Sunday, January 10, 2016

Bradesco Infoemail - Você tem um recado importante

> Você acaba de receber um INFOEMAIL.

Clique aqui para atualizar seu cartão de segurança de 70 posições para continuar utilizando nossos caixas eletrônicos. Evite transtornos, faça sua atualização em menos de 1 minuto.

Bradesco S/A

Phishing analysis :

CLICK : aqui
OPEN : http://goo.gl/vs2Qji
REDIRECT : http://www.bradesco.com.br/
INFO : Phishing was removed...

Whois bradesco.com.br :

domain: bradesco.com.br
owner: BANCO BRADESCO SA
responsible: Cristiano Bezerra dos Santos
country: BR
owner-c: CBDSA
admin-c: CBDSA
tech-c: JRH16
billing-c: DORZE
nserver: usc5.akam.net
nserver: eur2.akam.net
nserver: ns1-215.akam.net
nserver: ns1-4.akam.net
nserver: usw1.akam.net
nserver: asia1.akam.net
status: published
nic-hdl-br: CBDSA
person: Cristiano Bezerra dos Santos
nic-hdl-br: DORZE
person: Douglas Roberto Zerbinati
nic-hdl-br: JRH16
person: Jeferson Ricardo Garcia Honorato

Email analysis :

NOTE : Received : from 189.48.121.61 (IP may be forged by CGI script)


NOTE : cgi-mailer-bounces-*@kundenserver.de
NOTE : by icpu4269.kundenserver.de

THIS BUSINESS WE BENEFIT US.>reply with(safi.kabore1@gmail.com)

Dear friend,

I need your help for Transferring(US$4.5M DOLLARS)to your Bank Account.

Reply Me back lets proceed also send the below requirement so i can reply you with more details so i can advice you on how to apply to the Bank for the transfer.

1)Full names.
2)country of origin.
3)Your Mobile No.
4)Your Age.
5)occupation.

Reply Me with this email(safi.kabore1@gmail.com)

Thanks.

Miss Safi kabore

Email analysis :

NOTE : saf.kabore3@aol.fr
NOTE : safi.kabore1@gmail.com
NOTE : Received : from 168.1.82.172

Scammer's last position :


Credit Suisse Group / CANA

with you its possible (HSBC Scam)

I am Chan Kin Keong, a banker with HSBC in Malaysia. I have an important transaction worth US$22.5M to share with you that will be of benefit for both of us, if interested please get back to me by Email: chankkhs@gmail.com

Email analysis :

NOTE : confidential@privatemail.com.my
NOTE : chankkhs@gmail.com
NOTE : Received : from Kessy.www.huaweimobilewifi.com (8ta-150-0-233.telkomadsl.co.za [41.150.0.233])
NOTE : (authenticated bits=0) by mx-srv.vghotel.net (8.14.7/8.14.7)

Scammer's last position :

Update your mobile phone (LogMeIn Phishing)

LogMeIn

Update your mobile phone

Get started with two-step verification

Two-step verification adds a second layer of protection to your account. Just like cash machine that protects your money by requiring a card and a PIN.

How it will protect you

After entering your LogMeIn ID and password, you will also be required to enter a one-time code that you get from a mobile authenticator app or via email or sms.

Get Started

Note: Getting two-step verification enabled is now mandatory to continue using your account, if any account is fails to subscribe two-step verification will be blocked without any further notice.

Replies to this email are not monitored.
Email intended for ***

© LogMeIn Inc, 320 Summer St., Boston MA, 02210

Message ID - ***

***

Phishing analysis :

CLICK : Get Started

OPEN : http://www.infolex.lt/ta/Redirect.aspx?Url=http://accounts.logme.in.login.aspx.clusterid.bioder.com.tr/images/.x/logme/index.php

REDIRECT : http://accounts.logme.in.login.aspx.clusterid.bioder.com.tr/images/.x/logme/index.php

SCREENSHOT :


CLICK : LOG IN

SCREENSHOT :


SCREENSHOT :


Email analysis :

NOTE : test@mg-bielefeld.de
NOTE : client-ip=94.205.155.2;


NOTE : Received : from static.130.139.9.176.clients.your-server.de
NOTE : ([176.9.139.130] helo=[127.0.0.1])


NOTE : by arbfinancial.com
NOTE : Content-Type : multipart/alternative; boundary="--_com.android.email_***

[Alert] Confirm Your PayPal Account

Your PayPaI account has been Iimited because we've noticed significant changes in your account activity. As your payment processor, we need to understand these changes better.

This account Iimitation will affect your ability to:

send or receive money
withdraw money
Also, you won't be able to:

remove any bank accounts
remove credit cards
close your account
What to do next

Please log in to your PayPaI account and provide the requested information before January 30, 2016 through the Account Review. If we don't receive the information before this deadline or we notice additional significant changes in your account activity, your account access may be further Iimited.

Log In Now

Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any PayPaI page.

Sincerely,

PayPaI

Copyright © 1999-2016 PayPaI. All rights reserved. PayPaI (Europe) S.à r.l. et Cie, S.C.A., Société en Commandite par Actions. Registered office: 22-24 Boulevard Royal, L-2449, Luxembourg, R.C.S. Luxembourg B 118 349.

PayPaI PPC000264:34ab11782e4b2

Phishing analysis :

CLICK : Log In Now
OPEN : http://bit.ly/1mwq0SS
REDIRECT : http://www.incaltaminte-mopiel.ro/redi.php
REDIRECT : http://2016.paypal.com.login.innovandosistemas.com.mx/home//
NOTE : Phishing was removed but the bit.ly is still alive.

Whois innovandosistemas.com.mx :

Name: Amanda Patricia Sabino Castro
City: Mexico
DNS: ns143.neubox.net
DNS: ns144.neubox.net

Whois incaltaminte-mopiel.ro :

NAME : incaltaminte-mopiel.ro
DATE : 2005-06-27 00:00:00
DNS : ns1.incaltaminte-mopiel.ro
DNS : ns2.incaltaminte-mopiel.ro
REGISTRANT : S.C. Mopiel S. R. L.
ADDRESS : Str. Victoriei, Bl. A2, Et. 8, Ap. 32
ADDRESS : Rm. Sarat, Buzau
CITY : Sarat
POSTAL : 125300
COUNTRY : ROMANIA
PHONE : +40-238-406342
EMAIL : mopielincaltaminte@gmail.com

Email analysis :

NOTE : info.pay@email.com
NOTE : Received : from [104.255.69.132]
NOTE : (port=63861 helo=[192.168.1.31])
NOTE : by srv.incaltaminte-mopiel.ro

Scammer's last position :

Mr kelvin Anthony

Attention Beneficiary We have registered your ATM CARD of (US $2.5) with DHL COURIER SERVICE customer service with registration code of (61864386) please Contact with your delivery information: 1. Your Full Name................ 2. Your Telephone No.......... 3. Your Country................ 4. Your Home Address........ DHL COURIER SERVICE Name; MR KELVIN ANTHONY E-mail: (dhlservice200@gmail.com) Telephone:+22968603108 We have paid for the Insurance & Delivery fee. The only fee you have to pay is their Security Keeping fee only. Please indicates the registration Number of (9665776) Furnish them with your Address and Phone number for your delivery. Best Regards JAMES FRANK

Email analysis :

NOTE : dhlservice200@gmail.com
NOTE : anthony.kelvin@mail.ru
NOTE : Received : from [41.79.219.195]

Scammer's last position :