Malware Alert - infected link in fake Google notification.

Discussion in 'Alerts!' started by Garreg Ddu, Jan 8, 2017.

  1. Garreg Ddu

    Garreg Ddu Gweinyddwr Staff Member

    The links in this email have been disabled as they lead to a site infected with a virus.

    Received: from www.x-dream-media.com ([91.250.116.92]) by COL004-MC3F10.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);
    Authentication-Results: spf=none (sender IP is 91.250.116.92)
    From: Google Reminder <eofufdkoiaahgc@activeware.com>
    Sun, 8 Jan 2017 11:59:08 -0800
    Subject: Notification message ********
    Return-Path: eofufdkoiaahgc@activeware.com
    Date: Sun, 8 Jan 2017 20:59:08 +0000
    To: ***********
    CMM-sender-ip: 91.250.116.92

    CMM-sending-ip: 91.250.116.92
    CMM-Authentication-Results: hotmail.com; spf=none (sender IP is
    91.250.116.92) smtp.mailfrom=eofufdkoiaahgc@activeware.com; dkim=none

    header.d=activeware.com; x-hmca=none header.id=eofufdkoiaahgc@activeware.com
    CMM-X-SID-PRA: eofufdkoiaahgc@activeware.com

    Origin IP Address = 91.250.116.92 = Host Europe GmbH, Germany, Nordrhein-Westfalen, Koeln



    Allison Hughes (Gmail Support) has sent you a message:

    1/08/2017
    Message status: undeliverable.

    More information -- link leads to a virus infected hacked page on "cocaineaddicts.org", hosted at IP address 143.95.150.13 in Los Angeles, CA, USA


    Don't want occasional updates about Google activity? Change what email Gmail Service sends you.
     

Share This Page