Tuesday, January 26, 2016

Your 2015 Tax Return Payment Is Ready (IRS Phishing)

Congratulations !!!

Your tax return is ready, Click Here to file.

Thanks
IRS Filing Department

Phishing analysis :

CLICK : Click Here
OPEN : http://tinyurl.com/zpzpokj
SCREENSHOT :


NOTE : tinyurl has no control.

Email analysis :

NOTE : Mime-Version : 1.0
NOTE : adamaret1@suddenlink.net
NOTE : Received : from dalofep02.suddenlink.net (txofep02.suddenlink.net. [208.180.40.72])


NOTE : Received : from WIN-5HT1POIVD8D.ap-southeast-2.compute.internal
NOTE : ([54.206.29.144])


NOTE : by dalofep02.suddenlink.net (InterMail vM.8.04.03.22 201-2389-100-167-20150619)
NOTE : client-ip=208.180.40.72;
NOTE : Your 2015 Tax Return Payment Is Ready

Monday, January 18, 2016

Your TurboTax account

Confirm your TurboTax account

You requested TurboTax to send you an email to confirm your account. You can use this code to complete the process.

Confirmation code : 351292

Didn't request an account confirmation and believe someone may have accessed your account, please visit this link to confirm your account information.

Thanks for using TurboTax!

Phishing analysis :

CLICK : this link
OPEN : http://siliconleaf.com/js/irs/index.html
RESULT : Phishing was removed.

Email analysis :

NOTE : Mime-Version : 1.0
NOTE : lizann50@suddenlink.net
NOTE : Received : from dalofep03.suddenlink.net
NOTE : (txasav-vm06.suddenlink.net. [208.180.40.75])


NOTE : dalofep03.suddenlink.net@[10.151.1.6]
NOTE : Your TurboTax account