Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema PayPal Service <info@vicusantiek.nl> (Gelesen: 648 mal)
 
x5dr
Themenstarter Themenstarter
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4956
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
PayPal Service <info@vicusantiek.nl>
13. April 2017 um 18:06
 
Diese Smiley versuchen es immer wieder.

Datum
09.04.2017
Wichtige Information
Hallo xxx xxx,

PayPal Hat seine AGB aktualisiert.
Grund hierfür ist ein EU-Gesetz welches zum 01.04.2017 in Kraft getreten ist.

Ab sofort sind deshalb alle Eu-Zahlunsanbieter gesetzlich dazu verpflichtet die Daten Ihrer Kunden zu verifizieren.

Wir möchten Sie bitten Ihre Daten schnellstmöglich zu bestätigen.
Um den Prozess zu starten, besuchen Sie bitte folgenden Link:

Abgleich starten

Bitte bestätigen Sie Ihre Daten innerhalb von 48 Stunden.
Sollte keine Bestätigung vorliegen sind wir dazu gezwungen Ihr Konto vorrübergehende zu deaktivieren.

Viele Grüße,

PayPal Support Team
Dies ist eine automatisch generierte E-Mail. Bitte antworten Sie nicht direkt auf diese E-Mail.
Bei Fragen Kontaktieren Sie das Support Team.

© 2017

Link: (http:)//kidw.ai/11

Spoiler:
Received: from HE1P195CA0015.EURP195.PROD.OUTLOOK.COM (10.171.121.25) by
VI1P195MB0029.EURP195.PROD.OUTLOOK.COM (10.175.185.16) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.1.1019.17 via Mailbox Transport; Sun, 9 Apr 2017 09:15:50 +0000
Received: from inbound.mail.protection.outlook.com (213.199.154.55) by
HE1P195CA0015.outlook.office365.com (10.171.121.25) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.1.1019.17 via Frontend Transport; Sun, 9 Apr 2017 09:15:50 +0000
Received: from VE1EUR02FT057.eop-EUR02.prod.protection.outlook.com
(10.152.12.54) by VE1EUR02HT168.eop-EUR02.prod.protection.outlook.com
(10.152.13.125) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1005.5; Sun, 9 Apr
2017 09:15:50 +0000
Authentication-Results: spf=none (sender IP is 91.184.19.33)
smtp.mailfrom=vicusantiek.nl; hotmail.com; dkim=none (message not signed)
header.d=none;hotmail.com; dmarc=none action=none header.from=vicusantiek.nl;
Received-SPF: None (protection.outlook.com: vicusantiek.nl does not designate
permitted sender hosts)
Received: from COL004-MC6F21.hotmail.com (10.152.12.53) by
VE1EUR02FT057.mail.protection.outlook.com (10.152.13.90) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.1005.5 via Frontend Transport; Sun, 9 Apr 2017 09:15:49 +0000
X-IncomingTopHeaderMarker: 530EB;SizeAsReceived:2696;Count:23
Received: from kate.hostnet.nl ([91.184.19.33]) by COL004-MC6F21.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
      Sun, 9 Apr 2017 02:15:46 -0700
Received: from vps-272893-5080.hosted.at.hostnet.nl ([185.85.17.172])
     by kate.hostnet.nl with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
     (Exim 4.86)
     (envelope-from <info@vicusantiek.nl>)
     id 1cx8wi-0008Av-F6
     for xxx@hotmail.com; Sun, 09 Apr 2017 11:15:44 +0200
Received: from [91.195.103.150] (unknown [91.195.103.148])
     (Authenticated sender: info@vicusantiek.nl)
     by vps-272893-5080.hosted.at.hostnet.nl (Postfix) with ESMTPA id 3407E43002
     for <xxx@hotmail.com>; Sun,  9 Apr 2017 11:15:43 +0200 (CEST)
Message-ID: <acmE7PQaofG9pfEMrUV8vLVwrpHK1LV5nezv1AXlda8A@vicusantiek.nl>
From: PayPal Service <info@vicusantiek.nl>
To: xxx xxx <xxx@hotmail.com>
Subject: Handeln erforderlich
Date: Sun, 9 Apr 2017 02:15:44 -0700
X-Bounce-Tracking-Info: JMTM2OAkJNDc2Nglib3VuY2UJbm8Jbm8=>
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 185.85.17.172
X-SpamExperts-Domain: vps-272893-5080.hosted.at.hostnet.nl
X-SpamExperts-Username: 185.85.17.172
Authentication-Results: hostnet.nl; auth=pass smtp.auth=185.85.17.172@vps-272893-5080.hosted.at.hostnet.nl
X-SpamExperts-Outgoing-Class: unsure
X-SpamExperts-Outgoing-Evidence: Combined (0.71)
X-Recommended-Action: accept
X-Filter-ID: s0sct1PQhAABKnZB5plbIbxm2tjBX+d/e0J/hey37+7M2F09++5/XfQfWSA2gk7YERWeKKG4PAQY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X-Report-Abuse-To: spam@avril.hostnet.nl
Return-Path: info@vicusantiek.nl
X-OriginalArrivalTime: 09 Apr 2017 09:15:46.0537 (UTC) FILETIME=[DF41FD90:01D2B111]
X-IncomingHeaderCount: 23
X-MS-Exchange-Organization-Network-Message-Id: 1918cffe-de9a-4e8f-d78c-08d47f2903e6
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: 91.184.19.33
CMM-sending-ip: 91.184.19.33
CMM-Authentication-Results: hotmail.com; spf=none (sender IP is 91.184.19.33)
smtp.mailfrom=info@vicusantiek.nl; dkim=none header.d=vicusantiek.nl;
x-hmca=none header.id=info@vicusantiek.nl
CMM-X-SID-PRA: info@vicusantiek.nl
CMM-X-AUTH-Result: NONE
CMM-X-SID-Result: NONE
CMM-X-Message-Status: n:n
CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MjtHRD0yO1NDTD00
CMM-X-Message-Info: tUJIcvWup3ibBn53
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Exchange-Diagnostics: MTQOHcE5w+YHU1voVnDOUbJN36oB47xFbL5xf4qJd4c7CCgI9x
X-Forefront-Antispam-Report: 6F21.hotmail.com;FPR:;SPF:None;LANG:de;
X-MS-Office365-Filtering-Correlation-Id: 1918cffe-de9a-4e8f-d78c-08d47f2903e6
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(22001)(8291500097)(8291501071);SRVR:VE1EUR02HT168;
X-Microsoft-Exchange-Diagnostics: FKZuxY4sOzoiqmka8=
X-MS-Exchange-Organization-AVStamp-Service: 1.0
X-Microsoft-Exchange-Diagnostics: OeUd33Q1vBhhDAXr24geA23Ob6MUapHGrvJbIFcIMTKXBqO5UWiIfcGlT/7w==
X-Exchange-Antispam-Report-CFA-Test: R02HT168;
X-Microsoft-Exchange-Diagnostics: o44kkFphCOOtphYw8MEOofoiKeRZoag==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: Default
X-Microsoft-Exchange-Diagnostics: 62Bqpt8jkqPZBtKvW5GmY/cNYJ+8022zf38Hjp/Q==
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Apr 2017 09:15:49.4897
(UTC)
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR02HT168
X-MS-Exchange-Organization-AuthSource: VE1EUR02FT057.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-OriginatorOrg: outlook.com
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.2395004
X-Microsoft-Exchange-Diagnostics:
     f5hdAMpYw==
X-Microsoft-Antispam-Mailbox-Delivery:
     ENG:(5061607094)(102400140)(102420017);RF:JunkEmail;OFR:SpamFilterAuthJ;
MIME-Version: 1.0


Mehrere IP´s im Header!

Code
Alles auswählen
IP:	91.195.103.148
Decimal:	1539532692
Hostname:	91.195.103.148
ASN:	49453
ISP:	Global Layer B.V.
Organization:	Global Layer B.V.
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Continent:	Europe
Country:	Czechia
State/Region:	Hlavni mesto Praha
City:	Prague 



Code
Alles auswählen
IP:	185.85.17.172
Decimal:	3109360044
Hostname:	vps-272893-5080.hosted.at.hostnet.nl
ASN:	197902
ISP:	Hostnet B.V.
Organization:	VPS
Services:	None detected
Type:	Broadband
Assignment:	Static IP
Continent:	Europe
Country:	Netherlands 



Code
Alles auswählen
IP:	91.184.19.33
Decimal:	1538790177
Hostname:	kate.hostnet.nl
ASN:	197902
ISP:	Hostnet B.V.
Organization:	Hostnet BV Network Operations
Services:	None detected
Assignment:	Static IP
Continent:	Europe
Country:	Netherlands 



Zitat:
Received: from [91.195.103.150] (unknown [91.195.103.148]) (Authenticated sender: info@vicusantiek.nl) by vps-272893-5080.hosted.at.hostnet.nl (Postfix) with ESMTPA; Sun, 9 Apr 2017 11:15:43 +0200 (CEST)
Date: Sun, 9 Apr 2017 02:15:44 -0700
From: PayPal Service <info@vicusantiek.nl>


Anbei noch ein Screen vom Mail.
  

PayPal.JPG ( 112 KB | Downloads )
PayPal.JPG
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema