Saturday, October 31, 2015

COLLABORATION

Good morning

I come by this e-mail to send my best greetings in first and then you have my excuses for this unexpected contact. But imagine with me that it is being given the urgency and the importance of this agreement. Indeed, I work with a group of miners of Ghana, which currently has a gold quantity which they want to sell immediately. It is approximately 89 kilos from a bar from gold, 22 carats+ in 28 000 dollars on a kilo. Moreover, I must say that we do not have yet the official documents with the gold export. Therefore, I come by this e-mail to contact you and to see whether you are interested in this product.

Hoping to have your news soon, please accept my best greetings.

Bidi NAA SARKU.

Bonjour

Je viens par ce mail pour envoyer mes salutations les meilleures en premier et ensuite vous avez mes excuses pour ce contact inattendu. Mais imaginez avec moi qu'il est étant donné l'urgence et l'importance de cet accord. En effet, je travaille avec un groupe de mineurs du Ghana, qui actuellement dispose d'une quantité d'or qu'ils veulent vendre immédiatement. C'est environ 89 kilos de Lingot d'or, 22 carats+ à 28 000 dollars par kilogramme. En outre, je dois dire que nous n'avons pas encore les documents officiels à l'exportation d'or. Donc, je viens par ce mail pour vous contacter et de voir si vous êtes intéressé à ce produit.

Espérant avoir de vos nouvelles bientôt, s'il vous plaît acceptez mes salutations les meilleures.

Bidi NAA SARKU.

Email analysis :

NOTE : bidi.naasarku@gmail.com
NOTE : Return-Path : < cuongtq.qld@moh.gov.vn >
NOTE : X-Originating-Ip : [41.86.234.165]
NOTE : X-Virus-Scanned : amavisd-new at moh.gov.vn
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : X-Mailer : Zimbra 8.0.6_GA_5922 (zclient/8.0.6_GA_5922)
NOTE : Thread-Topic : COLLABORATION
NOTE : Message-Id : < *.*.*.JavaMail.zimbra@moh.gov.vn >
NOTE : Content-Type : text/plain; charset=utf-8
NOTE : Received : from unknown (HELO mail.moh.gov.vn) (103.1.210.45)
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by mail.moh.gov.vn (Postfix)
NOTE : Received : from mail.moh.gov.vn ([127.0.0.1])
NOTE : by localhost (mail.moh.gov.vn [127.0.0.1])
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by mail.moh.gov.vn (Postfix)
NOTE : Received : from mail.moh.gov.vn ([127.0.0.1])
NOTE : by localhost (mail.moh.gov.vn [127.0.0.1])
NOTE : Received : from mail.moh.gov.vn (mail.moh.gov.vn [103.1.210.45])
NOTE : by mail.moh.gov.vn (Postfix)

Analysis of the scam :

The server from Vietnamese Ministry of Health seems compromised. The server from the Vietnamese Ministry of Health relays the scam from 41.86.234.165. The user cuongtq.qld is the compromised account.

RE: enquiry price

Dear,

Nice day, Glad to hear you are in telecommunication infrastructure projects/transmission line projects, we are steel tower engineering,manufacturing and solution provider worldwide.

1,High quality: ISO 9001/14001 qualified.
2,Major Design software: PLS
3,Advantage: World first class professional design, Competitive price and Best solution provider
4,Accept initial order.
5,Big product range. More than 60000 MT annual capability of steel towers products.
6,Fast delivery: Normally around 4 weeks and always punching the agreed scheduled.

For more information, please feel free contact with me.

Looking for your kind reply.
Best Regards.

Tony Pan Managing Director | GTE Group Ningbo China

M: +86 13857402582
T: +86 574 87590313

Email analysis :

NOTE : huixinsoft44@foxmail.com
NOTE : X-Remote : 118.123.12.125 ()
NOTE : tgnxj@kikyu.com
NOTE : Received : from cloudvm-1e7a8fc ([127.0.0.1])
NOTE : Received : from unknown (HELO kikyu.com) (118.123.12.125)

Acqusition of Landed Properties in your Country

Dear Sir/Madam,

Sorry to disturb your privacy with my sudden email, I got your contact from your country web directory and decided to contact you urgently.

However, I write to inform you of my desire to acquire Business Investment Projects/Landed properties or rather going into Joint venture Partnership with you in your Country as I have interest and decided to relocate to your Country due to this endless war and killings in my country Syria.

Please i need your quick reply and advise suggestion regarding my desire and intention plans with you in your Country.

Your quick response will be highly appreciated.
Thanking you in anticipation of your cooperation.

Yours faithfully,
Mrs. Jbeily Rajwa

Email analysis :

NOTE : rajwa@mailer11.incnets.com
NOTE : jbeily.r@foxmail.com
NOTE : Received : from ppp112-113.static.internode.on.net (HELO User)
NOTE : ([150.101.112.113])
NOTE : by ipmail06.adl2.internode.on.net

Contact western union department

Attention,

After several investigations and research at internet database we find you amongst those that have been defrauded and this proves that you have truly been swindled by scammers in the hope of getting one fund or the other that is not real.We are working together with National Security agencies to track every fraudsters down,do not respond to their e-mails,letters and phone calls any longer as they are scams and you should be very careful to avoid being a victim to fraudsters any longer because they have nothing to offer you but to rip-off what you have worked earnestly hard to earn.

The sum of Two Million Seven Hundred Thousand US Dollars (US$2.7M USD) should be transferred to you as compensation for been defrauded.
Be warned!Stop all communication with them.

We have deposited your fund at Western Union agent location where the investigation started. Reconfirm your information to them so they can be sure of the person they are paying. Contact the Western Union agent office through this email address stated below;

Contact person: Mr.Roy Moore
Email:( roy_westernnunion0@yahoo.com )

Yours sincerely,

Mrs.Lucia Brooks
Investigation Officer.

Email analysis :

NOTE : lina@cucd.cn
NOTE : roy_westernnunion0@yahoo.com
NOTE : X-Remote : 211.103.190.42 ()


NOTE : Received : from User (162.246.20.67)


NOTE : by mail-2.cucd.cn (10.6.6.10)
NOTE : with Microsoft SMTP Server id 8.1.436.0;

YOUR URGENT RESPONSE IS HIGHLY NEEDED

FEDERAL REPUBLIC OF NIGERIA
OFFICE OF THE PAYMENT VERIFICATION PANEL
LAGOS LIAISON OFFICE
EMAIL..tonyebere220@gmail.com
Date: 30/10/2015

ATTENTION DEAR BENEFICIARY,

YOUR OUTSTANDING PAYMENT.

We hereby bring to your notice that your outstanding payment with the Federal Government of Nigeria has reached this office for verification and clarifications before the release. Anyway, without wasting much time,I have personally investigated this payment down to the Ministry were this contract was executed and from my findings it is clear that you did not execute this contract in question, from all available information, it looks like some officials in the Ministry were trying to use you to claim this particular value which they over invoiced for their own selfish interest. I know it might interest you to know how I managed to find out this truth, yes. I investigated this payment up to the ministry were this contract was executed and after some checks I was surprise to see that the most vital/important documents regarding to this contract bears a different name and beneficiary.

Based on this I decide to contact the supervisor that signed the attestation report, on getting to the contract award and supervisory commission I collected the contract attestation report and found out that this document steel bears the name: B& B PETROLEUM ENG.PTY as the company that executed this contract. I keep this to my self and came down to my base. As a matter of fact I have been thinking whether to report my findings to the appropriate body for cancellation of this payment, but I have this second thought of contacting you since I am not a saint and in a position to approve this payment for the president to give go ahead order to the release, I feel this might be a Gods given opportunity. So it is based on this I am writing you, if you will accept with my understated conditions I can normalize all the relevant papers of this payment and the funds will be release within 14 working days. Contract attestation report is not in your name, the fund owner ship certificate is also not in your name. Actually your partners as I should say did a very great work in manipulating almost all the documents to your favor. Now, I want you to know that, with my position, I can amend this problems and this money will be paid to your nominated bank account which both of us will share on a 50/50 %if only you will accept with my conditions. So, if you see it wise to get this perfected with me feel free to contact me. I shall let you know my conditions as soon as I here from you.

Thanks,
Tony Ebere.

Email analysis :

NOTE : christ_obinna1@yahoo.fr
NOTE : Partho.Sharma@yahoo.co.in
NOTE : tonyebere220@gmail.com
NOTE : X-User-Agent : Mozilla/5.0 (Windows NT 5.1; rv:34.0) Gecko/20100101 Firefox/34.0
NOTE : X-Remote : 91.202.243.138
NOTE : Received : from 41.58.7.53 ([41.58.7.53])
NOTe : by mail.diamant.toyota.ua
NOTE : for Partho.Sharma@yahoo.co.in;

Friday, October 30, 2015

APPLY FOR A LOAN

Do you need an urgent loan we offer worldwide loan to who in need of loan the business opportunity you having being looking for is here again. email osmanserves@gmail.com

Email analysis :

NOTE : MOHAMMEDLOAN
NOTE : osmanserves@gmail.com
NOTE : X-Originating-Ip : [116.203.72.172]
NOTE : mohammed625.onmicrosoft.com
NOTE : Received : from [100.64.43.32] (116.203.72.172)


NOTE : by DM3PR14MB0619.namprd14.prod.outlook.com

FW: Contact the verification officer incharge of the delivery.‏

Dear Beneficiary,

This is to officially inform you that we have written to you before without getting respond from you and we believe that our previous mail did not get to you therefore we write you again. We are contacting you concerning the release of your inheritance fund / Draft /Cheque /ATM Card which have been delayed for transfer by some officials who claim to be in position of your fund thereby extorting money from you in one way or the other. Your Fund has finally been approved for transfer by the West Africa Fund Monitoring Unit. Your fund will be transfer to you via MasterCard ATM which is cashable in any ATM machine or Bank anywhere in the world. We hereby inform you that the ATM card worth US$3.5, 000.000.00 has been credited in your favour as the first part payment of your inheritance fund which has been delayed by these officers who claim to be in position of your fund. Therefore you are warned to stop any further communication with anybody concerning your inheritance fund. Your fund to be released via MasterCard ATM in act to uphold the rule of law which we represent.You have to reconfirm the informations below for security reasons. The only money you are obliged to pay is the delivery charges only .

Contact the verification officer incharge of the delivery:

Name: Mr.Charles Gado.
E-mail: atmdepartment2014@gmail.com
TEL: +234 81749 81061

Send them the following informations of yours for the conclusion of your ATM Card:

Full Name:__________
Delivery Address:____
Country:_______
Occupation:_____
Phone Number:____
Age:______
sex:______

Regards,
Mrs. Mama Joice.

Email analysis :

NOTE : sdcl@minader.cm
NOTE : atmdepartment2014@gmail.com
NOTE : User-Agent : Roundcube Webmail/0.4


NOTE : X-Remote : 195.24.207.147 (mail.minader.cm)
NOTE : Received : from localhost ([127.0.0.1] helo=minader.camnet.cm)
NOTE : by minader.camnet.cm with esmtpa (Exim 4.67)

Your Shipment,From DHL International Express Courier Company

DHL International Express Courier
Company
107, Isolo Express Road Lagos Nigeria
Tel: +234-812-445-5878

Working Hours.........
Monday: 8.00am - 6.00pm.....
Tuesday: 8.00am - 6.00pm....
Wednesday: 8.00am - 6.00pm
Thursday: 8.00am - 6.00pm....
Friday: 8.00am - 6.00pm.....
Sunday: Closed

Dear Customer,

This is DHL International Delivery Company of Nigeria,we wishes to officially inform you that, we received an International Certified Bank Draft parcel valued $10.5million USD to be delivered to you,to your residential address in your country. This parcel was brought to our notice this morning,From Central Bank Of Nigeria(CBN),kindly reconfirm the below information's properly, to avoid us not making any mistake during delivery of your International Certified Bank Draft parcel to a wrong hand.

Full names........
Parcel owner address.....
Tel.... Your International Passport Or Driver's License.

We will register your package and send you the tracking number for safety delivery of your package as soon as you reconfirm the required information’s needed for safety delivery to your residential address in your Country. DHL is one of the world's great success stories, the start-up that revolutionized the delivery of packages and information. In the past 30 years, we've grown up and grown into a diverse family of companies as DHL that's bigger, stronger, better than ever.

Waiting to read your e-mail

Yours affectionately.
Mr.Ben Martins
Dispatch Manager DHL Company

Email analysis :

NOTE : www.dhlcouriercompany122@gmail.com
NOTE : X-Originatororg : karawinson.onmicrosoft.com
NOTE : Received : from [10.204.233.146] (197.211.53.22)

Limpe seu nome e aumente seu score por 50,00

APENAS R$ 50,00

PROMOCAO SOMENTE HOJE E AMANHA

SPC, SERASA, CCF, PROTESTOS, CHECK-CHECK e BACEN
Removemos tudo e aumentamos seu score em apenas 8 horas

Não responda este email.

informações somente pelo email abaixo:
---------------------
rcreditonovo@bol.com.br
---------------------

Email analysis :

NOTE : ar94@gersonnoticias.com
NOTE : rcreditonovo@bol.com.br
NOTE : X-Originating-Ip : [177.194.184.244]
NOTE : Received : from home-PC.domain.name (177.194.184.244)


NOTE : X-Remote : 65.55.169.252

FUNDS DONATION

I Mr.Neil Trotter is the current winner of £108 million Pounds on the 2014 concluded Euromillion Jackpot Draw,See link for proof:http://www.bbc.co.uk/news/uk-england-london-26627075, I donated One Million Pounds {£1000,000.00} to you as a gift,respond for more information

Email analysis :

NOTE : heil@luck.ocn.ne.jp
NOTE : neiltrotter.gift@yahoo.com
NOTE : X-Originating-Ip : [41.216.50.54]


NOTE : X-Remote : 114.147.58.75 (mogw0305.ocn.ad.jp)

Gordys Loans

Are you a business man or woman in any financial mess or do you need funds for Xmas or to start up your own business?, Do you need a loan pay off your bills or to start a nice Small Scale and medium business?, Do you have a low credit score and you are finding it hard to obtain capital loan from local banks and other financial institutes?. We are here to help you get the service you deserve. Contact us at: gordys_loans@yahoo.com or web address: (***.wix.com/***).

Email analysis :

NOTE :

NOTE : gordys_loans@yahoo.com
NOTE : Content-Description : Mail message body
NOTE : X-Originatororg : joshbabber.onmicrosoft.com
NOTE : X-Antivirus : avast! (VPS 130307-0, 03/07/2013), Outbound message
NOTE : X-Originating-Ip : [197.211.52.25]


NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : Received : from [192.168.0.2] (197.211.52.25)
NOTE : by VI1PR08MB0701.eurprd08.prod.outlook.com (10.163.164.158)
NOTE : with Microsoft SMTP Server (TLS)
NOTE : Content-Type : text/plain; charset="iso-8859-1"
NOTE : client-ip=157.56.112.245;
NOTE : LOAN OFFER!!

Amazon Online Lottery & Powerball Promotions

Desk Of: International Online CO-Ordinator,
BetXchange Gaming Group(PTY)
in Collaboration with International Monetary Fund (IMF)
Amazon Online Lottery & Powerball Promotions
www.betxchange.co.za

CONGRATULATIONS!!

Dear (Online Award Winner)
IMF/WB-PEA/95583/2015

We gladly wish to inform you that you have won prize money award of One Million and Five Hundred Thousand United State Dollars, ($1,500,000.00) on our ongoing Human Development and Poverty Eradication Award

Your email address happens to be one of the emails chosen this quarter from our new java-based software that randomly selects email addresses from the web.Participants were selected from the registered email addresses in the Public Key Server-Index drawn from a pool of over 125,000 names in this batch from all the countries in the world as part of our international promotions programmed conducted to support Human Development and eradication poverty.

The payout of your cash prize to you will be subject to the final validations and satisfactory report that you are the authentic owner of the winning Email Address,This is real and not a hoax.Your Payment is strictly my Electronic Wire Transfer or Delivery of Visa Card.International Award Winning Certificate Award Ceremony will be held at the Micheal Angelo Hotel Mandela Square Sandton and all winners are expected to attend as provisions will be made for their Visas.

In line with the statutory procedure governing the claims of won prizes, you are to contact Credit Clearance Services our claim agent below to send him your particulars below:

1) Winning identification numbers: IMF/WB-PEA/95583/2015
2) Full Names 3) Country 4) Contact Address 5) Telephone /Fax
8) Occupation 9) Date of birth

Contact: Dr Richard (Regional Claims Manager)
Email: brokersagentclaim@writeme.com
Tel: +27 8474 73077
Ms. Suzan Graham (Assistant Mgr.)

Congratulation in Advance!!
Truly Yours,

Mrs Katherine Boyd- McPherson
(IMF & World Bank Online Award Co-Ordinator)

China Citic Bank

Fund Portfolio Department
Customer's Relations section, Asia Pacific.

Attention:Beneficiary,

We humbly received an instruction from our correspondence bank to transfer the sum of USD$8.500,000,00.Million into your account which we were on the process of seeking ways as to communicate you and get you informed about the new development so that you can officially transfer your fund via online into your designated bank account in your country by yourself to avoid any complication or further delay.

Surprisingly this day, we received an email from Mr. John Carter who claimed to be your representative forwarded the following account information to our office demanding us to transfer the fund into he's below account. Here are details of the bank account he forwarded to our office.

Bank of America(BOA)
301 S Kings Dr, Charlotte, NC 28204, United States
Mr. John Carter
Account# 004763124292
Routing # 064120351
P.O.Box 43,182 B Circle St.,
Herlong,CA 96113-0043 USA

Please let us know vividly as a matter of urgency if actually this man has your permission to receive your fund or on the contrary never your representative, you are officially requested to fill and send the under listed details correctly as soon as possible for verification purpose and for the immediate and speedy processing of your fund immediately

1. YOUR FULL NAME..........................
2. YOUR TELEPHONE......
3. FAX......................
4. AGE...........
5. SEX........................... .........
6. YOUR OCCUPATION.................... ............
7. YOUR ADDRESS....................... .
8. BANK DETAILS WERE YOUR FUND WILL BE TRANSFER INTO....

However, we shall proceed to issue all payment details to the said Mr.John Carter, If we do not hear from you within the next three working days from today. We Will process and release the fund into he's bank account accordingly.

Confirm your receipt of this mail without delay.....

Yours in service,

Mr. Benson Wills

Email analysis :

NOTE : martinlee_13@126.com
NOTE : bensonwills_citic@yeah.net
NOTE : Received : from unknown (HELO mailgateway.sdll.cn) (222.92.137.121)


NOTE : Received : from be.sdll.cn (unknown [10.12.12.89]) by mailgateway.sdll.cn (Postfix)
NOTE : Received : from User ([14.222.32.71]) by be.sdll.cn


NOTE : Fund Portfolio Department

US. DEPARTMENT OF HOMELAND SECURITY

US. DEPARTMENT OF HOMELAND SECURITY,
MG JOHN LARRY M KANE, Adjutant General and Director State Military Department
Washington Military Dept, Bldg1 Camp Murry, Wash 98430-5000 USA

GOOD DAY TO YOU.


I HOPE THIS MAIL FINDS YOU IN GOOD SPIRIT AND IN GOOD HEALTH? BECAUSE I AM
QUITE AWARE OF YOUR LOSSES IN THE PAST YEARS NOW, IT MAY SURPRISE YOU THAT I
AM ALSO AWARE OF YOUR CONSIGNMENT BOXES PURSUIT IN BENIN GHANA TOGO NIGERIA
SPAIN FRANCE MALAYSIA INDONESIA CHINA AND KOREA .MY NAME IS MR JOHN LARRY M
KANE, THE SECRETARY OF US DEPARTMENT OF HOMELAND SECURITY OF AMERICA, AM IN
CHARGE TO MONITORED ALL FOREIGN TRANSACTIONS IN AFRICA EUROPE AND ASIA.
I HAVE BEEN IN THE US DEPARTMENT OF HOMELAND SECURITY NOW SINCE THE
GOVERNMENT OF PRESIDENT BARACK OBAMA, MONITORING THE VARIOUS TRANSACTIONS
GOING ON IN AFRICA, EUROPE AND ASIA, MOST ESPECIALLY CONSIGNMENTS CASES AND
BANK TRANSFER. I DO NOT INTEND TO SPOIL YOUR DAY OR TO PUT YOU UNDER DURESS.


BUT YOU CAN NOT RECEIVE ANY OF YOUR CONSIGNMENTS BOXES PURSUIT, WITHOUT A
CLEARANCE FROM THE US DEPARTMENT OF HOMELAND SECURITY. HOWEVER, UPON MY
ARRIVAL IN BENIN REPUBLIC AFTER SERIES OF MEETINGS WITH OUR PRESIDENT BARRACKS
OBAMA AND UNITED NATIONS SECRETARY GENERAL BAN KI-MOON, DUE TO NUMEROUS
COMPLAINS FROM OTHER SECURITY AGENCIES FROM AFRICA ASIA, EUROPE, OCEANIA,
ANTARCTICA, SOUTH AMERICA AND THE UNITED STATES OF AMERICA RESPECTIVELY,
AGAINST THE BENIN GOVERNMENT AND NIGERIA OVER THE RATE OF SCAM / FRAUDULENT
ACTIVITIES GOING ON IN THIS COUNTRY AND AFRICA.


WHEN I ARRIVE IN THE BENIN PARLIAMENT IN COTONOU, I FOUND YOUR CONSIGNMENT
BOX CLEARANCE FILE LYING ON THE FOREIGN AFFAIR OFFICE DESK WITHOUT ANY ATTENTION
ON A THOROUGH SCRUTINY I DISCOVERED THAT YOUR CONSIGNMENT HAVE BEEN ABANDONED
BY YOUR DELIVERY AGENT. MEANWHILE, I WAS MADE TO UNDERSTAND THAT THEY HAVE TRY
TO REACH YOU, BUT NO WAY AND THEY HAVE MADE SEVERAL ATTEMPTS TO CONTACT YOUR
DELIVERY AGENT BUT TO NO AVAIL.TO MY GREATEST SURPRISE, DURING MY RECENT
ROUTINE RE-CHECKING, I PERSONALLY DISCOVERED THAT YOUR CONSIGNMENT CONTENT
DECLARATION DOCUMENTS STATED THAT YOUR CONSIGNMENT CONTAINS PERSONAL EFFECTS MEANWHILE,
IT CONTAINS UNITED STATES DOLLAR BILLS WORTH OVER US $ 40 MILLION DOLLARS, WHICH MADE
IT IMPOSSIBLE FOR THE CONSIGNMENT TO BE DELIVERED TO YOU EARLIER BEFORE NOW.

BASED ON THIS PERSONAL DISCOVERY, I AM CONTACTING YOU NOW TO LET YOU KNOW THAT
WITH MY POSITION AND POWER AS THE SECRETARY OF US DEPARTMENT OF HOMELAND
SECURITY, I CAN ASSIST YOU TO LEGALLY CLEAR YOUR CONSIGNMENT FUND, BUT YOU
MUST AGREE WITH THE FOLLOWING CONDITIONS. BECAUSE I HAVE CALLED OUR OFFICE IN
WASHINGTON, DC FROM BENIN, WHO HAS BEEN INTERCEPTING ALL YOUR TELEPHONE CALLS,
WITH THE HELP OF MTN, TIGO VODAFONE AND AIRTIME NETWORK BENIN.

I ALSO RECEIVED SOME INFORMATION FROM OUR HOMELAND SECURITY OFFICE IN BENIN
REPUBLIC, ABOUT YOUR EMAILS, THAT YOU HAVE BEEN DEALING AND SENDING MONEY TO
PEOPLES IN BENIN GHANA SOUTH AFRICA TOGO BENIN AND NIGERIA, WHO CLAIMS TO BE
THE MONEY GRAM DIRECTOR. YOU ARE ALSO DEALING WITH A BANK, AND OTHER NAMES
WHICH I AM STILL WAITING TO BE FORWARDED TO ME FROM OUR OFFICE IN
WASHINGTON, DC. WHO HAVE MONITORED ALL YOUR DEALINGS WITH THIS HOODLUM.
YOU ARE ADVICE TO HENCE FORT STOP FURTHER DEALINGS WITH ALL THE ABOVE
MENTIONED PEOPLE, UNTIL WE COMPLETE OUR INVESTIGATION. BECAUSE YOUR DEALING
WITH THEM IS TERMED AS ILLEGAL TRANSACTION.


I WISH TO INFORM YOU THAT WE THE HOMELAND SECURITY IS ON LOOK OUT FOR ALL THE
ABOVE MENTIONED NAME, MOSTLY THOSE WHO CLAIMS TO BE THE DIRECTOR OF WEST
AFRICAN DEBT MONEY GRAM AND MONEY GRAM AND PROPERTY RECOVERY BENIN. ALL THIS
MENTIONED PEOPLE ARE IMPOSTOR, AND WE INTEND TO APPREHEND THEM SOON.
I WANT YOU TO PLEASE STOP COMMUNICATING, AND DEALING WITH THEM UNTIL WE
COMPLETE OUR INVESTIGATION. I WISH TO NOTIFY YOU ABOUT THE LATEST DEVELOPMENT
CONCERNING YOUR BOX OF CONSIGNMENT THAT WAS HANDLE OVER TO ME AFTER THE
MEETING HELD BETWEEN ME AND SOME OF THE TOP PARLIAMENT MEMBERS OF BENIN AND
THE FOREIGN AFFAIR MINSTER IN THE BENIN CAPITAL HEADQUARTERS COTONOU, DUE TO
THE DELAY FOR YOU NOT HAVE RECEIVED YOUR CONSIGNMENT BOX FOR LONG TIME NOW.


ACCORDINGLY, WE HAVE WAIVED AWAY ALL YOUR CONSIGNMENT BOX CLEARANCE FEES AND
AUTHORIZED THE GOVERNMENT OF BENIN REPUBLIC TO ALLOW ME FLY WITH THIS YOUR
APPROVED CONSIGNMENT BOX TO YOU WITHOUT ANY DELAY WHICH THEY HAVE AGREED. THE
ONLY FEE YOU WILL PAY TO CONFIRM YOUR CONSIGNMENT BOX RECEIVED IN YOUR
POSSESSION IS THE WEIGHT FEE OF YOUR CONSIGNMENT BOX WHICH IS SUM OF $ 250.00
ONLY.


IN ORDER WORDS YOUR BOX IS WITH ME NOW AND I SHALL BE COMING TO YOUR COUNTRY
AS SOON AS I HEAR FROM YOU AND I WILL BE COMING ALONG WITH YOUR BOX OF
CONSIGNMENT, BUT REMEMBER THAT AS THE SECRETARY OF THE DEPARTMENT OF HOMELAND
SECURITY UNITED STATES OF AMERICA, I AM A US GOVERNMENT SECURITY AGENT AND I
HAVE THE POWER TO GO THROUGH ANY AIRPORT CUSTOMS WITHOUT INSPECTING WHAT I
CARRY ALONG.


AND AS SOON AS I ARRIVE IN YOUR STATE I WILL GIVE YOU A PHONE CALL FOR YOU TO
GIVE ME DIRECTION TO YOUR HOME ADDRESS SO THAT WE CAN MEET FACE TO FACE AND
HAND OVER YOUR BOX TO YOU BEFORE PROCEEDING BACK TO THE STATES. SO I WANT YOU
TO RE-CONFIRM TO ME THE BELOW INFORMATION FOR PROPER UNDERSTANDING BY FILLING
THE ATTACH HOMELAND SECURITY REGISTRATION FORM OKAY.

ALS0 TRY TO CONFIRM Bellow DETAILS
Full Name ..................
Home Address ...............
Direct Tel Number ....................
Occupation .......................


AS SOON AS I ARRIVE I SHALL CALL YOU ON YOUR TELEPHONE NUMBER THEN MEET YOU
IN PERSON AND HAND OVER YOUR CONSIGNMENT BOX TO YOU BEFORE I RETURN BACK TO
WASHINGTON DC.


I HAVE TAKEN THIS ASSIGNMENT UPON MYSELF BECAUSE I UNDERSTAND THAT YOU HAVE
REALLY PAID SO MUCH ON THE COST OF DELIVERY, BUT NOTHING WAS RECEIVED BY YOU.
SO BE ADVICE TO CONTACT ME IMMEDIATELY YOU GET THIS EMAIL NOW BECAUSE EVERY
THING HAS BEEN DONE OK. THIS IS DIRECTLY FROM OUR PRESIDENT BARACK OBAMA.
ONCE YOU SEND THE MONEY, TRY TO NOTIFY ME WITH THE MTCN FOR EASY PICK UP AND
FOR IMMEDIATE ACTION ON THE DELIVERY OF YOUR CONSIGNMENT BOX, FOR YOU TO
RECEIVE YOUR INHERITED FUNDS WITHOUT ANY FURTHER DELAY AGAIN. SINCE YOU WAS
UNABLE TO RECEIVE IT SINCE.

SEND THE FEE VIA WESTERN UNION TRANSFER REMIT ONLY

RECEIVER ...... BENI EDUN
COUNTRY: ...... BENIN REPUBLIC
CITY: ....... .COTONOU
AMOUNT: ....... $250.00
QUESTION: ..... .URGENT
ANSWER: ...... .TODAY
MTCN: ..........
Sender's NAME ....
SENDER'S ADDRESS ...

AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND ME THE PAYMENT
INFORMATION.ONCE YOU SEND THE MONEY, TRY TO NOTIFY ME WITH THE MTCN FOR CONFIRMATION AND FOR
IMMEDIATE ACTION ON THE HANDLING OVER OF YOUR FUND TO YOU.ALSO YOU ARE TO
FORWARD TO US ANY MAIL THAT YOU HAVE BEEN RECEIVING FROM PEOPLE FOR PROPER
VERIFICATION AND INVESTIGATION BEFORE YOU DEAL WITH THEM OKAY.


I HAVE A VERY LIMITED TIME TO STAY HERE SO I WOULD LIKE YOU TO URGENTLY
RESPOND TO THIS MESSAGE WITH THE PAYMENT, MY DEAR, THIS IS THE OPPORTUNITY
FOR YOU AND HAVE TO COMPLY AND YOUR BOX SHALL BE aaTO YOUR DESIGNATED
ADDRESS.BUT REMEMBER THAT AFTER (3 DAYS) YOU DID NOT MAKE THE PAYMENT THEN I
WILL DIVERT YOUR FUNDS TO US GOVERNMENT FUND OR BENIN GOVERNMENT TREASURY.
PLEASE TREAT THIS AS MATTER OF URGENCY.
SINCERELY YOURS,

JOHN LARRY MKANE

Email analysis :

NOTE : JOHN@trust.ocn.ne.jp
NOTE : X-Originating-Ip : [41.86.234.165]


NOTE : Received : from mv-osn-hkg002.ocn.ad.jp (mv-osn-hkg002.ocn.ad.jp [122.28.30.180])
NOTE : by mf-smf-ucb007.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP

Thursday, October 29, 2015

Attn: My Dear Beneficiary

DIAMOND BANK.
ATM International credit Settlement.
Directorate of International Payment.

Attn: My Dear Beneficiary!

This is to officially notify you about your Fund that was suppose to be rendered to you via numerous ways i.e, Courier Companies, Western Union Money Transfers, and Banks wire transfer. Due to this lost of Funds of our’s which was suppose to be given to you but failed to. So in this case, a beneficial meeting was held on the 20th Of October 2015 at the World Bank in Switzerland, which top officials and Central Bank Governors from different countries in the world were present at the meeting, Which they discussed on how your Fund can be given to you without any lost at this time. Be informed that you have to stop any further communication with any other person(s) or office(s) to avoid any hitches in receiving your ATM payment. In conclusion at the meeting, The President of World Bank, Mr.Robert B. Zoellick, has strictly authorized 6 Banks in the World to deliver all individual beneficiary Funds through courier companies. Your Fund which is truly $45.5 Million USD (Forty-Five Million, Five Hundred Thousand United States of America Dollars) which was listed among the list of beneficiary list to be paid among all other beneficiaries in various countries in the world to be paid via ATM MASTER CARD. Below are the authorized Banks;

Daiwa Bank®/Osaka/Japan.
....................................
Caja De Madrid/Madrid/Spain.
....................................
Lloyds Bank®/London/England.
.......................................
Diamond Bank® Plc/Benin Republic.
......................................
Banco di Santo Spirito/Rome/Italy.
........................................
Bank of New York Mellon Corp/New York/USA.

Each of this Banks are to distribute 350 ATM MASTER CARDS to all beneficiaries in the World that are to receive their compensation ATM CARD. So, this Bank (DIAMOND Bank®Plc.) will send you your ATM CARD which you will use to withdraw your money in any ATM machine in any part of the world, but the maximum withdrawal is $50,000 USD per day, while minimum withdrawal is $20,000 USD per day. Note that this ATM CARD of yours has been activated and a security pin code number will be issued to you from this Bank as soon as you receive your Card for a safer withdrawal. Please contact the ATM CARD payment department Manager Mr paulson Greg, by sending your information to HER for an immediate response. Contacts of Mr paulson Greg, are as below;

Mr paulson Greg,
Director of ATM payment department DIAMOND BANK Plc.
Tel: +229:99784642

NOTE: FOR NON APPEARANCES, DO NOT CONTACT Mr paulson Greg, IF YOU CAN NOT PAY FOR THE SHIPPING OF YOUR ATM CARD.

Your Full Name: ?
Country/Your Address: ?
Occupation: ?
Contact Home/Cell Phone: ?
Age/Sex: ?
A Scan Copy of your Identity: ?

Please make a Choice of delivery for the Shipping of your ATM CARD as they are as charged Below;

DHL COURIER COMPANY Shipping fee: $108.00 (1 day delivery)
FedEx COURIER COMPANY Shipping fee: $75.00 (2 day delivery)
UPS COURIER COMPANY Shipping fee: $55.00 (3 day delivery)

Receiver name-----------IGWEMMA OBODO
Address: Lot No. 23 Patte D'Oie, 03 BP 2147
City---------------COTONOU
Country----------BENIN REPUBLIC
Test Question-----Code
Test Answer-------- ATM

For oral discussion, you can reach
Mr paulson Greg, via email or phone his hot line given to you above as soon as you receive this important message for further directions and also update him on any development from the above mentioned office. NOTE: Due to impostors, we hereby issued you our code of conduct, which is (ATM), so you have to indicate this code when contacting the card center by using it as your subject.

Sincerely Yours,
Chief Remittance Officer,
DIAMOND BANK® Plc.
In Respect of The World Bank®

Email analysis :

NOTE : mailoffice229@gmail.com
NOTE : diamondbank916@gmail.com
NOTE : Received : from [41.216.48.96]


NOTE : X-Rocketymmf : blighter3333
NOTE : by web102003.mail.ssk.yahoo.co.jp via HTTP;

návrh!

Muzete me kontaktovat na e-mailovou adresu nize pro vysvetlení prospesny
spoluprace.

e-mail: chn.jg57@gmail.com

Email analysis :

NOTE : m-files@digres.cz
NOTE : chn.jg57@gmail.com
NOTE : User-Agent : SquirrelMail/1.4.22


NOTE : X-Remote : 204.151.234.107 ()


NOTE : X-Priority : 3 (Normal)
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Message-Id : < *.squirrel@204.151.234.107 >


NOTE : Importance : Normal
NOTE : Content-Type : text/plain;charset=iso-8859-1
NOTE : Received : from unknown (HELO mail.vps.com) (204.151.234.107)


NOTE : Received : from [204.151.234.107] (localhost [IPv6:::1]) by mail.vps.com (Postfix)


NOTE : Received : from 92.69.228.29 (SquirrelMail authenticated user admin)


NOTE : by 204.151.234.107 with HTTP;



NOTE : návrh!

Global Business Start Here

Dear Sir/Madam,

Want to good price & good quality?

Contact me as below

Our screws will make your products to maximize value.

Best wishes!
Cathy Lu

Tel:86-769-21684414
Fax:86-769-23307575
Whatsapp:+86-15899671030

Email analysis :

NOTE : huixinsoft109@foxmail.com
NOTE : Return-Path : < xwdqc@kido.com >
NOTE : X-Remote : 123.138.244.169 ()
NOTE : Content-Transfer-Encoding : base64
NOTE : Sender : Cathy < xwdqc@kido.com >
NOTE : Content-Type : text/html; charset=utf-8
NOTE : Received : from unknown (HELO rval.com) (123.138.244.169)
NOTE : Received : from cho2015092200620 ([127.0.0.1])
NOTE : Global Business Start Here

Rép : All I ask is permit me

Hello ,

I am writing you from this mail address for security reasons, My major priority of contacting you is to ask for your assistance that requires immediate and swift execution. I will provide you all the necessary detail about me once trust is established between us. Please read thoroughly and get back to me but you have the obligation to decline if you are not interested.

I am a Syrian industrialist and a member of Syrian business men council In Damascus. My family is under the threat of President Bashar al-Assad for our resolute support for a true democratic Government in Syria.

Due to the current President Bashar al-Assad protest in the country as you can find out in this website http://www.telegraph.co.uk/news/worldnews/middleeast/syria/. Many families are running for their dear lives as soldiers are killing civilians, women and children. I want to bring to your notice that I have in my possession the sum of (sixteen million and five hundred thousand United state dollars) in my possession. This is the money I have saved for my entire life as an industrialist and I have it stored in my house because putting money in a bank could be a very big risk in a country like ours.

I have secured this money in a box and have consulted an envoy here in Damascus who will help me in moving my box out of Syria for safe keeping and possible investment. This is why am in keen need of a Reliable and Trust worthy person who will receive the box, secure and protect it till my arrival which should be soon. I have to take this chance because, I have no other alternative but to trust somebody .Am an orphan with no brother or sister so I cannot risk my life here to avoid an end to my family lineage. All I have is my wife, my daughter and son. They deserve a decent life since I want them to grow up in a peaceful environment.

I will relocate to your country with my family and invest the money in accordance with law, your advice and assistance. We can work together and achieve a better future for our families. Please you will have to take note that the envoy is not aware that my box contains money and this is for security reasons.

All I ask is permit me register the consignment in your name as your personal belonging and you are expected to retrieve it once it's in Europe. There will be no risk in this deal; I have made the necessary arrangement the safe delivery of the consignment box to your referred location.

I will assume you are capable of handling a deal of this magnitude and also trust you to maintain absolute secrecy and confidentiality to protect this great achievement. In less than 4 days the box should be in your possession if you are swift on your part .

Be aware, I have taken precautionary measures to secure the money. The box is coded with high security gadget. You will be entitled to 30% of the total sum of 16.5usd while 70% will be mine. I believe this is a fair deal. write me back for more details.

GET BACK TO ME WITH
YOUR FULL NAME
YOUR HOUSE ADDRESS
YOUR DIRECT TELEPHONE NUMBER
A SCAN COPY OF YOUR ID CARD / DRIVERS LICENSE

I anticipate your positive response and on receipt of your information I will provide you with further details. We don't have the luxury to waste time so kindly respond ASAP.

Best regards
Farouk Jamil

Email analysis :

NOTE : anu@bankasia.com.bd
NOTE : fajamilsy@gmail.com
NOTE : you@yourdomain.net
NOTE : Received : from 202.95.145.194 by pari.pesat.net.id

CONTACT Mr Jutice Aron FOR YOUR ATM VISA CARD IMMEDIATELY!!!

CONTACT Mr Jutice Aron FOR YOUR ATM VISA CARD IMMEDIATELY!!!
UNITED STATE OF AMERICA (STATE OF PEACE)

Good Day,

In respect of your long over-due fund which you have been finding it difficult to receive through a Bank Draft, Bank to Bank Wire Transfer and Installment Payment arrangements. A meeting was held last weekend at our Office as to the problem surrounding the Remittance of your fund, and after all deliberation, the Panel Agreement was to load your fund into a worldwide accessible ATM Visa Card. We have waited for you to get in contact with us for your ATM Visa Card worth the total sum of $10,500.000.00. (Ten Million, Five hundred Thousand United State Dollars), Which you can withdraw your Fund at any ATM Machine in your location Worldwide, with maximum daily limit amount of USD$15,000.00 (Fifteen Thousand United States Dollars) Hence you are willing to claim your Winning Fund. Note that the delivery charges of your ATM VISA CARD has already being paid, Apart from the Security Keeping Fee and insurance clearance, which is to be paid due to your delay in contacting this office for claim of your ATM VISA CARD Winning Fund. The Security Keeping Fee, together with the Insurance clearance Fee total amount is UD$365 and this is the only charges you are Authorized to Pay as there is no Hidden charges require for any reason, to have your ATM VISA CARD completely insured and delivered to your residential address for daily withdrawal. All you need to do is to contact our payment Security Department in United State OF AMERICA, for details and guidelines on how to submit your Fees so as to facilitate the immediate release of your ATM VISA CARD for immediate delivery to you. Contact person is Mr Justice Aron directly for Guidelines on how to Submit your Security Keeping Fees of $365 and commence Delivery of your ATM VISA CARD Winning Fund.

Name: Mr Justice Aron
Email:mrjuticearon@foxmail.com

Kindly re-confirm your details to him for verification, and make sure your residential address is provided correctly, to avoid any atom of mistake during delivery process of your ATM VISA CARD, so as to facilitate the immediate release of your ATM CARD immediately as soon as you comply with the requirement.

(1) Your Full Name ..................
(2) Full Residential Address.............(P.O.BOX NOT ALLOWED)
(3) Direct and Current Phone ...........
(4) Nationality ..........................
(5) Present Country ................

As soon as your details are submitted, you shall be advised accordingly by our security department officer Mr Justice Aron. Our ATM CODE of conduct is (ATM 101 ). Make sure you specify this Code on your subject when Contacting our Security Department (Mr David Morgan) for delivery of your ATM VISA CARD.

Your Safety is 100% Guaranteed.
Thanks for your maximum co-operation.

Yours Faithfully,
Dr. Jim Wilson
ATM PAYMENT DIRECTOR

Email analysis :

NOTE : mrjuticearon@foxmail.com
NOTE : scanner@mjgcos.com
NOTE : Received : from 50-194-51-17-static.hfc.comcastbusiness.net
NOTE : ([50.194.51.17] helo=User) by srv01.orixinet.com.br
NOTE : 131.72.97.2 (ns1.orixinet.com.br)

Fw: Copia de cheque devolvido - 06:19:25 14/10/2015

Copia-Cheque 2880520.PDF (326,4 KB)

Segue a copia do cheque devolvido dia 07/10 de numero 001288052042.
Favor entrar em contato.

File analysis :

CLICK : Copia-Cheque 2880520.PDF (326,4 KB)
OPEN : http://www.pathibharachannel.com.np/pecs/doc.php#Copia-Cheque-2880520.PDF

URL analysis :

Opera : Malicious site
Sophos : Malicious site
Kaspersky : Malware site
CLEAN MX : Phishing site
ESET : Phishing site
Fortinet : Phishing site

pathibharachannel.com.np whois :

Domain Name : pathibharachannel.com.np
Registered On 2013-09-13 11:04:06
Primary Name Server : ns1.imaginarycreation.info
Secondary Name Server : ns2.imaginarycreation.info
Tertiary Name Server : N/A
Administrator Email : media.pathibhara@gmail.com
Administrator : Sagar Subba
Organization : Pathibhara Channel
Organization Email : media.pathibhara@gmail.com

Email analysis :

NOTE : Received : from bol.com.br (a4-wakko5.host.intranet [10.131.140.94])
NOTE : by a4-salsa2.host.intranet (Postfix)
NOTE : financeiro.4dcw1@bol.com.br
NOTE : scalvenzi2500@bol.com.br
NOTE : client-ip=200.147.97.221;

Implementing new login authentication procedures in order to safeguard your account information no. 37435374 (Lloyds Phishing)

Important Notice

Please Note: Starting from October 27th 2015, we will be implementing new login authentication procedures in order to safeguard your account information. Part of these procedures will be the introduction of our two step authentication system which will prevent access to your account by a third party, this system will work by comparing information from the device being used to access our sites against data we previously hold regarding the devices you most frequently use.

In order for us to launch these new login authentication procedures we require you to complete our account verification process this should only take you a few minutes to complete and will help us in safeguarding your account information.

Get Started ⇒

Please note: Failure to comply with our account verification process may lead to temporary suspension of access to our online and telephone banking service.

Best regards,
Lloyds Corporate Banking Team

Phishing analysis :

CLICK : Get Started ⇒
OPEN : http://saunacity.ch/r/
REDIRECT : http://trilogyenvironmental.co.uk/a/Lloyds-Corporate/Logon.php?sslchannel=true&sessionid=***








REDIRECT : https://www.google.co.uk/url?
REDIRECT : https://commercialbanking.lloydsbank.com/online-services/

saunacity.ch whois :

Domain name: saunacity.ch
Holder of domain name:
Immo Secura GmbH
Pedretti Sandra
Storchengasse 4
CH-4800 Zofingen
Switzerland
Contractual Language: German
Registrar:
switchplus AG
First registration date:
2004-09-17
DNSSEC:N
Name servers:
ns1.csdns.ch [93.157.48.10]
ns2.csdns.ch [194.116.186.230]

trilogyenvironmental.co.uk whois :

Domain name: trilogyenvironmental.co.uk
Registrant: Trilogy Environmental Solutions

Registrant's address:

134 Provost Rust Drive
Aberdeenshire
Aberdeen
AB16 7YL
United Kingdom

Registrar:

TUCOWS Inc t/a TUCOWS [Tag = TUCOWS-CA]
URL: http://www.tucowsdomains.com

Relevant dates:

Registered on: 01-Jul-2008
Expiry date: 01-Jul-2016
Last updated: 03-Jun-2014

Name servers:

ns1.abodehosting.net
ns2.abodehosting.net

Email analysis :

NOTE : BANK@solucionlopd.es
NOTE : LLOYDS@solucionlopd.es
NOTE : data@solucionlopd.es
NOTE : client-ip=93.189.94.102;


NOTE : 93.189.94.102 as permitted sender

Mr. Gordon Hills

I sincerely apologize if my message does not suit your current status, my name is Mr. Gordon Hills from London, I am a South African - British Citizen, happily married with two kids. I'm contacting you now because I have huge interest for investment in your country as well as seek your services in a private and confidential matter. I am a lawyer and personal attorney to Late Simon Davis, A military man who died on a United Nations peace keeping mission in Kabul city of Afghanistan. My client died as a divorcee without any children thereby having NO one as next of kin. The United Nations Organization and International Monetary Fund’s (UNO/IMF) compensation payment office in London had contacted me and urge me to provide a partner to my client who will stand to claim his compensation funds. the compensation fund valued at US$5,000.000.00 (Five Million United States Dollars Only) is due to be released to whoever I am going to present as a partner to my client hence I'm contacting you.

Therefore I write to seek your indulgence and assistance in transferring this fund to your country through legal means as UNO/IMF compensation payment for onward Investment into any segment of your country`s economy. I am proposing to make this transfer to a designated bank account of your choice in your country for investment without any risk involved. At the conclusion of this transaction, I promise to give you 30% of the total amount for your assistance, 70% will be for me and my family which i will entrust under your care for investment purpose. Kindly get back to me with Your full names and Your mobile telephone numbers. Also let me know immediately if you can handle this job. Kindly advise me on which areas of investment you want us to channel the funds in your country. For more information you can reach me by clicking on the reply button. Thank you!

Yours sincerely,
Mr. Gordon Hills., Attorney @Law.

Wednesday, October 28, 2015

New order 1320

Dear supplier,

Please find the attached purchase order and acknowledge the receipt.

We await your response with details.

Thanks,

Monica Paquette
Purchasing Manager.
JUBAILI TRADE COMPANY.
32107 Bad Salzuflen

Germany

T: +49-5208-9102-7523
F: +49-5208-9102-9054
M: +49 151 616023605

Web: www.ararmaturen.net

PO_FY6667544pdf.ace

PO_FY6667544pdf.ace analysis :

PO_FY6667544pdf.ace is a virus.

Virus analysis :

AVG : MSIL9.XGT
Ad-Aware : Gen:Variant.Kazy.758648
Arcabit : Trojan.Kazy.DB9378
BitDefender : Gen:Variant.Kazy.758648
ESET-NOD32 : a variant of MSIL/Kryptik.DZP
Emsisoft : Gen:Variant.Kazy.758648 (B)
F-Secure : Gen:Variant.Kazy.758648
GData : Gen:Variant.Kazy.758648
Ikarus : Trojan.MSIL.Crypt
Kaspersky : Trojan.MSIL.Inject.dbmu
MicroWorld-eScan : Gen:Variant.Kazy.758648
Microsoft : Trojan:Win32/Dynamer!ac
Sophos : Mal/DrodAce-A
TrendMicro : TSPY_GOLROTED.CP
TrendMicro-HouseCall : TSPY_GOLROTED.CP

Email analysis :

NOTE : monica.p@tech-center.com
NOTE : Received : from 210.195.249.3 (klg-58-154.tm.net.my [202.188.58.154])


NOTE : by cactus4.qatar.net.qa (Oracle Communications Messaging Exchange Server)
NOTE : does not designate 82.148.101.71 as permitted sender

Mobile App Development

Hello,

Are you running short of Mobile App Developers? We are here to full fill all your Mobile Apps development needs!

Solution Analysts a perfect destination for enterprise and start-ups to hire expert mobile developer°s for high performance applications at competitive rates. SA designers and developers are brimming with creativity, curiosity and competence.

Our mainstay dedicated developer°s offering "Starting at just US $15/hr" We do more than build mobile, We Build trust with sincere work.

Android Developers
iOS Swift Developers
PhoneGap Developers (Cross Platform)

With SA we can assure you 100% Success with our streamlined project management:

1. We have our own validation process for selecting a development team for you that will be perfectly suited for any business needs.

2. We do complete risk and returns analysis before recommending developers to you.

3. We do not have bid options but conduct precise manual matches on the basis of requirement, size or whatever matters to you. Once you start working with our team, we check on every aspect, because we care about you. We care about customers.

Honest Numbers that will swing your mind to start working with us:

We are the great problem-solvers who value integrity, and many top companies rely on us for their most important projects.

5+ years experience
7+ Android & iOS SDK
187+ Apps delivered so far 100% quality assurance
42+ Testing Devices 52+ Professional Developers and Designers

Building a product? We help you to setup a dedicated team that will perfectly match your needs. Top enterprises and start-ups choose SA developers to accomplish their dream projects. It is your turn.

Looking forward to your response and addressing your business needs.

Sincerely,
Jason Williams
Business Development Team
Contact: harime@sina.com

Email analysis :

NOTE : lindduiy@mail.com
NOTE : serint@aliyun.com
NOTE : yixin_ok@163.com
NOTE : harime@sina.com
NOTE : 103.246.248.150 (less.335075.com)

335075.com whois :

Domain Name: 335075.com
Registry Domain ID:
Registrar WHOIS Server: whois.ename.com
Registrar URL: http://www.ename.net

Updated Date: 2015-10-04 T15:48:08Z
Creation Date: 2015-10-04 T15:48:08Z
Registrar Registration Expiration Date: 2016-10-04 T15:48:08Z
Registrar: eName Technology Co.,Ltd.
Registrar IANA ID: 1331
Registrar Abuse Contact Email: abuse@ename.com
Registrar Abuse Contact Phone: +86.4000044400

Registrant Name: wengyixin
Registrant Organization: weng yixin
Registrant Street: 15 Bashimu, Xixu Country, Huating Town, Chengxiang District
Registrant City: pu tian shi
Registrant State/Province: fu jian
Registrant Postal Code: 351100
Registrant Country: CN
Registrant Phone: +86.05942625229
Registrant Fax: +86.05942625229
Registrant Email: yixin_ok@163.com

Admin Name: wengyixin
Admin Organization: weng yixin
Admin Street: 15 Bashimu, Xixu Country, Huating Town, Chengxiang District
Admin City: pu tian shi
Admin State/Province: fu jian
Admin Postal Code: 351100
Admin Country: CN
Admin Phone: +86.05942625229
Admin Fax: +86.05942625229
Admin Email: yixin_ok@163.com

Tech Name: wengyixin
Tech Organization: weng yixin
Tech Street: 15 Bashimu, Xixu Country, Huating Town, Chengxiang District
Tech City: pu tian shi
Tech State/Province: fu jian
Tech Postal Code: 351100
Tech Country: CN
Tech Phone: +86.05942625229
Tech Fax: +86.05942625229
Tech Email: yixin_ok@163.com
Name Server: ns1.51dns.com
Name Server: ns2.51dns.com

Consent Request

Hello,

I'm Mr. Peter Wong working with HSBC Malaysia.

There is a certain deceased customer of HSBC Bank who left behind US$19.3M Nineteen Million Three Hundred Thousand Dollars. This person happen to share the same last name as yours.

I seek your honest partnership in receiving this fund as his relative/next of kin. If interested, reply immediately for detailed information.

My sincere regards,
Peter Wong
E-mail: peterwongtung@yahoo.com.my

Email analysis :

NOTE : peter.wongt@yahoo.com.my
NOTE : nobody@server.donkeymails.com
NOTE : X-Php-Script : www.donkeymails.com/pages/m.php for 120.141.126.240
NOTE : client-ip=205.251.156.154;

PLEASE READ

FROM THE PRIVATE DESK OF;
CHARLES PATRICK B. (BARRISTER AT LAW).

I am Barrister Charles Patrick B., a South African residing and practicing Law in United Kingdom. I specialise in family law, will, probate and tax saving strategies. On May 12 2010, one of my senior clients MR. VAN GEERAARD HUSSEN a DUTCH died in a plane crash that happened in Libya. Here is a link for your view: http://www.nytimes.com/2010/05/13/world/middleeast/13libya.html?_r=0Last message received on 02/12 at 08:17.

MR. VAN GEERAARD HUSSEN stated his wife as his next of kin but unfortunately she died also in the crash along with Mr. VAN GEERAARD HUSSEN and their three children. I am the executor of Mr. VAN GEERAARD HUSSEN's will and have shared his assets and properties to his extended family members and they have gone since December 2010. But Mr. VAN GEERAARD HUSSEN deposited the sum of $4.5 million United States Dollars in a fixed deposit account in a bank in United Kingdom not known to anybody. On December 15th 2014 the bank wrote me as his lawyer/executor to bring along the next of kin/beneficiary of Mr. VAN GEERAARD HUSSEN to inherit his funds (US$4.5m). I have therefore decided to contact you to present you as the next of kin/beneficiary to Mr. VAN GEERAARD HUSSEN to enable you receive the fund on our behalf as Mr. VAN GEERAARD HUSSEN spouse and dependant all died in the plane crash with him. All the documents required to claim this funds like the affidavit of claim, death certificate, certificate of deposit, transfer of ownership, certificate of inheritance etc will be prepared by me in the High court of London. I will forward to you all these documents required to claim this funds.

All I need from you is to indicate your interest to be the next of kin/beneficiary to MR. VAN GEERAARD HUSSEN and I will present it to the bank. This is 100% legitimate. When you receive the money in your account I will come over to your country for the sharing as follows; 30% for you and 65% for me. The remaining 5% will be set aside for expenses that will be incurred by both parties during the course of this transfer to your account. As the fiduciary/trusted representative of the deceased, and as the manager of his assets, properties and financial affairs when Mr. VAN GEERAARD HUSSEN was alive i have absolute duty to properly administer the estate for its beneficiary. When I receive your positive reply I will furnish you with my full name, address and telephone number. Await your response.

Best regards,
Charles.

Email analysis :

NOTE : charlesrudlings@live.com
NOTE : charlespb33@gmail.com
NOTE : Received : from 212-166-21-126.win.be
NOTE : ([212.166.21.126]:19339 helo=User)
NOTE : 89.34.26.153 ()

Rép : What is the most popular CONFETTI EFFECTS in 2016?

Hello,

Our company have some new products, all of them are fashion very much.

Such as confetti paper , confetti shooter , confetti machine .

Below are our latest production for your reference, if you have interesting,
I will send you our catalog later, thank you very much!

More Information please visit our business website (www point *** point com ),

Welcome to visit our factory at any time.

Thanks and best regards!

Sales Manager: Selina-sun

CONFETTIOFFER
TEL: 86-519-83758526

Email analysis :

NOTE : jqrjdyls@nruc.com
NOTE : huixinsoft45@foxmail.com
NOTE : 123.138.244.181 ()

UNITED NATIONS NATIONAL AUDIT OFFICE

UNITED NATIONS NATIONAL AUDIT OFFICE
BUCKINGHAM PALACE ROAD, VICTORIA
LONDON SW1W 9SP,
UNITED KINGDOM.

Attention: Beneficiary

We sincerely apologize for sending you this sensitive information via e-mail instead of a certified mail, phone call or a face-to-face conversation, it is due to the urgency and importance of the security information involved. In the quest to cushion the effect of the global financial crisis, American government through the Federal Bureau of Investigation (FBI) Washington DC, United Nations and the Internet Crime Complaint Center (ic3) has signed an agreement with Nigeria & EFCC for an immediate release of all overdue funds presently logged in their treasury and ensure it is disbursed to the rightful beneficiaries in any part of the world. If you the beneficiary would adhere to this notification it will help stabilize the various economies of the world and reduce the effect of this depressing recession.

Prior to this agreement our team of security experts has swung into action for transparency and accountability of this periodic project. The Federal Bureau of Investigation (Global Intelligence, Cyber Division) saddled with the responsibility of monitoring activities going on over the internet have discovered your name in the list of unpaid beneficiaries and it might interest you to know that we have conducted a comprehensive investigation on this discovery as stipulated on our protocol of operation and have confirmed that the funds was endorsed in your favor and it is 100% genuine and hitch free from all facets. You have the lawful right to contact the appropriate authority to claim your payment without further delay. Under the Joint Regulatory Commission, we have appointed a sole fiduciary member of UNITED BANK FOR AFRICA (UBA) PLC that will handle the transfer of your funds through ATM CARD Payment. This card centre will send you an ATM CARD which you will use to withdraw your money in any ATM Machine located in you designation/any part of the world, the maximum amount to withdraw are three thousand dollars per hour.

Therefore; send us the below information to the above address to enable the ATM Card Department start processing your ATM CARD.

1. Your full name
2. Phone number & fax
3. Address where you want them to send the ATM CARD
4. Your Age & Current Occupation
5. Attach copy of your Identification.

The UBA ATM CARD payment centre has been mandated to issue out USD15, 000,000.00 as part payment for your Contract/Inheritance/Lottery Winnings for this fiscal year 2015. Also for your information, you have to stop any further communication with any other person (s) / office (s) to avoid any hitches in receiving your payment. And note that because of impostors, we hereby issued you our code of conduct which is (ATM-05AS)) so you have to indicate this code when contacting the UBA card centre by using it as your subject.
Thanks.

Dr.James Attah
SEC.UNITED NATIONS
PANEL OF FOREIGN AFFAIRS

Email analysis :

NOTE : Attah@solid.ocn.ne.jp
NOTE : cardatm251@yahoo.in
NOTE : Received : from mzcstore042.ocn.ad.jp (mv-osn-hcb009.ocn.ad.jp [122.1.235.83])
NOTE : by mv-osn-hcb009.ocn.ad.jp (Postfix)
NOTE : X-Originating-Ip : [41.85.176.94]
NOTE : X-Remote : 153.149.233.27 (mbkd0226.ocn.ad.jp)

Tuesday, October 27, 2015

We were unable to process your most recent payment... (Amazon Phishing)

Amazon.com

Today's Deals See All Departments

= = = = = = = = = = = = = = = = = = = =

We were unable to process your most recent payment. Did you recently change your bank, phone number or credit card?. To ensure that your service is not interrupted, please update your billing information today.

Confirm your account now

We're available 24 hours a day, 7 days a week. If you have recently updated your billing information, please disregard this message as we are processing the changes you have made. If you need further assistance with your order.

= = = = = = = = = = = = = = = = = = = =

Amazon.com
Connect with us

Phishing analysis :

CLICK : Confirm your account now
OPEN : http://www.intellectualjourneyofenlightenment.org/admin/css/amazon.com-verification/id/
RESULT : This Account Has Been Suspended

intellectualjourneyofenlightenment.org whois :

Registrant ID:DI_41908394
Registrant Name:Atul Kumar Jain
Registrant Organization:intellectualjourneyofenlightenment.org
Registrant Street: 363, sec 15
Registrant City:Panchkula
Registrant State/Province:Haryana
Registrant Postal Code:134114
Registrant Country:IN
Registrant Phone:+91.9888054461
Registrant Email:atul.jain2711@gmail.com
Admin ID:DI_41908394

Email analysis :

NOTE : noreply@amzon.support82.e-i.com
NOTE : 192.163.247.190 (ami.amiableargument.com)
NOTE : X-Source-Args : /usr/bin/php /home/wwwtheiv/public_html/clientscript/ie7/wp-confiiig.php
NOTE : Received : from wwwtheiv by ami.amiableargument.com
NOTE : (envelope-from < wwwtheiv@ami.amiableargument.com >)
NOTE : X-Mailer : theivoryquill.com
NOTE : X-Php-Script : theivoryquill.com/clientscript/ie7/wp-confiiig.php
NOTE : for 185.109.161.21


NOTE : X-Get-Message-Sender-Via : ami.amiableargument.com:
NOTE : authenticated_id: wwwtheiv/only
NOTE : user confirmed/virtual account not confirmed

Payment Swift Copy

sir,

Upon request,Your customer has advised for your payment. Be informed that the following payment is made to your account as per attached HSBC payment swift copy. You are adviced to confirm receipt of payment as detailed.

Yours faithfully,
Global Payments and Cash Management.

HSBC

1 HSBC Payment Swift copy.doc (total 1.3KB)

View slide show (1)Download

Link analysis :

NOTE : http://peridotsgroup.com/colins/HSBC%20Payment%20Swift%20copy.doc
NOTE : BitDefender : Malware site
NOTE : Emsisoft : Malware site

File analysis :

Avira : EXP/CVE-2012-0158
CAT-QuickHeal : Exp.RTF.CVE-2012-0158
DrWeb : Exploit.Rtf.CVE2012-0158
Kaspersky : Exploit.Win32.CVE-2012-0158.j
Qihoo-360 : virus.exp.20120158
Rising : NORMAL:Hack.CVE-2012-0158.a!1614593 [F]
Sophos : Troj/DocDrop-DT
Symantec : Bloodhound.RTF.3
TrendMicro : HEUR_RTFMALFORME

Email analysis :

NOTE : purchasemanager@tescogroup.com
NOTE : Received : by endpoint708401cf.chios.panth.io
NOTE : 162.242.168.6 ()

Openings? (Virus)

Hi there.

I saw your business today Sat, 24 Oct 2015 and found it very likeable.
I was praying there was any possibility of employment, just to prove my competence.

As you will see in my resume, I am very qualified and have a very sweeping experience in this field of work. I am confident it will be worth your time reviewing it, and I am even more positive you will find me very suitable in your corporation.

Please see my CV.

I'm very much looking forward to hearing from you.

Thanks,

Theda Deisch

My_Resume_64004.doc

My_Resume_64004.doc analysis :

My_Resume_64004.doc is a virus.

Virus analysis :

AVware LooksLike.Macro.Malware.h (v)
AhnLab-V3 : DOC/Downloader
Arcabit : HEUR.VBA.Trojan
CAT-QuickHeal : O97M.Dropper.LQ
Fortinet : WM/Agent!tr
Ikarus : Trojan-Downloader.VBA.Agent
Sophos : Troj/DocDl-AFA
Symantec : W97M.Downloader
TrendMicro : TROJ_FRS.0NA004JP15
TrendMicro-HouseCall : TROJ_FRS.0NA004JP15
VIPRE : LooksLike.Macro.Malware.h (v)

Email analysis :

NOTE : thedaobmhf@rambler.ru
NOTE : Mime-Version : 1.0
NOTE : 81.19.67.206


NOTE : X-Rambler-User : thedaobmhf@rambler.ru/117.253.216.19


NOTE : X-Mailer : Rambler WebMail, http://mail.rambler.ru/
NOTE : Received : from [117.253.216.19] by mail.rambler.ru
NOTE : Openings?

LUCRATIVE DISTRIBUTORSHIPS AVAILABLE

We are a U.S. company looking for distributors worldwide. We have been manufacturing and distributing slip-resistant floor treatments for more than 26 years! One 30 minute application with our Amazing Anti-Slip Floor Treatment will make floors slip-resistant and safe for 4 years - Guaranteed! Indoors or Outdoors No Change in Appearance For use on: Ceramic, Marble, Granite, Porcelain and Quarry Tiles Concrete, etc.. Typical Applications: Restaurant Kitchen Floors, Office Buildings, Hotels, Hospitals, etc.

Some of our satisfied customers: , Kroger, Holiday Inn, McDonald's, Miami Children's Hospital Pfizer, etc. Please contact us for details and to see if there is a distributorship available in your country. For an Exclusive Distributorship, an Initial Inventory Investment of $5,000 USD - $20,000 USD is required, depending upon the country.

Best regards,
Jeremy
Email: ydiney@tom.com

PLEASE INCLUDE YOUR NAME, COUNTRY & E-MAIL ADDRESS

Email analysis :

NOTE : diurios@mail.com
NOTE : Received : from lydia.pu88.net (31.220.42.101)

Private Investment Placement

Welcome to our Private Placement Portfolio.

I am a Staff of a Venture Capital Firm specializing in Growth Capital Investments/Loans.We seek to invest in Projects with Public and Private sectors in a broad range of areas including Real estate,Agriculture, Energy, Oil and Gas ,emerging markets and high-technology. Within the technology sector, the firm focuses on communications, software,digital content and services.

We wish to invest between $1Million-$500Million in any viable projects that your company requires funding on investment capacity/Loan Application. Upon the review of your company's Project Business Plan we shall determine on the projects possible funding. This will be a silent and Private Placement Investments.

Endeavor to respond promptly if the investment proposal meets your company's approval.

Kind Regards,
Lopati T

Email analysis :

NOTE : lopatit@mail.notes.cc
NOTE : ltuala225@gmail.com
NOTE : client-ip=46.22.145.69;
NOTE : Private Investment Placement

Reference to your Payment

To Your Attention;

On behalf of the board and management of Foreign Payment Department, I Mrs. Kathryn Bennett,the Managing Director of Foreign Payment Department wishes to inform you that your contractual payment w hich was suspended by the Nigerian government is due for Immediate collection.

Be informed that we have concluded all arrangements to transfer your fund to your account through Sterling Bank Plc. In line with the binding contractual payment policies, kindly furnish us with the following as set forth.

Your complete Banking details where you want the fund to be transfer and a copy of your international passport or any other means of identification as the true Beneficiary .your telephone number. The Contract Amount is $2.7Million, You shall required Setting up a Non Resident Account with Sterling Bank Plc, before your fund will be release transfer to your account in your country.

Your immediate response is needed.

Best Regards
Mrs. Kathryn Bennett.
Director Foreign Payment Department

Email analysis :

NOTE : fplc379@gmail.com
NOTE : dondonthecat22@yahoo.co.jp
NOTE : Received : from [41.71.163.249]
NOTE : by web102019.mail.ssk.yahoo.co.jp

Your account expires in less than 48 hours .

Hello,

please, kindly quote your best prices for our attached order.Your company came higly recommeded for this order. For item No 1,4,6 & 7..give your best prices for we wish to make large order. Add me on Skype for detailed discussion

Awaiting your urgent confirmation

Thanks & Best Regards
NAZIR AHMED
PHONE: +92-222-633263, +92-222-617906,
FAX: +92-222-612877
Mobile : +92-300-3010717
EMAIL: info@almarryamint.com afintpk@yahoo.com
SKYPE: afintpk

subject...Order No. 1,4,6 & 7

ORDER.ace

File analysis :

ORDER.ace : virus.
ORDER.ace : Qihoo-360 : htm.faceliker.d.39

Email analysis :

NOTE : arabico2222@gmail.com
NOTE : Mime-Version : 1.0
NOTE : User-Agent : SquirrelMail/1.5.2 [SVN]
NOTE : Received : from march.alignhosting.com
NOTE : (march.alignhosting.com. [67.205.123.150])
NOTE : authenticated_id: info@stcotransport.com

Our awesome financial scheme.

Good day,

Are you Interested in awesome financial scheme and loan offer at interest rate of 3%? Contact us for more details.

Sincerely,

Mr. Wolfgang . U. Fischer.

FIRM ALLIANCE UK LIMITED

Email analysis :

NOTE : info@alliancelf.com
NOTE : Received : from mailer-72.eaudiencemarketing.com (192.228.96.154)
NOTE : Received : from unknown (HELO User)
NOTE : (test3@findersmedia.com@85.16.128.242)
NOTE : by -X with ESMTPA

INFORMATION

Hello,

I will like us to discuss some important business issues that will be of mutual benefit to us. Please, kindly confirm your name and email address to enable me ascertain that my mail is to the correct person.

Do send me mail: gordch01@yahoo.com.hk

Thank you.

Gordon C.

Email analysis :

NOTE : scottie@hibs.net
NOTE : gordch01@yahoo.com.hk
NOTE : Received : from User (unknown [168.187.246.41])
NOTE : by hibs-net.nh-serv.co.uk (Postfix)

Your account will expire in 48 hours. (Apple Phishing)

dear client ,

We inform you that your account will expire in 48 hours, it is imperative to conduct an audit of your information to the Now, using your iTunes ID.

Check now

The sending of this email applies when the expiration date of your
account expires,

For more information, see the Security Center category.

thank you,
Apple Support

Phishing analysis :

CLICK : Check now
OPEN : http://bomcity.co/main/iTunes.htm
REDIRECT : http://unlocksuccessmembers.com/iTunes/***/
SCREENSHOT :


VALIDATE : FORM
REDIRECT : http://unlocksuccessmembers.com/iTunes/***/Verification.php
SCREENSHOT :


NOTE : unlocksuccessmembers.com redirect to fiverchamp.com

Whois analysis :

bomcity.co :

Domain Name: BOMCITY.CO
Domain ID: D1433807-CO
Sponsoring Registrar: INSTRA CORPORATION PTY LTD
Sponsoring Registrar IANA ID: 1376
Registrar URL (registration services): whois.instra.net
Domain Status: ok
Registrant ID: TUHAFHUSFMUH682Z
Registrant Name: Dominic Tong
Registrant Address1: Flat F, 42/F, Tower 5
Registrant Address2: Ocean Shores, TKO
Registrant City: Hong Kong
Registrant Postal Code: 000
Registrant Country: Hong Kong
Registrant Country Code: HK
Registrant Phone Number: +852.90348565
Registrant Email: codomains@instra.com
Administrative Contact ID: TUSUQQUY9AQN00ME
Administrative Contact Name: Dominic Tong
Administrative Contact Address1: Flat F, 42/F, Tower 5
Administrative Contact Address2: Ocean Shores, TKO
Administrative Contact City: Hong Kong
Administrative Contact Postal Code: 000
Administrative Contact Country: Hong Kong
Administrative Contact Country Code: HK
Administrative Contact Phone Number: +852.90348565
Administrative Contact Email: codomains@instra.com
Billing Contact ID: TUJQANM3X6PC71J4
Billing Contact Name: Dominic Tong
Billing Contact Address1: Flat F, 42/F, Tower 5
Billing Contact Address2: Ocean Shores, TKO
Billing Contact City: Hong Kong
Billing Contact Postal Code: 000
Billing Contact Country: Hong Kong
Billing Contact Country Code: HK
Billing Contact Phone Number: +852.90348565
Billing Contact Email: codomains@instra.com
Technical Contact ID: TURJGNWGXN7HO1OW
Technical Contact Name: Dominic Tong
Technical Contact Address1: Flat F, 42/F, Tower 5
Technical Contact Address2: Ocean Shores, TKO
Technical Contact City: Hong Kong
Technical Contact Postal Code: 000
Technical Contact Country: Hong Kong
Technical Contact Country Code: HK
Technical Contact Phone Number: +852.90348565
Technical Contact Email: codomains@instra.com
Name Server: NS1.INSTRADNS.COM
Name Server: NS2.INSTRADNS.COM
Name Server: NS3.INSTRADNS.COM
Created by Registrar: TUCOWS DOMAINS INC.
Last Updated by Registrar: INSTRA CORPORATION PTY LTD
Last Transferred Date: Thu Apr 19 12:26:36 GMT 2012
Domain Registration Date: Wed Jul 21 05:10:16 GMT 2010
Domain Expiration Date: Wed Jul 20 23:59:59 GMT 2016
Domain Last Updated Date: Mon Jul 13 01:05:35 GMT 2015
DNSSEC: false

unlocksuccessmembers.com :

Domain Name: UNLOCKSUCCESSMEMBERS.COM
Registry Domain ID: 1909356745_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Update Date: 2015-03-12T05:42:16Z
Creation Date: 2015-03-12T05:42:16Z
Registrar Registration Expiration Date: 2016-03-12T05:42:16Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: +1.4806242505
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Domain Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Domain Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Registrant Name: Morrison Publishing, LLC
Registrant Street: 965 Hwy 51n ste 4-100
Registrant City: madison
Registrant State/Province: Mississippi
Registrant Postal Code: 39110
Registrant Country: United States
Registrant Phone: +1.6014881062
Registrant Email: anthony@anthonymorrison.com
Admin Name: Morrison Publishing, LLC
Admin Street: 965 Hwy 51n ste 4-100
Admin City: madison
Admin State/Province: Mississippi
Admin Postal Code: 39110
Admin Country: United States
Admin Phone: +1.6014881062
Admin Email: anthony@anthonymorrison.com
Tech Name: Morrison Publishing, LLC
Tech Street: 965 Hwy 51n ste 4-100
Tech City: madison
Tech State/Province: Mississippi
Tech Postal Code: 39110
Tech Country: United States
Tech Phone: +1.6014881062
Tech Email: anthony@anthonymorrison.com
Name Server: NS1.MYLAUNCHMEMBERS.COM
Name Server: NS2.MYLAUNCHMEMBERS.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

fiverchamp.com :

Domain Name: FIVERCHAMP.COM
Registrar: GODADDY.COM, LLC
Sponsoring Registrar IANA ID: 146
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1527.WEBSITEWELCOME.COM
Name Server: NS1528.WEBSITEWELCOME.COM
Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Updated Date: 30-mar-2014
Creation Date: 05-jan-2013
Expiration Date: 05-jan-2016

Email analysis :

NOTE : Account.Apple@mail.apple-id.com
NOTE : client-ip=64.191.157.113;
NOTE : Received : from webmail.netgainit.com ([64.191.157.113])
NOTE : Received : from HVPS-LaneWeb (10.50.87.1) by ssexch3.ssad2.com (10.50.3.3)

Contact ATM Director to load your Fund in your ATM

Attention!

This is to inform you officially that Benin Presidency Office has approved sums of $8.500,000,00 USD to you as inheritance Overdue fund, after verification, your name was found in the list of scam victim, IMF has signed your payment file to immediate release your fund to your ATM through new system to help you get your Fund immediately.Note, IMF has approved this $8.500, 000, 00 USD to transfer to your ATM Debit in your country without issue new ATM here. If you have any ATM in your country, Kindly forward ATM information such as below to load this fund to your ATM Account in your country, with the same Pin Number and also the same amount you withdraw per day.

As matter of fact, Bank will activate your ATM after confirmation of your ATM information to start daily withdrawing.
(1) Your Full Name: ____
(2) Your Address: ____
(3) You’re Phone Contact: ____
(4) You’re ATM Serial Number: ____
(5) The type of your ATM: ____
(6) The name of Bank issued your ATM: ____
(7) Three Numbers in back of your ATM: ____
(8) Amount you withdraw per day: ____
(9) A Copy of your ID/ Your Bank address:____

Benin ATM Director: Rev. Frank K. Musa
Phone Number: +229 98498627

And once we receive above Information we activate this Fund to your ATM to start withdrawing your fund in your country to help you receive your Inheritance.Finally, you can contact ATM HEAD OFFICE for immediate transfer your fund to your ATM account in your country.
You're in service
Mr. Benson Van.

Email analysis :

NOTE : bensonvan1@outlook.com
NOTE : miss_tina080@yahoo.co.jp
NOTE : Received : from [41.138.90.66]


NOTE : by web101314.mail.kks.yahoo.co.jp via HTTP;

Are you still ALIVE Or Dead ???

From The Desk Of: Mr. Sirawit Phasali
Foreign Remittance Department
1 Soi Rat Burana 27/1, Rat Burana Road, Khwaeng
Rat Burana, Khet Rat Burana, Bangkok 10140, Thailand.
Tel:+66843557713 / Tel:+(66)930157732

Attn: Fund Beneficiary: Payment Code: R578906K

Dear Sir,

Following the recent meeting held by the board members of this esteemed financial institution, the new Board of Directors of the world Bank, the Financial Adviser to the President, members of audit Committee on Foreign Payment and in conjunction with International Community Delegates, international monetary fund {IMF}. We are very pleased to contact you due to a report reaching us regarding your OUTSTANDING FUND ($10.500,000,00) Ten Million Five Hundred Thousand United States Dollars only, which has been long over due for payment but was made impossible by some corrupt officials. In the course of our General Auditing and Account revision of the first quarter of 2015,we discovered that the Bank Accounts belonging to some Benefactors have been changed on the basis that the owners have died some time last year or have given out an authorization note of change of data. After the investigations however, it was revealed that there are Foreigners who are collaborating with Retired Staffs to make these changes illegally without the knowledge of the Benefactors and one traced to your own change is this (MR. RONALD LAMB) who said you are dead, hence they have forwarded some documents/Death certificate so as to divert your fund. The bank account below was forwarded/presented by (MR. RONALD LAMB) as the new account for receipt of the funds:

Bank Name: NAVY FEDERAL CREDIT UNION
Bank Address: 820 Follin Lane Vienna, Virginia 22180 USA
Telephone: 888-542-6326
Routing Number: 256-074-974
Account Name: MR.RONALD LAMB
Account Number: 703-444-3742
Type of Account: Checking

In order confirm if actually this is true and hence decided to write to your email address which after 7 days from now and there is no response, it will be ascertained that you are truly DEAD, then proceed with the telegraphic transfer. If proved otherwise by you to be ALIVE?, please forward to us all the related Benefactors particulars including your Telephone numbers, contact address, these details from you will help reach a conclusion that you still ALIVE. Because this MAN'S message brought shock to our minds. And we just can't proceed with him until we confirm if this is a reality OR not, But if it happened we did not hear from you after 7days, then we say: MAY YOUR SOUL REST IN PERFECT PEACE" YOUR JOY AND SUCCESS REMAINS OUR GOAL.

Feel free to call on us for more clarification +66843557713

Yours Faithfully,

Mr. Sirawit Phasali.
Foreign Remittance Department Telex Transfer Section,
Kasikorn Bank Pcl.

Email analysis :

NOTE : spam@esalmaty.kz
NOTE : foreignoperations@126.com
NOTE : Received : from static-173-62-16-178.pghkny.fios.verizon.net
NOTE : (HELO User) (mac@mypcstv.com@173.62.16.178) by 0 with SMTP;

Monday, October 26, 2015

This will interest you.

Good day,

Are you Interested in awesome financial scheme and loan offer at interest rate of 3%? Contact us for more details.

Sincerely,

Mr. Wolfgang . U. Fischer.

FIRM ALLIANCE UK LIMITED

Email analysis :

NOTE : info@alliancelf.com
NOTE : Received : from [41.138.171.111] (port=63747 helo=User)
NOTE : by cpanel.aztechinteractive.com

Compensation

Bonjour,

Ceci est pour vous informer que suite à l’une de nos opérations dans le cadre de la traque des cyber criminels qui opèrent dans notre pays, nous avons appréhendé certains criminels recherchés par nos services depuis des année pour des crimes commis par eux, notamment ‘’Faux et usage de faux’’, escroquerie et cyber criminalité. Suite aux aveux de certains des criminels, nous avons pu vous identifier comme étant l’une des victimes des ces hors la loi.

Soucieux de redorer l’image du pays en raison de sa mauvaise réputation et des critiques qu’il essuie au plan international du fait de la forfaiture de ces cyber criminels opérant sur son sol, le gouvernement béninois a tenu hier une séance de travail avec des représentants des Nation Unies et du Programme International de Lutte contre la cyber criminalité sur le thème : la cyber criminalité et ses conséquences sur le tissu économique du Bénin. A l’issue de cette séance de travail, diverses résolutions on été prises, notammeant le dédommagement de certaines des victimes ayant été arnaquées depuis le territoire béninois.

A cet effet, votre nom a été sélectionné parmi les 100 bénéficiaires répertoriés pour ce paiement de compensation a travers le monde. Chaque bénéficiaire recevra la somme de € 53.000 en compensation du préjudice économique et moral qu’il A subit. La banque UBA, United Bank of Africa est l’entité chargée du transfert des fonds sur vos différents comptes sous la supervision de notre Brigade Economique et Financière en vue d’éviter d’éventuelles malversations.

Veillez pour ce faire nous confirmer vos informations personnelles suivant le formulaire ci-dessous:

Nom :
Prénom :
Pays :
Ville :
Age :
Occupation :
Tel :

Pour des raisons de sécurité nous vous prions de ne répondre a aucun des mails et appels provenant du Bénin sans l’aval de nos services parce que certain des criminels sont encore dans la nature et pourront éventuellement vous contacter pour d’autres forfaitures. Nous vous prions aussi de nous faire parvenir tous les mails et informations que vous avez reçus de vos arnaqueurs pouvant nous aider à appréhender les autres éléments du groupe.
Veillez répondre à ce message dans l’immédiat afin que votre dossier puisse être transmis à la banque pour les démarches concernant votre paiement.

Mr Marc Marx
Commissaire de la Brigade Economique et Financière

Email analysis :

NOTE : MARC@hyper.ocn.ne.jp
NOTE : X-Originating-Ip : [41.86.234.165]
NOTE : Received : from mzcstore042.ocn.ad.jp
NOTE : (mv-osn-hcb009.ocn.ad.jp [122.1.235.83])
NOTE : by mv-osn-hcb009.ocn.ad.jp (Postfix)
NOTE : client-ip=153.149.230.33;