Friday, October 14, 2016

[SPAM] Confirm your deposit (Required)

Hello,

In order to activate the Cash Formula you need to confirm your deposit!

>> Confirm Your Deposit Here

Once confirmed you can access your dashboard where you can view your funding balance. The Cash Formula will start to earn you profits upon activattion.

Thank you,

William D. Campbell
638 Cambridge Court
Little Rock, AR 72211

Scam analysis :

CLICK : >> Confirm Your Deposit Here
OPEN : http://safestpayment.net/?hop=test@test.com
SCREENSHOT :


REDIRECT : http://freedomcircle.co/?ot=*&token=*&clickid=*&aff=*&ct=*
SCREENSHOT :


Email analysis :NOTE :

NOTE : client-ip=45.40.124.96; helo=legitcheckout.net;


NOTE : [SPAM] Confirm your deposit (Required)

FBI Disclaimer paper

OFFICIAL LETTER FROM FBI NEW YORK, Your fund was received at U.S Custom Authority at (JFK) John F. Kennedy Int'l Airport NYC and necessary fees/charges has been paid by sender except $150 for Customs Clearance Certificate CCC, but a lady Janet Fred., came forward claimed you sent her to claim your $8Million, is it true? did you order her to pay $150 for CCC? Also be informed that we came to an agreement with the U.S Custom Authority at (JFK) John F. Kennedy Int'l Airport NYC that you will send fee latest tomorrow, unless you want your fund to be hand over to her, while you will expect FBI Disclaimer paper to sign or else you will be arrested for assigning her without informing us. Just click on reply, to reply back to FBI-Director-James B Comey Jr to his private email uspdf587@yeah.net immediately. Yours sincerely, FBI email Dept.Reply To E-mail: uspdf587@yeah.net Phone 202 852 0499 uspdf587@yeah.net

Email analysis :NOTE :

NOTE : uspdf587@yeah.net
NOTE : Return-Path : < ikgomnkhkhkhk@yahoo.co.jp >
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-5
NOTE : Authentication-Results : 182.22.91.88 as permitted sender


NOTE : smtp.mailfrom=ikgomnkhkhkhk@yahoo.co.jp
NOTE : X-Mailer : YahooMailWebService/0.8.111_69
NOTE : Received : from [41.79.219.219]

Your Netflix Membership has been suspended [#348963] (Phishing)

Validation failed

During a routine check of your account we have failed to validate the billing method we have on record for your account. To continue using the Netflix service you will need to update/verify your billing information.

CONTINUE >>

Please note that failure to complete the validation process will result in permanent suspension of your netflix membership.

We thank you for your understanding.

Netflix Billing Support

TWEET LIKE FORWARD

Preferences | Unsubscribe

Phishing analysis :

CLICK : CONTINUE >>
OPEN : http://newdata01.com/
RESULT : Phishing was removed

Email analysis :

NOTE : Return-Path:
NOTE : Received: from [146.20.110.156] (port=57419 helo=User)


NOTE : From: " Netflix"< no-reply@netflix.ssl.com>
NOTE : Subject: Your Netflix Membership has been suspended [#348963]
NOTE : MIME-Version: 1.0
NOTE : Content-Type: text/html;charset="Windows-1251"
NOTE : Content-Transfer-Encoding: 7bit
NOTE : X-AntiAbuse: Sender Address Domain - netflix.ssl.com
NOTE : X-Get-Message-Sender-Via: server-33:
NOTE : authenticated_id: pro/only user confirmed/virtual account not confirmed
NOTE : X-Authenticated-Sender: server-33: pro
NOTE : X-Remote: 162.242.219.144 ()

Une nouvelle conseille.

Bonjour ,

Vous avez reçu une nouvelle conseille sur votre espace client en ligne.

Pour le consulter, merci de vous connecter à votre espace client credit lyonnais,

En cliquant içi

A très bientôt sur le service lcl de gestion des comptes.

L'équipe Banque en Ligne.

Phishing analysis :

CLICK : En cliquant içi
OPEN : http://lidingösegelsällskap.se/wp-content/lcl/
RESULT : Phishing was removed.

Email analysis :


NOTE : Importance : high
NOTE : Return-Path : mabanqueprivee@bell.net
NOTE : Cmm-X-Sid-Pra : mabanqueprivee@bell.net
NOTE : Cmm-Sender-Ip : 184.150.200.80


NOTE : Une nouvelle conseille.