<umetalco@fox.ip-asia.com>
SpoilerFrom "Ekaterina" Fri Apr 1 20:35:38 2016
X-Apparently-To: wxxxxxxxxxxxxcom; Fri, 01 Apr 2016 13:48:11 +0000
Return-Path: <tiffany.xox@msn.com>
X-YahooFilteredBulk: 201.219.146.104
Received-SPF: softfail (transitioning domain of msn.com does not designate 201.219.146.104 as permitted sender)
X-YMailISG: spVnqwcWLDuJ68DXvJDpUVau.eTrJlA1JihJvwawEYEMTGlX
mxrUEzFJTKIRoWAaurEMU9HLPz0dxwmUN8mEkw49AknpDCm8oQB1TfZn1Lj8
tu15EP1c312Bmoh.UlXoJYnCYY_DhmGfMhv7XnH6N8.hPY58j0eIGiX7bh7F
SaUZpdPAcD3ydYbWlD0AqofECT6G7qyqdG3NwHyEoTCDwmzMaO9P3ay4T573
GoQMpNGRQ8ngFRLSTO8yKs7MrbsfHd30QrH7TCumiSdDpoN3YteqDr8q01aV
tARi8Dl8yUnY2EPqruGYvCbhYVgB0SMxuDTVKZpVhdNuGfwtwgElgsumJY0J
V3Uacb4BaDXIxibt1tmu36zNc2J1M5z8JZK4oY9TIiDzch6f74EpLB_NrstG
90CJpeiTn43Z4TiyXVArKwfFiu9ChCTfgohu_qfzC6hx7Kt1g2ZGJ10vLaPE
aa.KluXD8PPOVNMqp1lKXHA833wqzpCEVTYXTIoB6_nxtHLKLUYxiBjUlrf2
sDMAPLOtUg4qR4DCDD.upDStos3uiqV7swhpcgxMstS57PRHFbmtyRpwcUcw
cnADYYgT1kSKZAuNsNfT4bpVbsiN2G217Asp29dVkkrbH_hIrGERlA0nnEnZ
zUWToc2H.mTdSHD2gI7ijZRwkfHCoKeCwCMXjZkWoaMFI5zeFCvIPA1uiQNL
759VFIob7pxD6pD3pDDUSgYXouY971pIF9ZBF6srvLBCGWIOUHowJWkOwtYL
LDBRJLJGPOz6Ix8EXzcqm.jGPZSxVia3ORZfhKROriB.lMgX9Dpsy9ioQseh
hMJX7dsCn_uNryfm082zba9_fKRN8n9sPkVP5qmgDnf38AMvnMuv6Moo8Xze
zGg6eDR.1ELAYRbpC5W4RoRYJ0LLe01M_JIkg4fYpFsWO3Li2rA3fF6Y48zB
Ps.0ytjzJSPy_OihDplqLtWIup50eHY2p6pB9wiCgUYHMk0IQH9qJbt3rC90
boMFGEbMZYDLGpCx.NylAoqZ4KlvOAYLHXc9ICSol8A6TnGrK3XhToKe1xoi
6fwWfxxFYQcCHJq5_pSWcMvtincfmsC12tnN50ZBA39OWcrBb2isTPXpFokl
gES9A66oFogf8ZwFjhxfkC_sa3M1lUmu2D28ID8ksmlGRV7JYr_pkE5ppczp
bZVMMAbtLMjc2.xEspaKC6CUQJKPphEsrlTVxNvMjRUI66I7zr12uszFvTXh
ekNXdxCbDzVcDgiTFOVgKwnIB2mXAea2ALxOFI02RUo1cpknNf.ChZw4MLwB
eIfCoWBMQ86R.qJPIACE5Hskc9_XcH57ff5hNBzRHQHcQeOM9NA_r39nqJwQ
E5p5e49A8KsFoY6.xldRAjIosmY6Wfmjusd.9BptoQAKpyT4iRtsdD1lXUd6
zaLXtzwIIl3ZFlLeCGh69TiSnA8eapCPL.nYYXUJ6zixO7.78AlmY5EdwugY
LI.6vp4-
X-Originating-IP: [201.219.146.104]
Authentication-Results: mta1037.mail.ne1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO msn.com) (201.219.146.104)
by mta1037.mail.ne1.yahoo.com with SMTP; Fri, 01 Apr 2016 13:48:11 +0000
Message-ID: <75992156.4E335151@msn.com>
Date: Sat, 02 Apr 2016 06:35:38 +1000
Reply-To: "Ekaterina" <tiffany.xox@msn.com>
From: "Ekaterina" <tiffany.xox@msn.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.4) Gecko/20070604 Thunderbird/2.0.0.4
MIME-Version: 1.0
Subject: Greetings my new friend!
Content-Type: multipart/mixed;
boundary="------------685838342352074663100024"
Content-Length: 38777From "Ekaterina" Fri Apr 1 20:35:38 2016
X-Apparently-To: Fri, 01 Apr 2016 13:48:11 +0000
Return-Path: <tiffany.xox@msn.com>
X-YahooFilteredBulk: 201.219.146.104
Received-SPF: softfail (transitioning domain of msn.com does not designate 201.219.146.104 as permitted sender)
X-YMailISG: spVnqwcWLDuJ68DXvJDpUVau.eTrJlA1JihJvwawEYEMTGlX
mxrUEzFJTKIRoWAaurEMU9HLPz0dxwmUN8mEkw49AknpDCm8oQB1TfZn1Lj8
tu15EP1c312Bmoh.UlXoJYnCYY_DhmGfMhv7XnH6N8.hPY58j0eIGiX7bh7F
SaUZpdPAcD3ydYbWlD0AqofECT6G7qyqdG3NwHyEoTCDwmzMaO9P3ay4T573
GoQMpNGRQ8ngFRLSTO8yKs7MrbsfHd30QrH7TCumiSdDpoN3YteqDr8q01aV
tARi8Dl8yUnY2EPqruGYvCbhYVgB0SMxuDTVKZpVhdNuGfwtwgElgsumJY0J
V3Uacb4BaDXIxibt1tmu36zNc2J1M5z8JZK4oY9TIiDzch6f74EpLB_NrstG
90CJpeiTn43Z4TiyXVArKwfFiu9ChCTfgohu_qfzC6hx7Kt1g2ZGJ10vLaPE
aa.KluXD8PPOVNMqp1lKXHA833wqzpCEVTYXTIoB6_nxtHLKLUYxiBjUlrf2
sDMAPLOtUg4qR4DCDD.upDStos3uiqV7swhpcgxMstS57PRHFbmtyRpwcUcw
cnADYYgT1kSKZAuNsNfT4bpVbsiN2G217Asp29dVkkrbH_hIrGERlA0nnEnZ
zUWToc2H.mTdSHD2gI7ijZRwkfHCoKeCwCMXjZkWoaMFI5zeFCvIPA1uiQNL
759VFIob7pxD6pD3pDDUSgYXouY971pIF9ZBF6srvLBCGWIOUHowJWkOwtYL
LDBRJLJGPOz6Ix8EXzcqm.jGPZSxVia3ORZfhKROriB.lMgX9Dpsy9ioQseh
hMJX7dsCn_uNryfm082zba9_fKRN8n9sPkVP5qmgDnf38AMvnMuv6Moo8Xze
zGg6eDR.1ELAYRbpC5W4RoRYJ0LLe01M_JIkg4fYpFsWO3Li2rA3fF6Y48zB
Ps.0ytjzJSPy_OihDplqLtWIup50eHY2p6pB9wiCgUYHMk0IQH9qJbt3rC90
boMFGEbMZYDLGpCx.NylAoqZ4KlvOAYLHXc9ICSol8A6TnGrK3XhToKe1xoi
6fwWfxxFYQcCHJq5_pSWcMvtincfmsC12tnN50ZBA39OWcrBb2isTPXpFokl
gES9A66oFogf8ZwFjhxfkC_sa3M1lUmu2D28ID8ksmlGRV7JYr_pkE5ppczp
bZVMMAbtLMjc2.xEspaKC6CUQJKPphEsrlTVxNvMjRUI66I7zr12uszFvTXh
ekNXdxCbDzVcDgiTFOVgKwnIB2mXAea2ALxOFI02RUo1cpknNf.ChZw4MLwB
eIfCoWBMQ86R.qJPIACE5Hskc9_XcH57ff5hNBzRHQHcQeOM9NA_r39nqJwQ
E5p5e49A8KsFoY6.xldRAjIosmY6Wfmjusd.9BptoQAKpyT4iRtsdD1lXUd6
zaLXtzwIIl3ZFlLeCGh69TiSnA8eapCPL.nYYXUJ6zixO7.78AlmY5EdwugY
LI.6vp4-
X-Originating-IP: [201.219.146.104]
Authentication-Results: mta1037.mail.ne1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO msn.com) (201.219.146.104)
by mta1037.mail.ne1.yahoo.com with SMTP; Fri, 01 Apr 2016 13:48:11 +0000
Message-ID: <75992156.4E335151@msn.com>
Date: Sat, 02 Apr 2016 06:35:38 +1000
Reply-To: "Ekaterina" <tiffany.xox@msn.com>
From: "Ekaterina" <tiffany.xox@msn.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.4) Gecko/20070604 Thunderbird/2.0.0.4
MIME-Version: 1.0
To:
<wxxxxxxxxxxxxx.com>
Subject: Greetings my new friend!
Content-Type: multipart/mixed;
boundary="------------685838342352074663100024"
Content-Length: 38777
Ekaterina <tiffany.xox@msn.com> schrieb am 15:48 Freitag, 1.April 2016:
Hello! My name is Ekaterina. I am twenty eight years old. I am blonde and I
have green eyes. I am from Russian Federation. I love skiing some walks. I
would like to find a attractive and good men. I am supporting, cute and
concerned about others woman. Dont be shy write to me a line. Take care!
Ekaterina
vekorlutis@gmail.com
(http://dating-fraud.net/galerie/albums/userpics/thumb_01_tiffany_xox.jpg) (http://dating-fraud.net/galerie/displayimage.php?pid=67394)
Hi there my gentle friend.
I'm happy that you read this letter to this day.
I have to introduce myself, I'm Kristina and I am 30 years old.
I'm not young as a schoolgirl, but my lonely heart still desires warmth and tenderness.
It seems to me, I should tell you about me a little more.
I'm blonde and my eyed are green.
Do you like it?
I have a slim and trim body, because I do sports, to keep myself in good shape.
Tell me about yourself, your life, your town and who are you trying to find?
I like to sing, go to theaters or cinema and going to the gym.
I'm very glad that you received this message, and I hope that this will find a feedback in your soul.
I will wait for your message on my email. I will look forward to it eagerly.
Have a great day. Your new gentle friend Kristina.
SpoilerDelivered-To: xxxxxxxxx
Received: by 10.140.27.144 with SMTP id 16csp1233753qgx;
Wed, 30 Aug 2017 10:26:12 -0700 (PDT)
X-Received: by 10.84.217.200 with SMTP id d8mr2957536plj.264.1504113972300;
Wed, 30 Aug 2017 10:26:12 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1504113972; cv=none;
d=google.com; s=arc-20160816;
b=E/9quVsndr0Bl+evVUR1YdnnfrTxAvfSFY7Oqatn/MrzTFICWxuXvBlylsbYaaeKQX
W53Zoy4+9kdqCGBXLdiXyJUG2CwPADYt7WuTUsj7RgXqWhdqrfenDlREaB2kGHoZVXCF
CHAE6qpXJMIBkfilUgdfRpZb4x0ENL5i0Okbg9VmGngAdrdmfpJPiREVn3G5nVIdXU1v
DDJkJzm/QjyI8pX5po0U4m3U7KJnxhJL4eotpv9ruAbL6VT7xNSMjyPHdnUEVlsStgNf
oM1+eWWKY3WMwqqXFwcAu8FsGbFOeBNO33V9SFqHr+j/MV7XYo1XPeWcH4m9Aj/fB/w6
CDHw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=sender:mime-version:message-id:from:date:subject:to
:arc-authentication-results;
bh=lEVKyZwS0bTcFMV10dXce9b/VTq36cE3ohElbpZ88NM=;
b=sDOyIUful0/1nVCUj9ktT1IhS9kMB8HL5SMT5F2aJ3V0NP+2neJ4DyDFB/CysvPzLd
booNT9hfGYn6wDZj/jwknAPjXj9y8Pm92FBuRhnjV7yeb/Xqjua5g7rUu/fEcKqOMHEl
rMB+da3qaq6mn+KW2zrrpVScKhQ/YIuyEfw+vzAm9bfLovkolMWj4nbmEhnkV9tzQXUH
WMvFN36aqGJz24UmCGMdDuigAvXDLwWEgAmvVgDdBWMgw0GBNdMRwyubGxCtm6m5ulo4
mwVyg2ETfBSngUpPJv7tEE1jiaVUv43cmuUH8C04Gdg2ac8HL6asUmfMzLLXQZlZKPDv
nmtQ==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: best guess record for domain of umetalco@fox.ip-asia.com designates 101.99.70.54 as permitted sender) smtp.mailfrom=umetalco@fox.ip-asia.com
Return-Path: <umetalco@fox.ip-asia.com>
Received: from fox.ip-asia.com (fox45.ip-asia.com. [101.99.70.54])
by mx.google.com with ESMTPS id m65si4766246pfk.120.2017.08.30.10.26.06
for <xxxxxxxxx>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 30 Aug 2017 10:26:12 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of umetalco@fox.ip-asia.com designates 101.99.70.54 as permitted sender) client-ip=101.99.70.54;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of umetalco@fox.ip-asia.com designates 101.99.70.54 as permitted sender) smtp.mailfrom=umetalco@fox.ip-asia.com
Received: from umetalco by fox.ip-asia.com with local (Exim 4.89) (envelope-from <umetalco@fox.ip-asia.com>) id 1dn6kd-003QYB-4b for xxxxxxxxx; Thu, 31 Aug 2017 01:26:03 +0800
To: xxxxxxxxx
Subject: HI h a u??!!!
X-PHP-Script: u-metal.com/sma.php for 138.201.28.210
X-PHP-Filename: /home/umetalco/public_html/sma.php REMOTE_ADDR: 138.201.28.210
Date: Thu, 31 Aug 2017 01:26:03 +0800
From: Kristina Peanut <umetalco@fox.ip-asia.com>
Message-ID: <1332babda5bba7f3b754bbf6b197fd41@u-metal.com>
X-Priority: 3
X-Mailer: PHPMailer 5.2.2 (http://code.google.com/a/apache-extras.org/p/phpmailer/)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="b1_1332babda5bba7f3b754bbf6b197fd41"
Sender: <umetalco@fox.ip-asia.com>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - fox.ip-asia.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [607 500] / [47 12]
X-AntiAbuse: Sender Address Domain - fox.ip-asia.com
X-Get-Message-Sender-Via: fox.ip-asia.com: authenticated_id: umetalco/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: fox.ip-asia.com: umetalco
X-Source:
X-Source-Args: /usr/sbin/proxyexec -q -d -s /var/lib/proxyexec/cagefs.sock/socket /bin/cagefs.server
X-Source-Dir: u-metal.com:/public_html
X-From-Rewrite: rewritten was: [kristinochka1987cuvaxyt@mail.com], actual sender is not the same system user
--b1_1332babda5bba7f3b754bbf6b197fd41
Content-Type: multipart/alternative; boundary="b2_1332babda5bba7f3b754bbf6b197fd41"
--b2_1332babda5bba7f3b754bbf6b197fd41
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
(http://dating-fraud.net/galerie/albums/userpics/thumb_01_tiffany_xox.jpg) (http://dating-fraud.net/galerie/displayimage.php?pid=67394&fullsize=1)