DelphiFAQ Home Search:

Dating scammer Anna from Kazan, Russia

 

comments74 comments. Current rating: 5 stars (59 votes). Leave comments and/ or rate it.

Name: Anna þÁÐÁÊËÉÎÁ


Email: elenka1978_78@mail.ru,glvinaa@rambler.ru


Address:
Apartment 36, 28 Petrov Street
Kazan Russia


Other Comments:
She gave the above postal information as her postal address, when she contacted me for money. However, her initial IP address she emailed me from is from none other than Joshar-Ola, in Mariy-El Republic
My IP address: 217.107.237.79 (copy)
IP country: Russian Federation
IP Address state: Mariy-El
IP Address city: Yoshkar-Ola
IP latitude: 56.636902
IP longitude: 47.871101
isp: RTComm.RU
organization: Mari El Net
your speed:
http://ip-adress.com/

I have only 2 photographs of this woman, if that's really her in the photos. These will be added as soon as I'm given permission to post them. In the meantime, go to this photoalbum to see them for yourself.
http://s67.photobucket.com/albums/h287/eldiablonacho/anna/
These photos were attached to the first email sent to me by her. I will do detailed email analysis as time permits, in terms of search engines, IP address analysis, email account analysis, and name analysis.



Content-type: text/html

Comments:

You are on page 5 of 5, other pages: 1 2 3 4 [5]
2007-06-18, 14:22:05   (updated: 2007-06-18, 14:27:48)
anonymous from United States  
Anon Canada,You really don't need to post the entire DNS/ISP look-up the info is pretty irrelevent,the only part needed is the location of the last IP from the full header.And that is sometimes an if'y thing too if they are using proxies and forged header's. I see you post the DNS info for MAIL.RU,that's not necessary,it's just like Yahoo or MSN etc.So,save yourself some time and just run the last IP that shows 'received'on the left.

ie; Recieved......From:XXX.XX.XXX.XX


Here's a good link explaining an e-mail and it's component's

http://www.rickconn..tomy.html

Here's one I use to look up a header.All you do is copy and paste it,click search,done.It gives you a 'WHOIS' and google link's.

http://headertool.a..elord.com/
2007-06-19, 09:46:24
anonymous from Canada  
Ok, I will keep that in mind. I just want to provide as much information as possible on every email I have received with regards to each scammer I have encountered. I have a lot more scammers to go through, and hopefully I can get all their information on or before the end of the year.
2007-06-19, 11:39:42
anonymous from United States  
OK,I didn't want you to waste time posting non-essencial info.An easy way to make report's is do it on wordpad and keep it in a file.That's what I do,when I get a 'new one' I copy and paste the profile and the 'intro letter'they send on whatever site it is so I can include it .Also c&p the headers and edit out all the stuff not needed.That way you can do a little at a time and don't have to do it all at once.After you have everything all you have to do is copy & paste it where you're making the post and add the pic's.You can see an example of one of mine here,'Yulia Kireeva'.Took a few moth's of seeing other post's to get them to where I can have alot of info with little effort.

Happy Hunting!
2007-06-19, 23:41:18
anonymous from Canada  
I never thought about doing it using something like Wordpad or Notepad, but I will
keep it mind for my next scammer. I have been getting emails from my Russian
dating site webmasters. I've looked online for information about these websites,
and so far, it's turned up nothing in terms of USENET or the Web, as to if these
are legitimate websites, or these are phony ones. Since they are spamming me,
I'm assuming they are scam websites. I will keep you posted on this when I have
the time. I will look up the woman you mentioned, Yulia Kireeva, on this website,
and see if any of her photos look familiar to me. The last name doesn't ring a bell,
but I got email from a scammer last year, whose first name was supposedly Yulia,
but I don't know if it is the same woman, until I visit your posts about her, or better
yet see the photos associated with the emails. I received a few photos from a Yulia
last year.
2007-06-20, 09:58:45
anonymous from United States  
Anon Canada, I meant to look at that post for an example of the info to post.That one has hardly been looked at on any of the sites I posted 'her' on. Anyway,You can use the IP addy to see if the site is listed for spamming.Did you try the link's I posted above? I'll post another one that has a spam IP look-up.You will need to register to use it but,you don't need to join{pay membership} to use it.

http://member.dnsst../login.php
2007-06-25, 11:30:13   (updated: 2007-06-25, 11:33:48)
anonymous from Canada  
Ok I will keep that in mind. I thought if I post my emails with full headers received, some
people might find it useful, because they might have been receiving similar messages. I
looked at the post for Yulia Kireeva, and the photos I have are of a different 'Yulia' than
the one you posted. I did visit your links. That header analysis tool looks very handy.
I hope the webmaster of this website takes a look at it, if he's not already aware of this
tool.


2007-06-25, 11:44:17
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9A00F016OTQL@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Sat, 25 Nov 2006 04:06:49 -0600 (CST)
Received: from spamf4.usask.ca (spamf4.usask.ca [128.233.150.98])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9A00M0A6RCIP@mail.usask.ca> for ******@mail.usask.ca; Sat,
25 Nov 2006 04:06:48 -0600 (CST)
Received: from spamf4.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 7D00D2BAD2     for <******@mail.usask.ca>;
Sat, 25 Nov 2006 04:06:49 -0600 (CST)
Received: from f36.mail.ru (f36.mail.ru [194.67.57.74])
    by spamf4.usask.ca (Postfix) with ESMTP id 027BE2BACA     for
<******@mail.usask.ca>; Sat, 25 Nov 2006 04:06:49 -0600 (CST)
Received: from mail by f36.mail.ru with local     id 1GnuQp-0004zp-00     for
******@mail.usask.ca; Sat, 25 Nov 2006 13:06:47 +0300
Received: from [217.107.236.158] by win.mail.ru with HTTP; Sat,
25 Nov 2006 13:06:47 +0300
Date: Sat, 25 Nov 2006 13:06:47 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Meeting_You?=
In-reply-to: =?koi8-r?Q?
<1164428021.4567c2f5cf3ba=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: [217.107.236.158]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GnuQp-0004zp-00.elenka1978_78-mail-ru@f36.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8BIT
X-PMX-Version: 5.2.2.285561, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.25.15432
X-PerlMx-Spam: Gauge=XXIIIIIII, Probability=27%, Report='RCVD_IN_CBL 3,
LEO_OBFU_SUBJ_RE 0.1, __CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0,
__CP_NAME_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0,
__HAS_X_MAILER 0, __HIGHBITS 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0,
__RUS_WEBMAIL_FROM 0, __RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca


Greetings my lovely! I very much waited for your letter! Yes I had to hear, that girls deceive men! I not ����� for whom easy money are necessary! I try for the life I search for love, instead of money! I called today in agency to me have told, that there is a start on Wednesday of the next week! I am glad, that you can help me that I to you flied! I think, that to you to send money better to Monday that I all have had time to make and reserve places! I am very glad, that I can see you and can in ���������� love lives you! I shall wait for your letter! With love yours Anna


Here's the header analysis for the IP address,217.107.236.158
http://www.dnsstuff..7.236.158
That IP address is mentioned here:
http://www.fido7.ru..59.41.html and here:
http://www.school.e..5768&pg=2
2007-06-25, 12:56:18
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0J9H00B01W9B79@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for******@mail.usask.ca; Wed, 29 Nov 2006 08:02:25 -0600 (CST)
Received: from spamf4.usask.ca (spamf4.usask.ca [128.233.150.98])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0J9H00GVVWC18W@mail.usask.ca> for ******@mail.usask.ca; Wed,
29 Nov 2006 08:02:25 -0600 (CST)
Received: from spamf4.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id 489012BB1D     for <******@mail.usask.ca>;
Wed, 29 Nov 2006 08:02:25 -0600 (CST)
Received: from f42.mail.ru (f42.mail.ru [194.67.57.80])
    by spamf4.usask.ca (Postfix) with ESMTP id D1D852BB22     for
<******@mail.usask.ca>; Wed, 29 Nov 2006 08:02:24 -0600 (CST)
Received: from mail by f42.mail.ru with local     id 1GpQ10-0002gJ-00     for
******@mail.usask.ca; Wed, 29 Nov 2006 17:02:22 +0300
Received: from [87.238.119.249] by win.mail.ru with HTTP; Wed,
29 Nov 2006 17:02:22 +0300
Date: Wed, 29 Nov 2006 17:02:22 +0300
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Song_you_sent_me?=
In-reply-to: =?koi8-r?Q?
<1164582934.456a20161efef=40webmail.usask.ca@mail.usask.ca> <?=@mail.usask.ca>
X-Originating-IP: 87.238.112.163 via proxy [87.238.119.249]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1GpQ10-0002gJ-00.elenka1978_78-mail-ru@f42.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8bit
X-PMX-Version: 5.2.2.285561, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2006.11.29.54933
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CHARSET_IS_KOI8R 0,
__CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0,
__HAS_X_MAILER 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RUS_WEBMAIL_FROM 0,
__RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
Original-recipient: rfc822;******@mail.usask.ca


Greetings my darling! I wait your answer! I think, that you on work and cannot while to me to answer! I very much wait for your letter and very much I wish to meet you and to look in your eyes! The DARLING I have written to you everything, that it is necessary for me for this purpose! The Darling I very much want that you to me have answered a question in the letter! I wait your answer! Yours Anna

N.B. This email is interesting, because the IP address the message was posted through used a proxy server. The originating IP address, 87.238.112.163, has the following information, which is interesting, since the other messages were going through Russia, and this one is going through Ukraine, leading me to believe it is part of an international crime network:
Next Section    

Query the RIPE Database
Search for            
Switch to the RIPE TEST Database

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag.

% Information related to '87.238.112.160 - 87.238.112.175'

inetnum: 87.238.112.160 - 87.238.112.175
netname: itelsat-access
descr: Itelsat access network
country: de
admin-c: VPT-RIPE
tech-c: ZHDA-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: MNT-CETEL
mnt-lower: ITELSAT-MNT
mnt-routes: ITELSAT-MNT
source: RIPE # Filtered

person: Vasily Temchenko
address: Itelsat, Kiev, Ukraine
phone: +380-44-2053717
fax-no: +380-44-2053718
mnt-by: ITELSAT-MNT
nic-hdl: VPT-RIPE
source: RIPE # Filtered

person: Denis Zhdanov
address: SpaceGate ISP
address: Vasilija Verkhovintsa, 10
address: 01001, Kiev, Ukraine
phone: +380 44 2232496
abuse-mailbox: abuse@spacegate.com.ua
nic-hdl: ZHDA-RIPE
mnt-by: ZHDA-MNT
source: RIPE # Filtered

% Information related to '87.238.112.0/21AS39151'

route: 87.238.112.0/21
descr: CETel
origin: AS39151
mnt-by: MNT-CETEL
source: RIPE # Filtered
http://www.ripe.net..ch=Search
Look at this URL: Scammer Galchonok galina
http://www.safe-dat..lina.html

The proxy IP address,87.238.119.249, has the following information:
This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag

% Information related to '87.238.117.0 - 87.238.119.255'

inetnum: 87.238.117.0 - 87.238.119.255
netname: ITELSAT-SPACEGATE
descr: Satellite services AM22
country: UA
admin-c: VPT-RIPE
tech-c: ZHDA-RIPE
status: assigned pa 'status:' definitions
mnt-by: MNT-CETEL
source: RIPE # Filtered

person: Vasily Temchenko
address: Itelsat, Kiev, Ukraine
phone: +380-44-2053717
fax-no: +380-44-2053718
mnt-by: ITELSAT-MNT
nic-hdl: VPT-RIPE
source: RIPE # Filtered

person: Denis Zhdanov
address: SpaceGate ISP
address: Vasilija Verkhovintsa, 10
address: 01001, Kiev, Ukraine
phone: +380 44 2232496
abuse-mailbox: abuse@spacegate.com.ua
nic-hdl: ZHDA-RIPE
mnt-by: ZHDA-MNT
source: RIPE # Filtered

% Information related to '87.238.112.0/21AS39151'

route: 87.238.112.0/21
descr: CETel
origin: AS39151
mnt-by: MNT-CETEL
source: RIPE # Filtered

% Information related to '87.238.118.0/23AS39151'

route: 87.238.118.0/23
descr: CETel-Itelsat
origin: AS39151
mnt-by: MNT-CETEL
source: RIPE # Filtered
http://www.ripe.net..ch=Search


2007-06-26, 12:53:38
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0JGD00701ZFUXU@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Thu, 12 Apr 2007 07:16:43 -0600 (CST)
Received: from spamf4.usask.ca (spamf4.usask.ca [128.233.150.98])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0JGD003LJZJV5G@mail.usask.ca> for ******@mail.usask.ca; Thu,
12 Apr 2007 07:16:43 -0600 (CST)
Received: from spamf4.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id EB7AE2BC9C     for <******@mail.usask.ca>;
Thu, 12 Apr 2007 07:16:42 -0600 (CST)
Received: from f108.mail.ru (f108.mail.ru [194.67.57.2])
    by spamf4.usask.ca (Postfix) with ESMTP id 536932BBFE     for
<******@mail.usask.ca>; Thu, 12 Apr 2007 07:16:42 -0600 (CST)
Received: from mail by f108.mail.ru with local     id 1HbzA6-000HgQ-00     for
******@mail.usask.ca; Thu, 12 Apr 2007 17:16:30 +0400

Received: from [217.107.236.18] by win.mail.ru with HTTP; Thu,
12 Apr 2007 17:16:30 +0400
Date: Thu, 12 Apr 2007 17:16:30 +0400
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Re=3A_love?=
In-reply-to: <1173673319.45f4d56753ed6@webmail.usask.ca>
X-Originating-IP: [217.107.236.18]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1HbzA6-000HgQ-00.elenka1978_78-mail-ru@f108.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8bit
X-PMX-Version: 5.3.1.294258, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2007.4.12.60636
X-PerlMx-Spam: Gauge=XXIIIIII, Probability=26%, Report='RCVD_IN_CBL 3,
__CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0,
__CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __MIME_TEXT_ONLY 0,
__MIME_VERSION 0, __RUS_WEBMAIL_FROM 0, __RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
References: <1173673319.45f4d56753ed6@webmail.usask.ca>
Original-recipient: rfc822;******@mail.usask.ca


Greetings my dear! Where you were gone? Why you do not write?

N.B. This person, man or woman, tried to contact me after about 4.5 months. I say man or woman, because I don't even know for sure if the woman in the photos is an innocent victim, or part of the scam itself. These appear to be form emails, meaning these were
pretyped in advance, and using a template to send emails. All that needs to be done is to change the name and email address for each recepient. The IP address, 217.107.236.18,
has the following information:
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://www.ripe.net..ch=Search
http://www.giac.uni..&hirachy=
http://www.fido7.ru..9.55.html
http://www.school.e..2206&pg=2
According to the second URL, this IP address, corresponds to a computer in Amsterdam (city), and North Holland (province) with the following host name, Eu-zz-217.

2007-06-26, 12:55:18   (updated: 2007-06-26, 13:01:13)
anonymous from Canada  
rating
Return-path: <elenka1978_78@mail.ru>
Received: from conversion-daemon.mail.usask.ca by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006))
id <0JGF00A01HY78N@mail.usask.ca> (original mail from elenka1978_78@mail.ru)
for ******@mail.usask.ca; Fri, 13 Apr 2007 03:00:57 -0600 (CST)
Received: from spamf4.usask.ca (spamf4.usask.ca [128.233.150.98])
by mail.usask.ca
(iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id
<0JGF003CVIDK5G@mail.usask.ca> for ******@mail.usask.ca; Fri,
13 Apr 2007 03:00:57 -0600 (CST)
Received: from spamf4.usask.ca (localhost.localdomain [127.0.0.1])
    by localhost (Postfix) with SMTP id C3F0E2BBA1     for <******@mail.usask.ca>;
Fri, 13 Apr 2007 03:00:57 -0600 (CST)
Received: from f20.mail.ru (f20.mail.ru [194.67.57.52])
    by spamf4.usask.ca (Postfix) with ESMTP id 4C44E2BBBD     for
<******@mail.usask.ca>; Fri, 13 Apr 2007 03:00:55 -0600 (CST)
Received: from mail by f20.mail.ru with local     id 1HcHeB-0007Eg-00     for
******@mail.usask.ca; Fri, 13 Apr 2007 13:00:47 +0400
Received: from [217.107.237.19] by win.mail.ru with HTTP; Fri,
13 Apr 2007 13:00:47 +0400
Date: Fri, 13 Apr 2007 13:00:47 +0400
From: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?= <elenka1978_78@mail.ru>
Subject: =?koi8-r?Q?Re=3A_Re=3A_Re=3A_love?=
In-reply-to: <1176423317.461ecb9524746@webmail.usask.ca>
X-Originating-IP: [217.107.237.19]
To: ******@mail.usask.ca
Reply-to: =?koi8-r?Q?=CC=C5=CE=C1_=F3=CD=C5=D2=D4=C9=CE=C1?=
<elenka1978_78@mail.ru>
Message-id: <E1HcHeB-0007Eg-00.elenka1978_78-mail-ru@f20.mail.ru>
MIME-version: 1.0
X-Mailer: mPOP Web-Mail 2.19
Content-type: text/plain; charset=koi8-r
Content-transfer-encoding: 8bit
X-PMX-Version: 5.3.1.294258, Antispam-Engine: 2.5.0.283055,
Antispam-Data: 2007.4.13.14733
X-PerlMx-Spam: Gauge=XXIIIIII, Probability=26%, Report='RCVD_IN_CBL 3,
__CHARSET_IS_KOI8R 0, __CHARSET_IS_KOI8R_SUBJ 0, __CT 0, __CTE 0,
__CT_TEXT_PLAIN 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __MIME_TEXT_ONLY 0,
__MIME_VERSION 0, __RUS_WEBMAIL_FROM 0, __RUS_WEBMAIL_RCVD 0, __SANE_MSGID 0'
References: <1176423317.461ecb9524746@webmail.usask.ca>
Original-recipient: rfc822;******@mail.usask.ca


Greetings! I did not speak you, that I have written it, I to you have told, that I edited it and have sent you! How at you business? You wish to correspond with me!


N.B. Here's the information regarding that IP address:217.107.237.19
This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net..ight.html

% Note: This output has been filtered.
% To receive output for a database update, use the '-B' flag

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA 'status:' definitions
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: nnb@relinfo.ru
nic-hdl: NN-RIPE
source: RIPE # Filtered

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
mnt-by: AS8342-MNT
source: RIPE # Filtered
http://www.ripe.net..ch=Search
Scammer Derkach Anna from Nizhi Novgorod/Yoshkar-Ola
http://www.russian-.._anna.htm
http://www.edu.ru/i..=1&id=109
http://www.edu.ru/i..=1&id=109
http://www.school.e..=325&pg=2
http://www.school.e..=692&pg=3
http://k500.alfaspa..00507.html
2007-08-16, 08:32:59
anonymous from Belgium  
rating

Ci-dessous les coordonnées d'une ou un Scammers

Dit qui se trouve à Volzhzk, mais les email viennent de moscou !


Prénom : LYUBOV ( Luba )
Nom : CHIKMENEVA
Le pays : la Russie
La republique : Mari El
La ville : Volzhsk
Mashinostroiteley 2
Appartament 59


Adresses IP :
194.67.57.97
194.67.57.180
194.67.23.67
194.67.57.162
194.67.57.174


Keywords:
2009-07-12, 08:14:32
anonymous  

This image was also posted here:
Dating scammer anna



Keywords:
2015-02-01, 02:34:17
anonymous from Italy  
Susipirrng to think of something like that
2017-06-09, 16:45:57
Isabelle  
rating
This paragraph will assist the internet people for creating
new blog or even a blog from start to end.
You are on page 5 of 5, other pages: 1 2 3 4 [5]

 

 

Are you being scammed and this is your first visit here?
Read the welcome page/ primer for newbies.
Thanks to Eddie for writing it up.

Please also read Miss Marple's article about recognizing male dating scammers.

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture:
Picture Search

You have received photos and wonder if these photos has been posted here before? Because you suspect this could be a dating scammer, but you do not want to post this picture? Try the Picture Search