Friday, December 18, 2015

Un conseiller LCL vous a adressé un (+1) message (Phishing LCL)

Bonjour,

Un conseiller LCL vous a adressé un message.
Pour le consulter et accéder à votre messagerie sécurisée, merci de vous connecter à LCL.fr, rubrique « Accédez à vos comptes ».

A très bientôt sur le service LCL de gestion de comptes.

LCL
-----------------------------------

Attention, il est inutile de répondre à ce message, votre mail ne fera l'objet d'aucun traitement.

Crédit Lyonnais - SA au capital de 1 847 860 375 € - SIREN 954 509 741 - RCS Lyon.
Société de courtage d'assurance inscrite sous le numéro d'immatriculation d'intermédiaire en assurance ORIAS : 07001878 . Siège social : 18 rue de la République, 69002 Lyon . Pour tout courrier : LCL, 20 avenue de Paris, 94811 Villejuif Cedex.

Phishing analysis :

CLICK : Accédez à vos comptes
OPEN : http://bit.ly/1ZaLZgF
NOTE : http://ugandasafarimasters.com/LCL/particulier/connexion.nouveau.messages/log/lcl/
NOTE : http://ugandasafarimasters.com/
SCREENSHOT :


ugandasafarimasters.com whois :

Domain Name: UGANDASAFARIMASTERS.COM
Registry Domain ID: 1552646263_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2015-04-21T11:23:05Z
Creation Date: 2009-04-17T21:42:14Z
Registrar Registration Expiration Date: 2016-04-17T21:42:14Z
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Registrar Abuse Contact Email: domainabuse@tucows.com
Registrar Abuse Contact Phone: +1.4165350123
Reseller: Netfirms
Registrant Name: Wensi Nuwagaba
Registrant Organization: Imaginet
Registrant Street: 57 Naguru Drive
Registrant City: Kampala
Registrant State/Province: NA
Registrant Postal Code: NA
Registrant Country: UG
Registrant Phone: +256.773102176
Registrant Email: nwensi@yahoo.co.uk
Admin Name: Wensi Nuwagaba
Admin Organization: Imaginet
Admin Street: 57 Naguru Drive
Admin City: Kampala
Admin State/Province: NA
Admin Postal Code: NA
Admin Country: UG
Admin Phone: +256.773102176
Admin Email: nwensi@yahoo.co.uk
Tech Organization: Domains Manager
Tech Street: 7030 Woodbine Ave. Suite 800
Tech City: Markham
Tech State/Province: ON
Tech Postal Code: L3R 6G2
Tech Country: CA
Tech Phone: +1.4166612100
Tech Phone Ext:
Tech Fax: +1.4166610700
Tech Email: support@netfirms.com
Name Server: NS1.IMAGINETSVRS.COM
Name Server: NS2.IMAGINETSVRS.COM
DNSSEC: unsigned

Email analysis :

NOTE : services.clients.lcl.fr@fly-hobby.ru
NOTE : X-Remote : 81.30.48.12 (mail.nettrans.ru)
NOTE : Mime-Version : 1.0
NOTE : Received : from mail.nettrans.ru (81.30.48.12)
NOTE : Received : from localhost (localhost.localdomain [127.0.0.1])
NOTE : by mail.nettrans.ru (Postfix)
NOTE : Received : from mail.nettrans.ru ([127.0.0.1])
NOTE : by localhost (mail.nettrans.ru [127.0.0.1])
NOTE : Received : from CLOUD1BTOR5J12 (unknown [185.73.37.188])
NOTE : by mail.nettrans.ru (Postfix)
NOTE : Un conseiller LCL vous a adressé un (+1) message

YOUR URGENT ATTENTION IS NEEDED

Attn; Dear Beneficiary,

Please your urgent Attention is needed, we wish to inform you that our Diplomatic agent conveying your consignment box valued the sum of $4.5 Million United States Dollars misplaced your address, we required you Reconfirm the following information's below so that her can deliver your Consignment box to you today and return immediately,

FULL NAME: ===========
COUNTRY: ===========
CITY: ===========
CURRENT HOME ADDRESS: =========
TELEPHONE/CELL PHONE NUMBER.======
AGE/OCCUPATION: =======
SEX:MAN.

She is waiting to hear from you today with the information's to bring your Consignment funds to your doorstep. NOTE: That Diplomat agent Rose Clara did not know the content of The consignment box contains a huge amount of money which is $4.5 Million United States Dollars and on No circumstances should you let her be at peril with the Consignment box, The consignments were moved from here as family Treasures, so never Disclose the real content to her until you receive your consignment.

Best Regards
Mike E. Jallo

Email analysis :

NOTE : diplomrosejam@gmail.com
NOTE : nori@cpost.plala.or.jp
NOTE : Received : from mweb02 ([172.23.12.182])
NOTE : by msa02b.plala.or.jp with ESMTP
NOTE : 58.93.240.2 (msa02.plala.or.jp)

Rép :Confirm

Attention Please!!!

I have registered your ATM CARD of $10.5 with ATM card office department with registration code of ( Shipment Code awb 33xzs). please Contact with your delivery information such as:- Your Name, Your Address and Your Telephone Number.

Name of Dir: Mr.Sam Harry
Reply To E-mail:atm_card@qq.com

I have paid for the Insurance & Delivery fee.The only fee you have to pay is their activation fee only.Please indicate the registration Number and ask Him how much is their activation fee so that you can pay it and receiver your fund

Best Regards,
Mrs.Rose Mary

Email analysis :

NOTE : ms.rosemary@live.co.uk
NOTE : atm_card@qq.com
NOTE : Received : from ouropret by server.ouropretodooeste.com with local (Exim 4.86)
NOTE : (envelope-from < ouropret@server.ouropretodooeste.com >)

MTCN READY FOR PICK UP

We have deposited the check of your fund (4.500`000`000USD) through western unions department after our finally meeting regarding your fund,All you will do is to contact director Mr. Tom west via email (desk.top7@hotmail.com) He will give you direction on how you will be receiving the funds daily.Remember to
send him your Full information to avoid wrong transfer such as,

Receiver's Name_______________
Address: ________________
Country: _____________
Phone Number: _____________
YOUR;Age and occupation_______

Though,JAMES is about to send 6000 on your behalf but the neede information is the only thing holding him so contact Mr.Tom west or you call him +229 9847657 as soon as you receive this email and tell him to give you the information ok,the only fee you are advise to pay is renewed and activation fee which is 145 dollars. contact Mr Tom west TO GIVE YOU INFO TO SEND THE NEEDED FEE TO ENABLE YOU START RECEIVING YOUR FUND TODAY OK

Email analysis :

NOTE : desk.top7@hotmail.com
NOTE : desk.top1@cantv.net

CANTV Telephone service company. CANTV is one of the first telephone service enterprises in Venezuela, founded in 1930. The company was re-nationalized in 2007 and is the largest telecommunications provider in Venezuela. Headquarters: Caracas, Venezuela. Founded: June 20, 1930. Parent organization: Government of Venezuela

NOTE : Received : from host1-110-static.228-95-b.business.telecomitalia.it (HELO panamed.it) (95.228.110.1)


NOTE : Received : from User ([75.144.110.1] RDNS failed)


NOTE : by panamed.it with Microsoft SMTPSVC(6.0.3790.4675);