Chér(e) Client(e)

 Nous tenons à vous informer que vous avez un nouveau message important de la part de votre conseiller:
 Pour le consulter veuillez cliquez sur le lien ci-dessous:

 Accéder à votre espace

 Nous vous remercions de votre confiance .

 Cordialment

 Crédit du Nord

 a1 2b c3……………………

 a0

Email screenshot :

Email analysis :

 NOTE : Content-Type : text/html; charset=UTF-8
 NOTE : Content-Disposition : inline
 NOTE : X-Priority : 3
 NOTE : Return-Path : < support@linode.com >
 NOTE : Content-Transfer-Encoding : quoted-printable
 NOTE : Received : from linode.com ([138.68.3.61])
 NOTE : Message-Id : < *@138.68.3.61 >
 NOTE : Vous avez reçu un nouveau message [064415554–05541]

Phishing analysis :

 CLICK : Accéder à votre espace
 OPEN : http://bnpmverif.com/1 (whois)
 REDIRECT : http://ift.tt/2axNLKd (whois)
 NOTE : Protected by cloudflare
 SCREENSHOT :

CLICK : Ok

CLICK : Valider
 REDIRECT : http://ift.tt/2axNF50
 SCREENSHOT :

CLICK : Valider
 REDIRECT : http://ift.tt/2azHz0R

Whois bnpmverif.com :

 Registry Domain ID: 2043958257_DOMAIN_COM-VRSN
 Registrar WHOIS Server: whois.ascio.com
 Registrar URL: http://www.ascio.com
 Updated Date: 2016–07–18T16:29:35Z
 Creation Date: 2016–07–18T00:00:00Z
 Registrar Registration Expiration Date: 2017–07–18T16:29:44Z
 Registrar: Ascio Technologies, Inc
 Registrar IANA ID: 106
 Registrar Abuse Contact Email: abuse@ascio.com
 Registrar Abuse Contact Phone: +44.2070159370
 Domain Status: OK
 Registrant Name: houda yves
 Registrant Street: Avda. del Partenon, 5
 Registrant City: madrid
 Registrant State/Province: MADRID
 Registrant Postal Code: 28042
 Registrant Country: ES
 Registrant Phone: +34.670452356
 Registrant Email: vvolivefr@gmail.com
 Admin Name: Master Host
 Admin Organization: One.com
 Admin Street: Kalvebod Brygge 24
 Admin City: Copenhagen V
 Admin State/Province: Copenhagen V
 Admin Postal Code: 1560
 Admin Country: DK
 Admin Phone: +45.46907100
 Admin Fax: +45.70205872
 Admin Email: hostmaster@one.com
 Tech Name: Master Host
 Tech Organization: One.com
 Tech Street: Kalvebod Brygge 24
 Tech City: Copenhagen V
 Tech State/Province: Copenhagen V
 Tech Postal Code: 1560
 Tech Country: DK
 Tech Phone: +45.46907100
 Tech Fax: +45.70205872
 Tech Email: hostmaster@one.com
 Name Server: ns01.one.com
 Name Server: ns02.one.com

Whois ezore.com :

 Domain Name: ezore.com
 Registry Domain ID: 1934089010_DOMAIN_COM-VRSN
 Registrar WHOIS Server: whois.godaddy.com
 Registrar URL: http://www.godaddy.com
 Update Date: 2016–05–20T13:56:51Z
 Creation Date: 2015–05–30T18:52:40Z
 Registrar Registration Expiration Date: 2017–05–30T18:52:40Z
 Registrar: GoDaddy.com, LLC
 Registrar IANA ID: 146
 Registrar Abuse Contact Email: abuse@godaddy.com
 Registrar Abuse Contact Phone: +1.4806242505
 Domain Status: clientTransferProhibited http://ift.tt/1AQMbZz
 Domain Status: clientUpdateProhibited http://ift.tt/1uJrSe7
 Domain Status: clientRenewProhibited http://ift.tt/1E4joOM
 Domain Status: clientDeleteProhibited http://ift.tt/1uJrSec
 Registry Registrant ID: Not Available From Registry
 Registrant Name: Michael Booth
 Registrant Organization: Graphic Booth
 Registrant Street: Rhos Cottage
 Registrant Street: Rhos-y-meirch
 Registrant City: Knighton
 Registrant State/Province: Powys
 Registrant Postal Code: LD7 1PD
 Registrant Country: UK
 Registrant Phone: +44.448002922293
 Registrant Email: michael@graphicbooth.com
 Registry Admin ID: Not Available From Registry
 Admin Name: Michael Booth
 Admin Organization: Graphic Booth
 Admin Street: Rhos Cottage
 Admin Street: Rhos-y-meirch
 Admin City: Knighton
 Admin State/Province: Powys
 Admin Postal Code: LD7 1PD
 Admin Country: UK
 Admin Phone: +44.448002922293
 Admin Email: michael@graphicbooth.com
 Registry Tech ID: Not Available From Registry
 Tech Name: Michael Booth
 Tech Organization: Graphic Booth
 Tech Street: Rhos Cottage
 Tech Street: Rhos-y-meirch
 Tech City: Knighton
 Tech State/Province: Powys
 Tech Postal Code: LD7 1PD
 Tech Country: UK
 Tech Phone: +44.448002922293
 Tech Email: michael@graphicbooth.com
 Name Server: DEE.NS.CLOUDFLARE.COM
 Name Server: RUDY.NS.CLOUDFLARE.COM
 DNSSEC: unsigned

Originally published on Scam.cz