Monday, June 6, 2016

Norply

Your Account Will Be Closed !

Dear Customer,

We have noticed that some data from your account information seems inaccurate or unverified. You have to check your information in order to continue using our service smoothly. We need a little bit more information about you to help confirm your identity. Now check the account informations that belongs to you !

Update My Informations

Email screenshot :


Email analysis :

NOTE : Norply@cp2.tarhely.pw
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : X-Get-Message-Sender-Via : cp2.tarhely.pw:
NOTE : authenticated_id: bunmegelozesbeke/primary_hostname/system user
NOTE : Return-Path : < bunmegelozesbeke@cp2.tarhely.pw >
NOTE : X-Authenticated-Sender : cp2.tarhely.pw: bunmegelozesbeke
NOTE : X-Php-Script : www.bunmegelozesbekesmegye.hu/mangusta/upload/img/php.php
NOTE : for 105.105.26.151


NOTE : Received : from tomtech.hu (tomtech.hu. [185.112.156.244])
NOTE : Received : from bunmegelozesbeke
NOTE : by cp2.tarhely.pw with local (Exim 4.87)
NOTE : (envelope-from < bunmegelozesbeke@cp2.tarhely.pw >)
NOTE : Norply

Phishing analysis :

CLICK : Update My Informations
OPEN : http://www.handicraftdesignbank.in/upload/products/He/service/manage
RESULT : Phishing is unresponsive.

1 comment:

  1. Norply said it was a loan company now my account is $4000 overgrown and closed can sign in can't even look at the damage in they call, email, text you, tell them to go to hell and run the other way.

    ReplyDelete