The Russian Meeting Place: A place to meet people and talk about all things Russian...

International Discussions about Russia, Ukraine, Belarus, Travel, Music, Russian News, Ukrainian culture, Belarusian Dating, Moscow, Saint Petersburg, Kiev and other intelligent topics about life in the former Soviet Union.

     


                                

              

Pages: 1

IP Header:Email My impressions and a question

(Click here to view the original thread with full colors/images)


Posted by: Revan

Email addresses and last names have been changed in the following header.


Quote:
Originally Posted by Email Header from Jul 10th
From Russianname Oksana Mon Jul 10 05:18:32 2006
X-Apparently-To: redblue_frog@yahoo.com via 216.252.110.209; Mon, 10 Jul 2006 12:42:59 -0700
X-Originating-IP: [194.67.57.14]
Return-Path:
Authentication-Results: mta252.mail.mud.yahoo.com from=list.ru; domainkeys=neutral (no sig)
Received: from 194.67.57.14 (EHLO mx4.mail.ru) (194.67.57.14) by mta252.mail.mud.yahoo.com with SMTP; Mon, 10 Jul 2006 12:42:58 -0700
Received: from mx27.mail.ru (mx27.mail.ru [194.67.23.65]) by mx4.mail.ru (mPOP.Fallback_MX) with ESMTP id 042D935285A for ; Mon, 10 Jul 2006 16:19:23 +0400 (MSD)
Received: from [88.147.144.17] (port=36202 helo=[192.168.1.99]) by mx27.mail.ru with asmtp id 1FzujS-0003UD-00 for redblue_frog@yahoo.com; Mon, 10 Jul 2006 16:19:22 +0400
Date: Mon, 10 Jul 2006 16:18:32 +0400
From: "Russianname Oksana" View Contact Details Add Mobile Alert
X-Mailer: The Bat! (v3.62.14) Professional
Reply-to: Russianname Oksana
X-Priority: 3 (Normal)
Message-ID: <38179241.20060710161832@list.ru>
To: redblue_frog@yahoo.com
Subject: From Oksana
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Length: 723



I have read threads on how to interpret headers and I have some assumptions about the above header but would like to ask a few questions from the veterans.

My assumption is that this is the originating IP:
"Received: from [88.147.144.17] (port=36202 helo=[192.168.1.99]) by mx27.mail.ru with asmtp id 1FzujS-0003UD-00 for..."

I have done some research and googling and find that this address in in Saratov and it does not appear to be associated with scammers. Opinions?

Evidently this is a computer on a network going out through a router?: " (port=36202 helo=[192.168.1.99])". Is this correct? Is this an Internet cafe or perhaps a computer connected to a network at an apartment?

Does this tell me anything?:asmtp id 1FzujS-0003UD-00

This is where the mail.ru gets routed through?: X-Originating-IP: [194.67.57.14]

How bad of a sign is this?: X-Mailer: The Bat! (v3.62.14) Professional


Quote:
Originally Posted by Email from 24 May 2006
Hello, dear JoeBillyBob!
Thank you very much for your letter.
Now I am going to tell you about myself.
I have never believed seriously in relationships through internet till
one of my
friend married an American. Now they are happy and live together with
their children near Chicago. That is why I also made up my mind to
find a man of my dreams on the Internet.
I hope that in the future I'll find my soul mate and we shall be able
to know each other better May be you are that man I am looking for.
I believe in love at the first sight. I want to meet a man who will
become a faithful friend for me and I - a loving wife. I think that
it is necessary for the family. I'd like to be happy as a woman: to
have a loving and beloved husband, a cozy and comfortable house where
our children will be happy.
I also have a lot of love and warmth to give to someone special and I
am waiting for the time when I have the opportunity to do it.
I take care about my health: I am fond of sports and traveling,
strolling in natural landscapes. In the evenings I like to read books,
to watch TV, to meet my friends and to walk in the park before going
to bed.
I live in a small, comfortable apartment in the center of the city.
At weekends I often go to my friend's summer cottage, I like to work
in the garden, take care of the flowers. Sometimes we go rowing, make
stops at a bay, swim, fry meat.
I am a romantic lady and I have many ideas to share with my future
soul mate: walking through woodland and countryside in a summer
afternoon, a romantic picnic together, sitting on a beach looking at
the sea, watching to the horizon line, close to each other and
whispering to my beloved man how much I love him! This is my dream…
I'd also like to spend evenings together warming in each other's
arms...thinking about our lives and our future. But I want you to know
that I am a common woman, in some situations I am shy, sometimes too
direct. I am too sentimental and romantic. I take everything too
close to my heart.
Tell me something about you: things that you like and dislike. What
are your passions and joys?

Hope to hear from you soon.
Sincerely yours
Oksana


Does anybody recognize any red flags in the above letter?

I have read threads on how Google is your friend and I am a proficient with web research. I don't find text from this email or subsequent letters in any text searches. Her letters have been on average weekly(4 days- 8 days) and have never asked for money. She has avoided answering some questions and some of the letters seem almost like form letter which if she is writing a lot of guys might make sense(as opposed to being a scammer). We recently went to text messaging(infrequently). She has been asking me to visit her after 7 emails over a couple months and three text messaging sessions.

I met this woman on the freepersonals.ru site. I contacted her and she wrote back.

I have done a ton of googling on pictures ip,s and scam sites and before making this post have too much information I guess I will end my post here.

Thanks for any input!



Posted by: Revan

A follow up(perhaps I should change the header):



redblue_frog (8/4/2006 8:53:22 AM): So let me ask: In one of your first letters to me you talked about how your father gave you support through your divorce.
redblue_frog (8/4/2006 8:53:36 AM): I have not heard you mention him since. Is you father well?
oksana_russianname (8/4/2006 8:54:47 AM): just a moment
oksana_russianname (8/4/2006 9:07:36 AM): I am back
oksana_russianname (8/4/2006 9:08:02 AM): my father died some years ago...
redblue_frog (8/4/2006 9:08:20 AM): I am very sorry to hear that.
oksana_russianname (8/4/2006 9:08:34 AM): He was a very good man and father, I have only mom...
oksana_russianname (8/4/2006 9:08:58 AM): Dear I must go now, I was happy to get the news...
redblue_frog (8/4/2006 9:09:06 AM): Mom?
oksana_russianname (8/4/2006 9:09:35 AM): I will be online only on Monday...
oksana_russianname (8/4/2006 9:09:43 AM): yes?
redblue_frog (8/4/2006 9:09:45 AM): Not on Saturday?
oksana_russianname (8/4/2006 9:09:48 AM): my mom
oksana_russianname (8/4/2006 9:09:58 AM): no my reapair...

A snippet from an email in June 2006:
"I am in divorce for about 6 years. My dad and some best friends gave me a great support at that time. My mom died some years ago."

Is this a translation problem in her original email or something else? Note how when I ask a question there is a pause of a few minutes.



Posted by: metaforest

Quote:
Originally Posted by Revan
[SNIP]
How bad of a sign is this?: X-Mailer: The Bat! (v3.62.14) Professional




Does anybody recognize any red flags in the above letter?

I have read threads on how Google is your friend and I am a proficient with web research. I don't find text from this email or subsequent letters in any text searches. Her letters have been on average weekly(4 days- 8 days) and have never asked for money. She has avoided answering some questions and some of the letters seem almost like form letter which if she is writing a lot of guys might make sense(as opposed to being a scammer). We recently went to text messaging(infrequently). She has been asking me to visit her after 7 emails over a couple months and three text messaging sessions.

I met this woman on the freepersonals.ru site. I contacted her and she wrote back.

I have done a ton of googling on pictures ip,s and scam sites and before making this post have too much information I guess I will end my post here.

Thanks for any input!


Welcome to the RMP!!!

IP Address location traces are not reliable indicators of location. My own IP address appears to originate 100 miles from my physical location. I have seen even larger distances in the Ukraine. Even different oblasts and they were legitimate.

"The bat" is a very bad sign. There is no reason for a RW in an internet cafe to use a commercial bulk email processor like "The Bat" Only a spammer, scammer, or legitimate commercial business that deals with huge volumes of email would need a tool like "The Bat." If your RW is not employed in email marketing she probably would not even know how to use such an application: it's not intended for "home" use, and assumes that the user is technically competent with bulk email technology.

That the content of the email & pictures have not appeared on the anti-scam sites is not conclusive. Absence of evidence is not evidence of absence. Even if some of her mail did appear on the anti-scam sites it's not a reliable indicator. Some jerks have started using the anti-scam lists to harrass women....

Get a phone number that is on a land line, and call her. Also try to get a physical address. Searches on an address or telephone number tend to work better.
If she does not want to talk to you on the phone this is a very big red flag. If she will only give you a mobile number, this would be a yellow flag.

good luck! And don't be afraid to ask any questions you may have. There are many good, experienced members here, that will offer their opinions!

=B-)



Posted by: metaforest

Quote:
Originally Posted by Revan
A follow up(perhaps I should change the header):



redblue_frog (8/4/2006 8:53:22 AM): So let me ask: In one of your first letters to me you talked about how your father gave you support through your divorce.
redblue_frog (8/4/2006 8:53:36 AM): I have not heard you mention him since. Is you father well?
oksana_russianname (8/4/2006 8:54:47 AM): just a moment
oksana_russianname (8/4/2006 9:07:36 AM): I am back
oksana_russianname (8/4/2006 9:08:02 AM): my father died some years ago...
redblue_frog (8/4/2006 9:08:20 AM): I am very sorry to hear that.
oksana_russianname (8/4/2006 9:08:34 AM): He was a very good man and father, I have only mom...
oksana_russianname (8/4/2006 9:08:58 AM): Dear I must go now, I was happy to get the news...
redblue_frog (8/4/2006 9:09:06 AM): Mom?
oksana_russianname (8/4/2006 9:09:35 AM): I will be online only on Monday...
oksana_russianname (8/4/2006 9:09:43 AM): yes?
redblue_frog (8/4/2006 9:09:45 AM): Not on Saturday?
oksana_russianname (8/4/2006 9:09:48 AM): my mom
oksana_russianname (8/4/2006 9:09:58 AM): no my reapair...

A snippet from an email in June 2006:
"I am in divorce for about 6 years. My dad and some best friends gave me a great support at that time. My mom died some years ago."

Is this a translation problem in her original email or something else? Note how when I ask a question there is a pause of a few minutes.


I would be very careful reading into mistakes such as this. If she is not fluent in english she could easly make mistakes of this kind, and not be aware of it.

The delay could be due to using a paper translation dictionary.

Get her on the phone. You are going to drive yourself to paranoia trying to read meaning into suspicious anomalies!

=B-)



Posted by: Revan

Quote:
Originally Posted by metaforest
I would be very careful reading into mistakes such as this. If she is not fluent in english she could easly make mistakes of this kind, and not be aware of it.

The delay could be due to using a paper translation dictionary.

Get her on the phone. You are going to drive yourself to paranoia trying to read meaning into suspicious anomalies!

=B-)


On the paranoia: Yeah I agree.

She gave me her address but not her phone:
oksana_russianname (8/4/2006 8:49:37 AM): no I don't have phone, I wanted to buy mobile phone but because of repair it's difficult...
oksana_russianname (8/4/2006 8:50:04 AM): but I will ask my friends, may be someone give their to use for some time...

She is repairing her flat this weekend.

I googled her address without any hits.

I understand this is a semi-common scammer line(not the exact text):
"I have never believed seriously in relationships through internet till
one of my friend married an American. Now they are happy and live together with their children near Chicago. "


Allow me to reiterate a question:
Evidently this is a computer on a network going out through a router?: " (port=36202 helo=[192.168.1.99])". Is this correct? Is this an Internet cafe or perhaps a computer connected to a network at an apartment?



Posted by: cedarwind

My opinoin for what it is worth.

The BAT!...every scammer I have ran into has this in the heading and I have ran in to 100's as I worked for a short time to help weed out some problems on a Christian dating site that had a problem with Russian and Nigerian scammers. All the honest ones have never had it in the header.

Tell her you wish to mail her a gift and ask her to confirm the address she gave you...I have caught a few this way...If she is a scammer you may get a different address or name to send it to....she may tell you do not send gift as the mail box is broken....or she will tell you to send gift to different address and a friend will receive it...be persistent that you want to mail her a gift if she ignores the question.



Posted by: metaforest

Quote:
Originally Posted by Revan
On the paranoia: Yeah I agree.

She gave me her address but not her phone:
oksana_russianname (8/4/2006 8:49:37 AM): no I don't have phone, I wanted to buy mobile phone but because of repair it's difficult...
oksana_russianname (8/4/2006 8:50:04 AM): but I will ask my friends, may be someone give their to use for some time...

She is repairing her flat this weekend.

I googled her address without any hits.

I understand this is a semi-common scammer line(not the exact text):
"I have never believed seriously in relationships through internet till
one of my friend married an American. Now they are happy and live together with their children near Chicago. "


Allow me to reiterate a question:
Evidently this is a computer on a network going out through a router?: " (port=36202 helo=[192.168.1.99])". Is this correct? Is this an Internet cafe or perhaps a computer connected to a network at an apartment?


The source IP does appear to be behind a firewall/router. The interesting address is 88.147.144.17 as this is the public IP. The 192.168.1.99 is the internal (non-routable) private address. It could be a I-cafe. There's no way to be sure. The public IP[88.147.144.17] has a 47% probability of being within 100 miles of St. Petersburg according to my search. It's owned by the one of the regional telecoms:
Heres the RIPE-whois data:
-----------------------------
inetnum: 88.147.128.0 - 88.147.175.255
netname: SAN
descr: Network of Saratov branch of OJSC "Volgatelecom"
country: RU
admin-c: AVB35-RIPE
tech-c: AVB35-RIPE
status: ASSIGNED PA
mnt-by: MNT-SAN
mnt-domains: MNT-SAN
source: RIPE # Filtered
person: Alexey V Bogdanov
address: JSC "VogaTelecom", Saratov Branch Office
address: Mirny pereulok 11/13 410000 Saratov Russia
e-mail: avb@san.ru
phone: +7 8452 272727
nic-hdl: AVB35-RIPE
source: RIPE # Filtered
% Information related to '88.147.128.0/17AS39229'
route: 88.147.128.0/17
descr: SAN route object
origin: AS39229
mnt-by: mnt-san
source: RIPE # Filtered
--------------------------------

I'm on the cautious/paranoid side. I had a lot of my time wasted by scammers when I first started searching. IMO this contact is showing a couple of big red flags, and some serious yellow flags.

YMMV

=B-)



Posted by: metaforest

BTW Revan
Does the 192.168.1.99 number appear in EVERY email?
Does the 88.147.144.17 address appear in every email?

The 192.168 address may be a computer. If it changes in the letters it may indicate this person is using a different computer during different writing sessions. If it never changes, it is not conclusive, as it could be a router behind a DSL/router. If it was a single (home) computer on a DSL/router I'd expect to see a 192.168.0.xx address where xx is in the range of 2 - 50. Also if the Public IP address never changes it would tend to indicate that the address is assigned to a business (possibly a I-Cafe)
If the last octet of the Public IP changes periodically this may indicate a residential DSL gateway. Residential DSL often will use dynamically assigned IP addresses each time the modem is reset.

There are caveats to all of this. Which is why I said IP tracing is not a very reliable indicator of someone's location, or the type of connection they have to the internet.

=B-)



Posted by: Revan

Quote:
Originally Posted by metaforest
The source IP does appear to be behind a firewall/router. The interesting address is 88.147.144.17 as this is the public IP. The 192.168.1.99 is the internal (non-routable) private address. It could be a I-cafe. There's no way to be sure. The public IP[88.147.144.17] has a 47% probability of being within 100 miles of St. Petersburg according to my search. It's owned by the one of the regional telecoms:
Heres the RIPE-whois data:
-----------------------------
inetnum: 88.147.128.0 - 88.147.175.255
netname: SAN
descr: Network of Saratov branch of OJSC "Volgatelecom"
country: RU
admin-c: AVB35-RIPE
tech-c: AVB35-RIPE
status: ASSIGNED PA
mnt-by: MNT-SAN
mnt-domains: MNT-SAN
source: RIPE # Filtered
person: Alexey V Bogdanov
address: JSC "VogaTelecom", Saratov Branch Office
address: Mirny pereulok 11/13 410000 Saratov Russia
e-mail: avb@san.ru
phone: +7 8452 272727
nic-hdl: AVB35-RIPE
source: RIPE # Filtered
% Information related to '88.147.128.0/17AS39229'
route: 88.147.128.0/17
descr: SAN route object
origin: AS39229
mnt-by: mnt-san
source: RIPE # Filtered
--------------------------------

I'm on the cautious/paranoid side. I had a lot of my time wasted by scammers when I first started searching. IMO this contact is showing a couple of big red flags, and some serious yellow flags.

YMMV

=B-)


I noticed the red flags myself which is why I posted asking for second opinions. Thanks for your input.

On the i.p. I get the city of Saratov from my queries. How do you get an area near St. Petersburg?

IP Address Country (Short) Country (Full) Flag Region City ISP
88.147.144.17 RU RUSSIAN FEDERATION SARATOVSKAYA OBLAST' SARATOV NETWORK OF SARATOV BRANCH OF OJSC VOLGATELECOM


"BTW Revan
Does the 192.168.1.99 number appear in EVERY email?
Does the 88.147.144.17 address appear in every email?"

Yes they do show up in each and every email although the port changes. She mentioned an internet cafe which would mean she used the same computer every time. She also mentioned she has a marketing job and she always posts during the week and during the day. Maybe she is posting from work and not willing to admit it.



Posted by: waiting123

Keep in mind guys there are a lot of marriage agency's set up in St.Pete, that the girls can go the the office and use computers... I know of one that is set up on Nevsky.. and they have about 15 computers for the girls to use.


This would explain a T1 internet connection and the bat software...



Posted by: metaforest

Quote:
Originally Posted by waiting123
Keep in mind guys there are a lot of marriage agency's set up in St.Pete, that the girls can go the the office and use computers... I know of one that is set up on Nevsky.. and they have about 15 computers for the girls to use.


This would explain a T1 internet connection and the bat software...


I agree about the T1, Waiting. A business office with computers sharing a T1 or DSL, or a marriage agency, or an Internet Cafe, or a Home computer behind a firewall/router are all going to look the same from the public IP side.

As for The Bat I am afraid I have to disagree, Waiting.

While it might be possible that someone really is silly enough to use a profession email manging client in a "public terminal" user environment I seriously doubt it.

Anyone who knows enough to set up AND maintain a 15 public station Windows network through a shared T1 is going to know better than to permit unsecure access to a mail-clients like The Bat, Outlook, Eudora, etc in a public terminal setting!! They simply don't add any value to a public terminal environment.

I went and looked at the specs for both the Professional and Home versions of The Bat. If you do not understand how a mail client like The Bat works it's not going to make any sense as to why I am saying this.

The Bat is not designed to play in such an environment, and would create far more problems with local system security, and privacy for the users, and constant hassles for the admin, that just don't provide any useful benefit.

In a public terminal environment everyone including the admin is going to want to users to use web-mail access, through a locked-down browser. It's the only sane way the admin is going to keep a room full of windows boxes running in a public terminal environment!!! It's easy, it's secure, and avoids a lot of overhead that an email client would create for an admin if they foolishly tried to support public terminal support for The Bat....

I know this because part of my job is being AN ADMIN IN A INTERNET CAFE!!!!


Go figure...

=B-)



Posted by: waiting123

Quote:
Originally Posted by metaforest
I agree about the T1, Waiting. A business office with computers sharing a T1 or DSL, or a marriage agency, or an Internet Cafe, or a Home computer behind a firewall/router are all going to look the same from the public IP side.

As for The Bat I am afraid I have to disagree, Waiting.

While it might be possible that someone really is silly enough to use a profession email manging client in a "public terminal" user environment I seriously doubt it.

Anyone who knows enough to set up a 15 terminal network through a shared T1 is going to know better than to permit unsecure access to a mail-client like The Bat. In a public terminal setting!!

The Bat is not designed to play in such an environment, and would create far more problems with local system security for the users, and the admins than it solves.

In a public terminal environment everyone including the admin is going to want to users to use web-mail access. Though a locked-down browser. It's the only way the admin is going to keep a room full of windows boxes running in a public terminal environment!!!

I know this because part of my job is being AN ADMIN IN A INTERNET CAFE!!!!

Go figure...

=B-)


Well there you go... I have been educated today!!!

Thanks Meta



Posted by: metaforest

Quote:
Originally Posted by waiting123
Well there you go... I have been educated today!!!

Thanks Meta


Thank you, Waiting!!

When I came to this forum I didn't know what The Bat was. It's not in common use here. It was your earlier assertion (many weeks ago now) about The Bat that start me into looking at this problem of scamming, examining scammer detection, and what was possible, and what was BS. A lot of the links you and the others have posted as questions about Scamming have been raised gave me more tools to evaluate and test, and more scammer mail to examine... (and mail that was not from scammers )

Thanks to all of you here for helping me get a handle on this topic...
=B-)



Posted by: waiting123

anything we can do to help out the forum....

Hope your search is going well.



Posted by: metaforest

Quote:
Originally Posted by waiting123
anything we can do to help out the forum....

Hope your search is going well.


And it's entirely because of my connections here, and the experiences that fellow users are willing to share!



=B-)



Posted by: Revan

I did some more searching and found that she had deleted her profile from the freepersonals site but had created a profile on another free site. She also has an account on Elenas models(60 days plus since last logon) and old Russianwomen etc. ads(old because the age of her son is 3 years less than from her freepersonals ads). I paid to get her contact information and got her address and a phone number. The street address is the same as what she gave me except for two characters were inverted in the street name.

I called the phone and a man answered the phone speaking in Russian(imagine that). I said her name and got back some more Russian. I hung up the phone. I then realized it was 3 AM her(and his) time. Big 'oops' on my part but telling none the less.

She is supposed to get with me sometime tomorrow with Hotel information for Saratov(I already got most of it from the web). I think I will abstain from visiting her. Even if the phone number was wrong or outdated there are too many red flags for a WOVO situation.



Posted by: Revan

Infrequent emails which often did not answer my questions followed by sporadic text messaging pressing me to come visit her raised some questions. She decides I am the one for her rather quickly and without a lot of communication although there has been no profession of love. Other red flags are posted earlier and discussed.

I am making a bit of a presumption here but based on everything else I don't think it is too big a presumption.

From an email
"Hello my dear Revan,
How are you? I am sorry but Maria was
busy and I couldn't go to her and write you letter."

oksana_russianname (7/24/2006 8:32:18 AM): You wanted to know who is Maria...
oksana_russianname (7/24/2006 8:32:28 AM): She is my friend
redblue_frog (7/24/2006 8:32:42 AM): Yes.
oksana_russianname (7/24/2006 8:33:08 AM): As I don't have phone at home I go to her to talk on the phone and she help me also with correspondence...
redblue_frog (7/24/2006 8:33:36 AM): I understand. How long have you been looking for a man in the US or outside of Russia?
oksana_russianname (7/24/2006 8:35:55 AM): not very long, about some months...
oksana_russianname (8/4/2006 8:43:29 AM): I can offer you two good hotels here. One is Slovakia and other Volga
crunchie_frog (8/4/2006 8:43:52 AM): Good information!
oksana_russianname (8/4/2006 8:44:10 AM): or I can look for appartment for you... only tell what cost is ok for you...
redblue_frog (8/4/2006 8:45:02 AM): As far as cost goes I usually check my options cost vs. convenience and then make a decisions.
redblue_frog (8/4/2006 8:45:22 AM): $100 dollars or less an evening would be good.
oksana_russianname (8/4/2006 8:45:28 AM): ok
redblue_frog (8/4/2006 8:45:41 AM): May I ask your address?
oksana_russianname (8/4/2006 8:46:19 AM): yes, do you want to come to me as a suprise?
redblue_frog (8/4/2006 8:46:48 AM): That would be nice but I think it would be better to have a planned visit.
redblue_frog (8/4/2006 8:47:01 AM): Just a free exchange of information about each other.
oksana_russianname (8/4/2006 8:47:48 AM): Russia, Saratov, Degtayrnaya Street XX - X


http://russiantearoom.net/Individua...ya_guskova.html
Name: Mariya Guskova
Alias: Maria Guskova
Co-Conspirator:
City: Saratov
Country: Russia
Phone: 7-8452413919
Address: Degtyarnaya Street 28-122, Saratov, Russia 410004
Email:
Agency:
Library:
Word on the Street: Gold Digger.
Comments: Her intentions for a serious relationship are less than serious. Her intentions to prosper and benefit from gifts, donations, and financial assistance are very serious.

Mariya Guskova (Saratov, Russia)
Mariya Guskova from Saratov, Russia, has been scamming guys for free trips since 1999. Some men have made four trips to see her, always giving her expensive presents, etc. She was listed on the Angelika Network, but they immediately pulled her profile once they heard about her. Mariya speaks very good English, so often the agency owners who sell her address don't know that she is juggling so many guys. She communicates directly with guys via E-mail, and does not require translations.



redblue_frog (8/4/2006 8:31:03 AM): I understand that in meeting a new person, it is like a game of cards, you do not always show all your cards. Can I ask you a personal question?
oksana_russianname (8/4/2006 8:31:14 AM): yes?
redblue_frog (8/4/2006 8:31:31 AM): Would I be the first person that has come to see you this way?
oksana_russianname (8/4/2006 8:32:05 AM): yes, but I think I tell you already that I don't write to other men...
oksana_russianname (8/4/2006 8:32:25 AM): I think that you have all I like in men,
oksana_russianname (8/4/2006 8:32:36 AM): why I should look for another...
redblue_frog (8/4/2006 8:33:23 AM): Thank you very much for the compliment. I am a decent looking and good man. However, you are beautiful and you have ads out on the internet. I would imagine you get a lot of email.
oksana_russianname (8/4/2006 8:34:00 AM): yes, I get a lot, but it don't mean that I answer to all these people...
oksana_russianname (8/4/2006 8:34:15 AM): I am one man woman,
redblue_frog (8/4/2006 8:34:44 AM): I am a one woman man. Honestly, I have flaws, but dishonesty and cheating are not my flaws.
oksana_russianname(8/4/2006 8:34:45 AM): and if I we fit to each other in real life, I will be happy to make family with you...



Posted by: metaforest

Revan:
You have presented a clear example as to why IMHO: due diligence is very important.

=B-)

BTW: The webtool I used to search for the ip address you posted is
http://www.geobytes.com/IpLocator.htm
It uses a collection of different databases to determine a location. Don't really know if it's better or worse than others, but the output is human readable, and provides a confidence rating (which I have not seen on other similar tools)



Posted by: Leprechaun

I couldnt find anything by googling either. Im just wondering, did you post in the forum at free personals?



Posted by: Revan

Quote:
Originally Posted by Leprechaun
I couldnt find anything by googling either. Im just wondering, did you post in the forum at free personals?


I did not post of the forums. She has removed her ad from the freepersonals and moved to another free site. I did not find any reference to her on the site.



Posted by: Leprechaun

Quote:
Originally Posted by Revan
I did not post of the forums. She has removed her ad from the freepersonals and moved to another free site. I did not find any reference to her on the site.


I think you should, before I met my sweet on free personsals I was writing to a scammer, it was surprising that one person wrote about the scammer then everyone followed with "Im writing to her too". sometimes it takes only one.....
give it a shot and see..... anything to help you find out the truth.



Posted by: Revan

Quote:
Originally Posted by Leprechaun
I think you should, before I met my sweet on free personsals I was writing to a scammer, it was surprising that one person wrote about the scammer then everyone followed with "Im writing to her too". sometimes it takes only one.....
give it a shot and see..... anything to help you find out the truth.


Ok I followed your advice see the results here:
http://datingtalk.info/showthread.php?t=633

Since she had an add on that site and deleted it a month or more ago it is possible nobody else will notice the post that wrote to her and comment. My guess is she is just a pro dater posting out of her work. She seems very new at this due to the mistakes. There may be nothing more sinister here.



Posted by: Revan

It looks like Mariya Guskova/Bonderava is running a married woman scam ring out of Saratov and using Oksana's name and photo as one of her shills(Oksana speaks almost no English and is probably married). Info from several other guys on other forums confirm this is most likely the case.

Her First Name: Mariya
Her Paternal Name: Alexandrovna i.e., Daughter of Alexander
Her Last Name: Bondareva
Her Maiden name is Gus'kova
Married with one or more children. Has her own ads on the net as well as writing for other woman with her excellent english skills.

Mariya Guskova is back. as Oksanna, and she is spamming her contact lists again for the New Year with this form letter sent to two of my accounts (one of which was a bogus account I set up to verify that she was really only writing to me in July of 2006). She sent the exact same email to both of my accounts despite a less than cordial last email. I guess it is more important to generate numbers than use better edits in your contact lists. Guess what it is a new email address for 'Oksana' as well.

Delivered-To: XXXXXX
Received: by 10.48.204.20 with SMTP id b20cs19077nfg;
Thu, 4 Jan 2007 00:25:57 -0800 (PST)
Received: by 10.66.255.7 with SMTP id c7mr29242539ugi.1167899157271;
Thu, 04 Jan 2007 00:25:57 -0800 (PST)
Return-Path:
Received: from mx33.mail.ru (mx33.mail.ru [194.67.23.194])
s7si33392881uge.2007.01.04.00.25.56;
Thu, 04 Jan 2007 00:25:57 -0800 (PST)
Received: from [88.147.144.17] (port=50120 helo=NOTEBOOK)
by mx33.mail.ru with asmtp
id 1H2NvA-0005pt-00
for ; Thu, 04 Jan 2007 11:25:56 +0300
Date: Thu, 28 Dec 2006
From: Shipkovskaya Oksana
X-Mailer: The Bat! (v3.62.14) Professional
Reply-To: Shipkovskaya Oksana
X-Priority: 3 (Normal)
Message-ID: <668053872.20061228103111@bk.ru>
To: Jeff Jones < >
Subject: From Oksana
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Hi, dear Scruffy the Wonder Clown!
Merry Christmas and Happy New Year.
I want to wish all your desires will come true. I want your life to be
full of happiness.
To tell the truth I feel very lonely now. As though I have loving
family next to me, I do not have one person. And this person is you.
I believe that every man and every woman has a person picked by fate.
Imagine that man is walking out in the moonlit night. The light on the
snow-covered trees gives the image of an angelic host. The wind is
blowing
softly making snow flakes like fairy playing in the air. He has been
walking many miles trying to make his way home before Christmas.
Christmas
always makes him feel a little more lonely. And now the lonely road
makes
his heart ache more. His mind begins to wander and envision a girl he
never
met. Yet, somehow he feels he has known her for a long time. She is
with him
on this beautiful night. As he holds her, neither his heart nor his
feet
ache anymore. He feels whole complete. He whispers to her the words he
has
always wanted to say and that she has always wanted to hear. As tears
fill
his eyes, he tells her how he loves her and how he doesn't want this
time
together to end. As he gently kisses her, he tells her how she was
worth all
the lonely days and restless nights. She cries too. Mere words cannot
say
enough. Suddenly the only whisper he hears in his ear is the sound of
the
wind as it softly touches his red cheeks. But he doesn't feel alone
anymore.
His heart is filled with warmth and renewed hope for such a night that
is
surely soon to come. His eyes are directed to a faint light far up the
road.
Little does he know what awaits him. Up ahead she waits for him. As
the
fire-light dances across her, she is everything he ever
desired..............
Darling, I am sorry, but, I will not be able to communicate with you
till 5-6 of January. I will leave to my relatives. They live about 60 km
from Saratov and there will be no place I will be able to write to you
from.


Sincerely
Oksana



Posted by: Dave_N_Elvira

Quote:
Originally Posted by Revan
Hi, dear Scruffy the Wonder Clown!


Top work Scruffy in exposing this foul scammer



Russian America Top. Рейтинг ресурсов Русской Америки. Рейтинг@Mail.ru Russian Network USA



Russian Meeting Place Copyright ©2000 - 2008, www.russianmeetingplace.com and Khahsyar and Lena.