Wednesday, April 5, 2017

Service CIient - Nouveau message

FREE MOBILE

Cher(e)aClient(e) :

La dernière facture FREE MOBILE de votre ligne a fait l'objet d'un défaut de paiement.

Nous vous invitons à régulariser votre situation sans délai en effectuant
le paiement dans votre Espace Abonné

EspaceoAbonné

Cordialement
Votre ConseillertFREEtMOBILE

-me-

Email analysis :

NOTE : FREE.MOBlLE@senior-meilleuresoffres.net
NOTE : X-Php-Originating-Script : 0:ark.php
NOTE : Received : by news.monoprix.fr (Postfix, from userid 33)
NOTE : ark@news.monoprix.fr

Phishing screenshot :

Phishing Free

Phishing analysis :

CLICK : EspaceoAbonné
OPEN : http://www.libertycoingalleries.com/var
REDIRECT : http://tee-managerdesigner.com/vqmod/css/faicon/28452fa1dfa2fa1778723ec9ae1bd38f/
SCREENSHOT :

Phishing Free 2

Affected services :

NOTE : news.monoprix.fr (Relaying the phishing email.)
NOTE : libertycoingalleries.com (Hosting the redirect to the phishing.)
NOTE : tee-managerdesigner.com (Hosting the phishing.)
NOTE : hostgator.com (Hosting the phishing page.)
NOTE : Free (Victim)

Enc:DHL delivery Cust. Ref: 539000135

dhllogo.gif

Dear *@*.*,

A Package is coming your way through DHL.
Kindly confirm if the address is correct and you can also track your Package till it gets to your doorstep.

Track Your Package

DHL Worldwide Delivery ©.

Email analysis :

NOTE : inbox@vaemail.ru
NOTE : Received : from vaemail.ru (vaemail.ru. [80.85.159.162])
NOTE : client-ip=80.85.159.162;

Phishing from 80.85.159.162

Phishing analysis :

CLICK : Track Your Package
OPEN : http://thedanbury.com/dhl/DHLAUTO/track/dhl.php?email=*
RESULT : Phishing was removed...

The phishing is on error

Please acknowledge receipt of this mail


Dear Beneficiary,

I am Steven Terner Mnuchin, Secretary of the Treasury under the U.S. Department of the Treasury. You can get more details about me here on the link below;

https://www.treasury.gov/about/Pages/Secretary.aspx

At the recently concluded meeting with the World Bank and the United Nations, an agreement was reached between both parties for us to settle all outstanding payments accrued to individuals/corporations with respect to local and overseas contract payment, debt re-scheduling and outstanding compensation payment. Fortunately, you have been selected alongside a few other beneficiaries to receive your own payment of $10.5million (Ten Million five hundred thousand United States Dollars only). We have been notified that you are yet to receive your fund valued at $10.5million This money will now be transferred to your nominated bank account through our foreign bank unit in South East Asia Phnom Penh Cambodia.

You are advised to kindly reply this email with the below details enclosed to help us process your payment through our foreign payment bank in Cambodia.

(1) Full Names:
(2) Residential Address:
(3) Country of Residence:
(4) Age:
(5) Phone/Cell Number:
(6) Occupation:

Yours faithfully,

Steven Terner Mnuchin
Secretary of the Treasury
(U.S. Department of the Treasury)
Contact email; steventernermnuchin27@gmail.com

Email analysis :

NOTE : Japanjbkoy@eagle.ocn.ne.jp
NOTE : steventernermnuchin27@gmail.com
NOTE : Received : from User (231.129.151.153.ap.dti.ne.jp [153.151.129.231])

Scam from 153.151.129.231

Michael Contos

Hello, I'm Michael And i work for E-Loan Company located in California USA, my company giving out loan's at 2.5% interest rate world wide if you are interested get back so i can provide you with the information on how to get loan.
Michael Contos

Email analysis :

NOTE : teodozjabukowska@umlub.pl
NOTE : michaelgeorgecontos@gmail.com
NOTE : Received : from zimbra.umlub.pl (zimbra.umlub.pl [10.6.11.11])
NOTE : by zimbra.umlub.pl (Postfix)

Zimbra