Help deciphering the header info on Vlad Luda

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Mon Sep 04, 2006 3:31 pm

Can anybody tell me the details of this header? I know diddly about how to read headers. thx---Wayne your posts are hilarious---

MIME-Version: 1.0
Received: from mx5.mail.ru ([194.67.23.25]) by bay0-mc1-f19.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444); Sun, 3 Sep 2006 11:32:38 -0700
Received: from [217.107.237.47] (port=31410 helo=47.237.dialup.mari-el.ru)by mx5.mail.ru with asmtp id 1GJwl8-000BTE-00for [email protected]; Sun, 03 Sep 2006 22:31:55 +0400
X-Message-Info: txF49lGdW43/A9aTRI2cZC3US+HNatvlBkfeBtG8RQA=
X-Mailer: The Bat! (v3.0) Professional
Return-Path: [email protected]
X-OriginalArrivalTime: 03 Sep 2006 18:32:39.0122 (UTC) FILETIME=[55A79B20:01C6CF87]

hello my lovely Marcus!!!!!
My lovely, it was very pleasant for me to
receive and read your letter. Your letters always give to me pleasure.
Very much it is pleasant to me, that I have man with which I can to
share my ideas, my problems, my feelings. I am very grateful to you,
that in my life you have appeared. My lovely, I think, that my mum can
become and for you your mum. Whether in fact while we with you
communicate to her too I tell about you and my mum very much is
interested pleasantly to me to communicate with you and always I
answer my mum, that I very much like to communicate with you. I am
very glad, that you like to look at me on photos. I think, that I
shall like you even more when you will see me in real life. I send you
one more my photo and I hope, that this photo too is pleasant to you.
I feel every day, that to me it becomes better, my finest feelings
wake up in me because you promote that I very much frequently thought
about fine because it to me helps to live, to me dialogue with you
helps to live. I feel, that I have very strongly got used to you. I
like everything about what you write. You have come in I wash lives
and it becomes easier to me to live every day because you are present
in my life, my lovely. My lovely, unfortunately my computer of a house
has now broken also I write you this letter from the Internet of cafe
and I do not have time here on using yahoo, therefore we with you can
communicate only with the help of letters. And still, if you want, we
can speak with you, I unfortunately do not have own phone because it
is very expensive to have own phone and I can ask phone my girlfriend
to talk to you. I very much would like to talk to you and to hear your
voice. My lovely, I every day recollect about you, with me such never
was, even when I had former relations. My lovely, I shall go tomorrow
to travel agency and to find out the information on how it is possible
to arrive to you. My lovely, but I should know the name of the nearest
airport, where do you live. As soon as I shall find out this
information I shall try to come in the Internet of cafe and to write
to you the letter. My lovely, I wish you successful day and with
impatience I shall wait for your letter.
Your Luda!!!!
I'm missing you!!!!

(Yeh, I miss you too hunny, and me and boys can't wait to get you on a nice holiday safari, scamming bastid!! Love and Kisses til later my smarmy little Vlad)

Posted: Mon Sep 04, 2006 3:49 pm

Quote:

X-Mailer: The Bat! (v3.0) Professional

^^^ means they're using professional emailing software, so "I write you this letter from the Internet of cafe" is a lie. Your scammers using "her" own computer to send the emails. No internet cafe would use it. You have to do everything via web based email accounts in an internet cafe.

Cut n paste the headers into http://headertool.apelord.com/ and you get

IP Address Probable Country Additional Info
194.67.23.25 Russian Federation* Whois Google
217.107.237.47 Russian Federation* Whois Google
* The last IP listed is usually the originating IP address[/quote]

Click on whois for 217.107.237.47 and you get

Quote:

Russian Federation (high) [City: Sovetskaya Gavan', Khabarovskiy Kray]

ARIN says that this IP belongs to RIPE; I'm looking it up there.

Using 0 day old cached answer (or, you can get fresh results).
Hiding E-mail address (you can get results with the E-mail address).

% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Information related to '217.107.236.0 - 217.107.237.255'

inetnum: 217.107.236.0 - 217.107.237.255
netname: RT-CLNT-MARTELCOM
descr: Mari El Net
descr: Volgatelecom Mari El branch
country: RU
admin-c: NN-RIPE
tech-c: NN-RIPE
status: ASSIGNED PA
notify: ***@mari-el.ru
notify: ***@mari-el.ru
notify: ***@rtcomm.ru
mnt-by: AS8342-MNT
changed: ****@rt.ru 20041006
source: RIPE

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: ***@relinfo.ru
nic-hdl: NN-RIPE
changed: ***@relinfo.ru 20040402
source: RIPE

% Information related to '217.106.0.0/15AS8342'

route: 217.106.0.0/15
descr: RTCOMM-RU
origin: AS8342
notify: ***@rtcomm.ru
mnt-by: AS8342-MNT
changed: ***@rt.ru 20001221
changed: ***@rt.ru 20031105
changed: ***@rt.ru 20040809
source: RIPE

And from that you see Mari El, the Russian Lagos.
The Bat! plus Mari El equals scammer.

Posted: Mon Sep 04, 2006 3:57 pm

Good stuff, wayne!!! What is the significance of this:

Quote:

person: Nikolay Nikolaev
address: Volgatelecom Mari El branch
address: Sovetskaya 138
address: 424000 Yoshkar-Ola
address: Russia MariEl Republic
phone: +7 8362 421549
phone: +7 8362 664435
fax-no: +7 8362 664151
e-mail: ***@relinfo.ru
nic-hdl: NN-RIPE
changed: ***@relinfo.ru 20040402
source: RIPE

Thx for the resource to do it myself too!

Posted: Mon Sep 04, 2006 4:02 pm

That's just info on the ISP.

Help deciphering the header info on Vlad Luda	View next topic View previous topic