[nrv-hams] Please DO NOT CLICK the Link!! - Account Suspension

Tue Mar 7 09:45:53 EST 2017

All,

(Just spotted message from Dave Knight.  He's right on target!!  Here's my clues anyway...)

Hopefully everybody was able to easily identify the below message as highly likely phishing or malware attack.

SUMMARY & IN-ACTION::  Please DO NOT CLICK that link!

DETAILS (for the interested CyberGeeks! and concerned members):

FYI - Additional clues for lack of legitimacy:

- Note the clever _source_ email from "Chase" that actually is "chse.com" vice chase.com"  A common attack deception for the unwary.

- Note the odd _destination_ domain name on that suspicious link:   "awanistudento.com"  instead of of course "chase.com" or anything similar...

- The INTERNIC reports a significant lack of legitimate contact data for the "awanistudento.com" domain.  No names, addresses, phone numbers, et al, such as provided for legitimate enterprises.

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

   Domain Name: AWANISTUDENTO.COM
   Registrar: TUCOWS DOMAINS INC.
   Sponsoring Registrar IANA ID: 69
   Whois Server: whois.tucows.com
   Referral URL: http://www.tucowsdomains.com
   Name Server: DNS1.MASTERWEBNET.COM
   Name Server: DNS2.MASTERWEB.NET
   Name Server: DNS3.MASTERWEB.COM
   Name Server: DNS4.MASTERWEBNET.COM
   Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Updated Date: 24-nov-2016
   Creation Date: 14-nov-2014
   Expiration Date: 14-nov-2017

>>> Last update of whois database: Tue, 07 Mar 2017 14:22:49 GMT <<<

- AND for grins, try a Google of "awani studento scam" which provides entertaining clues.

Hmmm!  And you _didn't_ click that link, did you?   If so, I hope you have rock solid anti-virus protection on your PC!

Hope this helps, and Good Luck!

Gene  :)

N3EV

----- Original Message -----
From: Chase AcctSec. Team chasesecurity-team_noreplies at chse.com <patrickjohnson1015 at gmail.com>
To: nrv-hams at mailman.qth.net
Sent: Tue, 07 Mar 2017 09:08:16 -0500 (EST)
Subject: [nrv-hams] Account Suspension

Hi,
Due to a recent compromise of our servers by some chinese hackers, It has
been mandated that we carry out an integrity check to isolate and disable
all
suspicious accounts. For now we have already placed a red flag on several
accounts
thereby preventing them from carrying out any financial transactions
whatsoever.
To ensure that your account was not compromised, you are required to
ascertain
your identity, failure to do this within 24 hours will lead to account
service
suspension.
Login and Ascertain Your Identity
<http://awanistudento.com/bin/enhance/portal/[email protected]>
Thanks for your anticipated co-operation and understanding.
The Accounts Team,
For Chase Online
______________________________________________________________
nrv-hams mailing list
Home: http://mailman.qth.net/mailman/listinfo/nrv-hams
Help: http://mailman.qth.net/mmfaq.htm
Post: mailto:nrv-hams at mailman.qth.net

This list hosted by: http://www.qsl.net
Please help support this email list: http://www.qsl.net/donate.html