Thursday, July 28, 2016

Security update regarding your account (PayPal Phishing)


This is an automated email, please do not reply

Dear User
(*@* ),

Our advanced security system detected that your account information has been compromised, We need to verify your account in order to continue using your Paypal services, Please understand that this is a security measure to protect you & your account. We apologize for any inconvenience.

Check your account

Thanks for choosing us,
PayPal Team

© 1999-2016 PayPal. All rights reserved.
Email ID: 865009
2016/07/28 00:15:00

Email analysis :

NOTE : support@estet.az
NOTE : Mime-Version : 1.0
NOTE : Authentication-Results : support@estet.az designates 94.20.30.223
NOTE : X-Priority : 1
NOTE : Content-Transfer-Encoding : 8bit
NOTE : X-Mailer : PHPMailer 5.2.8Wahib Priv8 Mailer
NOTE : X-Php-Script : estet.az/aa.php for 117.244.23.108


NOTE : X-Get-Message-Sender-Via : ns001.datacenter.az: authenticated_id: estet/from_h
NOTE : X-Authenticated-Sender : ns001.datacenter.az: support@estet.az
NOTE : Received-Spf : client-ip=94.20.30.223;


NOTE : Security update regarding your account

Phishing analysis :

CLICK : Check your account
OPEN : http://cirt.mx//images/Secure//
REDIRECT : http://cirt.mx/images/Secure//MGen/*/?dispatch=*
SCREENSHOT :


CLICK : Log In
SCREENSHOT :

FINAL WARNING: Verify Your Email Account Within 12 Hours! (Phishing)

Your Account & Email Has Been Blocked!
Your account has been Blocked due to system error CODE:YB261729285.
If you would like to continue using your Email Address,

VerifyYour Account Now

YOU WILL COMPLETELY LOSE YOUR EMAIL ADDRESS IF NO ACTION IS TAKEN.

Sincerely,

©2016 Mail Team - Terms & Privacy

Email screenshot :


Email analysis :

NOTE : Mime-Version : 1.0
NOTE : Authentication-Results : saleshf@helnan.com
NOTE : Return-Path : < saleshf@helnan.com >
NOTE : Received : from ahvm102rry.activehost.com
NOTE : (ahvm102.activehost.com. [66.165.144.25])
NOTE : Received : from [192.168.43.215] (UnknownHost [197.211.57.14])
NOTE : client-ip=66.165.144.25;
NOTE : FINAL WARNING: Verify Your Email Account Within 12 Hours!

Phishing analysis :

CLICK : VerifyYour Account Now
OPEN : http://ecogreentec.com.au/san/index.htm
NOTE : http://ecogreentec.com.au/san/mail.htm?cmd=LOB=RBGLogon&_pageLabel=page_logonform&secured_page
SCREENSHOT :


INTERESTING FIELDS : (form) method="post" action="up.php"
INTERESTING FIELDS : (css) http://www.outitgoes.com/default.css
CLICK : Re-Validate My Mailbox!
REDIRECT : http://ecogreentec.com.au/san/index.htm
REDIRECT : http://ecogreentec.com.au/san/mail.htm?cmd=LOB=RBGLogon&_pageLabel=page_logonform&secured_page

Payment notification.

FEDERAL MINISTRY OF FINANCE
NATIONAL HOUSE OF ASSEMBLY COMPLEX
SENATE HOUSE - UPPER CHAMBERS WUSE DISTRICT, COTONOU BENIN
OFFICE LINE: +(229) 9948-5442

Our Ref: FGN /SNT/STB

IF YOU FAIL TO SEND THE $39 THIS WEEK YOUR $2.500, 000.00 IS GONE

I have to inform you again, that we are not playing over this, I know my reason for the continuous sending of this notification to you, the fact is that you can't seem to trust any one again over this payment and we have now curt the prize of $126 to $39 for what you have been in cantered in many months ago, but I want you to trust me, I cannot scam you for $39 it is for bank processing of your payment, the fees is $126 but we have curt to $39 so that you can be able to send it today, $39 is clearly written to you before, and the good part of this, is that you will never, ever be disturbed again over any kind of payment, this is final, and the forms from there becomes effective once we submit your payment application processing fee and pay the form fee of $39 I don't want you to loose this fund this time, because you may never get another such good opportunity, the federal government is keen and very determined to pay your overdue debts, this is not a fluke, I would not want you to loose this fund out of ignorance, I will send you all the documents as soon as bank payment processing fee is paid, you have to trust me, you will get your fund, find a way to get $39 you will not loose it,instead it will bring your financial breakthrough, find the money and send it to our bursary. The reason why am sending you this because I want you to receive your USD2.5Million immediately we are trying to round up for this payment program.The processing charges which was initially on the high price has been cut down by the payout bank considering the poor economic situations that make it difficult for the middle class citizens to meet up with the processing charges of their entitlement. Upon the confirmation of your processing charges you will get your $2.500, 000.00 into your account within 4hrs.

Here is the payment information, send Through Western Union Money Transfer OR Money Gram.

Receiver Name ...Victor Obi
Country .....Benin Republic.
City .................Cotonou.
Amount .....$39.00 US Dollars
Text question: When
Answer: Today

Sender's full banking details to avoid wrong transfer:

Bank Name:.......
Bank Address:....
Account Number:..
Account Name:....
Routing Number:..

As soon as the payment is received today, you will receive your $2.5M in your account the same today without any delay.

Best Regards
Mark Damion
+(229) 9948-5442

Email analysis :

NOTE : markdamion00@gmail.com
NOTE : OiS.@plum.ocn.ne.jp
NOTE : X-Originating-Ip : [46.246.93.15]


NOTE : Remote : 153.149.233.40 (mbkd0239.ocn.ad.jp)

Vous avez reçu un nouveau message [064415554-05541] (Phishing Crédit du Nord)

Chér(e) Client(e)

Nous tenons à vous informer que vous avez un nouveau message important de la part de votre conseiller:
Pour le consulter veuillez cliquez sur le lien ci-dessous:

Accéder à votre espace

Nous vous remercions de votre confiance .

Cordialment

Crédit du Nord

a1 2b c3........................

a0

Email screenshot :


Email analysis :

NOTE : Content-Type : text/html; charset=UTF-8
NOTE : Content-Disposition : inline
NOTE : X-Priority : 3
NOTE : Return-Path : < support@linode.com >
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : Received : from linode.com ([138.68.3.61])
NOTE : Message-Id : < *@138.68.3.61 >
NOTE : Vous avez reçu un nouveau message [064415554-05541]

Phishing analysis :

CLICK : Accéder à votre espace
OPEN : http://bnpmverif.com/1 (whois)
REDIRECT : http://ezore.com/skins/CDN/ (whois)
NOTE : Protected by cloudflare
SCREENSHOT :


CLICK : Ok


CLICK : Valider
REDIRECT : http://ezore.com/skins/CDN/info.html
SCREENSHOT :


CLICK : Valider
REDIRECT : https://www.credit-du-nord.fr/instit/IPI/appmanager/instit/particuliers

Whois bnpmverif.com :

Registry Domain ID: 2043958257_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.ascio.com
Registrar URL: http://www.ascio.com
Updated Date: 2016-07-18T16:29:35Z
Creation Date: 2016-07-18T00:00:00Z
Registrar Registration Expiration Date: 2017-07-18T16:29:44Z
Registrar: Ascio Technologies, Inc
Registrar IANA ID: 106
Registrar Abuse Contact Email: abuse@ascio.com
Registrar Abuse Contact Phone: +44.2070159370
Domain Status: OK
Registrant Name: houda yves
Registrant Street: Avda. del Partenon, 5
Registrant City: madrid
Registrant State/Province: MADRID
Registrant Postal Code: 28042
Registrant Country: ES
Registrant Phone: +34.670452356
Registrant Email: vvolivefr@gmail.com
Admin Name: Master Host
Admin Organization: One.com
Admin Street: Kalvebod Brygge 24
Admin City: Copenhagen V
Admin State/Province: Copenhagen V
Admin Postal Code: 1560
Admin Country: DK
Admin Phone: +45.46907100
Admin Fax: +45.70205872
Admin Email: hostmaster@one.com
Tech Name: Master Host
Tech Organization: One.com
Tech Street: Kalvebod Brygge 24
Tech City: Copenhagen V
Tech State/Province: Copenhagen V
Tech Postal Code: 1560
Tech Country: DK
Tech Phone: +45.46907100
Tech Fax: +45.70205872
Tech Email: hostmaster@one.com
Name Server: ns01.one.com
Name Server: ns02.one.com

Whois ezore.com :

Domain Name: ezore.com
Registry Domain ID: 1934089010_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Update Date: 2016-05-20T13:56:51Z
Creation Date: 2015-05-30T18:52:40Z
Registrar Registration Expiration Date: 2017-05-30T18:52:40Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: +1.4806242505
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Domain Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Domain Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Registry Registrant ID: Not Available From Registry
Registrant Name: Michael Booth
Registrant Organization: Graphic Booth
Registrant Street: Rhos Cottage
Registrant Street: Rhos-y-meirch
Registrant City: Knighton
Registrant State/Province: Powys
Registrant Postal Code: LD7 1PD
Registrant Country: UK
Registrant Phone: +44.448002922293
Registrant Email: michael@graphicbooth.com
Registry Admin ID: Not Available From Registry
Admin Name: Michael Booth
Admin Organization: Graphic Booth
Admin Street: Rhos Cottage
Admin Street: Rhos-y-meirch
Admin City: Knighton
Admin State/Province: Powys
Admin Postal Code: LD7 1PD
Admin Country: UK
Admin Phone: +44.448002922293
Admin Email: michael@graphicbooth.com
Registry Tech ID: Not Available From Registry
Tech Name: Michael Booth
Tech Organization: Graphic Booth
Tech Street: Rhos Cottage
Tech Street: Rhos-y-meirch
Tech City: Knighton
Tech State/Province: Powys
Tech Postal Code: LD7 1PD
Tech Country: UK
Tech Phone: +44.448002922293
Tech Email: michael@graphicbooth.com
Name Server: DEE.NS.CLOUDFLARE.COM
Name Server: RUDY.NS.CLOUDFLARE.COM
DNSSEC: unsigned

Great News, YOU ARE ADVISED TO STOP CONTACTING THEM!!!

Troy Illinois General Board & Compensation Reserve Team

GRANTED APPROVAL FROM INTERNATIONAL MONETARY FUND Plot 1379 Tiamiyu Savage Street, Victoria Island, London.

Great News, YOU ARE ADVISED TO STOP CONTACTING THEM!!!

I am Mrs. CYNDY BANKS, I am a US citizen, 42 years Old. I reside here in Spring City, Pennsylvania. My residential address is as follows. 3663 Schuylkill Rd# 1, Spring City, Pennsylvania, United States, am thinking of relocating since I am now rich. I am one of those that took part in the Compensation in Troy Illinois many years ago and they refused to pay me, I had paid over $52,000 while in the United States trying to get my payment all to no avail. I decided to travel down to Troy Illinois with all my compensation documents and i was directed to meet Mr.John Large, he is among the member of the COMPENSATION AWARD COMMITTEE, I contacted him and he explained everything to me. He said whoever is contacting us through emails are fake because the Inheritance/Compensation Law clearly states that the beneficiary/recipient is exempt from paying any out of pocket fees or charges to receive said funds. Mr.John Large took me to the paying bank for the claim of my Compensation payment. Right now I am the happiest woman on earth because I have received my compensation funds of $9,500,000.00 (nine million five hundred thousand dollars). Moreover, Mr.John Large showed me the full information of those that are yet to receive their payments and I saw your name and email address as one of the beneficiaries that is why I decided to email you to stop dealing with those people, they are not with your funds, they are only making money out of you. I will advise you to contact Mr.John Large you have to contact him directly on this information below.

COMPENSATION AWARD HOUSE

Name: Mr.John Large
Email: j.large2@aol.com

Listed below are the name of mafias and banks behind the non release of your funds that I managed to sneak out for your kind perusal.

1) Prof. Charles soludo
2) Senator David Mark
2) Micheal Edward
3) Chief Joseph Sanusi
3) Sanusi Lamido
4) Dr. R. Rasheed
5) Mr. David Koffi
6) Barrister Awele Ugorji
7) Mr. Roland Ngwa
8) Barrister Ucheuzo Williams
9) Mr. Ernest Chukwudi Obi
10) Dr. Patrick Aziza Deputy Governor - Policy / Board Member
11) Mr. Tunde Lemo Deputy Governor - Financial Sector Surveillance/Board Member
12) Mrs. W. D. A. Mshelia Deputy Governor - Corporate Services / Board Members
13) Mrs. Okonjo Iweala
14) Mrs. Rita Ekwesili
15) Barr Jacob Onyema
16) Dr. Godwin Oboh: Director Union Bank Of Nigeria.
17) Mr. ruben Collins: Global Diplomat Director.
18) Foreign fund diplomatic courier
19) Barr. Becky Owens
20) Rev. Steven Jones
21) Mr. Alfred james
22) Mrs. Sherry Williams
23) Mr. Scott Larry

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing. The only money I paid after I met MrJohn Large was just $450 for the delivery charges, take note of that. (NOTE: TELLING YOU TO PAY FOR ANY DELIVERY OR COURIER CHARGE IS ALL NOTHING BUT LIES, I REPEAT THE ONLY MONEY YOU WILL HAVE TO PAY AND WHICH I ALSO PAID IS $450 FOR THE DELIVERY CHARGES IMPOSED BY THE GOVERNMENT AND YOUR PACKAGE CONTAINING YOUR CERTIFIED BANK DRAFT CHEQUE WILL BE REACHING YOU THROUGH THE EXPRESS COURIER SERVICE). Once again stop contacting those people, I will advise you to contact Mr.John Large so that he can help you to deliver your funds instead of dealing with those liars that will be turning you around asking for different kind of money to complete your transaction.

Mrs. CYNDY BANKS

Email analysis :

NOTE : j.large2@aol.com
NOTE : info@lee.org
NOTE : Mime-Version : 1.0
NOTE : X-Priority : 3
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : Message-Id : < *@nano-trend.com >
NOTE : Content-Type : text/plain; charset="Windows-1251"
NOTE : Received : from 60-250-104-58.hinet-ip.hinet.net
NOTE : (HELO nano-trend.com) (60.250.104.58)


NOTE : Received : from User (unknown [200.69.205.85]) by nano-trend.com (Postfix)


NOTE : Great News, YOU ARE ADVISED TO STOP CONTACTING THEM!!!

Happy to write you.

Attn:

Congratulation!!!

Your name and your e-mail address has won £2,050,000GBP in the VW Motors Email Lottery. Your winning No. is (VJETTA-UK-VP990003-M4GA). Contact (Mr. Elvis Bowie) elvis.bowie@yahoo.com.hk. Tel.: +44-703-590-5301 immediately; and forward your winning No. (VJETTA-UK-VP990003-M4GA) to him to claim your prize.
Congratulation once again.

Thank you.

Patricia Wesley.

Email analysis :

NOTE : elvis.bowie@yahoo.com.hk
NOTE : patwesl@vw.motor.co.uk
NOTE : Received : from [10.9.106.66] (35.6d.5177.ip4.static.sl-reverse.com [119.81.109.53])


NOTE : (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
NOTE : (No client certificate requested) by smtp1.ac-poitiers.fr (Postfix)
NOTE : Received : from smtp1.ac-poitiers.fr (smtp1.ac-poitiers.fr. [195.83.12.242])


NOTE : A server smtp1.ac-poitiers.fr was compromised and relay scams.

Confirm the recepit of this email

Dear Winner,

We are pleased to inform you of the announcement On 26/07/2016, that.Your email address has been selected for a cash prize of $4,500.000 USD(FOUR MILLION,FIVE HUNDRED THOUSAND DOLLARS ONLY) in International Email Sweepstakes Program Cooporation held in Spain.

The on-line Sorteo de Navidad International lottery PROGRAM draws was picked by an advanced automated random computer and your e-mail address was assigned to ticket numbers for privacy. Your e-mail address emerged as one of (12) twelve winners. We advised you to contact your claim agent, Dr. Fernando Prado at Email: Prado.fernando56@outlook.com

(1)Coupon No : SPA/CZ213487/USA
(2)Ticket No : 45362EUR
(3)Lucky No : 11-122-98-22

CONGRATULATIONS!!!

Please remember to quote all your winning information's and your full names to your claim agent.

Sincerely,
Agent Name
Dr. Fernando Prado

Email analysis :

NOTE : Prado.fernando56@outlook.com
NOTE : anibal.beyma@speedy.com.ar
NOTE : Received : from localhost (mail-web15-mia.terra.com [208.84.242.153])


NOTE : (authenticated user anibal.beyma!speedylm)

Wednesday, July 27, 2016

My Dearest, i need your help

Good Day,

Forgive my indignation if this message comes to you as a surprise and may offend your personality for contacting you without your prior consent and writing through this channel.

I came across your name and contact on the course of my personal searching When i was searching for a foreign reliable partner. I assured of your capability and reliability After going true your profile

I'm (Miss.Gifty) from Benghazi libya, My father of blessed memory by name late General Abdel Fattah Younes who was shot death by Islamist-linked militia within the anti-Gaddafi forces on 28th July, 2011 and after two days later my mother with my two brothers was killed one early morning by the rebels as result of civil war that going on in my country Libya, then after the burial of my parents, my uncles conspired and sold my father’s properties and left nothing for me. On a faithful morning, I opened my father's briefcase and discover a document which he has deposited ($6.250M USD) in a bank in Burkina Faso with my name as the legitimate/next of kin.

Meanwhile i have located the bank,and have also discussed the possible transfer of the fund. My father left a clause to the bank that i must introduce a trusted foreign partner who would be my trustee to help me invest this fund; hence the need for your assistance,i request that you be my trustee and assist me in effecting the transfer of the fund to your account or an account you will nominate for investment.

You will also be responsible for the investment and management of the fund for me and also you will help me get a good school where i will further my education.
I agreed to give you 40% of the 6.250M once the transfer is done. this is my true life story, I will be glad to receive your respond soonest for more details to enable us start and champion the transfer less than 14 bank working days as told me by the bank manager.

Waiting for your early reply

reply To giftyyounes@gmail.com


yours sincerely
Miss.Gifty Younes

Email analysis :

NOTE : carlotaynacho@speedy.com.ar
NOTE : giftyyounes@gmail.com
NOTE : X-Origin : 154.66.162.18

Tuesday, July 26, 2016

GOOD MORNING WITH A GOOD NEWS FROM AMBASSADOR JAMES .F. ENTWISTLE

WITH DUE RESPECT,

I SHALL BE COMING TO YOUR COUNTRY FOR AN OFFICIAL MEETING ON FRIDAY AND I WILL BE BRINGING YOUR FUNDS $3.5M DOLLARS WHICH IS PACKAGED IN FORM OF A CONSIGNMENT ALONG WITH ME BUT THIS TIME I WILL NOT GO THROUGH CUSTOMS BECAUSE AS AN AMBASSADOR TO NIGERIA, I AM A US GOVERNMENT AGENT AND I HAVE THE VETO POWER TO GO THROUGH CUSTOMS. AS SOON AS I AM THROUGH WITH THE MEETING I SHALL THEN PROCEED TO YOUR ADDRESS. (SEND YOUR CELL PHONE NUMBER AND THE ADDRESS WHERE YOU WANT ME TO BRING THE PACKAGE). YOU HAVE REALLY PAID SO MUCH IN THIS DELIVERY THAT MAKES ME WONDER.YOU ARE A VERY LUCKY

PERSON BECAUSE I SHALL BE BRINGING IT MYSELF AND THERE IS NOTHING ANYONE CAN DO ABOUT IT,AS IT ONE OUR PRIORITY TO FIGHT FOR OUR COUNTRY MEN ANYWHERE IN THE WORLD. YOUR PACKAGE MUST BE REGISTERED AS AN AMBASSADORIAL PACKAGE FOR ME TO DEFEAT ALL ODDS AND THE COST OF REGISTERING IT IS $280THE FEE MUST BE PAIDIN THE NEXT 120 HOURS VIA WESTERN UNION OR MONEY GRAM SO THAT ALL NECESSARY ARRANGEMENT CAN BE MADE BEFORE TIME WILL BE AGAINST US.

SEND THE FEE VIA MONEY GRAM OR WESTERN UNION MONEY TRANSFER.

RECEIVER'S NAME: OBI PETER
ADDRESS: LAGOS, NIGERIA
TEXT QUESTION:IN GOD?
ANSWER: WE TRUST
AMOUNT:$280USD.

AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND ME THE PAYMENT INFORMATION.
MY FLIGHT IS FRIDAY AND I EXPECT YOU TO COMPLY BEFORE THEN SO THAT THE
DELIVERY CAN BE COMPLETED. IF YOU DO NOT COMPLY, THEN IT WILL NOT BE
MY FAULT IF YOU DO NOT RECEIVE YOUR PACKAGE.

Ambassador James F. Entwistle

Email analysis :

NOTE : ambassador.f.entwistle@gmail.com
NOTE : pachecoarmando@speedy.com.ar
NOTE : X-Origin : 41.58.218.93


NOTE : client-ip=98.142.233.71;

Hello dear (Funny Scam)

Hello dear

It is my pleasure to come across your contact.My names are Vicky Williams from London,United Kingdom,I will like to know more about you.please write to me through my private email address(vickywillians55@yahoo.com)for me to send you my photos and for further communication.

Yours Vicky

Email analysis :

NOTE : vickywillians55@yahoo.com
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-3
NOTE : Content-Length : 1350
NOTE : client-ip=98.136.218.253;


NOTE : Hello dear
NOTE : WHAT IS FUNNY ? My names are Vicky Williams

Explanation :

BREXIT = Your Golden Ticket

YES, Brexit is official, as I'm sure you've heard...

And because of the insane results we're seeing
today, we've approved a staggering $10,000
deposit bonus for you for this Brexit-App.

Follow all the steps here:

Go here now and begin the journay of a lifetime >>

This is all over soon...

So be QUICK!

Mike

Email analysis :

NOTE : support@thoughttrading.com

Mise à jour obligatoire (Phishing Société Générale)

Mise à jour obligatoire

Chér(e) client(e);
Pour des raisons de sécurité, votre banque évolue pour vous.
Nous vous invitons a mettre à jour vos coordonnées bancaires le plus tôt possible.

Démarer la mise à jour

L'équipe Société Générale vous remercie pour votre confiance.
Cordialement.
a1 2b c3. .

a0

Email screenshot :


Email analysis :

NOTE : assistance@sg.assirance.local
NOTE : Content-Type : text/html; charset=UTF-8
NOTE : Content-Disposition : inline
NOTE : X-Priority : 3
NOTE : Return-Path : < pedroos@linode.com >
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : Received : from linode.com ([89.36.222.96])


NOTE : Mise à jour obligatoire

Phishing analysis :

CLICK : Démarer la mise à jour
OPEN : http://carlos-pendi.com/contact68cdb3cdf1bc804c6488262f57120888/
REDIRECT : data:text/html;https://particuliers.societegenerale.fr/nous_contacter.html?id=0ZXh0L2phdmFzY3JpcHQnPiBzd0ZXh0L2phdmFzY3JpcHQnPiBzd0ZXh0L2phdmFzY3JpcHQnPiBzd;base64,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
SCREENSHOT :


BASE64 DECODE OF THE SCRIPT : (pastebin link)
NOTE : Phishing attempt...

Can I trust you ? (Cancer Scam)

My name is Isabelle Akehurst From France Nantes, Presently, I'm in hospital in London. at Weston Park Hospital London. I'm diagnosed with esophageal cancer, because it went unnoticed I have had to undergo a laryngeal. I am about to end the race like this without a child and in contrast to how family members & friends has completed treated me during horrible moment in my life?

I decided reaching out to a total stranger in your person. I decided to WILL/donate the sum of ($3.2 Million) Three Million, Two Hundred Thousand United States Dollars to you for the good work of the lord. I want this last act of mine to be an offering to GOD and humanity.

This decision is hard for me to make but i just have to make it for the sake of my me future.Currently the said sum was lodged in a safety deposit box in a financial company Institution which i will disclose to you as a matter of commitment to me and this plea for assistance. I currently have the deposit certificate and can draw up a change of beneficiary mandate to effect you as the beneficiary to the funds.

I want you to re-send me your Direct Contact information to enable me forward it to my Bank in Benin Republic for them to start arranging payment on your name and favor .. The Amount to be Transferred to you is ($3.2 Million) Three Million Two Hundred Thousand United States Dollars.

The information's are as follows;

1.Your full name
2.home address and country
3.Occupation.
4.Phone

Kindly contact me asap via my email for more information....

( isabelle.akehurst2016@yandex.com )

Yours
Mrs Isabelle Akehurst

Email analysis :

NOTE : isabelle.akehurst2016@yandex.com
NOTE : butik@sterba-kola.cz
NOTE : Received : from decrux.de (HELO User)
NOTE : (butik@sterba-kola.cz@62.141.45.60)


NOTE : by ivanek.tojeono.cz
NOTE : client-ip=81.0.235.211;

Attention

Attention,

We have registered your master ATM card of ($8.5millionUSD) through DHL Delivering department after our finally meeting regarding your fund, All you will do is to contact DHL Delivering Service director Mr.Ruben Lord call +2348125251095 He will give you direction on how you will receiver your ($8.5millionUSD) Remember to send him your Full information to avoid wrong Delivering such as,

Your Name:_______________
Address: ________________
Country: _____________
Phone Number: _____________

Contact Agent Mr.Ruben Lord,
Email:: dhl_courier.service@usa.com
Give him a call on Phone:: +2348125251095
Ask Mr.Ruben Lord what you need to do for them to deliver your Package
fund to you immediately.

Regards
John Mark (IMF SPEAKER)

Email analysis :

NOTE : dhl_courier.service@usa.com
NOTE : Return-Path : < fliaka@infovia.com.ar >
NOTE : fliaka@infovia.com.ar
NOTE : X-Origin : 105.112.29.112

Monday, July 25, 2016

RE: Dear Esteemed Beneficiary

OFFICE OF THE PRESIDENCY NIGERIA Honorable Minister of Finance Federal Republic of Nigeria Email: Mrs.KemiAdaosun@presidency.com Tel: +2348077823845. Dear Esteemed Beneficiary, We write to officially inform you that we have just completed an investigation with the help of our Electronic Crimes Task Force regarding your approved nominee beneficial payment valued at the sum of $10,500,000.00 USD. However, acting in our capacity as the Apex body authorized by the AFRICAN and U.S. Government to reconcile foreign payments, we are pleased to inform you that full clearance has been granted for the release of the full payment of your approved nominee beneficial payment valued at the sum of $10,500,000.00 USD only. Please take note that your payment has been approved and authorized for immediate release and transfer into your nominated bank account via Central Bank of Nigeria. For your confirmation, we have authorized the Management of Central Bank of Nigeria to deduct all supposed fee associated with the fund transfer from the Principal value of the $10,500,000.00 usd before transferring the balance to your designated bank account via SWIFT telegraphic wire transfer. Please take note that this deduction will be made possible through processing of a "Waiver Clearance Certificate from the Nigeria High Court Registrar. Please ensure that you confirm the details of your receiving bank account, as well as your personal details via email as soon as you have receive this message. A copy of my official identification is attached herewith this message for your verification. Thanks have a great and wonderful day more ahead. Thanks, Mrs. Kemi Adaosun Honorable Minister of Finance Federal Republic of Nigeria.

Email analysis :

NOTE : RE: Dear Esteemed Beneficiary
NOTE : mrs.kemiadaosun@yahoo.com
NOTE : prachi.jain@gantrex.com
NOTE : Received : from www.act.frenzunited.com.my (unknown [113.23.219.62])


NOTE : X-Priority : 3
NOTE : X-Mailer : PHPMailer [version ]

I am Mrs. Michelle Obama,

I am Mrs. Michelle Obama, and I am writing to inform you about your Bank Check Draft brought back by the United Embassy from the government of Benin Republic in the white house Washington DC been mandated to be deliver to your home address once you reconfirm it with the one we have here with us to avoid wrong delivery

2.5 million united states dollars 2.5,millionusd that was assigned to be delivered to your humble home address by my husband Honorable president Barrack Obama the president of this great country this week by a delivery.

I will like you to reconfirm to me the following details
Your phone number…………..?
Your current home address……?
Your full name…………………?
Occupation...................

The reason I ask you to reconfirm to me this following details is to avoid wrong delivery. FOR MORE INFORMATION ABOUT THE ORIGIN OF YOUR FUND YOU CAN CALL OR TEXT MY HUSBAND THE PRESIDENT OF THIS GREAT NATION +1 (202) 697-8336

Yours Sincerely,
MRS MICHELLE HUSSEIN OBAMA
FIRST_LADY USA
GOD BLESS AMERICA
1600 Pennsylvania Ave NW, Washington, DC 20500, United States

Email analysis :

NOTE : mrsmichelleobama881@gmail.com
NOTE : WWW.@basil.ocn.ne.jp
NOTE : X-Originating-Ip : [163.54.70.3]


NOTE : Funny...

Michelle Obama...The true one :



Best Sea Freight from china to Africa by OCEANSKY

Dear value customers:

Good day :)

This is Sophie , In transportation field with professional team for many years, we handle the freight by SEA with best rates and services.

We have advantage of sea shipment from all ports in china to AFRICA with FCL And LCL. We cooperate with many shipping line as MSC, CMA, MSK, APL, HANJIN, EMC etc with best rates. Any shipment, pls contact me ,we will be your logistics experts in china, Thank you for your kind attention. Hope to be your agent in china.

Sophie
Mob:+86-13824355979
Tel:+86-0755-28882887
ADD:Room816A-B,LianXing Building,South,NO.1043 WenJin Middle Road Luohu,shenzhen,china

Email analysis :

NOTE : huixinsoft80@foxmail.com
NOTE : zfls@gbid.com
NOTE : 122.227.189.222

Available Fresh Tools From Femi 08052474827 or add messanger (( nooff14))

Now i don come back with good tools like Google voice number TEXTNOW number match.com chemistry.com and more dating site loging europe canada us australia faxes number I get this Daily worldwide emails Database & Business emails Database with Complete detail Emails database buy good emails and get free 5 domain smtp to blast am webmail 1000 1000 last for 1month 1000 1000 mailer inbox to all domains emails and pass for alibaba linkedin emails and pass magic poncher software to blast millions emails CC amex fulz with emails and pass details chase wells boa and other bank logins and scampage mystery shopper box with ready addresses RDP admin and user personal hosting alibaba scampage full notepad of smtp cc top up wire trf Any us and europe series alibaba virus and yahoo gmail alibaba hotmail scampage too 3months vpn Una fit buy emails make i help una blast am .... contact me for anytin u want 08052474827 or add me on yahoo messanger ((( nooff14 )))) 08052474827

Email analysis :

NOTE : moedling@finanzpuls.com
NOTE : 83.65.35.248


NOTE : Received : from User ([177.194.159.125])

update your Apple ID (***@***) (Apple Phishing)


Dear ***,

you should verify your Apple ID (***@***) as soon as possible to reactivate your account.

Verify Now >

TM and copyright 2016 Apple Inc. Hollyhill Industrial Estate Hollyhill, Cork, Republic of Ireland.
All Rights Reserved / Keep Informed / Privacy Policy / My Apple ID

Email analysis :

NOTE : apple@apple.id.com
NOTE : X-Source-Args : lsphp5:/home/goodnerd/public_html/leafmailer.php
NOTE : Return-Path : < apple@apple.id.com >
NOTE : Mime-Version : 1.0
NOTE : X-Source-Dir : goodnerda.com:/public_html
NOTE : X-Mailer : Leaf PHPMailer 2.7 (leafmailer.pw)
NOTE : X-Authenticated-Sender : cphost6.veeblehosting.com: goodnerd
NOTE : X-Php-Script : www.goodnerda.com/leafmailer.php for 41.100.229.125


NOTE : update your Apple ID (***@***)

Phishing analysis :

CLICK : Verify Now >
OPEN : https://www.hpsusa.net/wp-content//apple.id/secure/login/verify/id/XR0ARZo5EF6yOEy0k8vdxlIhqVldR6Mq873DB5vxN8gf3Xxa7qINDvBrvjW/login/
NOTE : Phishing was removed...

Sunday, July 24, 2016

CONSENT

I'm Gary a banker by profession.I've a business deal of great benefit to both of us.
Write me urgently on ( garudolf@yahoo.com ) for further details.

Email analysis :

NOTE : garidolf5@hotmail.com
NOTE : garudolf@yahoo.com
NOTE : client-ip=65.55.34.219;

Hagan Turner

I wish to introduce our firm Transit Funding Group LLC, a private owned consumer finance company founded in the year 2000, operating in Chicago Illinois, United State. We offer all types of loan such as personal and auto loans, debt consolidation, business start-up, business expansion and project funding in all categories, etc. Contact us via E-mail should you be interested: turnerhagang3055@gmail.com

Yours faithfully
Hagan Turner
MD/CEO

Email analysis :

NOTE : turnerhagang3055@gmail.com
NOTE : contact@allgro-ci.com
NOTE : Received : from mail.linux-ci.com (localhost [127.0.0.1])
NOTE : by mail.linux-ci.com (Postfix)
NOTE : Received : from mail.linux-ci.com ([94.247.27.149])
NOTE : X-Originating-Ip : [197.210.225.46]

Saturday, July 23, 2016

Your SSL Certificate has expired

Dear customer,

You are receiving this notification because your Salesforce SSL certificate has expired.
In order to continue using Salesforce.com, you are required to update your digital certificate.

The new Salesforce digital certificate can be downloaded from:
https://salesforce.dattodrive.com/index.php/s/ZoeW7Vs1kfLcUdF/download

Instruction:
Unzip the downloaded file first. SSL certificate cannot be installed if it is zipped.
Double click the SSL certificate file and click 'OK' to confirm installation.
According to our Terms and Conditions, failing to renew the SSL certificate will result in account suspension or cancellation:
http://www.salesforce.com/company/privacy/security.jsp

Thank you for using Salesforce.com

Email screenshot :


Email analysis :

NOTE : support@salesforce.com
NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
NOTE : Return-Path : < americanexpress@welcome.aexp.com >
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Content-Type : text/plain; charset=ISO-8859-1; format=flowed
NOTE : paultayoy@alpestour.com
NOTE : Received : from 62.42.178.94.dyn.user.ono.com
NOTE : (62.42.178.94.dyn.user.ono.com [62.42.178.94])
NOTE : Your SSL Certificate has expired

Analysis of the link :

CLICK : https://salesforce.dattodrive.com/index.php/s/ZoeW7Vs1kfLcUdF/download
OPEN : https://salesforce.dattodrive.com/index.php/s/ZoeW7Vs1kfLcUdF/download
SCREENSHOT :

Wichtig: Konto-Update (Strato Phishing)

Sehr geehrter Kunde:

Wir führen Wartungsarbeiten an unserer Kundendatenbank , wodurch Sie verpflichtet sind, Ihre Daten sofort zu überprüfen.

Wir betrachten diesen Prozess zwingend

Aktualisieren Sie Ihr Konto

Freundliche Grüße
Strato

Email screenshot :


Email analysis :

NOTE : byron.d@aldamafoods.com
NOTE : Mime-Version : 1.0

Phishing analysis :

CLICK : Aktualisieren Sie Ihr Konto
OPEN : https://db.tt/iBIofV7y
REDIRECT : base64 redirect (raw file on pastebin) (converted html file on pastebin)
SCREENSHOT :

PLEASE PROTECT YOUR ACCOUNT (MailBox Phishing)

Hello Dear

We're letting you know your account will be decline within 24hrs
If you haven't already confirmed, immediately deletion can occur any scheduled.
Need a earlier confirmation as notified before your availability,
kindly confirm your account in our database to avoid this interruption

Click Here to confirm

Best Regards,
The Mailbox Account team

Copyright Š 2016 MailboxTeam Inc. All rights reserved.

Email screenshot :


Email analysis :

NOTE : MailboxTeam@officialmail.com
NOTE : client-ip=80.78.246.99;


Phishing analysis :

CLICK : Click Here
OPEN : http://googldoc.casadekebab.com/google/google/*/
SCREENSHOT :

YOU WON

Your email has won $4,600,000 on Lucky No.39-44-25-17-88 from the UK Lotto online draws of July 2016 held in Thailand. Contact MR. JOHN EDWARD of UK Lotto with your Full Names, Country, Address, Telephone, Age & Gender for payment instructions.Via: edwardjo1430@yahoo.com

Stewart Jerome.

Email analysis :

NOTE : edwardjo1430@yahoo.com
NOTE : jiller.born@aol.com
NOTE : Received : from ADMIN-PC (unknown [77.243.189.212])
NOTE : X-Aol-Ip : 77.243.189.212

COMPASSION FUND

UNITED BANK FOR AFRICA NIGERIA
HEAD OFFICE ADDRESS UBA HOUSE
57 MARINA P.O. BOX 2406 LAGOS NIGERIA
PHONE:+234 8104484003
FAX: 234 674 478 8273
Greetings,
Am Frank Emeka , director cash processing unit, united bank for Africa [UBA the only bank appointed by the A.U. Members lead by President Robert Mugabe.

Because of the frauds going on in West Africa countries where some innocent beneficiaries were asked to pay in advance before receiving their money owed to them.

The above Africa union held meeting in Nigeria and resolve to pay all beneficiaries in cash through means of diplomatic courier service. We receive your files from international monetary fund (I.M.F.) as one of the
beneficiaries.

Take note:Three thousand united state dollars (usd$3,000)have been mapped out for all expenses in taxes and other doccumets that matters.
Therefore, I want you to bear it in mind that your total fund will not be
five million five hundred thousand united state dollars ($5.500,000.00) but five million four hundred and ninety seven thousand united state
dollars ($5.497,000.00).

Dear as a senior banker, controlling this cash payment now, I advise you not to waste your money by paying any body in advance again, and if you just follow my instruction, you will receive your money in three days time.

Your fund will now be packaged in box and take to the diplomatic courier service for immediate shipment, I will also send the picture of the box by attachment to you to see how the money is packed, and I will send you more mails to give you more information for you to know the
genuineness of this transaction.

Therefore, do forward your home address and direct phone number to this E-Mailfrankemeka709@gmail.com
All the documents will be sent to you if I am assured that you have stopped sending money to those fraudsters.
Am waiting to hear from you with the required information of yours.

Frank Emeka
Director cash processing unit
united bank for Africa. (U.B.A)
frankemeka709@gmail.com

Email analysis :

NOTE : lnfo@uba.com
NOTE : apache@localhost.localdomain
NOTE : Received : from regency-centers-2

World Bank Compensation Payment.

REF/PAYMENT (USD$3,500,000.00 )
WORLD BANK COMPENSATION

GOOD DAY,

YOUR E-MAIL ID APPEARED IN OUR PAYMENT SCHEDULE LIST OF BENEFICIARIES THAT WILL RECEIVE THEIR FUNDS IN THIS SECOND QUARTER PAYMENT OF THE YEAR FOR WORLD BANK INHERITANCE AND COMPENSATION COMMISSIONING PAYMENT. THIS PAYMENT IS GIVEN TO YOU UNDER FINANCIAL COMPENSATION FOR VICTIMS OF ONLINE CRIME/SCAM AS ENDORSED BY THE NATIONAL COMPENSATION CENTER LAUNCHED AT THE 39TH G8 SUMMIT. YOUR E-MAIL ID AND OTHER DATA WAS MENTIONED BY OUR SECURITY INTELLIGENT MONITORING DATABASE VIA COMPUTER HARD-DISK, YOU ARE HEREBY ADVISED NOT TO COMMUNICATE OR DUPLICATE THIS MESSAGE TO ANYONE TO PREVENT DOUBLE CLAIMS. YOU WILL RECEIVE YOUR COMPENSATION PAYMENT THROUGH ATM CARD VALID FOR 3 YEARS FROM MONTH OF ISSUANCE; IT IS AN EURO PAY MASTERCARD AND VISA (EMV) CHIP AND PIN DEBIT CARD, USED ACROSS ALL CHANNELS INCLUDING POS, ONLINE AND THE ATM CARD CASH WITHDRAWALS IN THE CURRENCY OF THE COUNTRY YOU ARE MAKING YOUR WITHDRAWAL, MAXIMUM DAILY. CASH LIMIT IS $2,500.00 PER DAY AND POS SPENDING IS UPGRADED TO S DAILY LIMITED OF $5,000.00. FOR THE RECORDS A TOTAL NUMBER OF 1,056 BENEFICIARIES ARE ALREADY IN CONTACT WITH THEIR RESPECTIVE SETTLEMENT CENTER AND A TOTAL NUMBER Of 678 BENEFICIARIES HAVE BEEN PAID AS OF JANUARY 2016. OVER 500 ARE ALREADY AT THE LAST VERIFICATION STAGE AND WILL RECEIVE THEIR PAYMENTS WITHIN FEW DAYS.

PLEASE PROVIDE FOLLOWING INFORMATION AS STATED BELOW:

1. YOUR FULL NAME:
2. CONTACT / POSTAL ADDRESS (FOR SHIPPING OF CARD)
3. YOUR AGE:
4. OCCUPATION:
5. MOBILE TELEPHONE NUMBER:

ALL RESPONSE SHOULD BE SENT TO CHAIRMAN SENATE COMMITTEE ON FINANCE & APPROPRIATION AT THIS GIVEN ADDRESS AND QUOTE YOUR RELEASE CODE FIC/EDS/EMV/42/2016 FOR IMMEDIATE

NAME: SENATOR SAMUEL ANYANWU
E-MAIL: samuelanyanwu1010@gmail.com

PLEASE BE WARNED, THE INTERNATIONAL COMMISSIONING PAYMENT DEPARTMENT DOES NOT INSTRUCT ANY OTHER BANK OR AGENT IN THIS PAYMENT TRANSACTION, WE ADVISE YOU TO STOP ALL OTHER COMMUNICATIONS YOU ARE HAVING WITH ANY OTHER AGENT OR BANK OFFICIALS TO AVOID UNNECESSARY COMPLICATIONS.

WARM REGARDS,

MR. GEORGE EDWARD

INTERNATIONAL COMMISSIONING PAYMENT
WORLD BANK GROUP MILLBANK TOWER,
12TH FLOOR, 21-24 MILLBANK,
LONDON SW1P 4QP UNITED KINGDOM

Email analysis :

NOTE : samuelanyanwu1010@gmail.com
NOTE : mr.george-org@mail.com
NOTE : Received : from User ([41.138.176.180]) by aptlabs.co.kr

Friday, July 22, 2016

KARL B. HAN

I'm Karl Han, from Bern,Switzerland.Contacting you due to abandoned funds,totaling $36 Million.I'm seeking your permission to front you as the benefactor of the funds & we 'll share the proceeds 50%50.Please reply to (karlhanbrader2014@gmail.com)with NAME, ADDRESS,TELEPHONE NUMBER.

Email analysis :

NOTE : karlhanbrader2014@gmail.com
NOTE : jwharton@fap.mil.pe
NOTE : X-Mailer : Zimbra 8.6.0_GA_1153 (zclient/8.6.0_GA_1153)
NOTE : X-Originating-Ip : [197.211.56.5]


NOTE : Received : from mail.fap.mil.pe ([200.48.60.138])


NOTE : What is fap.mil.pe ?


NOTE : The fap.mil.pe servers were used to relay this scam.

Ms.Fatima Yusuf.

From:Ms:Fatima Yusuf.

For sure this mail would definitely come to you as a surprise, but do take your good time to go through it, My name is Ms.Fatima Yusuf,i am from Ivory Coast.

I lost my parents a year and couple of months ago. My father was a serving director of the Agro-exporting board until his death. He was assassinated by his business partners.Before his death, he made a deposit of US$9.7 Million Dollars here in Cote d'ivoire which was for the purchase of cocoa processing machine and development of another factory before his untimely death.

Being that this part of the world experiences political and crises time without number, there is no guarantee of lives and properties. I cannot invest this money here any long, despite the fact it had been my late father’s industrial plans.

I want you to do me a favor to receive this funds into your country or any safer place as the beneficiary, I have plans to invest this money in continuation with the investment vision of my late father, but not in this place again rather in your country. I have the vision of going into real estate and industrial production or any profitable business venture.

I will be ready to compensate you with 20% of the total Amount, now all my hope is banked on you and i really wants to invest this money in your country, where there is stability of Government, political and economic welfare.

My greatest worry now is how to move out of this country because my uncle is threatening to kill me as he killed my father,Please do not let anybody hear about this, it is between me and you alone because of my security reason.

I am waiting to hear from you.

Yours Sincerely,
Ms.Fatima Yusuf.

Email analysis :

NOTE : fatima_yusuf@outlook.fr
NOTE : fatimayusuf3@mail.bg

GREETING'S...UBA

UNITED BANK FOR AFRICA - AFRICA'S GLOBAL BANK
HEAD OFFICE ADDRESS UBA HOUSE
57 MARINA P.O. BOX 2406 LAGOS NIGERIA
PHONE: +234 903 213 5023
FAX: 234 674 478 8273

My name is Felix Adeyemi the director cash processing unit, united bank for Africa [UBA}.

The international monetary fund (I.M.F.) in conjunction with Organization of African Unity (O.A.U) has directed us to pay you One million five hundred thousand united state dollars ($1.500, 000.00) in cash through means of diplomatic courier service hand delivery.

Take note: Three thousand united state dollars (usd$3,000) have been mapped out for all expenses in taxes and other documents that matters.

Therefore, do forward your home address and direct phone number to me for quick delivery because time is not in our side.
Please reply/direct your email to this email:( mradeyemifelix@yahoo.com )

Regards,
Felix Adeyemi
Director cash processing unit
united bank for Africa. (U.B.A).
PHONE: +234 903 213 5023
FAX: 234 674 478 8273
Email: ( mradeyeiuba@gmail.com )

Email analysis :

NOTE : mradeyeiuba@gmail.com
NOTE : @www.regencycenters.com

Business Proposal.

Hello,

This may come as a surprise to you, I am contacting you in regards to an Amount of £ 19,000,000,00.(British Pounds Sterling) we could both claim in my bank. In June 2005, A customer called Frederick Morgan a foreign engineer with CHEVRON CORPORATION which happens to be made huge investment of the above Amount in my bank. At the end of the estimated duration of the investment, My bank sent several notice to him without any form of response. Finally, we were able to reach his work place, only to be notified of his sudden demise through a heart attack in his office.

He died without leaving a Will, several efforts made to find his extended family through his embassy proved abortive. Due to the sensitive nature of private banking, most customers don't nominate a next of kin in their investment(s), thus, most clients will remain in our custody. In this case, our "now deceased client" died intestate.

The Private banking sector will by the end of this year broadcast a request for statement of claims to my bank. This request will result in the money entering the accounting system of the British Government and the file will be out of my hands. I am prepared to give the necessary details to you as the closest surviving relation of our deceased customer and also am proposing a sharing percentage of 55%/45% with I getting the larger portion of the deal since am the initiator. You have absolutely nothing to worry about this deal. It is safe and clean.

You must know that I have done my homework already before contacting you. We shall follow proper banking and legal Channels in claiming this fund with your assistance from your end. I will tidy up the legal aspect with the assistance of a lawyer who will prepare all the documents that will be needed to transfer the money from UK to your country.

I ask that if you find no interest in this project, you should discard this mail and forget I ever contacted you. I ask that you do not be vindictive and destructive. Do not destroy my career! Opportunities like this comes just once in a lifetime.

Kind regards,

Terry George.

Email analysis :

NOTE : terrygeorge122@hotmail.com
NOTE : terrygeorge82@gmail.com
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-4

Wednesday, July 20, 2016

How do you want to receive your winning funds?

Attn Dear,

How do you want to receive your winning funds of two million five hundred thousand ($2.5M). You can choose one out of this options and get back to us as soon as possible for us to give receiver details where to send the charging fee.

ATM visa card:::..... $US 155.00 (Delivery charge)

Bank Wire Transfer:::..... $US 199.00 (Wiring fee)

Western Union:::..... $US 150.00 (Sending fee $5,000 daily)

Money Gram:::..... $US 145.00 (Sending fee $4,500 daily)

Thank you
Patrick Gunter.

Email analysis :

NOTE : JKJ.@vivid.ocn.ne.jp
NOTE : patrickgunter@163.com
NOTE : X-Originating-Ip : [151.236.23.209]

SCAM VICTIMS COMPENSATION PAYMENTS APPROVAL.//

OFFICE OF THE PRESIDENCY NIGERIA Honorable Minister of Finance Federal Republic of Nigeria Email: Mrs.KemiAdaosun@presidency.com RE: SCAM VICTIMS COMPENSATION PAYMENTS APPROVAL. Attn; Beneficiary, This is to bring to your notice that CBN is delegated by the United Nations, Federal Ministry of Finance and other concerned commissions to pay 48 scam victims Beneficiaries the sum of $500,000.00 USD (Five Hundred Thousand Dollars each). And you are listed and approved for this payment as one of the scammed victims to be paid this amount. On this faithful recommendations, know that during the last U.N. meeting held at Abuja the Capital of this Country Nigeria, it was alarmed so much by the world in the meeting on the loose of funds by various individuals to the Nigerian scams artists operating in syndicates all over the world today. Mr. Ban Kin-Moon Secretary-General of the United Nations meets with the Nigeria President General Muhammadu Buhari (GCFR) in order to compensate scams victims of these operators with $500,000 USD each in accordance with U.N. recommendations. Due to the corrupt and inefficient Banking Systems in Nigeria, the payments are to be supervised by the United Nations' Officials and Central Bank of Nigeria as the corresponding paying bank. According to the number of applicants at hand, 18 Beneficiaries has been paid, and 30 Beneficiaries are left to be paid. And your particular was mentioned by one of the Syndicates who claimed to be the CBN ATM Director that was arrested as one of the victims of the operations. You are hereby warned not to communicate or duplicate this message to some else for any reason what so ever as the U.S. secret service is already on trace of the other criminals. So keep it secret till they all apprehended. Other victims who have not been contacted can submit their application as well for security and possible consideration. The Nigeria Government has combined effort with the United Nation Anti-crime commission to alleviate and redeem the image and past wounds of foreigners and firms who were defrauded, scammed and abandoned by these syndicates to slight down our dignities to international communities. Many banks have been in bankruptcy today, Universal firms, Companies and individuals due to the activity of these hoodlums. However, investigation has shown that these people have dropped over 500,000 victims after collecting their money falsely, many committed suicide and others living by the grace of God. With the sanity presently at hand, we have over 500 convicts at hand, 300 in kirikri prisons while many are still awaiting trial. We still fetch for others who feel they are wise, and we hope that you will be our friend by giving us more information as per clue in apprehending them. You are to receive your compensation payment via ATM CARD or BANK WIRE TRANSFER direct to your nominated bank account. Note that further modalities shall be given to you as soon as we hear from you. Thanks, Mrs. Kemi Adaosun Honorable Minister of Finance Federal Republic of Nigeria.

Email analysis :

NOTE : mrs.kemiadaosun@yahoo.com
NOTE : prachi.jain@gantrex.com
NOTE : X-Mailer : PHPMailer [version ]
NOTE : @www.act.frenzunited.com.my

RE:LOAN

Do you need a loan? If yes, kindly get back to us with your following details Name: Loan amount: Loan duration and phone number.

Email analysis :

NOTE : bancoleite@sms.goiania.go.gov.br
NOTE : albasitloanfirm@gmail.com
NOTE : Received : from [100.88.160.168] (unknown [101.60.210.204])


NOTE : by zmail.goiania.go.gov.br


NOTE : goiania.go.gov.br servers were used to relay this scam.
NOTE : #PrefeituradeGyn