Facebook

Garreg Ddu

Gweinyddwr
Staff member
The email below has a link to a page:

http://tgs klin.ru/images/afforded php which will try to download a virus to your computer.

PLEASE DO NOT CLICK ON THE LINK!


X-SID-PRA: comercial@huecofina.es
Received: from h01.diagonal237.net ([62.81.252.91]) by BAY004-MC5F5.hotmail.com with Microsoft SMTPSVC(7.5.7601.22751);

Origin IP Address = 62.81.252.91 = Concesiones Asociadas SL, Madrid, SPAIN.

Subject: ******* Shipwreck you have 3 unread messages that will be deleted in a few days excellency
Date: Sat, 28 Mar 2015 17:52:30 +0000
To: ***********
From: Facebook Accounts <comercial@huecofina.es>

You haven't been to Facebook for a few days, and a lot happened while you were away.

you have 3 unread messages that will be deleted in a few days

http://tgs klin ru/images/afforded php
View messages
Go to Facebook
 

Sapphire's Strike

Administrator
Staff member
Received from: 134.63.2.21, USA, Oregon, Tektronix
Return-Path: <8a1ztr3prriwfca3zt4pjhh@6d05929.huyhgstdrtdgc.com>
Date: Fri, 24 Jun 2016
Subject: FB Account Hacked
From: "FB Support" <8a1ztr3prriwfca3zt4pjhh@6d05929.huyhgstdrtdgc.com>

There is reason to believe your Focebook account has been hacked. A virus may have been placed on your computer. Please contact us ASAP to get the problem fixed and your computer cleaned so this does not happen again.

The phone number is: 8889941103

The above telephone number is also used here: http://antifraudintl.org/threads/device-activity.106017/
 

Central Scrutinizer

Administrator
Staff member
From: 94.76.201.103,
UK, Simply Transit Ltd

Return-Path: <cortin@grnmail.com>
Subject: You have messages that will be deleted soon cogitates
From: Notification+Facebook <cortin@grnmail.com>
Date: Thu, 13 Jul 2017

You haven't been to Facebook for a few days, and a lot happened while you were away. You have messages that will be deleted soon

View messages http://hhyun.com/data/simultaneously.php

Go to Facebook

This message was sent to ......@yahoo.com. If you don't want to receive these emails from Facebook in the future, please unsubscribe.
 

Dororo

Administrator
Staff member
Return-Path: <cruz@hudco.com>
Received: from vms172105.mailsrvcs.net (vms172105pub.verizon.net [206.46.172.105])
Date: Sun, 25 Jun 2017
From: Dennis Turner Support <cruz@hudco.com>
Message-id: <f479e2-de33483dace8@hudco.com>
Subject: Somebody has been posted your photos.

f Facebook You have notifications pending.
A lot has happened since you last logged in. Here are some messages you've missed.

Thank you for confirming receipt.
<http://alohaworldmarketing.com/wp-content/plugins/laceration.php> 4 notifications

More information <http://alohaworldmarketing.com/wp-content/plugins/laceration.php> View notifications <http://alohaworldmarketing.com/wp-content/plugins/laceration.php>

This mail was sent to ........... Please unsubscribe <http://alohaworldmarketing.com/wp-content/plugins/laceration.php> if you don't want to receive these mail in the future. Facebook, Inc., Attention: Community Support, 1 Hacker Way, Menlo Park, CA 94025
 

Godzilla

Administrator
Staff member
Return-Path: <francis.young@innovex.com>
Received: from www.sorgem.com ([31.193.128.230]) by vms172087.mailsrvcs.net
Date: Fri, 23 Jun 2017
Subject-Cummins-Impulses: 2a17974c7
From: Bryan Parker Support <francis.young@innovex.com>
Subject: You have private messages.

f Facebook You have pending notifications.
A lot has happened since you last logged in. Here are some notifications you've missed.
Bryan Parker, Support

Now you can manage your account. <http://www.pipiltincocoa.com/uploads/files/allots.php> 1 messages

Get more information <http://www.pipiltincocoa.com/uploads/files/allots.php> View messages <http://www.pipiltincocoa.com/uploads/files/allots.php>
This mail was sent to bieneman@verizon.net. Please unsubscribe <http://www.pipiltincocoa.com/uploads/files/allots.php> if you don't want to receive these mail in the future. Facebook, Inc., Attention: Community Support, 1 Hacker Way, Menlo Park, CA 94025
 

Miyuki

Administratrix
Staff member
Return-Path: <eagerbill@netexperts.co.uk>
Date: Mon, 10 Jul 2017
Message-ID: <83f5b.82e2846d.2d27@netexperts.co.uk>
Subject: You have new messages
From: Kristine Jackson Assistant manager <eagerbill@netexperts.co.uk>

f Facebook You have new messages
A lot has happened on Facebook since you last logged in. Here are some messages you've missed from your friends.
Kristine Jackson, Assistant manager
You now have all your data transferred.
1 notifications http://ibmgroupbd.com/dfdfdfdfdsfsdfsdfsdfsdf/mellow.php

Please unsubscribe http://ibmgroupbd.com/dfdfdfdfdsfsdfsdfsdfsdf/mellow.php> if you don't want to receive these mails in the future. Facebook, Inc., Attention:
Community Support, 1 Hacker Way, Menlo Park, CA 94025
 

The Doctor

Administrator
Staff member
Received: from appportal.rect.ucv.ve [190.169.30.52]
Date: Tue, 25 Jul 2017
From: Security center <craig@elcaminohospital.org>
Subject: Facebook Security
Message-ID: <5bbd99.262cfc5ab@elcaminohospital.org>

Hi We received a request to reset your Facebook password. Click here to change your password. Altern atively, you can enter th e following password reset code: 2429125 Didn't request this change? If you didn't request a new password, let us know .

We received a request to reset your Facebook password.

Click here to change your password. http://contalexsolutions.ro/microprogrammed.php

Alternatively, you can enter the following password reset code:
2429125
Didn't request this change?
If you didn't request a new password, let us know http://contalexsolutions.ro/microprogrammed.php
 

Dororo

Administrator
Staff member
Return-Path: <gzmvqv@klxdhgjd.com>
Received: from (HELO theaterdiespur.de) (87.106.64.76)
Date: Sat, 19 Aug 2017
From: Notification <gzmvqv@klxdhgjd.com>
Subject: 3 messages marked as unread rush
Message-ID: <53f6-7f97fec32ab34@theaterdiespur.de>

Here's some activity you may have missed.
3 messages marked as unread
View Messages http://www.topecon.com/electronics.php

See All Notifications
This message was sent to ....@yahoo.com. If you don't want to receive these messages in the future, please unsubscribe.
 

Miyuki

Administratrix
Staff member
Return-Path: <globat.43@lotto-mail.com>
Message-ID: <15daa2.bf6827bc7b8@lotto-mail.com>
From: SupportFacebook <globat.43@lotto-mail.com>
Date: Sat, 29 Jul 2017
Subject: Support

Here's some activity you may have missed.

3 messages that must be read <http://s389370725.mialojamiento.es/inaccuracy.php>

<http://s389370725.mialojamiento.es/inaccuracy.php> View Messages

See All Notifications
 

Miyuki

Administratrix
Staff member
From: 82.196.237.165,
UK, London , Secura Hosting Ltd

Return-Path: <flaktenn@home.se>
Date: Mon, 21 Aug 2017
From: Support Facebook <flaktenn@home.se>

facebook

You haven't been to Facebook for a few days, and a lot happened while you were away.

Your unread messages will be deleted soon <http://highwaypolice-sct.com/administrator/components/requesters.php>

View messages <http://highwaypolice-sct.com/administrator/components/requesters.php>
Go to Facebook <http://highwaypolice-sct.com/administrator/components/requesters.php>
This message was sent to .......@yahoo.com. If you don't want to receive these emails from Facebook in the future, please unsubscribe <http://highwaypolice-sct.com/administrator/components/requesters.php> .
Facebook, Inc. Attention: Department 415 P.O Box 10005 Palo Alto CA 94303
 

The Doctor

Administrator
Staff member
Return-Path: <craig@elcaminohospital.org>
Date: Tue, 25 Jul 2017
From: Julie Duncan Security center <craig@elcaminohospital.org>
Subject: Facebook Security
Message-ID: <5bbd99.262cfc5ab@elcaminohospital.org>

Hi

We received a request to reset your Facebook password.

Click here to change your password. <http://contalexsolutions.ro/microprogrammed.php>

Alternatively, you can enter the following password reset code: 2429125

Didn't request this change?
If you didn't request a new password, let us know <http://contalexsolutions.ro/microprogrammed.php>
 
CMM-sender-ip: 213. 155. 103. 107 - TURKEY
From: UpdatesFacebook <fettes @ alphasmart .com>

---
facebook
Here's some activity you may have missed.
2 private messages waiting to be read
View Messages (http: //www. skybornenterprises. com/hairs. php)
See All Notifications

This message was sent to XXX If you don't want to receive these messages in the future, please unsubscribe.
--

skybornenterprises. com (CONTAIN MALWARE)
Website Information
Analysis Date 8 months ago
Safety Reputation 1/34
Domain 1st Registered 2014-01-08 (4 years ago)
Server Location
(US) United States
Advertisement
Safety Scan Report
AVGThreatLabs View more details...
 

Miyuki

Administratrix
Staff member
Return-Path: <gadbee@kezomail.com>
Received: from (EHLO objlabs.gr) (148.251.78.138)
Date: Sun, 20 May 2018
From: Service+Facebook <gadbee@kezomail.com>
Subject: Your messages will be deleted soon formatively

facebook

You haven't been to Facebook for a few days, and a lot happened while you were away.

Your messages will be deleted soon

View messages

Go to Facebook
 

Godzilla

Administrator
Staff member
Return-Path: <fernandodomingues@aasp.org.br>
Message-ID: <153270791381587116@webmail.mandic.com.br>
Date: Fri, 27 Jul 18
From: "Facebook Team" <fernandodomingues@aasp.org.br>
Subject: Critical Alert :

Dear Facebook User,

It looks like someone tried to make a change to your account on July 27 at 06:13 using Chrome for Windows 7 . Your account is secure; we just wanted to make sure it was really you who was connecting from a new place.

If you think it was not you, click on the below link to secure ur account

http://www.123formbuilder.com/form-3995742/Facebook-Developers

so we can walk you through a few steps to keep your account secure.

Thank you,
The Facebook Team
 
Return-Path: <zsantos@aasp.org.br>
Message-ID: <15327603151630543029@webmail.mandic.com.br>
From: "Facebook Team" <zsantos@aasp.org.br>

Dear Facebook User,

This is to inform you that we are currently updating our server to provide you with the best, fastest, most secure email service most reliable. We will be closing our previous server and you may not be able to access your email,
to avoid this disconnect you are required to click the link below and log into your account again to enable the newly improved server to identify your account .

Click the link below to update your account; http://www.123formbuilder.com/form-3998012/Facebook

Failure to do so may result in the loss of your account and can be permanently disabled.

Thank you,
The Facebook Team.
 
(118.127.5.53 - ASUTRALIA)

From: " Facebook 2 friend request" <notification+3qg4mxophn6p@pt.lu>
Return-Path: lacky@pt.lu
To: XXXX
Subject: You have notifications pending

__

facebook
Hi,
Here's some activity you have missed on Facebook.
2 friend request
Go To Facebook

See All Notifications
This message was sent to XXXX. If you don't want to receive these emails from Facebook in the future, please click: unsubscribe.
Facebook, Inc. Attention: Department 415 P.O Box 10005 Palo Alto CA 94303

Note: Al link are pointing to the url: http://purefasttrade.ru

Website AddressPurefasttrade.ru
Last Analysis4 seconds ago | Rescan
Blacklist Status2/36

EngineResultDetails
Favicon
MyWOT
DetectedView More Details
Favicon
ThreatLog
DetectedView More Details
 

Marie

Administrator
Staff member
Return-Path: <fb4@jasjas.cawstass.app>
From: Alert <fb4@jasjas.cawstass.app>
Date: Mon, 18 Nov 2019
Subject: Re: Important news for you.

Hi , A user has just signed in to your Facebook Account from a new device.
We are sending you this email to verify that it is you. 528417 Didn't request this change? If you didn't request a new password, let us know .

Facebook
 
Top