Monday, December 29, 2014

Verify your Amazon account ! (Amazon Phishing)

Your Account Has Been Blocked!
Dear Customer ,

We take you to note that your account has been suspended for protection , your password was entered more than once .
In order to protect you ,your account has been suspended .Please update your Account Information to unsuspend the account.

http://amazon.com/account-protection

Thanks for Update at Amazon.com.

-------------------------------------------------------------
Amazon.com
http://www.amazon.com
-------------------------------------------------------------

Please note: This e-mail message was sent from a notification-only address that
cannot accept incoming e-mail. Please do not reply to this message.

Phishing analysis :

CLICK : http://amazon.com/account-protection
OPEN : http://allsystemsgo.ee/sites/default/files/color/business-4907d2b9/please.verify.your.amazon.account.or.we.will.have.to.suspend.your.account/amazon/Billing_Center/
RESULT : Phishing was removed...

allsystemsgo.ee analysis :

% This Whois Server contains information on
% Estonian Top Level Domain ee TLD

domain : allsystemsgo.ee
registrant : CID:ZONE:392805
admin-c : CID:ZONE:392806
nsset : NSSID:ZONE:97730
registrar : zone
status : paid and in zone
registered : 19.07.2013 16:55:11
expire : 19.07.2015
outzone : 03.08.2015
delete : 02.09.2015
Domeeninimi : allsystemsgo.ee
Staatus Makstud : ja tsoonis
Registreeritud : 19.07.2013 16:55:11
Aegub : 19.07.2015
Nimeserverid : ns1.flamingo.arvixe.com / ns2.flamingo.arvixe.com
DNSSEC : Allkirjastamata
Registripidaja : Zone Media OÜ
Registreerija andmed : All Systems Go OÜ / jelena_ljalik@hotmail.com
Halduskontakti andmed : Jelena Ljalik / jelena_ljalik@hotmail.com
Tehnilise kontakti andmed : Jelena Ljalik / jelena_ljalik@hotmail.com
nsset : NSSID:ZONE:97730
nserver : ns1.flamingo.arvixe.com
nserver : ns2.flamingo.arvixe.com
tech-c : CID:ZONE:392807
registrar : zone

Email analysis :

NOTE : Amazon Anti Fraud < anti-fraud@earthlink.net >
NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < anti-fraud@earthlink.net >
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : X-Remote : 207.69.195.67 (pop-tawny.atl.sa.earthlink.net)
NOTE : Mime-Version : 1.0
NOTE : X-Priority : 3
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : Content-Type : text/html; charset="Windows-1251"
NOTE : Received : from pop-tawny.atl.sa.earthlink.net (207.69.195.67)
NOTE : Received : from in-69-69-173-134.sta.embarqhsd.net ([69.69.173.134] helo=User)
NOTE : by pop-tawny.atl.sa.earthlink.net with smtp (Exim 3.36 #1)
NOTE : Verify your Amazon account !

No comments:

Post a Comment