Dating scam Ekaterina

Dutch translation of my topic:

Dit net ontvangen op mijn email...

Ik heb een reactie verstuurd naar haar om dit eens
uit te pluizen... Dat wordt lachen... Lekker voor de gek houden die scammers...
Just recieved this email on my email.

English translation...
I have send a reaction to her,to find out more about this Ekaterina. That will be laughing...
Just fooling the scammer

-------Oorspronkelijk bericht-------

Van: Delsie Matos
Datum: 10-10-2009 19:36:04
Aan: Removed user name
Onderwerp: {Spam!} I'm happy to bring you

Hello. How are you? I will happy to get dating with you. You have a
good profile and I have decided write to you the
message, we can be good friends. I think that will be interesting if
we have contact through letters. What you think? If you wish to learn
about me more that write to me on email: [email protected]. I wish good day and
wait your answer! Ekaterina

Return-path: <[email protected]>
Received: from smtp1.tb.mail.iss.as9143.net ([212.54.42.132])
by mta2z1.tb.mail.iss.as9143.net
(Sun Java(tm) System Messaging Server 6.3-7.04 (built Sep 26 2008; 32bit))
with ESMTP id <[email protected]> for
.............. Sat, 10 Oct 2009 19:36:04 +0200 (CEST)
Received: from mx3.tb.mail.iss.as9143.net ([212.54.42.102])
by smtp1.tb.mail.iss.as9143.net with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1MwfrP-0008Dr-Gx for me..............; Sat, 10 Oct 2009 19:36:03 +0200
Received: from 200-148-48-188.dsl.telesp.net.br
([200.148.48.188] helo=mail2man.com) by mx3.tb.mail.iss.as9143.net with esmtp
(Exim 4.69) (envelope-from <[email protected]>)
id 1MwfrO-0007Dv-CU for me...........nl; Sat, 10 Oct 2009 19:36:02 +0200
Date: Sat, 10 Oct 2009 14:00:18 -0300
From: Delsie Matos < [email protected] >
Subject: {Spam!} I'm happy to bring you
To: "Removed username - Ralph @............>
Message-id: <001301ca49b6$ffca6450$03308304@clientea576c1c>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.1081
X-Mailer: Microsoft Outlook Express 6.00.2900.2962
X-Priority: 3
X-MSMail-priority: Normal
X-ZiggoMX-MailScanner-Information: Please contact the ISP for more information
X-ZiggoMX-MailScanner-ID: 1MwfrO-0007Dv-CU
X-ZiggoMX-MailScanner: Found to be clean
X-ZiggoMX-MailScanner-SpamCheck: geen spam
X-ZiggoMX-MailScanner-From: [email protected]
X-ZiggoSMTP-MailScanner-Information: Please contact the ISP for more information
X-ZiggoSMTP-MailScanner-ID: 1MwfrP-0008Dr-Gx
X-ZiggoSMTP-MailScanner: Found to be clean
X-ZiggoSMTP-MailScanner-SpamCheck: spam, SpamAssassin (cached, score=15.229,
vereist 5, autolearn=spam, BAYES_60 1.00, DATE_IN_PAST_96_XX 1.69,
DOS_OE_TO_MX 2.75, HELO_DYNAMIC_IPADDR2 4.39, HELO_DYNAMIC_SPLIT_IP 3.49,
RCVD_IN_PBL 1.80, RDNS_NONE 0.10, STOX_REPLY_TYPE 0.00)
X-ZiggoSMTP-MailScanner-SpamScore: sssssssssssssss
X-ZiggoSMTP-MailScanner-From: [email protected]
Original-recipient: rfc822;Removed@q.............
X-Spam-Status: No
X-Spam-Status: Yes
X-Antivirus: AVG for E-mail 8.5.421 [270.14.9/2427]
Content-Type: multipart/mixed; boundary="=======AVGMAIL-62C035B7======="



____________________________________________________________

Hi and welcome

I have not understood all what you were saying on top of your letter but generally, Russian romance scammers reply with prewritten emails, attaching a pic to most ones, gradually sliding down to the need of money in some form.

Your friend doesn´t use TheBat! it seems but some version of MS Outlook. header Ip says Brazil, strange, all the rest look slike a Russian romance scam.

if you are not using your real personal details, you can reply as much as you want to bait her along. If not, better leave her. He is a waste of time (and a male anyway)

Hi Acid Storm and welcome
Hallo Zuur Onweer en onthaal

Translation of Acidstorms post (not a good translation obviously)

This receives net on my e-mail…
I have sent a response to her this from
to become fluffy once… That becomes to laugh… Nicely for crazy those scammers keep

I will move this to our Romance forum where we have the other romance scammers listed, by the sound of it, you are fully aware that this is a scam, that's great news.

If you are using any of your real information, please stop communicating immediately.

There are many scambaiting communities out there that will help you to bait safely however I am unsure of what Dutch scambaiting sites are available, we do have some Dutch members who may be able to lead you in the right direction if you would like to learn more about this.

Thank you for posting about this scammer, if you have any more of the early emails, even if they are in Dutch, please include them here to help prevent others from being scammed

If you have any questions, please dont hesitate to ask


Probably a very bad translation to Dutch
Waarschijnlijk een zeer slechte vertaling aan het Nederlands

Ik zal dit naar ons Romaans forum waar wij andere Romaanse scammers hebben die, door het geluid van het wordt vermeld verplaatsen, bent u zich volledig ervan bewust dat dit een scam is, die groot nieuws is.
Als u om het even welk van uw echte informatie gebruikt, gelieve op te houden onmiddellijk communicerend.
Er zijn daar vele scambaiting gemeenschappen die u zullen helpen veilig te lokken nochtans ik van welke Nederlandse scambaiting plaatsen beschikbaar is onzeker ben, hebben wij sommige Nederlandse leden die u in de juiste richting kunnen kunnen leiden als u meer over dit zou willen leren.
Dank u voor het posten over dit scammer, als u any more van vroege e-mail hebt, zelfs als zij in het Nederlands zijn, gelieve hen hier te omvatten helpen anderen verhinderen het zijn scammed
als u om het even welke vragen hebt, gelieve niet te aarzelen te vragen

Just adding, I have done a couple of searches on this and found nothing, use of the "x mailer" however is a good indication that it is a scam

Enkel toevoegend, heb ik een paar onderzoeken op dit gedaan en gevonden niets, gebruik van „x mailer“ nochtans is een goede aanwijzing dat het een scam is

This is a second email of this person.

I don't know this person,but she says she knows my profile from datind ? I got no profile on such site...
Read the following message..

On internet i found warnings relating to her name and email adress.
But you can look at my research about her ip adress beneath...

She not ask for money yet...But enjoy the topic...

see pictures here she sended with the message

Good day! How are you doing? I am glad to receive your answer. As I
also promised, I will try to tell about myself all that to a smog in
this letter. =) also I hope you you will answer me reciprocity and you
will write to the answer the big story about yourself and your life.
To me it is very interesting to me than you are engaged? What
entertainments for you the best? You carry out what work? =) as you
know mine prenom Ekaterina. To me already 29 years and mine put a
birth on September, 9th. My nationality I Russian and I live in Russia
in a city on the river volga Saratov. It enough the big and ancient
city to be approximately 900 km from capital of Russia Moscow. We have
many sights of olden time. I live in southern part Saratov. I am
already cunning, as did not see sense to remain there, I wish to
continue dialogue with you and I do not want that you in the future
anyhow were jealous me. I wish to speak only with you. I know that you
live in Holland and is very far from me, I understand it and for me it
is not terrible. On the contrary in it there is a romanticism. =) ok.
I saw your profile on datind, and wanted gets acquainted with you. I
will continue to tell about myself. I have higher education of the
teacher. Has finished “Saratovskiy Institut obrazovaniya” And I work
on the speciality. I work with children the tutor in group of
children's education 7 years. To like me my work and on it all suits
me, because I very much love children. =) I do not have children and I
not to time was not married. So has developed my life. I would like to
tell to you a little main and very important criterion. For me
acquaintance on the Internet very new step and consequently I concern
acquaintance to you very important and seriously. I ask to tell to you
if you are not adjusted seriously and search only for some
entertainments. I search for my love, my man with which to me I would
be good also I wish to construct new relations. New serious relations.
I hope you me understand … … … tell, what women to you like? =) I hope
I have not frightened and have not pushed away you from me, but
nevertheless we adult people and me it would be desirable that at once
all became clear to you. Ok, I will finish probably my letter and it
is time to me to be engaged in the affairs. In this letter for you
there are a little I photo. I hope they to you will like also I wait
from you a compliment Ekaterina

Return-path: <[email protected]>
Received: from smtp1.tb.mail.iss.as9143.net ([212.54.42.132])
by mta1z1.tb.mail.iss.as9143.net
(Sun Java(tm) System Messaging Server 6.3-7.04 (built Sep 26 2008; 32bit))
with ESMTP id <[email protected]> for
Removed @qu...........nl; Mon, 12 Oct 2009 11:08:29 +0200 (CEST)
Received: from mx1.tb.mail.iss.as9143.net ([212.54.42.100])
by smtp1.tb.mail.iss.as9143.net with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1MxGtI-0007QF-7u for Removed @.nl; Mon, 12 Oct 2009 11:08:28 +0200
Received: from smtp103.plus.mail.re1.yahoo.com ([69.147.102.66])
by mx1.tb.mail.iss.as9143.net with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1MxGtG-00026O-Eg for Removed@quicknet.nl; Mon, 12 Oct 2009 11:08:27 +0200
Received: (qmail 36983 invoked from network); Mon, 12 Oct 2009 09:08:25 +0000
Received: from hosted-by.leaseweb.com ([email protected] with plain)
by smtp103.plus.mail.re1.yahoo.com with SMTP; Mon, 12 Oct 2009 02:08:24 -0700
Date: Mon, 12 Oct 2009 13:02:48 +0400
From: [email protected]
Subject: I will be glad....
In-reply-to: <4AD0C7A4.000003.22236@PC_VAN_KNIGHTST>
To: mdr303 <Removed@qu...............nl>
Reply-to: [email protected]
Message-id: <[email protected]>
MIME-version: 1.0
X-Mailer: The Bat! (v3.0.1.33) Professional
Content-type: multipart/mixed; boundary=----------B6149261E3717AC
X-Priority: 3 (Normal)
X-Yahoo-SMTP: Removed domain key X-YMail-OSG:
Removed domain key
X-Yahoo-Newman-Property: ymail-5
X-ZiggoMX-MailScanner-Information: Please contact the ISP for more information
X-ZiggoMX-MailScanner-ID: 1MxGtG-00026O-Eg
X-ZiggoMX-MailScanner: Found to be clean
X-ZiggoMX-MailScanner-SpamCheck: geen spam (te groot)
X-ZiggoMX-MailScanner-From: [email protected]
X-ZiggoSMTP-MailScanner-Information: Please contact the ISP for more information
X-ZiggoSMTP-MailScanner-ID: 1MxGtI-0007QF-7u
X-ZiggoSMTP-MailScanner: Found to be clean
X-ZiggoSMTP-MailScanner-SpamCheck: geen spam (te groot)
X-ZiggoSMTP-MailScanner-From: [email protected]
References: <4AD0C7A4.000003.22236@PC_VAN_KNIGHTST>
Original-recipient: rfc822;Removed@qu.................nl
X-Spam-Status: No
X-Spam-Status: No

........................................................................ IP seach on her message is:


Mijn ip adres Ip adres zoeken Online poortscan Info over ipee.nl Ip adres zoekenIP: 82.192.87.2
Hostname: hosted-by.leaseweb.com
Internet provider: leaseweb.com
IP-range provider: Niets gevonden
WHOIS: whois opzoeken
Computernaam: hosted-by
Abuse: [email protected]
Land: NETHERLANDS
Plaats: (Unknown city)
Webserver: Niet aanwezig
FTP server: Niet aanwezig
SMTP server: Niet aanwezig
Gevonden info: Niets gevonden

E-mail adres zoeken

Removed member details and domain keys, quoted email and header to make it easier to read - Ralph

Thanks for posting this Acidstorm

I have removed some of your details from the header, there is no point in letting the scammer know who you are and having your email address posted publicly is a sure way to attract more scams

In the header you may have noticed this

X-Mailer: The Bat! (v3.0.1.33) Professional

"The Bat" is a mailing program that is commonly used by scammers to help them with mass mailing, real people who are writing single emails to their friends would have no use for it, it is a sure sign that it is a scammer

Welcome to Scamwarners Acidstorm.

Your posting of this scammers information will alert and help save others being scammed.

Well Done

Onthaal aan Scamwarners Acidstorm.

Uw het posten van deze scammersinformatie zal alarmeren en zal sparen anderen die scammed zijn helpen.

Goed uitgevoerd

----------------------------------------------------------------------------------------------------------------

Note- suggest Mod link or merge this mail to;

http://www.scamwarners.com/forum/viewtopic.php?f=13&t=3874&p=14827#p14827

Where member posted site message concerning this scammer.

Thank you Enchantress, well spotted

I have merged the 2 topics and while doing so noticed the first header shows the details of the site the message was sent through and does not include the IP of the sender.

The second email has been sent using "The Bat" the bat allows the user to spoof the IP address, so again it does not show the location of the scammer.

Going by what I have seen, there are 2 very likely locations for the origin, both are in Russia

This scammer on this dating site http://www.zorpia.com/BellaVenera

Gender:Female
Age:31
Country:Russian Federation
City :kazan

Username: BellaVenera
Name: Venera

Using these stolen photographs;

I have seen the site.... Very usefull to know.. thanx... It is the person of my letters...

here another site with more scams and pictures of her
http://www.internet-love-scams.org/foru ... php?n=6318

Posted By Pictures Used By Scammers [Profile] [Gallery] Category Females, White-Scammers
Original Filesize 54.1 KB Original Dimensions 422 x 445
Date Posted 31st July 2009 07:57 PM Number Of Views 128
Title Larisa Pakeeva
Description Names Used – Larisa Pakeeva, Lara, Sveta Sokolova Al'bertovna, Svetlana Sokolova, Venera,Ekaterina

Usernames – BellaVenera, Larisa, melocotonka, melocotona_a_537 , Ekaterina
Email Addresses Used – [email protected], [email protected], [email protected] [email protected]

IP Address – 217.148.186.103

Instant Messenger Chat ID's:
Yahoo -
MSN -

Website Found on – meetic.es, okcupid.com

Original Photos From –

Miscellaneous Information: – Fake Russian passport No.: 62Nº5592859

Phone Numbers – 79094272957

Addresses – Moskowskaya Obl.,Himkinskiy raion, Airport “Sheremetyevo”, 141425

Accomplices/Other Characters –
Scammers Email Address Not Available
Other Email Addresses used by this scammer Not Available
Dating Sites Used by this scammer Not Available http://www.zorpia.com/BellaVenera/type/profile
IP Addresses Not Available
Yahoo MSN etc Not Available
Photos From Not Available
Phone Numbers Not Available
Addresses Used Not Available
Accomplices and Other Characters Not Available