Thursday, July 16, 2015

2015-07-16 Phish of the Day #2

Another graphic phish.  The "You are a winner" text was invisible in the original email but I displayed it in this post.  The link in this scam leads to http://tc8ui5w.dkenens.com/r/836667483929679915/1271/y0DePEW/a/5Wmvi1q

===== Begin Phishing Email =====

You are a winner

===== End Phishing Email =====

===== Begin Phishing Email Header Info =====

Return-path: <rFRf1b0@btkp2l8.dkenens.com>
Return-path: <BgzQz1v@hr5N9lW.dkenens.com>
Received: from K495767723.com ([78.135.71.17]) by vms172101.mailsrvcs.net
 (Oracle Communications Messaging Server 7.0.5.34.0 64bit (built Oct 14 2014))
 with ESMTP id <0NRJ00LREXSAZW00@vms172101.mailsrvcs.net>; Wed,
 15 Jul 2015 18:19:23 -0500 (CDT)
Date: Wed, 15 Jul 2015 18:12:55 -0500 (CDT)
Date-warning: Date header was inserted by vms172101.mailsrvcs.net
From: "Walgreens.com" <CrH8mMT@ey8iafE.dkenens.com>
Subject: Confirm Your email address to with a $50.00 Walgreens Gift Card 5662
X-Originating-IP: [78.135.71.17]
Message-id: <0NRJ00LRWXSAZW00@vms172101.mailsrvcs.net>
MIME-version: 1.0
Content-type: text/html
Content-transfer-encoding: 8BIT
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.1 cv=KY0vylsD c=1 sm=1 tr=0 a=JLq6eAL/6otLkCSV2YDGzg==:117
 a=JLq6eAL/6otLkCSV2YDGzg==:17 a=9cW_t1CCXrUA:10 a=FPINX1BYAAAA:8
 a=eG11HHb7AAAA:8 a=DJ1CZuZQAAAA:8 a=oR5dmqMzAAAA:8 a=-9mUelKeXuEA:10
 a=zOBTXjUuO1YA:10 a=ijbRzCuHEN38RD9m_mAA:9 a=vsXivbhLMk0A:10 a=WyacwRpqJ6QA:10
 a=NWVoK91CQyQA:10
X-ID: 0toAM1zsEiaL6lb8v39J_0


<div style="color: #FFF">You are a winner! </div>
<center><a href="http://Tc8uI5w.dkenens.com/r/836667483929679915/1271/y0DePEW/a/5Wmvi1q">
<img src="http://BGRC1r4.dkenens.com/r/112505547583773941/1271/xEIRnpS/i/ISd1PHG">
</a><center>

<style>
content
</style>

<center><a href="http://EjUPzzQ.dkenens.com/u/282545957558784672/1271/jSF9NrL/a/r8oTwQP">
<img src="http://COyru2u.dkenens.com/u/858282044915392790/1271/PHkEL2S/i/azGcZFn">
</a><center>

<style>
Sanctions. The deal calls for Iran to get sanctions relief after it implements parts of the agreement, including answers to questions from the United Nations nuclear watchdog agency about Iran's nuclear research. Western nations say Iran conducted weapons research, which it denies.
The deal says Iran gets sanctions relief after it provides answers in 90 days, which would happen before the International Atomic Energy Agency (IAEA) plans to submit its final report in December.
"What if the IAEA in December says Iran didn't cooperate?" asks David Albright, a former weapons inspector and now president of the Institute for Science and International Security. "What actually happens as a result of that? We couldn't find anything in this agreement that spelled it out."
Inspections. The deal provides international inspectors more access to declared nuclear sites. Their ability to investigate evidence of nuclear work at suspected sites that Iran does not declare will depend on a process that could get bogged down by Iranian stonewalling. The deal says a joint commission made up of representatives from the seven countries involved in the talks — the United States, Russia, China, Britain, France, Germany and Iran — and from the European Union will consider evidence of illicit activity. The whole process could take 24 days.
"That will give Iran time to destroy evidence," Albright said.
IAEA investigators have been denied access for years to an Iranian military site at Parchin, where they suspect explosives experiments were conducted for the development of nuclear weapons. That facility was razed and topsoil removed after they first sought to visit the building.
</style>

<center><a href="http://Z0plXPN.dkenens.com/u/352520873453841470/1244/78m2GnU/a/2TvJYsP">
<img src="http://YhUzufM.dkenens.com/u/362004352199890991/1244/6zgmdG6/i/7rWFc0D">
</a><center>

===== End Phishing Email Header Info =====

No comments:

Post a Comment