|
Originally Posted by Email Header from Jul 10th
From Russianname Oksana Mon Jul 10 05:18:32 2006
X-Apparently-To: redblue_frog@yahoo.com via 216.252.110.209; Mon, 10 Jul 2006 12:42:59 -0700 X-Originating-IP: [194.67.57.14] Return-Path: Authentication-Results: mta252.mail.mud.yahoo.com from=list.ru; domainkeys=neutral (no sig) Received: from 194.67.57.14 (EHLO mx4.mail.ru) (194.67.57.14) by mta252.mail.mud.yahoo.com with SMTP; Mon, 10 Jul 2006 12:42:58 -0700 Received: from mx27.mail.ru (mx27.mail.ru [194.67.23.65]) by mx4.mail.ru (mPOP.Fallback_MX) with ESMTP id 042D935285A for Received: from [88.147.144.17] (port=36202 helo=[192.168.1.99]) by mx27.mail.ru with asmtp id 1FzujS-0003UD-00 for redblue_frog@yahoo.com; Mon, 10 Jul 2006 16:19:22 +0400 Date: Mon, 10 Jul 2006 16:18:32 +0400 From: "Russianname Oksana" X-Mailer: The Bat! (v3.62.14) Professional Reply-to: Russianname Oksana X-Priority: 3 (Normal) Message-ID: <38179241.20060710161832@list.ru> To: redblue_frog@yahoo.com Subject: From Oksana MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Length: 723 |
|
Originally Posted by Email from 24 May 2006
Hello, dear JoeBillyBob!
Thank you very much for your letter. Now I am going to tell you about myself. I have never believed seriously in relationships through internet till one of my friend married an American. Now they are happy and live together with their children near Chicago. That is why I also made up my mind to find a man of my dreams on the Internet. I hope that in the future I'll find my soul mate and we shall be able to know each other better May be you are that man I am looking for. I believe in love at the first sight. I want to meet a man who will become a faithful friend for me and I - a loving wife. I think that it is necessary for the family. I'd like to be happy as a woman: to have a loving and beloved husband, a cozy and comfortable house where our children will be happy. I also have a lot of love and warmth to give to someone special and I am waiting for the time when I have the opportunity to do it. I take care about my health: I am fond of sports and traveling, strolling in natural landscapes. In the evenings I like to read books, to watch TV, to meet my friends and to walk in the park before going to bed. I live in a small, comfortable apartment in the center of the city. At weekends I often go to my friend's summer cottage, I like to work in the garden, take care of the flowers. Sometimes we go rowing, make stops at a bay, swim, fry meat. I am a romantic lady and I have many ideas to share with my future soul mate: walking through woodland and countryside in a summer afternoon, a romantic picnic together, sitting on a beach looking at the sea, watching to the horizon line, close to each other and whispering to my beloved man how much I love him! This is my dream… I'd also like to spend evenings together warming in each other's arms...thinking about our lives and our future. But I want you to know that I am a common woman, in some situations I am shy, sometimes too direct. I am too sentimental and romantic. I take everything too close to my heart. Tell me something about you: things that you like and dislike. What are your passions and joys? Hope to hear from you soon. Sincerely yours Oksana |
|
Originally Posted by Revan
[SNIP]
How bad of a sign is this?: X-Mailer: The Bat! (v3.62.14) Professional Does anybody recognize any red flags in the above letter? I have read threads on how Google is your friend and I am a proficient with web research. I don't find text from this email or subsequent letters in any text searches. Her letters have been on average weekly(4 days- 8 days) and have never asked for money. She has avoided answering some questions and some of the letters seem almost like form letter which if she is writing a lot of guys might make sense(as opposed to being a scammer). We recently went to text messaging(infrequently). She has been asking me to visit her after 7 emails over a couple months and three text messaging sessions. I met this woman on the freepersonals.ru site. I contacted her and she wrote back. I have done a ton of googling on pictures ip,s and scam sites and before making this post have too much information I guess I will end my post here. Thanks for any input! |
|
Originally Posted by Revan
A follow up(perhaps I should change the header):
redblue_frog (8/4/2006 8:53:22 AM): So let me ask: In one of your first letters to me you talked about how your father gave you support through your divorce. redblue_frog (8/4/2006 8:53:36 AM): I have not heard you mention him since. Is you father well? oksana_russianname (8/4/2006 8:54:47 AM): just a moment oksana_russianname (8/4/2006 9:07:36 AM): I am back oksana_russianname (8/4/2006 9:08:02 AM): my father died some years ago... redblue_frog (8/4/2006 9:08:20 AM): I am very sorry to hear that. oksana_russianname (8/4/2006 9:08:34 AM): He was a very good man and father, I have only mom... oksana_russianname (8/4/2006 9:08:58 AM): Dear I must go now, I was happy to get the news... redblue_frog (8/4/2006 9:09:06 AM): Mom? oksana_russianname (8/4/2006 9:09:35 AM): I will be online only on Monday... oksana_russianname (8/4/2006 9:09:43 AM): yes? redblue_frog (8/4/2006 9:09:45 AM): Not on Saturday? oksana_russianname (8/4/2006 9:09:48 AM): my mom oksana_russianname (8/4/2006 9:09:58 AM): no my reapair... A snippet from an email in June 2006: "I am in divorce for about 6 years. My dad and some best friends gave me a great support at that time. My mom died some years ago." Is this a translation problem in her original email or something else? Note how when I ask a question there is a pause of a few minutes. |
|
Originally Posted by metaforest
I would be very careful reading into mistakes such as this. If she is not fluent in english she could easly make mistakes of this kind, and not be aware of it.
The delay could be due to using a paper translation dictionary. Get her on the phone. You are going to drive yourself to paranoia trying to read meaning into suspicious anomalies! =B-) |
|
Originally Posted by Revan
On the paranoia: Yeah I agree.
She gave me her address but not her phone: oksana_russianname (8/4/2006 8:49:37 AM): no I don't have phone, I wanted to buy mobile phone but because of repair it's difficult... oksana_russianname (8/4/2006 8:50:04 AM): but I will ask my friends, may be someone give their to use for some time... She is repairing her flat this weekend. I googled her address without any hits. I understand this is a semi-common scammer line(not the exact text): "I have never believed seriously in relationships through internet till one of my friend married an American. Now they are happy and live together with their children near Chicago. " Allow me to reiterate a question: Evidently this is a computer on a network going out through a router?: " (port=36202 helo=[192.168.1.99])". Is this correct? Is this an Internet cafe or perhaps a computer connected to a network at an apartment? |
|
Originally Posted by metaforest
The source IP does appear to be behind a firewall/router. The interesting address is 88.147.144.17 as this is the public IP. The 192.168.1.99 is the internal (non-routable) private address. It could be a I-cafe. There's no way to be sure. The public IP[88.147.144.17] has a 47% probability of being within 100 miles of St. Petersburg according to my search. It's owned by the one of the regional telecoms:
Heres the RIPE-whois data: ----------------------------- inetnum: 88.147.128.0 - 88.147.175.255 netname: SAN descr: Network of Saratov branch of OJSC "Volgatelecom" country: RU admin-c: AVB35-RIPE tech-c: AVB35-RIPE status: ASSIGNED PA mnt-by: MNT-SAN mnt-domains: MNT-SAN source: RIPE # Filtered person: Alexey V Bogdanov address: JSC "VogaTelecom", Saratov Branch Office address: Mirny pereulok 11/13 410000 Saratov Russia e-mail: avb@san.ru phone: +7 8452 272727 nic-hdl: AVB35-RIPE source: RIPE # Filtered % Information related to '88.147.128.0/17AS39229' route: 88.147.128.0/17 descr: SAN route object origin: AS39229 mnt-by: mnt-san source: RIPE # Filtered -------------------------------- I'm on the cautious/paranoid side. I had a lot of my time wasted by scammers when I first started searching. IMO this contact is showing a couple of big red flags, and some serious yellow flags. YMMV =B-) |
|
Originally Posted by waiting123
Keep in mind guys there are a lot of marriage agency's set up in St.Pete, that the girls can go the the office and use computers... I know of one that is set up on Nevsky.. and they have about 15 computers for the girls to use.
This would explain a T1 internet connection and the bat software... |
|
Originally Posted by metaforest
I agree about the T1, Waiting. A business office with computers sharing a T1 or DSL, or a marriage agency, or an Internet Cafe, or a Home computer behind a firewall/router are all going to look the same from the public IP side.
As for The Bat I am afraid I have to disagree, Waiting. While it might be possible that someone really is silly enough to use a profession email manging client in a "public terminal" user environment I seriously doubt it. Anyone who knows enough to set up a 15 terminal network through a shared T1 is going to know better than to permit unsecure access to a mail-client like The Bat. In a public terminal setting!! The Bat is not designed to play in such an environment, and would create far more problems with local system security for the users, and the admins than it solves. In a public terminal environment everyone including the admin is going to want to users to use web-mail access. Though a locked-down browser. It's the only way the admin is going to keep a room full of windows boxes running in a public terminal environment!!! I know this because part of my job is being AN ADMIN IN A INTERNET CAFE!!!! Go figure... =B-) |
|
Originally Posted by waiting123
Well there you go... I have been educated today!!!
Thanks Meta |
)
|
Originally Posted by waiting123
anything we can do to help out the forum....
Hope your search is going well. |
|
Originally Posted by Leprechaun
I couldnt find anything by googling either. Im just wondering, did you post in the forum at free personals?
|
|
Originally Posted by Revan
I did not post of the forums. She has removed her ad from the freepersonals and moved to another free site. I did not find any reference to her on the site.
|
|
Originally Posted by Leprechaun
I think you should, before I met my sweet on free personsals I was writing to a scammer, it was surprising that one person wrote about the scammer then everyone followed with "Im writing to her too". sometimes it takes only one.....
give it a shot and see..... anything to help you find out the truth. |
|
Originally Posted by Revan
Hi, dear Scruffy the Wonder Clown!
|
Russian Meeting Place Copyright ©2000 - 2008,
www.russianmeetingplace.com and Khahsyar and Lena.