Thursday, April 16, 2020

Fwd: Facebook password reset



---------- Forwarded message ----------
From: <conduck@aol.com>
Date: Thursday, April 16, 2020
Subject: Fwd: Facebook password reset
To: reportphishing@antiphishing.org, scams@fraudwatchinternational.com, emailscamalerts@gmail.com


Headers below


From: admin@spravochnikov.ru
Reply-to: corona.raja12sf@gmail.com; admin@spravochnikov.ru; ack@cordona.live; bos@harndo.com; fox@justforyou1.xyz; adm@lhajfriyen.com; contact@mptoday.co.uk; info@worldometers.info; admin@spravochnikov.xyz
To: conduck@aol.com
Sent: 4/15/2020 2:34:48 PM Pacific Standard Time
Subject: Re: Facebook password reset

facebook
 
Hi conduck,
Your Facebook password was reset using the email address conduck@aol.com on wednesday, abril 15, 2020 at 5:24pm (MDT). 
Operating system: Mac OS X
Browser: Chrome
IP address: 97.123.28.2
Estimated location: Albuquerque, NEW MEXICO, US
If you did this, you can safely disregard this email.
If you didn't do this, please secure your account, By sending this code:BTYFHUL . From here.
 
Thanks,
The Facebook Security Team
 
This message was sent to conduck@aol.com at your request.
Facebook, Inc., Attention: Department 415, PO Box 10005, Palo Alto, CA 94303

X-Apparently-To: conduck@aol.com; Wed, 15 Apr 2020 21:34:48 +0000
Return-Path: <bounce@newsday.uno>
Authentication-Results: mta4081.aol.mail.bf1.yahoo.com;
dkim=neutral (no sig) header.i=@spravochnikov.ru;
spf=none smtp.mailfrom=@newsday.uno;
dmarc=NULL(p=NULL sp=NULL dis=NULL) header.from=spravochnikov.ru;
X-YahooFilteredBulk: 62.171.158.223
Received-SPF: none (domain of newsday.uno does not designate permitted sender hosts)
X-YMailISG: usG11TwWLDvwaC0zwFl5Gi8D.EHXRW1qXwfYkE_QLY6J.23X
IiOiIWAzrszV69KzYPL8lPLxFAsa.ISxmMzak8wxJnqlLucgmHjPx9RkPHBd
VVyKFlGitxmS3uJdzxd2Hh6XEmL9wPcCSDoaAHXTLNSdOeVt9pRH.nLikTtt
xanKHAv0.kqf6jcVkmh3oy7tHwSnSS5wngX7kdvrEgZzvcbNwfooiZpUvCZD
g9AY487gVWMTfoU_mbCm24F2YyXYTubFk6qzggURq5RKgH73JsgnMhkyx6Ve
RU4vW0pzi1.BB6plxt01OD0pxXgKF9mpg0PJMPylsoJUTuqgQhq7XG3z_huC
hINpcPAifzkRN.zonyvNt1MjjgCc1WePdoKvuSLIwKhs93Rwaloj.CjlWQ_b
O9f1DwdQfx.RbcH2XR465t8_kUm0zBC3Dqb_8IlZ9Np7aFsi2ndyoqSnGxVk
xu1m6nOGJERUYtb26e0NSBvG6d52xEHFp1nx7p3aG84lqHjGAkbVSvo.YHlO
IOL083F3lhELwQ.Agj2BSe4ictCHG6FjtXP7NTrsKkjAYq5RjN1y.krY7WOo
QeCcJndMTgQCzHUX3x3WaWG9brc_OEGREdr_37FtQXCFF13qiXYnxYctW6gM
RORuyU8tYhb6RMbntJZ1kBPLBYefJtAadmGXwAlTe7OtsbBwDd2ZeUZ9Uq2g
ZFF5OiHIATCa1TRr_4tStJ8ADJpwMn6yZIWH0_2RHL9mLa9eM.ti4RLKFYpP
wCMg5ch4pGkiKTLGV4qMhMRToQ2Q31v_OYY6GIxTiJtn.fJqO.kYH3XcVfPI
B_aKVi6Qw5mAIcnUByabrA7GlgrWr_qy_8M93FOVVfW.z5UMK2o1AVkAcaLX
8IUKfHln4p8MgnXfsfyHeh_y05l2x_vvyyFvRzlzvonXA63Bm7k2W5oJ5RKm
JpGuiSs51wDJLIDwxsHlAgU0jn_SmuMZBGUZXd3hRyYGoArMZblmJ2lh8QE4
KRH7neFR.m7l4ccXu8oOUwnxz7t4Td3Bo5CKG8ut7Lz7PYuvo.3cpPCEqFfg
Jgm2sFgSwssyR0buM_FOlhKTGxWh2dITtnNRo1vNq_L3XYBeMHnnPuYzhsJN
IM58h.EtWnHeRvjoRNBZqXYXJnwRMQohQnYvPpfaA8CE2Dfo0.KOuGfvKqQr
F2vq0Zmbgixrppw4E1i7swiJGvNQJLmKlgsagjHvkj6IcOKh9WSyGE9N1FXG
NP7CYWZGTQc2baGseNfcd_fYWZ4b8x0dtjE7t4m7hqYhiffJKpOScoUV1GLd
SMV3zLq03EcxHJrFVWI_ZDRa7Q5C23qVqOY.UTMQJDAL10ffyt7NvOzEzxZu
bmbxmHoc8T5TKWh8uPeQ0QUg43VfaMk7Cz2YNak_uX6vk6BV8N3A_Eibg2zz
ENAfTc4KiOUGnqB5ECG_NItHR_koFYpP
X-Originating-IP: [62.171.158.223]
Received: from 10.194.221.227 (EHLO newsday.uno) (62.171.158.223)
by mta4081.aol.mail.bf1.yahoo.com with SMTP; Wed, 15 Apr 2020 21:34:48 +0000
From: Facebook <admin@spravochnikov.ru>
Subject: Re: Facebook password reset
MIME-Version: 1.0
Reply-To: <corona.raja12sf@gmail.com>,<admin@spravochnikov.ru>,<ack@cordona.live>,<bos@harndo.com>,<fox@justforyou1.xyz>,<adm@lhajfriyen.com>,<contact@mptoday.co.uk>,<info@worldometers.info>,<admin@spravochnikov.xyz>
Received: from newsday.uno (62.171.158.223) by newsday.uno id QSPFcctSwolU for <conduck@aol.com>; Wed, 15 Apr 2020 17:33:32 +0200 (envelope-from <return@newsday.uno>
To: conduck@aol.com
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
Date: Wed, 15 Apr 2020 17:33:32 +0200
Content-Length: 7154
<img alt='' src='http://newsday.uno/r.php?t=o&d=21818&l=601&c=31403' width='1px' height='1px' style='visibility:hidden'/>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional //EN"><html><head><title>Facebook</title><meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
</head><body style="margin:0;padding:0;" dir="ltr"><table cellspacing="0" cellpadding="0" id="email_table" style="border-collapse:collapse;width:98%;" border="0">
<tr><td id="email_content" style="font-family:&#039;lucida grande&#039;,tahoma,verdana,arial,sans-serif;font-size:12px;">
<span style="width:620px;color:#FFFFFF;display:none !important;font-size:1px;"></span>
<table cellspacing="0" cellpadding="0" style="border-collapse:collapse;width:620px;">
<tr><td style="font-size:16px;font-family:&#039;lucida grande&#039;,tahoma,verdana,arial,sans-serif;background:#3b5998;color:#FFFFFF;font-weight:bold;vertical-align:baseline;letter-spacing:-0.03em;text-align:left;padding:5px 20px;"><a style="text-decoration: none;" href="mailto:corona.raja12sf@gmail.com,admin@spravochnikov.ru,jack@cordona.live,bos@harndo.com,fox@justforyou1.xyz,adm@lhajfriyen.com,contact@mptoday.co.uk,info@worldometers.info,admin@spravochnikov.xyz?subject=i didn't;&amp;body=BTYFHUL "><span style="background:#3b5998;color:#FFFFFF;font-weight:bold;font-family:&#039;lucida grande&#039;,tahoma,verdana,arial,sans-serif;vertical-align:middle; font-size:16px;letter-spacing:-0.03em;text-align:left;vertical-align:baseline;">facebook</span></a></td></tr></table>
<table cellspacing="0" cellpadding="0" width="620px" style="border-collapse:collapse;width:620px;" border="0"><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding:0px;background-color:#f2f2f2;border-left:none;border-right:none;border-top:none;border-bottom:none;"><table cellspacing="0" cellpadding="0" width="620px" style="border-collapse:collapse;"><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding:0px;width:620px;">
<table cellspacing="0" cellpadding="0" border="0" style="border-collapse:collapse;width:100%;"><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding:20px;background-color:#fff;border-left:none;border-right:none;border-top:none;border-bottom:none;"><table cellspacing="0" cellpadding="0" style="border-collapse:collapse;"><tr><td valign="top" style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding-right:15px;text-align:left;"><img src="https://fbcdn-profile-a.akamaihd.net/hprofile-ak-xap1/v/t1.0-1/c8.0.50.50/p50x50/1424309_576769302397053_1200730970_n.jpg?oh=1d77fb0ca46fa4372dde87c691021578&amp;oe=568ED175&amp;__gda__=1455494068_64931655d62841a0acf5063faae73230" style="border:0;" /></td>
<td valign="top" style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;width:100%;text-align:left;"><table cellspacing="0" cellpadding="0" style="border-collapse:collapse;width:100%;"><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding-bottom:5px;">Hi conduck,</td></tr><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding-top:5px;padding-bottom:5px;">Your Facebook password was reset using the email address <strong>conduck@aol.com</strong> on wednesday, abril 15, 2020 at 5:24pm (MDT).&nbsp;</td></tr><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding-top:5px;padding-bottom:5px;"><table cellspacing="0" cellpadding="0" style="border-collapse:collapse;margin-top:5px;margin-bottom:5px;"><tr style=""><td style="padding-left: 10px"><span style="color:#808080;">Operating system: </span></td><td style="padding-left: 10px">Mac OS X</td></tr><tr style=""><td style="padding-left: 10px"><span style="color:#808080;">Browser: </span></td><td style="padding-left: 10px">Chrome</td></tr><tr style="">
<td style="padding-left:
Facebook (https://www.facebook.com/)
Facebook รข€" log in or sign up
Create an account or log in to Facebook. Connect with friends, family and other people you know. Share photos and videos, send messages and get updates.
10px"><span style="color:#808080;"> IP address: </span></td><td style="padding-left: 10px">97.123.28.2</td></tr><tr style=""><td style="padding-left: 10px"><span style="color:#808080;">Estimated location: </span></td><td style="padding-left: 10px">Albuquerque, NEW MEXICO, US</td></tr></table></td></tr><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding-top:5px;padding-bottom:5px;"><strong>If you did this,</strong> you can safely disregard this email. </td></tr><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding-top:5px;padding-bottom:5px;"><strong>If you didn&#039;t do this,</strong> please secure your account, By sending this code:BTYFHUL . <a href="mailto:corona.raja12sf@gmail.com,admin@spravochnikov.ru,jack@cordona.live,bos@harndo.com,fox@justforyou1.xyz,adm@lhajfriyen.com,contact@mptoday.co.uk,info@worldometers.info,admin@spravochnikov.xyz?subject=Hi i didn't;&amp;body=BTYFHUL " style="color:#3b5998;text-decoration:none;"><FONT size=3> From here</FONT></a>.</td></tr><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding-top:5px;padding-bottom:5px;"></td></tr>
<tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding-top:5px;">Thanks,<br />The Facebook Security Team</td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding:0px;width:620px;"><table cellspacing="0" cellpadding="0" width="100%" border="0" style="border-collapse:collapse;"><tr><td style="font-size:11px;font-family:LucidaGrande,tahoma,verdana,arial,sans-serif;padding:0;background-color:#fff;border-left:none;border-right:none;border-top:1px solid #ccc;border-bottom:none;"></td></tr></table></td></tr></table></td></tr></table><table cellspacing="0" cellpadding="0" border="0" style="border-collapse:collapse;width:620px;"><tr><td style="font-size:11px;font-family:&#039;lucida grande&#039;, tahoma, verdana, arial, sans-serif;padding:30px 20px;background-color:#fff;border-left:none;border-right:none;border-top:none;border-bottom:none;color:#999999;border:none;">This message was sent to <a href="mailto:corona.raja12sf@gmail.com,admin@spravochnikov.ru,jack@cordona.live,bos@harndo.com,fox@justforyou1.xyz,adm@lhajfriyen.com,contact@mptoday.co.uk,info@worldometers.info,admin@spravochnikov.xyz?subject=i didn't;&amp;body=BTYFHUL " style="color:#3b5998;text-decoration:none;">conduck@aol.com</a> at your request.<br />Facebook, Inc., Attention: Department 415, PO Box 10005, Palo Alto, CA 94303</td></tr></table><span style="width:620px;"><img src="https://www.facebook.com/email_open_log_pic.php?mid=522a564c54aceG5af382e61244G0G18eG4bb91453" style="border:0;width:1px;height:1px;" /></span></td></tr></table></body></html>

<img src="http://newsday.uno/img/2o5igw6t.PNG" alt="optout_image"/>

No comments:

Post a Comment