Thursday, September 11, 2014

Tradekey phishing

http://int2.tkcdn.com/lang/en/images/tklogo_log.jpg

Dear Valued Customer,

We received a request to update your account associated with this e-mail address.
This is a request from our server, please follow the instructions below.

Click the link below to continue using our secure server:

https://www.tradekey.com/secure/TID=UPDATE

Thank you for using our services.

http://int2.tkcdn.com/lang/images/iso_horizontal.gif

Privacy Policy - Terms of Use - Intellectual Property Policy
Copyright © 2014 TradeKey.com

Phishing analysis :
=================================================
NOTE : Click https://www.tradekey.com/secure/TID=UPDATE
NOTE : Redirect http://www.onmycloud.fr/libraries/openid/Auth/Yadis/tradekey.com/index.html


NOTE : Validate phishing form
NOTE : Redirect http://www.tradekey.com
=================================================

Mail analysis :
=================================================
NOTE : Received : from mailgate7.iss.soton.ac.uk (mailgate7.iss.soton.ac.uk. [152.78.128.16])
NOTE : Received : from mailgate7.iss.soton.ac.uk (localhost.localdomain [127.0.0.1])
NOTE : Received : from UOS-MSG00037-VS.soton.ac.uk
NOTE : (uos-msg00037-vs.soton.ac.uk [152.78.119.39])
NOTE : by mailgate7.iss.soton.ac.uk (mailgate7.iss.soton.ac.uk [152.78.128.16])
NOTE : envelope-from
NOTE : Received : from User (176.115.143.94)
NOTE : by smtp.soton.ac.uk (152.78.119.39)
NOTE : X-Received : by 10.194.88.138
NOTE : Please contact Serviceline@soton.ac.uk for more information
NOTE : mail2serv@tradekey.com
NOTE : [TradeKey E-mail Notification]
=================================================

Whois analysis :
=================================================
WHOIS Soton.ac.uk :
=================================================
The University of Southampton combines academic excellence with an innovative and entrepreneurial approach to research, supporting a culture that engages...
=================================================
WHOIS onmycloud.fr :
=================================================
nic-hdl: HYGO2-FRNIC
type: ORGANIZATION
contact: HEY YOU GET ON MY CLOUD!
address: HEY YOU GET ON MY CLOUD!
address: 24, rue Danielle Casanova
address: 91330 Yerres
country: FR
phone: +33.6.82.00.63.60
e-mail: jcvareille@onmycloud.fr
registrar: OVH
changed: 08/06/2012 nic@nic.fr
anonymous: NO
obsoleted: NO
source: FRNIC
=================================================

No comments:

Post a Comment