You have a New Personal Message from Facebook Services Manager

FAKE facebook NOTIFICATION ~ fraud

Email header analysis report
All valid IP Addresses found in the header.
Ip Address 3rd Party Info Provider City Flag Country
* 206.253.172.87 Check 206.253.172.87 at Senderbase.org Check 206.253.172.87 at Reputationauthority.org Vaultnetworks Inc. Fort Lauderdale United States
98.138.213.212 Check 98.138.213.212 at Senderbase.org Check 98.138.213.212 at Reputationauthority.org Yahoo! Sunnyvale United States

*Probable originating IP address

Header Analysis

Originating Info

Email info Geographical Info
Originating IP address From Continent
Originating hostname Originating Email address Latitude
Originating Organization Subject Longitude
Originating Country Date Sent Time zone
Originating City Message ID GMT offset

notification

One thought on “You have a New Personal Message from Facebook Services Manager

  1. SFA Reporter March 12, 2013 at 12:20 AM Reply

    Below is a TRUE FACEBOOK MESSAGE

    facebook notification alert: YOU NEED TO DO A EMAIL HEADER CHECK BEFORE CLICKING ON ONE OF THESE FAKE EMAILS.

    email header tool – ipaddresslocation.com


    Email Header Analysis
    IP Address: 66.220.144.166 (outcampmail007.snc4.facebook.com)

    IP Address Country: United States
    IP Continent: North America
    IP Address City Location: San Francisco
    IP Address Region: California
    IP Address Latitude: 37.7749,
    IP Address Longtitude: -122.4194
    Organization: Facebook
    ______________________

    Delivered-To: scamfraudalert@gmail.com
    Received: by 10.204.81.74 with SMTP id w10csp124150bkk;
    Tue, 12 Mar 2013 00:03:20 -0700 (PDT)
    X-Received: by 10.68.189.137 with SMTP id gi9mr4823361pbc.118.1363071799322;
    Tue, 12 Mar 2013 00:03:19 -0700 (PDT)
    Return-Path:
    Received: from mx-out.facebook.com (outcampmail007.snc4.facebook.com. [66.220.144.166])
    by mx.google.com with ESMTP id zz9si27632143pbc.329.2013.03.12.00.03.18;
    Tue, 12 Mar 2013 00:03:19 -0700 (PDT)
    Received-SPF: pass (google.com: domain of update+hlz=pvvf@facebookmail.com designates 66.220.144.166 as permitted sender) client-ip=66.220.144.166;
    Authentication-Results: mx.google.com;
    spf=pass (google.com: domain of update+hlz=pvvf@facebookmail.com designates 66.220.144.166 as permitted sender) smtp.mail=update+hlz=pvvf@facebookmail.com;
    dkim=pass header.i=@facebookmail.com
    Return-Path:
    DKIM-Signature: v=1; a=rsa-sha256; d=facebookmail.com; s=s1024-2011-q2; c=relaxed/simple;
    q=dns/txt; i=@facebookmail.com; t=1363071797;
    h=From:Subject:Date:To:MIME-Version:Content-Type;
    bh=hdXDOK8tI4ZUVZilKWPHMuDrgG7PKdg7P5mRJgYtLuw=;
    b=KdokOP9KQWxDMHshbnYnB/fQWnkcxUKJsaM97Imll43aRyWoqsSoWGGRbv/k2xVK
    hE8gseBTQ0eP32HFpMlf+ScpNyAE/GtvipelCfcesu1KJ6TYYB7XnA5OSX4/PXcL
    xbXT3RsLmz+I0KtteVPzPiHfjJF+CcMSyQvYkRNhneo=;
    Received: from [10.66.176.56] ([10.66.176.56:65316])
    by smout021.snc6.facebook.com (envelope-from )
    (ecelerity 2.2.2.45 r(34222M)) with ECSTREAM
    id 85/7B-17210-533DE315; Tue, 12 Mar 2013 00:03:17 -0700
    X-Facebook: from zuckmail ([MTI3LjAuMC4x])
    by async.facebook.com with HTTP (ZuckMail);
    Date: Tue, 12 Mar 2013 00:03:17 -0700
    To: Archie Garga-Richardson
    From: “Facebook”
    Reply-to: noreply
    Subject: scamFRAUDalert, you have 1 friend request and 2 messages
    Message-ID:
    X-Priority: 3
    X-Mailer: ZuckMail [version 1.00]
    Errors-To: update+hlz=pvvf@facebookmail.com
    X-Facebook-Camp: stale_email
    X-Facebook-Notify: stale_email; mailid=7a8d063G30855ac9G0G2b
    X-FACEBOOK-PRIORITY: 1
    X-Auto-Response-Suppress: All
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    boundary=”b1_d3ebcb00f41c46720360224fc7f78ead”

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: