Low Mailbox Space (Update Your Mailbox To Avoid Error) (Phishing)

Dear User,

Your mailbox quota is full
This may cause your mailbox fault or you may not be able to receive more e-mail

To continue using your mailbox, you need to immediately upgrade your mailbox quota. This service is free.

Upgrade mailbox quota here

Once the upgrade is complete, your mailbox will work effectively.

Mail Administrator 2016

Screenshot of the email :

Email analysis :NOTE :

NOTE : Return-Path : < hazmi@almadar-group.net >
NOTE : Mime-Version : 1.0
NOTE : X-Authenticated-Sender : host.arabsgate115.com: hazmi@almadar-group.net
NOTE : X-Get-Message-Sender-Via : host.arabsgate115.com:
NOTE : authenticated_id: hazmi@almadar-group.net
NOTE : Received-Spf : client-ip=209.59.186.52;
NOTE : Received : from host.arabsgate115.com (host.arabsgate115.com. [209.59.186.52])
NOTE : Received : from [95.141.31.22] (port=59484 helo=[10.129.123.246])

NOTE : by host.arabsgate115.com
NOTE : Low Mailbox Space (Update Your Mailbox To Avoid Error)

Phishing analysis :

CLICK : Upgrade mailbox quota here
OPEN : http://ftxvisualprint.com.br/payment/2015alldomain/connectID.php
REDIRECT : http://ftxvisualprint.com.br/payment/2015alldomain/9vk88r49xgk3k5jjmf9lycov.php

PARAMETERS : ?rand=13InboxLightaspxn.*
PARAMETERS : &fid.*.*
PARAMETERS : &fid=1
PARAMETERS : &fav.1
PARAMETERS : &rand.13InboxLight.aspxn.*
PARAMETERS : &fid.*
PARAMETERS : &fid.1
PARAMETERS : &fav.1
PARAMETERS : &email=
PARAMETERS : &.rand=13InboxLight.aspx
PARAMETERS : ?n=*
PARAMETERS : &fid=4#n=*
PARAMETERS : &fid=1
PARAMETERS : &fav=1

SCREENSHOT :

CLICK : Login to continue
REDIRECT : http://ftxvisualprint.com.br/payment/2015alldomain/connect_phone.php
SCREENSHOT :

CLICK : Verify to continue
REDIRECT : TO THE PREVIOUS PAGE