Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50126.outbound.protection.outlook.com [40.107.5.126]) by anna.lesderid.net (Postfix) with ESMTP id 3CF70DB9FF for ; Fri, 10 Feb 2017 15:56:49 +0100 (CET) Received: from DB6PR0602MB2918.eurprd06.prod.outlook.com (10.172.250.10) by DB6PR0602MB2919.eurprd06.prod.outlook.com (10.172.250.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.888.16; Fri, 10 Feb 2017 14:56:46 +0000 Received: from DB6PR0602MB2918.eurprd06.prod.outlook.com ([10.172.250.10]) by DB6PR0602MB2918.eurprd06.prod.outlook.com ([10.172.250.10]) with mapi id 15.01.0888.029; Fri, 10 Feb 2017 14:56:46 +0000 From: ANTONIO PANCA To: Les De Ridder CC: DS_TSOL_phishing Subject: RE: We have detected that fuwafuwa.moe is hosting a fraudulent website Thread-Topic: We have detected that fuwafuwa.moe is hosting a fraudulent website Thread-Index: AdKBbXj5DH/5oMJPRDCOSwuktEss6QAzJUlwADh90gAAGYi3IAAJy7EAAAERNqA= Date: Fri, 10 Feb 2017 14:56:46 +0000 Message-ID: References: In-Reply-To: Accept-Language: es-ES, en-US Content-Language: es-ES X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=antonio.panca.ext@telefonica.com; x-originating-ip: [81.40.110.204] x-ms-office365-filtering-correlation-id: 4f818b66-3ac5-4ece-1707-08d451c50905 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(48565401081);SRVR:DB6PR0602MB2919; x-microsoft-exchange-diagnostics: 1;DB6PR0602MB2919;7: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 x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(40392960112811)(158342451672863)(21748063052155)(231250463719595); x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(6040375)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(6041248)(20161123558025)(20161123562025)(20161123560025)(20161123555025)(20161123564025)(6072148);SRVR:DB6PR0602MB2919;BCL:0;PCL:0;RULEID:;SRVR:DB6PR0602MB2919; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(7916002)(39850400002)(39860400002)(39840400002)(39450400003)(39410400002)(252514010)(199003)(504964003)(24454002)(189002)(66066001)(101416001)(106356001)(33656002)(105586002)(53936002)(6246003)(25786008)(6436002)(7696004)(450100001)(107886003)(2950100002)(110136004)(6306002)(6916009)(6506006)(5660300001)(53386004)(53346004)(68736007)(99286003)(55016002)(38730400002)(236005)(9686003)(54896002)(606005)(77096006)(229853002)(10710500007)(4326007)(790700001)(6116002)(102836003)(3846002)(5890100001)(3280700002)(81166006)(81156014)(3660700001)(2906002)(2420400007)(8676002)(2900100001)(1680700002)(8936002)(15650500001)(93886004)(7110500001)(74316002)(7736002)(76176999)(189998001)(92566002)(97736004)(122556002)(7906003)(54356999)(50986999)(86362001)(9010500006)(18823205002)(19627235001);DIR:OUT;SFP:1102;SCL:1;SRVR:DB6PR0602MB2919;H:DB6PR0602MB2918.eurprd06.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;A:1;MX:1;LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_DB6PR0602MB2918CA32B4E7D73B49069C0BC9440DB6PR0602MB2918_" MIME-Version: 1.0 X-OriginatorOrg: telefonica.com X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Feb 2017 14:56:46.5586 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0602MB2919 Hello, Sorry for the inconvience. Could you please delete the reported files on p.fuwafuwa.moe ? We are worried that the phisher will use them for further scams. Best regards --------------------------------------------------------------- CyberThreats - Anti-Fraud Service Telefónica España Phone: +34 900102230 (option 9) Emails: phishing@telefonica.com servicio.antifraude@telefonica.com