You have a new direct message from Facebook Technical Support

Email Header Analysis

IP Address:  87.253.162.170 (87.253.162.170)
IP Address Country:  Germany
IP Continent:  Europe
IP Address City Location:  Tuchenbach
IP Address Region:  Bayern
IP Address Latitude:  49.5333,
IP Address Longtitude:  10.8667
Organization:  Ahrensburg, Germany

___________________________________

Email Header Analysis

IP Address:  83.16.210.157 (aic157.internetdsl.tpnet.pl)
IP Address Country:  Poland
IP Continent:  Europe
IP Address City Location:  Kalisz
IP Address Region:  Wielkopolskie
IP Address Latitude:  51.7611,
IP Address Longtitude:  18.091
Organization:  Polish Telecom

_______________________________

notification5

From Facebook Technical Support Fri Mar 15 18:54:32 2013
X-Apparently-To: scamFRAUDalert via 98.138.213.211; Fri, 15 Mar 2013 12:54:33 -0700
Return-Path: <foobar@aic157.internetdsl.tpnet.pl>
X-YahooFilteredBulk: 83.16.210.157
Received-SPF: none (domain of aic157.internetdsl.tpnet.pl does not designate permitted sender hosts)
X-YMailISG: hDNhEeUWLDsd.k5a1eCDk_CsQnuDSTbpWMGbhYIiLYGD_0K9
tZxCsYgFZ0d1Odo44CdWauSVWZgVKb3uGc539cKow4Vj1oIkWqo9l92AASXY
aRE6_hi2hi4yDE2uZQUnqnVC7qgZPk0mF5hz0qw57hhbMNsFd8NM7Tsm1wXC
tElN7CB7diy_qXEufd0oF59Axz3iODNo0DJo07JE8g3W4p7w9JTDOYvUDLN4
qpjqAcBJHvFE_hOkQif2bOC2NyLW._qR2qUps_JO_yByoQPB9T7ZylWqMGUt
AwSRTZmetySU5qrFcntsXAdqHEWa00XXzZrt_rzWy0xR8MoQSru7hzTqHyr8
9d8YL6z.F3TRqn.2U8MTR2XNTbQUNAHh942EHtWnh6l0HUR0rdFhgwS911a.
Dwvz7L.TAZPFa4bPAfEihSvvkxoC3lb0ETjxAapDd_7GsunRKUXBovwz74Gp
NeLIoN0olll1aU8W_P3oLeT4w0kdcFoC_m3MXR2wPYzEGJvUx_6zhydRTHTI
KZtPty__IeQDWwsSKUSmO7XcXc.ZocIGAfDcALunQKrRaTZvwQuteouovQ5j
2LvnOJUhycurKWg8H2Ls6HdO1wIPw0.Sk9V80eFWAoAgFOSzSSvYQPQMIGFX
60vYEYtNqSM30LUrrCynfFOgo.cc8KmWzxOpu3eiNi8cECkwOGOcDkn.dG7Z
X6to2Y1mAeZohY83FhJWNIHzjzasOuwSCEK8AvKjNYUySa3P2xHwDgtqR3ss
CeccrxV4ySP748iahZH8rstW9lXuxzV1OqQjfslosycLHasv8tEHcUvF.5Zg
xnCzLGoLco3erjCWOEYn5p0djjUcwFqI69xeMTycSumfsuMFGKBFw8m6jPry
DFmEK5lF8AVhLFnY1bst6dway0hBl6P_RrIoTbJNnoWYkC5UwVAj8zk8UrQZ
oVq.pUZaybM_dBGChflQPOQ5JrFiDlPFUzN_8T7w_94ujRZ5U2JABLAnT8SL
aOYzXiU9HgS4q0csHbNSrffzMHxXEKoR2OEsS5SJnPD_LgBsZtuOYeiw0TmP
xVatqe.edXKJhIsCAfPGuGQxHhcRYQdBzcS_G_cBX_NSiiS6bunE4DAduodS
4VZUfcNZ2tP0hcrgmbIdXp.GNBay7Plq9usnAVuIy60xqgPH..lm0.iJeMGF
zRkx3lAobOsqOpPhYEAo1nLXfZ62pzGsP9VYh_LZ5j3vOsM5lDxXWCk-
X-Originating-IP: [83.16.210.157]
Authentication-Results: mta1285.sbc.mail.gq1.yahoo.com from=aic157.internetdsl.tpnet.pl; domainkeys=neutral (no sig); from=aic157.internetdsl.tpnet.pl; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO aic157.internetdsl.tpnet.pl) (83.16.210.157)
by mta1285.sbc.mail.gq1.yahoo.com with SMTP; Fri, 15 Mar 2013 12:54:33 -0700
Date: 15 Mar 2013 20:54:32 -0500
To: scamFRAUDalert
From: Facebook Technical Support <foobar@aic157.internetdsl.tpnet.pl>
Subject: You have a new direct message from Facebook Technical Support

Message-ID: <a9d3f-b11c3-f47d7653f@aic157.internetdsl.tpnet.pl>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Length: 5241

Related Article:

Related Article:

One thought on “You have a new direct message from Facebook Technical Support

  1. SFA Reporter says:

    Below is a TRUE FACEBOOK MESSAGE

    facebook notification alert: YOU NEED TO DO A EMAIL HEADER CHECK BEFORE CLICKING ON ONE OF THESE FAKE EMAILS.

    email header tool – ipaddresslocation.com


    Email Header Analysis
    IP Address: 66.220.144.166 (outcampmail007.snc4.facebook.com)

    IP Address Country: United States
    IP Continent: North America
    IP Address City Location: San Francisco
    IP Address Region: California
    IP Address Latitude: 37.7749,
    IP Address Longtitude: -122.4194
    Organization: Facebook
    ______________________

    Delivered-To: scamfraudalert@gmail.com
    Received: by 10.204.81.74 with SMTP id w10csp124150bkk;
    Tue, 12 Mar 2013 00:03:20 -0700 (PDT)
    X-Received: by 10.68.189.137 with SMTP id gi9mr4823361pbc.118.1363071799322;
    Tue, 12 Mar 2013 00:03:19 -0700 (PDT)
    Return-Path:
    Received: from mx-out.facebook.com (outcampmail007.snc4.facebook.com. [66.220.144.166])
    by mx.google.com with ESMTP id zz9si27632143pbc.329.2013.03.12.00.03.18;
    Tue, 12 Mar 2013 00:03:19 -0700 (PDT)
    Received-SPF: pass (google.com: domain of update+hlz=pvvf@facebookmail.com designates 66.220.144.166 as permitted sender) client-ip=66.220.144.166;
    Authentication-Results: mx.google.com;
    spf=pass (google.com: domain of update+hlz=pvvf@facebookmail.com designates 66.220.144.166 as permitted sender) smtp.mail=update+hlz=pvvf@facebookmail.com;
    dkim=pass header.i=@facebookmail.com
    Return-Path:
    DKIM-Signature: v=1; a=rsa-sha256; d=facebookmail.com; s=s1024-2011-q2; c=relaxed/simple;
    q=dns/txt; i=@facebookmail.com; t=1363071797;
    h=From:Subject:Date:To:MIME-Version:Content-Type;
    bh=hdXDOK8tI4ZUVZilKWPHMuDrgG7PKdg7P5mRJgYtLuw=;
    b=KdokOP9KQWxDMHshbnYnB/fQWnkcxUKJsaM97Imll43aRyWoqsSoWGGRbv/k2xVK
    hE8gseBTQ0eP32HFpMlf+ScpNyAE/GtvipelCfcesu1KJ6TYYB7XnA5OSX4/PXcL
    xbXT3RsLmz+I0KtteVPzPiHfjJF+CcMSyQvYkRNhneo=;
    Received: from [10.66.176.56] ([10.66.176.56:65316])
    by smout021.snc6.facebook.com (envelope-from )
    (ecelerity 2.2.2.45 r(34222M)) with ECSTREAM
    id 85/7B-17210-533DE315; Tue, 12 Mar 2013 00:03:17 -0700
    X-Facebook: from zuckmail ([MTI3LjAuMC4x])
    by async.facebook.com with HTTP (ZuckMail);
    Date: Tue, 12 Mar 2013 00:03:17 -0700
    To: Archie Garga-Richardson
    From: “Facebook”
    Reply-to: noreply
    Subject: scamFRAUDalert, you have 1 friend request and 2 messages
    Message-ID:
    X-Priority: 3
    X-Mailer: ZuckMail [version 1.00]
    Errors-To: update+hlz=pvvf@facebookmail.com
    X-Facebook-Camp: stale_email
    X-Facebook-Notify: stale_email; mailid=7a8d063G30855ac9G0G2b
    X-FACEBOOK-PRIORITY: 1
    X-Auto-Response-Suppress: All
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    boundary=”b1_d3ebcb00f41c46720360224fc7f78ead”

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s