Saturday, December 20, 2014

Inquiry From TradeKey (Tradekey Phishing)

TradeKey Logo

Dear Tradekey Customer,

You have received a new business inquiry from Rashid al-Maktum on Tradekey.com unfortunately, we are unable to deliver further inquiries to your email address. Please visit the Tradekey.com member services centre to verify your email account information.

*Please Sign in here with your email-address and e-mail password to verify your account.

Wishing you the very best of business,

Thank you for using our services.

http://int2.tkcdn.com/lang/images/iso_horizontal.gif

Privacy Policy - Terms of Use - Intellectual Property Policy
Copyright © 2014 TradeKey.com

Phishing analysis :

CLICK : *Please Sign in here with your email-address and e-mail password to verify your account.
OPEN : http://staging.sojournmusic.com/tradekey.com/index.html
SCREENSHOT :


ACTION : FILL FORM
CLICK : Sign In
REDIRECT : http://www.tradekey.com/
ANALYSIS : http://staging.sojournmusic.com/ RELAY TRADEKEY PHISHING
ANALYSIS : CODE SOURCE OF THE PHISHING PAGE : http://pastebin.com/raw.php?i=Rjp0N096

Email analysis :

NOTE : Received-Spf : client-ip=95.215.227.59;
NOTE : X-Source-Args : /usr/sbin/proxyexec -q -d -s /var/run/proxyexec/cagefs.sock/socket /bin/cagefs.server
NOTE : Return-Path : < wwwiliad@dedicated1.i-spy360.com >
NOTE : Mime-Version : 1.0
NOTE : X-Source-Dir : iliad.mu:/public_html/wp-includes/Text/Diff/Renderer
NOTE : X-Php-Script : www.iliad.mu/wp-includes/Text/Diff/Renderer/jamb.php for 41.151.173.119


NOTE : Content-Transfer-Encoding : 8bit
NOTE : X-Get-Message-Sender-Via : dedicated1.i-spy360.com
NOTE : :authenticated_id: wwwiliad/only user confirmed/virtual account not confirmed
NOTE : Content-Type : text/html
NOTE : Received : from blackmartini.mu (vps.i-spy360.com. [95.215.227.59])
NOTE : Received : from wwwiliad by dedicated1.i-spy360.com with local (Exim 4.84)
NOTE : (envelope-from < wwwiliad@dedicated1.i-spy360.com >)
NOTE : Inquiry From TradeKey

FINAL NOTE :

NOTE : illiad.mu was used to send the phishing. (Leaked wordpress installation)
NOTE : The phishing is hosted by sojournmusic.com (Leaked wordpress installation)
NOTE : The phishing mail was sent by 41.151.173.119

YOUR PAYMENT NOTIFICATION

YOUR PAYMENT NOTIFICATION:
Dr. Kelvin Chidi Director
Inter-switch Unit ATM ISSUANCE.

This is to officially inform you that we have verified your contract/inheritance file presently on my desk, and I found out that you have not received your payment due to your lack of co-operation and not fulfilling the obligations giving to you in respect to your contract/inheritance payment.Secondly, you are hereby advised to stop dealing with some non-officials in the bank as this is an illegal act and will have to stop if you so wish to receive your payment immediately. After the board meeting held at our headquarters, we have resolved in finding a solution to your problem and as you may know we have arranged your payment through our SWIFT CARD PAYMENT CENTER in Europe, America and Asia Pacific which is the instruction given by The president of NIGERIA This card center will send you an ATM CARD which you will use to withdraw your money in an ATM MACHINE in any part of the world, but the maximum is ($3,000) Three Thousand Us Dollars per transaction. So if you like to receive your fund this way,

(1) Your Full Name:
(2) Address where you want the payment center to send your ATM CARD:
(3) Phone And Fax Number:
(4) Your Next of Kin:
(5) Occupation:

We shall be expecting to receive your information you have stop any further communication with anybody or office.On this regards, do not hesitate to contact me for more details and direction, and also please do update me with any new development.

Thanks for your co-operation.
Best Regards, Dr. Kelvin Chidi
Contat Me dr.kelvinchidi3@yahoo.fr
Director Inter-switch Unit

Note: Because of impostors, we hereby issue you with our code of conduct, which is (105) so you have to indicate this code when contacting this office.

Email analysis :

NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < test1@foundation.com >
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : X-Remote : 64.91.228.122 ()
NOTE : X-Priority : 3
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : X-Get-Message-Sender-Via : host2.interconnectnetworks.com
NOTE : : authenticated_id: test1@THEPLDGROUP.COM
NOTE : Content-Type : text/plain; charset="Windows-1251"
NOTE : Received : from unknown (HELO host2.interconnectnetworks.com) (64.91.228.122)
NOTE : Received : from [12.198.159.210] (port=4729 helo=User)
NOTE : by host2.interconnectnetworks.com with esmtpa (Exim 4.82)
NOTE : (envelope-from )
NOTE : YOUR PAYMENT NOTIFICATION

IN REGARD TO YOUR ATM MASTER CARD PACKAGE WITH U.P.S

I RECEIVED AN EMAIL ALERT FROM UPS IN REGARD TO YOUR PACKAGE WHICH HAVE BEEN WITH THEM FOR TWO WEEKS NOW AND THE INTERNATIONAL SHIPPING AGENT IN CHARGE PLANNED TO RETURN YOUR PACKAGE TO THE FEDERAL MINISTRY
OF FINANCE OF NIGERIA. THE TOTAL AMOUNT IN YOUR ATM MASTER CARD CONTAIN IS $10.5 MILLION USD AND THIS INCLUDE INTEREST RATE UP TILL DATE.THE MASTER CARD WAS PROGRAMMED TO HAVE ACCESS GLOBALLY WHICH YOU
CAN MAKE WITHDRAW OR TRANSACTION IN ANY PART OF THE WORLD.

IT SEEMS YOU DON'T WANT TO SHOW ANY SERIOUSNESS TOWARDS THE SHIPMENT OF YOUR PACKAGE THAT WHY HE WANT TO RETURN IT AND HE NEED PERMISSION FROM ME FIRST BEFORE HE WILL RETURN THE PACKAGE. I ORDER HIM TO STOP
AND I ALSO ASSURE HIM THAT I WILL MAKE SURE THE CHARGE FEE REQUIRED IS ENABLE THE SHIPMENT FEE WHICH IS $65 WILL BE PAID AND THIS WILL BE THE LAST FEE REQUIRED FROM YOU. IN REGARD TO YOUR ATM MASTER CARD PACKAGE WHICH WORTH $10.5 MILLION USD I WILL HELP YOU AND MAKE SURE YOU RECEIVE IT AND MY INVESTIGATION SHOWS YOU HAVE SPENT A LOT RECENTLY IN REGARD TO THIS PACKAGE AND THIS WILL BE THE LAST FEE.

REMEMBER YOU HAVE SPENT A LOT TOWARDS THIS PACKAGE ONCE THE CHARGE FEE REQUIRED NOW IS PAID SHIPMENT WILL COMMENCE AND YOU WILL RECOVER ALL YOU HAVE SPENT RECENTLY. THE CHARGE FEE REQUIRED NOW IS NOT MUCH SO YOU WILL BE ABLE TO AFFORD THE LAST FEE NEEDED WHICH IS $65 ONLY MY ADVICE TO YOU IS TO GO AHEAD AND SEND THE CHARGE FEE VIA WESTERN UNION. THE WESTERN UNION INFORMATION BELOW BELONG TO OLAIYA EMEKA THE BRANCH MANAGER OF UPS INTERNATIONAL SHIPPING DEPARTMENT NIGERIA.

THIS IS THE INFO TO SEND THE $65 AS BELOW

RECEIVER NAME:EGEOLU DANEL
ADDRESS LAGOS IN NIGERIA
TEXT QUESTION WHAT FOR
ANSWER GOOD
AMOUNT:$65
+2348103080473
MTCN#

YOUR SHIPMENT WILL COMMENCE ONCE THE CHARGE FEE IS PAID TODAY. AND AS SOON AS YOU MADE THE PAYMENT GET BACK TO ME WITH THE SENDER NAME???? MTCN NUMBER???FULL SENDER ADDRESS USED:???TEXT QUESTION???ANSWER???? AWAIT YOUR REPLY AND REMEMBER SHIPMENT WILL COMMENCE TODAY AND IT WILL TAKE ONLY 26 HOURS TO GET THE PACKAGE SHIPPED TO YOU.

HAVE A WONDERFUL DAY

BEST REGARDS,
MRS PATT JOYCE BUTLER
EMAIL ME ON: mscarm-lapointe2015@yandex.com
Tele: +2348103080473

Email analysis :

NOTE : mrs-patt890@outlook.com
NOTE : Received : from snt004-omc2s36.hotmail.com (65.55.90.111)
NOTE : Received : from SNT151-W79 ([65.55.90.72]) by SNT004-OMC2S36.hotmail.com

CALL MR FEBIAN PATRICKS ON +18638847168 FOR YOUR FUND

WORLD BANK GROUP
From Desk of the President
World Bank Group,
Switzerland.
:............................. ..............................
.............................. .............................. .

I am Dr.JIM YONG KIM , the President World Bank Group.Therefore, you are legally and highly notified with every absolute authorization on your funds and transaction long awaited release set up to fight against scams and frauds activities World Wide.In a nut shell, the concerned are as follow, unpaid Contract payment, Funds Inheritance or Lottery Winning due to unauthorized/incapability of financial Institutions/security companies In releasing such huge sum of money due to Fraud, terrorist and money Laundry activities going on world wide.This financial institute known as World Bank Group has Mandated the World Bank via the desk of Mr Febian Patricks funds remittance departmental head to release the long awaited funds of $3,000.000,00 (3 Million United States Dollars) with interest accrue to beneficiaries through direct TELEGRAPHIC WIRE TRANSFER Upon the provision of your Banking account details for your express funds transfer into your nominated account without any delay with every obedience to our instruction and in line to your funds release with immediate action.Hence your funds have cleared from Terrorist and Money laundry activities and your money will be released into your provided Banking account through World Bank As regards to this arrangement, You are advised to contact the the desk of Mr Febian Patricks funds remittance departmental head Director through his contact below:

Contact person: Mr. Febian Patricks
Email: mr.febianpatricks@gmail.com
Phone number:+18638847168

inform him to release and transfer your funds into your provided Banking account urgently.You are therefore advised to forward your direct telephone numbers Your complete name and your complete Banking details most importantly be aware that 3 Million UNITED STATES Dollars Only is due to you.Finally ,Mr Febian Patricks is awaiting to receive your contact attention on your funds Release Without any delay. Make your contact quickly and expressly to him now irrespective of the time as he is waiting for your attention for your funds and it's transfer interest into your provided account.In other alternative, he may send you an ATM master card which will enable you to withdraw all your funds from it.

Thanks for Your Cooperation.
Dr.Jim Yong Kim
(President) World Bank Group

shyysn@yahoo.pt
mr.febianpatricks@gmail.com

Your atm card payment Notification

ATTN: BENEFICIARY,!!!

Now we have arranged your payment of ($3.5 Millions) by ATM payment card which you will be withdrawing $5000.00 usd on daily base until the whole monies is completely withdrawn by you via the ATM . The minister trust funds of Federal Republic Of Nigeria, United Bank For Africa [UBA] West African States, The United Bank For Africa, Nigeria Declared your payment through this system to avoid another hoax as you had disappointed in the past on paying your inheritance funds. So get to the ATM of Asia Pacific of United Bank For Africa for your ATM card.

Thus is their email contact.

Mr.Godwin Campbell.

Telephone; (+234)818 679 4002
E-mail; mrgodwin_campbell@yahoo.co.jp

Contact the ATM card payment center and they will send the card to you within 48 hours on comply with them. With the following details below. Reconfirm your information bellow to him.

Receiver name -----------------
Country-----------------------
City------------------------
Tel --- ------------------------
Your Occupation-----------------
Home Address------------------------
sex___________________________
age___________________________
ID____________________________

Contact him immediately you receive this mail with your full information.

Best Regard,

Mr. Francis Bolton

mrgodwin_campbell@yahoo.co.jp
france.bolton@yahoo.pt

URGENT CONTACT FOR THE DELIVERY OF YOUR ATM MASTER CARD WORTH ( USD$8,5M.)

Dear Beneficiary,

This is to officially inform you that we have written to you before without getting respond from you and we believe that our previous mail did not get to you therefore we write you again. We are contacting you concerning the release of your inheritance fund / Draft /Cheque /ATM Card which have been delayed for transfer by some officials who claims to be in position of your fund thereby extorting money from you in one way or the other. Your Fund has finally been approved for transfer by the West Africa Fund Monitoring Unit. Your fund will be transfer to you via MasterCard ATM which is cashable in any ATM machine or Bank anywhere in the world. We hereby inform you that the ATM card worth US$8.5, 000.000.00 has been credited in your favour as the first part payment of your inheritance fund which has been delayed by these officers who claim to be in position of your fund. Therefore you are warned to stop any further communication with anybody concerning your inheritance fund. Your fund to be released via MasterCard ATM in act to uphold the rule of law which we represent.You have to reconfirm the informations below for security reasons. The only money you are obliged to pay is $95 dollars which is the cost of the Delivery.

Contact the verification officer incharge of the delivery:

Name: Mr.Charles Gado.
E-mail: atmdepartment2014@gmail.com
TEL: +229-9858-8727

Send them the following information’s of yours for the conclusion of your ATM Card:

Full Name:__________
Delivery Address:____
Country:_______
Occupation:_____
Phone Number:____
Age:______
sex:______

Regards,
Miss.Linda James.

Mrs Karen Huepel

Federal Ministry of Finance
Office address: No 455akpagbar,
caree,xani,carreefour,
vagbomchar,Road Cotonou Benin.

Attention Beneficiary

THIS MESSAGE IS FROM (FMF) FEDERAL MINISTRY OF FINANCE BENIN,

This is to let you know that we finally concluded to effect your compensation winning prize payment of $2.8Million US Dollars via western union transfer as the best and easy way to transfer your funds at any nearest western union office in your country, well based on our agreement with western union managing director, the amount you will be receiving everyday is $5,000.00 until the total amount of your funds is completely transferred to you, i want you to please contact western union agent for your transfer, his name is Mr Patrick Gaston but before then please make sure you call his mobile number if there are things you want him to clarify to you through a telephone conversation, their contact information is listed below

WESTERN UNION TRANSFER CONTACT AGENT:
Mr. Patrick Gaston
E-mail: wum.transfer@om-team.fr
Telephone: (+229)97149750

The MTCN you can see there is containing $5,000.00 US Dollars which is your first payment that has been programmed MTCN: (3251489783) please Note: this payment was directed to be made available in your full information immediately you reconfirm the information as follow

Your Full Name:............................
Your Home Address:.........................
Your Country/ City:.............................
Your Age:....................................
Your Sex:........................................
Your Direct Phone Number:..........................
Your ID copy:............................

Your fund amount deposited in western union office is Two Million, Eight Hundred Thousand United States Dollars, Remember to indicate the registration code of (EB8053) to Mr. Patrick when emailing him your full information and also ask him to tell you when your first payment of $5,000.00 US Dollars will be available for pick up. Thanks

Yours Sincerely
Mrs Karen Huepel

Dear Esteemed Customer

Dear Esteemed Customer,

Scarlet Investment Company, specializes in arranging loan of any amounts,longer repayment terms. We offer Business loan, Home loan, Personal loan, Car loan, Student loan, Dept. Consolidation, Loan for Business start. Do you have a small or big project to finance? up and Business Expansion, Real Estate and Mortgages all at 2.00% interest rate for applicants of all credit types.

Scarlet Investment Company offer one of the lowest loan rates and our service is quick and stress free. Our Priority is your total Satisfaction! Our goal is that you enjoy the service we provide from start to conclusion. Interested new customer should get back to us for information.

Name: Mr. Silovs Aleksandrs
Address: 88 Boulevard De l’Hopital
75013 Paris – France
Email: borrow-money1@Yandex.ru

Yours in Service,
Silovs Aleksandrs
Scarlet Investment Company.

Email analysis :

NOTE : borrow-money1@Yandex.ru
NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < support@diamondluxuryrentals.com >
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : X-Remote : 69.24.90.7 ()


NOTE : Mime-Version : 1.0
NOTE : X-Priority : 3
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : Content-Type : text/plain; charset="Windows-1251"
NOTE : Received : from unknown (HELO mail.diamondluxuryrentals.com) (69.24.90.7)


NOTE : Received : from User (192-227-220-51-host.colocrossing.com [192.227.220.51])


NOTE : by mail.diamondluxuryrentals.com with SMTP;
NOTE : Dear Esteemed Customer

Western union payment Alert

Attention: Scam Victims

Congratulations from the staffs & Members of Western Union Money Transfer interactive Board Commission. It is our obligation to Inform you That African Union AU/European Union EU has Finally come up with a great Idea to Compensate every Internet Scam victims Who have Sent money Through Western Union Money Transfer/ MoneyGram or account to Nigeria, You are privilege to receive this information as one of the lucky beneficiary that is going to receive this compensation fund.

Be informed that this compensation is valid starting from now till December 30th. You are advised to come forward and claim your compensation fund immediately before December 30th ,You are required to send your receiving information below for immediate payment Via Western Union Money Transfer. Your 10 digit number will be sent to you to enable you pickup your fund from any western union money transfer outlet in your Location in Less Than 5 minis

Name:
Address:
Tel:
Country:

Sincerely,
Tonia C. Williams
Western Union
?2014 Western Union Money Transfer

Email analysis :

NOTE : secretariagabinete@cubatao.sp.gov.br
NOTE : jko@terra.com
NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < secretariagabinete@cubatao.sp.gov.br >
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : X-Remote : 186.238.48.15 (mail.cubatao.sp.gov.br)


NOTE : Mime-Version : 1.0
NOTE : X-Virus-Scanned : amavisd-new at webmail.cubatao.sp.gov.br
NOTE : X-Priority : 3
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : Content-Type : text/plain; charset="Windows-1251"
NOTE : Received : from mail.cubatao.sp.gov.br (HELO webmail.cubatao.sp.gov.br)
NOTE : (186.238.48.15)


NOTE : Received : from localhost (webmail.cubatao.sp.gov.br [127.0.0.1])
NOTE : by webmail.cubatao.sp.gov.br (iRedMail)
NOTE : Received : from webmail.cubatao.sp.gov.br ([127.0.0.1])
NOTE : by localhost (webmail.cubatao.sp.gov.br [127.0.0.1])
NOTE : Received : from User (unknown [37.255.241.49])
NOTE : by webmail.cubatao.sp.gov.br (iRedMail)


NOTE : Western union payment Alert

URGENT ATTENTION REQUIRED

Bank of East Asia Ltd.
Bank of East Asia Building,
60 Robinson Road,Singapore 068892
Email: yapgaysin7@gmail.com

Good Day,

A customer of ours who may relate to you (perhaps) in Singapore died ten years ago in Tsunami tragedy in Indonesia leaving behind an estate/capital (US$42.9M with interest) in a bank here where I work as a Joint General Manager.Till date nobody has come forward or put application for the claim. Please log on to this websites for more information about the Tsunami tragedy.

http://www.asianews.it/index.php?l=en&art=2375
http://www.asianews.it/index.php?l=en&art=2745

During the bank private search recently for the late gentle man relatives your name and email contact was among the findings that matches the same surname as the deceased (name WITHHELD for security reason) who died interstate with no Will or next of kin. To maintain the level of security required I have intentionally left out the final details.

I urge you to come forward since I can provide you with the details needed for you to claim the estate/capital so that I can be gratify by you, in this way $17,160,000.00 for you and $25,740,000.00 for me and my colleagues that will do all the crucial part in the bank to have the claim release to you promptly.

To affirm your willingness and cooperation,please do so by replying me at my private email (yapgaysin61@hotmail.com) with your FULL NAME, DATE OF BIRTH,TELEPHONE NUMBER, FAX NUMBER, PRIVATE EMAIL ADDRESS AND POSTAL ADDRESS.

I do expect your prompt response.

Thank you,
Mr.Yap Gay-sin.
Email:yapgaysin7@gmail.com

Email analysis :

NOTE : info@bea.com
NOTE : yapgaysin7@gmail.com
NOTE : Primary Hostname - oas.oasisdate.com
NOTE : Received : from oas.oasisdate.com (oas.oasisdate.com. [192.232.254.85])
NOTE : Received : from freimuth by oas.oasisdate.com with local
NOTE : (envelope-from < freimuth@oas.oasisdate.com >)
NOTE : Received-Spf : none () client-ip=192.232.254.85


NOTE : URGENT ATTENTION REQUIRED

THE REASON BEHIND THE NON RELEASE OF YOUR FUNDS!!!

Attn: Honorable Contractor,

THE REASON BEHIND THE NON RELEASE OF YOUR FUNDS!!!

I am compelled to write you in respect of your fund remittance, which transfer has remained unsuccessful. I am very sure that you must have lost hope of ever getting your fund transfer released especially after all the frustrations, endless disappointment and broken promises in the hands of some officials in Nigeria and abroad. However, I am writing you because I am familiar with the history of this fund release. My privileged knowledge and acquaintance with this payment issue is due to my closeness and association with the immediate past Governor of the Central Bank of Nigeria, Mallam Sanusi Lamido Sanusi, who I worked with from 2009 until he was suspended by Mr. President late April 2014 for financial misappropriation and contract inflation and in addition to the current position which I still maintain within the Bank. This request must be noted in view of the fact that the current Governor of the Central Bank of Nigeria, Mr. Godwin Emefiele is yet to be briefed on some outstanding issues and information by his predecessor. Briefly, I am quite sure that you must be wondering the reason behind the non-release of your long awaited fund after our Government officially granted approval for its remittance? I may also believe that you would have received countless, unconfirmed and spurious payment Advices and remittance instructions from some officials indicating that they have granted approval for the transfer of your fund but all without a headway. You may have also been directed to visit different cities and countries with the instruction that your fund would be released at such payment post or that your fund could be delivered to you at your residence. All these are cooked up Stories from impostors who wish to extort money from you while they do not have any knowledge of the true position of your fund transfer.

Meanwhile, I would like you to note the following.

Upon your response, I shall let you know the reason your fund has not been released even after complying with all the payment requirements and also what you should do for immediate release of your long delayed payment.

NB: You are to stop further dealings with any of your Nigeria Representatives here in Nigeria or abroad with immediate effect, to avoid further extortion of your hard earn currency.

Yours sincerely,
Martins Ugochukwu

martinsugoc@yahoo.co.uk
martins1ugoc@yahoo.pt

FROM UNITED STATES. C.B.P (TREAT AS URGENT)!

U.S. Customs and Border Protection
1300 Pennsylvania Ave NW, Washington, DC 20229,
United States.

Urgent Attention: Beneficiary,

I am Assistant Commissioner Kevin K. McAleenan head of Field Operations (OFO) of the U.S. Customs and Border Protection (CBP). We have just intercepted and confiscated two trunks at John F Kennedy International Airport in New York, NY 11430 coming from a foreign country.

We crosschecked the content of the boxes and found it contained a total sum of $4.1 million dollars. Also with one of the trunks were documents with your name as the receiver of the money. As we progressed in our investigations of the Diplomat which accompanied the trunks into the United States we learned that he was to deliver these funds to your residence as payment of an inheritance/winning, which was due to you.

Further checks on the consignment, we found out that the consignment paperwork lacked the PROOF OF OWNERSHIP CERTIFICATE AND LEGAL DELIVERY PERMIT CLEARANCE CERTIFICATE forms. We then confiscated both trunks and released the Diplomat.

The trunks According to section 229 subsection 31 of the International, Commerce Regulators Code Enforcement Guidelines, your consignment lacks PROOF OF OWNERSHIP CERTIFICATE AND LEGAL DELIVERY PERMIT CLEARANCE CERTIFICATE from the joint team of Homeland Security and therefore you must contact us for direction on how to procure the two certificates, so that you can be relieved of the charges of evading tax which is a jail offense under section 12 subsection 441 of the Tax Code. We will also be asking the IRS to launch an investigation of money laundering if you do not follow our instructions.

You are therefore required to contact me within 72 hours on this email (u.s_cbp@usa.com), at that point I will walk you through the process of clearing and claiming the money.

Failure to comply may lead to your arrest, interrogation and/or you being prosecuted in the Court of Law for tax evasion and or money laundering. You are also advised not to contact any bank in Africa, Europe or banking institution.

Yours in service,
Kevin K. McAleenan
Head of Field Operations (OFO),
U.S. Customs and Border Protection (CBP)

Email analysis :

NOTE : info@cbp.gov
NOTE : u.s_cbp@r7.com
NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < info@cbp.gov >
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Mime-Version : 1.0
NOTE : X-Priority : 3
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : Content-Type : text/html; charset="Windows-1251"
NOTE : Received : from imsantv23.netvigator.com (210.87.247.11)
NOTE : Received : from imsantv96.netvigator.com (imsantv96.netvigator.com [210.87.250.11])
NOTE : by imsantv23.netvigator.com (8.14.4/8.14.4)
NOTE : Received : from User ([202.82.231.40]) by imsantv96.netvigator.com


NOTE : FROM UNITED STATES. C.B.P (TREAT AS URGENT)!