Sunday, December 10, 2017

W-II

W-IISent: Sun, 10 Dec 2017 06:59:26 -0500 (EST)
Subject: Re: W-II

Your Email Has Won

Email analysis :

NOTE : bmwautomobileprize@hotmail.com
NOTE : bcknew@centurylink.net
NOTE : eseosaa00@gmail.com
NOTE : X-Mailer : Zimbra 8.7.6_GA_1776 (zclient/8.7.6_GA_1776)
NOTE : Received : from [10.41.66.0] ([10.41.66.0:53450]
NOTE : Received : from smtp.centurylink.net (mail.onyx.syn-alias.com. [206.152.134.66])

Tuesday, November 21, 2017

System Bounce Reset (Email Phishing)

Email Security Alert

for - Account User: *

Access to your E-mail (* ) will expire today 20/11/2017,please renew to avoid account deactivation. For your account security, we strongly recommend that you Renew your account now, else you account will be schedule for termination .

Click here to renew your E-mail account

After renewal/verification, extra security features will be activated in your email settings and your account will be safe for use again.

2017 Email Administrator

Email analysis :

NOTE : feedback@service.alibaba.com
NOTE : Received : by casidrup.localdomain (Postfix, from userid 48)
NOTE : apache@casidrup.localdomain
NOTE : X-Mailer : www.casi.com.ar

Phishing analysis :

CLICK : Click here to renew your E-mail account
OPEN : https://quadrivalent-harbor.000webhostapp.com/email/index.php?email=*
SCREENSHOT :


FILL : FAKE FORM
CLICK : Upgrade Now
REDIRECT : https://quadrivalent-harbor.000webhostapp.com/email/thankyou.php
SCREENSHOT :

REDIRECT : https://technet.microsoft.com/en-us/library/dd351283%28v=exchg.141%29.aspx

Thursday, August 24, 2017

Verify your account™ (Phishing)

Hi *@*,

Password confirmation is required to authenticate *@* ownership on our server and retrieve pending incoming mails and save your new configuration settings.

Please click here for confimation to avoid mail malfunction.

Regards
Mail sent to: *@*

© 2017 Online Office. All rights reserved. NMLSR ID 399801

Email analysis :

NOTE : mbalok@hotmail.com
NOTE : client-ip=40.92.0.22;


Phishing analysis :

CLICK :
OPEN : https://artinfonews.ro/wp-content/themes/twentythirteen/css/ENC/
REDIRECT : https://artinfonews.ro/wp-content/themes/twentythirteen/css/ENC/cmd-login=*/en.php?
SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://artinfonews.ro/wp-content/themes/twentythirteen/css/ENC/cmd-login=*/sxc.php?
SCREENSHOT :

Wednesday, May 10, 2017

Tammy Joorst (Email Leak)

Good day

how can you supply me?

Email analysis :

NOTE : 3563909@myuwc.ac.za
NOTE : 3556254@myuwc.ac.za
NOTE : regie44@outlook.com

Email leak :

Email leak from a scam.

saymorebc@hotmail.com, sayyashdesigns@yahoo.com, sazdesign67@yahoo.com.au, sbaladev_24@yahoo.com, sbasnyat@las-cruces.org, sbbwa.secretary@gmail.com, sbc@sbcinv.net, sbc4radio@yahoo.com, sbghosh@hotmail.com, SBIRRO1984@hotmail.com, sbrady@hotmail.com, sbryson@westernleisureservices.com.au, sbsbjulia@gmail.com, sbugan@ncpg.gov.za, sburdisso@hotmail.com, scampbell3523@gmail.com, scampher@gmail.com, scamwarners9@gmail.com, scanvps@hotmail.com, scardoso_1@yahoo.com.ar, scarfyw1@yahoo.com.au, scarletcourierupdate@yahoo.co.uk, scc.info@tsogosun.com, scchiou_43197@yahoo.com.tw, scentedcandlelady@gmail.com, schakrabarty@gmail.com, schalk.ltgroep@mailbox.co.za, scharvest@gmail.com, scheffer.luana@gmail.com, schewitzl@gmail.com, schickelizabeth@hotmail.com, schoa2014@gmail.com, schoeman.yolandy@gmail.com, schoemanattorneys@gmail.com, scholtzrg@gmail.com, School@yahoo.de, sclsis@hotmail.com, scmibs@hotmail.com, sconature@gmail.com, sconejumpclub@hotmail.com, scordony@hotmail.com, SCOssiya@hotmail.com, scott_lee2000@yahoo.com, scottadamslv@gmail.com, scottandersonelectrical@gmail.com, scottandersonelectrical@gmail.co, scottdishner@gmail.com, scottjohn06@hotmail.com

Friday, November 18, 2016

Shipment Code awb 33xzs (Email leak)


I have registered your ATM CARD of $8.5 with DHL Courier Company with registration code of ( Shipment Code awb 33xzs,ATM Card Registered Code No xgt442.Security Code sctc/2001dhx/567/;Transaction Code 233/cstc/101/33028/;Certificate Deposit code; sctc/bun/xxiv/-78/01). please Contact with your delivery information such as, Your Name, Your Address and Your Telephone Number:Courier Office: DHL

Name of Dir:Dr.Clarck Robert,
E-mail:(mr.johndavidson@outlook.com)
Tel:+229-98643209

I have paid for the Insurance & Delivery fee.The only fee you have to pay is their Security fee only.Please indicate the registration Number and ask Him how much is their Security fee so that you can pay it.

Best Regards,
Mrs.Anne Dinma

Email leak :

vcorningstone78@gmail.com, m.litoris224@gmail.com, marjac.1993@gmail.com, marjac.1995@gmail.com, oldmichaelhunt@gmail.com, hughjarce333@gmail.com, acaster247@gmail.com, marja.c1993@gmail.com, marjac1995@gmail.com, miakriskoff@gmail.com, pschlacter400@gmail.com, jennatulls27@gmail.com, gbreezy820@gmail.com, dr.richard.poke@gmail.com, sperks548@gmail.com, rich.dude.swag@gmail.com, rob.karhu@gmail.com, cartoonherodude@gmail.com, reverendtomjones@gmail.com, whiter958@gmail.com, jw508328@gmail.com, meandcecilia@gmail.com, marjac1997@gmail.com, jessicapierce318@gmail.com, webinis123@gmail.com, cj96050@gmail.com, taylorhelen66@gmail.com, harrold.fiducious@gmail.com, bofasaur@gmail.com, lucy04anderson@gmail.com, rhejean16@gmail.com, cruise19allyson@gmail.com, cherrybree289@gmail.com, chelleanderson12@gmail.com, jasminedelancey@gmail.com, hector.rowles@gmail.com, hugoferreiracamargo@gmail.com, mizra9062@gmail.com, hugo35mm@gmail.com, gary.roaster@gmail.com, jennyblack7272@gmail.com, saveourunionflag@gmail.com, buraktorun7@gmail.com, np.eccomiqua@gmail.com, madgekz3bonner@gmail.com, robinsavage447@gmail.com, kenneth.turse@gmail.com, bigmann768@gmail.com, stvesmthson33@gmail.com, ahdrianmallari14@gmail.com, mr04248@gmail.com, sessavivi@gmail.com, zuckuss1212@gmail.com, irvinggoldstein5@gmail.com, yanyanwong2005@gmail.com, troyllovell@gmail.com, bobjjmcgrath@gmail.com, theleroymister@gmail.com, tfuhlery@gmail.com, langitz@gmail.com, louellaalmeida@gmail.com, pastormax7777@gmail.com, hannahsilverson62@gmail.com, tonyraabit@gmail.com, springtimejeremy@gmail.com, clwabbit@gmail.com, wallbounce@gmail.com, hballsich@gmail.com, catharinestrauss@gmail.com, arturosear@gmail.com, nakulannanthakumar97@gmail.com, john.heissenberg@gmail.com, garylongmont135@gmail.com, jtrackster87@gmail.com, robin211985@gmail.com, rad.lad1156@gmail.com, nicolelsmith82@gmail.com, johnliu8513@gmail.com, diderdaniels@gmail.com, eylamao@gmail.com, templargoldencircle@gmail.com, lhbbooks@gmail.com, alwaysbeagiver@gmail.com, julietlovesbobmarley@gmail.com, dhoffman813@gmail.com, e.olsen.nimbus@gmail.com, spamus.det@gmail.com, bigtamedwards@gmail.com, edgar.broughton@gmail.com, fatheramp@gmail.com, pastor.ramen@gmail.com, shonimuronga@gmail.com, kableerm@gmail.com, quickcat8899@gmail.com, candimun@gmail.com, paul.treece.associates@gmail.com, marjac1999@gmail.com, cbradiochatapp@gmail.com, mr.johndavidson@outlook.com

Email analysis :

NOTE : X-Matched-Lists : []
NOTE : Return-Path : < andreiniesta@cantv.net >
NOTE : X-Originating-Ip : [197.234.219.95]


NOTE : Mime-Version : 1.0
NOTE : X-Virus-Scanned : amavisd-new at cantv.net
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Mailer : Cantv Webmail
NOTE : Content-Type : text/plain; charset=UTF-8
NOTE : Received : from webmail-02.datacenter.cha.cantv.net (webmail-02.datacenter.cha.cantv.net [200.11.153.85])
NOTE : (authenticated bits=0) by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0)
NOTE : Received : from 197.234.219.95 ([197.234.219.95]) by webmail-02.datacenter.cha.cantv.net
NOTE : (Cantv Webmail) with HTTP; Mon, 7 Nov 2016 05:47:37 -0400 (VET)
NOTE : Shipment Code awb 33xzs

Saturday, November 5, 2016

Dianita Kambo

my name is dianita am really interested to be ur friend if you feel so contact me to my email address for my picture and further communication

kambodianita@hotmail.com

Email analysis :

NOTE : kambodianita@hotmail.com
NOTE : client-ip=65.55.111.167;

Wednesday, October 19, 2016

Anonymous email

Test of Anonymous email...

1) Hidemyass


From Hidemyass :

"Don’t want to give out your personal email address every time you sign up to a new service online? Sick of spam mail? With our FREE anonymous email service, you need never feel pressure to reveal your personal email address again"

Notes :

  • You must give another email.
  • You must give a password.
  • It's a relay.
  • Cool donkey.


Link : https://securemail.hidemyass.com

2) Anonymousemail


From Anonymousemail :

Send anonymous email with attachment for free, you can send unlimited email securely with anonymousemail.me and no registration required.

  • Protected by Cloudflare.
  • Too much advertising.
  • User Ip is disclosed inside the email headers.
  • Captcha.

Link : https://anonymousemail.me

3) Sendanonymousemail


From Sendanonymousemail :

Every day over 60,000 free anonymous emails are sent from our servers, making us the world's largest and most trusted anonymous email service.

Notes :

  • Still waiting the mail I sent.
  • Captcha.

Link : http://www.sendanonymousemail.net

4) 5ymail


From 5ymail :

Send Receive Manage Anonymous Email, Free Anonymous email,Anonymous emails with attached files, Anonymous chat, Compose anonymous email, Anonymous email solutions, Send an anonymous email, How to send an anonymous email, Anonymous mailing solutions, Anonymous attached file, Anonymous message, Secret and hidden email, I like sending anonymous emails, Anonymous mail with attached files, anonymous mail, Anonymous message, Anonymous mail with attached files (Guess it's way to place 5ymail in the google top search for anonymous email)

  • Pay or free concept.
  • Too much advertising.
  • Captcha.

Link : http://www.5ymail.com

Send-email


From send-email :

About us Every day over 100,000 free email messages are sent from our servers, making us the world's most trusted and largest email service. Our email service is perfect for: if you have no access to your email account to quickly send a message. if your private email is banned by the recipient. confess your love to somebody. play an email joke with your friends. and many other reasons ... You aren't allowed to use the service for any illegal activities.

  • Cool interface.
  • User email is not disclosed inside the email headers.
  • No captcha.

Link : http://send-email.org

Thursday, October 13, 2016

Email Account Re-activation (Move To Inbox) (Phishing)

Dear User prout@prout.com

We noticed that your email account has been outdated . Your prout@prout.com account has been placed on temporary block, it would be permanently blocked if you do not unblock within 48hours.

Click here to unblock your account

Note:

Failure to unblock your e-mail account. It will be permanently disabled.

Thank you for using our service.

Phishing analyis :

CLICK : Click here to unblock your account
OPEN : http://parijatpackaging.com/wp-content/Auth//aut.php?email=prout@prout.com
SCREENSHOT :


CLICK : Submit Now
REDIRECT : http://parijatpackaging.com/wp-content/Auth//success.php?rand=13InboxLightaspxn.1774256418&fid.4.1252899642&fid=1&fav.1&rand.13InboxLight.aspxn.1774256418&fid.1252899642&fid.1&fav.1&email=&.rand=13InboxLight.aspx?n=1774256418&fid=4#n=1252899642&fid=1&fav=1
SCREENSHOT :


Email analysis :

NOTE : kbeneteau@tmmsinc.com
NOTE : Mime-Version : 1.0
NOTE : Remote : 124.24.62.192 (pcweb03.mcdonalds.co.jp)
NOTE : Return-Path : < kbeneteau@tmmsinc.com >
NOTE : Received : from pcweb03.mcdonalds.co.jp (HELO pcweb03.www.mcdonalds.co.jp) (124.24.62.192)


NOTE : Received : from Server-PC.LangBak.local (unknown [10.73.24.16])
NOTE : by pcweb03.www.mcdonalds.co.jp (Postfix)
NOTE : Email Account Re-activation (Move To Inbox)

Monday, August 15, 2016

Mailbox Upgrade (Phishing)

Hello test@test.com,

This is to inform you that on 18th August, 2016.Your email will be De-activated, If you choose not to update your account ON or before 18th August, 2016. You will not be able to read and send emails, You will no longer have access to many of the latest features for improved, conversations, contacts and attachments.

Re-validate Your Account

Take a minute to update your account for a faster, safer and full-featured Webmail experience.

Note: Once you see this mail in your junk folder kind move to inbox and verify your email account

Thank You
Member Service

Phishing analysis :

CLICK : Re-validate Your Account
OPEN : http://bethelmhss.com/modules/mod_feed/.cache/main/mailbox/update/en?email=test@test.com
SCREENSHOT :


CLICK : Upgrade Now
REDIRECT : Progress Wheel
REDIRECT : First page

Email analysis :

NOTE : upgrade@webmailer.com
NOTE : Received : from webmailer.com (static-dslcom7-218.express.oricom.ca [64.18.177.218])

Saturday, July 23, 2016

PLEASE PROTECT YOUR ACCOUNT (MailBox Phishing)

Hello Dear

We're letting you know your account will be decline within 24hrs
If you haven't already confirmed, immediately deletion can occur any scheduled.
Need a earlier confirmation as notified before your availability,
kindly confirm your account in our database to avoid this interruption

Click Here to confirm

Best Regards,
The Mailbox Account team

Copyright Š 2016 MailboxTeam Inc. All rights reserved.

Email screenshot :


Email analysis :

NOTE : MailboxTeam@officialmail.com
NOTE : client-ip=80.78.246.99;


Phishing analysis :

CLICK : Click Here
OPEN : http://googldoc.casadekebab.com/google/google/*/
SCREENSHOT :

Friday, July 1, 2016

RE: Was sent last night., ..........

monicanl.lin33@outlook.it [mailto:monicanl.lin33@outlook.it]
:

RECEIVED the email i sent to you Yesterday???

Email analysis :

NOTE : monicanl.lin33@outlook.it
NOTE : lsu@msn.it
NOTE : bfhart@reagan.com
NOTE : X-Type : html
NOTE : X-Mailer : webmail/12.5.1-RC

Wednesday, June 29, 2016

Low Mailbox Space (Update Your Mailbox To Avoid Error) (Phishing)

Dear User,

Your mailbox quota is full
This may cause your mailbox fault or you may not be able to receive more e-mail

To continue using your mailbox, you need to immediately upgrade your mailbox quota. This service is free.

Upgrade mailbox quota here

Once the upgrade is complete, your mailbox will work effectively.

Mail Administrator 2016

Screenshot of the email :


Email analysis :NOTE :

NOTE : Return-Path : < hazmi@almadar-group.net >
NOTE : Mime-Version : 1.0
NOTE : X-Authenticated-Sender : host.arabsgate115.com: hazmi@almadar-group.net
NOTE : X-Get-Message-Sender-Via : host.arabsgate115.com:
NOTE : authenticated_id: hazmi@almadar-group.net
NOTE : Received-Spf : client-ip=209.59.186.52;
NOTE : Received : from host.arabsgate115.com (host.arabsgate115.com. [209.59.186.52])
NOTE : Received : from [95.141.31.22] (port=59484 helo=[10.129.123.246])


NOTE : by host.arabsgate115.com
NOTE : Low Mailbox Space (Update Your Mailbox To Avoid Error)

Phishing analysis :

CLICK : Upgrade mailbox quota here
OPEN : http://ftxvisualprint.com.br/payment/2015alldomain/connectID.php
REDIRECT : http://ftxvisualprint.com.br/payment/2015alldomain/9vk88r49xgk3k5jjmf9lycov.php

PARAMETERS : ?rand=13InboxLightaspxn.*
PARAMETERS : &fid.*.*
PARAMETERS : &fid=1
PARAMETERS : &fav.1
PARAMETERS : &rand.13InboxLight.aspxn.*
PARAMETERS : &fid.*
PARAMETERS : &fid.1
PARAMETERS : &fav.1
PARAMETERS : &email=
PARAMETERS : &.rand=13InboxLight.aspx
PARAMETERS : ?n=*
PARAMETERS : &fid=4#n=*
PARAMETERS : &fid=1
PARAMETERS : &fav=1

SCREENSHOT :


CLICK : Login to continue
REDIRECT : http://ftxvisualprint.com.br/payment/2015alldomain/connect_phone.php
SCREENSHOT :


CLICK : Verify to continue
REDIRECT : TO THE PREVIOUS PAGE

Thursday, June 16, 2016

call him now(646) 531-9234

good day the agent janny king is now arrive with your package up to $4.8 million so you have to contact him now with your address,and call him all so and email him the address (646) 531-9234(jannyking21@gmail.com)

Sylvia England

Email analysis :

NOTE : jannyking21@gmail.com
NOTE : cristianonovelli@tin.it
NOTE : Received : from (41.138.89.219)


NOTE : by wmlighttin.pc.tim.it

Monday, April 11, 2016

How are you doing,

Hello

How are you doing,

My name is Victoria, i come across your profile today at network and i became interested in you please here is my email to my box for you to know more about me and for both of us to get to know yourself better,

Thanks. Victoria.

Email analysis :

NOTE : victoriamabi24@hotmail.com
NOTE : sales@vickem.com

Monday, March 7, 2016

urgent........... reply

..........My name is Barr. Roland Mark,can we work and share this project together. If interested get email back for more details Please reply to this email.: barr.rolandmark2001@outlook.com

Email analysis :

NOTE : barr.rolandmark2001@outlook.com
NOTE : johnwilliams900@one.lt

Ray Tomlinson

A computing legend has died. The inventor of email, Ray Tomlinson, suffered an apparent heart attack on Saturday, according to reports. He was 74 years old.

Tomlinson sent the very first email back in 1971; at the time, he was working in Boston at Bolt, Beranek, and Newman (BBN), a company that was instrumental in the development of a very early version of the internet, called ARPANET. As an employee, he was "looking" for problems [ARPANET] could solve.


"IT'S THE ONLY PREPOSITION ON THE KEYBOARD"

Others had thought about sending messages to other users before, and there were some early versions that let you share notes to users on the same computer, but Tomlinson came up with the SNDMSG command. Unlike what came before it, SNDMSG actually sent mail files to the recipient's computers. It was the first networked messaging program.

He also decided to use the @ symbol to designate a user from its host. The decision lifted the humble symbol from obscurity to international icon — it even entered MOMA's collection in 2010. The fact it was little-used at the time made it appealing to Tomlinson, as it reduced ambiguity. Also, as he liked to say, "It's the only preposition on the keyboard."

Unfortunately for us, the very first email has been lost to time. As he said in an NPR interview from 2009, they were just random strings of text. "The first e-mail is completely forgettable ... and, therefore, forgotten." Thanks to his invention, Tomlinson won't be.

theverge.com/2016/3/6/11168718/ray-tomlinson-dead-inventor-of-email-obituary

Friday, January 22, 2016

Joy

hello

it give me a great pleasure to write you after viewing your profile at (*) which really interest me to have communication with you,i will be very happy if you can write me through my email for easiest communication,i will be waiting to hear from you,have a blessed day.

joy.

Email analysis :

NOTE : joypeter02@outlook.com
NOTE : ucojima@yahoo.com

Sunday, December 20, 2015

Dear Valued Member Account Owner!!!!,

This message comes from your (EMAIL SERVICE PROVIDER) messaging admin center to All E-mail Account owners. We are currently improving our Database and E-mail Account Center and creating more certainty for our Legal Service clients. At this moment we are upgrading our data base so that there will be more space for new customers and increasing the surf on the Internet. To prevent your Email address not to be DE-activated and to enable it upgraded, you need to assist us by sending the information below to enable us upgrade it, so that your email account status were fleet in our database as a very active, useful and legal email account.Do send to us the below information to enable us upgrade your Account, else your email account will lost in a short time.

First Name:
Last Name:
Country:
City:
Date of Birth:
Email Address:
E-mail password
Alternative Email:
Secret Question:
Secret Answer:

WARNING!!! E-MAIL OWNERS who refuses to upgrade his or her account within Five days after notification of this update will permanently be deleted from our data base and can also lead to malfunctioning of the client or user's account and we will not be responsible for loosing our account.

Thanks for your understanding as it is geared towards serving you better.

Web-mail Support Team
Warning Code:
ID67565434.

Email analysis :

NOTE : igboboy97@yahoo.com
NOTE : Received : by 66.196.81.114;
NOTE : X-Yahoo-Newman-Property : ymail-3
NOTE : 98.138.91.165 (nm5-vm4.bullet.mail.ne1.yahoo.com)

Friday, November 20, 2015

I thought you might be interested in this link

Hello!

Do you need a loan? to pay off your bills or for Xmas if yes contact me on carlosinvestment@hotmail.com

Click here to read the article.

If you have trouble viewing the link, copy and paste the following link into your browser:

http://www.***.com/_layouts/protiviti/emailtofriend.aspx

For more information on Protiviti, visit www.***.com.

Email analysis :

NOTE : carlosinvestment@hotmail.com
NOTE : Return-Path : < carlosinvestment@hotmail.com >
NOTE : Return-Path : carlosinvestment@hotmail.com
NOTE : X-Ms-Exchange-Crosstenant-Fromentityheader : HybridOnPrem
NOTE : Content-Transfer-Encoding : quoted-printablecruise19allyson@gmail.com
NOTE : X-Eopattributedmessage : 0
NOTE : Content-Type : text/html; charset="us-ascii"
NOTE : Received : from na01-bn1-obe.outbound.protection.outlook.com
NOTE : (mail-bn1hn0254.outbound.protection.outlook.com. [157.56.110.254])
NOTE : Received : from BLUPR0301CA0006.namprd03.prod.outlook.com (10.162.113.144)
NOTE : by BY1PR0301MB1285.namprd03.prod.outlook.com (10.161.206.143)
NOTE : Received : from BN1AFFO11FD054.protection.gbl (2a01:111:f400:7c10::173)
NOTE : by BLUPR0301CA0006.outlook.office365.com (2a01:111:e400:5259::16)
NOTE : Received : from N1-1EXC-HUB01.na.msds.rhi.com (204.75.127.139)
NOTE : by BN1AFFO11FD054.mail.protection.outlook.com (10.58.53.69)
NOTE : Received : from N1-1EXC-HUB01.na.msds.rhi.com (10.249.46.163)
NOTE : by N1-1EXC-HUB01.na.msds.rhi.com (10.249.46.163)
NOTE : Received : from hqp-as-smtpnlb2.pcs.iservices.grove (10.246.225.11)
NOTE : by N1-1EXC-HUB01.na.msds.rhi.com (10.249.46.163)
NOTE : Received : from hqp-as-prdwfe02 ([10.255.13.40])
NOTE : by hqp-as-smtpnlb2.pcs.iservices.grove
NOTE : I thought you might be interested in this link

Email's leaking analysis :

cruise19allyson@gmail.com,rhejean16@gmail.com, lucy04anderson@gmail.com, happyatlast0@yahoo.co.uk, bsartstudios@outlook.com, aaronreid@windowslive.com, bofasaur@gmail.com, sergeikurkov@yahoo.co.uk, dionnex18@hotmail.co.uk, harrold.fiducious@gmail.com, johnnyjones101@mail.com, ChuckNorris1940official@outlook.com, realfakedocs@live.fr, taylorhelen66@gmail.com, cj96050@gmail.com, fransi@fransimalin.co.uk, drachenlords1510@live.de, engr.hanks@yahoo.co.za, Webinis123@gmail.com, jessicapierce318@gmail.com, marjac1997@gmail.com, meandcecilia@gmail.com, jw508328@gmail.com, whiter958@gmail.com, reverendtomjones@gmail.com, Jerry.fring@yahoo.com, Salamallikki@hotmail.com, cartoonherodude@gmail.com, richiecool84@hotmail.com, laurenmachan@hotmail.com, garywelburn@hotmail.com, realtopdocument@outlook.com, whiter958@msn.com, rob.karhu@gmail.com, keithspr3@hotmail.com, bill.martins@hotmail.com, rich.dude.swag@gmail.com, sperks548@gmail.com, mimsy_wimsy@hotmail.co.uk, Dr.Richard.Poke@gmail.com, rosettareiter@gmx.ch, matthew.g10025@yahoo.com, parkhurstrobert112@yahoo.com, aamirarais@yahoo.com, gbreezy820@gmail.com, jennatulls27@gmail.com, mikeandrewsma@yahoo.com, pschlacter400@gmail.com, GloriafromEngland@guerrillamail.org

Monday, November 9, 2015

Warning!!! Closing of your mailbox *** is being processed. (Phishing)

E-MAIL STORAGE CAPACITY MANAGER ®

Dear ***

Your E-mail Account data storage capacity is low,

Your E-mail Account will be closed if you fail to increase Storage capacity.

Kindly Click here to increase your storage capacity by 60.00GB Free.

Thanks for your cooperation

Phishing analysis :

CLICK : increase your storage capacity by 60.00GB
OPEN : http://hdc.org/FAQs/validate/now/revalidate.html
SCREENSHOT :


CLICK : Re-validate Your Mailbox >>
SCREENSHOT :


REDIRECT : http://hdc.org/FAQs/validate/now/validation.html
SCREENSHOT :


Email analysis :

NOTE : upgrade@emailadmin.net
NOTE : Content-Type : text/html
NOTE : Mime-Version : 1.0
NOTE : X-Mailer : Smart_Send_2_0_138
NOTE : Received : from webserver.cobbetthill.com (mail.cobbetthill.com. [213.175.157.5])
NOTE : Received : from VPS (unknown [37.49.224.213])
NOTE : (Authenticated sender: operations@cobbetthill.com)
NOTE : by webserver.cobbetthill.com
NOTE : client-ip=213.175.157.5;
NOTE : Warning!!! Closing of your mailbox scamcz@gmail.com is being processed.