Anna <remoanna@yandex.ru>

[Administrator]

Hi ich, how are you? My name is Anna, I hope you remember me
I use online dating to find new friends, if you are looking for the same things, that would be great!
online dating, I think it's a great opportunity to find a new friend in the whole world! - do you agree?
I Sport girl, by the way, you can see it on my photo, I hope you enjoy it!
I am waiting for new pictures from you too! Write me soon, please wait for your answer with impatience!

Anna.

Spoiler

Delivered-To: xxxxxxxxxx
Received: by 10.140.101.184 with SMTP id u53csp1278397qge;
        Sun, 5 Feb 2017 01:40:50 -0800 (PST)
X-Received: by 10.25.203.3 with SMTP id b3mr1840515lfg.130.1486287649941;
        Sun, 05 Feb 2017 01:40:49 -0800 (PST)
Return-Path: <remoanna@yandex.ru>
Received: from forward11p.cmail.yandex.net (forward11p.cmail.yandex.net. [2a02:6b8:0:1465::bb])
        by mx.google.com with ESMTPS id s66si19050296lfi.237.2017.02.05.01.40.49
        for <xxxxxxxxxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sun, 05 Feb 2017 01:40:49 -0800 (PST)
Received-SPF: pass (google.com: domain of remoanna@yandex.ru designates 2a02:6b8:0:1465::bb as permitted sender) client-ip=2a02:6b8:0:1465::bb;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@yandex.ru;
       spf=pass (google.com: domain of remoanna@yandex.ru designates 2a02:6b8:0:1465::bb as permitted sender) smtp.mailfrom=remoanna@yandex.ru;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=yandex.ru
Received: from smtp1o.mail.yandex.net (smtp1o.mail.yandex.net [IPv6:2a02:6b8:0:1a2d::25]) by forward11p.cmail.yandex.net (Yandex) with ESMTP id 72876218EC for <xxxxxxxxxx>; Sun,
  5 Feb 2017 12:40:49 +0300 (MSK)
Received: from smtp1o.mail.yandex.net (localhost.localdomain [127.0.0.1]) by smtp1o.mail.yandex.net (Yandex) with ESMTP id 5054A1300C82 for <xxxxxxxxxx>; Sun,
  5 Feb 2017 12:40:48 +0300 (MSK)
Received: by smtp1o.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id 1SjKWMQ5kf-em5WxXHk; Sun, 05 Feb 2017 12:40:48 +0300 (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client certificate not present)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1486287648; bh=EHLpdS+YjWthUiBOsnGnyoZoZO7SzAnT5BUtQuoDPkg=; h=Date:From:To:Message-ID:Subject; b=MCdVT99AvD8XcYw8e6Mwy6+txkvwFFWm++9RzdWigOWu+34vi2224mZZQ5OceoOY5
    FKbBKEOpthZ/6cxs8gMZg9R+ft2T6rEmYpKzA1hqRZ2ye9PrY2HGBGHt/bxDh2EzpA
    oTtdLuSZec5bfm1riavERXl6ArRGCkM7tIAs1SeQ=
Authentication-Results: smtp1o.mail.yandex.net; dkim=pass header.i=@yandex.ru
X-Yandex-Suid-Status: 1 0
Date: Sun, 5 Feb 2017 12:40:10 +0300
From: "remoanna@yandex.ru" <remoanna@yandex.ru>
To:  <xxxxxxxxxx>
Message-ID: <16418421.20170205124010@yandex.ru>
Subject:
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary="----------F91D3239201D6867"

Weitere Bilder in der Galerie

http://dating-fraud.net/galerie/thumbnails.php?album=5237

[Administrator]

Eingeliefert über Russland

Date: Sun, 5 Feb 2017 12:40:10 +0300
From: "remoanna@yandex.ru" <remoanna@yandex.ru>

Details for 2a02:6b8:0:1a2d::25
IP:   2a02:6b8:0:1a2d::25
Expanded IP:   2a02:06b8:0000:1a2d:0000:0000:0000:0025
Hostname:   smtp1o.mail.yandex.net
ASN:   13238
ISP:   YANDEX LLC
Organization:   YANDEX LLC
Services:   Likely mail server
Type:   Broadband
Assignment:   Static IP
Continent:   Europe
Country:   Russia ru flag
State/Region:   Moscow
City:   Moscow

[Administrator]

Hi my friend, how
are you? Hope you are ok there, really happy to see a letter
from you
and glad that you want to become
friends :) I would be happy if you send me some new fotos
and promise to send you mind of course.
I think that you already know a little about me
from my previous letter but now I want to tell you
little more. I borned in 1985 in small russian
city called Kirov, it's in Kirov region but not
sure if you
know where it is because
it's very small town. And of course I have some thoughts
to move to big city
because I love travel
and want to realize myself :) what else... I'm usual
russian girl, love nature, good music,
meeting with friends and prefer healthy life
style. My height 169 cm and 49 kg weight, looks very compact
and sportive as you can see on my fotos ;) What about you?
What's your interests and hobbies in life?
How do you like to spend your free time? Just
curious ;) About my daily life - of course I have a job
because need to survive ;) I have economic degree and at
present time work as manager in a firm which deal with
selling different furniture - sofas, bed, chairs etc. My job
is good, I'm feeling myself comfortable and have good
collective, so there are no problems with job and that's
really good ;) But I'm already 31 y.o., still unmarried
and of course I'm thinking about creaing family but
still haven't met comatible person. I believe that any
strong feelings born from friendship, so we need to be open
and honest to each other, do you agree with me? I have a
serious intentions and please tell me what are you looking
for? Anyway we can start as friends and who knows what can
happen in future!
I'm looking for new
friends because I'm planning my future vacation soon, I
worked hard past year and deserve to have a rest.  Just
don't want to spend it alone in new country and it would
be great if may be we will meet each other and you will be
my guide, show me some cool places -what do you think? A
month ago I applied for my tourist visa, filled all
necessary papers and soon my visa will be ready. If you have
a common desire to meet in real life then it will be
possible soon! Please tell me what's your thoughts about
it, waiting for your answer soon!
with kind
regards, Anna!

Spoiler

Delivered-To: xxxxxxxxx
Received: by 10.140.23.240 with SMTP id 103csp5060638qgp;
        Tue, 12 Sep 2017 02:33:14 -0700 (PDT)
X-Google-Smtp-Source: AOwi7QBFqqevw/EHG3E8+jPLPmv2i2b3MClLiFTJfxOenMiIrq8uurbMoiUAsgwJfNHSTYRx0foc
X-Received: by 10.46.29.215 with SMTP id w84mr2391175lje.66.1505208794756;
        Tue, 12 Sep 2017 02:33:14 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1505208794; cv=none;
        d=google.com; s=arc-20160816;
        b=sYLWVvjOJx+3d7Wa1/DgeqoQoq6WKfzMduveckKkfJBIl5MFkYafveWOQlLLL6TI8j
         0tHrZzBYx7g+r6MaUSvcxs9bWl91evwF1J78ltv+9iy+kbSxAOWt40NLpKaFyBMzu1xK
         6/mVg01OAZ3bEbEcN87MQcYYvNsVQsB4rSkhWQ4bUnPrHdURtQidY3ESOPTK418lJrbY
         6bmRMfQfhpsYKPlW6LNcwfzv6g5b6j2PbedAKLopXyWTR2HYj3b7rJjuZ0VpBsH0VclQ
         UQpJO239izCqKivVEbwqcHmjysrvvCunTtIYsoMFFxDFJcQWAbUhr/xGQW2aaBodvlS0
         aR4g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:references:in-reply-to:subject:to:message-id:from:date
         :dkim-signature:dkim-signature:arc-authentication-results;
        bh=vR5CjFfjvaZO2yHo+5el8yf41D8/IkfNYE8Nfg7z1Qg=;
        b=b6CA7gVKzv7hBMDorlJRZPz916Nh4LN3W7RvIIOn6m4jNFjUix02+TtupjUkh+vDNx
         rSlnaRLHreWlYKsAni6KRSA911WXcmd6OYjrgJTkkFMLf0cXK6x+GoY4s7XPHviCdu4Q
         1ixf2NN1/2ZkitNPphLACn0lIp633Gx0ooDXHpZDrEDm0KR/PyfjvnkTAA06R+BeEDXj
         OA9048gs1Az4xdoBCkzGPqF7ESNipGOZgoyhJ8p902QCTjfcrO7bVI1iN3EeZ3dXkGWA
         I2hZMy7eJ97GyU/xvzxqfRT+VnEjRTtyvUqLyWMdMJ1fFFp/nfOjhe5lt6Aijh22gOq/
         HjUA==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@yandex.ru header.s=mail header.b=ApCSEVbC;
       dkim=pass header.i=@yandex.ru header.s=mail header.b=cjw0Z4Ww;
       spf=pass (google.com: domain of remoanna@yandex.ru designates 2a02:6b8:0:1472:2741:0:8b7:100 as permitted sender) smtp.mailfrom=remoanna@yandex.ru;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=yandex.ru
Return-Path: <remoanna@yandex.ru>
Received: from forward100p.mail.yandex.net (forward100p.mail.yandex.net. [2a02:6b8:0:1472:2741:0:8b7:100])
        by mx.google.com with ESMTPS id b186si4050702lfb.683.2017.09.12.02.33.14
        for <xxxxxxxxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 12 Sep 2017 02:33:14 -0700 (PDT)
Received-SPF: pass (google.com: domain of remoanna@yandex.ru designates 2a02:6b8:0:1472:2741:0:8b7:100 as permitted sender) client-ip=2a02:6b8:0:1472:2741:0:8b7:100;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@yandex.ru header.s=mail header.b=ApCSEVbC;
       dkim=pass header.i=@yandex.ru header.s=mail header.b=cjw0Z4Ww;
       spf=pass (google.com: domain of remoanna@yandex.ru designates 2a02:6b8:0:1472:2741:0:8b7:100 as permitted sender) smtp.mailfrom=remoanna@yandex.ru;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=yandex.ru
Received: from mxback7g.mail.yandex.net (mxback7g.mail.yandex.net [IPv6:2a02:6b8:0:1472:2741:0:8b7:168]) by forward100p.mail.yandex.net (Yandex) with ESMTP id 0E7E45100E59 for <xxxxxxxxx>; Tue, 12 Sep 2017 12:33:14 +0300 (MSK)
Received: from smtp4p.mail.yandex.net (smtp4p.mail.yandex.net [2a02:6b8:0:1402::15:6]) by mxback7g.mail.yandex.net (nwsmtp/Yandex) with ESMTP id ZsRxkyfkuE-XDdOIgFx; Tue, 12 Sep 2017 12:33:13 +0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1505208794; bh=vR5CjFfjvaZO2yHo+5el8yf41D8/IkfNYE8Nfg7z1Qg=; h=Date:From:Message-ID:To:Subject:In-Reply-To:References; b=ApCSEVbCu87eIcfiY/X+AVptznxF9IQl2ETA/hSzREnPWl+OEYimz2SI33yEZ5Wf3
    W3LnmWBw9o0MPnTq6RfF0Oc19c4koRBmLA2a9PaL4iW58Cms7jwqZPpzWgJZWct2zk
    XJjE4nKMcirJRQ52q5LgjUL/iDN4wCAKUJiIEYk8=
Received: by smtp4p.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id lBwL4zp1LB-XDgGxqtB; Tue, 12 Sep 2017 12:33:13 +0300 (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client certificate not present)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1505208793; bh=vR5CjFfjvaZO2yHo+5el8yf41D8/IkfNYE8Nfg7z1Qg=; h=Date:From:Message-ID:To:Subject:In-Reply-To:References; b=cjw0Z4Ww9c+mtBwPvf1kpu4u6IQysuW4OCojw0/mfWZprPdsCk7wPbDnrnQACx6Xo
    OnUZRDfEr7et1nkNKMcPL7k5YtKEfGyOzx/sQD2Q7C8oysz6m/fZGo34VcTfO35L1l
    fgZy1H0YSI082lv0GQCS2WEzKtth41d2k5XpBY9s=
Authentication-Results: smtp4p.mail.yandex.net; dkim=pass header.i=@yandex.ru
Date: Tue, 12 Sep 2017 12:31:06 +0300
From: remoanna@yandex.ru
X-Priority: 3 (Normal)
Message-ID: <132713953.20170912123106@yandex.ru>
To:  <xxxxxxxxx>
Subject: I'm glad to see your letter!
In-Reply-To: <CAFdMcZSbWeKLABLyZWY1xn806XL-mgO4M4zzjyP-xk8tnTENng@mail.gmail.com>
References: <16418421.20170205124010@yandex.ru> <CAFdMcZSbWeKLABLyZWY1xn806XL-mgO4M4zzjyP-xk8tnTENng@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------A62E2491272D7B0"

------------A62E2491272D7B0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

[Administrator]

Date: Tue, 12 Sep 2017 12:31:06 +0300
From: remoanna@yandex.ru

Source: whois.ripe.netIP Address: 2a02:6b8:0:1402::15:6
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

%ERROR:201: access denied for 34.194.69.118
%
% Sorry, access from your host has been permanently
% denied because of a repeated excessive querying.
% For more information, see
% http://www.ripe.net/data-tools/db/faq/faq-db/why-did-you-receive-the-error-201-access-denied

% This query was served by the RIPE Database Query Service version 1.96 (HEREFORD)