IP address [?]: 95.138.137.184
IP country code: GB
IP address country: ip address flag United Kingdom
ISP of this IP [?]: Rackspace Ltd.
Organization: Rackspace Ltd.
Host of this IP: [?]: ns1.strategy-plus.net
Return-Path: <apache@ns1.strategy-plus.net>
Received: from ns1.strategy-plus.net (ns1.strategy-plus.net. [95.138.137.184])
by mx.google.com with ESMTPS id cc1si17984075wjc.168.2016.12.19.02.44.36
for <xxx>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 19 Dec 2016 02:44:36 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of
apache@ns1.strategy-plus.net designates 95.138.137.184 as permitted sender)
client-ip=95.138.137.184;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of
apache@ns1.strategy-plus.net designates 95.138.137.184 as permitted sender)
smtp.mailfrom=apache@ns1.strategy-plus.netReceived: by ns1.strategy-plus.net (Postfix, from userid 48) id 757B1270EAF;
Mon, 19 Dec 2016 10:44:01 +0000 (GMT)
To: xxx
Subject: WARNING YOUR ACCOUNT WILL BE SHUTDOWN CANCEL DE-ACTIVATION
X-PHP-Originating-Script: 48:$ThanksToWater$.php
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: "Match.com" <email@emailserver.inc>
Reply-To:
email@emailserver.incX-Priority: 3
X-MSMail-Priority: Normal
X-Mailer:
www.clarkabel.co.ukMessage-Id: <20161219104401.757B1270EAF@ns1.strategy-plus.net>
Date: Mon, 19 Dec 2016 10:44:01 +0000 (GMT)
Server Message
Dear [victim email address]
Our record indicates that you recently made a request to shutdown your email ([victim email address] ). And this request will be processed shortly.
If this request was made accidentally and you have no knowledge of it, you are advised to cancel the request now
Cancel De-activation
"http:/ /onlinematch.myjino.ru/Counter/Counter/index.php?email=victim email address"However, if you do not cancel this request, the your account will be shutdown shortly
and all your email data will be lost permanently.
Regards.
Email Administrator
This message is auto-generated from E-mail security server, and replies sent to this email can not be delivered.
This email is meant for: [victim email address]