Monday, May 23, 2016

Urgent Letter From Hospital

Hello My Beloved, this is Ms Vivian Brown from Estonia writing from hospital here in Ivory Coast; therefore this email is very urgent to attend. I want you to know that I’m dying here in this hospital right now which i don't know if i will see some few days to come.

My Beloved, i was informed by my doctor that i got poisoned and it affected my liver and i can only live for some days. The reason why i contacted you today is because i know that my step mother wanted to kill me and take my inheritance from my late Father. I have a little adopted child named Andrew C. Brown that i adopted in this Country when my late Father was alive and $3.5 million Dollars i inherited from my late father. My step mother and her children they are after Andrew right now because they found out that Andrew was aware of the poison, and because i handed the documents of the fund over to him the day my step Mother poisoned my food, for that reason they do not want Andrew to expose them, so they are doing everything possible to kill him.

My Beloved, please i want you to help him out of this country with the money, he is the only one taking good care of me here in this hospital right now and even this email you are reading now he is the one helping me out. I want you to get back to me so that he will give you the documents of the fund and he will direct you to a well known lawyer that i have appointed, the lawyer will assist you to change the documents of the fund to your name to enable the bank transfer the money to you..
This is the favor i need when you have gotten the fund:

(1) Keep 20% of the money for Andrew until he finish his studies to become a man as he has been there for me as my lovely Son and i promised to support him in life to become a medical Doctor because he always desire for it with the scholarship he had won so far. I want you to take him along with you to your country and establish him as your son. (2) Give 20% of the money to handicap people and charity organization. The remaining 60% should be yours for your help to Andrew. Note; This should be a code between you and my son Andrew in this transaction "Hospital" any mail from him, the Lawyer he will direct you to, without this code "Hospital" is not from the Andrew, the Lawyer or myself as i don't know what will happen to me in the next few hours.

Finally, write me back so that Andrew will send you his pictures to be sure of whom you are dealing with. Andrew is 14years now, therefore guide him. And if i don't hear from you i will look for another person or any organization.

May Almighty God bless you and use you to accomplish my wish. Pray for me always.
Ms Vivian Brown

Email analysis :

NOTE : sistervivianbrown1@gmail.com
NOTE : X-Rocketymmf : senanation
NOTE : Return-Path : < sistervivianbrown1@gmail.com >
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-5
NOTE : Sender : senanation@yahoo.co.jp
NOTE : X-Mailer : YahooMailWebService/0.8.111_69
NOTE : client-ip=182.22.91.115;


NOTE : Received : from [199.58.86.247]


NOTE : by web101409.mail.kks.yahoo.co.jp via HTTP;
NOTE : Urgent Letter From Hospital

Rép : Emirates NBD Bank.,

Emirates NBD Bank
Baniyas Road, Deira Centre
Dubai, United Arab Emirates
TELEPHONE+971528206883

Attention: Beneficiary

We wish to congratulate and inform you that after thorough review of your Inheritance/Contract funds transfer release documents in conjunction with the World Bank and the International Monetary Fund assessment report, your payment file was forwarded to us for immediate transfer of a part-payment of US$3,800,000.00(Three Million Eight Hundred Thousand United States Dollars) to your designated bank account from their offshore account with us.

The audit reports given to us, shows that you have been going through hard times to see to the release of your funds, which has been delayed by some dubious officials.

We therefore advice that you stop further communication with any correspondence outside this office.

Kindly reconfirm your details to enable us credit your account directly by te legraphic transfer or through any of our corresponding banks and send copies of the funds transfer release documents to you and your bankers for confirmation.

Should you follow our directives, your funds will be credited and reflect in your bank account within five (5) bank working days.

For further details and assistance on this Remittance Notification, kindly provide us with the below details:

FULL NAME AND AGE:
BANKING DETAILS
TELEPHONE AND FAX NUMBERS:
FULL CONTACT ADDRESS

Best Regards

Surya Subramanian
Chief Financial Officer
Emirates NBD Bank, Dubai
United Arab Emirates.
TELEPHONE+971528206883

Email analysis :

NOTE : emiratesnbd@financier.com
NOTE : emiratesnbdbank@emirates.net.ae
NOTE : X-Msmail-Priority : Normal
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Mime-Version : 1.0
NOTE : domain of emiratesnbd@financier.com does not designate
NOTE : 41.249.255.100 as permitted sender


NOTE : X-Mimetrack : Itemize by SMTP Server on srvlotus/RMO
NOTE : (Release 9.0.1|October 14, 2013)
NOTE : Serialize by Router on srvlotus/RMO
NOTE : X-Priority : 3 (Normal)
NOTE : Message-Id : < *.*-*.*@email.rmo-maroc.com >
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Content-Type : text/plain; charset="Windows-1251"
NOTE : client-ip=41.249.255.100;
NOTE : Received : from email.rmo-maroc.com (email.rmo-maroc.com. [41.249.255.100])


NOTE : Received : from User ([59.37.163.176])


NOTE : by email.rmo-maroc.com (IBM Domino Release 9.0.1)
NOTE : Rép : Emirates NBD Bank.,

Re.. (Phishing BNP Paribas)

PαrticuliersPriοritéPrοfessiοnnelsEntreprises

ΒNΡ Ρaribas Βαnqυe

Cher(e) client(e),

Vérificatiοn de cοmpte en ligne

Οn vous cοntacte pοur vοus nοtifier qu'un tier suspect a essayé d'avoir l'accès a vοtre cοmpte pοur cela οn a limité l'accès afin de prévenir toute activité illégale. veuillez cοnfirmer que vοus êtes le titulaire du cοmpte en vérifiant vοs infοrmatiοns afin de régler le prοblème. une fοis cοnfirmé vοus allez recevοir un cοde secret cοmme sécurité renfοrcé pour le valider sur vοtre cοmpte

NΟTIFICATIΟN!

Vοus avez 48 heures pοur vérifier vοs infοrmatiοns, sinοn le cοmpte sera clοturé pοur tοujοurs!

1 Accéder a vοtre cοmpte
2 vérificαtiοn de vοs infοrmαtions
3 se cοnnecter à vοtre webmαil zimbrα

Accéder au cοmpte

Cοrdiαlement,
Le Servíce Clíenτs BNΡ Ραribas.


Phishing analysis :

CLICK : Accéder au compte
OPEN : https://www.e-prev.com.br/t
REDIRECT : http://dog.cyberactiv.com/notre-offre/devenirrr/
RESULT : Phishing was removed...
SCREENSHOT :


Email analysis :

NOTE : webmaster@pll.net.frz
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < www-data@webgride074.emsecure.net >
NOTE : Received : from webgride074.emsecure.net ([139.59.152.33])
NOTE : Received : by webgride074.emsecure.net (Postfix, from userid 33)
NOTE : X-Php-Originating-Script : 0:index.php
NOTE : Re..