Tuesday, January 6, 2015

Please Confirm (Amazon phishing)

CONFIRM ACCOUNT

There has been too many login attempts on your account, to continue using the Amazon service you must confirm your account. Please follow the steps in the next window that opens.

Confirm Account

We thank you for your patience regarding this matter, this is done to protect our customers. Failure to confirm will mean suspension of these services.

Processing at Amazon.

Phishing analysis :

CLICK : Confirm Account
OPEN : http://www.processingamazoadmin.website/
RESULT : Phising removed...

Email analysis :

NOTE : Content-Type : multipart/alternative; boundary="----=_NextPart_*"
NOTE : Mime-Version : 1.0
NOTE : X-Msmail-Priority : High
NOTE : Return-Path : < marcos.oliveira@niceveiculos.com.br >
NOTE : Return-Path : marcos.oliveira@niceveiculos.com.br
NOTE : X-Mailer : Smart_Send_3_1_6
NOTE : X-Priority : 1
NOTE : Received : from mailer-1.internext.com.br (mailer-1.internext.com.br. [72.55.191.59])
NOTE : Received : from static.10.27.251.148.clients.your-server.de (HELO WINHEVSA8GJ7V7mshomenet)
NOTE : (marcos.oliveira@niceveiculos.com.br@148.251.27.10)