Willkommen auf antiscam.de

 Wir haben dieses Forum eröffnet, um bestimmte Formen von Internetbetrug öffentlich zu machen und mögliche Opfer zu warnen.

 Es ist eines unserer Hobbys, Betrüger im Internet aufzufinden, ihnen den Betrug nachzuweisen und sie mit uns zu beschäftigen.

 Unsere Erkenntnisse möchten wir hier veröffentlichen, vielleicht erspart das dem ein oder anderen Geld und eine bittere Lehre.

Wenn dieses Dein erster Besuch des Forums ist, dann mußt Du dich registrieren und anmelden, um Beiträge schreiben zu können und um alle Mitgliederbereiche sehen zu können.

Um den Einstieg zu erleichtern, wäre ein Besuch der Forenhilfe von Vorteil!

Hilfe

Auch solltest Du dich mit den Forenregeln vertraut machen, um Dir und auch uns Unannehmlichkeiten zu ersparen!

Forenregeln



Benutzer, die gerade dieses Thema anschauen: 1 Gast/Gäste
Antwort schreiben 
Angel Lo / Cathy Conning <Jffhs15@drug.onmicrosoft.com> <angel_lo5@aol.com>
26.03.2016, 12:31
Beitrag: #1
Offline
Angel Lo / Cathy Conning <Jffhs15@drug.onmicrosoft.com> <angel_lo5@aol.com>
Von: Mrs <Jffhs15@drug.onmicrosoft.com>
Antwort an: angel_lo5@aol.com
An: Mrs <Jffhs15@drug.onmicrosoft.com>
Datum: 21. März 2016 um 10:42
Betreff: Regards
Gesendet von: drug.onmicrosoft.com
Signiert von: drug.onmicrosoft.com

Zitat:Warum ist diese Nachricht im Spamordner? Es wurde festgestellt, dass viele der Nachrichten aus der Domain drug.onmicrosoft.com Spam sind.

I am Ms. Angel Lo, I work with Cathy Conning Asset Management (CCAM) Hong Kong, there is a transaction in your name at my office which required my attention to contact you. Please i would appreciate your urgent respond immediately to serve you with more details.

Best Regards

Ms. Angel Lo

Spoiler :
Delivered-To: xxx.xxx@xxx.xxx
Received: by 10.76.27.3 with SMTP id p3csp1178404oag;
Mon, 21 Mar 2016 02:46:56 -0700 (PDT)
X-Received: by 10.66.147.103 with SMTP id tj7mr44082383pab.72.1458553616786;
Mon, 21 Mar 2016 02:46:56 -0700 (PDT)
Return-Path: <Jffhs15@drug.onmicrosoft.com>
Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-hk2apc01on0111.outbound.protection.outlook.com. [104.47.124.111])
by mx.google.com with ESMTPS id o63si11424649pfi.141.2016.03.21.02.46.54
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Mon, 21 Mar 2016 02:46:56 -0700 (PDT)
Received-SPF: pass (google.com: domain of Jffhs15@drug.onmicrosoft.com designates 104.47.124.111 as permitted sender) client-ip=104.47.124.111;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of Jffhs15@drug.onmicrosoft.com designates 104.47.124.111 as permitted sender) smtp.mailfrom=Jffhs15@drug.onmicrosoft.com;
dkim=pass header.i=@Drug.onmicrosoft.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Drug.onmicrosoft.com;
s=selector1-Drug-onmicrosoft-com;
h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=SoKuk/2fopblDa4q/lG1+VOPCuAl6XHzg9jfxmgcaLc=;
b=U692QDJsZYB0Vap6F/XZSMEF/cHOWzYRoToQJ9/8K3/OQ/l7KXVW5IWLA6mVJWFrS+R18Kt8GXNrUG8WthbocjkKxEzgJULqh6p9nK4LMBpu8JOId8ewaYquz4ImaAD2+3bhuODvPvAHEjN9oYm1iV86SRHUcdrFb7qxO6suRCY=
Authentication-Results: newscl01ah.mathworks.com; dkim=none (message not
signed) header.d=none;newscl01ah.mathworks.com; dmarc=none action=none
header.from=Drug.onmicrosoft.com;
Received: from dellPC (2406:5600:27:d02e:6055:b15f:cce0:b600) by
SG2PR0201MB0919.apcprd02.prod.outlook.com (10.162.202.14) with Microsoft SMTP
Server (TLS) id 15.1.434.16; Mon, 21 Mar 2016 09:42:08 +0000
Reply-To: <angel_lo5@aol.com>
From: Mrs <Jffhs15@Drug.onmicrosoft.com>
To: Mrs <Jffhs15@Drug.onmicrosoft.com>
Subject: Regards
Date: Mon, 21 Mar 2016 15:12:07 +0530
Message-ID: <000a01d18356$96f6d540$c4e47fc0$@onmicrosoft.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_000B_01D18384.B0AF1140"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdGDVeYSKXglS1HvRrWCbNDDjlw0WA==
Content-Language: en-in
X-Originating-IP: [2406:5600:27:d02e:6055:b15f:cce0:b600]
X-ClientProxiedBy: DB3PR05CA0009.eurprd05.prod.outlook.com (25.163.44.19) To
SG2PR0201MB0919.apcprd02.prod.outlook.com (25.162.202.14)
Return-Path: Jffhs15@Drug.onmicrosoft.com
X-MS-Office365-Filtering-Correlation-Id: cd6d2397-20da-4c0a-4a40-08d3516dba50
X-Microsoft-Exchange-Diagnostics: 1;SG2PR0201MB0919;2:dnscqWGaODIRVcVImVOYEyWCb6JE/hj+ytlMgO2p14+bdQGRkyNJ9xbntIvcvh3+au+yI5T6Mp2N+D9IWg4kT57rWRujaWuDFqNEWS9v0Jg6C/VlgI+Wsd3XyJGRwFCyBoHBrxv55on+9TS5FOK0OnUR7/5c0m1AMngGau4pOd5431/FILdq1TI1Wgo+juYq;3:a/rsIM7Zwo0L5HcIT3YKayG6mBnWEBPqPVEH1AwwkTGKpI+iIJpSeqAh+7a6Hegk1BKlhdwWaejf0tmQWB8OitLysF2cvOR0u+hXR2R0cUaDyMnX2xGg4qCEH5RlYJ/D
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SG2PR0201MB0919;
X-Microsoft-Exchange-Diagnostics: 1;SG2PR0201MB0919;25:YUtFLc27ZHVUez0KZmhP/QD/fQsIcb/JBcNPhv8RgrwRFdh8JTS/yhnqfhon9ouXWsPIGGuPwhe/4X1X/GjVl4VKutM/kjbE+YfpvCzifI6S5lr8nJDFZRn+d+C+Gexfq0gzOYSkOJzONHjhvUiFo1g7k21Vt8Mpf4sVucPS+FPXGaOiBgMQVdfLfjo8wYhiYdMaNzqGctLseIKRSF6ZRmUpZlZa1KaK2YaN3bcnE4gkF8lx8Z7ReGJ1VtBC​YShmp5J6cCtymb0DlbQJBA3RJ/YNhnrqty6tpofKxoaYBUpEEb94VYfyhRjOKZ05m78h0iEkaSurLttSPxF7beTe8AH/ou4fKCNfPEDQSCW87///IHVaZE7HU6eeao7JAgTIMA3vmblNQU3p3UeIisWPv44kJOpMKSb6cmKk0g5KmzggM9tNX5RpmFqb7gSIeiNLVbrAv+1jaWSq+S+Ve5QMYaAZt5YPvgNd9c1Jxbcr7ZI1jk/Vzn0zxwxXCwCiSTxNUZOiLWvvuXKYScNNLnPQrlCvxSaMeY1va79jGotD80khCDE54NYnGOJj9fEkgy7P2ZYgUhscZEn7Kw3zyQOIS68Hmlpf2bVaedgmlOVz896vdXWCrf2JWU79hlM9QSVw3NC72UuYl695DeZ​q4GnvTAFhk6xSvKfScTHxPpDKMIQ3dbfPZCdh5tLPUdwbSXV+xTKK7rL2cBZOG0f8J/dpUQ==
X-Microsoft-Antispam-PRVS: <SG2PR0201MB09196A2C6FE6D3510BDC3F8C9F8F0@SG2PR0201MB0919.apcprd02.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(6040046)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6041046)(6043046);SRVR:SG2PR0201MB0919;BCL:0;PCL:0;RULEID:;SRVR:SG2PR02​01MB0919;
X-Microsoft-Exchange-Diagnostics: 1;SG2PR0201MB0919;4:762s2pSIxKsanOMJenAE/8Inkg8lzIKGo15PlltGzS9cxmg3qP9A0iiG/t00shNuryWGoxo2c4vQ66zXVXJj6s1jIhctgqA60W2sj/FjZNxCPjm6pcqaFF+/kP4SSTAM9AGs+xXHV2lNdpw935g2MUP9ipujJPM6lsAeQ7z5ru87d3Tf9NtxIATO4EYvlEw3uCdJD/QG4KWVH3n6ZL1qdAZq3aAMYPUfQ+7Xq7xeaJ5fM2q6q9mGBq5ulC/IitNPDMZfklH6C0xtSWMlR/Jh8BY9JuVeh5nKx53tmqvvzQYOVlWkEn0BStWKHRf6N6oBsrWrq7bbfU0/YSaWUxhsy3mRlNAf3iAjZ4vzix2OwCOjapx6yCyRh6kHRjkwCdAQJeXfmPHmsItorsogSPqgFaj2OvlpUkF5tmXbMqWoSvg=
X-Forefront-PRVS: 0888B1D284
X-Forefront-Antispam-Report: SFV:NSPM;SFS:(10019020)(4630300001)(6009001)(19580395003)(5005140100001)(4001450100002)(81166005)(42186005)(77096005)(6200100001)(5004730100002)(221733001)(5380​6999)(2906002)(86442001)(19300405004)(71636004)(229853001)(86902001)(43066003)(15975445007)(86632001)(89136004)(64872006)(270700001)(61296003)(86362001)(2607000​01)(84116002)(84326002)(36756003)(96836002)(18717965001)(19625215002)(33646002)(189998001)(110136002)(107886002)(4300700001)(3480700003)(551934003)(500874010000​1)(50986999)(50226001)(586003)(790700001)(14726001)(102836003)(6116002)(5000100001)(512954002)(1096002)(46816001)(16236675004)(1420700001)(2860700001)(7059030)(​3826002);DIR:OUT;SFP:1102;SCL:1;SRVR:SG2PR0201MB0919;H:dellPC;FPR:;SPF:None;MLV:ovr;PTR:InfoNoRecords;LANG:en;
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;SG2PR0201MB0919;23:jIx0fwsXk0z+hM1v6+gbl50rJm5LFi1U35VW0h1?=
=?us-ascii?Q?J8+ihoqMg06vyl0rDOVaosGBe8wKyE3yYxl+/IEfpfpD2wsEtFYuSqtr4H10?=
=?us-ascii?Q?UU5gMyEq43IAGEOYpDzV18GjdG79rB8YQmqbXIRVqC1zhvfATyKQJnEcZvph?=
=?us-ascii?Q?BIa81HoJpxYztYAknEvzFjNATlr6TPPYJ0xh84tvUqyzkRa9UcXQ776fTL3G?=
=?us-ascii?Q?cR1nzyWSm1ltIrszU+wZ18OdtRas8xIZUQboh3LOjwWxpT8KTPeyJ0orUMfR?=
=?us-ascii?Q?2JMG/ofq0bakWXzHiPe/l0dm8BL3PLgGbCXKqXQi20nsohX6b0OySYiWe4/r?=
=?us-ascii?Q?LQEViMXTh6ehb8HGzifJt22sOKe+dLYe/vIwQEUQucawFNhASaHhaYQiBq/O?=
=?us-ascii?Q?d/j+yGHZmBsu9yH73LLn34cJe66CzRKzF4SmHDVWkRGpwAMIkF8Ik/z2wiVs?=
=?us-ascii?Q?IlSKNu4zvNKZv6iz4NhKj3Uhs5omSlW0enloIiqvotykJF5DaboXYbyCs/Uh?=
=?us-ascii?Q?6al2Ap4YOzV3tqvDoRJWlnOW2WT1WbVxAzxTcaB6cGRAhtbl+s+3MfLcKtwS?=
=?us-ascii?Q?c3Tsk2oP5gvGWVajjMC2rIBQAkg7SMehNvhLOqAFdyHb8OcxSBuTHTUgA5S7?=
=?us-ascii?Q?4pazU1BWKDjS+qEcNheWRxenuaWH0dpZzdaq/LQBltJCkBbxBW9o7b1CCtxu?=
=?us-ascii?Q?M4x+J0UNbfHaGJ81Qsbr4IqyBTyoH+gdRy5xTkwY7gd6bzlu+jI/x9gsEQpj?=
=?us-ascii?Q?8LsKLrBbk8AVy9JwIT0fItbv+P4EzGayVI1sjOxW7qf+MUbBiNG01clvjdbR?=
=?us-ascii?Q?+HzSJM7jU9W/J8bNKWRRPgJElUMgaa61vEOrV2sWPk0ZjRylNnIhl5ghHzPl?=
=?us-ascii?Q?ZMA3BlaVhIh6WDKXF7Tl4WtCkxIvLdNhyh9ZysghpyduHRJZ0OOH0pF7gORq?=
=?us-ascii?Q?PxR/5Umw91dyEjMSY3qGd+OwmBoVnqEoOl7OvwkWiBJ+M3h7rArj8x0Am4Mz?=
=?us-ascii?Q?lBGQxCHeosS1RgxSliWWe2ogBgvbhlvAMlHmqYVzc9Ga8ARhYWIHyFMEvjEn?=
=?us-ascii?Q?S42RrxqTKbcwW2kj3zBM1d+p7EGjDGdnBGAjJaskgxz6dIobfi9EMn+qkNMo?=
=?us-ascii?Q?G8w8kabOvsxft+I6J1/Rf1ONxolAa0q+LWAIja4EeYxVz80A/xUhLvASslzR?=
=?us-ascii?Q?bF0ca7HjKZOc+9frDbeRK0mgG2oh62VBnDSUfHeWOdL5QJJ2or3jIcMwxfRf?=
=?us-ascii?Q?OLKC52Nnza6nvlxnHZ1FizAJU8xwjR0U88adg1g6UJYSGyldyKagnZUjjSF0?=
=?us-ascii?Q?MRTMoDoNKLgYfNnyngXwm96YfK6HROwRHxX7AJ0K910f2ukHB3xakrRtziVg?=
=?us-ascii?Q?2tv2BG/rOioEaaBnESeCCxkzGqU3v9knvP/fFhz8abOhcvAPc44d8AQLoWzQ?=
=?us-ascii?Q?3LfiVUZozL6m2u8+1C/jMUHg6y8fKU4YiZsgJCA1CigeK9sSb2hbpNqb/qRJ?=
=?us-ascii?Q?SuVJqPdU4X/Y9hg=3D=3D?=
X-Microsoft-Exchange-Diagnostics: 1;SG2PR0201MB0919;5:Gp8L+FdRpTzSFUR5Bi4zi0bWJYiIVSbQL9qRqTdSAPPHllP5EqahyocjdfxMJEki9BY6JVfJcRiSPkycIW05nnuOzpAcAfYq+91BNugaaKxFijyPmMJoXg1ebCbwkU3+SyJcL9RRMvpS​+jXyYJ1miA==;24:POT3JWe6pkkOkLZIndl0UExLWmARUg8ewXaCIYWsubCGLKN0WldQtEn1uF2al0qWDSRhP8e04RAUo5/3WlJlYqCAChJ3oPCFpUFiFLKOY5g=
SpamDiagnosticOutput: 1:23
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: Drug.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Mar 2016 09:42:08.4784
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR0201MB0919

------=_NextPart_000_000B_01D18384.B0AF1140
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Code:
General IP Information
IP:    104.47.124.111
Decimal:    1747942511
Hostname:    mail-hk2apc01on0111.outbound.protection.outlook.com
ASN:    8075
ISP:    Microsoft Corporation
Organization:    Microsoft Azure
Services:    Likely mail server
Type:    Corporate
Assignment:    Static IP
Blacklist:    
Geolocation Information
Continent:    North America
Country:    United States us flag
State/Region:    Washington
City:    Redmond

Zitat:X-Originating-IP: [2406:5600:27:d02e:6055:b15f:cce0:b600]
Zitat:X-Mailer: Microsoft Office Outlook 12.0
Zitat:Return-Path: Jffhs15@Drug.onmicrosoft.com
Reply-To: <angel_lo5@aol.com>
From: Mrs <Jffhs15@Drug.onmicrosoft.com>
To: Mrs <Jffhs15@Drug.onmicrosoft.com>
Zitat:Received: from dellPC (2406:5600:27:d02e:6055:b15f:cce0:b600) by SG2PR0201MB0919.apcprd02.prod.outlook.com (10.162.202.14) with Microsoft SMTP Server (TLS) id 15.1.434.16; Mon, 21 Mar 2016 09:42:08 +0000
Zitat:Authentication-Results: newscl01ah.mathworks.com; dkim=none (message not signed) header.d=none;newscl01ah.mathworks.com; dmarc=none action=none header.from=Drug.onmicrosoft.com;
Zitat:Authentication-Results: mx.google.com; spf=pass (google.com: domain of Jffhs15@drug.onmicrosoft.com designates 104.47.124.111 as permitted sender) smtp.mailfrom=Jffhs15@drug.onmicrosoft.com;
dkim=pass header.i=@Drug.onmicrosoft.com
Alle Beiträge dieses Benutzers finden
Diese Nachricht in einer Antwort zitieren to top
26.03.2016, 12:33
Beitrag: #2
Offline
RE: Angel Lo / Cathy Conning <Jffhs15@drug.onmicrosoft.com> <angel_lo5@aol.com>
Exclamation Verschleierte Einlieferung über Microsoft Server mit Outlook Mailer
Alle Beiträge dieses Benutzers finden
Diese Nachricht in einer Antwort zitieren to top
26.03.2016, 23:45
Beitrag: #3
Offline
RE: Angel Lo / Cathy Conning <Jffhs15@drug.onmicrosoft.com> <angel_lo5@aol.com>
B_y_eB_y_e
Alle Beiträge dieses Benutzers finden
Diese Nachricht in einer Antwort zitieren to top
Antwort schreiben 


Gehe zu: