Friday, October 30, 2015

Amazon Online Lottery & Powerball Promotions

Desk Of: International Online CO-Ordinator,
BetXchange Gaming Group(PTY)
in Collaboration with International Monetary Fund (IMF)
Amazon Online Lottery & Powerball Promotions
www.betxchange.co.za

CONGRATULATIONS!!

Dear (Online Award Winner)
IMF/WB-PEA/95583/2015

We gladly wish to inform you that you have won prize money award of One Million and Five Hundred Thousand United State Dollars, ($1,500,000.00) on our ongoing Human Development and Poverty Eradication Award

Your email address happens to be one of the emails chosen this quarter from our new java-based software that randomly selects email addresses from the web.Participants were selected from the registered email addresses in the Public Key Server-Index drawn from a pool of over 125,000 names in this batch from all the countries in the world as part of our international promotions programmed conducted to support Human Development and eradication poverty.

The payout of your cash prize to you will be subject to the final validations and satisfactory report that you are the authentic owner of the winning Email Address,This is real and not a hoax.Your Payment is strictly my Electronic Wire Transfer or Delivery of Visa Card.International Award Winning Certificate Award Ceremony will be held at the Micheal Angelo Hotel Mandela Square Sandton and all winners are expected to attend as provisions will be made for their Visas.

In line with the statutory procedure governing the claims of won prizes, you are to contact Credit Clearance Services our claim agent below to send him your particulars below:

1) Winning identification numbers: IMF/WB-PEA/95583/2015
2) Full Names 3) Country 4) Contact Address 5) Telephone /Fax
8) Occupation 9) Date of birth

Contact: Dr Richard (Regional Claims Manager)
Email: brokersagentclaim@writeme.com
Tel: +27 8474 73077
Ms. Suzan Graham (Assistant Mgr.)

Congratulation in Advance!!
Truly Yours,

Mrs Katherine Boyd- McPherson
(IMF & World Bank Online Award Co-Ordinator)

Tuesday, October 27, 2015

We were unable to process your most recent payment... (Amazon Phishing)

Amazon.com

Today's Deals See All Departments

= = = = = = = = = = = = = = = = = = = =

We were unable to process your most recent payment. Did you recently change your bank, phone number or credit card?. To ensure that your service is not interrupted, please update your billing information today.

Confirm your account now

We're available 24 hours a day, 7 days a week. If you have recently updated your billing information, please disregard this message as we are processing the changes you have made. If you need further assistance with your order.

= = = = = = = = = = = = = = = = = = = =

Amazon.com
Connect with us

Phishing analysis :

CLICK : Confirm your account now
OPEN : http://www.intellectualjourneyofenlightenment.org/admin/css/amazon.com-verification/id/
RESULT : This Account Has Been Suspended

intellectualjourneyofenlightenment.org whois :

Registrant ID:DI_41908394
Registrant Name:Atul Kumar Jain
Registrant Organization:intellectualjourneyofenlightenment.org
Registrant Street: 363, sec 15
Registrant City:Panchkula
Registrant State/Province:Haryana
Registrant Postal Code:134114
Registrant Country:IN
Registrant Phone:+91.9888054461
Registrant Email:atul.jain2711@gmail.com
Admin ID:DI_41908394

Email analysis :

NOTE : noreply@amzon.support82.e-i.com
NOTE : 192.163.247.190 (ami.amiableargument.com)
NOTE : X-Source-Args : /usr/bin/php /home/wwwtheiv/public_html/clientscript/ie7/wp-confiiig.php
NOTE : Received : from wwwtheiv by ami.amiableargument.com
NOTE : (envelope-from < wwwtheiv@ami.amiableargument.com >)
NOTE : X-Mailer : theivoryquill.com
NOTE : X-Php-Script : theivoryquill.com/clientscript/ie7/wp-confiiig.php
NOTE : for 185.109.161.21


NOTE : X-Get-Message-Sender-Via : ami.amiableargument.com:
NOTE : authenticated_id: wwwtheiv/only
NOTE : user confirmed/virtual account not confirmed

Monday, February 9, 2015

Amazon Phishing

CONFIRM ACCOUNT

This is a random validation check on your account, to continue using the Amazon service you must confirm your account. Please follow the steps in the next window that opens.

Confirm Account

We thank you for your patience regarding this matter, this is done to protect our customers. Failure to confirm will mean suspension of these services.

Processing at Amazon.

Phishing analysis :

CLICK : Confirm Account
OPEN : http://www.serviceamz.website/
RESULT : Phishing was deleted...

Email analysis :

NOTE : X-Msmail-Priority : High
NOTE : Return-Path : laura@sohospices.com
NOTE : X-Originating-Ip : 23.249.163.137
NOTE : Mime-Version : 1.0
NOTE : X-Priority : 1
NOTE : X-Mailer : Smart_Send_3_1_6
NOTE : Received : from mail4.onnetsecure.net ([74.118.69.248])
NOTE : Received : from mail.expertmail80.co.uk (laura@sohospices.com@23.249.163.137)
NOTE : by mail4.onnetsecure.net with ESMTPAM
NOTE : Please Validate

Tuesday, January 6, 2015

Please Confirm (Amazon phishing)

CONFIRM ACCOUNT

There has been too many login attempts on your account, to continue using the Amazon service you must confirm your account. Please follow the steps in the next window that opens.

Confirm Account

We thank you for your patience regarding this matter, this is done to protect our customers. Failure to confirm will mean suspension of these services.

Processing at Amazon.

Phishing analysis :

CLICK : Confirm Account
OPEN : http://www.processingamazoadmin.website/
RESULT : Phising removed...

Email analysis :

NOTE : Content-Type : multipart/alternative; boundary="----=_NextPart_*"
NOTE : Mime-Version : 1.0
NOTE : X-Msmail-Priority : High
NOTE : Return-Path : < marcos.oliveira@niceveiculos.com.br >
NOTE : Return-Path : marcos.oliveira@niceveiculos.com.br
NOTE : X-Mailer : Smart_Send_3_1_6
NOTE : X-Priority : 1
NOTE : Received : from mailer-1.internext.com.br (mailer-1.internext.com.br. [72.55.191.59])
NOTE : Received : from static.10.27.251.148.clients.your-server.de (HELO WINHEVSA8GJ7V7mshomenet)
NOTE : (marcos.oliveira@niceveiculos.com.br@148.251.27.10)

Amazon Phishing

Update Billing

We could not verify the billing method we have on record for your account.

If you fail to update your billing you will no longer be able to use the Netflix service.

VERIFY

Phishing analysis :

CLICK : VERIFY
OPEN : http://processingsupport.website/
REDIRECT : http://processingsupport.website/http.www.secure.login.amazon.com-83/confirm/details.php?userid=***
SCREENSHOT :


CLICK : Save & Continue
REDIRECT : http://processingsupport.website/http.www.secure.login.amazon.com-83/confirm/Billing.php
SCREENSHOT :


CLICK : Confirm Card
REDIRECT : http://processingsupport.website/http.www.secure.login.amazon.com-83/confirm/confirmed.php?close=***
SCREENSHOT :


REDIRECT : http://www.amazon.com/gp/help/customer/display.html?ie=UTF8

Email analysis :

NOTE : Mime-Version : 1.0
NOTE : X-Msmail-Priority : High
NOTE : Return-Path :
NOTE : Return-Path : sales
NOTE : X-Mailer : Smart_Send_3_1_6
NOTE : X-Priority : 1
NOTE : Received : from hostarea52.com (hostarea52.com. [116.251.205.2])
NOTE : Received : from unknown (HELO static.92.227.46.78.clients.your-server.de)
NOTE : (sales@78.46.227.92)
NOTE : by hostarea52.com with ESMTPA;
NOTE : Received-Spf : client-ip=116.251.205.2;
NOTE : Update

Technicals informations :

PROCESSINGSUPPORT.WEBSITE::A::PROCESSINGSUPPORT.WEBSITE::162.222.214.20
NS1.BITCOIN-DNS.COM::96.8.127.88::SERVER.KDOSLOGIC.INFO
NS2.BITCOIN-DNS.COM::109.104.119.59::109.104.119.59-CLOUD-SERVER-LONDON-HEX.DEDISERVE.COM
MX::0::PROCESSINGSUPPORT.WEBSITE::162.222.214.20

Google result for : http://processingsupport.website/

Tuesday, July 22, 2014

Amazon Phishing

Amazon.com

Your Amazon.com - Today's Deals - See All Departments

Dear Customer,

During our usual security enhancement protocol, we observed multiple login attempt error while login in to your online Amazon account.
We have believed that someone other than you is trying to access your account for security reasons,
we have temporarily suspend your account and your access to online Amazon and will be restricted if you fail to update ,

Click here

Network Attached Storage
image - Connect with us image image image

Informations :
======================================
NOTE : Account Alert: Please Read
NOTE : account-alert@amazon.com
NOTE : from 159.8.8.210-static.reverse.softlayer.com (HELO Wei21.Wang.com) (159.8.8.210)
NOTE : 159.8.8.210 (159.8.8.210-static.reverse.softlayer.com
NOTE : from User (localhost.localdomain [127.0.0.1]) by Wei21.Wang.com
NOTE : Click here > http://www.accountverifing.com/404.html
NOTE : http://www.accountverifing.com/secuirty-amazon/***/login.php?action=billing_login=true&_session;***
======================================

accountverifing.com whois :
======================================
Tech Email: WHOIS@BLUEHOST.COM
Name Server: NS1.BLUEHOST.COM
Name Server: NS2.BLUEHOST.COM
======================================