Wednesday, May 11, 2016

Vous avez un nouveau message (Phishing Fortuneo > Banque Populaire)

Bonjour,

Un nouveau Message est disponible sur votre Messagerie Fortuneo .

Pour le consulter, Veuiller Cliquez sur le lien ce-dessous:

https;//mabanque.fortuneo/fr/connexion

Cordialement,
l'équipe Fortuneo
Nous vous remercions de votre confiance.

My account | My itinerary | Unsubscribe | Privacy Policy | Customer Support
Expedia.ca sent this email and cannot receive replies via email. P.O. Box 47628, Toronto, ON, M3C 3S7, Canada.

Travel Industry Council of Ontario
In accordance with the Ontario Travel Industry Act, 2002, this page contains detailed information on the names, addresses, and registration numbers applicable to the providers of travel and ticket fulfillment services.

Ticket fulfillment services provided by:
Tour East Holidays (Canada) Inc., 15 Kern Road, Suite 9, Toronto, Ontario M3B 1S9.
TICO Registration No.: 50015827
Tour East Holiday (Canada) Inc., 2000 Peel Street, Suite 735 Montréal, QC H3A 2W5.
Quebec License No. 702246.


© 2016 Expedia, Inc. All rights reserved. Expedia, Expedia.ca, and the Airplane logo are trademarks or registered trademarks of Expedia, Inc. in the U.S. and/or other countries. Other product and company names mentioned herein may be trademarks of their respective owners.
(EMID: MR-CM-RFD-teid4.0-issu123-test2-langEN-versX-mcidM-segaX-segbX-segmX-SID4003962-key34080121838-paid167700948-locen_CA) (MD: 20160406054400)

Phishing analysis :

CLICK : https;//mabanque.fortuneo/fr/connexion
OPEN : http://casaruralsanmiguel.com/hkr
REDIRECT : http://13.79.168.131/populaire-1/*/index.php
SCREENSHOT :


ACTION : SELECT A REGION
REDIRECT : http://13.79.168.131/populaire-1/*/index.html
SCREENSHOT :


CLICK : Valider
REDIRECT : http://13.79.168.131/populaire-1/*/bred/index.php
SCREENSHOT :


CLICK : CONNEXION
REDIRECT : http://13.79.168.131/populaire-1/*/bred/connect.php?co=*_*
SCREENSHOT :

Email analysis :

NOTE : rs@zeturf.fr
NOTE : lkhydh@zeturf.fr
NOTE : X-Mailer : PHPMailer [version 1.73]
NOTE : Received : from l3ez.entercloudsuite.local ([185.48.33.67])

Greetings, I am Mr.Johnson Gary a banker,

Greetings, I am Mr.Johnson Gary a banker, i know that this mail will come to you as a surprise as we have never met before, but need not to worry as I am contacting you independently of my investigation and no one is informed of this communication. I need your urgent Cooperation in transferring the sum of $11.3 Million dollars immediately to your private account.The money has been here in our Bank lying dormant for years now without anybody coming for the claim of it.

The fund belong to our deceased Customer Mrs.Joy Lake who perished along with her family since January 31 2001.The Banking laws here does not allow such money to stay more than 15 years,that is the reason why i need your Cooperation in transferring the money to your bank account so that we can use it to secure the future of our both families because i don't want the money to be recalled to the bank treasury as unclaimed fund. By indicating your interest I will send you the full details on how the business will be executed. Please keep this proposal as a top secret and delete if you are not interested,

My contact Email-Johnsongary248@gmail.com
TELE NUMBERS.. +229-98896529
Best Regards,
MR.Johnson Gary.

Email analysis :

NOTE : kuurin@sound.ocn.ne.jp
NOTE : .kuurin.@sound.ocn.ne.jp
NOTE : X-Originating-Ip : [41.86.238.6]

YOU HAVE WON

Your E-MAIL ID just won 750,000 GBP in the ongoing Microsoft Promotion 2016. Send: Full Names, Address, Phone Number: msclaimsdepartment@outlook.com for claims.

Microsoft Lottery Team.

Email analysis :

NOTE : msclaimsdepartment@outlook.com
NOTE : xinwlin@uiowa.edu
NOTE : Return-Path : < xinwen-lin@uiowa.edu >
NOTE : Received : from PAZWORLDPC (197.210.227.100)
NOTE : X-Originating-Ip : [197.210.227.100]

PERSAHABATAN TAK MENGENAL JARAK

Hi,

apa kabar? senang bertemu denganmu di sini dan saya merasa senang setelah melihat profile kamu dan saya harap kita dapat berteman, dan Semoga harimu menyenangkan, God bless you dan saya harap untuk membaca pesan darimu.

thanks

Email analysis :

NOTE : infos@indonesia.com
NOTE : ms.clarita.sukaesih@gmail.com
NOTE : Received : from AdminPC (unknown [202.62.18.103])


NOTE : by smtp.internux.co.id (Postfix)