Low Mailbox Space (Update Your Mailbox To Avoid Error) (Phishing)

Dear User,

Your mailbox quota is full
This may cause your mailbox fault or you may not be able to receive more e-mail

To continue using your mailbox, you need to immediately upgrade your mailbox quota. This service is free.

Upgrade mailbox quota here

Once the upgrade is complete, your mailbox will work effectively.

Mail Administrator 2016

Screenshot of the email :

Email analysis :NOTE :

NOTE : Return-Path : < hazmi@almadar-group.net >
NOTE : Mime-Version : 1.0
NOTE : X-Authenticated-Sender : host.arabsgate115.com: hazmi@almadar-group.net
NOTE : X-Get-Message-Sender-Via : host.arabsgate115.com:
NOTE : authenticated_id: hazmi@almadar-group.net
NOTE : Received-Spf : client-ip=209.59.186.52;
NOTE : Received : from host.arabsgate115.com (host.arabsgate115.com. [209.59.186.52])
NOTE : Received : from [95.141.31.22] (port=59484 helo=[10.129.123.246])

NOTE : by host.arabsgate115.com
NOTE : Low Mailbox Space (Update Your Mailbox To Avoid Error)

Phishing analysis :

CLICK : Upgrade mailbox quota here
OPEN : http://ftxvisualprint.com.br/payment/2015alldomain/connectID.php
REDIRECT : http://ftxvisualprint.com.br/payment/2015alldomain/9vk88r49xgk3k5jjmf9lycov.php

PARAMETERS : ?rand=13InboxLightaspxn.*
PARAMETERS : &fid.*.*
PARAMETERS : &fid=1
PARAMETERS : &fav.1
PARAMETERS : &rand.13InboxLight.aspxn.*
PARAMETERS : &fid.*
PARAMETERS : &fid.1
PARAMETERS : &fav.1
PARAMETERS : &email=
PARAMETERS : &.rand=13InboxLight.aspx
PARAMETERS : ?n=*
PARAMETERS : &fid=4#n=*
PARAMETERS : &fid=1
PARAMETERS : &fav=1

SCREENSHOT :

CLICK : Login to continue
REDIRECT : http://ftxvisualprint.com.br/payment/2015alldomain/connect_phone.php
SCREENSHOT :

CLICK : Verify to continue
REDIRECT : TO THE PREVIOUS PAGE

Alice Watson

MY NAME IS MRS ALICE HUTTON WATSON.WIFE OF LATE AMBASSADOR OF JAMAICA FROM IVORY COAST, PLEASE I WANT YOU TO REPLY ME BACK AS SOON AS YOU READ THIS MESSAGE BECAUSE I WANT TO DISCUSS SOMETHING VERY IMPORTANT WITH YOU, I AM A CANCER PATIENT WITH A VERY SHORT TIME TO LIVE AND I AM CONTACTING YOU BECAUSE I WANT TO ENTRUST THE SUM OF USD 12.7MILLION TO YOUR HAND AS A DONATION FOR CHARITY WORK., TO HELP THE MOTHERLESS CHILDREN AROUND YOU, THIS MONEY WAS DEPOSITED BY MY LATE HUSBAND IN ONE OF THE BANK HERE IN ABIDJAN, AND I AM WAITING FOR YOUR REPLY FOR MORE INSTRUCTION AND INFORMATION ABOUT THIS FUND, REGARD MRS ALICE HUTTON WATSON

Email analysis :

NOTE : phili.gordon73@yahoo.com
NOTE : beccab077@outlook.fr
NOTE : Received : from [98.138.88.237]

NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-3

Sarah Ibrahim

How are you?

My name is Sarah.I am a woman and I would like to add you as my friend and establish a lasting relationship with you please If you are interested to know more about me write i will send you my picture and tell you more about me. I'll be waiting to hear from you soon,

Sarah

Email analysis :

NOTE : theenchantedcat@yahoo.com
NOTE : sarahibrahim10@hotmail.com
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-3

Rép : Urgent Response

Salam - Greetings,

May the peace and blessings of Allah be with you. It's nice to have you as a contact. I'm Dr. Mohammed Khalid, from Benghazi - Libya. I'm a private investor and a retired financial expert, I'm interested in investing in any lucrative investment opportunity in the sectors such as Pharmaceutical industry, Resort/real estate, production, technology, start-ups, Cosmetics, Medical center/Clinics, agriculture, mining or any other lucrative business proposal, business plan or business concept would be welcomed.

Send me your business proposal via email to discuss the investment possibilities and terms of cooperation. More details that will assist this investment project would be much welcomed. Shokran!!

I hope to hear from you as soon as possible.

Kind Regards,
Dr. Mohammed Khalid
Benghazi - Libya
+218-6899-37388

Email analysis :

NOTE : mohdkhalid78@yahoo.com
NOTE : no.reply@drkhalid.co.uk
NOTE : Received : from User ([223.197.151.47])

NOTE : by imsantv99.netvigator.com

johnson helen

Hello, My name is Helen i will be very happy to know you and have you as my good friend, And also have important thing to share with you . Have a nice day .

Your new friend
Helen

Email analysis :

NOTE : johnsonhelen16@hotmail.com
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-3
NOTE : client-ip=216.109.115.62;

: Congratulation you are one of BMW Lucky Winner Contact: davideric431@gmail.com

Congratulation You are one of the ten(10) lucky 2016 end of the year promo winner, please contact Game Manager to claim your price: bmw davideric431@gmail.com

NOTE; delivery charges are winner responsibility

Email analysis :

NOTE : davideric431@gmail.com
NOTE : pop03.mail.atl.earthlink.net@lhr.comsats.net.pk
NOTE : Organization : BWM AUTOMOBIL
NOTE : Mime-Version : 1.0
NOTE : X-Virus-Scanned : amavisd-new at trancom.ru
NOTE : User-Agent : RoundCube Webmail/0.2.2
NOTE : X-Sender : pop03.mail.atl.earthlink.net@lhr.comsats.net.pk
NOTE : Received : from mail.trancom.ru (mail.trancom.ru. [93.188.188.10])