You have a new personal message from Facebook Support

Email Header Analysis

IP Address:  64.34.138.101 (plesk1.mitconsulting.ca)
IP Address Country:  Canada
IP Continent:  North America
IP Address City Location:  Toronto
IP Address Region:  Ontario
IP Address Latitude:  43.6667,
IP Address Longtitude:  -79.4167
Organization:  Wyzdom Technologies

_____________________________________

From Facebook Support Tue Mar 12 06:26:33 2013
X-Apparently-To: scamFRAUDalert via 98.138.213.211; Tue, 12 Mar 2013 05:26:04 -0700
Return-Path: <billing@plesk1.mitconsulting.ca>
X-YahooFilteredBulk: 64.34.138.101
Received-SPF: none (domain of plesk1.mitconsulting.ca does not designate permitted sender hosts)
X-YMailISG: FT3wha0WLDuJZYdzM1ZNI8tDZHtfumy9fD3Cf32O7m4UQM2Y
jhtLh3EJgW8aHwYVZ8CUWXCenUNHA2TG_UwYsvLBrVUOycdIGonRc8hPmTHF
k7gbMrGems7APU9O9mZC1NTfLo9ggPv8x5U0C83f2egWovEFqJUOf7BSWF9x
vlj3Ng4YhbFNAEPz8.ZBKGjIWz0eyXCxY9cq1.0xYcUecarRo9Zrxn4AT136
QNuHvBdh42K.njtSodICQE4RWHJFbBnCLKiKsJAZjJ0vaG4e4NiW2LxiEZHw
8mL6yeyJy1x68VVQ6ZIZkgFgZJYCZOQsfkoEVSRk81OmykdeHUCgMOOpC6gk
HhUB3hj_oyn73SK7ym8NMASI3NX8cpAfLrQ_V.B6YrgDQxZ9lxoMWaHQw1i.
2iXw4z2RXZ5wjByHFveTJgWNzzrMC_J9myqoPe4fPDlo_of3jCEJL.EW98On
D0EWrDzA804RLH5dGHLxg8i6ornecVgJY_m..0HEeTDEwakp_M7.l0uub1nK
UaWvJUKMYziSRXwWvXrHgrl.w_HWWDOyme5gzoSSKHklXEm._h9aLYqNZgnA
q8HeaLTT182z6ZVnpOFQvlJFF0v0ENMWDHbKrzsi.WNjtkSqXrD3DkH4VMqO
VYSE91eirwWDBAACmTmoU8m3cet_SjdYjCqbCAtbfeMLm93SOUjdzYjEEhOS
YKzz5hsNEE95tv.sSfGP.H6cIvh4kukU_x28DXxHP2GAOfcQUQYn86OvH85b
G.d2602bkmf6XxGJ_jWKL1kxw12WZNQ5W3v.nxZoJ3oarfDyyWewY_GNyzSg
u.08GnCRkG245yU7gKlbboSauQpsTWl0iqdsj5sBm19orR5yH1MiBDkUpKCG
V1iNeBuqO9GMKGV0q4bu50qO5nWjXvQVbxLmtvitrryl2pNvyi1eXqwrg6k1
Jf.F2lzS.sV9axUvwe2XVnzH1CtEVAzxv3fcW.GoA1vIzPjEsy8XFbqXWvjZ
kjzntrXLiOqJWPT1YwNYK3VR7gPPPBjI5qCZQZbT8eYJFejQBokfaESU9Dzf
zP.nJngQVEAISKH7.ZPVvn9YyUxvOGuAKLGMEnc2GHBxqu2VujZxO3PBs1lD
uwp_BV7roGuAQrJrUFbMN9h_giAiFcMfMV4hTiD02pG8_b4M3gjXw9UQpSYN
Uc_EXrxdQO9IV.vsWiCXZAXmyAkynQzefd8VAikvboim1FApG1YbQ6WB9pzm
PTE4TtI0YzE9B7GaggvLX9ojtR4o9PllC0yb1vtQQeOxPHLiRCAcdZdRYXcQ

_________________________________________

Reuhv2iunx1QuL3hPUwcMpe._hHftA–
X-Originating-IP: [64.34.138.101]
Authentication-Results: mta1214.sbc.mail.gq1.yahoo.com from=plesk1.mitconsulting.ca; domainkeys=neutral (no sig); from=plesk1.mitconsulting.ca; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO plesk1.mitconsulting.ca) (64.34.138.101)
by mta1214.sbc.mail.gq1.yahoo.com with SMTP; Tue, 12 Mar 2013 05:26:04 -0700
Date: 12 Mar 2013 08:26:33 -0500
To: scamFRAUDalert
From: Facebook Support <billing@plesk1.mitconsulting.ca>
Subject: You have a new personal message from Facebook Support
Message-ID: <8fdaf_a1b97-3bf6d6dcca@billing.plesk1.mitconsulting.ca>
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
Content-Length: 5279

One thought on “You have a new personal message from Facebook Support

  1. richard baker-howard says:

    Dear Mr. Doughty,

    scamFRAUDalert do not make claims that Encarta Fine Wines Ltd. is a fraudulent company. scamFRAUDalert issues ALERTS to warn the public and companies that an impersonator has stolen their name or brand ​to carry out a scam and fraud.

    ​We apologized for the inconvenience this may have caused Encarta Fine Wines Ltd and their customers. We believe the public is best serve by our ALERTS.

    Thank you for contacting us​.

    Cordially,

    scamFRAUDalert ​
    ____________________________

    Encarta fine wines limited identity has been stolen and the fraudster is contact job seekers for employment purposes using the email address below. please contact me for further details.
    Richard on 07799 771070. rbhagencies@hotmail.co.uk

    http://www.encartafinewines.co

    Address lookup
    canonical name cf-protected-www.encartafinewines.co.
    aliases
    addresses 141.101.117.194
    141.101.116.194
    Domain Whois record

    Queried whois.nic.co with “encartafinewines.co”…

    Domain Name: ENCARTAFINEWINES.CO
    Domain ID: D42601605-CO
    Sponsoring Registrar: GODADDY.COM, INC.
    Sponsoring Registrar IANA ID: 146
    Registrar URL (registration services): http://www.godaddy.com
    Domain Status: clientDeleteProhibited
    Domain Status: clientRenewProhibited
    Domain Status: clientTransferProhibited
    Domain Status: clientUpdateProhibited
    Registrant ID: CR139111040
    Registrant Name: richard baker-howard
    Registrant Address1: 5 liberty square
    Registrant City: kings hill
    Registrant State/Province: kent
    Registrant Postal Code: me194au
    Registrant Country: United Kingdom
    Registrant Country Code: UK
    Registrant Phone Number: +7.799771070
    Registrant Email: rbhagencies@hotmail.co.uk
    Administrative Contact ID: CR139111042
    Administrative Contact Name: richard baker-howard
    Administrative Contact Address1: 5 liberty square
    Administrative Contact City: kings hill
    Administrative Contact State/Province: kent
    Administrative Contact Postal Code: me194au
    Administrative Contact Country: United Kingdom
    Administrative Contact Country Code: UK
    Administrative Contact Phone Number: +7.799771070
    Administrative Contact Email: rbhagencies@hotmail.co.uk
    Billing Contact ID: CR139111043
    Billing Contact Name: richard baker-howard
    Billing Contact Address1: 5 liberty square
    Billing Contact City: kings hill
    Billing Contact State/Province: kent
    Billing Contact Postal Code: me194au
    Billing Contact Country: United Kingdom
    Billing Contact Country Code: UK
    Billing Contact Phone Number: +7.799771070
    Billing Contact Email: rbhagencies@hotmail.co.uk
    Technical Contact ID: CR139111041
    Technical Contact Name: richard baker-howard
    Technical Contact Address1: 5 liberty square
    Technical Contact City: kings hill
    Technical Contact State/Province: kent
    Technical Contact Postal Code: me194au
    Technical Contact Country: United Kingdom
    Technical Contact Country Code: UK
    Technical Contact Phone Number: +7.799771070
    Technical Contact Email: rbhagencies@hotmail.co.uk
    Name Server: PAUL.NS.CLOUDFLARE.COM
    Name Server: LARA.NS.CLOUDFLARE.COM
    Created by Registrar: GODADDY.COM, INC.
    Last Updated by Registrar: GODADDY.COM, INC.
    Domain Registration Date: Mon Mar 18 22:08:27 GMT 2013
    Domain Expiration Date: Mon Mar 17 23:59:59 GMT 2014
    Domain Last Updated Date: Sun May 26 11:49:28 GMT 2013

    >>>> Whois database was last updated on: Tue Jun 04 03:12:15 GMT 2013 <<<<

    Network Whois record

    Queried whois.ripe.net with "-B 141.101.117.194"…

    % Information related to '141.101.112.0 – 141.101.119.255'

    inetnum: 141.101.112.0 – 141.101.119.255
    netname: CLOUDFLARE-EU
    descr: CloudFlare CDN network
    country: EU
    admin-c: CAC80-RIPE
    tech-c: CTC6-RIPE
    status: ASSIGNED PA
    mnt-by: MNT-CLOUDFLARE
    mnt-lower: MNT-CLOUDFLARE
    mnt-routes: MNT-CLOUDFLARE
    changed: david@cloudflare.com 20120810
    source: RIPE

    person: CloudFlare Administrative Contact
    address: 665 3rd Street, Suite 207 San Francisco CA 94107 US
    phone: +1-650-319-8930
    nic-hdl: CAC80-RIPE
    abuse-mailbox: abuse@cloudflare.com
    mnt-by: MNT-CLOUDFLARE
    changed: noc@cloudflare.com 20120601
    source: RIPE

    person: CloudFlare Technical Contact
    address: 665 3rd Street, Suite 207 San Francisco CA 94107 US
    phone: +1 (650) 319-8930
    nic-hdl: CTC6-RIPE
    abuse-mailbox: abuse@cloudflare.com
    mnt-by: MNT-CLOUDFLARE
    changed: noc@cloudflare.com 20120601
    source: RIPE

    % This query was served by the RIPE Database Query Service version 1.66 (WHOIS4)

    DNS records

    DNS query for 194.117.101.141.in-addr.arpa returned an error from the server: NameError
    name class type data time to live
    http://www.encartafinewines.co IN CNAME cf-protected-www.encartafinewines.co 300s (00:05:00)
    cf-protected-www.encartafinewines.co IN A 141.101.116.194 300s (00:05:00)
    cf-protected-www.encartafinewines.co IN A 141.101.117.194 300s (00:05:00)
    cf-protected-www.encartafinewines.co IN A 141.101.116.194 300s (00:05:00)
    cf-protected-www.encartafinewines.co IN A 141.101.117.194 300s (00:05:00)
    encartafinewines.co IN SOA
    server: lara.ns.cloudflare.com
    email: dns@cloudflare.com
    serial: 2013060205
    refresh: 10000
    retry: 0
    expire: 604800
    minimum ttl: 3600
    86400s (1.00:00:00)
    encartafinewines.co IN A 198.1.103.182 300s (00:05:00)
    encartafinewines.co IN RRSIG
    type covered: NSEC (47)
    algorithm: RSA/SHA-256 (8)
    labels: 2
    original ttl: 86400 (1.00:00:00)
    signature expiration: 2013-06-24 08:31:49Z
    signature inception: 2013-05-25 08:05:28Z
    key tag: 19926
    signer's name: co
    signature:
    (1024 bits)

    B6AAC864442846CE96882192B973A952
    8F55D3491CB48B582BC06C6A3717B7B2
    C71B4A21287A740036DFD5B003F78CFC
    E01C4CE91446EEB73882F7DEC64783A1
    E8286AC0A58C89AA2999C645A83F3EDC
    0782F754546E8D5977364DD8B037B38F
    D31041907778EFF69BA42720B4D173EA
    F719F3065C5A0B88CC1BD75C38481E69

    86400s (1.00:00:00)
    encartafinewines.co IN NSEC
    next domain name: encartago.co
    record types: NS RRSIG NSEC
    86400s (1.00:00:00)
    encartafinewines.co IN NS paul.ns.cloudflare.com 86400s (1.00:00:00)
    encartafinewines.co IN NS lara.ns.cloudflare.com 86400s (1.00:00:00)

    — end —

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s