Sunday, January 10, 2016

Update your mobile phone (LogMeIn Phishing)

LogMeIn

Update your mobile phone

Get started with two-step verification

Two-step verification adds a second layer of protection to your account. Just like cash machine that protects your money by requiring a card and a PIN.

How it will protect you

After entering your LogMeIn ID and password, you will also be required to enter a one-time code that you get from a mobile authenticator app or via email or sms.

Get Started

Note: Getting two-step verification enabled is now mandatory to continue using your account, if any account is fails to subscribe two-step verification will be blocked without any further notice.

Replies to this email are not monitored.
Email intended for ***

© LogMeIn Inc, 320 Summer St., Boston MA, 02210

Message ID - ***

***

Phishing analysis :

CLICK : Get Started

OPEN : http://www.infolex.lt/ta/Redirect.aspx?Url=http://accounts.logme.in.login.aspx.clusterid.bioder.com.tr/images/.x/logme/index.php

REDIRECT : http://accounts.logme.in.login.aspx.clusterid.bioder.com.tr/images/.x/logme/index.php

SCREENSHOT :


CLICK : LOG IN

SCREENSHOT :


SCREENSHOT :


Email analysis :

NOTE : test@mg-bielefeld.de
NOTE : client-ip=94.205.155.2;


NOTE : Received : from static.130.139.9.176.clients.your-server.de
NOTE : ([176.9.139.130] helo=[127.0.0.1])


NOTE : by arbfinancial.com
NOTE : Content-Type : multipart/alternative; boundary="--_com.android.email_***

[Alert] Confirm Your PayPal Account

Your PayPaI account has been Iimited because we've noticed significant changes in your account activity. As your payment processor, we need to understand these changes better.

This account Iimitation will affect your ability to:

send or receive money
withdraw money
Also, you won't be able to:

remove any bank accounts
remove credit cards
close your account
What to do next

Please log in to your PayPaI account and provide the requested information before January 30, 2016 through the Account Review. If we don't receive the information before this deadline or we notice additional significant changes in your account activity, your account access may be further Iimited.

Log In Now

Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any PayPaI page.

Sincerely,

PayPaI

Copyright © 1999-2016 PayPaI. All rights reserved. PayPaI (Europe) S.à r.l. et Cie, S.C.A., Société en Commandite par Actions. Registered office: 22-24 Boulevard Royal, L-2449, Luxembourg, R.C.S. Luxembourg B 118 349.

PayPaI PPC000264:34ab11782e4b2

Phishing analysis :

CLICK : Log In Now
OPEN : http://bit.ly/1mwq0SS
REDIRECT : http://www.incaltaminte-mopiel.ro/redi.php
REDIRECT : http://2016.paypal.com.login.innovandosistemas.com.mx/home//
NOTE : Phishing was removed but the bit.ly is still alive.

Whois innovandosistemas.com.mx :

Name: Amanda Patricia Sabino Castro
City: Mexico
DNS: ns143.neubox.net
DNS: ns144.neubox.net

Whois incaltaminte-mopiel.ro :

NAME : incaltaminte-mopiel.ro
DATE : 2005-06-27 00:00:00
DNS : ns1.incaltaminte-mopiel.ro
DNS : ns2.incaltaminte-mopiel.ro
REGISTRANT : S.C. Mopiel S. R. L.
ADDRESS : Str. Victoriei, Bl. A2, Et. 8, Ap. 32
ADDRESS : Rm. Sarat, Buzau
CITY : Sarat
POSTAL : 125300
COUNTRY : ROMANIA
PHONE : +40-238-406342
EMAIL : mopielincaltaminte@gmail.com

Email analysis :

NOTE : info.pay@email.com
NOTE : Received : from [104.255.69.132]
NOTE : (port=63861 helo=[192.168.1.31])
NOTE : by srv.incaltaminte-mopiel.ro

Scammer's last position :

Mr kelvin Anthony

Attention Beneficiary We have registered your ATM CARD of (US $2.5) with DHL COURIER SERVICE customer service with registration code of (61864386) please Contact with your delivery information: 1. Your Full Name................ 2. Your Telephone No.......... 3. Your Country................ 4. Your Home Address........ DHL COURIER SERVICE Name; MR KELVIN ANTHONY E-mail: (dhlservice200@gmail.com) Telephone:+22968603108 We have paid for the Insurance & Delivery fee. The only fee you have to pay is their Security Keeping fee only. Please indicates the registration Number of (9665776) Furnish them with your Address and Phone number for your delivery. Best Regards JAMES FRANK

Email analysis :

NOTE : dhlservice200@gmail.com
NOTE : anthony.kelvin@mail.ru
NOTE : Received : from [41.79.219.195]

Scammer's last position :

Rép : Sgt. Sherri (Scam)

Hi!.

I'm Sgt. Sherri Gallagher. I'm a US Army officer currently in Iraq now, i am from the united state of America, i have an important issue to discus with you. Kindly reply back to me very urgent to confirm that you got my email, this is to enable me share with you the purpose of this urgent contact with you .

Sgt.jpg


Email analysis :

NOTE : Rép : Sgt. Sherri
NOTE : sgtsherrigallaghera@hotmail.com
NOTE : precyoliver3@hotmail.com

Rép : From Precy Oliver (Love Scam)

Hello

I am Miss Precy,

I read your details at ***

I was attracted by your post, though I'm seeking for a sincere partner, i will tell you more details as soon as i hear from you, i sent you one photo now, i will send you more later and tell you the reason why searching for a sincere partner, kindly Write me back as soon as you receive my message,

I will be waiting to hear from you!
Miss Precy Oliver!!


Email analysis :

NOTE : precyoliver1@hotmail.com
NOTE : precyoliver@hotmail.com
NOTE : client-ip=65.54.190.231;
NOTE : Authentication-Results : spf=softfail (sender IP is 25.152.64.60)

Scammer's last position :

I NEED YOUR URGENT RESPONSE;

Dear Friend,

With due respect to your person and much sincerity of purpose . I have a business proposal which I will like to handle with you. $35 million USD is involves. But be rest assured that everything is legal and risk free as I have concluded all the arrangements and the legal papers that will back the transaction up. Kindly indicate your interest as to enable me tell you more detail of the proposal.

Waiting for your urgent response.
Yours Faithfully,
Mr.Thomson Philip

Email analysis :

NOTE : S9889@rose.ocn.ne.jp
NOTE : mrthomsonphilip508@yahoo.com
NOTE : 153.149.233.36

Scammer's last position :