
__RUS_WEBMAIL_FROM 0, __RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca
GREETINGS my dear! I know I it too heard, that was a lot of deceit! I lovely not ÉÓÔÅÈ women! LOVELY I simply very much want you to see and understand, that you for the person and you too I think want me to see! LOVELY simply to wait it long we should ÈÏÔÑÂÙ see each other to talk and learn(talk and find out) we approach whether or not! LOVELY I ask you I shall help me to fly to you in 5 days! I wait the answer very quickly!

The IP address, 217.107.236.1, has been mentioned here:
http://www.mailorde..opic=2258
http://www.edu.ru/i..=1&id=103
http://www.edu.ru/i..=1&id=106

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://ripe.net/fcg..it=Search

IP address:     217.107.236.1
IP country: Russian Federation
IP Address state:     Mariy-El
IP Address city:     Yoshkar-Ola
IP latitude:     56.636902
IP longitude:     47.871101
ISP:     RTComm.RU
Organization:     Mari El Net
http://ip-adress.com/
2007-04-10, 20:35:43   (updated: 2007-04-10, 20:43:20)
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9100901OY098@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Mon, 20 Nov 2006 14:15:55 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [128.233.150.90])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9100EJSPMJYU@mail.usask.ca> for ******@mail.usask.ca; Mon,
20 Nov 2006 14:15:55 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id BDEC0203206     for <******@mail.usask.ca>;
Mon, 20 Nov 2006 14:15:55 -0600 (CST)
Received: from mail.usask.ca (mail.usask.ca [128.233.192.250])
    by spamf2.usask.ca (Postfix) with ESMTP id 806502031FE     for
<******@mail.usask.ca>; Mon, 20 Nov 2006 14:15:55 -0600 (CST)
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9100001OO36E@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Mon, 20 Nov 2006 14:11:52 -0600 (CST)
Received: from f62.mail.ru (f62.mail.ru [194.67.57.96])
by mail.usask.ca (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8
2006)) with ESMTP id <0J9100CSQPFKPK@mail.usask.ca> for ******@mail.usask.ca;
Mon, 20 Nov 2006 14:11:49 -0600 (CST)
Received: from mail by f62.mail.ru with local     id 1GmFUB-000BBO-00     for
******@mail.usask.ca; Mon, 20 Nov 2006 23:11:23 +0300
Received: from [195.161.247.34] by win.mail.ru with HTTP; Mon,
20 Nov 2006 23:11:23 +0300
Date: Mon, 20 Nov 2006 23:11:23 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164043419.4561e49b2105d=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [195.161.247.34]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GmFUB-000BBO-00.elenka1978_78-mail-ru@f62.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8BIT
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.20.115933
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='LEO_OBFU_SUBJ_RE 0.1,
__CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0,
__CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __HIGHBITS 0,
__MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RUS_WEBMAIL_FROM 0,
__RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca
GREETINGS my lovely! I'm fine! I ÐÒÏÔÏ want you to see and communicate with you I want to be sure, that you I approach(suit) me! I took money at familiar and have added the for the visa and the ticket at me ÅÊÞÁÓ not È×ÏÔÁÅÔ money! If you want to see me and to talk I think you to me will help! Simply I for this purpose already have much made! I want to see you! I shall fly all for two days and back! And it will be then visible when I can arrive(fly) to you! LOVELY I wait the letter with hope, that you will understand me! Yours Anna

195.161.247.34 is the IP address.
http://www.fido7.ru..9.57.html
http://www.school.e..3798&pg=5
http://www.school.e..1999&pg=2

IP address info:
IP address:     195.161.247.34
IP country:     Russian Federation
IP Address state:     Mariy-El
IP Address city:     Yoshkar-Ola
IP latitude:     56.636902
IP longitude:     47.871101
ISP:     RTComm.RU
Organization:     Mari El Net
http://ip-adress.com/
This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '195.161.244.0 - 195.161.247.255'

inetnum: 195.161.244.0 - 195.161.247.255
netname: MARTELCOM
descr: Mari El Net
descr: VolgaTelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '195.161.0.0/16AS8342'

route: 195.161.0.0/16
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered

http://ripe.net/fcg..mit=Search
2007-04-10, 20:42:42   (updated: 2007-04-10, 20:43:56)
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9200H01EWLGQ@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Mon, 20 Nov 2006 23:26:45 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [128.233.150.90])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J92007G8F4LV7@mail.usask.ca> for ******@mail.usask.ca; Mon,
20 Nov 2006 23:26:45 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 67F9620323F     for <******@mail.usask.ca>;
Mon, 20 Nov 2006 23:26:46 -0600 (CST)
Received: from f53.mail.ru (f53.mail.ru [194.67.57.88])
    by spamf2.usask.ca (Postfix) with ESMTP id DCBB420323C     for
< ******@mail.usask.ca>; Mon, 20 Nov 2006 23:26:45 -0600 (CST)
Received: from mail by f53.mail.ru with local     id 1GmO9b-0009uH-00     for
******@mail.usask.ca; Tue, 21 Nov 2006 08:26:43 +0300
Received: from [217.107.237.8] by win.mail.ru with HTTP; Tue,
21 Nov 2006 08:26:43 +0300
Date: Tue, 21 Nov 2006 08:26:43 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164082644.45627dd4c1841=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.237.8]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GmO9b-0009uH-00.elenka1978_78-mail-ru@f53.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8BIT
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.20.210932
X-PerlMx-Spam: Gauge=XXIIIIIII, Probability=27%, Report='RCVD_IN_CBL 3,
LEO_OBFU_SUBJ_RE 0.1, __CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0,
__CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __HIGHBITS 0,
__MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RUS_WEBMAIL_FROM 0,
__RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822; ******@mail.usask.ca

Greetings my lovely! I shall live in hotel! I shall be at you only two days, lovely I ask you ÐÏÍÏÇÉ to me I very much I want to see you and to talk! I shall not distract you from work when you will finish work we we see you! It is necessary for me in 4000 thousand roubles! LOVELY I ask you to help me I very much, I very(very much) want you to see and talk to you very much it I want! I shall wait for your letter lovely! I ask answer me faster!

N.B. She asks for 4000 rubles, which isn't much, but real Russian women never ask for money. The IP address, 217.107.237.8 is mentioned here:
http://www.datingnm..tters.htm
http://agroferma.co..hp?lng=ru
http://www.edu.ru/i..r=4&id=35
http://www.edu.ru/i..r=4&id=35
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://ripe.net/fcg..ch=Search
IP address info:
IP address:     217.107.237.8
IP country:     Russian Federation
IP Address state:     Mariy-El
IP Address city:     Yoshkar-Ola
IP latitude:     56.636902
IP longitude:     47.871101
ISP:     RTComm.RU
Organization:     Mari El Net
http://ip-adress.com/
2007-04-10, 20:51:11
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9200I01PD8WV@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Tue, 21 Nov 2006 03:09:17 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [128.233.150.90])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J920050DPFHSW@mail.usask.ca> for ******@mail.usask.ca; Tue,
21 Nov 2006 03:09:17 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id E7192203256     for <******@mail.usask.ca>;
Tue, 21 Nov 2006 03:09:17 -0600 (CST)
Received: from f79.mail.ru (f79.mail.ru [194.67.57.179])
    by spamf2.usask.ca (Postfix) with ESMTP id 656CD203245     for
<******@mail.usask.ca>; Tue, 21 Nov 2006 03:09:17 -0600 (CST)
Received: from mail by f79.mail.ru with local     id 1GmRcs-000G2o-00     for
******@mail.usask.ca; Tue, 21 Nov 2006 12:09:10 +0300
Received: from [217.107.237.205] by win.mail.ru with HTTP; Tue,
21 Nov 2006 12:09:10 +0300
Date: Tue, 21 Nov 2006 12:09:10 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164082644.45627dd4c1841=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.237.205]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GmRcs-000G2o-00.elenka1978_78-mail-ru@f79.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8bit
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.21.5432
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='LEO_OBFU_SUBJ_RE 0.1,
__CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0,
__CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __MIME_TEXT_ONLY 0,
__MIME_VERSION 0, __RUS_WEBMAIL_FROM 0, __RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822; ******@mail.usask.ca
Greetings my lovely! I wait your letter I very much I want you to see! I went learn(find out) flight to November, 24 I can to reserve places on this number! LOVELY I think you of me you understand also to me will help! I wait for the letter, I also should collect things which to me will are necessary on trip! I wait your answer very much, very much! I very much worry before it! I very much want you to see and speak with you! I wait the answer! Yours Anna

217.107.237.205 is the IP address. I've already done a report for this IP address.
http://www.edu.ru/i..=1&id=243
http://www.fido7.ru..0.05.html
http://www.school.e..7897&pg=2
http://www.school.e..2588&pg=7
http://www.antiscam..=previous

IP address info:
IP address:     217.107.237.205
IP country:     Russian Federation
IP Address state:     Mariy-El
IP Address city:     Yoshkar-Ola
IP latitude:     56.636902
IP longitude:     47.871101
ISP:     RTComm.RU
Organization:     Mari El Net
http://ip-adress.com/
This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered

http://ripe.net/fcg..mit=Search
2007-06-18, 11:40:42
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9300K01GUQCZ@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Tue, 21 Nov 2006 13:03:00 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [128.233.150.90])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9300DO7GWWBQ@mail.usask.ca> for ******@mail.usask.ca; Tue,
21 Nov 2006 13:02:56 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id A32132032AB     for <******@mail.usask.ca>;
Tue, 21 Nov 2006 13:02:57 -0600 (CST)
Received: from mail.usask.ca (mail.usask.ca [128.233.192.250])
    by spamf2.usask.ca (Postfix) with ESMTP id 522EE2032A7     for
<******@mail.usask.ca>; Tue, 21 Nov 2006 13:02:57 -0600 (CST)
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9300K01GUQCZ@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Tue, 21 Nov 2006 13:01:44 -0600 (CST)
Received: from f10.mail.ru (f85.mail.ru [194.67.57.145])
by mail.usask.ca (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8
2006)) with ESMTP id <0J9300DBEGUFBQ@mail.usask.ca> for ******@mail.usask.ca;
Tue, 21 Nov 2006 13:01:28 -0600 (CST)
Received: from mail by f10.mail.ru with local     id 1Gmamx-0008b4-00     for
******@mail.usask.ca; Tue, 21 Nov 2006 21:56:11 +0300
Received: from [217.107.237.188] by win.mail.ru with HTTP; Tue,
21 Nov 2006 21:56:11 +0300
Date: Tue, 21 Nov 2006 21:56:11 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164132644.456341241c720=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.237.188]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1Gmamx-0008b4-00.elenka1978_78-mail-ru@f10.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8BIT
iPlanet-SMTP-Warning: Lines longer than SMTP allows found and truncated.
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.21.104932
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CHARSET_IS_KOI8R 0,
__CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0,
__HAS_X_MAILER 0, __HIGHBITS 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0,
__RUS_WEBMAIL_FROM 0, __RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca


Greetings my lovely! I so waited for your letter! Lovely you have not correctly understood me! I shall take tickets, the place for two days will be given to me in hotel - all this is paid already by me here in Russia! I think now you of me have understood, I should add 4000 roubles in �������n that I could fly to you! I already have provided all! Now I think you of me have understood! I shall be two days at you in the country I shall go as the tourist! Lovely I also has learned(has found out) as I can receive money to me have told, that is possible through ' Gramme of MONEY '! I today went all have learned(have found out) to me it is necessary to reserve places and to take the ticket within three days, but it would be better to make it tomorrow, simply I am afraid to not have time to take tickets then! I shall wait the answer! I am very much adjusted you to see my lovely! I also very much worry before our meeting! All right I wait the answer I think you of me have understood!
Yours A

Analysis: The IP address 217.107.237.188, has the following information found here:
http://www.ripe.net..ch=Search
This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered

It also turns up here:
http://www.edu.ru/i..er=2&id=1
http://vteacher.net..-2006.log
http://avto-remont....188.html
http://www.school.e..5401&pg=3
IP address location and IP info:
IP address:     217.107.237.188
IP country:     Russian Federation
IP address state:     Mariy-El
IP address city:     Yoshkar-Ola
IP latitude:     56.636902
IP longitude:     47.871101
ISP:     RTComm.RU
Organization:     Mari El Net
Host:     188.237.dialup.mari-el.ru
Local Time:     2007-06-18 21:39

http://ip-adress.com/
2007-06-18, 11:51:18
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9300B01M52QW@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Tue, 21 Nov 2006 14:57:43 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [128.233.150.90])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9300HTFM861V@mail.usask.ca> for ******@mail.usask.ca; Tue,
21 Nov 2006 14:57:42 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 55F04203282     for <******@mail.usask.ca>;
Tue, 21 Nov 2006 14:57:43 -0600 (CST)
Received: from mail.usask.ca (mail.usask.ca [128.233.192.250])
    by spamf2.usask.ca (Postfix) with ESMTP id 0700F203223     for
<******@mail.usask.ca>; Tue, 21 Nov 2006 14:57:43 -0600 (CST)
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9300B01M52QW@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Tue, 21 Nov 2006 14:57:30 -0600 (CST)
Received: from f76.mail.ru (f76.mail.ru [194.67.57.176])
by mail.usask.ca (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8
2006)) with ESMTP id <0J9300ITBM7N81@mail.usask.ca> for ******@mail.usask.ca;
Tue, 21 Nov 2006 14:57:29 -0600 (CST)
Received: from mail by f76.mail.ru with local     id 1Gmcfv-000EWh-00     for
******@mail.usask.ca; Tue, 21 Nov 2006 23:57:03 +0300
Received: from [217.107.236.103] by win.mail.ru with HTTP; Tue,
21 Nov 2006 23:57:03 +0300
Date: Tue, 21 Nov 2006 23:57:03 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164132644.456341241c720=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.236.103]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1Gmcfv-000EWh-00.elenka1978_78-mail-ru@f76.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8BIT
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.21.124432
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CHARSET_IS_KOI8R 0,
__CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0,
__HAS_X_MAILER 0, __HIGHBITS 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0,
__RUS_WEBMAIL_FROM 0, __RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca


Greetings my lovely! To me called from agency and have told flight to November, 26! Tickets as they have told it will be necessary to order better beforehand and to reserve a place! I send you the information of fligh ���������������������
Aeroflot
SU 241 Moscow
The Sheremetyevo - 2 11:10 London
������-2 12:15 0 Airbus Industrie A321 15:30 Air Canada
AC 855 London
������-3 13:30 Vancouver
Vancouver ����������-M 15:40 0 Boeing 767-300/300ER!
I have overlooked to write still to you the information for sending money that I could receive them! The country Russia, the city of Kazan, Street - Petrov 28, an apartment-36, the Name Anna, surname ��������� to wait for your letter very much! I shall prepare to trip beforehand, I shall collect necessary things in trip! I am very glad, that we can see and walk each other with you! I shall wait for your letter very much! I wait the answer yours Anna

Analysis: IP address, 217.107.236.103, has the following data:
This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://www.ripe.net..ch=Search
That IP address is also mentioned here:
http://www.fido7.ru..9.50.html
http://www.fido7.ru..0.05.html
http://avto-remont....103.html
http://www.school.e..2071&pg=1
http://www.edu.ru/i..r=3&id=36
http://k500.alfaspa..0507.html
http://www.edu.ru/i..er=3&id=35
2007-06-18, 12:34:21
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9400J01KZZIY@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Wed, 22 Nov 2006 03:36:30 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [128.233.150.90])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9400FTCL9VL8@mail.usask.ca> for ******@mail.usask.ca; Wed,
22 Nov 2006 03:34:43 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id F02F420322E     for <******@mail.usask.ca>;
Wed, 22 Nov 2006 03:34:43 -0600 (CST)
Received: from mx28.mail.ru (mx28.mail.ru [194.67.23.67])
    by spamf2.usask.ca (Postfix) with ESMTP id 48D6320322C     for
<******@mail.usask.ca>; Wed, 22 Nov 2006 03:34:43 -0600 (CST)
Received: from f44.mail.ru (f44.mail.ru [194.67.57.82])
    by mx28.mail.ru (mPOP.Fallback_MX) with ESMTP id 2EBC66C2118     for
<******@mail.usask.ca>; Wed, 22 Nov 2006 07:48:13 +0300 (MSK)
Received: from mail by f44.mail.ru with local     id 1GmjrT-000Ikf-00     for
******@mail.usask.ca; Wed, 22 Nov 2006 07:37:27 +0300
Received: from [217.107.237.117] by win.mail.ru with HTTP; Wed,
22 Nov 2006 07:37:27 +0300
Date: Wed, 22 Nov 2006 07:37:27 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164132644.456341241c720=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.237.117]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GmjrT-000Ikf-00.elenka1978_78-mail-ru@f44.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8bit
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.22.11932
X-PerlMx-Spam: Gauge=XXIIIIII, Probability=26%, Report='RCVD_IN_CBL 3,
__CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0,
__CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __MIME_TEXT_ONLY 0,
__MIME_VERSION 0, __RUS_WEBMAIL_FROM 0, __RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca


Greetings my lovely! I wait your answer! I only, that have woken up and at once I check a mail! I wait my dear! Yours ANNA

Here's the analysis for 217.107.237.117:
This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered

http://www.ripe.net..ch=Search
The following URLs below also mention this IP address:
http://www.edu.ru/i..=1&id=106
http://www.edu.ru/i..=1&id=101
http://evilsonic.hu..&start=20
http://edu.shd.ru/w..00608.html
2007-06-18, 12:47:26   (updated: 2007-06-18, 12:47:49)
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J95002013UIJA@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Wed, 22 Nov 2006 10:19:23 -0600 (CST)
Received: from spamf4.usask.ca (spamf4.usask.ca [128.233.150.98])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9500NF240B36@mail.usask.ca> for ******@mail.usask.ca; Wed,
22 Nov 2006 10:19:23 -0600 (CST)
Received: from spamf4.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 25D6476E98     for <******@mail.usask.ca>;
Wed, 22 Nov 2006 10:19:23 -0600 (CST)
Received: from f61.mail.ru (f61.mail.ru [194.67.57.95])
    by spamf4.usask.ca (Postfix) with ESMTP id 9E2F576EEC     for
<******@mail.usask.ca>; Wed, 22 Nov 2006 10:19:22 -0600 (CST)
Received: from mail by f61.mail.ru with local     id 1GmujU-000Bef-00     for
******@mail.usask.ca; Wed, 22 Nov 2006 19:13:56 +0300
Received: from [217.107.236.4] by win.mail.ru with HTTP; Wed,
22 Nov 2006 19:13:56 +0300
Date: Wed, 22 Nov 2006 19:13:56 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164132644.456341241c720=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.236.4]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GmujU-000Bef-00.elenka1978_78-mail-ru@f61.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8bit
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.22.80932
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CHARSET_IS_KOI8R 0,
__CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0,
__HAS_X_MAILER 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RUS_WEBMAIL_FROM 0,
__RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca


Greetings my lovely! I have come from work and I wait for your letter! Today I have not time any more that that to do(make)! LOVELY I wait for your letter! I very much want you to see and look at you! I have collected already necessary things to fly to you! I wait for your letter! Yours Anna

The IP address, 217.107.236.4, gives the following information:
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://www.ripe.net..ch=Search
The IP address, 217.107.236.4, is also mentioned here:
http://www.edu.ru/i..=4&id=184
http://www.edu.ru/i..=4&id=184
http://www.datingnm..tters3.htm leads me to email addresses found on that website: nastysha.74@mail.ru and Àííà' <anna_love78@mail.ru>
The second one email address is especially of interest to me, since she calls herself Anna.
2007-06-18, 12:54:45
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9600I0159SAN@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Wed, 22 Nov 2006 23:54:37 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [128.233.150.90])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9600D7V5QZ1B@mail.usask.ca> for ******@mail.usask.ca; Wed,
22 Nov 2006 23:54:35 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 456FB20327E     for <******@mail.usask.ca>;
Wed, 22 Nov 2006 23:54:37 -0600 (CST)
Received: from mx4.mail.ru (fallback.mail.ru [194.67.57.14])
    by spamf2.usask.ca (Postfix) with ESMTP id C2AE020327D     for
<******@mail.usask.ca>; Wed, 22 Nov 2006 23:54:36 -0600 (CST)
Received: from f58.mail.ru (f58.mail.ru [194.67.57.92])
    by mx4.mail.ru (mPOP.Fallback_MX) with ESMTP id 6C101351D32     for
<******@mail.usask.ca>; Thu, 23 Nov 2006 02:40:12 +0300 (MSK)
Received: from mail by f58.mail.ru with local     id 1Gn1cJ-0003hH-00     for
******@mail.usask.ca; Thu, 23 Nov 2006 02:34:59 +0300
Received: from [195.161.247.52] by win.mail.ru with HTTP; Thu,
23 Nov 2006 02:34:59 +0300
Date: Thu, 23 Nov 2006 02:34:59 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164223413.4564a3b5012e1=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [195.161.247.52]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1Gn1cJ-0003hH-00.elenka1978_78-mail-ru@f58.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8bit
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.22.213932
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='LEO_OBFU_SUBJ_RE 0.1,
__CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0,
__CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __MIME_TEXT_ONLY 0,
__MIME_VERSION 0, __RUS_WEBMAIL_FROM 0, __RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca


Lovely greetings I very much waited for your letter! I very much want you to see now because I want we can understand to be together whether or not! And what for to wait so long! I want to see and understand, that you for the person and I very much want to fly to you to these days! And on the account of translation ' Gramme of Money ' you can ask it in any bank and they to you will tell as it to do(make), only I ask lovely to do(make) it today! Understand me I want to see you and to look at you! I cannot take the loan because I have no big earnings! LOVELY I ask to understand me and my feelings! LOVELY my surname - Shapaikina! LOVELY understand I should take a place these days! I ask to learn(find out) to you as it to do(make) today! I shall be at you only two days and I want to look, that you for the person! We could in the evenings after your study walk and speak with you! I wait the answer! I also understand you, but in a life it is necessary always to have time to search
for the first chance and I want to find it(him) with you at a meeting! I wait the answer! Yours Anna

NB. She says her surname is Shapaikina, and the IP address is 195.161.247.52
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag

% Information related to '195.161.244.0 - 195.161.247.255'

inetnum: 195.161.244.0 - 195.161.247.255
netname: MARTELCOM
descr: Mari El Net
descr: VolgaTelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '195.161.0.0/16AS8342'

route: 195.161.0.0/16
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://www.ripe.net..ch=Search
That IP address brings up the following hits:
http://www.fido7.ru..9.33.html
http://www.telesys...ard.shtml
http://www.edu.ru/i..er=3&id=7
http://www.4umatch...int/id:187 is important, because this IP address is
mentioned as part of a visa travel scam email from Cheboksary, Russia.
2007-06-18, 13:03:59
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9700501HL06N@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Thu, 23 Nov 2006 17:11:28 -0600 (CST)
Received: from spamf4.usask.ca (spamf4.usask.ca [128.233.150.98])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9700GY5HR4HW@mail.usask.ca> for ******@mail.usask.ca; Thu,
23 Nov 2006 17:11:28 -0600 (CST)
Received: from spamf4.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id B85317A9ED     for <******@mail.usask.ca>;
Thu, 23 Nov 2006 17:09:34 -0600 (CST)
Received: from f10.mail.ru (f82.mail.ru [194.67.57.182])
    by spamf4.usask.ca (Postfix) with ESMTP id A768A7A99C     for
<******@mail.usask.ca>; Thu, 23 Nov 2006 17:08:34 -0600 (CST)
Received: from mail by f10.mail.ru with local     id 1GnNgB-0008GG-00     for
******@mail.usask.ca; Fri, 24 Nov 2006 02:08:27 +0300
Received: from [217.107.237.172] by win.mail.ru with HTTP; Fri,
24 Nov 2006 02:08:27 +0300
Date: Fri, 24 Nov 2006 02:08:27 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164299597.4565cd4d92365=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.237.172]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GnNgB-0008GG-00.elenka1978_78-mail-ru@f10.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8BIT
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.23.145432
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='LEO_OBFU_SUBJ_RE 0.1,
__CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0,
__CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __HIGHBITS 0,
__MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RUS_WEBMAIL_FROM 0,
__RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca

Greetings my lovely! I very much waited for your letter! I understand you! ��� I do not see sense to you ������������! I spoke you already, that I shall be at you only two days! I already will have all ������� here in Russia for hotel and for a feed(meal) all this enters into trip and I for this purpose should pay 4000 roubles! Now I think, that you understand me! I shall eat and live two days! I shall already pay here all this and to me will give all convenience, but 4000 roubles are necessary for this purpose for me! I shall already not require money at you in the country understand me! I very much regret on the account of illness, but both of us can suffer(bear) it! If I shall see that you the good person of me to not stop illnesses! I very much want you to see understand! I think you have understood, that I have written! I shall wait for your letter with hope, that you will understand me! I very much want to fly to you for this small term! I want to see you! With understanding and hope yours Anna

N.B. The IP address, 217.107.237.172, has the following information:
This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://www.ripe.net..ch=Search
That IP address is also mentioned here: http://www.edu.ru/i..er=2&id=1
http://www.romances..pos=-5844
http://www.delphifa..shtml?p=4
http://www.fido7.ru..9.55.html
http://www.school.e..sp?u=1766
http://www.school.e..7096&pg=4
http://www.rockhell..4/ips.txt
2007-06-18, 13:11:33
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9700F01IOBAC@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Thu, 23 Nov 2006 17:37:32 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [128.233.150.90])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9700GVQIYKHW@mail.usask.ca> for ******@mail.usask.ca; Thu,
23 Nov 2006 17:37:32 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 15228203217     for <******@mail.usask.ca>;
Thu, 23 Nov 2006 17:37:33 -0600 (CST)
Received: from mx4.mail.ru (fallback.mail.ru [194.67.57.14])
    by spamf2.usask.ca (Postfix) with ESMTP id 8CE0620320A     for
<******@mail.usask.ca>; Thu, 23 Nov 2006 17:37:32 -0600 (CST)
Received: from f65.mail.ru (f65.mail.ru [194.67.57.99])
    by mx4.mail.ru (mPOP.Fallback_MX) with ESMTP id 8C565390A93     for
<******@mail.usask.ca>; Thu, 23 Nov 2006 18:26:02 +0300 (MSK)
Received: from mail by f65.mail.ru with local     id 1GnGNg-000FHU-00     for
******@mail.usask.ca; Thu, 23 Nov 2006 18:20:52 +0300
Received: from [217.107.237.214] by win.mail.ru with HTTP; Thu,
23 Nov 2006 18:20:52 +0300
Date: Thu, 23 Nov 2006 18:20:52 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164223413.4564a3b5012e1=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.237.214]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GnGNg-000FHU-00.elenka1978_78-mail-ru@f65.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8bit
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.23.152432
X-PerlMx-Spam: Gauge=XXIIIIIII, Probability=27%, Report='RCVD_IN_CBL 3,
LEO_OBFU_SUBJ_RE 0.1, __CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0,
__CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0,
__MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RUS_WEBMAIL_FROM 0,
__RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca

Lovely I wait your answer very much! ' I have come from work to look a mail! I wait

The IP address, 217.107.237.214, has the following information:
This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://www.ripe.net..ch=Search
Apparently another scammer mentioned on this website who goes by the name Olen'ka also posts using this IP address:
http://www.delphifa..693.shtml
http://download.wik..ry.xml.gz
http://www.stop-sca..IC_ID=252
http://www.fido7.ru..9.49.html
http://www.school.e..2358&pg=4
http://www.school.e..6096&pg=6
http://top.doski.ru..2&id=3760
2007-06-18, 13:23:30
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9700L01YYNYV@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Thu, 23 Nov 2006 23:44:35 -0600 (CST)
Received: from spamf4.usask.ca (spamf4.usask.ca [128.233.150.98])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9700MMAZY74J@mail.usask.ca> for ******@mail.usask.ca; Thu,
23 Nov 2006 23:44:31 -0600 (CST)
Received: from spamf4.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 12CC877C92     for <******@mail.usask.ca>;
Thu, 23 Nov 2006 23:07:11 -0600 (CST)
Received: by spamf4.usask.ca (Postfix, from userid 501)     id 8855977960; Thu,
23 Nov 2006 17:26:35 -0600 (CST)
Received: from f60.mail.ru (f60.mail.ru [194.67.57.94])
    by spamf4.usask.ca (Postfix) with ESMTP id C19FF7A965     for
<******@mail.usask.ca>; Thu, 23 Nov 2006 17:07:04 -0600 (CST)
Received: from mail by f60.mail.ru with local     id 1GnNef-000340-00     for
******@mail.usask.ca; Fri, 24 Nov 2006 02:06:53 +0300
Received: from [217.107.236.79] by win.mail.ru with HTTP; Fri,
24 Nov 2006 02:06:53 +0300
Date: Fri, 24 Nov 2006 02:06:53 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164299597.4565cd4d92365=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.236.79]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GnNef-000340-00.elenka1978_78-mail-ru@f60.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8BIT
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.23.205432
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='LEO_OBFU_SUBJ_RE 0.1,
__CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0,
__CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __HIGHBITS 0,
__MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RUS_WEBMAIL_FROM 0,
__RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca


Greetings my lovely! I very much waited for your letter! I understand you! ��� I do not see sense to you ������������! I spoke you already, that I shall be at you only two days! I already will have all ������� here in Russia for hotel and for a feed(meal) all this enters into trip and I for this purpose should pay 4000 roubles! Now I think, that you understand me! I shall eat and live two days! I shall already pay here all this and to me will give all convenience, but 4000 roubles are necessary for this purpose for me! I shall already not require money at you in the country understand me! I very much regret on the account of illness, but both of us can suffer(bear) it! If I shall see that you the good person of me to not stop illnesses! I very much want you to see understand! I think you have understood, that I have written! I shall wait for your letter with hope, that you will understand me! I very much want to fly to you for this small term! I want to see you! With understanding and hope yours Anna

N.B. IP address,217.107.236.79, yields the following information below:
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://www.ripe.net..ch=Search
This IP address is also mentioned here:
http://vkontakte.ru..list.html
http://www.edu.ru/i..er=2&id=1
http://www.delphifa..html?p=99
http://www.fido7.ru..9.58.html
http://www.ive.alfa..0610.html
http://www.school.e..p?u=37966
http://top.germany...0501.html
http://www.demushki..users.html
2007-06-18, 13:29:34
anonymous from Canada  
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J98008010XPO5@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Fri, 24 Nov 2006 00:11:55 -0600 (CST)
Received: from spamf4.usask.ca (spamf4.usask.ca [128.233.150.98])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9800AOM17UVO@mail.usask.ca> for ******@mail.usask.ca; Fri,
24 Nov 2006 00:11:54 -0600 (CST)
Received: from spamf4.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 5570E76DA2     for <******@mail.usask.ca>;
Fri, 24 Nov 2006 00:11:53 -0600 (CST)
Received: from f59.mail.ru (f59.mail.ru [194.67.57.93])
    by spamf4.usask.ca (Postfix) with ESMTP id 155337711E     for
<******@mail.usask.ca>; Thu, 23 Nov 2006 23:18:09 -0600 (CST)
Received: from mail by f59.mail.ru with local     id 1GnTRs-000Dnu-00     for
******@mail.usask.ca; Fri, 24 Nov 2006 08:18:04 +0300
Received: from [195.161.247.105] by win.mail.ru with HTTP; Fri,
24 Nov 2006 08:18:04 +0300
Date: Fri, 24 Nov 2006 08:18:04 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164343424.456678805e896=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [195.161.247.105]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GnTRs-000Dnu-00.elenka1978_78-mail-ru@f59.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8bit
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.23.215933
X-PerlMx-Spam: Gauge=XXIIIIIII, Probability=27%, Report='RCVD_IN_CBL 3,
LEO_OBFU_SUBJ_RE 0.1, __CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0,
__CP_NAME_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0,
__HAS_X_MAILER 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RUS_WEBMAIL_FROM 0,
__RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;*****@mail.usask.ca

Keep in mind it will be very expensive for you to come to Canada. Are you sure
you want to do it this way? I don't live in Vancouver. I think you should think
about the expenses you will bear, the cost of your passport to get it updated,
your travel visa, your meals, taxi, and other costs, such as hotel. I'm just
worried that you will be in severe debt and your money will be drained. That is
why I would rather wait, and bring you to Canada when I am better able to afford
it. It would be cheaper to ask me what you want to say by emails or letters than
come all this way to talk to me. I'm afraid I don't speak Russian
at all, or I would think about visiting you in Kazan. You're a sweet woman, but
I can't promise you anything right now. I know one of your dreams is to be
married with two children. I don't want to support a wife and kids without a
good paying job, so they can live in comfort with me. I can't do that right
now. If you would rather pursue someone who has money, so you can pursue your
goals, I will understand. I wish you all the best and happiness for you. I
understand you, but if I give you the money it will be based on the trust that
you will use it for the purpose you intended. If you are ill, why are you going
to travel? You should be at home resting.

N.B. The scammer isn't too bright, since these are comments I used to pretend that I
was none the wiser, to gain the scammer's confidence, and the scammer actually emailed
me comments I made to the scammer back to me. The IP address, 195.161.247.105,
has the following information:
This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag

% Information related to '195.161.244.0 - 195.161.247.255'

inetnum: 195.161.244.0 - 195.161.247.255
netname: MARTELCOM
descr: Mari El Net
descr: VolgaTelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '195.161.0.0/16AS8342'

route: 195.161.0.0/16
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered

It is also mentioned here:
http://vkontakte.ru..list.html
http://www.school.e..=517&pg=5
http://talk.mail.ru..=33452120
http://www.m-e-t-r-..00604.html
2007-06-18, 13:35:48
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9900D01BS4GN@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for *****@mail.usask.ca; Fri, 24 Nov 2006 17:02:26 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [128.233.150.90])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9900JGAC018Y@mail.usask.ca> for *****@mail.usask.ca; Fri,
24 Nov 2006 17:02:25 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 4C5842030DB     for <*****@mail.usask.ca>;
Fri, 24 Nov 2006 17:02:26 -0600 (CST)
Received: from f69.mail.ru (f69.mail.ru [194.67.57.220])
    by spamf2.usask.ca (Postfix) with ESMTP id C9052202FF1     for
<*****@mail.usask.ca>; Fri, 24 Nov 2006 17:02:25 -0600 (CST)
Received: from mail by f69.mail.ru with local     id 1Gnk3u-000H7S-00     for
*****@mail.usask.ca; Sat, 25 Nov 2006 02:02:26 +0300
Received: from [195.161.247.61] by win.mail.ru with HTTP; Sat,
25 Nov 2006 02:02:26 +0300
Date: Sat, 25 Nov 2006 02:02:26 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164390156.45672f0c68de0=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [195.161.247.61]
To: *****@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1Gnk3u-000H7S-00.elenka1978_78-mail-ru@f69.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8BIT
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.24.144933
X-PerlMx-Spam: Gauge=XXIIIIIII, Probability=27%, Report='RCVD_IN_CBL 3,
LEO_OBFU_SUBJ_RE 0.1, __CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0,
__CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __HIGHBITS 0,
__MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RUS_WEBMAIL_FROM 0,
__RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;*****@mail.usask.ca


Greetings my dear! I very much waited for your letter! I want to tell to you, that I took holiday itself to have a rest and fly to you! Lovely I ask you give keep to the point! We waste ours happy time with you! I very much want to fly to you and to see you! I am very much adjusted for this purpose to be with you in �������� days! I think you of me understand I shall wait your answer! Yours ANNA

N.B. The IP address, 195.161.247.61 has the following information:
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '195.161.244.0 - 195.161.247.255'

inetnum: 195.161.244.0 - 195.161.247.255
netname: MARTELCOM
descr: Mari El Net
descr: VolgaTelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '195.161.0.0/16AS8342'

route: 195.161.0.0/16
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://www.ripe.net..ch=Search
The IP address is mentioned here:
http://www.narod.kz..%26sa%3DG
http://www.school.e..=223&pg=5
http://www.school.e..sp?u=7231
http://internetelit..?&page=102
2007-06-18, 13:44:48
anonymous from Canada  
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9900I01CAV2P@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for *****@mail.usask.ca; Fri, 24 Nov 2006 17:10:19 -0600 (CST)
Received: from spamf2.usask.ca (spamf2.usask.ca [128.233.150.90])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9900JECCD38Y@mail.usask.ca> for *****@mail.usask.ca; Fri,
24 Nov 2006 17:10:15 -0600 (CST)
Received: from spamf2.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 43E6A2030DE     for <*****@mail.usask.ca>;
Fri, 24 Nov 2006 17:10:16 -0600 (CST)
Received: from f16.mail.ru (f16.mail.ru [194.67.57.46])
    by spamf2.usask.ca (Postfix) with ESMTP id C374C2030E0     for
<*****@mail.usask.ca>; Fri, 24 Nov 2006 17:10:15 -0600 (CST)
Received: from mail by f16.mail.ru with local     id 1GnkBI-000FKs-00     for
*****@mail.usask.ca; Sat, 25 Nov 2006 02:10:04 +0300
Received: from [195.161.247.61] by win.mail.ru with HTTP; Sat,
25 Nov 2006 02:10:04 +0300
Date: Sat, 25 Nov 2006 02:10:04 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164390156.45672f0c68de0=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [195.161.247.61]
To: *****@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GnkBI-000FKs-00.elenka1978_78-mail-ru@f16.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8bit
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.24.144933
X-PerlMx-Spam: Gauge=XXIIIIIII, Probability=27%, Report='RCVD_IN_CBL 3,
LEO_OBFU_SUBJ_RE 0.1, __CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0,
__CP_MEDIA_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0,
__HAS_X_MAILER 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RUS_WEBMAIL_FROM 0,
__RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;*****@mail.usask.ca


lease listen now to my opinion on trust. You think I do not risk to arrive to you, not meeting you never in the person.
It is possible, that you only write letters and use photos of other person. All is probably that you to tell to me in the
last letters the LIE. But my heart prompts me, that I should trust you and use the best efforts, to achieve at you the same trust.
I once again want to tell to you, that first of all between us there should be a full trust. And I completely to trust you
and if you will not trust me, we should stop to correspond to not break each other heart. It will be very hard for me to lose you,
but I cannot more so you to admire. I do everything that you only to trust me. But you have no to me such trust and I any
more do not want anything to prove to you how you should make the choice. I with impatience shall wait for your following letter and I hope.
That you will make a correct choice and to not lose me.

N.B. I'm not going to evaluate the IP address,195.161.247.61, that was mentioned previously in the post above. I'm going to see if I can find anything about 194.67.57.46,
which is mentioned in the headers.
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '194.67.57.0 - 194.67.57.255'

inetnum: 194.67.57.0 - 194.67.57.255
netname: MAILRU-NET2
descr: Mail.ru
descr: Moscow, Russia
country: RU
admin-c: VG659-RIPE
tech-c: VG659-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS3216-MNT
source: RIPE # Filtered

person: Vladimir Gabrelyan
address: 2/6, Pushechaya str., Moscow, Russia
e-mail: gabrelyan@corp.mail.ru
remarks: fax-no: +7 095 7256357
fax-no: +7 495 7256357
remarks: phone: +7 095 7256357
phone: +7 495 7256357
nic-hdl: VG659-RIPE
source: RIPE # Filtered
remarks: modified for Russian phone area changes

% Information related to '194.67.0.0/18AS3216'

route: 194.67.0.0/18
descr: SOVAM DELEGATED BLOCK-1
origin: AS3216
mnt-by: AS3216-MNT
source: RIPE # Filtered
http://www.ripe.net..ch=Search
Here's more URLs that mention 194.67.57.46
http://ha.ckers.org..e/mail.ru
http://forums.micro..SiteID=40
http://www.scamdex...0300.html
http://www.scamdex...0300.html
http://scamdex.com/..eeti.html
http://scamdex.com/..nfir.html
http://forum.drweb...5019.html
http://www.nk.ca/bl..ments.rss
http://lists.altlin..1973.html
http://lists.altlin..1996.html
https://info.vsu.ru/Lists/CyrTeX-ru/Message/2999-P.txt
http://mta.org.ua/e..st_relays
http://nk.ca/blog/i..s/P3.html
http://mail.charm.r../491-P.txt
You are on page 4 of 5, other pages: 1 2 3 [4] 5

 

 

Are you being scammed and this is your first visit here?
Read the welcome page/ primer for newbies.
Thanks to Eddie for writing it up.

Please also read Miss Marple's article about recognizing male dating scammers.

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture:
Picture Search

You have received photos and wonder if these photos has been posted here before? Because you suspect this could be a dating scammer, but you do not want to post this picture? Try the Picture Search