Sunday, February 15, 2015

American Express Phishing

Dear Customer:

We are writing to you because we need to speak with you regarding a security concern on your American Express. Our records indicate that you recently used your American Express card on February 10, 2015. For your security, new charges on the accounts listed above may be declined. If applicable, you should advise any Additional Card Member(s) on your account that their new charges may also be declined.

To secure your account , please click log.

Your prompt response regarding this matter is appreciated.

Sincerely,
American Express

Phishing analysis :

CLICK : please click log
OPEN : http://netpeugeot.com/americanexpress/amex.html
NOTE : Phishing was removed.

Email analysis :

NOTE : no-replay@amex.com
NOTE : Unusual activity in your American Express account
NOTE : User-Agent : Roundcube Webmail/1.1.1
NOTE : Received : from p4fc31e77.dip0.t-ipconnect.de (HELO amex.com) (79.195.30.119)

netpeugeot.com whois :

Registrant ID: Registrant Name: murtaza yiya
Registrant Organization: peugeot ve citroen ozel servisi
Registrant Street: baglarbasi g.o.pasa istanbul
Registrant City: istanbul
Registrant State/Province: turkey
Registrant Postal Code: 34245
Registrant Country: TR
Registrant Phone: +90.05373784445
Registrant Email: myiya@ibb.gov.tr

No comments:

Post a Comment