I receive about 2 fake mails a day here in France
I have recuperating header with Windows devenait and Windows Live 2012
I receved this fake email paypal
Urls blacklisted by netcraft anti Phishing team
Url redirect on mail
http://tcsrprovence.fr/domainelacoste/images/stories/redir.html
Hostname:
tcsrprovence.fr
IP Address:
213.186.33.19
Host of this IP:
cluster010.ovh.net
Organization:
OVH SAS
ISP:
OVH SAS
Updated:
12/27/2015 05:07 PM
City:
-
Country:
France
Url suspected
http://www.verifyinforequire.dotwebhosts.com/session/loginnew/
www.verifyinforequire.dotwebhosts.com
IP Address:
192.169.249.195
Host of this IP:
https://verifyinforequire.dotwebhosts.com:2083
ip-192-169-249-195.ip.secureserver.net
Organization:
GoDaddy.com, LLC
ISP:
GoDaddy.com, LLC
Updated:
12/28/2015 07:23 PM
City:
Scottsdale
Country:
United States
State:
Arizona
Postal Code:
85260
Timezone:
America/Phoenix
Local Time:
01/03/2016 03:04 AM
Email header analysis report
All valid IP Addresses found in the header.
Ip Address 3rd Party Info Provider City Flag Country
*212.227.136.126 Check 212.227.136.126 at Senderbase.org Check 212.227.136.126 at Reputationauthority.org 1&1 Internet Ag n/a Germany
*Probable originating IP address
Header fake email
x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; spf=none (sender IP is 212.227.136.126) smtp.mailfrom=@s17847175.onlinehome-server.info; dkim=none header.d=paypaI.com; x-hmca=none header.id=@paypaI.com
X-SID-PRA: ******@paypaI.com
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: 11chDOWqoTniEXm/3w9ZLlcU3ERCxl32Q/IQGvfHoWPTo4/x5pg0B49o9iwX+xiF8miT0nsiJbbDcjOIp07GIr46yvYRcYH6baHdf9Z1pg0qGNY+x0QqcdxgFJiI9qu7+bjehhevkD3pX5vgLPDtWqket64twCtJGpKloNBEzsh2L2CHJti/TgwBDI8PqWdii78vQBkkGz1he5ypiaDoNiHpawi9xKh44PqBe1PqXM5YScaWUpzCNg==
Received: from s17847175.onlinehome-server.info ([212.227.136.126]) by BAY004-MC6F6.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
Sat, 2 Jan 2016 16:38:14 -0800
Received: from s17847175.onlinehome-server.info (localhost [127.0.0.1])
by s17847175.onlinehome-server.info (8.14.4/8.14.4) with ESMTP id u030cBQQ032028
for <******@hotmail.com>; Sun, 3 Jan 2016 01:38:11 +0100
Received: (from s.athos@localhost)
by s17847175.onlinehome-server.info (8.14.4/8.14.4/Submit) id u030cBc0032027;
Sun, 3 Jan 2016 01:38:11 +0100
Date: Sun, 3 Jan 2016 01:38:11 +0100
Message-Id: <******@s17847175.onlinehome-server.info>
To: ******@hotmail.com
Subject: Oie Que Saudades
X-PHP-Originating-Script: 10007:mm.php
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: Account Support <******@paypaI.com>
Return-Path: ******@s17847175.onlinehome-server.info
X-OriginalArrivalTime: 03 Jan 2016 00:38:15.0178 (UTC) FILETIME=[085C1EA0:01D145BF]
<html xmlns="http://www.w3.org/1999/xhtml"><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="format-detection" content="telephone=no">
<title></title>
</head>
<body style="margin:0; padding:0; background: #e6e7e8; -webkit-text-size-adjust:none;">
<table width="100%" border="0" cellspacing="0" cellpadding="0" bgcolor="#e6e7e8">
<tbody><tr>
<td align="left" valign="top"><table width="600" border="0" cellspacing="0" cellpadding="0" align="center" class="resize_table320">
<tbody><tr>
<td align="left" valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tbody><tr>
<td align="left" valign="top" height="10" style="border-collapse:collapse; font-size:0; line-height:0;"></td>
</tr>
<tr>
<td align="left" valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tbody><tr>
<td align="left" valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tbody><tr>
</tr>
</tbody></table>
</td>
</tr>
</tbody></table>
</td>
</tr>
</tbody></table>
</td>
</tr>
<tr>
<td align="left" valign="top" bgcolor="#ffffff" class="border_line"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tbody><tr>
<td align="left" valign="top" width="600" height="25" class="nomob"></td>
</tr>
<tr>
<td align="left" valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tbody><tr>
<td align="left" valign="top" width="1" bgcolor="#cccccc" class="nomob"></td>
<td align="left" valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tbody><tr>
<td align="left" valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tbody><tr>
<td align="left" valign="top" height="1" style="border-collapse:collapse; font-size:0; line-height:0;" class="resize_h14"></td>
</tr>
<tr>
<td align="left" valign="top"><table border="0" cellspacing="0" cellpadding="0">
<tbody><tr>
<td align="left" valign="top" width="97" height="27"></td>
</tr>
</tbody></table>
</td>
</tr>
<tr>
<td align="left" valign="top" height="27" style="border-collapse:collapse; font-size:0; line-height:0;"></td>
</tr>
</tbody></table>
</td>
</tr>
<tr><td class="font26" style="font-family:Arial, Helvetica, sans-serif; font-size:33px; line-height:37px; color:#009CDE; text-decoration:none;" align="center" valign="top">Your PayPal Account Has Been Limited<span class="block1">. </span></td>
</tr>
<tr>
<td height="35" align="center" valign="top" class="resize_h6"></td>
</tr>
<tr>
<td style="font-family:Arial, Helvetica, sans-serif; font-size:16px; line-height:20px; color:#0079c1; text-decoration:none;" align="center" valign="top" class="align_left">Dear Valued User ,</td>
</tr>
<tr>
<td height="22" align="center" valign="top" class="resize_h18"></td>
</tr>
<tr>
<td align="left" valign="top"><table border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody><tr>
<td width="55" align="left" valign="top" class="nomob"></td>
<td class="align_left" style="font-family:Arial, Helvetica, sans-serif; font-size:14px; line-height:18px; color:#666666; text-decoration:none;" align="center" valign="top">
We are sorry to inform you That You account has been Iimited.<br>
Please help us get your account back by Clicking on Update your information button Then Follow the steps
it will just take 5 min or 10 min from you time.<a style="color:#0079c1; text-decoration:underline;" target="_blank"><b> </b></a></td>
<td width="55" align="left" valign="top" class="nomob"></td>
</tr>
</tbody></table></td>
</tr>
<tr>
<td height="39" align="center" valign="top" class="resize_h28"></td>
</tr>
<tr>
<td align="center" valign="top"><table width="185" border="0" cellpadding="0" cellspacing="0" class="full_width">
<tbody><tr>
<td><table class="ecxmobile_button" width="250" border="0" cellspacing="0" cellpadding="0">
<tbody><tr>
<td height="30" width="1" id="ecxforce_height"></td>
<td class="ecxbutton_style" id="ecxbutton_text" width="100" align="center" valign="middle" style="font-family:HelveticaNeueLight, Helvetica Neue Light, Arial, sans-serif;font-weight:300;font-stretch:normal;text-align:center;color:#fff;font-size:15px;background:#009CDE;border-radius:7px !important;"><a href="http://tcsrprovence.fr/domainelacoste/images/stories/redir.html" style="color:#fff;text-decoration:none;display:block;" target="_blank">Update Your information</a></td>
</tr>
</tbody></table></td>
</tr>
</tbody></table></td>
</tr>
<tr>
<td height="29" align="center" valign="top"></td>
</tr>
</tbody></table>
</td></tr></tbody></table>
</td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></body></html>
