NOTE: "Azerbaijan"?????? I had to look that one up! (https://en.wikipedia.org/wiki/Azerbaijan) Wool Flock???? The domain is registered with GoDaddy in the US. That's far far away. Don't suppose a VPN is being used here? Or, attempted? LOL "voyageprive.com" is hosted out of France. We're making our way around the world with this crook and their weak email attempt to steal from the reader by sending an infected link using bad English.
From: "Louka Mee" <Racheterfranciliensfnr@1h8wsxxxpj2.yqv.woolflock.com> To: "Smac" < >08:51:29 CDT, Monday 14 October 2019
Attachments: None
Message ID: <NM60321C64F04D85286vpg_mid@email.voyageprive.com>
Return Path: <Racheterfranciliensfnr@1h8wsxxxpj2.yqv.woolflock.com>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="b1_4ca6c5752d9bae5e272c0fcd2b05906c"
Attachments:
None
Received:
from mx1-us3.ppe-hosted.com (unknown [10.110.49.105]) by pure.maildistiller.com with ESMTPS id A421740075 for < >; Mon, 14 Oct 2019 13:51:28 +0000 (UTC)
from 1h8wsxxxpj2.yqv.woolflock.com (unknown [37.114.130.109]) by mx1-us3.ppe-hosted.com with ESMTP id 90FE19C0069 for < >; Mon, 14 Oct 2019 13:51:25 +0000 (UTC)
Hello.
Here is somewhat of news about our friends' wedding, just take a peek here my site
Faithfully, Louka Mee
Envelope Sender: <racheterfranciliensfnr@1h8wsxxxpj2.yqv.woolflock.com>
'From' Header: "Louka Mee" <Racheterfranciliensfnr@1h8wsxxxpj2.yqv.woolflock.com>
Subject: a bit of news
Timestamp: 08:51:29 CDT, Monday 14 October 2019
Message-ID: <NM60321C64F04D85286vpg_mid@email.voyageprive.com>
Attachments: None
Client IP Address: 37.114.130.109
Client GeoIP Lookup: Azerbaijan
Email Size: 2.6 kB
Encrypted? No
No comments:
Post a Comment