Tuesday, October 21, 2014

How are you doing ?

Good day,

I am miss tessy barley from florida..am seeking for your assistance..My first boy friend, Torres Mark, absconded with my dad's money which was kept with me after a completion of a contract in Salt Lake,US. When my boy friend got absconded with the undisclosed sum of USdollars, this brought the first brokeup between me and my dad, cos he thought, we have the deal together,but not knowing that I'm an innocent about this and i dont know where about of Torres. So my dad has been harsh and tough against me about this .and he treat me like a slave with his newly wife. Then when I perceived all his behaviors towards me and the bad acts of his newly gotten wife, i decided to leave United state to meet a friend in united arab emirate[Dubai] whom have meet during our stay there for a contract with . I left because my dad have been treating me bad and stopped me from working with him even having any access to his assets, and i felt no where to go than to leave the United state. Now, I'm in need of your help, have gotten enuogh money to run myself when I get to United state or your country, i want to come over to your end and stay with you for main time, I don't want to live here anymore, you know I'm a foreigner here and it is absolutely danger for me here, so that is why i need your gesture assistance. How i want you to help me? I have some money, which I've gotten from an over invoiced Contract renumeration executed by my dad with some contractors, so I have taken up the money from the contractors, but I'm hiding up from the girl I stayed with here in DUBAI, because i might got setup if they know i have such huge amount of money (2.6million$), so for me to be more safe and secure, I put this money in a box and got it locked up with a security code known to me only, and I deposited the box with some of my travelling luggages with a Security and Insurance Company who render private diplomatic delivery service and i told them that the two boxes are my travellin luggage,which I want to send forth to United state or your prefarable place for me because i'm returning home, then i paid them up their custody and security fee. So, I want the box sent to you while i catch up with you as soon as it is been delivered to you while I pay you up your Rent charge and a reasonable amount for compensation,only 20% of the money in the box to you if you are just willing to keep the boxes for me and if you are willing to hve me as the woman to spend the rest of your life with or your daughter there is no need of paying 20% of the money that means we both have it and owns it. Every arrangement for the delivery is kinda perfect, I have you just help me to mail the company and tell them you need yourobtained customs papers for private freight and all arrangement about the delivery of the boxes to you is perfect and there are seals on the box showing that it is a private delivery and check performed, it is free from customs checks, it will be delivered at your door step by the diplomats of the security company, you do not need to burn out to receive it. And the boxes have security codes lock known to me only, only me can open the boxes, except i And once the box gets, I will be there with you as soon as you received the boxes, then we can open the box together or i will tell you the code to open it,so that you can arrange everything properly before my arrival. Like I said, I will pay for your rent and fulfil my 20% promise of the money to you if you are just willing to get it keep for me but if you really want me as a woman to be with there is no need of paying you. I will really appreciate your trust towards this and hope i can put all this in your care,cos this is all i have left with me now i have being hurt by men and i know what it is to be hurt thr is no problem in this I will appreciate your trust.The boxes will only take 3-5days to be deliver to you.

Best Regards

Tessy Barley.

Account Verification Notice (PayPal Phising)

http://images.paypal.com/en_GB/GB/i/logo/paypal_logo.gif
Dear Valued Customer,

We have detected unusual charges to a credit card linked to your account.

Your PayPal account have been limited due to the following reason: A number of suspicious activities have triggered our security system that shows that an un-authorized user tried to access your PayPal account with malicious intent. To minimize their efforts, we have limited access to your account. We have sent you an attachment containing the necessary steps in order to restore your account to its normal state. Simply download and open it in your web browser. Please do understand that this is a security measure intended to protect you and your account.

We apologize for any inconvenience.

Please do not reply to this email. This mailbox is not monitored by our staff. For assistance, you may log in to your PayPal account and click Help in the top right corner of the home page.

Copyright © 1999-2014 PayPal. All rights reserved.

< Attached.html >

Phishing analysis :

OPEN : Attached.html
FIND : http://www.secured-line.su/reach.php

secured-line.su whois :

domain: SECURED-LINE.SU
nserver: ns1.dnsfrnws.com.
nserver: ns2.dnsfrnws.com.
nserver: ns3.dnsfrnws.com.
nserver: ns4.dnsfrnws.com.
state: REGISTERED, DELEGATED
person: Private Person
e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2014.07.10
paid-till: 2015.07.10
free-date: 2015.08.12
source: TCI

Email analysis :

NOTE : Return-Path : < notice@ppsec.com >
NOTE : Received : from server5124.123-serv.co.uk (HELO mail.alphads.co.uk) (109.104.75.167)
NOTE : Received : from 109.104.75.167 ([122.155.190.166])
NOTE : by ds5124.dedicated.turbodns.co.uk
NOTE : X-Mailer : Elm 2.0.88004
NOTE : Mime-Version : 1.0
NOTE : Content-Type : multipart/mixed; boundary="--34470"
NOTE : Account Verification Notice

Account Reviewed (PayPal Phishing)

Update Personal Information

Dear PayPal Member,

It has come to our attention that your PayPal account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. If you could please take a few minutes out of your online experience and update your personal records, you will not run into any problems in the future with the online service. However, failure to update your records could result in account suspension. We advise you to update your records as soon as possible. To update your account information, please download and open the attachment file that we sent via this email, and simply open it with your web browser. Once you have updated your account records, any activities going through your account will no longer be interrupted. We apologize for any inconvenience. Please understand that this is to keep you and your account in a protected state.

Copyright © 1999 - 2014 PayPal. All rights reserved.

< Verification.html >

Phishing analysis :

OPEN : Verification.html
FIND : http://www.secured-line.su/reach.php

secured-line.su whois :

domain: SECURED-LINE.SU
nserver: ns1.dnsfrnws.com.
nserver: ns2.dnsfrnws.com.
nserver: ns3.dnsfrnws.com.
nserver: ns4.dnsfrnws.com.
state: REGISTERED, DELEGATED
person: Private Person
e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2014.07.10
paid-till: 2015.07.10
free-date: 2015.08.12
source: TCI

Email analysis :

NOTE : Return-Path : < staff@accounts8.com >
NOTE : Received : from 188.165.201.20 ([24.38.112.187]) by softysoft.fr
NOTE : X-Mailer : GroupWise 12.0.162984
NOTE : Mime-Version : 1.0
NOTE : Account Reviewed

Hi

Hello,

Good day to you, My name is Mr. Mark. I am contacting you in regards to my family search for a good and reliable man or woman or company organization that can assist us in to an investment project in abroad. You can contact me back for more details.

Thank you.

Email analysis :

NOTE : Return-Path : < seconci@seconci-df.org.br >
NOTE : Received : from mail.seconci-df.org.br
NOTE : (HELO cc-04.seconci-df.org.br) (200.199.213.21)
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by cc-04.seconci-df.org.br (Postfix)
NOTE : Received : from cc-04.seconci-df.org.br ([127.0.0.1]) by localhost
NOTE : (cc-04.seconci-df.org.br [127.0.0.1])
NOTE : Received : from cc-04.seconci-df.org.br
NOTE : (cc-04.seconci-df.org.br [127.0.1.1]) by cc-04.seconci-df.org.br (Postfix)
NOTE : X-Virus-Scanned : amavisd-new at seconci-df.org.br
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain; charset=utf-8
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Originating-Ip : [207.244.89.112]
NOTE : X-Mailer : Zimbra 6.0.10_GA_2692 (ZimbraWebClient - FF3.0 (Win)/6.0.10_GA_2692)
NOTE : Hi

re:gold offer and investement proposal

Hello

We currently have gold ingots.

offer of sale.

We are looking for potential buyers or sellers very serious to sell our stock veryimportant. We also grant loan credits and also we intervene in l ' capital projects has short andlong-term Contact us for more information.

neat
Camara

Email analysis :

NOTE : Received : from mailler15.lws-hosting.com (mailler15.lws-hosting.com. [193.37.145.82])
NOTE : Received : from mailler15.lws-hosting.com (localhost.localdomain [127.0.0.1])
NOTE : by filter.mynetwork.local
NOTE : Received : from mailler15.lws-hosting.com (localhost.localdomain [127.0.0.1])
NOTE : by filter.mynetwork.local
NOTE : Received : by mailler15.lws-hosting.com (Postfix, from userid 10001)
NOTE : Received : from mail15.lwspanel.com (mailler15.lws-hosting.com [193.37.145.82])
NOTE : (Authenticated sender: contact@djogbe-invest.com)
NOTE : Return-Path : < contact@djogbe-invest.com >
NOTE : X-Spam-Checker-Version : SpamAssassin 3.3.1 (2010-03-16)
NOTE : on mailler15.lws-hosting.com
NOTE : Mime-Version : 1.0
NOTE : X-Sender : contact@djogbe-invest.com
NOTE : User-Agent : Roundcube Webmail/1.0.3
NOTE : re:gold offer and investement proposal

URGENT REPLY

ATTENTION BENEFICIARY,

NOTE THAT WE HAVE DECIDED TO PAY YOU YOUR ONIES THROUGH MONEY GRAM URGENT REMITTING OFFICE SINCE YOU WAS UNABLE TO RECEIVE YOUR MONEY THROUGH WESTERN UNION DUE TO THEIR MANAGEMENT BUT NOW WE HAVE SENT YOUR FULL COMPENSATION PAYMENT OF US$1.8Millions USD TO YOU THROUGH MONEY GRAM, YOU WILL BE RECEIVING 5.000.00USD PER DAY, BUT I WANT YOU TO CONTACT THE MANAGEMENT IN MONEY GRAM RIGHT NOW AND ASK HIM FOR YOUR FIRST PAYMENT .HIS NAME IS DR:CHRIS PATRICK, ASK HIM TO GIVE YOU THE MONEY GRAM PAYMENT INFORMATION SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY PROBLEM. HIS EMAIL ADDRESS IS: infoservicemoneygram@yahoo.com

Your name:_____________
Country:______________
Phone no:____________
0ccupation:__________
Address/city:___________
Age/sex:______________

EMAIL HIM NOW SO THAT HE CAN PROVIDE THE MONEY GRAM INFORMATION TO YOU AS URGENT AS YOU CAN.

THANKS AND GOD BLESSING YOU
Mr.David Paulon.

Email analysis :

NOTE : Return-Path : < apache@u15433785.onlinehome-server.com >
NOTE : Received : from u15433785.onlinehome-server.com (216.250.115.17)
NOTE : Received : from u15433785.onlinehome-server.com (unknown [127.0.0.1])
NOTE : by u15433785.onlinehome-server.com (Postfix)
NOTE : Received : by u15433785.onlinehome-server.com (Postfix, from userid 48)
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain
NOTE : Content-Transfer-Encoding : 8bit
NOTE : URGENT REPLY

[Spam] INSTRUCTION TO RELEASE YOUR INHERITANCE FUND

If this email is not spam, click here to submit the signatures to FortiGuard - AntiSpam Service.

INTERNATIONAL MONETARY FUND (IMF)
HEAD OFFICE NO: 23 AVELELON RAOD,
Abuja Nigeria.
EMAIL(infodervice@gmail.com)

INSTRUCTION TO RELEASE YOUR INHERITANCE FUND

ATTENTION:

This is to intimate you of a very important information which will be of a great help to redeem you from all the difficulties you have been experiencing in getting your long over due payment due to excessive demand for money from you by both corrupt Bank officials and Courier Companies after which your fund remain unpaid to you. I am Mr John Lee a highly placed official of the International Monetary Fund (IMF). It may interest you to know that reports have reached our office by so many correspondences on the uneasy way which people like you are treated by Various Banks and Courier Companies/ Diplomat across Europe to Africa and Asia /London Uk and we have decided to put a stop to that and that is why I was appointed to handle your transaction here in Nigeria. All Governmental and Non-Governmental prostates, NGOs, Finance Companies, Banks, Security Companies and Courier companies which have been in contact with you of late have been instructed to back up from your transaction and you have been advised NOT to respond to them anymore since the IMF is now directly in charge of your payment. The most annoying thing is that the bad officials won't tell you the truth that on no account will they ever release the fund to you, instead they allow you spend money unnecessarily, I do not intend to work here all the days of my life, I can release this fund to you if you can certify me of my security. I needed to help you release the fund because you need to know the statues of your funds and cause for the delay, Please this is like a Mafia setting in Nigeria, you may not understand it because you are not a Nigerian. Listed below are the mafia's and banks behind the non release of your funds that i managed to sneak out for your kind perusal. PLEASE CHECK AMOUNT THESE NAMES IF THERE IS ANY ONE AMONG THEN WHO HAVE SCAMMED YOU, IF YES GET BACK TO ME FOR LEGAL ACTION TO BE TAKEN.

1) Prof. Charles soludo(CBN)
2) FBI
3) Senator David Mark
4) Chief Lamido Sanusi(CBN)
5) John Rob(Barclays bank plc)
6) Mrs Stella Brown(Barclays bank plc)
7) Ronald Franklin
8) Barrister Ucheuzo Williams
9) Mr. Ernest Chukwudi Obi
10) Mr. Mike Jombo

Deputy Governor - Policy / Board Member

11) Mr. Tunde Lemo Deputy Governor - Financial Sector Surveillance / Board Member
12) Mrs. W. D. A. Mshelia Deputy Governor - Corporate

Services / Board Members

13) Mrs. Okonjo Iweala
14) Mrs. Rita Ekwesili
15) Keith B. Bolcar Deputy Secretary. (Homeland Security.)

You are hereby advised NOT to remit further payment to any institutions with respect to your transaction as your fund will be transferred to you directly from our source. I hope this is clear. Any action contrary to this instruction is at your own risk. Respond to this e-mail on (infodervice@gmail.com) with immediate effect and we shall give you further details on how your fund will be released.

Reconfirm the information bellow

1. Full Name:
2. Address:
3. Nationality:
4. Age: Date of Birth:
5. Occupation:
6. Phone: Mobile/Cellular.....................Fax:..
7. State of Origin:
8. Copy of your identity Card

Also Call me as soon as you receive the letter so that you will be given an immediate response: Direct Hotline: EMAI(infodervice@gmail.com)

Regards,
YOURS SINCERELY,
MANAGING DIRECTOR IMF

Email analysis :

NOTE : Return-Path : < ministerio.salud@chaco.gov.ar >
NOTE : Return-Path : ministerio.salud@ecomchaco.com.ar
NOTE : Received : from mail.chaco.gov.ar
NOTE : (HELO ex-transport.chaco.gov.ar) (201.217.244.208)
NOTE : Received : from User (176.196.207.170)
NOTE : by Ex-transport.chaco.gov.ar (10.2.0.162)
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html; charset="_iso-2022-jp$ESC"
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Priority : 3
NOTE : X-Msmail-Priority : Normal
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2800.1081
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2800.1081
NOTE : X-Spaminfo : FortiGuard - AntiSpam ip, connection black ip ###.###.###.###
NOTE : [Spam] INSTRUCTION TO RELEASE YOUR INHERITANCE FUND

Get back to me soon

Dear Friend.

I am Mrs. Susan Jones a seasoned banker with Clydesdale Bank here in London and I wish to request for your assistance in a deal that involves Ј7.2M (Seven million, Two Hundred Thousand Great British pounds sterling) with our Bank. This deal by virtue of its nature must be utterly confidential and top secret. Though I know that a transaction of this magnitude will make any one apprehensive and worried, but I am assuring you that this will be done under a legitimate arrangement that will protect both of us from any breach of the law. I came to know you in my private search for a reliable and reputable Business Person/individual that can handle this confidential deal with me, which required maximum confidence and trust from both sides.

MY PROPOSITION;

I am an account officer to one of the dormant accounts with our bank that belong to one of our deceased customer Mr. Paul Louis Halley a French citizen rich man that was into several business here in London before his death along with his wife in an air crash. Before their untimely death our customer deposited the Sum of Ј7.2M (Seven million, Two Hundred Thousand Great British pounds sterling) with our bank here in London.

This website will give you comprehensive picture of what I am talking about (http://newswww.bbc.net.uk/2/hi/uk_news/england/oxfordshire/4537663.stm). During the bank audit exercise, it was discovered that a lot of accounts has been dormant as an unclaimed credit balance, hence our management decided during the current re-capitalization in our banking sector, to phase out all accounts that has been dormant. I being the account officer to late Mr. Paul Louis Halley, I have made several inquiries to his high commission to locate my client's extended relatives, but all my efforts proved abortive, I then decided to trace his relatives or family member over the internet, and hence I found you as my instinct convinces me that you will be a trustworthy and honest business partner and I decided to contact you to assist me in repatriating my late client's deposit before it got confiscated or declared unserviceable by our bank, Clydesdale Bank here in London.

I therefore wish to request for your assistance and permission to present you as the appointed next of kin to Mr. Paul Louis Halley so that the Ј7.2M (Seven million, Two Hundred Thousand Great British pounds sterling) can be released and paid into your account as the beneficiary. Be informed that this transaction is risk free otherwise I will not contact you because it is against our bank policy. Please get in touch with me immediately if you are interested to assist me by furnishing me with the following information;

1. Your full names
2. Your full address
3. Direct Telephone numbers

Looking forward to your prompt response.

Yours Sincerely,
Mrs. Susan Jones

Email analysis :

NOTE : Return-Path : < info@clydesdalebank.co.uk >
NOTE : Received : from mailer.novisplet.com (91.223.182.69)
NOTE : Received : from User (fl-209-26-22-227.sta.embarqhsd.net [209.26.22.227])
NOTE : by mailer.novisplet.com
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html; charset="Windows-1251"
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Priority : 3
NOTE : X-Msmail-Priority : Normal
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Get back to me soon

YOUR ATTENTION IS NEEDED:

Your total fund of $1.2million was deposited at the office of the Western Union Money transfer today under the custody of Mr. James Anderson. You shall be receiving $4,500.00 everyday and per transfer. To begin the transfer, your first $4,500.00 has been sent in your name and ready for pick up so you are hereby advised to contact the Western Union agent; Mr. James Anderson immediately for the release of your transfer information (MTCN, sender names, question and answer test) of your first payment sent today. Please note that the cost of your MTCN activation has to be paid to the western union office by you. When you contact him, ask him the cost of the activation fee of your MTCN you need to pay before your transfer information is released to you for pick up today. Please we are using this medium to also apologize for whatever you must have passed through because of your funds as we are here to serve you to the best of our integrity and also put an end to this problem. Note that the western Union has also been mandated that on no reason shall any amount be deducted from your total fund for you shall receive your funds as we have it registered here and you are only paying your activation fee to them.

Contact person: Mr. James Anderson (Western Union Manger)
Email: westerntransfer.office@yahoo.com
Contact phone number. +229 68808554

Please contact them now for the immediate release of your funds and also to give you the m t c n, sender's name, to pick up your first $4,500.00 from your total fund today. Have it in you that $4,500.00 shall be transferred to you daily till the full payment of $1.2million is completely transferred and the transfer charge has been taken care of please note. Forward your full name, Telephone number and Address to them immediately so they will be sure of what they have to avoid mistakes. We shall also forward your message to them in case you sent your email back to this office and they shall contact you from their office as soon as possible

FORWARD THEM YOUR FULL INFORMATION AS BELOW.
Your Full name -----------------
Your address------------------
Your city---------------
Your country-------------------
Your age---------------
Your sex---------------
Your occupation------------
Your phone number--------------

Yours in Service
The secretary,
Federal Ministry of Finance and
Board of Debt Management,
Dr. Mrs. Jessica Eseh

Email analysis :

NOTE : westerntransfer.office@yahoo.com
NOTE : Return-Path : < officefile490@yahoo.com.tw >
NOTE : Received : from nm14-vm8.bullet.mail.tp2.yahoo.com (203.188.200.144)
NOTE : Received : from [203.188.200.179]
NOTE : Received : from [203.188.200.160]
NOTE : Received : from [127.0.0.1] by omp1005.mail.tp2.yahoo.com
NOTE : X-Yahoo-Newman-Property : ymail-3
NOTE : X-Yahoo-Newman-Id : 660667.2777.bm@omp1005.mail.tp2.yahoo.com
NOTE : YOUR ATTENTION IS NEEDED:

YOUR BANK DRAFT

Dear Friend,

Compliments of the day and God's blessings I am glad to inform you that I have successfully concluded the transaction,the money transferred to London. It was transferred through the assistant of your country man Mr.Louis Conno who is a London base business man. Currently I am in London with him,my husband and children. However,I did not forget you because you are the source of my success,you made me what I am now though you are not there to complet this project with me but I gave all the credit and thanks to you. I know it was not your fault or rather your wish to back up on me and the transaction ,I understand it is simply because of what you must have heard about my continent and her business opportunities. Actually there are still good ones for example myself. In appreciate of your assistance I have mapped out as a compensation and wrote on your favor an International Certified Bank Draft worth Nine Million United States Dollar (USD 9,000,000.00) I left the Draft with my attorney Mr,Chuks Okoh my departure to London. I would like you therefore,to contact him on the below info so that he can mail it to you.

Attn: Mr,CHUKS OKOH
Email: barrichuksokoh@3mail.ie
+22999027009

PLEASE SEND TO HIM YOUR PERSONAL CONTACT

1,FULL NAME.................
2,DELIVERY ADDRESS........
3,Country...........
4.PHONE NUMBER...........
5. AGE:........................

Contact my attorney in Benin-Republic so that he can release your Draft with code 799. I will stop here.Once again, thank you very much and remain blessed.

Regards,
Mrs. Hellen Nuhan

Email analysis :

NOTE : Return-Path : < officefile888@gmail.com >
NOTE : Return-Path : officefile888@gmail.com
NOTE : Received : from unknown (HELO srvpdicamiones.CAMIONES.LOCAL) (186.24.44.170)
NOTE : Received : from User ([93.54.49.34]) by srvpdicamiones.CAMIONES.LOCAL
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain; charset="Windows-1251"
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Priority : 3
NOTE : X-Msmail-Priority : Normal
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : YOUR BANK DRAFT

COMPENSATION TO YOU

Attention my dear friend,

Good day and compliments of the season and how are you today? I hope all is well with you. I’m happy to inform you about my success for getting those funds transferred under the cooperation of a new partner from UK few days ago.

Presently I’m in UK for investment projects with my own share of the total sum Meanwhile, I didn't forget your past efforts and attempts to assist me in transferring those funds despite that it failed us somehow. Now contact my Secretary in Benin his name is Mr. Solomon Agbaka Email adders: solo_agbaka@yahoo.co.nz or you CONTACT WESTERN UNION OUTLET E-mail address infowesternunion_plc@yahoo.com ,please ask him to send you the usd$500.000.00 dollars which I kept for your compensation for all the past efforts and attempts to assist me in this matter.

I appreciated your efforts at that time very much, so feel free and get in touched with my Secretary and instruct him where to send the amount to you.

Please do let me know immediately you start receiving your compensation. I'm very busy here because of the investment projects with my new partner and for your information I have forwarded instruction to the my Secretary and the WESTERN UNION OUTLET on your behalf to receive to your compensation, so feel free and contact him Mr. Solomon Agbaka and WESTERN UNION OUTLET, so that they will send the amount to you without any delay.

Thank and best regards,

Mr. Louis Migan

Email analysis :

NOTE : Return-Path : < freeman@sobral.org >
NOTE : Received : from mail.sobral.org (186.225.40.197)
NOTE : Received : from 127.0.0.1 by srv8 (envelope-from < freeman@sobral.org >)
NOTE : Received : from unknown (HELO webmail.sobral.org) (127.0.0.1)
NOTE : Received : from 146.185.30.93 (SquirrelMail authenticated user freeman@sobral.org)
NOTE : User-Agent : SquirrelMail/1.4.10a
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain;charset=iso-8859-1
NOTE : Content-Transfer-Encoding : 8bit
NOTE : X-Priority : 3 (Normal)
NOTE : Importance : Normal
NOTE : COMPENSATION TO YOU

Email Storage Alert234 (Google phishing)


Your mailbox is almost full.

Dear ***@***.com,

3840MB 4096MB

Current size Maximum size

Please reduce your mailbox size. Delete any items you don't need from your mailbox and empty your Deleted Items folder. Click here to do reduce size automatically.

Thanks,
Mail System Administrator

This notification was sent to %email%; Don't want occasional updates about subscription preferences and friendly suggestions? Change what email Google+ sends you. Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043 USA

Email analysis :

NOTE : Return-Path : < webmaster@socialshop.us >
NOTE : Received : from nofubu.be (70.32.77.185)
NOTE : Received : from ANTHORAZY-PC.www.huaweimobilewifi.com (unknown [41.58.76.5])
NOTE : X-No-Relay : not in my network
NOTE : Content-Type : text/html; charset="iso-8859-1"
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : Content-Description : Mail message body
NOTE : Email Storage Alert234

Phishing analysis :

CLICK : Click here
OPEN : http://www.sintsolar.com.ua/info/language/en/upgrade/ii.php
SCREENSHOT :


sintsolar.com.ua whois :

domain: sintsolar.com.ua
dom-public: NO
registrant: com-sint0-2
admin-c: com-sint0-2
tech-c: com-msl6-2
tech-c: com-rc-3
mnt-by: ua.forward
nserver: ns.radiocom.net.ua
nserver: ns.secondary.net.ua
status: ok
created: 2006-12-15 02:12:12+02
modified: 2013-11-27 01:57:46+02
expires: 2015-12-15 02:12:12+02
source: UAEPP
registrar: ua.forward
organization: FOP Cherkashin Vyacheslav Yurievich
organization-loc: ФОП Черкашин В'ячеслав Юрійович
url: http://forward.com.ua
city: Dnipropetrovsk
country: UA
source: UAEPP
contact-id: com-sint0-2
person: Industrial comercial company SINTEK Ltd.
organization: Industrial comercial company SINTEK Ltd.
e-mail: sintsolar@sintek.zp.ua
address: Patriotychna 64a 22
address: ZAPORIZHZHYA
postal-code: 69000
country: UA
country-loc: UA
phone: +380.612136116
fax: +380.612136116
mnt-by: ua.forward
status: ok
status: linked
created: 2013-03-31 19:15:51+03
source: UAEPP
contact-id: com-sint0-2
person: Industrial comercial company SINTEK Ltd.
organization: Industrial comercial company SINTEK Ltd.
e-mail: sintsolar@sintek.zp.ua
address: Patriotychna 64a 22
address: ZAPORIZHZHYA
postal-code: 69000
country: UA
country-loc: UA
phone: +380.612136116
fax: +380.612136116
mnt-by: ua.forward
status: ok
status: linked
created: 2013-03-31 19:15:51+03
source: UAEPP
contact-id: com-msl6-2
person: Microcom Sich Ltd.
organization: Microcom Sich Ltd.
e-mail: hostmaster@microcom.net.ua
address: P.O. 6493 -
address: ZAPORIZHZHYA
postal-code: 69035
country: UA
country-loc: UA
phone: +380.612202299
mnt-by: ua.forward
status: ok
status: linked
created: 2013-03-31 19:14:45+03
source: UAEPP
contact-id: com-rc-3
person: RadioCom ISP
organization: RadioCom ISP
e-mail: hostmaster@radiocom.net.ua
address: Krasnaya 22
address: ZAPOROZHYE
postal-code: 69068
country: UA
country-loc: UA
phone: +380.612148333
fax: +380.612148333
mnt-by: ua.forward
status: ok
status: linked
created: 2013-03-31 19:15:32+03
source: UAEPP