Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Natalya <fonovan@yandex.com> (Gelesen: 1119 mal)
 
trucker105
Themenstarter Themenstarter
General Counsel
***
Offline


I Love Anti-Scam!

Beiträge: 11203
Standort: Aachen
Mitglied seit: 22. August 2011
Geschlecht: männlich
Natalya <fonovan@yandex.com>
12. November 2017 um 10:07
 
I am very glad} that I managed to finding you, and so I decided to learn more you. I want make acquaintance a wonderful and attentive Greetings. this Natalya. (Gives me great pleasure

Spoiler:
Received: from HE1EUR02HT093.eop-EUR02.prod.protection.outlook.com
(2603:10a6:208:1::49) by AM4PR02MB3171.eurprd02.prod.outlook.com with HTTPS
via AM0PR0202CA0036.EURPRD02.PROD.OUTLOOK.COM; Fri, 10 Nov 2017 03:27:57
+0000
Received: from HE1EUR02FT029.eop-EUR02.prod.protection.outlook.com
(10.152.10.56) by HE1EUR02HT093.eop-EUR02.prod.protection.outlook.com
(10.152.11.61) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.197.9; Fri, 10
Nov 2017 03:27:57 +0000
Authentication-Results: spf=pass (sender IP is 203.140.81.50)
smtp.mailfrom=iris.eonet.ne.jp; hotmail.de; dkim=pass (signature was
verified) Quelltext.d=iris.eonet.ne.jp;hotmail.de; dmarc=pass action=none
Quelltext.from=iris.eonet.ne.jp;
Received-SPF: Pass (protection.outlook.com: domain of iris.eonet.ne.jp
designates 203.140.81.50 as permitted sender)
receiver=protection.outlook.com; client-ip=203.140.81.50; helo=
mta02.eonet.ne.jp;
Received: from COL004-MC1F46.hotmail.com (10.152.10.51) by
HE1EUR02FT029.mail.protection.outlook.com (10.152.10.147) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.20.197.9 via Frontend Transport; Fri, 10 Nov 2017 03:27:56 +0000
X-IncomingTopHeaderMarker: D5426;SizeAsReceived:1580;Count:19
Received: from mta02.eonet.ne.jp ([203.140.81.50]) by COL004-MC1F46.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
      Thu, 9 Nov 2017 19:27:54 -0800
Received: from mailmbsb1kc4.mozu.eo.k-opti.ad.jp (mbs07.eonet.ne.jp [60.56.6.205])
     by mailauthmsa11.mozu.eo.k-opti.ad.jp  with ESMTP id vAA3RoBV007427;
     Fri, 10 Nov 2017 12:27:50 +0900
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iris.eonet.ne.jp;
     s=k02; t=1510284471;
     bh=1XIi9btQZNPK2I9fMu2yUba/RaH6FBk892ex0Nl6xfM=;
     h=Date:From:Reply-To:To:In-Reply-To:Subject;
     b=DGcHgDeDYppbwJ+rz6OBex+iRs6VNIR+mbNMZvmCjRXqCXe/mRSRgYbkx73zM0u0u
      lc2WODhgJO7DxweBMUjUZoaeh0JVxsIwg5noG2DnDfd/0B14udivGSFUg0SPFDT3Yp
      toGx0rwpWq0OBUFeb9rSR5dQAIhtg8/7qSlwU2e8=
Date: Fri, 10 Nov 2017 12:27:50 +0900 (JST)
From: Natalochka Natka <masayampv@iris.eonet.ne.jp>
Reply-To: Natalochka Natka <fonovan@yandex.com>
To:
Message-ID: <1195971488.15380616.1510284470694.JavaMail.root@iris.eonet.ne.jp>
In-Reply-To: <774485574.15380203.1510284450293.JavaMail.root@iris.eonet.ne.jp>
Subject: Hi my new friend,
Content-Type: multipart/mixed;
     boundary="----=_Part_15380613_478618257.1510284470693"
X-Originating-IP: [::ffff:75.9.84.255]
X-Mailer: Zimbra Mailer (ZimbraWebClient - FF56 (Win)/0.0)
X-Authenticated-User: masayampv@iris.eonet.ne.jp
Thread-Topic: Hi my new friend,
Thread-Index: fwY1GtsNkGjgwSI4UfpIXrABbHtViA==
Return-Path: masayampv@iris.eonet.ne.jp
X-OriginalArrivalTime: 10 Nov 2017 03:27:54.0698 (UTC) FILETIME=[E57C5AA0:01D359D3]
X-IncomingHeaderCount: 19
X-MS-Exchange-Organization-Network-Message-Id: 13750b91-8ded-496d-ccf4-08d527eb0981
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: 203.140.81.50
CMM-sending-ip: 203.140.81.50
CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is
203.140.81.50; identity alignment result is pass and alignment mode is
relaxed) smtp.mailfrom=masayampv@iris.eonet.ne.jp; dkim=pass (identity
alignment result is pass and alignment mode is relaxed)
Quelltext.d=iris.eonet.ne.jp; x-hmca=pass Quelltext.id=masayampv@iris.eonet.ne.jp
CMM-X-SID-PRA: masayampv@iris.eonet.ne.jp
CMM-X-AUTH-Result: PASS
CMM-X-SID-Result: PASS
CMM-X-Message-Status: n:n
CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MjtHRD0yO1NDTD00
CMM-X-Message-Info: ufSQhE8hD9ue3SB0
X-MS-Exchange-Organization-PCL: 2
X-MS-UserLastLogonTime: 11/10/2017 2:53:03 AM
X-Microsoft-Exchange-Diagnostics: Oc2gsg3mLzhn0Fm03M1Ko7KGzJsMzhiVnPu6QhOvjSJ+aTR+J6xB16rDvkrbSi2qSt
X-MS-Exchange-Organization-AuthSource: HE1EUR02FT029.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 13750b91-8ded-496d-ccf4-08d527eb0981
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(23075)(22001)(8291501071);SRVR:HE1EUR02HT093;
X-Microsoft-Exchange-Diagnostics: CGtjAUDfjeOzyMgBx0g1u8K4u5fHELrqpT78sc6GhImBM=
X-MS-TrafficTypeDiagnostic: HE1EUR02HT093:
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: );SRVR:HE1EUR02HT093;
X-Microsoft-Exchange-Diagnostics: +ZFw=
X-Forefront-Antispam-Report: mail.com;FPR:;SPF:None;LANG:;
X-MS-Exchange-Organization-SCL: 5
X-Microsoft-Exchange-Diagnostics: sZBqOkrvQUvSqKdOQSC9U/Fs9wIT+6ZYVmb9Mdv9FZBY3deZxVt+U95Xs7MWC
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: Default
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Nov 2017 03:27:56.3841
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 13750b91-8ded-496d-ccf4-08d527eb0981
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR02HT093
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.2648630
X-MS-Exchange-Processed-By-BccFoldering: 15.20.0218.008
X-Microsoft-Exchange-Diagnostics:


Auf dem Bild sieht man Julia Konovalova.

Die hat bei uns eine eigene Rubrik: Scammer using Pictures by Julia Konovalova

Smiley
« Zuletzt geändert: 12. November 2017 um 11:12 von Stiray » 
Grund: Betreffzeile korrigiert 

PIC_571.jpg ( 9 KB | Downloads )
PIC_571.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Stiray
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65753
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Natalya <fonovan@yandex.com>
Antwort #1 - 12. November 2017 um 11:17
 
Verschleierte Einlieferung

Code
Alles auswählen
IP:	60.56.6.205
Decimal:	1010304717
Hostname:	mbs07.eonet.ne.jp
ASN:	17511
ISP:	K-Opticom Corporation
Organization:	K-Opticom Corporation
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Continent:	Asia
Country:	Japan 



Zitat:
from mailmbsb1kc4.mozu.eo.k-opti.ad.jp (mbs07.eonet.ne.jp [60.56.6.205]) [...] with ESMTP; Fri, 10 Nov 2017 12:27:50 +0900
Date: Fri, 10 Nov 2017 12:27:50 +0900 (JST)
From: Natalochka Natka <xxx@iris.eonet.ne.jp>
Reply-To: Natalochka Natka <fonovan@yandex.com>


Zitat:
X-Mailer: Zimbra Mailer (ZimbraWebClient - FF56 (Win)/0.0)


Zitat:
X-Originating-IP: [::ffff:75.9.84.255]


Code
Alles auswählen
IP:	75.9.84.255
Decimal:	1258902783
Hostname:	75-9-84-255.lightspeed.milwwi.sbcglobal.net
ASN:	7018
ISP:	AT&T U-verse
Organization:	AT&T U-verse
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Continent:	North America
Country:	United States
State/Region:	Wisconsin
City:	Milwaukee 

  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema