Ekaterina / Kristina <tiffany.xox@msn.com> <vekorlutis@gmail.com>

[Achilles]

<umetalco@fox.ip-asia.com>



Spoiler

From "Ekaterina" Fri Apr  1 20:35:38 2016
X-Apparently-To: wxxxxxxxxxxxxcom; Fri, 01 Apr 2016 13:48:11 +0000
Return-Path: <tiffany.xox@msn.com>
X-YahooFilteredBulk: 201.219.146.104
Received-SPF: softfail (transitioning domain of msn.com does not designate 201.219.146.104 as permitted sender)
X-YMailISG: spVnqwcWLDuJ68DXvJDpUVau.eTrJlA1JihJvwawEYEMTGlX
 mxrUEzFJTKIRoWAaurEMU9HLPz0dxwmUN8mEkw49AknpDCm8oQB1TfZn1Lj8
 tu15EP1c312Bmoh.UlXoJYnCYY_DhmGfMhv7XnH6N8.hPY58j0eIGiX7bh7F
 SaUZpdPAcD3ydYbWlD0AqofECT6G7qyqdG3NwHyEoTCDwmzMaO9P3ay4T573
 GoQMpNGRQ8ngFRLSTO8yKs7MrbsfHd30QrH7TCumiSdDpoN3YteqDr8q01aV
 tARi8Dl8yUnY2EPqruGYvCbhYVgB0SMxuDTVKZpVhdNuGfwtwgElgsumJY0J
 V3Uacb4BaDXIxibt1tmu36zNc2J1M5z8JZK4oY9TIiDzch6f74EpLB_NrstG
 90CJpeiTn43Z4TiyXVArKwfFiu9ChCTfgohu_qfzC6hx7Kt1g2ZGJ10vLaPE
 aa.KluXD8PPOVNMqp1lKXHA833wqzpCEVTYXTIoB6_nxtHLKLUYxiBjUlrf2
 sDMAPLOtUg4qR4DCDD.upDStos3uiqV7swhpcgxMstS57PRHFbmtyRpwcUcw
 cnADYYgT1kSKZAuNsNfT4bpVbsiN2G217Asp29dVkkrbH_hIrGERlA0nnEnZ
 zUWToc2H.mTdSHD2gI7ijZRwkfHCoKeCwCMXjZkWoaMFI5zeFCvIPA1uiQNL
 759VFIob7pxD6pD3pDDUSgYXouY971pIF9ZBF6srvLBCGWIOUHowJWkOwtYL
 LDBRJLJGPOz6Ix8EXzcqm.jGPZSxVia3ORZfhKROriB.lMgX9Dpsy9ioQseh
 hMJX7dsCn_uNryfm082zba9_fKRN8n9sPkVP5qmgDnf38AMvnMuv6Moo8Xze
 zGg6eDR.1ELAYRbpC5W4RoRYJ0LLe01M_JIkg4fYpFsWO3Li2rA3fF6Y48zB
 Ps.0ytjzJSPy_OihDplqLtWIup50eHY2p6pB9wiCgUYHMk0IQH9qJbt3rC90
 boMFGEbMZYDLGpCx.NylAoqZ4KlvOAYLHXc9ICSol8A6TnGrK3XhToKe1xoi
 6fwWfxxFYQcCHJq5_pSWcMvtincfmsC12tnN50ZBA39OWcrBb2isTPXpFokl
 gES9A66oFogf8ZwFjhxfkC_sa3M1lUmu2D28ID8ksmlGRV7JYr_pkE5ppczp
 bZVMMAbtLMjc2.xEspaKC6CUQJKPphEsrlTVxNvMjRUI66I7zr12uszFvTXh
 ekNXdxCbDzVcDgiTFOVgKwnIB2mXAea2ALxOFI02RUo1cpknNf.ChZw4MLwB
 eIfCoWBMQ86R.qJPIACE5Hskc9_XcH57ff5hNBzRHQHcQeOM9NA_r39nqJwQ
 E5p5e49A8KsFoY6.xldRAjIosmY6Wfmjusd.9BptoQAKpyT4iRtsdD1lXUd6
 zaLXtzwIIl3ZFlLeCGh69TiSnA8eapCPL.nYYXUJ6zixO7.78AlmY5EdwugY
 LI.6vp4-
X-Originating-IP: [201.219.146.104]
Authentication-Results: mta1037.mail.ne1.yahoo.com  from=msn.com; domainkeys=neutral (no sig);  from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1  (HELO msn.com) (201.219.146.104)
  by mta1037.mail.ne1.yahoo.com with SMTP; Fri, 01 Apr 2016 13:48:11 +0000
Message-ID: <75992156.4E335151@msn.com>
Date: Sat, 02 Apr 2016 06:35:38 +1000
Reply-To: "Ekaterina" <tiffany.xox@msn.com>
From: "Ekaterina" <tiffany.xox@msn.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.4) Gecko/20070604 Thunderbird/2.0.0.4
MIME-Version: 1.0
Subject: Greetings my new friend!
Content-Type: multipart/mixed;
      boundary="------------685838342352074663100024"
Content-Length: 38777From "Ekaterina" Fri Apr  1 20:35:38 2016
X-Apparently-To:  Fri, 01 Apr 2016 13:48:11 +0000
Return-Path: <tiffany.xox@msn.com>
X-YahooFilteredBulk: 201.219.146.104
Received-SPF: softfail (transitioning domain of msn.com does not designate 201.219.146.104 as permitted sender)
X-YMailISG: spVnqwcWLDuJ68DXvJDpUVau.eTrJlA1JihJvwawEYEMTGlX
 mxrUEzFJTKIRoWAaurEMU9HLPz0dxwmUN8mEkw49AknpDCm8oQB1TfZn1Lj8
 tu15EP1c312Bmoh.UlXoJYnCYY_DhmGfMhv7XnH6N8.hPY58j0eIGiX7bh7F
 SaUZpdPAcD3ydYbWlD0AqofECT6G7qyqdG3NwHyEoTCDwmzMaO9P3ay4T573
 GoQMpNGRQ8ngFRLSTO8yKs7MrbsfHd30QrH7TCumiSdDpoN3YteqDr8q01aV
 tARi8Dl8yUnY2EPqruGYvCbhYVgB0SMxuDTVKZpVhdNuGfwtwgElgsumJY0J
 V3Uacb4BaDXIxibt1tmu36zNc2J1M5z8JZK4oY9TIiDzch6f74EpLB_NrstG
 90CJpeiTn43Z4TiyXVArKwfFiu9ChCTfgohu_qfzC6hx7Kt1g2ZGJ10vLaPE
 aa.KluXD8PPOVNMqp1lKXHA833wqzpCEVTYXTIoB6_nxtHLKLUYxiBjUlrf2
 sDMAPLOtUg4qR4DCDD.upDStos3uiqV7swhpcgxMstS57PRHFbmtyRpwcUcw
 cnADYYgT1kSKZAuNsNfT4bpVbsiN2G217Asp29dVkkrbH_hIrGERlA0nnEnZ
 zUWToc2H.mTdSHD2gI7ijZRwkfHCoKeCwCMXjZkWoaMFI5zeFCvIPA1uiQNL
 759VFIob7pxD6pD3pDDUSgYXouY971pIF9ZBF6srvLBCGWIOUHowJWkOwtYL
 LDBRJLJGPOz6Ix8EXzcqm.jGPZSxVia3ORZfhKROriB.lMgX9Dpsy9ioQseh
 hMJX7dsCn_uNryfm082zba9_fKRN8n9sPkVP5qmgDnf38AMvnMuv6Moo8Xze
 zGg6eDR.1ELAYRbpC5W4RoRYJ0LLe01M_JIkg4fYpFsWO3Li2rA3fF6Y48zB
 Ps.0ytjzJSPy_OihDplqLtWIup50eHY2p6pB9wiCgUYHMk0IQH9qJbt3rC90
 boMFGEbMZYDLGpCx.NylAoqZ4KlvOAYLHXc9ICSol8A6TnGrK3XhToKe1xoi
 6fwWfxxFYQcCHJq5_pSWcMvtincfmsC12tnN50ZBA39OWcrBb2isTPXpFokl
 gES9A66oFogf8ZwFjhxfkC_sa3M1lUmu2D28ID8ksmlGRV7JYr_pkE5ppczp
 bZVMMAbtLMjc2.xEspaKC6CUQJKPphEsrlTVxNvMjRUI66I7zr12uszFvTXh
 ekNXdxCbDzVcDgiTFOVgKwnIB2mXAea2ALxOFI02RUo1cpknNf.ChZw4MLwB
 eIfCoWBMQ86R.qJPIACE5Hskc9_XcH57ff5hNBzRHQHcQeOM9NA_r39nqJwQ
 E5p5e49A8KsFoY6.xldRAjIosmY6Wfmjusd.9BptoQAKpyT4iRtsdD1lXUd6
 zaLXtzwIIl3ZFlLeCGh69TiSnA8eapCPL.nYYXUJ6zixO7.78AlmY5EdwugY
 LI.6vp4-
X-Originating-IP: [201.219.146.104]
Authentication-Results: mta1037.mail.ne1.yahoo.com  from=msn.com; domainkeys=neutral (no sig);  from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1  (HELO msn.com) (201.219.146.104)
  by mta1037.mail.ne1.yahoo.com with SMTP; Fri, 01 Apr 2016 13:48:11 +0000
Message-ID: <75992156.4E335151@msn.com>
Date: Sat, 02 Apr 2016 06:35:38 +1000
Reply-To: "Ekaterina" <tiffany.xox@msn.com>
From: "Ekaterina" <tiffany.xox@msn.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.4) Gecko/20070604 Thunderbird/2.0.0.4
MIME-Version: 1.0
To:
      <wxxxxxxxxxxxxx.com>
Subject: Greetings my new friend!
Content-Type: multipart/mixed;
      boundary="------------685838342352074663100024"
Content-Length: 38777

Ekaterina <tiffany.xox@msn.com> schrieb am 15:48 Freitag, 1.April 2016:

Hello! My name is Ekaterina. I am twenty eight years old. I am  blonde and I
have green eyes. I am from Russian Federation. I love skiing some walks. I
would like to find a attractive and good men. I am supporting, cute and
concerned about others woman. Dont be shy  write to me a line. Take care!
Ekaterina

vekorlutis@gmail.com

[Almöhi]

Verschleiert Eingeliefert über Chile

Date: Sat, 02 Apr 2016 06:35:38 +1000
Reply-To: "Ekaterina" <tiffany.xox@msn.com>
From: "Ekaterina" <tiffany.xox@msn.com>

General IP Information
IP:      201.219.146.104
Decimal:      3386610280
Hostname:      ppp-104-146-219-201.adsl.netline.cl
ASN:      20015
ISP:      Netline S.A.
Organization:      Netline S.A.
Services:      None detected
Type:      Broadband
Assignment:      Static IP
Blacklist:      
Geolocation Information
Continent:      South America
Country:      Chile cl flag
State/Region:      Santiago Metropolitan
City:      Santiago

[Administrator]

Hi there my gentle friend.
I'm happy that you read this letter to this day.
I have to introduce myself, I'm Kristina and I am 30 years old.
I'm not young as a schoolgirl, but my lonely heart still desires warmth and tenderness.
It seems to me, I should tell you about me a little more.
I'm blonde and my eyed are green.
Do you like it?
I have a slim and trim body, because I do sports, to keep myself in good shape.
Tell me about yourself, your life, your town and who are you trying to find?
I like to sing, go to theaters or cinema and going to the gym.
I'm very glad that you received this message, and I hope that this will find a feedback in your soul.
I will wait for your message on my email. I will look forward to it eagerly.
Have a great day. Your new gentle friend Kristina.

Spoiler

Delivered-To: xxxxxxxxx
Received: by 10.140.27.144 with SMTP id 16csp1233753qgx;
        Wed, 30 Aug 2017 10:26:12 -0700 (PDT)
X-Received: by 10.84.217.200 with SMTP id d8mr2957536plj.264.1504113972300;
        Wed, 30 Aug 2017 10:26:12 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1504113972; cv=none;
        d=google.com; s=arc-20160816;
        b=E/9quVsndr0Bl+evVUR1YdnnfrTxAvfSFY7Oqatn/MrzTFICWxuXvBlylsbYaaeKQX
         W53Zoy4+9kdqCGBXLdiXyJUG2CwPADYt7WuTUsj7RgXqWhdqrfenDlREaB2kGHoZVXCF
         CHAE6qpXJMIBkfilUgdfRpZb4x0ENL5i0Okbg9VmGngAdrdmfpJPiREVn3G5nVIdXU1v
         DDJkJzm/QjyI8pX5po0U4m3U7KJnxhJL4eotpv9ruAbL6VT7xNSMjyPHdnUEVlsStgNf
         oM1+eWWKY3WMwqqXFwcAu8FsGbFOeBNO33V9SFqHr+j/MV7XYo1XPeWcH4m9Aj/fB/w6
         CDHw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=sender:mime-version:message-id:from:date:subject:to
         :arc-authentication-results;
        bh=lEVKyZwS0bTcFMV10dXce9b/VTq36cE3ohElbpZ88NM=;
        b=sDOyIUful0/1nVCUj9ktT1IhS9kMB8HL5SMT5F2aJ3V0NP+2neJ4DyDFB/CysvPzLd
         booNT9hfGYn6wDZj/jwknAPjXj9y8Pm92FBuRhnjV7yeb/Xqjua5g7rUu/fEcKqOMHEl
         rMB+da3qaq6mn+KW2zrrpVScKhQ/YIuyEfw+vzAm9bfLovkolMWj4nbmEhnkV9tzQXUH
         WMvFN36aqGJz24UmCGMdDuigAvXDLwWEgAmvVgDdBWMgw0GBNdMRwyubGxCtm6m5ulo4
         mwVyg2ETfBSngUpPJv7tEE1jiaVUv43cmuUH8C04Gdg2ac8HL6asUmfMzLLXQZlZKPDv
         nmtQ==
ARC-Authentication-Results: i=1; mx.google.com;
       spf=pass (google.com: best guess record for domain of umetalco@fox.ip-asia.com designates 101.99.70.54 as permitted sender) smtp.mailfrom=umetalco@fox.ip-asia.com
Return-Path: <umetalco@fox.ip-asia.com>
Received: from fox.ip-asia.com (fox45.ip-asia.com. [101.99.70.54])
        by mx.google.com with ESMTPS id m65si4766246pfk.120.2017.08.30.10.26.06
        for <xxxxxxxxx>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Wed, 30 Aug 2017 10:26:12 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of umetalco@fox.ip-asia.com designates 101.99.70.54 as permitted sender) client-ip=101.99.70.54;
Authentication-Results: mx.google.com;
       spf=pass (google.com: best guess record for domain of umetalco@fox.ip-asia.com designates 101.99.70.54 as permitted sender) smtp.mailfrom=umetalco@fox.ip-asia.com
Received: from umetalco by fox.ip-asia.com with local (Exim 4.89) (envelope-from <umetalco@fox.ip-asia.com>) id 1dn6kd-003QYB-4b for xxxxxxxxx; Thu, 31 Aug 2017 01:26:03 +0800
To: xxxxxxxxx
Subject: HI h a u??!!!
X-PHP-Script: u-metal.com/sma.php for 138.201.28.210
X-PHP-Filename: /home/umetalco/public_html/sma.php REMOTE_ADDR: 138.201.28.210
Date: Thu, 31 Aug 2017 01:26:03 +0800
From: Kristina Peanut <umetalco@fox.ip-asia.com>
Message-ID: <1332babda5bba7f3b754bbf6b197fd41@u-metal.com>
X-Priority: 3
X-Mailer: PHPMailer 5.2.2 (http://code.google.com/a/apache-extras.org/p/phpmailer/)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="b1_1332babda5bba7f3b754bbf6b197fd41"
Sender: <umetalco@fox.ip-asia.com>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - fox.ip-asia.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [607 500] / [47 12]
X-AntiAbuse: Sender Address Domain - fox.ip-asia.com
X-Get-Message-Sender-Via: fox.ip-asia.com: authenticated_id: umetalco/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: fox.ip-asia.com: umetalco
X-Source:
X-Source-Args: /usr/sbin/proxyexec -q -d -s /var/lib/proxyexec/cagefs.sock/socket /bin/cagefs.server
X-Source-Dir: u-metal.com:/public_html
X-From-Rewrite: rewritten was: [kristinochka1987cuvaxyt@mail.com], actual sender is not the same system user

--b1_1332babda5bba7f3b754bbf6b197fd41
Content-Type: multipart/alternative; boundary="b2_1332babda5bba7f3b754bbf6b197fd41"

--b2_1332babda5bba7f3b754bbf6b197fd41
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

[Administrator]

Verschleiert Eingeliefert über Malaysia

Date: Thu, 31 Aug 2017 01:26:03 +0800
From: Kristina Peanut <umetalco@fox.ip-asia.com>

Details for 101.99.70.54
IP:   101.99.70.54
Decimal:   1701004854
Hostname:   101.99.70.54
ASN:   45839
ISP:   Shinjiru Technology Sdn Bhd
Organization:   Shinjiru Technology Sdn Bhd
Services:   None detected
Type:   Broadband
Assignment:   Likely Static IP
Blacklist:   
Continent:   Asia
Country:   Malaysia my flag