Monday, July 25, 2016

update your Apple ID (***@***) (Apple Phishing)


Dear ***,

you should verify your Apple ID (***@***) as soon as possible to reactivate your account.

Verify Now >

TM and copyright 2016 Apple Inc. Hollyhill Industrial Estate Hollyhill, Cork, Republic of Ireland.
All Rights Reserved / Keep Informed / Privacy Policy / My Apple ID

Email analysis :

NOTE : apple@apple.id.com
NOTE : X-Source-Args : lsphp5:/home/goodnerd/public_html/leafmailer.php
NOTE : Return-Path : < apple@apple.id.com >
NOTE : Mime-Version : 1.0
NOTE : X-Source-Dir : goodnerda.com:/public_html
NOTE : X-Mailer : Leaf PHPMailer 2.7 (leafmailer.pw)
NOTE : X-Authenticated-Sender : cphost6.veeblehosting.com: goodnerd
NOTE : X-Php-Script : www.goodnerda.com/leafmailer.php for 41.100.229.125


NOTE : update your Apple ID (***@***)

Phishing analysis :

CLICK : Verify Now >
OPEN : https://www.hpsusa.net/wp-content//apple.id/secure/login/verify/id/XR0ARZo5EF6yOEy0k8vdxlIhqVldR6Mq873DB5vxN8gf3Xxa7qINDvBrvjW/login/
NOTE : Phishing was removed...

Monday, March 21, 2016

е931017364 (Apple Phishing attempt)

Our commitment to protecting your privacy comes from a deep respect for our customers.

Related image
iApple

Hello *@*,

We would like to inform you that we have experienced some technical difficulties last night which might have prevented you from accessing your account. We'd like you to review your information to ensure you get an up-to-date level:

Continue and review

Thank you!
Staff iApple!

We apologize for the inconvenience caused and thank you for your patience and understanding. 112 3 We know that your trust doesn’t come easy. That’s why we have and always will work as hard as we can to earn and keep it. This notification was sent to scamcz@gmail.com. Don't want occasional updates about Google+ activity and friend suggestions? Unsubscribe from these emails. iApple Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043 USA

Phishing analysis :

CLICK : Continue and review
OPEN : http://nfloridahook.com/pan.php?847DE55546747A5D6543F2C54A9C44F1FB69801DBE9482D48F2B9716F52BC6D3AB7FFB657FCF72475864E87B59FEC2D2B93E8C9F565936199A330E7ED5994

REDIRECT : https://box1117.bluehost.com/suspended.page/disabled.cgi/nfloridahook.com?847DE55546747A5D6543F2C54A9C44F1FB69801DBE9482D48F2B9716F52BC6D3AB7FFB657FCF72475864E87B59FEC2D2B93E8C9F565936199A330E7ED5994

NOTE : Phishing attempt...

Email analysis :

NOTE : 41.222.211.140
NOTE : replyonline@cs.iapple.com
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html; charset=utf-8
NOTE : Return-Path : < replyonline@cs.iapple.com >
NOTE : Received : from mailgateway01.galaxybackbone.com
NOTE : (mx1.nmodepic.gov.ng. [41.222.211.140])
NOTE : Received : from unknown (HELO asgard5) ([104.215.249.224])
NOTE : by mailgateway01.galaxybackbone.com with ESMTP;
NOTE : client-ip=41.222.211.140;
NOTE : Content-Transfer-Encoding : base64
NOTE : е931017364