SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #238814 - VERIFY YOUR MAIL BOX IMMEDIATELY***

Email info

The email was sent on 2018-01-12 17:41:18 and appeared to be from info@handytoolspiping.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to info@handytoolspiping.com which was the scammer's actual email address.
It was probably sent from in Cairo/Giza/Qalyubia, Location found from phone number in email

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

ABUSE REPORT for ?Roto-Rooter plumbing service? ; ?handy tools, piping materials? <info@handytoolspiping.com> and ?Net3? new buziness phishing support, with Mail Box server scam with ?ipower.com? collusive domain name!

New Complaint for X? harassement by the same old crazy ?VERIFY YOUR MAIL BOX? Romance scam of phishing beggar industry !

Send again many time a day ! by the same most stupid beggar scammer team to some haked addresses of same ?lagoon.nc? domain name ! managed by a jurist desk !!

And with ?Unified Layer?; ?Net3 / ColoCrossing?; ?Google?; ?ServInt? scam collusive ISP and host scammers !!

after many last abuse repport ???

See above new header message.


































Please,

close addresses and accounts of this beggar scammer and haker addresses !


































Same old crazy phishing subject : ?VERIFY YOUR MAIL BOX IMMEDIATELY***? ? ! ?

































New fany unknow alias Server and scammer sender: "Mail Server"


































New authenticated_id and Sender: 162-214-27-223.ipower.com: with Discard Email of Roto Rooter Email: <info@handytoolspiping.com>

New Fake or Discard Email sender address : admin@mailadmin.com

New Email reply address bostnachi@gmail.com

New IP address authenticated Sender: [162.214.27.223]
New IP address ISP sender : [23.249.162.106]
New IP addresss for reply Email: [64.233.186.27]































New IP address Domain name ?mailadmin.com? : [209.50.249.154]



New Message-Id : <20180112004806.70C3DECAE1B64681@mailadmin.com>








New phishing link for infected website : //ia601503.us.archive.org/12/items/ieXuiGoGbYiN/ieXuiGoGbYiN.html?icx=81651&pgr=ug761&email=cabinet-batalard@lagoon.nc&isc=90t67&lMx=298785>























Collusive scam-phishing supports, ISP, server, host, domain name, organization...


?Unified Layer?; ?Net3 / ColoCrossing?; ?Google?; ?ServInt?

See above :
- traking IP addresses of this old crazy beggar by scam-phishing
- header message of last scam-phishing send again to same ?lagoon.nc? domain name pirated addresses !


Thank you,




secretary : BATALARD Barrister jurist Office

































Copy Cc and Cci : Jurist desk customers - Social Networks - - ScamWarners ? ISP / Server ? Roto-Rooter plumbing service - handy tools, piping materials


-------------------------------------------------------------------------------------

IP Address 162.214.27.223
Decimal Representation 2731940831
ASN AS46606
City Provo
Country United States of America
Country Code US
ISP Unified Layer
Latitude 40.2181? (40? 13? 5? N)
Longitude -111.6133? (111? 36? 47? W)
Organization Unified Layer
Postal Code 84606
Is Private IP Address no
PTR Resource Record 162-214-27-223.unifiedlayer.com
Is Reserved IP Address no
State Utah

-------------------------------------------------------------------------------------

IP Address 23.249.162.106
Decimal Representation 402236010
ASN AS36352
City Buffalo
Country United States of America
Country Code US
ISP Net3
Latitude 42.9864? (42? 59? 11? N)
Longitude -78.7279? (78? 43? 40? W)
Organization ColoCrossing
Postal Code 14221
Is Private IP Address no
PTR Resource Record
Is Reserved IP Address no
State New York
State Code NY

-------------------------------------------------------------------------------------

IP Address 64.233.186.27
Decimal Representation 1089059355
ASN AS15169
City
Country United States of America
Country Code US
ISP Google
Latitude 34.0544? (34? 3? 15? N)
Longitude -118.2440? (118? 14? 38? W)
Organization Google
Postal Code
Is Private IP Address no
PTR Resource Record cb-in-f27.1e100.net
Is Reserved IP Address no
State California
State Code CA

-------------------------------------------------------------------------------------

IP Address 209.50.249.154
Decimal Representation 3509778842
ASN AS25847
City Reston
Country United States of America
Country Code US
ISP ServInt
Latitude 38.9311? (38? 55? 51? N)
Longitude -77.3489? (77? 20? 56? W)
Organization ServInt
Postal Code 20191
Is Private IP Address no
PTR Resource Record ks2.konsul.com
Is Reserved IP Address no
State Virginia
State Code VA

-------------------------------------------------------------------------------------

Return-Path: <admin@mailadmin.com>
X-Original-To: cabinet-batalard@lagoon.nc
Delivered-To: cabinet-batalard@lagoon.nc
Received: from mailcluster.lagoon.nc (unknown [202.22.159.27])
by bowen.lagoon.nc (Postfix) with ESMTPS id 450F213C480
for <cabinet-batalard@lagoon.nc>; Fri, 12 Jan 2018 11:48:03 +1100 (NCT)
Received: from mx1.lagoon.nc ([202.22.159.142] helo=mx.lagoon.nc)
by mx02.lagoon.nc with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.72 (FreeBSD))
(envelope-from <admin@mailadmin.com>)
id 1eZnVr-000FmY-7G
for cabinet-batalard@lagoon.nc; Fri, 12 Jan 2018 11:48:03 +1100
Received: from [162.214.27.223] (helo=162-214-27-223.ipower.com)
by mx.lagoon.nc stage1 with esmtp
(Exim MailCleaner)
id 1eZnVn-0006nB-85
for <cabinet-batalard@lagoon.nc>
from <admin@mailadmin.com>; Fri, 12 Jan 2018 11:47:59 +1100
Received: from [23.249.162.106] (port=60648 helo=mailadmin.com)
by 162-214-27-223.ipower.com with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <admin@mailadmin.com>)
id 1eZnVj-0006S9-In
for cabinet-batalard@lagoon.nc; Fri, 12 Jan 2018 00:47:56 +0000
X-MailCleaner-SPF: none
From: Mail Server <admin@mailadmin.com>
To: cabinet-batalard@lagoon.nc
Subject: VERIFY YOUR MAIL BOX IMMEDIATELY***
Date: 12 Jan 2018 00:48:07 -0800
Message-ID: <20180112004806.70C3DECAE1B64681@mailadmin.com>
MIME-Version: 1.0
Disposition-Notification-To: bostnachi@gmail.com
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 162-214-27-223.ipower.com
X-AntiAbuse: Original Domain - lagoon.nc
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - mailadmin.com
X-Get-Message-Sender-Via: 162-214-27-223.ipower.com: authenticated_id: info@handytoolspiping.com
X-Authenticated-Sender: 162-214-27-223.ipower.com: info@handytoolspiping.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-MailCleaner-RDNS: invalid reverse DNS for 162.214.27.223
X-Spamc: too big (28805 > 22000)
X-MailCleaner-Information: Please contact tech@offratel.net for more information
X-MailCleaner-ID: 1eZnVn-0006nh-Sa
X-MailCleaner: Not scanned: please contact tech@offratel.net for details
X-MailCleaner-SpamCheck: not spam, Spamc (too big)
X-MailCleaner-ReportURL: https://202.22.159.142/rs.php
X-Antivirus: AVG (VPS 170616-2, 17/06/2017), Inbound message
X-Antivirus-Status: Clean




6525691ydp7bb2e081yiv4090571114ydpccbc1f1eyiv7460464306gmail-.........
.............................................................................................................
RIGHT: 0px; background-size: auto"=20
href=3D"http://ia601503.us.archive.org/12/items/ieXuiGoGbYiN/ieXuiGoGbYiN.h=
tml?icx=3D81651&pgr=3Dug761&email=3Dcabinet-batalard@lagoon.nc&=
isc=3D90t67&lMx=3D298785" shape=3Drect=20
rel=3Dnofollow target=3D_blank data-saferedirecturl=3D"https://www.google.c=/
om/url?hl=3Den&q=3Dhttp://ia601503.us.archive.org/12/items/ieXuiGoGbYiN=
/ieXuiGoGbYiN.html?icx........................................................................
.........................................................................................................
style=3D"FONT-SIZE: 10pt">Blacklist Reason: Policy Violation<=
/DIV>
>
--------------------------------------------------------------------------------------------------------------------
From: Mail Server
Sent: Friday, January 12, 2018 7:48 PM
To: cabinet-batalard@lagoon.nc
Subject: VERIFY YOUR MAIL BOX IMMEDIATELY***

Server Message

Hello cabinet-batalard@lagoon.nc ,

Your email account has been blacklisted, because you are required to re-verify your account.

Soon, your email will be blocked, all the files will be permanently deleted.

However, to continue to safely use your account, you need to verify to restore full service.

Click Here to Verify >>>


Sincerely,
Mail security team


Service Information
------------------------------ -------------
Product: Regular Windows HTTP protocol
User: cabinet-batalard@lagoon.nc
Blacklist Reason: Policy Violation



---
Cet email a fait l'objet d'une analyse antivirus par AVG.
http://www.avg.com

SpamAssassin Report (spam score: )





Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer