Alert Summary:
| Apple payment fraud alert iCloud Org. appleverificationfor-uk.com phishing emails |
Sample Message headers:
From: "iCloud Org." {astrid3168234.2d0e7@investrmi.com}
Subject: Apple payment fraud alert |
Sample Message body:
Dear Apple customer
Your Apple profile recently made a fraudulent
payment .
To reverse this change you must verify your account
Verify Now
>
Why you received this email.
Apple request
verification whenever a fraudulent payment has been made .
If you didn't
make this change or if you believe an unauthorized person is
attempting to
access your account, you can reset your password by going
to My Apple ID
Apple Support
My Apple ID | Support | Privacy
Policy
Copyright 2015 Apple Sarl 80102, Rue
Sainte Zithe, L-2696 Luxembourg Copyrighted.
---------------------------------------------- The message was
checked by Zillya Antivirus 2.0.579.0, bases 2.0.0.2093 - No viruses detected |
The Url to the fake site is:
| http://appleverificationfor-uk.com/verifyuknow/ |
The fake phishing site above looks like this:
The fake apple domain was recently set-up, details here:
Domain Name: APPLEVERIFICATIONFOR-UK.COM
Registry Domain ID: 1907324668_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tldregistrarsolutions.com
Registrar URL: http://www.tldregistrarsolutions.com
Updated Date: 2015-03-11T16:37:51Z
Creation Date: 2015-03-05T17:23:29Z
Registrar Registration Expiration Date: 2016-03-05T17:23:29Z
Registrar: TLD Registrar Solutions Ltd.
Registrar IANA ID: 1564
Registrar Abuse Contact Email: abuse@tldregistrarsolutions.com
Registrar Abuse Contact Phone: +44.2034357312
Reseller:
Domain Status: clientTransferProhibited - http://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Danuta Kowalska
Registrant Organization:
Registrant Street: 10 sezam street
Registrant City: ny
Registrant State/Province:
Registrant Postal Code: 82819
Registrant Country: US
Registrant Phone: +1.3328189192
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: danuta-kowalska88@wp.pl
Registry Admin ID:
|
The fake phishing site will also ask you to hand over your credit card details too....
Cheers,
Steve
Sanesecurity.com
No comments:
Post a Comment