ALL SCAMS | EMAIL ADDRESS LIST | PHONE # LIST | MAP | TAG CLOUD | EMAIL HEADER ANALYSIS | IP LOCATION
ALL SCAMS | EMAIL ADDRESS LIST | PHONE # LIST | MAP | TAG CLOUD | EMAIL HEADER ANALYSIS | IP LOCATION

Click to go to Scammed.by homepage

Forward scams to - remove your name and email address first! To contact us, click 'contact us' at the bottom

Scam email #212394 - Someone has your password

Email info

The email was sent on 2017-01-12 01:55:39 and appeared to be from no-reply@accounts.google.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to no-reply@accounts.google.com which was the scammer's actual email address.
It was probably sent from 209.85.218.72 in Unknown, United States

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

Someone has your password
Hi Mugu,
Someone just used your password to try to sign in to your Google Account
[censored]@gmail.com.
Details:
Thursday, January 12, 2017 1:24 AM (Greenwich Mean Time)
Glasgow, UK*Google stopped this sign-in attempt, but you should review your
recently used devices:
REVIEW YOUR DEVICES NOW

Best,
The Google Accounts team
*The location is approximate and determined by the IP address it was coming
from.
This email can't receive replies. For more information, visit the Google
Accounts Help Center .
You received this mandatory email service announcement to update you about
important changes to your Google product or account.
2017 Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

U29tZW9uZSBoYXMgeW91ciBwYXNzd29yZA0KDQoNCg0KSGkgTXVndSwNClNvbWVvbmUganVzdCB1

c2VkIHlvdXIgcGFzc3dvcmQgdG8gdHJ5IHRvIHNpZ24gaW4gdG8geW91ciBHb29nbGUgQWNjb3Vu

dA0KbXVndS5yZWN5Y2xpbmcuaW5jQGdtYWlsLmNvbS4NCg0KRGV0YWlsczoNClRodXJzZGF5LCBK

YW51YXJ5IDEyLCAyMDE3IDE6MjQgQU0gKEdyZWVud2ljaCBNZWFuIFRpbWUpDQpHbGFzZ293LCBV

SypHb29nbGUgc3RvcHBlZCB0aGlzIHNpZ24taW4gYXR0ZW1wdCwgYnV0IHlvdSBzaG91bGQgcmV2

aWV3IHlvdXINCnJlY2VudGx5IHVzZWQgZGV2aWNlczoNCg0KUkVWSUVXIFlPVVIgREVWSUNFUyBO

T1cNCjxodHRwczovL2FjY291bnRzLmdvb2dsZS5jb20vQWNjb3VudENob29zZXI/RW1haWw9bXVn

dS5yZWN5Y2xpbmcuaW5jQGdtYWlsLmNvbSZjb250aW51ZT1odHRwczovL215YWNjb3VudC5nb29n

bGUuY29tL2RldmljZS1hY3Rpdml0eT9yZm4lM0Q1JTI2cmZuYyUzRDElMjZldCUzRDAlMjZhc2Fl

JTNEMj4NCg0KQmVzdCwNClRoZSBHb29nbGUgQWNjb3VudHMgdGVhbQ0KDQoNCg0KKlRoZSBsb2Nh

dGlvbiBpcyBhcHByb3hpbWF0ZSBhbmQgZGV0ZXJtaW5lZCBieSB0aGUgSVAgYWRkcmVzcyBpdCB3

YXMgY29taW5nDQpmcm9tLg0KDQpUaGlzIGVtYWlsIGNhbid0IHJlY2VpdmUgcmVwbGllcy4gRm9y

IG1vcmUgaW5mb3JtYXRpb24sIHZpc2l0IHRoZSBHb29nbGUNCkFjY291bnRzIEhlbHAgQ2VudGVy

IDxodHRwczovL3N1cHBvcnQuZ29vZ2xlLmNvbS9hY2NvdW50cz4uDQoNCg0KDQpZb3UgcmVjZWl2

ZWQgdGhpcyBtYW5kYXRvcnkgZW1haWwgc2VydmljZSBhbm5vdW5jZW1lbnQgdG8gdXBkYXRlIHlv

dSBhYm91dA0KaW1wb3J0YW50IGNoYW5nZXMgdG8geW91ciBHb29nbGUgcHJvZHVjdCBvciBhY2Nv

dW50Lg0KwqkgMjAxNyBHb29nbGUgSW5jLiwgMTYwMCBBbXBoaXRoZWF0cmUgUGFya3dheSwgTW91

bnRhaW4gVmlldywgQ0EgOTQwNDMsIFVTQQ0K

SpamAssassin Report (spam score: 2.6)



 pts rule name               description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP4 Message was received from an IPv4 address
0.0 TVD_RCVD_IP Message was received from an IP address
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[74.125.82.45 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.82.45 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 MIME_NO_TEXT No (properly identified) text body parts

Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer