Monday, November 17, 2014

New inquiry from Jack Xi (Alibaba phishing)

logo The following message was generated before 17 November 2014 11:49(PST)

Jack Xi has sent you a new message

Mr. Jack Xi
Jaoxing Ubest Imp. & Exp. Co., Ltd Gold Member
China (Mainland)

You have received a message from Mr. Jack Xi on Alibaba.com. Please link your email account details with Alibaba in order to view further inquiries.

Company: Jaoxing Ubest Imp. & Exp. Co., Ltd
Business Type: Importer, Wholesaler
Country/Region: China
Address: China Bay
Verified Email: h0llyb0nn13@gmail.com
Message Content:

Please urgently send us your updated prices a.... view full message

TEL: +86 3 6342 7900
FAX:

Reply Now Report Spam Forgot Password? You are receiving this email because you are a registered member of Alibaba.com website. To unsubscribe from future service emails, click here .

Alibaba Hong Kong Limited,
26/F Tower One,Times Square,1 Matheson Street,Causeway Bay,Hong Kong

Phishing analysis :

CLICK : "view full message"
OPEN : http://ace9works.com/alibaba/index.html
SCREENSHOT :


CLICK : "Submit"
REDIRECT : http://ace9works.com/alibaba/processing.html
REDIRECT : http://ace9works.com/alibaba/index2.html

Email analysis :

NOTE : Mime-Version : 1.0
NOTE : Return-Path : < we.info@alba.com >
NOTE : Received : from mailrelay005.isp.belgacom.be
NOTE : (mailrelay005.isp.belgacom.be. [195.238.6.171])
NOTE : Received : from mail.d-d.be (HELO serv-ctx1.d-d.be) ([194.78.225.146])
NOTE : by relay.skynet.be with ESMTP;
NOTE : New inquiry from Jack Xi

ace9works.com WHOIS :

Domain Name: ACE9WORKS.COM
Registrar URL: http://www.godaddy.com
Registrant Name: Carolyn Huff
Registrant Organization:
Name Server: NS1089.HOSTGATOR.COM
Name Server: NS1090.HOSTGATOR.COM
DNSSEC: unsigned

No comments:

Post a Comment