Dear User,
Your mailbox quota is full
This may cause your mailbox fault or you may not be able to receive more e-mail
To continue using your mailbox, you need to immediately upgrade your mailbox quota. This service is free.
Upgrade mailbox quota here
Once the upgrade is complete, your mailbox will work effectively.
Mail Administrator 2016
Screenshot of the email :
Email analysis :NOTE :
NOTE : Return-Path : < hazmi@almadar-group.net >
NOTE : Mime-Version : 1.0
NOTE : X-Authenticated-Sender : host.arabsgate115.com: hazmi@almadar-group.net
NOTE : X-Get-Message-Sender-Via : host.arabsgate115.com:
NOTE : authenticated_id: hazmi@almadar-group.net
NOTE : Received-Spf : client-ip=209.59.186.52;
NOTE : Received : from host.arabsgate115.com (host.arabsgate115.com. [209.59.186.52])
NOTE : Received : from [95.141.31.22] (port=59484 helo=[10.129.123.246])
NOTE : by host.arabsgate115.com
NOTE : Low Mailbox Space (Update Your Mailbox To Avoid Error)
Phishing analysis :
CLICK : Upgrade mailbox quota here
OPEN : http://ftxvisualprint.com.br/payment/2015alldomain/connectID.php
REDIRECT : http://ftxvisualprint.com.br/payment/2015alldomain/9vk88r49xgk3k5jjmf9lycov.php
PARAMETERS : ?rand=13InboxLightaspxn.*
PARAMETERS : &fid.*.*
PARAMETERS : &fid=1
PARAMETERS : &fav.1
PARAMETERS : &rand.13InboxLight.aspxn.*
PARAMETERS : &fid.*
PARAMETERS : &fid.1
PARAMETERS : &fav.1
PARAMETERS : &email=
PARAMETERS : &.rand=13InboxLight.aspx
PARAMETERS : ?n=*
PARAMETERS : &fid=4#n=*
PARAMETERS : &fid=1
PARAMETERS : &fav=1
SCREENSHOT :
CLICK : Login to continue
REDIRECT : http://ftxvisualprint.com.br/payment/2015alldomain/connect_phone.php
SCREENSHOT :
CLICK : Verify to continue
REDIRECT : TO THE PREVIOUS PAGE
No comments:
Post a Comment