Thursday, December 8, 2016

Message notification * (Link to virus)


Nddcole Watddson (Google Support) just sent you a message:


Undeliverable messages (*

Get more information

Don't want occasional updates about Gmail activity? Change what email Google Team sends you.

Email analysis :

NOTE : Received : from
NOTE : ( [])
NOTE : client-ip=;

NOTE : X-Php-Originating-Script : 10000:bisend.php

Link analysis :

CLICK : Get more information
INFORMATION : is a virus
SHA256 : be0908fbf059517f8ea204d1636e00a7810146fb9c920fc01bb4315b8e8e0067

Virus analysis :

AegisLab Troj.Downloader.Script!c
Cyren JS/Nemucod.EY!Eldorado
F-Prot JS/Nemucod.EY!Eldorado
Fortinet Malware_Generic.P0
K7AntiVirus Trojan ( 004dfe6d1 )
K7GW Trojan ( 004dfe6d1 ) 20161208
Kaspersky HEUR:Trojan-Downloader.Script.Generic
Sophos Mal/DrodZp-A

Exposing virus :



Dear Friend,

I am Barrister Obinna Jude, a Solicitor and the Personal attorney to Mr. Hoel Paul Edouard, a national of France, who died in a Plane crash on Monday 2nd September 1998 GMT 14:22 UK while they were flying from New York to Geneva. You can see the news or report on the below site.

My client his wife and three children lost their lives on that plane crash.Since then,i have made several enquiries to the embassy to locate anyof my clients extended relatives, this has proved unsuccessful. After several unsuccessful attempts, I decided to trace his relatives over the internet, so as to locate any member of his family but to no avail.

I have contacted you to assist in repatriating the money that belonged to my late client before they get confiscated or declared as unserviceable by the bank where this huge deposit were lodged. Particularly, the Bank where the deceased had an account valued at about US$15 Million Dollars, has issued me a notice to provide the next of kin or have the account confiscated within the next ten official working days.

Since i have been unsuccessful in locating the relatives for over 3 years now therefore, I have decided to seek your consent to present you as the next of kin of the deceased, so that the proceeds of this account valued at US$15 Million Dollars, can be paid to you and then you and me can share the money 50% to me and 45% to you, while 5% will be mapped out for any expenses during the process or tax as your government may require. I have the certificate of deposit that can be used to back up any claim we may make.All I require is your honest cooperation to enable us see the deal

I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law. Please get in touch with me strictly via this email ( to enable us discuss further.

Best regards.
Obinna Jude
Principal Attorney.

Email analysis :

NOTE : Received : from []
NOTE : (unknown [])

NOTE : by (Postfix)

FW: FTC subpoena (Phishing attempt)

You've been subpoenaed by the FTC.
FTC Subpoena

Please get back to me about this.
Thank you
Richard Kent
Senior Accountant
Phone: 441-216-2849
Fax: 441-216-5880

Email analysis :

NOTE : richard@*.*
NOTE : Received : from unknown (HELO IEOSOZAX) (

NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0)
NOTE : Gecko/20100101 Thunderbird/24.2.0
NOTE : BSNL was used to relay this phishing.

Phishing analysis :

CLICK : FTC Subpoena
RESULT : 404, removed...
WHOIS : whois :

Ngày đăng ký: 16-03-2012
Ngày hết hạn : 16-03-2017
Tên chủ thể đăng ký sử dụng :Ông Nguyễn Sự
Trạng thái : clientTransferProhibited
Quản lý tại Nhà đăng ký: Công ty TNHH Một thành viên Viễn thông Quốc tế FPT
Máy chủ DNS chuyển giao: + +
Registration date : 16-03-2012
Expiration date : 16-03-2017
Registrant : Ông Nguyễn Sự
Status : clientTransferProhibited
Current Registrar : Công ty TNHH Một thành viên Viễn thông Quốc tế FPT
DNS Server : + +

Your FedEx International Cheque Of $4.180,000.00USD

FedEx Courier Service,
Address : Sheikh Zayed Road 26th Floor
Dubai Media City 9239 UAE Dubai
Tel: +971521079311
Fax: +971 4-331-0718
Fax: +971 4-332-2304

Customers Service Days –Monday to Sunday

Attention: Valuable Customer,

We have a parcel for you containing a winning Cheque worth the sum of Four Million One Hundred And Eighty Thousand United State Dollars ($4.180,000.00USD) and also an Apple MacBook Pro and the new Apple iPhone (7) 120GB mobile phone added to your package which will be delivered to you after you provide all the required information to the FedEx Delivery Company before the parcel can be shipped to your own residential address in your country. Furthermore, you might be asking yourself how comes this email or your cheque. Your winning cheque was brought to our office by the Coca-Cola Bottling Company via a Lottery Fiduciary Claim Agent, signifying that you are a rightful winner to their Lottery Award Promo selected randomly which is powered by the Coca-Cola Bottling Company and also the Apple Company of United Arab Emirates. The main aim of this promo is to advertise the Coca-Cola Bottling Company product and the Apple Company product worldwide. Your e-mail address was amongst the (5) lucky email addresses that makes your email address as one of the lucky email address and they have decided to send your winning package to you through Federal Express Delivery Service. What you have to do now is to contact our Delivery Department for immediate dispatch of your winning package to your residential address.

For your information, the Lottery Fiduciary Company has paid the Delivery fee and Security keeping fee & Shipping charges as well as the Vat fees; you will have to pay a sum of $280.00 USD to the FedEx Delivery Department being payment for the Insuring of your package. All you have to do is to insure your winning parcel with the Insurance Company, which is registered with FedEx United Arab Emirates Dubai. The reason why you are been ask to pay for the Insurance fee is because of the fact that all items & packages that is not Insured by the insurance company of United Arab Emirates Dubai are not allowed to be delivered to their delivery address. So you are to pay the FedEx Courier Service the Insurance Fee to enable the insurance company insured your winnings for delivery.

As soon as you effect the payment our delivery team will take your Insurance fee, they will proceed to the insurance company to Insure your winning funds, as soon as it is been Insured by the insurance company of United Arab Emirates Dubai we shall commence with your delivery without any delay and also we shall provide you with the Insurance receipt that was given to us by the insurance company as a proof that you have Insured your package for delivery. The main reason why you are been ask to Insure your winning package is to certify that the package is not a Drug Affiliated Fund (DAF) neither is the funds to sponsor Terrorism in your country this will help you to avoid any form of query from the Monetary Authority of your country. And also we cannot take the risk to carry out the delivery of your winning package in-case of any possible demurrage. You have to contact our delivery team and ask them how you are going to make the payment of the Insurance fee of your package. We hope that you will respond to us as soon as possible because if you fail to respond until the expiry date of this package, we may refer the package to United Arab Emirates Dubai Commission of Welfare or better still to Coca-Cola Bottling Company or Apple Company. Kindly contact the delivery department (FedEx Delivery Post) with the details given below:

Delivery Manager.
Name: Mr. Kelvin Green.
Tel: +971521079311

You have to fill the form below and send back to us, and it's mandatory to reconfirm your postal address and telephone numbers to enable us commence with your delivery and mostly to enable us insure your Winning package and also do provide us with any scanned copy of any proof of your identification.

Do Provide Us With The Information Below
Your Full Names -------------
Your Home Address ----------------
Date of Birth ----------------------
Your Contact Phone or Mobile Number ------------------------
Occupation -------------------------
Marital Status ---------------------
Country ----------------
Your State ------------------

Kindly complete the above form and summit it to the delivery manager on As soon as your details are received, our delivery team will give you the necessary payment procedure so that you can effect the payment for the Insurance fee. As soon as they confirm your payment of $280.00 USD, they will not hesitate to work straight to the insurance company and insure your winning for delivery. It usually takes 24 hours being an overnight delivery service to deliver your winning funds to you after it has been insured by the insurance company. Ensure to contact our delivery department with the email address given above and ensure to fill the form as well to enable a successful reconfirmation and a safe delivery of your winning package.

Yours Faithfully,
Mrs. Aisha Philips
FedEx Online Team Management®
© Copy Right Reserved 1994-2016.

Email analysis :

NOTE : Received : from [] ( [])

NOTE : by
NOTE : ?

NOTE : ?

NOTE : server was used to relay a scam.

Greeting from ANNEBEL

My name is Annabel sorry I got your email address from mail Directory today i decieded to contact you and to know you more ,I have very important thing i will love to share with you .just to help me express my self well ,write me back i will give you full detail.thanks i will be waiting.Annabel

Email analysis :

NOTE : From Annabel
NOTE : X-Yahoo-Newman-Property : ymail-3
NOTE : Mime-Version : 1.0
NOTE : client-ip=;

NOTE : Name is unclear : Annebel ? Annabel ? Annabelle ? Maria Johnson ? Scam !


Attention Please!!!

I have registered your ATM CARD of $18.5usd with Delivery Company, Please Contact with your delivery information such as, Your Name, Your Address and Your Telephone Number.

E-mail: (

I have paid for the delivery fees and only what your paying for is the insurance fees,And Which is $85.Please forward your information to them immediately.

Best Regards,
Miss Sussane Harry

Email analysis :

NOTE : "officefile."
NOTE : client-ip=;

NOTE : *.*.*
NOTE : X-Originating-Ip : []