Search FraudFYI

Thursday, April 9, 2015

PHISHING ALERT!! PHISHING email from Mrs. Jesaleony Sea-Port Clearance Department Maersk Line Shipping rblevantino@genosi.com.ph

DO NOT OPEN the .htm file attached to this email and DO NOT ENTER YOUR EMAIL LOG-IN and password!  The .html file opens a log-in page at http://2tghfhjf.3eeweb.com/SHIPPING/SHIPPING-2/SHIPPING/index.html which IS NOT MAERSK!  The log-in form is posting to http://2tghfhjf.3eeweb.com/SHIPPING/SHIPPING-2/SHIPPING/send.php and the site http://2tghfhjf.3eeweb.com has already been flagged as a PHISHING website by MyWot.com https://www.mywot.com/en/scorecard/2tghfhjf.3eeweb.com and black listed by SpamHaus.org http://www.spamhaus.org/query/domain/2tghfhjf.3eeweb.com

NO LEGITIMATE COMPANY WILL ASK FOR YOUR EMAIL LOG-IN and password! 

From the .htm attachment:
<meta http-equiv="refresh" content="0;   http://2tghfhjf.3eeweb.com/SHIPPING/SHIPPING-2/SHIPPING/index.html">

From the log-in page:
<form action="http://2tghfhjf.3eeweb.com/SHIPPING/SHIPPING-2/SHIPPING/send.php" method="post" id="commentForm" class="ajax_form">


Originating IP: 212.100.76.11
Originating ISP: Autonomous System Number For Cyber Space
City: Lagos
Country of Origin: Nigeria

from: MAERSK LINE <rblevantino@genosi.com.ph> 
to: Recipients <rblevantino@genosi.com.ph>
date: Wed, Apr 8, 2015 at 7:08 PM
subject: Re:Bill Of Lading And Invoice Documents

Dear sir,

kindly see attach bill of lading and invoice for reference.

regards

Mrs. jesaleony
Sea-Port Clearance Department.
Maersk Line Shipping.

attachment; filename="SHIPPING.htm"

No comments:

Post a Comment

Thank you for commenting! Your comment will be reviewed and posted shortly!