Tuesday, October 31, 2017

Bonjour ! (Arnaque)

Siège social de SNC-Lavalin, Boulevard René-Lévesque, à Montréal
Service Renseignement ! Tél : (+1) 815 242 7439 Tour de 22 étages 390,rue Bay, bureau 1600
E-mail: direction.snc.ca@gmail.com


Accord de publication N° 001/GC/DRH/GOV- CA-CIC-2017

A votre Attention !!!

Cadres et Jeunes diplômés Bienvenus, Dans le souci de lutter contre le voyage clandestin, la pauvreté, de promouvoir l'emploi et à l'intégration Africaine au processus de la mondialisation, La Compagnie SNC-LAVALIN International en collaboration avec le service de Citoyenneté et Immigration au Canada lance une grande session de recrutement en cette d'année 2017.

En effet nous recherchons avant tout des personnes capables sans distinction de sexe qui pourront s'adapter à notre environnement de travail.


1- Être âgé(e) entre 18 et 65 ans
2- Être titulaire au moins du BEPC BAC ou autres Diplômes Professionnels
3- Savoir parler le français ou l'anglais
4- Avoir de bonnes qualités relationnelles
5- Avoir une bonne moralité

PS: Pour plus d'informations et le retrait du formulaire, veuillez nous

envoyer vos coordonnées

Si vous êtes intéressés veuillez nous envoyer: NOM; PRÉNOMS; AGE; PAYS;NATIONALITÉ; PROFESSION; SEXE; NUMÉRO TÉLÉPHONE; ADRESSE: à l'adresse de la direction par Émail qui est la suivant: direction.snc.
ca@gmail.com puis nous contacter sur (+1) 815 242 7439 pour confirmation de votre inscription et pour plus d'informations sur les conditions à remplir et les pièces à fournir pour votre dossier de candidature.

Le chargé de l'information

Cordialement !!

Email analysis :

NOTE : Received : from ( by wmlighttin.pc.tim.it;
NOTE : francesco.silvester@tin.it
NOTE : direction.snc.ca@gmail.com
NOTE : X-Originating-Ip :



This is to officially inform you that ATM card number: 3774 2856 7847 9006 worth Eight Million Five Hundred Thousand($8.5 Million usd) has been credited in your favor in bid to compensate you on your contract payment since you are next on our inheritance file for the second part of this fiscal Year 2017.The card centre will send you an ATM CARD which you will use to withdraw your money in any ATM MACHINE in the world.

Your personal identification is ATM- 7997. Contact the verification officer BILL PETER (Mr.) on: (billpeter156@gmail.com) with the following for proper verification and claim processing:

Full Name:
Delivery Address:
Phone Number:
Fax Number:


You are also required to send to the verification officer/agent a means of Identification which should be a scan copy of your Driver’s License or International Passport for proper verification and authentication.



Email analysis :

NOTE : teste@satconecta.com.br
NOTE : atmcentre@yahoo.com
NOTE : Received : from [] (helo=User) by srv01.satconecta.com.br

Tuesday, October 24, 2017

Hi User, you have 2 important invitations on your LinkedIn network


These invitations are expiring this month.
Remember, each connection extends the reach of your network.

Dale Christel
CEO, Perm Mold Alum Castings and Machining at Watry Ind. 920-457-4886
Invitation expires: November 14
Yes, connect

Scott Fraser SIOR, CCIM
Senior Vice President at Kidder Mathews
Invitation expires: November 9
Yes, connect

See all invitations

Unsubscribe | Help
You are receiving Invitation emails.
This email was intended for LinkedIn user. Learn why we included this.
© 2017 LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085. LinkedIn and the LinkedIn logo are registered trademarks of LinkedIn.

Email analysis :

NOTE : chair-e.business@meu.edu.jo
NOTE : X-Originating-Ip : []

Phishing screenshot :

Phishing analysis :

CLICK : Yes, connect
OPEN : https://pt-ipm.co.id/imcp2/wp-admin/includes/lm/js/i.php
REDIRECT : https://tachimitatape.co.id/xc/www.linkedin/53f12518b4dce443ab52eb662098f8cf/

please add me on your LinkedIn network (LinkedIn Phishing)


Hi ,

Debbie Wilkes want to add you to their network

Debbie Wilkes
CEO,at Rio trade Business Group
USA:5,640 connection

View Profile

© 2017 LinkedIn Ireland Limited. LinkedIn, the LinkedIn logo, and InMail are registered trademarks of LinkedIn Corporation in the United States and/or other countries. All rights reserved.

You are receiving Invitation emails. Unsubscribe
This email was intended for you. Learn why we included this.

LinkedIn is a registered business name of LinkedIn Ireland Limited.
Registered in Ireland as a private limited company, Company Number 477441
Registered Office: 70 Sir John Roberson's Quay, Dublin 2

Email analysis :

NOTE : service-member@linkedln.com
NOTE : User-Agent : Roundcube Webmail/1.2.4
NOTE : X-Sender : LinkedInCorporation2017@service.net

Phishing screenshot :

Phishing analysis :

CLICK : View Profile
OPEN : http://yb82.myjino.ru/tt/linkedln/www.linkedin/Linkedin1/

Wednesday, October 18, 2017

MRS.MELANIA TRUMP (Melania Trump Scam)

I'M MRS.MELANIA TRUMP AND THE CONTENT OF BELLOW MESSAGE IS SIGNED AND APPROVED BY UNITED BANK OF AMERICA.moreover,in respect of fact the sum of $50 million united dollars was instructed to transfer on your favor through check draft,And i wish to let you know that every necessary things has been accessed by IMF on the economic recovery program done by united state embassy in government house of Benin republic for victim who lost fund to con African artist ,And you have nothing to be worried about. Bellow is the required information i need from you so that the delivery of your check draft will commence immediately today

Home address:...........................................
Cell phone number:......................................
valid Email Address................................

We advice you to prohibit any other transaction you are having with an unknown source to avoid regret there after.And we urge you to comply fast with the managerial demands so that you can have your legit check book with immediate effect as instructed from White house(Washington DC)

Thanks and always be bless

Email analysis :

NOTE : "ww1."@abeam.ocn.ne.jp
NOTE : X-Originating-Ip : []

Email leak :

timmy.t4@gmx.com, dave@ruraloregon.net, retiab_trevrep_corp@yahoo.com, sessavivi@gmail.com, montanahunter2015@yahoo.com, mr04248@gmail.com, ahdrianmallari14@gmail.com, stvesmthson33@gmail.com, praisethelord@maildrop.cc, maggiemcgill@hushmail.com, asiuk@live.co.uk, Dr.ivorbigone@yahoo.co.uk, bigmann768@gmail.com, poochie768@yahoo.com, stevecammer@outlook.com, kenneth.turse@gmail.com, takalanideki@mail.com, robinsavage447@gmail.com, aimerettromper@funmailx.com, becart.p@outlook.fr, madgekz3bonner@gmail.com, Woodsalex21@inbox.com, 15654@oakham.rutland.sch.uk, yannbongba@yahoo.fr, NP.eccomiqua@gmail.com, hughjanus@photographer.net, mikelitoris@consultant.com, theasmits@gmx.co.uk, buraktorun7@gmail.com, saveourunionflag@gmail.com, Enquiries@amc.edu.my, Troels.n.pedersen@danbolig.dk, sarah.dragsdahl@danbolig.dk, Alliross@hotmail.com, domagoj.rubesa@fh-joanneum.at, Jennyblack7272@gmail.com, gary.roaster@gmail.com, hugo35mm@gmail.com, dick838@spainmail.com, jswaglord@yahoo.com, pleasefillintheblank@hotmail.com, mizra9062@gmail.com, hugoferreiracamargo@gmail.com, hector.rowles@gmail.com, fisherm@sgaweb.net, mattallegra@mail.com, jasminedelancey@gmail.com, chelleanderson12@gmail.com, pegidaunited@outlook.com, frederic@hotmail.com, cherrybree289@gmail.com, cruise19allyson@gmail.com, rhejean16@gmail.com, lucy04anderson@gmail.com, happyatlast0@yahoo.co.uk, bsartstudios@outlook.com, aaronreid@windowslive.com, bofasaur@gmail.com, sergeikurkov@yahoo.co.uk, dionnex18@hotmail.co.uk, harrold.fiducious@gmail.com, johnnyjones101@mail.com, ChuckNorris1940official@outlook.com, realfakedocs@live.fr, taylorhelen66@gmail.com, cj96050@gmail.com, fransi@fransimalin.co.uk, drachenlords1510@live.de, engr.hanks@yahoo.co.za, Webinis123@gmail.com, jessicapierce318@gmail.com, marjac1997@gmail.com, meandcecilia@gmail.com, jw508328@gmail.com, whiter958@gmail.com, reverendtomjones@gmail.com, Jerry.fring@yahoo.com, Salamallikki@hotmail.com, cartoonherodude@gmail.com, richiecool84@hotmail.com, laurenmachan@hotmail.com, garywelburn@hotmail.com, realtopdocument@outlook.com, whiter958@msn.com, rob.karhu@gmail.com, keithspr3@hotmail.com, bill.martins@hotmail.com, rich.dude.swag@gmail.com, sperks548@gmail.com, mimsy_wimsy@hotmail.co.uk, Dr.Richard.Poke@gmail.com, rosettareiter@gmx.ch, matthew.g10025@yahoo.com, parkhurstrobert112@yahoo.com, aamirarais@yahoo.com, gbreezy820@gmail.com, jennatulls27@gmail.com, mikeandrewsma@yahoo.com



I am Mrs Melania Trump and I am writing to inform you about your Bank Cheque Draft brought by the United Embassy from the government of Benin Republic in the white house Washington DC has been mandated to be delivered to your address on Tuesday

being of Oct 12th 2017 to you as soon as you get back to me with your personal

data,such as;
your full name-----------
your home address__________
phone number_____
Mrs Melania Trump

Email analysis :

NOTE : "WWW."@extra.ocn.ne.jp
NOTE : X-Originating-Ip : []

New transaction (MyEtherWallet Phishing)

You have a new transaction on your Ethereum Wallet.

Login to check your balance:


Phishing screenshot :

Email analysis :

NOTE : vebj@striker.ottawa.on.ca
NOTE : Received : from static-186-121-254-194.acelerate.net
NOTE : (static-186-121-254-194.acelerate.net [])

NOTE : allero@striker.ottawa.on.ca
NOTE : Received : from b1ebd3e6.virtua.com.br (unknown [])

Phishing analysis :

CLICK : https://mymyetherwallet.com/#view-wallet-info
OPEN : https://mymyetherwallet.com/#view-wallet-info

Final reminder: update your payment details (Netflix Phishing)

Please Update Your Payment Method Now

Dear Valued Netflix User

Sorry for the interruption, but we are having trouble authorizing your Payment Method.
Please visit the account payment page at

https://www.netflix.com/YourAccountPayment to enter your payment information again or to use a different payment method.

When you have finished, we will try to verify your account again.
If it still does not work, you will want to contact your credit card company.
To protect the informations of our customers, our system has temporarily placed restrictions on your account until your informations has been validated against our system.
You can validate your informations by either clicking on the link above or below, this will only take a few minutes and your account functions will be fully restored.
Log In To account
If you have any questions, we are happy to help. Simply call us at 0800-917812.
The Netflix Team
Netflix Inc. : Netflix Corporate Headquarters 100 Winchester Circle Los Gatos, CA 95032.
You can un-subscribe to security alerts by configuring your online account.
We are sending this email to provide support for your personal online Netflix account.

Phishing screenshot :

Email analysis :

NOTE : mail@sfr.fr
NOTE : Received : from eee ([])

Phishing analysis :

CLICK : https://www.netflix.com/YourAccountPayment
OPEN : http://www.mynetchecking.com/browse/user
RESULT : Phishing is not responsive.

Tuesday, October 17, 2017

Over Due Invoice (Conformgroup Scam)


I'm Sandra from the Accounts department at Conformgroup. Our records show that we owe an outstanding balance dating back to 08/08/2017 This email is to request you for a copy of your company account Manager or Financial controller email contact, so that we can clear the payment at the earliest. Sincere apologies for the delay in payment. The accounts team has been reshuffled and this case came to my notice just an hour ago and I am writing to you immediately.

If this invoice has already been paid, please disregard this notice.
Thank you in advance for your cooperation. We hope to continue doing business with you in the future.


Sandra Holmes
Senior Account Officer
Conformgroup Inc

Email analysis :

NOTE : Sandra Holmes
NOTE : sandraholmes@conformgroup.com
NOTE : Reply-To : sandraholmes@conformgruop.com
NOTE : Received : from conformgroup.com ([]) by cmsmtp

NOTE : sandraholmes@conformgroup.com does not designate as permitted sender

Sunday, October 15, 2017

Attention Sir.

Attention Sir.

I am Barrister Murphy Luckmond,I got your contact through my personal search.I am making this contact in respect to my late client, he died in the King's Cross station underground Bomb blast in London.He is a national of Poland but spent all his business years here in Benin Republic of west Africa. My client is a consultant with foreign companies on oil deal in many african oil countries and he deposited some fund in a Security company.

View this website for more details of the bomb.http://en.wikipedia.org/wiki/7_July_2005_London_bombings.

Since the death of my client here, I have made enquiries to his country embassy in order to locate any of his children or relatives and present him to the security company as his next of kin, as I am the only person that has all the legal authority and power to provide my client next of kin, but unfortunately all my legal enquiries failed. The security company sent me a routine notice, notifying me that I have little time to provide his next of kin or they will have the fund confiscated by their authority.Since I have failed in all the enquires I made in order to locate my clients next of kin, I have decided after several years of thought to look for a trusted and reliable foreigner whom I will present to the security company as my clients next of kin so that the fund will be released to him.It is risk free and very easy to execute,If you can be trusted and willing to stand as my clients next of kin, let me know immediately so that I will proceed.

I assure to back you up with every documents related to this deposition, as the security company will require them from you for confirmation, proving that you are really the next of kin. All you need to do is to follow my advises and directions and then leave other legal and official steps for me.We will discuss more details as we proceed.Reply through my private email for security reasons:barrimupluckmond@yahoo.com

Yours faithfully,

Barrister Murphy Luckmond.

Email analysis :

NOTE : offic0012e.bari@hotmail.com
NOTE : client-ip=;

Friday, October 13, 2017

Vous avez un nouveau message (Phishing Société Générale)


Vous avez (1) nouveaux messages sur votre messagerie.
Consulter votre Messagerie en cliquant sur le lien ci-dessous :



Email analysis :

NOTE : info@societegenerale.fr
NOTE : Return-Path : < apache@admiral.anchor.net.au >
NOTE : X-Remote : (admiral.anchor.net.au)

NOTE : Mime-Version : 1.0
NOTE : Received : from admiral.anchor.net.au (admiral.anchor.net.au [])
NOTE : Received : by admiral.anchor.net.au (Postfix, from userid 48)
NOTE : Vous avez un nouveau message

Phishing screenshot :

Phishing analysis :

CLICK : (Consultezhici)
OPEN : starrdental.com/html/websms/index.htm
RESULT : Unresponsive
RESULT : Phishing attempt.

Thursday, October 12, 2017

Important Business Proposal

I am Asma al-Assad, the wife of Bashar Hafez al-Assad of Syria . I saw your profile on the investment, and it would be great to work with you to exchange ideas in the framework of initiatives aimed at business opportunities. If you are interested, please send an e-mail using asma-al-assad@outlook.com

Looking forward to explore possible areas of mutual interest.

Yours sincerely
Asma al-Assad

Asma Al-Assad

Email analysis :

NOTE : asmmaalassad@gmail.com
NOTE : Received : from [] (unknown [])

NOTE : by mymail.caregrowth.com
NOTE : client-ip=;

My proposal (Military scam)

Hello Friend,

I am currently in the military unit here in Afghanistan,we have some amount of funds that we want to move out of the country. My colleagues and I need a good partner someone we can trust. It is risk free and legal. Reply to this email for more details. majortownsend01@gmail.com


Email analysis :

NOTE : jamel.ocampo@11d07.mspz7.gob.ec
NOTE : majortownsend01@gmail.com
NOTE : X-Originating-Ip : []

Richard Gross's invitation is waiting for your response (LinkedIn Phishing)

Richard Gross invited you to connect 3 days ago.


View Invitation

Richard Gross
CEO at HOC Trading LLC
More people who want to connect with you

Frank White

View Message Here

Unsubscribe | Help
You are receiving LinkedIn notification emails.
This email was intended for User. Learn why we included this.
© LinkedIn. Mailing address: Room 817, 18F, Building 18, #1 DiSheng Bei Road, Bejing Yizhuang Development Area, China. LinkedIn and the LinkedIn logo are registered trademarks of LinkedIn.

Email analysis :

NOTE : chair-curricula@meu.edu.jo
NOTE : X-Originating-Ip : []

Phishing screenshot :

Phishing analysis :

OPEN : https://maralspa.cl/LNKD/i.php
REDIRECT : https://lincoln-institute.com.ar/img/logos/www.linkedin/5e48c0aef72e80880ea2117442efdb31/

REDIRECT : https://lincoln-institute.com.ar/img/logos/www.linkedin/5e48c0aef72e80880ea2117442efdb31/index2.html

REDIRECT : https://www.linkedin.com/start

Tuesday, October 10, 2017

MICROSOFT® REWARD!!! (Microsoft Scam)

Cardinal Place
80-100 Victoria Street
London,SW1E 5JL
United Kingdom

Dear Winner

This message is from the Office of the MICROSOFT® Co-Operation. We are pleased to inform you of the result for the just concluded annual draws of the MICROSOFT® Online Lotto for regular users of Msn,Hotmail and Bing search engine for the year 2017.Your email address in the 1st category and therefore attracted a cash award of ?845,000.00 GBP (Eight Hundred and Forty Five Thousand Great British Pounds Sterling) in cheque credited to Email Bonus Numbers: MSLP-54399. Please proceed with your claims by writing to our Foreign Co-coordinator (Derrick McCourt) Public/Online Sector U.K So he can assist you in redeeming your price with the following details



Valid Mobile no :

Age :


Derrick McCourt

General Manager, Public/Online Sector U.K

E-mail: (derrickmccourt1@dr.com)

Email analysis :

NOTE : shien@npo-wahaha.net
NOTE : derrick.mccourt@yandex.com
NOTE : Received : from unknown (HELO User) (shien@npo-wahaha.net@

NOTE : by aser.buddha.co.jp

Lors votre dernier achats (Phishing Société Générale)

Adhésion : Faite votre demande en ligne en cliquant-ici

Email analysis :

NOTE : Received : from (IP may be forged by CGI script)
NOTE : by infong73.kundenserver.de
NOTE : Return-Path : < noreply@nrj.fr >
NOTE : noreply@nrj.fr
NOTE : X-Mailer : PHPMailer [version 1.73]

Phishing screenshot :

Phishing analysis :

CLICK : Faite votre demande en ligne en cliquant-ici
OPEN : http://hinsorn.ac.th/obeclms/osita/
REDIRECT : http://seraylv3.beget.tech/near/sg/ce18c0b32e0328aa61d8c9d10b1f34c6/

SPOOFED EMAIL : noreply@nrj.fr

Hi User, I sent you message on your LinkedIn network (LinkedIn Phishing)

Information from scam.cz :

- The linkedIn phishing has other formulas.
- Same phishing link as in this phishing.

Email analysis :

NOTE : dir-finance@meu.edu.jo
NOTE : X-Originating-Ip : []

Hi User, Ahmed Kinawy invitation is awaiting your response. (LinkedIn Phishing)

Ahmed Kinawy wants to add you to their network

mahmoud ahmed
Ahmed Kinawy
Dubai:· 5,640 connections
Accept Ahmed's invitation

LinkedIn is a social network and online platform for professionals. Learn More
Unsubscribe | Help

You are receiving Invitation emails. LinkedIn will use your email address to make suggestions to our members in features like People You May Know.
This email was sent to you.

© 2017 LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2. LinkedIn is a registered business name of LinkedIn Ireland Unlimited Company. LinkedIn and the LinkedIn logo are registered trademarks of LinkedIn.

Email analysis :

NOTE : hsmuisem@meu.edu.jo
NOTE : Received : from [] (

Phishing screenshot :

Phishing analysis :

OPEN : https://florenciaeventos.com.ar/jkk/i.php
REDIRECT : https://florenciaeventos.com.ar/Lin/www.linkedin/c393e7e29942131cf98a4f0aecb5c2a2/

REDIRECT : https://florenciaeventos.com.ar/Lin/www.linkedin/c393e7e29942131cf98a4f0aecb5c2a2/index2.html

PAYMENT DETAILS (Western Union Scam)


Western Union money transfer center has completed the trace of the money transfer directed to you. We are redirecting a fund transfer to you. Your lump sum payment is ready since 14th September. You have to claim it now or it will expire soon. There a PIN Code on your western union account so no agent can claim your points. Because you have not used your WU Points since you started to use western union services, your points have doubled and accumulated. This has earned you over $17,000 overtime.

Please note; Each time you receive or send money from western union, you earn points for the service. This points can be converted to money after a period of time. Some western union agent will not tell you this and they will use up your western union points and convert them to free cash payment from western union. This is the reason why western union withdraws the licenses from many of our agents. If your agents refused to give you information about your western union points, don't argue, just write to western union and your points will be revealed to you. Make sure to keep your western union card safe if you don't have a western union card you can also demand the card from any of our western union agents.

Western Union After claiming you lump sum. It will start again from zero. Please, reply and include on this email your:

Full Names:
Date of Birth:

Western Union will send your mtcn number to pickup cash daily from any of our western union agent location near you.


Dr. Karlina Herman,
Western union money transfer (WUMT)

� 2017 Western Union Holdings, Inc., All Rights Reserved.

Virus-free. www.avg.com

Email analysis :

NOTE : westernunion@englandmail.com
NOTE : ecashport@post.com
NOTE : Received : from User (e2.starplexx.com [])

NOTE : (Authenticated sender: test@chlazeni.cz)

Monday, October 9, 2017


Plot 33, Abubakar Tafawa Balewa Way
Central Business District,
Cadastral Zone,
Abuja, Federal Capital Territory,
P.M.B. 0187,
Garki Abuja.



You are been officially contacted today because your funds werer e-deposited into the "Federal Suspense Account" of CBN last Month,because you did not Claim your funds as the rightful beneficiary from our corresponding bank, this payment serves as a compensation to scammed victimS to recover part of the money that they were defrauded by the trick stars.

Well known to all, the Central Bank of Nigeria is the mother Bank of all commercial Banks here in Nigeria as well as Nigeria beign the ECOWAS Chieftain country in Africa ,due to the amount of scamming systems used by the fraudlent officers and staffs working in the bank who manipulated and forged government information and also hacked and manipulated the beneficiaries details to their fraudulent use and dupe them of their money, in this respect international monetry fund IMF and CBN put a restriction that no fund will be deducted or withdrawn by any staff or officer for any reason so it has to be putting under a high insurance bond that makes it impossible for the impostors to divert or withdraw any money,be it staff or officer.

This morning at about (10:00am Standard Pacific Time) i was alerted by my Secretary that three men and a Lady were at my Office reception Waiting to see me,to my surprise they were two Canadians and a Nigerian attorney, they introduced themselves as (Mr. Tim Parker, Mr. Roland Gulf, Both from Canada), accompanied with them is a Nigerian attorney With the name (Barriester Lambart Nnamdi), and Miss Hellene Rose.

Really these men were unexpected by me because their visit was impromptu and unusual, i had to ask them why they came to see me,they said that they were here to collect the overdue funds which rightfully belongs to you, on your behalf, these foreigners actually claimed this beyond reasonable doubts, that you are no more alive.

I asked them who authorized them to come down to Nigeria for the Collection of this Payment, they told me that your relatives asked them to come and collect these funds on your Behalf, infarct it was the biggest shock that this Bank have ever received so far because you'r overdue funds is still in the"Federal Suspense account" of CBN, yet you sent these men to come and Collect the Funds on your behalf without notifying us.

We in this Bank do not understand why you sent these men to come and Collect your funds on your behalf, if actually you wanted them to help you collect your overdue bill Sum, at least you Should have informed me as the Executive Governor of this Bank.they tendered some vital documents which proved that you actually sent them for the collection of these funds, honestly, it really baffled me that you took such decision Without my consent.

Here are the documents which they tendered to this Bank today:

These documents which they tendered to this noble Bank is a clear Proof that you sent them to Collect this funds for you, finally, i told them to come back by Monday morning and they promised to come back,kindly clarify us on this issue before we make this Payment to these foreigners who came on your behalf, you are also required to send your full information to me as Stated below:Due to diversion and manipulating acts by some staffs,there is a restrictions placed on the funds to avoid fraudulent acts by the impostors again, that is what we are trying to wipe out from our foreign beneficiaries, if you want your funds contact the assigned office.

You’re full Names...
Home Address...
Active Telephone Number...
A scan copy of your international passport

Awaiting your urgent reply through this email

Email analysis :

NOTE : cbnpaymentnotifica@yahoo.co.nz

Thursday, October 5, 2017

Your Apple ID: Access from new web or mobile device (Apple ID Phishing)

Dear Apple Customer,

This email was generated because of a login attempt from a web or mobile device located at (FR). The login attempt included your correct Apple ID and password. The Apple ID Guard is required to complete the login. No one can access your account without also accessing this email. You are unable to access your account. Please use this account specific recovery link for assistance recovering your account.

Recovering my account

The Apple Team

TM and copyright © 2017 Apple Inc. 1 Infinite Loop, MS 96-DM, Cupertino, CA 95014.
All Rights Reserved / Keep Informed / Privacy Policy / My Apple ID

Email analysis :

NOTE : Return-Path : < f@node02.facesharedasia1.com >
NOTE : Return-Path : f@node02.facesharedasia1.com
NOTE : Mime-Version : 1.0
NOTE : Content-Type : multipart/alternative; boundary="===============1462413996=="
NOTE : Received-Spf : client-ip=;
NOTE : Received : from WIN-6Q15KS5IKGJ ([])

NOTE : Received : from []

NOTE : Your Apple ID: Access from new web or mobile device

Phishing analysis :

CLICK : Recovering my account
OPEN : https://pmb.stiemmamuju.ac.id/index1.html
REDIRECT : http://inboxaus.com/apple/627f3b5930cd81c983453025ffe207da/login.php?ip=*

REDIRECT : http://inboxaus.com/apple/627f3b5930cd81c983453025ffe207da/suspended.php?ip=*

CLICK : Confirm My Account
REDIRECT : http://inboxaus.com/apple/627f3b5930cd81c983453025ffe207da/personal.php?ip=*



We have concluded to transfer your payment- through-western union $3,000 daily until the$1,7million US is completely transferred to you accordingly. Though,Director John Basil has sent $3,000 in your name today so contact Agent:below with your full Name,phone contact and address

Name:Raymond Ejide
TEL: +22999613677

So hasten up and give the agent a call to process your payment at once.Ask him for the MTCN sender name and test Question/Answer to pick up your first payment of $3,000, and also ask him how much it will cost you for the transfer.

ThanksFrom Hon Mr.Wayne Power

Email analysis :

NOTE : unionwestern235@gmail.com
NOTE : "WWW."@ninus.ocn.ne.jp
NOTE : X-Originating-Ip : []

Monday, October 2, 2017

Re-Change of Funds Ownership.

Attention: Beneficiary.

Re-Change of Funds Ownership.

This is to bring to your notice that the Ecowas Chairman President Faure Gnassingbe, has constituted a 10 man investigative Panel and foreign Debts reconciliation committee, which I am the Chairman of the presidential committee saddled with the responsibility to investigate all the banks here in Ecowas, who has trapped and held beneficiaries Compensation/inheritance/NNPC contract Fund claims unpaid. To settle all the foreign debt after his recent Telephone conversation with the World Bank and other officials of the United Nation to enable him give a zero tolerance to corruption in his regime. I am solely in charge of all foreign payments. At the commencement of my official responsibility geared towards payment to foreign beneficiaries. I received a letter that your unclaimed approved payment by the Ecowas Banks which has been overdue for payment should now be paid to Gary Johnson Lee from your Country. In the said letter titled change of Beneficiary/Ownership. Its clearly stated that you are dead and that he is your next of kin, it went further to say you signed a deed and an agreement with Gary Johnson Lee to become your beneficiary before your untimely death. Officially arrangement had been concluded for the approved funds transfer into his account. But because of the elaborate global scam, I decided to contact you first for confirmation before transferring the funds and if after seven working days, no response is received from you, it will be assumed that you are dead and as such authorization and approval will be granted on behalf of Gary Johnson Lee to claim/receive your fund. But if you are well and alive then confirm this letter and reconfirm your Information without any further delay. Send your responses to me Immediately by email.

Below is the information you are expected to re-confirm.

Full Name: ......
Address: .......
Sex: .....
Age: .....
Date of Birth: ......
Occupation: .............
Mobile Phone: .......
Driver's license or any copy of Your Identity: .....

Please feel free to contact me on this email address (inforenqu11@gmail.com ) only for further clarifications regarding this matter.



Dr.Buam Atekpa

Email analysis :

NOTE : inforenqu11@gmail.com
NOTE : officee35@daum.net
NOTE : fortunataapple@gmail.com
NOTE : X-Originating-Ip : []

Money Gram global money transfer services


Following the instruction to pay all scam victims $1.8 Million each by IMF through Money Gram service, we wish to inform you that your email address was one of the lucky ones to receive this prize. You will be receiving $5000 daily until the whole amount is completely transferred to you, today we have already sent you $5000, but to make sure that there is no mistake; the reference information cannot be forwarded now until you confirm the following:

1. Name
2. Address
3. Phone
4. Occupation
5. Age
6. Country

The above information should be directed to: Dr Jonathan Ebele, at this email: jonathaneble009@gmail.com. telephone number: +22998650656, also include this transaction

secret code: MGX678G. Note: Your file will expire after 7 days if there is no response, then we will not have any option than to return your fund to IMF as unclaimed.Your swift response will enhance our service, thanks for your co-operation


Dr Desmond Eric

Money Gram global money transfer services

Email analysis :

NOTE : "www."@axel.ocn.ne.jp
NOTE : jonathaneble009@gmail.com
NOTE : X-Originating-Ip : []