Monday, March 12, 2018

Pending Mails (Gmail phishing)

Hi *

Due to the Routine checks on the mail servers,

Some of your mails might be on pending status...

Get started here validate and retrieve mail(s).

Also, Enter details once and correctly, then wait for response from Our Server.

Sincerely,
gmail.com Support Team

Phishing analysis :

CLICK : Get started here
OPEN : https://qidecul.ga/bin/others/?email=@
REDIRECT : https://qidecul.ga/bin/others/*.php?*
SCREENSHOT :


Email analysis :

NOTE : noreply@starslabels.ae
NOTE : 80.112.200.71

Thursday, November 16, 2017

Warning Your test@test.com Shut Down !!! (Gmail phishing)

Server Message

Dear test@test.com

Our record indicates that you have recently made a request to deactivate email. This request will be processed shortly. If this request was made accidentally and you have no knowledge of it, you are advised to cancel the request now

Cancel De-activation

However, if you do not cancel this request, your account will be de-activated shortly and all your email data will be permanently lost.

Regards.

Email Administrator

Message is auto This-generated from security server, and replies sent to this email can not be delivered. This email is meant for:

Email analysis :

NOTE : support@mailserver.com
NOTE : Received : from mailserver.com ([148.163.101.104])


Phishing analysis :

CLICK : Cancel De-activation
OPEN : http://www.ksawed.org/webmail.php?email=test@test.com
SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://support.google.com/accounts/answer/141137?hl=&visit_id=0-636464428251608265-4216504168&rd=1
SCREENSHOT :


INFO : Gmail phishing...

Monday, September 14, 2015

***@gmail.com :Your Account Will Be Blocked!

dear ***@gmail.com

Your Account Will Be Blocked!
***@gmail.com
Your Account will EXPIRE in 2days.
If you would like to continue using your Email Address,

(mail center)

UPGRADE YOUR ACCOUNT NOW
YOU WILL LOSE YOUR EMAIL ADDRESS IF YOU DO NOT UPGRADE YOUR ACCOUNT.

UPGRADE IS FREE OFF CHARGE

Phishing analysis :

CLICK : UPGRADE YOUR ACCOUNT NOW
OPEN : http://www.igeveca.com/ckeditor/kcfinder/upload/files/mudf/auto/conflict.php?Email=***@gmail.com&.rand=13vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1

LINK : CAN BE REDUCED TO :

http://www.igeveca.com/ckeditor/kcfinder/upload/files/mudf/auto/conflict.php?Email=***@gmail.com


OR EVEN TO :

http://www.igeveca.com/ckeditor/kcfinder/upload/files/mudf/auto/conflict.php?Email=http://www.scam.cz


VALIDATE : FORM
REDIRECT : http://www.igeveca.com/ckeditor/kcfinder/upload/files/mudf/auto/loading.php
REDIRECT : https://godaddy.com/

Email analysis :

NOTE : Received : from mail.binhlongrubber.vn ([123.30.109.136])
NOTE : Received : from [169.254.47.55] by binhlongrubber.vn (MDaemon PRO v10.0.0)
NOTE : huutu@binhlongrubber.vn
NOTE : ***@gmail.com :Your Account Will Be Blocked!