We were unable to process your most recent payment... (Amazon Phishing)

Amazon.com

Today's Deals See All Departments

= = = = = = = = = = = = = = = = = = = =

We were unable to process your most recent payment. Did you recently change your bank, phone number or credit card?. To ensure that your service is not interrupted, please update your billing information today.

Confirm your account now

We're available 24 hours a day, 7 days a week. If you have recently updated your billing information, please disregard this message as we are processing the changes you have made. If you need further assistance with your order.

= = = = = = = = = = = = = = = = = = = =

Amazon.com
Connect with us

Phishing analysis :

CLICK : Confirm your account now
OPEN : http://www.intellectualjourneyofenlightenment.org/admin/css/amazon.com-verification/id/
RESULT : This Account Has Been Suspended

intellectualjourneyofenlightenment.org whois :

Registrant ID:DI_41908394
Registrant Name:Atul Kumar Jain
Registrant Organization:intellectualjourneyofenlightenment.org
Registrant Street: 363, sec 15
Registrant City:Panchkula
Registrant State/Province:Haryana
Registrant Postal Code:134114
Registrant Country:IN
Registrant Phone:+91.9888054461
Registrant Email:atul.jain2711@gmail.com
Admin ID:DI_41908394

Email analysis :

NOTE : noreply@amzon.support82.e-i.com
NOTE : 192.163.247.190 (ami.amiableargument.com)
NOTE : X-Source-Args : /usr/bin/php /home/wwwtheiv/public_html/clientscript/ie7/wp-confiiig.php
NOTE : Received : from wwwtheiv by ami.amiableargument.com
NOTE : (envelope-from < wwwtheiv@ami.amiableargument.com >)
NOTE : X-Mailer : theivoryquill.com
NOTE : X-Php-Script : theivoryquill.com/clientscript/ie7/wp-confiiig.php
NOTE : for 185.109.161.21

NOTE : X-Get-Message-Sender-Via : ami.amiableargument.com:
NOTE : authenticated_id: wwwtheiv/only
NOTE : user confirmed/virtual account not confirmed

Payment Swift Copy

sir,

Upon request,Your customer has advised for your payment. Be informed that the following payment is made to your account as per attached HSBC payment swift copy. You are adviced to confirm receipt of payment as detailed.

Yours faithfully,
Global Payments and Cash Management.

HSBC

1 HSBC Payment Swift copy.doc (total 1.3KB)

View slide show (1)Download

Link analysis :

NOTE : http://peridotsgroup.com/colins/HSBC%20Payment%20Swift%20copy.doc
NOTE : BitDefender : Malware site
NOTE : Emsisoft : Malware site

File analysis :

Avira : EXP/CVE-2012-0158
CAT-QuickHeal : Exp.RTF.CVE-2012-0158
DrWeb : Exploit.Rtf.CVE2012-0158
Kaspersky : Exploit.Win32.CVE-2012-0158.j
Qihoo-360 : virus.exp.20120158
Rising : NORMAL:Hack.CVE-2012-0158.a!1614593 [F]
Sophos : Troj/DocDrop-DT
Symantec : Bloodhound.RTF.3
TrendMicro : HEUR_RTFMALFORME

Email analysis :

NOTE : purchasemanager@tescogroup.com
NOTE : Received : by endpoint708401cf.chios.panth.io
NOTE : 162.242.168.6 ()

Openings? (Virus)

Hi there.

I saw your business today Sat, 24 Oct 2015 and found it very likeable.
I was praying there was any possibility of employment, just to prove my competence.

As you will see in my resume, I am very qualified and have a very sweeping experience in this field of work. I am confident it will be worth your time reviewing it, and I am even more positive you will find me very suitable in your corporation.

Please see my CV.

I'm very much looking forward to hearing from you.

Thanks,

Theda Deisch

My_Resume_64004.doc

My_Resume_64004.doc analysis :

My_Resume_64004.doc is a virus.

Virus analysis :

AVware LooksLike.Macro.Malware.h (v)
AhnLab-V3 : DOC/Downloader
Arcabit : HEUR.VBA.Trojan
CAT-QuickHeal : O97M.Dropper.LQ
Fortinet : WM/Agent!tr
Ikarus : Trojan-Downloader.VBA.Agent
Sophos : Troj/DocDl-AFA
Symantec : W97M.Downloader
TrendMicro : TROJ_FRS.0NA004JP15
TrendMicro-HouseCall : TROJ_FRS.0NA004JP15
VIPRE : LooksLike.Macro.Malware.h (v)

Email analysis :

NOTE : thedaobmhf@rambler.ru
NOTE : Mime-Version : 1.0
NOTE : 81.19.67.206

NOTE : X-Rambler-User : thedaobmhf@rambler.ru/117.253.216.19

NOTE : X-Mailer : Rambler WebMail, http://mail.rambler.ru/
NOTE : Received : from [117.253.216.19] by mail.rambler.ru
NOTE : Openings?

LUCRATIVE DISTRIBUTORSHIPS AVAILABLE

We are a U.S. company looking for distributors worldwide. We have been manufacturing and distributing slip-resistant floor treatments for more than 26 years! One 30 minute application with our Amazing Anti-Slip Floor Treatment will make floors slip-resistant and safe for 4 years - Guaranteed! Indoors or Outdoors No Change in Appearance For use on: Ceramic, Marble, Granite, Porcelain and Quarry Tiles Concrete, etc.. Typical Applications: Restaurant Kitchen Floors, Office Buildings, Hotels, Hospitals, etc.

Some of our satisfied customers: , Kroger, Holiday Inn, McDonald's, Miami Children's Hospital Pfizer, etc. Please contact us for details and to see if there is a distributorship available in your country. For an Exclusive Distributorship, an Initial Inventory Investment of $5,000 USD - $20,000 USD is required, depending upon the country.

Best regards,
Jeremy
Email: ydiney@tom.com

PLEASE INCLUDE YOUR NAME, COUNTRY & E-MAIL ADDRESS

Email analysis :

NOTE : diurios@mail.com
NOTE : Received : from lydia.pu88.net (31.220.42.101)

Private Investment Placement

Welcome to our Private Placement Portfolio.

I am a Staff of a Venture Capital Firm specializing in Growth Capital Investments/Loans.We seek to invest in Projects with Public and Private sectors in a broad range of areas including Real estate,Agriculture, Energy, Oil and Gas ,emerging markets and high-technology. Within the technology sector, the firm focuses on communications, software,digital content and services.

We wish to invest between $1Million-$500Million in any viable projects that your company requires funding on investment capacity/Loan Application. Upon the review of your company's Project Business Plan we shall determine on the projects possible funding. This will be a silent and Private Placement Investments.

Endeavor to respond promptly if the investment proposal meets your company's approval.

Kind Regards,
Lopati T

Email analysis :

NOTE : lopatit@mail.notes.cc
NOTE : ltuala225@gmail.com
NOTE : client-ip=46.22.145.69;
NOTE : Private Investment Placement

Reference to your Payment

To Your Attention;

On behalf of the board and management of Foreign Payment Department, I Mrs. Kathryn Bennett,the Managing Director of Foreign Payment Department wishes to inform you that your contractual payment w hich was suspended by the Nigerian government is due for Immediate collection.

Be informed that we have concluded all arrangements to transfer your fund to your account through Sterling Bank Plc. In line with the binding contractual payment policies, kindly furnish us with the following as set forth.

Your complete Banking details where you want the fund to be transfer and a copy of your international passport or any other means of identification as the true Beneficiary .your telephone number. The Contract Amount is $2.7Million, You shall required Setting up a Non Resident Account with Sterling Bank Plc, before your fund will be release transfer to your account in your country.

Your immediate response is needed.

Best Regards
Mrs. Kathryn Bennett.
Director Foreign Payment Department

Email analysis :

NOTE : fplc379@gmail.com
NOTE : dondonthecat22@yahoo.co.jp
NOTE : Received : from [41.71.163.249]
NOTE : by web102019.mail.ssk.yahoo.co.jp