Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Mail Administrator <security_update@webmail.com>

DO NOT click on any links in these emails.

Mail Administrator <security_update@webmail.com>

Unread postby SlapHappy » Fri Jan 13, 2017 8:17 pm

* 192.230.49.45 Montgomery United States

Return-Path: <newslett@bon.bonavenue.com>
Received: from bon.bonavenue.com (bon.bonavenue.com. [198.154.196.131])
by mx.google.com with ESMTPS id b187si1305717pgc.0.2017.01.10.00.05.39
for <xxx>
(version=TLS1 cipher=AES128-SHA bits=128/128);
Tue, 10 Jan 2017 00:05:40 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of
newslett@bon.bonavenue.com designates 198.154.196.131 as permitted sender)
client-ip=198.154.196.131;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of newslett@bon.bonavenue.com
designates 198.154.196.131 as permitted sender) smtp.mailfrom=newslett@bon.bonavenue.com
Received: from newslett by bon.bonavenue.com with local (Exim 4.87) (envelope-from <newslett@bon.bonavenue.com>) id 1cQrR5-00048h-4Y for XXXXXX@gmail.com;
Tue, 10 Jan 2017 02:05:39 -0600
To: xxx
Subject: Someone Has Your Password
X-PHP-Script: newsletter.bonavenue.com/app/webroot/uploads/cgisys/swit.php for
192.230.49.45
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: Mail Administrator <security_update@webmail.com>
Reply-To: security_update@webmail.com
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: newsletter.bonavenue.com
Message-Id: <E1cQrR5-00048h-4Y@bon.bonavenue.com>
Date: Tue, 10 Jan 2017 02:05:39 -0600
X-AntiAbuse: This header was added to track abuse, please include it with any
abuse report
X-AntiAbuse: Primary Hostname - bon.bonavenue.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [508 507] / [47 12]
X-AntiAbuse: Sender Address Domain - bon.bonavenue.com
X-Get-Message-Sender-Via: bon.bonavenue.com: authenticated_id: newslett/only
user confirmed/virtual account not confirmed
X-Authenticated-Sender: bon.bonavenue.com: newslett



Security Alert


Dear xxxx
Our server detects that at 03:56 GMT today, your email account "xxx " was accessed from Kuala Lumpur, Malaysia from this IP: 115.254.224.100 address.

To keep your account safe, we strongly recommend that you change your current password immediately to a stronger and more secured combination, else you stand the risk of having your account hijacked.

Change Password
http:/ /www.ingilizceozeldersogretmeni.com/wp-content/plugins/akismet/reset/login.php?email=xxx

However, if this account was accessed by you from this location, you can ignore this warning!
Regards.
Email Administrator

This message is auto-generated from E-mail security server, and replies sent to this email can not be delivered.
This email is meant for: xxx
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 13 guests