Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Connie <personal1mic1@msn.com> <csimon@kcpublicschools.org> (Gelesen: 5287 mal)
 
Stiray
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65753
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Connie <personal1mic1@msn.com> <csimon@kcpublicschools.org>
07. November 2015 um 13:07
 
?

Hello, am Sanchez,can we discuss on my $24M i want to give to you.

Spoiler:
Return-Path: <csimon@kcpublicschools.org>
Received: from na01-by2-obe.outbound.protection.outlook.com ([207.46.100.110]) by xxx with ESMTPS (Nemesis) id 0MW8wP-1ZvhJz0NGz-00XIdJ for xxx; Tue, 03 Nov 2015 22:35:48 +0100
Received: from BY2PR01CA0053.prod.exchangelabs.com (10.255.242.43) by BY1PR0101MB0997.prod.exchangelabs.com (10.160.199.147) with Microsoft SMTP Server (TLS) id 15.1.312.18; Tue, 3 Nov 2015 21:35:39 +0000
Received: from BY2FFO11FD023.protection.gbl (2a01:111:f400:7c0c::124) by BY2PR01CA0053.outlook.office365.com (2a01:111:e400:2c76::43) with Microsoft SMTP Server (TLS) id 15.1.312.18 via Frontend Transport; Tue, 3 Nov 2015 21:35:39 +0000
Received-SPF: None (protection.outlook.com: kcpublicschools.org does not designate permitted sender hosts)
Received: from EXCH2013B.kcmsd.int (169.142.1.207) by BY2FFO11FD023.mail.protection.outlook.com (10.1.15.212) with Microsoft SMTP Server (TLS) id 15.1.318.9 via Frontend Transport; Tue, 3 Nov 2015 21:35:38 +0000
Received: from EXCH2013A.kcmsd.int (10.33.6.130) by EXCH2013B.kcmsd.int (10.33.6.131) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Tue, 3 Nov 2015 15:35:06 -0600
Received: from EXCH2013A.kcmsd.int ([fe80::a18a:72eb:cffc:41d2]) by EXCH2013A.kcmsd.int ([fe80::a18a:72eb:cffc:41d2%12]) with mapi id 15.00.0847.030; Tue, 3 Nov 2015 15:35:06 -0600
From: Connie Simon <csimon@kcpublicschools.org>
To: "www@bbc.co.uk" <www@bbc.co.uk>
Subject: GS
Thread-Topic: GS
Thread-Index: AdEWf1g4ZjvmyqhlTPSGi8ypLEWr5A==
Date: Tue, 3 Nov 2015 21:35:05 +0000
Message-ID: <a1971af9dac7472885ddeec01b3baeca@EXCH2013A.kcmsd.int>
Reply-To: "personal1mic1@msn.com" <personal1mic1@msn.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-cr-puzzleid: {44CFBBC9-6D09-4C52-AFC6-D4542268E683}
x-cr-hashedpuzzle: Acc3 Apw+ D0pd EHwp Esbx FxXN F+3p G68d IyeE I2is JFHQ JaHK LYl7 L2WM MDBN gBnAA==;Tue, 03 Nov 2015 21:34:43 GMT;RwBTAA==
x-originating-ip: [10.33.6.7]
Content-Type: multipart/alternative; boundary="_000_a1971af9dac7472885ddeec01b3baecaEXCH2013Akcmsdint_"
MIME-Version: 1.0
X-EOPAttributedMessage: 0
X-Microsoft-Exchange-Diagnostics: Y8WCVmvH96kMyK8zE7hvYC4A==
X-Forefront-Antispam-Report: en;
X-Microsoft-Exchange-Diagnostics: lSTsG9nx3AaYtcKzm1xAUg9cKXZ8+UD+4MUMJhMMQuVkWyLa29K
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0101MB0997;
X-Microsoft-Exchange-Diagnostics: lnJ63D3ahKS2LsbqLwQBZYwCUUGe1lCz7Hprz+YV
X-Microsoft-Antispam-PRVS: 
X-Exchange-Antispam-Report-Test: UriScan:(108003899814671);
X-Exchange-Antispam-Report-CFA-Test: SRVR:BY1PR0101MB0997;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0101MB0997;
X-Forefront-PRVS: 0749DC2CE6
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;BY1PR0101MB0997;23:bHeJWALCXVi4zY7rR4rACy6CsY25DX99IWoqC8Y?= =?us-ascii?Q?ZRSuov6/B8u4qfdUkxjHywH3g/If9z3Ih5vanf7YtGkyIk4Zu3QIYzQrMzEL?= =?us-ascii?Q?71n9KnNaU3ABamndXEs4dDMxzWAuvoLeNBKF62DTW4g+P60iC1FWGCa9AQQp?= =?us-ascii?Q?H3800nFxmpaRbh1w4l+B5ltzjF9TKZyxfnT0En9h2plZg4/a041WXswwGvhw?= =?us-ascii?Q?kFzYFhoRyGLRhgvQ4abPd1lopXJw3CB1sJjVHLCnLzMrmocVL8ZjH8/XGVet?= =?us-ascii?Q?kZXEJxm5EPGZKr85Tbg7A1CK8pkl0HZzH/E53yUaP5esSt0dhtDtQIPEgniI?= =?us-ascii?Q?u2OrjdUuKfs/vSX1GJbdkR7Qw8WEtRhJ7jiAjUtqvpfOQu+Q4VFNIf8/2gSR?= =?us-ascii?Q?vNRHX6Hq/k7p3q8an3oSTDrRSlV8sQx4DrZNCohs5Vsy1koBUHjXl6kSbP8R?= =?us-ascii?Q?RkL2nVL6zxPkHDIxl1Wtjy5CV9A6ncYcCkpinpCPyNz9AYESWEliHPncaHKT?= =?us-ascii?Q?eXHSkeKK1HDLrvKy2DCW37xqIH9RqM9R2xf34FqFnFwwbFb9by9/CqYoDqSH?= =?us-ascii?Q?HMmOyOPtlN733Rs67puO8nRGp6QQdKcyGRno/XFBb5SU9K9TTKKf0caFywj+?= =?us-ascii?Q?mVT6tuLiHKlsjysk16qfTMJVC/j58/OVYL/6CJM1uIXnrIiB9mDxSXj/AF6C?= =?us-ascii?Q?3ItkfRVUIwzCs8SlAW98Ktr5DHqKnWf/5qBsoNn0DXYfb9iaaNIdfud6R4hp?= =?us-ascii?Q?005IQtbqHVrwMbq1W9ci5swWChBMh/TL/1n0VdvTcoPYY98DBMXVNmtcW4HL?= =?us-ascii?Q?v1UDVB52Kvhv1wqgBGZ64YwUecTgTv3J58CX3Paq14tBM28noHNrjgsdhaiL?= =?us-ascii?Q?IsVrpSSnUq+mQe72j92YagRt5u2/5O8tm1oU6K8ZsNLK/iN4HXIJv1V2uMjl?= =?us-ascii?Q?28Wshxta8iJiyjxZpp3OqggRKG7vDYUzMuyvx0KNr/tgnN5yUS4v5j2+iJdI?= =?us-ascii?Q?aVoJayIsngq4tI67Zy4UQxqfS/1p9+17+z5/fq2VnSdn8f4WMwGWTFegkKnH?= =?us-ascii?Q?UA9CtphnUq3V8rd16zJ8mgY1O+QTJksd03hdFAYxLB/9hho3Tw1EF41Uy54l?= =?us-ascii?Q?+S21Inu0GwLWqtSRnIZ2XCL0kN7nFXrO80rOes+v+vQtW9s8XJM3CJEErAAx?= =?us-ascii?Q?xSB1j2A2aE3f4oc71k+Z9AGW99pZJrBhILM0MSC/PX9NWwt4TosjAm9+Hluy?= =?us-ascii?Q?Vn2vfj5LrvXlPQJTzrLgRtPrSymrl57KrJqQpL9tPvPJEPQlyJfl67AQp+fG?= =?us-ascii?Q?hUCXxeLquI//cX4zfus8W1Q+aMCaynXYV0Wnxko0xYrpniaCKEwPTv6/P+WT?= =?us-ascii?Q?qzFEBW9k2qoabPL/pYGU/sddjUzzhPI31IvVcxmXO3+nnJJU+pHzQCxYZPks?= =?us-ascii?Q?7vJJYunw8U53qd1u+YM2cvkCD5TybtyE=3D?=
X-Microsoft-Exchange-Diagnostics: XvzAlxz5XSp4NOFPP/DaHpXdknpRMu1dKxH3tmRM8C8Xt7S3t64v7g==
SpamDiagnosticOutput: 1:23
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: kcpublicschools.org
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Nov 2015 21:35:38.4408 (UTC)
X-MS-Exchange-CrossTenant-Id: 139fe691-d724-4472-abdd-1f3073484955
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=139fe691-d724-4472-abdd-1f3073484955;Ip=[169.142.1.207];Helo=[EXCH2013B.kcmsd.int]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0101MB0997
Envelope-To: xxx
Antispam: 0 (Mail was not recognized as spam); Detail=V3;
Antivirus: 0 (no virus found)


Auswertbare IP

Code
Alles auswählen
IP:	169.142.1.207
Decimal:	2844656079
Hostname:	gwmail.kcmsd.net
ASN:	2572
ISP:	Central Methodist University
Organization:	The School District of Kansas City, Missouri
Services:	Likely mail server
Type:	Corporate
Assignment:	Static IP
Continent:	North America
Country:	United States
State/Region:	Missouri
City:	Kansas City 



Zitat:
from EXCH2013B.kcmsd.int (169.142.1.207) [...] with Microsoft SMTP Server (TLS) id 15.1.318.9 via Frontend Transport; Tue, 3 Nov 2015 21:35:38 +0000
From: Connie Simon <csimon@kcpublicschools.org>
Date: Tue, 3 Nov 2015 21:35:05 +0000


Zitat:
Reply-To: "personal1mic1@msn.com" <personal1mic1@msn.com>
  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Stiray
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65753
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Connie <personal1mic1@msn.com> <csimon@kcpublicschools.org>
Antwort #1 - 07. November 2015 um 13:14
 
Zitat:
personal1mic1@msn.com


http://ricorant.blogspot.de/2013/02/scam-for-day_9.html

Zitat:
WE ARE GLAD PRONOUNCE YOU AS OUR WINNER OF WON PRIZE OF EIGHT CRORES 10 LAHKS INDIA RUPEES FROM MICROSOFT INC. PROVIDE US WITH THE FOLLOWING INFORMATION'S BELOW TO CLAIM WON PRIZE :
Sex:
Full Address:
Full Name:
Age:
Telephone Number:

God Bless
Tracy Robinson.


Zitat:
From: cokeyr5@centurylink.net
Date: February 9, 2013, 10:38:18 EST
To: undisclosed-recipients:;
Subject: MGH
Reply-To: personal1mic1@msn.com


Zitat:
Received: from EXCH2013A.kcmsd.int


http://discard.email/pillory/cash-donation_5996242389705460893-55394bd5b8756efab...

Zitat:
Dear Selected Beneficiary,
You have been selected as the sole beneficiary of the sum of (£2,000.000.00) Donated to you by Mr. Neil Trotter who Won the British Euro Million Lottery 18 March 2014. Mr. and Mrs. Neil Trotter is donating £2,000,000.00 (Million) each to Ten individuals in our on-going charity project. Among the email addresses we selected, your email id has been listed among the Ten lucky winners to receive £2,000,000.00 for charity project. Kindly contact us for claims Email: neiltroterdonate@qq.com
Regards,
Donated By: Mr.Neil Trotter
Secretary,
Cynthia Johnson


Gleiche Art der Einlieferung.
  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65753
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Connie <personal1mic1@msn.com> <csimon@kcpublicschools.org>
Antwort #2 - 07. November 2015 um 13:17
 
My name is Gerard Anjay Sanchez , a real estate agent in India. I have been diagnosed with Oesophageal cancer. I have been on medical treatment after which it was confirmed by my doctor that I have cancer in 2012. The sad part now is that it has also been confirmed that i may not live to see next year for this reason i have decided to share my wealth. I want to transfer the sum of 24 Million Dollars to you. I saw a profile of you on the net. I hope that God directed me to the right person that will use these funds to fund orphanage homes,help the needy and widows. I have always been a God fearing man and i always love to help the poor. I want to extend this help to the people outside my region sadly my present health situation will not allow me move hence i have decided by the help of God to get this money to you and expect you to use some for your personal use and the others for charity work. I have lodge this money in a consignment please confirm your interest so i can tell you more on how to get this money. Please provide:

Full Names:

Address:

Contact no:

I believe so much in God and my faith has lead me to you please reply as soon as possible.


MR GERARD SANCHEZ.

Spoiler für Quelltext Hotmail Inline:
Return-Path: <personal1mic1@msn.com>
Received: from COL004-OMC4S11.hotmail.com ([65.55.34.213]) by xxx with ESMTPS (Nemesis) id 0MJXPn-1ZryCC3Cf5-0039bh for xxx; Wed, 04 Nov 2015 09:56:40 +0100
Received: from COL131-W69 ([65.55.34.201]) by COL004-OMC4S11.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Wed, 4 Nov 2015 00:56:38 -0800
X-TMN: [KIPNbFXrnOGULctGkp9pTzx4VG0++EYL]
X-Originating-Email: [personal1mic1@msn.com]
Message-ID: <COL131-W69E8F119EFE8437104D6F1BA2A0@phx.gbl>
Content-Type: multipart/alternative; boundary="_24e6692a-57b9-40cd-a15a-194dc58d447d_"
From: WR.COM Office <personal1mic1@msn.com>
To: xxx
Subject: RE: Aw: GS I have faith in you.
Date: Wed, 4 Nov 2015 08:56:38 +0000
Importance: Normal
In-Reply-To: xxx
References: <a1971af9dac7472885ddeec01b3baeca@EXCH2013A.kcmsd.int>,xxx
MIME-Version: 1.0
X-OriginalArrivalTime: 04 Nov 2015 08:56:38.0252 (UTC) FILETIME=[B7321AC0:01D116DE]
Envelope-To: xxx
Antispam: 0 (Mail was not recognized as spam); Detail=V3;
Antivirus: 0 (no virus found)


Zitat:
From: WR.COM Office <personal1mic1@msn.com>
Date: Wed, 4 Nov 2015 08:56:38 +0000
  
Zum Seitenanfang
 
IP gespeichert
 
Stiray
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Stillstand ist die Vorstufe
des Untergangs

Beiträge: 65753
Mitglied seit: 09. Juni 2011
Geschlecht: männlich
Re: Connie <personal1mic1@msn.com> <csimon@kcpublicschools.org>
Antwort #3 - 07. November 2015 um 13:22
 
Das ist ein alter Hut, hier sollen Daten abgegriffen werden.

Deshalb ist das Anschreiben als Phishingmail einzustufen.

Smiley

Zitat:
Reply-To: "personal1mic1@msn.com" <personal1mic1@msn.com>


Die Add. ist nicht mehr erreichbar, stattdessen ist meine Spambox immer gut gefüllt.

Weiteres Thema:

Gerard Anjay Sanchez <tmtborm190@gmail.com> <ccharism@kcpublicschools.org>
« Zuletzt geändert: 05. Mai 2016 um 09:09 von Stiray »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema