Thursday, October 9, 2014

Urgent Validate Your Alibaba Membership (Alibaba phishing)

Alibaba

Dear Valued User:

Alibaba service verification !

Your Alibaba service account needs an important email verification due to the new upgrade on our system security server. you are therefore required to verify your email account by following the reference below:

Click here now to get your email verified >>

Wishing you the very best of business!
Alibaba.com’s Service Team
This is an automated email. Please do not reply directly.

If you have any questions, please review the privacy protection rules
Hotline: 0571-85027110 E-mail: ali@alibaba-inc.com Service Center

Email analysis :

NOTE : Received : from pluto.solutiiweb.com (pluto.solutiiweb.com. [91.210.80.80])


NOTE : Received : from apuseni by pluto.solutiiweb.com with local (Exim 4.82)
NOTE : Return-Path : < apuseni@pluto.solutiiweb.com >
NOTE : client-ip=91.210.80.80;


NOTE : X-Php-Script : pensiunea-apuseniwild.ro/banner..php for 41.150.228.229


NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Message-Id : < *@pluto.solutiiweb.com >
NOTE : X-Get-Message-Sender-Via : pluto.solutiiweb.com:
NOTE : authenticated_id: apuseni/only user confirmed/virtual account not confirmed
NOTE : X-Source : /usr/bin/php
NOTE : X-Source-Args : /usr/bin/php /home/apuseni/public_html/banner..php
NOTE : X-Source-Dir : pensiunea-apuseniwild.ro:/public_html
NOTE : Urgent Validate Your Alibaba Membership

Phishing analysis :

CLICK : "Click here now to get your email verified >>"
OPEN : http://www.pool-glass-fencing.com.au/alibaba/index.html
RESULT : 404, used to be a phishing page.

pool-glass-fencing.com.au whois :

Domain Name pool-glass-fencing.com.au
Last Modified 13-Feb-2013 12:19:22 UTC
Registrar ID WAR
Registrar Name Web Address Registration
Status ok
Registrant BIERMAN, REYNOLD JAMES
Registrant ID ABN 75792879133
Eligibility Type Sole Trader
Registrant Contact ID R-010196021-SN
Registrant Contact Name Reynold Bierman
Registrant Contact Email reynold.bierman@yahoo.com.au
Tech Contact ID C-000954601-SN
Tech Contact Name Reynold Bierman
Tech Contact Email reynold.bierman@yahoo.com.au
Name Server ns1.qnetau.com
Name Server ns2.qnetau.com
Name Server ns3.qnetau.com

No comments:

Post a Comment