Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 [2]  Thema versenden
Heisses Thema (Mehr als 10 Antworten) Tatiana <tanickaar@outlook.com> (Gelesen: 4309 mal)
 
Hades1981
Themenstarter Themenstarter
Scam Warners
*****
Offline


I Love Anti-Scam

Beiträge: 4
Mitglied seit: 16. Juni 2017
Geschlecht: männlich
Re: Tatiana <tanickaar@outlook.com>
Antwort #15 - 17. Juni 2017 um 16:00
 
Der Mailheader ist immer der selbe weil er über das webinterface verschickt 

Spoiler:
Return-Path: <tanickaar@outlook.com>
X-Original-To: xxxx@xxxx.net
Delivered-To: xxxx@xxxx.net
Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-oln040092071014.outbound.protection.outlook.com [40.92.71.14])
     by lh-xxxx.de (Postfix) with ESMTPS id 2E90C101B45
     for <xxxx@xxxx.net>; Fri, 16 Jun 2017 19:52:33 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=RR4OkFs57XvA8QmAWUYCMcbkqjdPRMzzrTKod3D4vsA=;
XhixDfy0xSuC/9fSMmFPbLKg==
Received: from VE1EUR03FT056.eop-EUR03.prod.protection.outlook.com
(10.152.18.60) by VE1EUR03HT075.eop-EUR03.prod.protection.outlook.com
(10.152.19.61) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1157.12; Fri, 16
Jun 2017 17:52:31 +0000
Received: from AM5P194MB0051.EURP194.PROD.OUTLOOK.COM (10.152.18.60) by
VE1EUR03FT056.mail.protection.outlook.com (10.152.19.28) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.1.1157.12 via Frontend Transport; Fri, 16 Jun 2017 17:52:31 +0000
Received: from AM5P194MB0051.EURP194.PROD.OUTLOOK.COM
([fe80::49a:2394:493e:1ffb]) by AM5P194MB0051.EURP194.PROD.OUTLOOK.COM
([fe80::49a:2394:493e:1ffb%17]) with mapi id 15.01.1178.013; Fri, 16 Jun 2017
17:52:31 +0000
From: ". Tanicka" <tanickaar@outlook.com>
To: Marc xxxx <xxxx@xxxx.net>
Subject: Deine liebste Tatiana
Thread-Topic: Deine liebste Tatiana
Thread-Index: AQHS5slT8vHxw8RtgUqAc8MfNS+7Pg==
Date: Fri, 16 Jun 2017 17:52:31 +0000
Message-ID: <AM5P194MB0051DCFB91D7797299CA0200B4C10@AM5P194MB0051.EURP194.PROD.OUTLOOK.COM>
Reply-To: ". Tanicka" <tanickaar@outlook.com>
Accept-Language: ru-RU, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
authentication-results: xxxx.net; dkim=none (message not signed)
Quelltext.d=none;xxxx.net; dmarc=none action=none Quelltext.from=outlook.com;
x-incomingtopheadermarker: DC3AF;SizeAsReceived:7105;Count:44
x-ms-exchange-messagesentrepresentingtype: 1
x-tmn: [8xvKXmaU+V0gWoObBQSJyPMvMq3cjGe5]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: TEz3oBjA==
x-incomingheadercount: 44
x-eopattributedmessage: 0
x-forefront-antispam-report: 75;H:AM5P194MB0051.EURP194.PROD.OUTLOOK.COM;FPR:;SPF:None;LANG:de;
x-ms-traffictypediagnostic: VE1EUR03HT075:
x-ms-office365-filtering-correlation-id: a3648584-1058-4151-0e78-08d4b4e07563
x-microsoft-antispam: 01125374)(1701031045);SRVR:VE1EUR03HT075;
x-exchange-antispam-report-cfa-test: );SRVR:VE1EUR03HT075;
x-forefront-prvs: 0340850FCD
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/mixed;
     boundary="_002_AM5P194MB0051DCFB91D7797299CA0200B4C10AM5P194MB0051EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jun 2017 17:52:31.5401
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR03HT075

Return-Path: <tanickaar@outlook.com>
X-Original-To: xxxx@xxxx.net
Delivered-To: xxxx@xxxx.net
Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-oln040092071014.outbound.protection.outlook.com [40.92.71.14])
     by lh-xxxx.de (Postfix) with ESMTPS id 2E90C101B45
     for <xxxx@xxxx.net>; Fri, 16 Jun 2017 19:52:33 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=RR4OkFs57XvA8QmAWUYCMcbkqjdPRMzzrTKod3D4vsA=;
XhixDfy0xSuC/9fSMmFPbLKg==
Received: from VE1EUR03FT056.eop-EUR03.prod.protection.outlook.com
(10.152.18.60) by VE1EUR03HT075.eop-EUR03.prod.protection.outlook.com
(10.152.19.61) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1157.12; Fri, 16
Jun 2017 17:52:31 +0000
Received: from AM5P194MB0051.EURP194.PROD.OUTLOOK.COM (10.152.18.60) by
VE1EUR03FT056.mail.protection.outlook.com (10.152.19.28) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.1.1157.12 via Frontend Transport; Fri, 16 Jun 2017 17:52:31 +0000
Received: from AM5P194MB0051.EURP194.PROD.OUTLOOK.COM
([fe80::49a:2394:493e:1ffb]) by AM5P194MB0051.EURP194.PROD.OUTLOOK.COM
([fe80::49a:2394:493e:1ffb%17]) with mapi id 15.01.1178.013; Fri, 16 Jun 2017
17:52:31 +0000
From: ". Tanicka" <tanickaar@outlook.com>
To: xxxx xxxx <xxxx@xxxx.net>
Subject: Deine liebste Tatiana
Thread-Topic: Deine liebste Tatiana
Thread-Index: AQHS5slT8vHxw8RtgUqAc8MfNS+7Pg==
Date: Fri, 16 Jun 2017 17:52:31 +0000
Message-ID: <AM5P194MB0051DCFB91D7797299CA0200B4C10@AM5P194MB0051.EURP194.PROD.OUTLOOK.COM>
Reply-To: ". Tanicka" <tanickaar@outlook.com>
Accept-Language: ru-RU, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
authentication-results: xxxx.net; dkim=none (message not signed)
Quelltext.d=none;xxxx.net; dxxxx=none action=none Quelltext.from=outlook.com;
x-incomingtopheadermarker: DC3AF;SizeAsReceived:7105;Count:44
x-ms-exchange-messagesentrepresentingtype: 1
x-tmn: [8xvKXmaU+V0gWoObBQSJyPMvMq3cjGe5]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: TEz3oBjA==
x-incomingheadercount: 44
x-eopattributedmessage: 0
x-forefront-antispam-report: 75;H:AM5P194MB0051.EURP194.PROD.OUTLOOK.COM;FPR:;SPF:None;LANG:de;
x-ms-traffictypediagnostic: VE1EUR03HT075:
x-ms-office365-filtering-correlation-id: a3648584-1058-4151-0e78-08d4b4e07563
x-microsoft-antispam: 01125374)(1701031045);SRVR:VE1EUR03HT075;
x-exchange-antispam-report-cfa-test: );SRVR:VE1EUR03HT075;
x-forefront-prvs: 0340850FCD
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/mixed;
     boundary="_002_AM5P194MB0051DCFB91D7797299CA0200B4C10AM5P194MB0051EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jun 2017 17:52:31.5401
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR03HT075

  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Uli
General Counsel
***
Offline



Beiträge: 30520
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Tatiana <tanickaar@outlook.com>
Antwort #16 - 22. Juni 2017 um 03:20
 
Zum gefälschten Pass 19 07 528903 von Tatyana Evgenevna Orinina:

Volgograd hat eine Besonderheit. Da gibt es drei verschiedene Bereiche mit unterschiedlichen Pass- und Stempelnummern
Волгоградская
Вологодская облаете
Воронежская область
Und da hat der Fälscher weder die Pass- noch die Stempelnummer richtig getroffen. Sie passen noch nicht einmal zueinander!
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1 [2] 
Thema versenden
Link zu diesem Thema