If you can't see this message, view it in your browser.
HM Revenue & Customs
After the last calculations of your fiscal activity , we determined that you are aligible to receive a tax refund of 380.01 £.
To access your tax refund, please follow this link
NOTE: A refund can be delayed a variety of reasons , for exemple submitting invalid records or applying after deadline. Revenue and Tax Administrator
HM Revenue & Customs Tax Credit Office
PO Box 1970
L75 1WX.
Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered.
Email screenshot :
Email analysis :
NOTE : bruce.stewart.agent@gov.uk
NOTE : X-Barracuda-Url : http://10.10.100.232:8000/cgi-mod/mark.cgi
NOTE : X-Barracuda-Connect : 173-12-155-133-northgulf.hfc.comcastbusiness.net
NOTE : [173.12.155.133]
NOTE : mailhost.towne.com
NOTE : X-Barracuda-Auth-User : besadmin
NOTE : X-Barracuda-Apparent-Source-Ip : 173.12.155.133
NOTE : client-ip=12.200.104.232;
Phishing anaylsis :
CLICK : this link
OPEN : http://educacaoadistancia.blog.br/wp-includes/hmrc/
REDIRECT : http://educacaoadistancia.blog.br/wp-includes/hmrc/startapplication/?*
SCREENSHOT :
CLICK : Let Start
REDIRECT : http://educacaoadistancia.blog.br/wp-includes/hmrc/startapplication/indentify.php?ip=*
SCREENSHOT :
FILL : FORM
CLICK : Next
SCREENSHOT :
NOTE : LOADING A FAKE REFUND...
CLICK : Start Refund
SCREENSHOT :
SELECT : A bank...
CLICK : Next
SCREENSHOT :
FILL : FORM
CLICK : Continue
SCREENSHOT :
CLICK : Confirm Tax Refund
SCREENSHOT :
REDIRECT : https://www.gov.uk/government/organisations/hm-revenue-customs
No comments:
Post a Comment