Monday, October 13, 2014

Re-Update Your Tradekey Account! (Tradekey phishing)

Dear Customer

NOTE: This is a verification message, please do not reply.

Your account with us is outdated, and also in fraud list. So for your own safety and interest we will temporally lock your account till after verification. Please Click on this Verification Page, to update your tradekey account and increase your storage capacity. We will always Help you fight against fraud and spam

Thanks,

(c) 2014 Tradekey.com

Phishing analysis :

CLICK : Please Click on this Verification Page
OPEN : http://www.accomodation.lmtours.co.za/wp-admin/includes/images/TradeKey/TradeKey.html
SCREENSHOT :


ACTION : Validate form
REDIRECT : http://www.tradekey.com/

lmtours.co.za whois :

1a. domain : lmtours.co.za
1c. Registrar : WA Networks
2a. registrant : Graeme Hale
2b. registrantpostaladdress: Box 2512 Somerset West,Cape Town, Western Cape, 7129, ZA
2j. registrantphone : +27.218433710
2l. registrantemail : dnsbilling@wadns.net
3e. creationdate : 2012/08/04 17:59:43
6a. primnsfqdn : ns1.stunthost.com
6e. secns1fqdn : ns2.stunthost.com

Email analysis :

NOTE : Return-Path : < ebilling@bt.com >
NOTE : Received : from mail.hsw-hsj.com.pl (HELO liugongpl.com) (195.93.223.3)
NOTE : Received : from localhost (unknown [127.0.0.1]) by liugongpl.com
NOTE : Received : from liugongpl.com ([127.0.0.1]) by localhost (liugongpl.com [127.0.0.1])
NOTE : Received : from User (unknown [41.71.172.230]) by liugongpl.com (Postfix)


NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html; charset="Windows-1251"
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Priority : 3
NOTE : X-Msmail-Priority : Normal
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Re-Update Your Tradekey Account!

No comments:

Post a Comment