Template wählen: 
Sprache wählen:
Google

World Wide Web anti-scam


 ‹ Vorheriges Thema | Nächstes Thema ›
Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Elma <elmawong@outlook.at> (Gelesen: 1012 mal)
 
x5dr
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4943
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Elma <elmawong@outlook.at>
29. Juli 2019 um 17:11
 
Hat mich wg. einer Anzeige in einer Regionalzeitung kontaktiert.

I am interested in your offer, contact me so we can proceed.

Spoiler:
Received: from AM5EUR03HT046.eop-EUR03.prod.protection.outlook.com

(2603:10a6:802:15::43) by VI1PR0401MB2432.eurprd04.prod.outlook.com with

HTTPS via VI1PR08CA0234.EURPRD08.PROD.OUTLOOK.COM; Fri, 26 Jul 2019 00:25:32

+0000

Received: from AM5EUR03FT046.eop-EUR03.prod.protection.outlook.com

(10.152.16.56) by AM5EUR03HT046.eop-EUR03.prod.protection.outlook.com

(10.152.17.162) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2052.18; Fri, 26 Jul

2019 00:25:31 +0000

Authentication-Results: spf=softfail (sender IP is 213.33.101.131)

smtp.mailfrom=outlook.at; hotmail.com; dkim=none (message not signed)

Quelltext.d=none;hotmail.com; dmarc=fail action=none Quelltext.from=outlook.at;

Received-SPF: SoftFail (protection.outlook.com: domain of transitioning

outlook.at discourages use of 213.33.101.131 as permitted sender)

Received: from mxgw1.regionalmedien.at (213.33.101.131) by

AM5EUR03FT046.mail.protection.outlook.com (10.152.16.164) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id

15.20.2052.18 via Frontend Transport; Fri, 26 Jul 2019 00:25:31 +0000

X-IncomingTopHeaderMarker: 6F9EF;SizeAsReceived:1069;Count:21

X-ASG-Debug-ID: 1564100730-0856343b0643eea0001-f8qvoR

Received: from (Link der Regionalzeitung; Anm. des TO) ([151.106.64.187]) by mxgw1.regionalmedien.at with ESMTP id rbksCNM3qApwc4DS for <xxx>; Fri, 26 Jul 2019 02:25:30 +0200 (CEST)

X-Barracuda-Envelope-From: elmawong@outlook.at

X-Barracuda-Effective-Source-IP: UNKNOWN[151.106.64.187]

X-Barracuda-Apparent-Source-IP: 151.106.64.187

X-ASG-Whitelist: Client

Message-ID: <d4c9479ca476470d65569561b6238d09@(Link der Regionalzeitung; Anm des TO)>

Date: Fri, 26 Jul 2019 02:25:30 +0200

Subject: Neue Nachricht von kleinanzeigen.meinbezirk.at

From: <elmawong@outlook.at>

X-ASG-Orig-Subj: Neue Nachricht von kleinanzeigen.meinbezirk.at

To: <xxx>

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Barracuda-Connect: UNKNOWN[151.106.64.187]

X-Barracuda-Start-Time: 1564100730

X-Barracuda-URL: https://smtp.regionalmedien.at:443/cgi-mod/mark.cgi

X-Virus-Scanned: by bsmtpd at regionalmedien.at

X-Barracuda-Scan-Msg-Size: 1072

X-Barracuda-BRTS-Status: 1

X-IncomingHeaderCount: 21

Return-Path: elmawong@outlook.at

X-MS-Exchange-Organization-ExpirationStartTime: 26 Jul 2019 00:25:31.7948

(UTC)

X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit

X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000

X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit

X-MS-Exchange-Organization-Network-Message-Id: abe25819-906d-4824-16a2-08d7115fc4d3

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-Exchange-Organization-MessageDirectionality: Incoming

X-Forefront-Antispam-Report: EFV:NLI;

X-MS-Exchange-Organization-AuthSource:

AM5EUR03FT046.eop-EUR03.prod.protection.outlook.com

X-MS-Exchange-Organization-AuthAs: Anonymous

X-MS-PublicTrafficType: Email

X-MS-UserLastLogonTime: 7/26/2019 12:22:17 AM

X-MS-Office365-Filtering-Correlation-Id: abe25819-906d-4824-16a2-08d7115fc4d3

X-Microsoft-Antispam:

2);SRVR:AM5EUR03HT046;

X-MS-TrafficTypeDiagnostic: AM5EUR03HT046:

X-MS-Exchange-PUrlCount: 2

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 213.33.101.131

X-SID-PRA: ELMAWONG@OUTLOOK.AT

X-SID-Result: FAIL

X-MS-Exchange-Organization-PCL: 2

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Jul 2019 00:25:31.7427

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: abe25819-906d-4824-16a2-08d7115fc4d3

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT046

X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.5957193

X-MS-Exchange-Processed-By-BccFoldering: 15.20.2094.013

X-Microsoft-Antispam-Mailbox-Delivery:

     unkEmail;

X-Message-Info:

     mkUoSDWjqQ1Evk+REE1Eo+YsgJI45EdS9diuqgzOJzaCBocbbLwa2Q==

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0xO1NDTD02

X-Microsoft-Antispam-Message-Info:

     Bx1ML+SL3dTa8e2Xf0ffJSZiUwfYhQGS6E8DWkcIHYEd7ZBprHDqXuwL7VQ=

MIME-Version: 1.0


Über Deutschland!

Code
Alles auswählen
IP:	151.106.64.187
Decimal:	2540323003
Hostname:	151.106.64.187
ASN:	61157
ISP:	PlusServer GmbH
Organization:	PlusServer GmbH
Services:	None detected
Type:	Broadband
Assignment:	Likely Static IP
Continent:	Europe
Country:	Germany


Zitat:
Received: from (Link der Regionalzeitung; Anm. des TO) ([151.106.64.187]) by mxgw1.regionalmedien.at with ESMTP
Fri, 26 Jul 2019 02:25:30 +0200 (CEST)
X-Barracuda-Effective-Source-IP: UNKNOWN[151.106.64.187]

Date: Fri, 26 Jul 2019 02:25:30 +0200
From: <elmawong@outlook.at>
« Zuletzt geändert: 29. Juli 2019 um 17:25 von x5dr »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
x5dr
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4943
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Elma <elmawong@outlook.at>
Antwort #1 - 29. Juli 2019 um 17:19
 
Dann hat er oder sie sich geoutet!

Hello

Thanks for your mail, I  contacted you primarily in confidence hoping that you can be a trustworthy person and would also be helpful in this urgent  matter like this. My name is Dr Elma Wong,  I am from Yemen but a British born doctor working with British Red Cross Crescent in partnership with the Yemen Red cross Crescent to provide Medical and humanitarian aid to the needy.https://www.youtube.com/watch?v=LFih0g-Bh6I

I have in my possession 12.2 million dollars which i inherited from Late Dr Mohammed Abdul-Mughni from Yemen. Dr Mohammed gave me this money in his home  for  the LOVE and CARE i showed  him on his last hours of his life before he died in my arms after battling to survive from cholera. You can read more about him . https://www.reuters.com/article/us-yemen-security-cholera/killed-by-cholera-yeme... .

Dr Mohammed gave me this money to used it to secure the future of his children in Europe and also save of the children of Yemen who is suffering of cholera . I have donated 5.2 million USD from the 12.2 million USD to the Yemen children through Red Cross Crescent society to help the people of Yemen and 7 million USD, i want to keep safe in Europe to secure the future of my late friend according to his wish .

I cannot continue to hide this money in Yemen  because things are getting worst everyday  .I have tried to transfer this money through borders to the  neighboring countries but i cannot because of heavy military presence and i cannot transfer this fund through bank because banks are controlled by government forces which makes it impossible too because of the sanction impose in the country by United Nations.

I wish to use this money for charity and to secure the future of the children of my good friend in Europe with a good partner that will help to receive and invest this money on my behalf to help me and the people of Yemen . I can transfer this money to you in Europe through the help of Red cross jet that flies to Germany every week to collect medical materials . if you will accept to be my beneficiary and partner to receive this money and for this reason i contacted you for help. You will see this money yourself because i believe in seeing is Believing  . I do not have bad intention to hurt you and this is 100% risk free .

Please if you are interested in this transaction i will give you the complete details you need for us to carry out this transaction successfully . I decided to find someone that is real and not imaginary that is why i went to a secured European site where i can be sure that the person is real. I believe i can trust you . where i am now we can only communicate through the Red Cross communication facilities which only permit me to sending E mails and Be rest assured that our deal is safe.

I wait for your fast response so we can go on. In less than 5 days the money should have been noted on your care then i will give you further details upon hearing from you . You will take 20% of the money for your help and you hide 80% of the sum in safe place till i come, I hope i am been fair on this deal.

Best Regards,
Dr Elma Wong.

Dieses mal über Microsoft Inline eingeliefert!

Spoiler:
Received: from CY1NAM02HT125.eop-nam02.prod.protection.outlook.com

(2603:10a6:800:aa::15) by VI1PR0401MB2432.eurprd04.prod.outlook.com with

HTTPS via VI1PR0802CA0005.EURPRD08.PROD.OUTLOOK.COM; Sun, 28 Jul 2019

21:49:03 +0000

ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;

Eq4BHxem7xwGgTdL9n97nmLQ==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

heck;

bh=6MjdmrZIr/kpXerxukOZ5p7SAOa387p1oclWygg+I98=;

APrbk6jp6TLtmSsg4PRJYNdg==

ARC-Authentication-Results: i=2; mx.microsoft.com 1;spf=pass (sender ip is

40.92.69.34) smtp.rcpttodomain=hotmail.com

smtp.mailfrom=outlook.at;dmarc=pass (p=none sp=none pct=100) action=none

Quelltext.from=outlook.at;dkim=none (message not signed);arc=pass (0 oda=0

ltdi=1)

Received: from CY1NAM02FT016.eop-nam02.prod.protection.outlook.com

(10.152.74.58) by CY1NAM02HT125.eop-nam02.prod.protection.outlook.com

(10.152.74.98) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2115.10; Sun, 28 Jul

2019 21:49:01 +0000

Authentication-Results: spf=pass (sender IP is 40.92.69.34)

smtp.mailfrom=outlook.at; hotmail.com; dkim=none (message not signed)

Quelltext.d=none;hotmail.com; dmarc=pass action=none Quelltext.from=outlook.at;

Received-SPF: Pass (protection.outlook.com: domain of outlook.at designates

40.92.69.34 as permitted sender) receiver=protection.outlook.com;

client-ip=40.92.69.34; helo=EUR02-VE1-obe.outbound.protection.outlook.com;

Received: from EUR02-VE1-obe.outbound.protection.outlook.com (40.92.69.34) by

CY1NAM02FT016.mail.protection.outlook.com (10.152.75.164) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id

15.20.2115.10 via Frontend Transport; Sun, 28 Jul 2019 21:49:00 +0000

X-IncomingTopHeaderMarker:

F3AF4;SizeAsReceived:5149;Count:39

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

gRa4FWoqTyRHmFtAsmkxIshw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

heck;

bh=6MjdmrZIr/kpXerxukOZ5p7SAOa387p1oclWygg+I98=;

qu5OP4Y8oYpDNs/PoM+czZZQ==

ARC-Authentication-Results: i=1; mx.microsoft.com

1;spf=none;dmarc=none;dkim=none;arc=none

Received: from AM5EUR02FT048.eop-EUR02.prod.protection.outlook.com

(10.152.8.51) by AM5EUR02HT211.eop-EUR02.prod.protection.outlook.com

(10.152.9.75) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2115.10; Sun, 28 Jul

2019 21:48:58 +0000

Received: from VI1PR08MB4512.eurprd08.prod.outlook.com (10.152.8.52) by

AM5EUR02FT048.mail.protection.outlook.com (10.152.9.215) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.2115.10 via Frontend Transport; Sun, 28 Jul 2019 21:48:57 +0000

Received: from VI1PR08MB4512.eurprd08.prod.outlook.com

([fe80::51b1:94a9:c2ef:4e0b]) by VI1PR08MB4512.eurprd08.prod.outlook.com

([fe80::51b1:94a9:c2ef:4e0b%4]) with mapi id 15.20.2115.005; Sun, 28 Jul 2019

21:48:58 +0000

From: Elma Wong <elmawong@outlook.at>

To: xxx <xxx>

Subject: Re: Neue Nachricht von kleinanzeigen.meinbezirk.at

Thread-Topic: Neue Nachricht von kleinanzeigen.meinbezirk.at

Thread-Index: AQHVQ0ii6D33ip3aS0m0/JCqFKz+uabc4PWpgAO097U=

Date: Sun, 28 Jul 2019 21:48:57 +0000

Message-ID:

 

References:

<d4c9479ca476470d65569561b6238d09@([b]Link der Regionalzeitung; Anm. des TO[/b]ok.com>

In-Reply-To:

com>

Accept-Language: en-US, de-AT

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-incomingtopheadermarker:

7FBDC;SizeAsReceived:6787;Count:42

x-tmn: [zCD9Fu9RVCVP4l7G2009sh3CWTI1wHAO]

x-ms-publictraffictype: Email

x-incomingheadercount: 42

x-eopattributedmessage: 1

x-ms-exchange-slblob-mailprops:

 

X-Microsoft-Antispam-Untrusted:

02HT211;

X-MS-TrafficTypeDiagnostic: AM5EUR02HT211:|CY1NAM02HT125:

X-MS-Exchange-PUrlCount: 3

X-Microsoft-Antispam-Message-Info-Original:

pQWtNsvpGzA5bxddMcsKPJFQFkoPCkWQ

Content-Type: multipart/alternative;

     boundary="_000_VI1PR08MB45126284A2A2318E1103A132BCC20VI1PR08MB4512eurp_"

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR02HT211

X-IncomingHeaderCount: 39

Return-Path: elmawong@outlook.at

X-MS-Exchange-Organization-ExpirationStartTime: 28 Jul 2019 21:49:00.9275

(UTC)

X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit

X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000

X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit

X-MS-Exchange-Organization-Network-Message-Id:

5700a37c-a13a-47f0-b610-08d713a566ab

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-Exchange-Organization-MessageDirectionality: Incoming

X-MS-Exchange-Transport-CrossTenantHeadersStripped:

CY1NAM02FT016.eop-nam02.prod.protection.outlook.com

X-MS-Exchange-Transport-CrossTenantHeadersPromoted:

CY1NAM02FT016.eop-nam02.prod.protection.outlook.com

X-Forefront-Antispam-Report: EFV:NLI;

X-MS-Exchange-Organization-AuthSource:

CY1NAM02FT016.eop-nam02.prod.protection.outlook.com

X-MS-Exchange-Organization-AuthAs: Anonymous

X-MS-UserLastLogonTime: 7/28/2019 7:45:52 PM

X-MS-Office365-Filtering-Correlation-Id: 5700a37c-a13a-47f0-b610-08d713a566ab

X-Microsoft-Antispam:

8291501072);SRVR:CY1NAM02HT125;

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 40.92.69.34

X-SID-PRA: ELMAWONG@OUTLOOK.AT

X-SID-Result: PASS

X-MS-Exchange-Organization-PCL: 2

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Jul 2019 21:49:00.6192

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 5700a37c-a13a-47f0-b610-08d713a566ab

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1NAM02HT125

X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.5086142

X-MS-Exchange-Processed-By-BccFoldering: 15.20.2115.005

X-Microsoft-Antispam-Mailbox-Delivery:

     0090)(6225004)(4950130)(4990090)(9110004);

X-Message-Info:

     kxQgY1At9wJJ8e3vNf3BoZ1fto8RCMlkCA4CkAWjtl8ymHtW8KAzQQ==

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0tMQ==

X-Microsoft-Antispam-Message-Info:

     

MIME-Version: 1.0


Zitat:
Date: Sun, 28 Jul 2019 21:48:57 +0000
From: Elma Wong <elmawong@outlook.at>


Ich denke, hier liegt ein größerer Betrugsfall vor und ich stelle mal die frage an @ all, ob wir hier die Behörden und das Rote Kreuz darüber informieren sollen. Werde versuchen, noch weitere Infos zu bekommen unentschlossen
« Zuletzt geändert: 29. Juli 2019 um 18:05 von x5dr »  
Zum Seitenanfang
 
IP gespeichert
 
x5dr
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4943
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Elma <elmawong@outlook.at>
Antwort #2 - 30. Juli 2019 um 17:06
 
Antwort von Elma. Fragte nach einer Passkopie. Leider Fehlanzeige. Stattdessen verlangt er oder sie eine Passkopie von mir. Ärgerlich

Hello xxx ,
​
Thanks for your mail  , I want to assure you that this deal is 100% risk free. First, I will be doing myself a great favor to explain in simple terms how this transfer is going to be and be sure i will send you my passport . I cannot send you such a money hiding therefore i need the below information for us to proceed . 

We have a red cross jet that will be in Frankfurt Germany to pick medical Materials , I will need  the below information from you  to register  the money  as red cross humanitarian cargo in your name  and  send to the Red cross Agent in Germany who will pick up the cargo from the red cross jet that will land in Frankfurt and deliver the cargo to your address  .  ​
​
I want you to know that Red cross Agents run a service which is called DIPLOMATIC  SERVICE; this service is meant for transferring hard documents, huge funds and precious stones. They call it consignment. This consignment will be registered under their services and will be carried with their Immunity to any country and deliver it to the beneficiary .​
​
I will write to the British Red Cross Agent in  Germany and inform him about you and the cargo delivery which i will send you the contact of the  Agent for you to speak to him about the delivery , all is done then you take 20% of the funds to yourself and transfer it to wherever you want and the balance of 80% will be keep for me .​
​
I do not know you but we can only speak of trust and once i come and have my own share from you then we can really become very good friends . if you are ready for this deal, you are required by this letter to furnish me with the information below.​
​
1. Your Full name​
2. Your country of origin and Contact address in your country​
3. Your direct telephone number.​
4. Your Occupation.​
5. Your Passport for your identification .

​
I will contact you immediately i conclude arrangement with the Agent and get back to you urgently .
​
I wait for your reply for us to proceed​
​
Best Regards,​
Dr. Elma Wong .

Spoiler für Microsoft Inline:
Received: from VE1EUR02HT107.eop-EUR02.prod.protection.outlook.com

(2603:10a6:800:d2::28) by VI1PR0401MB2432.eurprd04.prod.outlook.com with

HTTPS via VI1PR08CA0198.EURPRD08.PROD.OUTLOOK.COM; Mon, 29 Jul 2019 17:19:03

+0000

Received: from VE1EUR02FT023.eop-EUR02.prod.protection.outlook.com

(10.152.12.56) by VE1EUR02HT107.eop-EUR02.prod.protection.outlook.com

(10.152.13.22) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2115.10; Mon, 29 Jul

2019 17:19:01 +0000

Authentication-Results: spf=pass (sender IP is 40.92.70.87)

smtp.mailfrom=outlook.at; hotmail.com; dkim=none (message not signed)

Quelltext.d=none;hotmail.com; dmarc=pass action=none Quelltext.from=outlook.at;

Received-SPF: Pass (protection.outlook.com: domain of outlook.at designates

40.92.70.87 as permitted sender) receiver=protection.outlook.com;

client-ip=40.92.70.87; helo=EUR03-AM5-obe.outbound.protection.outlook.com;

Received: from EUR03-AM5-obe.outbound.protection.outlook.com (40.92.70.87) by

VE1EUR02FT023.mail.protection.outlook.com (10.152.12.132) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id

15.20.2115.10 via Frontend Transport; Mon, 29 Jul 2019 17:19:01 +0000

X-IncomingTopHeaderMarker:

77FF9;SizeAsReceived:4342;Count:36

Received: from AM5EUR03FT034.eop-EUR03.prod.protection.outlook.com

(10.152.16.60) by AM5EUR03HT234.eop-EUR03.prod.protection.outlook.com

(10.152.16.204) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2052.18; Mon, 29 Jul

2019 17:19:00 +0000

Received: from VI1PR08MB4512.eurprd08.prod.outlook.com (10.152.16.56) by

AM5EUR03FT034.mail.protection.outlook.com (10.152.16.81) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id

15.20.2052.18 via Frontend Transport; Mon, 29 Jul 2019 17:19:00 +0000

Received: from VI1PR08MB4512.eurprd08.prod.outlook.com

([fe80::51b1:94a9:c2ef:4e0b]) by VI1PR08MB4512.eurprd08.prod.outlook.com

([fe80::51b1:94a9:c2ef:4e0b%4]) with mapi id 15.20.2115.005; Mon, 29 Jul 2019

17:19:00 +0000

From: Elma Wong <elmawong@outlook.at>

To:xxx

Subject: Re: Neue Nachricht von xxx

Thread-Topic: Neue Nachricht von xxx

Thread-Index: AQHVQ0ii6D33ip3aS0m0/JCqFKz+uabc4PWpgAO097WAAS+nK4AAFYiT

Date: Mon, 29 Jul 2019 17:19:00 +0000

Message-ID: 

References: <d4c9479ca476470d65569561b6238d09@www.xxx>,<VI1PR0401MB243256634E4EB439CB317B86E4C00@VI1PR0401MB2432.eurprd04.prod...;

In-Reply-To: com>

Accept-Language: en-US, de-AT

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-incomingtopheadermarker: AC8AB;SizeAsReceived:6966;Count:42

x-tmn: [rNhH1orx681JsQRl8p5Jpt5rjo6cD+dB]

x-ms-publictraffictype: Email

x-incomingheadercount: 42

x-eopattributedmessage: 1

x-ms-exchange-slblob-mailprops: bLBpPg5QIw5fPgkZCjQ3bcXm95ryvB17PsSWX8KXJqZebDRNjk0V7bgHWLI=

X-Microsoft-Antispam-Untrusted:

1323274)(2017031324274)(1601125500)(1603101475)(1701031045);SRVR:AM5EUR03HT234;

X-MS-TrafficTypeDiagnostic: AM5EUR03HT234:|VE1EUR02HT107:

X-MS-Exchange-PUrlCount: 3

X-Microsoft-Antispam-Message-Info-Original:

JaQZDEVE90FYZJxtY6/triX1WK7j5IO+

Content-Type: multipart/alternative;

     boundary="_000_VI1PR08MB4512B05267D2BBE3F3D774A0BCDD0VI1PR08MB4512eurp_"

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT234

X-IncomingHeaderCount: 36

Return-Path: elmawong@outlook.at

X-MS-Exchange-Organization-ExpirationStartTime: 29 Jul 2019 17:19:01.6472

(UTC)

X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit

X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000

X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit

X-MS-Exchange-Organization-Network-Message-Id:

f0613009-b362-424f-7365-08d71448d98f

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-Exchange-Organization-MessageDirectionality: Incoming

X-MS-Exchange-Transport-CrossTenantHeadersStripped:

VE1EUR02FT023.eop-EUR02.prod.protection.outlook.com

X-MS-Exchange-Transport-CrossTenantHeadersPromoted:

VE1EUR02FT023.eop-EUR02.prod.protection.outlook.com

X-Forefront-Antispam-Report: EFV:NLI;

X-MS-Exchange-Organization-AuthSource:

VE1EUR02FT023.eop-EUR02.prod.protection.outlook.com

X-MS-Exchange-Organization-AuthAs: Anonymous

X-MS-UserLastLogonTime: 7/29/2019 4:34:58 PM

X-MS-Office365-Filtering-Correlation-Id: f0613009-b362-424f-7365-08d71448d98f

X-Microsoft-Antispam:

2);SRVR:VE1EUR02HT107;

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 40.92.70.87

X-SID-PRA: ELMAWONG@OUTLOOK.AT

X-SID-Result: PASS

X-MS-Exchange-Organization-PCL: 2

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jul 2019 17:19:01.5631

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: f0613009-b362-424f-7365-08d71448d98f

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR02HT107

X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.0041842

X-MS-Exchange-Processed-By-BccFoldering: 15.20.2115.005

X-Microsoft-Antispam-Mailbox-Delivery:

     0090)(6225004)(4950130)(4990090)(9110004);

X-Message-Info:

     l4Z6gMPR1eUNKEZLdb+afH/DKhSuICXuTspE2BFhdlQW3ARjR6MFuQ==

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0tMQ==

X-Microsoft-Antispam-Message-Info:

     

MIME-Version: 1.0


Zitat:
and be sure i will send you my passport


Den muß er wahrscheinlich erst basteln! Smiley
« Zuletzt geändert: 30. Juli 2019 um 17:10 von x5dr »  
Zum Seitenanfang
 
IP gespeichert
 
x5dr
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4943
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Elma <elmawong@outlook.at>
Antwort #3 - 01. August 2019 um 20:28
 
Er oder sie will den Pass nicht rausrücken, bevor er nicht meinen Pass bekommen hat.

Dear xxx , 

Thanks for your information , Please can you send me your national I.D or Drivers licence. Your passport will be better because i personally will send you my passport for authenticity and for you to be sure of me . 

I wait for your mail for us to proceed , This is a lot of money ,i must be sure of who is receiving it and proper  identification  .

Best Regards , 
Dr. Elma Wong .

Spoiler für Microsoft Inline:
Received: from SG2APC01HT222.eop-APC01.prod.protection.outlook.com

(2603:10a6:802:29::17) by VI1PR0401MB2432.eurprd04.prod.outlook.com with

HTTPS via VI1PR09CA0073.EURPRD09.PROD.OUTLOOK.COM; Thu, 1 Aug 2019 17:27:34

+0000

ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;

xDs04V7sD+rdNiZgs3CH5wug==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

heck;

bh=jzLCjWCj4mvz9kj5uPdOYEqNMUdJh8J74FSUMHv2Ydk=;

zJZ/tk8v4A1o7ZzK9CmkO06A==

ARC-Authentication-Results: i=2; mx.microsoft.com 1;spf=pass (sender ip is

40.92.66.102) smtp.rcpttodomain=hotmail.com

smtp.mailfrom=outlook.at;dmarc=pass (p=none sp=none pct=100) action=none

Quelltext.from=outlook.at;dkim=none (message not signed);arc=pass (0 oda=0

ltdi=1)

Received: from SG2APC01FT053.eop-APC01.prod.protection.outlook.com

(10.152.250.56) by SG2APC01HT222.eop-APC01.prod.protection.outlook.com

(10.152.251.176) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2136.14; Thu, 1 Aug

2019 17:27:32 +0000

Authentication-Results: spf=pass (sender IP is 40.92.66.102)

smtp.mailfrom=outlook.at; hotmail.com; dkim=none (message not signed)

Quelltext.d=none;hotmail.com; dmarc=pass action=none Quelltext.from=outlook.at;

Received-SPF: Pass (protection.outlook.com: domain of outlook.at designates

40.92.66.102 as permitted sender) receiver=protection.outlook.com;

client-ip=40.92.66.102; helo=EUR01-VE1-obe.outbound.protection.outlook.com;

Received: from EUR01-VE1-obe.outbound.protection.outlook.com (40.92.66.102) by

SG2APC01FT053.mail.protection.outlook.com (10.152.250.240) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.2136.14 via Frontend Transport; Thu, 1 Aug 2019 17:27:31 +0000

X-IncomingTopHeaderMarker:

5D264;SizeAsReceived:5638;Count:39

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

o9inDEdT2wjyu0FN2JEzyntg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

heck;

bh=jzLCjWCj4mvz9kj5uPdOYEqNMUdJh8J74FSUMHv2Ydk=;

LS4LwwUGM7/Sprg62jzHZJDA==

ARC-Authentication-Results: i=1; mx.microsoft.com

1;spf=none;dmarc=none;dkim=none;arc=none

Received: from VE1EUR01FT024.eop-EUR01.prod.protection.outlook.com

(10.152.2.56) by VE1EUR01HT005.eop-EUR01.prod.protection.outlook.com

(10.152.2.92) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2136.14; Thu, 1 Aug

2019 17:27:28 +0000

Received: from VI1PR08MB4512.eurprd08.prod.outlook.com (10.152.2.60) by

VE1EUR01FT024.mail.protection.outlook.com (10.152.2.213) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.2136.14 via Frontend Transport; Thu, 1 Aug 2019 17:27:28 +0000

Received: from VI1PR08MB4512.eurprd08.prod.outlook.com

([fe80::51b1:94a9:c2ef:4e0b]) by VI1PR08MB4512.eurprd08.prod.outlook.com

([fe80::51b1:94a9:c2ef:4e0b%4]) with mapi id 15.20.2136.010; Thu, 1 Aug 2019

17:27:27 +0000

From: Elma Wong <elmawong@outlook.at>

To:xxx

Subject: Re: Neue Nachricht von xxx

Thread-Topic: Neue Nachricht von xxx

Thread-Index:

AQHVQ0ii6D33ip3aS0m0/JCqFKz+uabc4PWpgAO097WAAS+nK4AAFYiTgAMGc9+AAbDCFA==

Date: Thu, 1 Aug 2019 17:27:27 +0000

Message-ID:

 

References:

4EEE2ACE4DF0@VI1PR0401MB2432.eurprd04.prod.outlook.com>

In-Reply-To:

com>

Accept-Language: en-US, de-AT

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-incomingtopheadermarker:

73F64;SizeAsReceived:7177;Count:42

x-tmn: [Ptl7uMZwAjVyWKprnA+/xmGN5b7o7a1o]

x-ms-publictraffictype: Email

x-incomingheadercount: 42

x-eopattributedmessage: 1

x-ms-exchange-slblob-mailprops:

nybV/YHd+0OiJu7pq6FcGXq+FdTqV6JQt3Tt3Dwa6GcoxI+acE3AIVZYWdc=

X-Microsoft-Antispam-Untrusted:

1323274)(2017031324274)(1601125500)(1603101475)(1701031045);SRVR:VE1EUR01HT005;

X-MS-TrafficTypeDiagnostic: VE1EUR01HT005:|SG2APC01HT222:

X-MS-Exchange-PUrlCount: 3

X-Microsoft-Antispam-Message-Info-Original:

MKv1+mb4jjleq5tGe2dm4FPX7DZwG2mT

Content-Type: multipart/alternative;

     boundary="_000_VI1PR08MB4512AAA1ACE725A52523CE52BCDE0VI1PR08MB4512eurp_"

X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR01HT005

X-IncomingHeaderCount: 39

Return-Path: elmawong@outlook.at

X-MS-Exchange-Organization-ExpirationStartTime: 01 Aug 2019 17:27:31.9532

(UTC)

X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit

X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000

X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit

X-MS-Exchange-Organization-Network-Message-Id:

73f3f6b8-970a-4430-392e-08d716a588f7

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-Exchange-Organization-MessageDirectionality: Incoming

X-MS-Exchange-Transport-CrossTenantHeadersStripped:

SG2APC01FT053.eop-APC01.prod.protection.outlook.com

X-MS-Exchange-Transport-CrossTenantHeadersPromoted:

SG2APC01FT053.eop-APC01.prod.protection.outlook.com

X-Forefront-Antispam-Report: EFV:NLI;

X-MS-Exchange-Organization-AuthSource:

SG2APC01FT053.eop-APC01.prod.protection.outlook.com

X-MS-Exchange-Organization-AuthAs: Anonymous

X-MS-UserLastLogonTime: 8/1/2019 5:06:03 PM

X-MS-Office365-Filtering-Correlation-Id: 73f3f6b8-970a-4430-392e-08d716a588f7

X-Microsoft-Antispam:

8291501072);SRVR:SG2APC01HT222;

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 40.92.66.102

X-SID-PRA: ELMAWONG@OUTLOOK.AT

X-SID-Result: PASS

X-MS-Exchange-Organization-PCL: 2

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Aug 2019 17:27:31.3988

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 73f3f6b8-970a-4430-392e-08d716a588f7

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2APC01HT222

X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.7762226

X-MS-Exchange-Processed-By-BccFoldering: 15.20.2136.000

X-Microsoft-Antispam-Mailbox-Delivery:

     0090)(6225004)(4950130)(4990090)(9110004);

X-Message-Info:

     6Q+16Ywk1vUjK4ahril75718w2jV6noBBv2GAQPxHj/MMWkThPEhAw==

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0tMQ==

X-Microsoft-Antispam-Message-Info:

     

MIME-Version: 1.0
  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
‹ Vorheriges Thema | Nächstes Thema ›
Link zu diesem Thema
 
  « Übersicht ‹ Forum Top  

Anti-Scam » Powered by YaBB 2.6.12!
YaBB Forum Software © 2000-2024. Alle Rechte vorbehalten.

Valid RSS Valid XHTML Valid CSS Powered by Perl Source Forge