Tuesday, September 19, 2023



Phishing analysis :

NOTE : S_57465594508@t-online.de
NOTE : antilles-guyane.bnpparibas@client.fr
NOTE : Received-Spf : ⁨None (mailfrom) identity=mailfrom;
NOTE : client-ip=; helo=mailout10.t-online.de;
NOTE : Received : ⁨from
NOTE : by cmpweb28.aul.t-online.de with HTTP/1.1
NOTE : (Lisa V7-5-8-0.0 on API V5-51-3-2);
NOTE : Received : ⁨from
NOTE : by spica03.mgt.mul.t-online.de:8080; NOTE : URL https://geniusinn.shop/
NOTE : +81354561601
NOTE : +81337805239
NOTE : newgtld@gmoregistry.com

Friday, September 8, 2023

Your Package Delivery (Scam)


I am writing you this email to bring to your attention that you have a package with us and we want to know when you will be available to receive it. Kindly reply back to us as soon as you receive this message.


Mr Patrick Clackson
Information Team
RoyalLink Cargo
And Logistics Company

Scam analysis :

NOTE : patrickclacksondelivery@outlook.com
NOTE : info@mail.com
NOTE : Your Package Delivery
NOTE : Received : ⁨from [] by simbioms.org with esmtpsa

Wednesday, August 23, 2023

Ne laissez pas les cybercriminels vous voler votre vie (Spam)

Cher ami,

Le mois dernier, j'ai fait une découverte qui a changé ma vie.

J'ai découvert que les cybercriminels ont été responsables de la plus grande fuite de données personnelles de l'histoire.

Des millions d'internautes ont été touchés par cette attaque, dont des milliers ont perdu leurs informations bancaires et leur sécurité financière.

Mais j'ai aussi découvert qu'il existe une solution.

Un service en ligne qui permet aux utilisateurs de vérifier si leurs données personnelles ont été compromis et qui leur donne les moyens d'assurer leur protection.

C'est une solution simple, pratique et efficace pour vous aider à prendre les précautions nécessaires pour protéger vos données personnelles et vos comptes en ligne.

Alors, si vous avez peur pour la sécurité de vos données personnelles, n'attendez plus et vérifiez-les aujourd'hui.

Entrez simplement votre adresse e-mail dans le formulaire ci-dessous et découvrez si vos données personnelles ont été compromis.

Se désabonner

Email analysis :

NOTE : Received : ⁨from 9hh00.yaatjam.info (ip167.ip-51-77-233.eu [])
NOTE : Return-Path : bounce@yaatjam.info⁩
NOTE : Pass (mailfrom) identity=mailfrom;
NOTE : client-ip=; helo=9hh00.yaatjam.info

Extractions :

DOM : ip167.ip-51-77-233.eu
IP :
LINK : https://www.kqzyfj.com/click-100942630-15494798
LINK : https://www.kqzyfj.com
LINK : https://legal.epsilon.com/us/privacy
LINK : https://yaatjam.info/
LINK : https://yaatjam.info/login
LINK : https://yaatjam.info/breach/
LINK : https://yaatjam.info/breach/?campaignid=cid*&userid=*
LINK : https://yaatjam.info/breach/privacy.php

Conclusions :

NOTE : Construction de fichiers PII.
NOTE : Inaction de la société OVH. (
NOTE : Utilisation de nombreux domaines.
NOTE : Rentablisation via des liens AFF.

Tuesday, August 22, 2023

Don't miss your unsettled payment. Complete your debt payment now. (BTC Scam)

Hi there!

I regret to inform you about some sad news for you.
Approximately a month or two ago I have succeeded to gain a total access to all your devices utilized for browsing internet.
Moving forward, I have started observing your internet activities on continuous basis.

Go ahead and take a look at the sequence of events provided below for your reference:
Initially I bought an exclusive access from hackers to a long list of email accounts (in today's world, that is really a common thing, which can arranged via internet).
Evidently, it wasn't hard for me to proceed with logging in your email account (*@*).

Within the same week, I moved on with installing a Trojan virus in Operating Systems for all devices that you use to login to email.
Frankly speaking, it wasn't a challenging task for me at all (since you were kind enough to click some of the links in your inbox emails before).
Yeah, geniuses are among us.

Because of this Trojan I am able to gain access to entire set of controllers in devices (e.g., your video camera, keyboard, microphone and others).
As result, I effortlessly downloaded all data, as well as photos, web browsing history and other types of data to my servers.
Moreover, I have access to all social networks accounts that you regularly use, including emails, including chat history, messengers, contacts list etc.
My unique virus is incessantly refreshing its signatures (due to control by a driver), and hence remains undetected by any type of antiviruses.

Hence, I guess by now you can already see the reason why I always remained undetected until this very letter...

During the process of compilation of all the materials associated with you,
I also noticed that you are a huge supporter and regular user of websites hosting nasty adult content.
Turns out to be, you really love visiting porn websites, as well as watching exciting videos and enduring unforgettable pleasures.
As a matter of fact, I was not able to withstand the temptation, but to record certain nasty solo action with you in main role,
and later produced a few videos exposing your masturbation and cumming scenes.

If until now you don't believe me, all I need is one-two mouse clicks to make all those videos with everyone you know,
including your friends, colleagues, relatives and others.
Moreover, I am able to upload all that video content online for everyone to see.
I sincerely think, you certainly would not wish such incidents to take place, in view of the lustful things demonstrated in your commonly watched videos,
(you absolutely know what I mean by that) it will cause a huge adversity for you.

There is still a solution to this matter, and here is what you need to do:
You make a transaction of $1490 USD to my account (an equivalent in bitcoins, which recorded depending on the exchange rate at the date of funds transfer),
hence upon receiving the transfer, I will immediately get rid of all those lustful videos without delay.
After that we can make it look like there was nothing happening beforehand.
Additionally, I can confirm that all the Trojan software is going to be disabled and erased from all devices that you use. You have nothing to worry about,
because I keep my word at all times.

That is indeed a beneficial bargain that comes with a relatively reduced price,
taking into consideration that your profile and traffic were under close monitoring during a long time frame.
If you are still unclear regarding how to buy and perform transactions with bitcoins - everything is available online.

Below is my bitcoin wallet for your further reference:1HTxR4q4vxQKxtCXB95tdSC5xtsa2uPcMP

All you have is 48 hours and the countdown begins once this email is opened (in other words 2 days).

The following list includes things you should remember and avoid doing:
There's no point to try replying my email (since this email and return address were created inside your inbox).
There's no point in calling police or any other types of security services either. Furthermore, don't you dare sharing this info with any of your friends.
If I discover that (taking into consideration my skills, it will be really simple, because I control all your systems and continuously monitor them) -
your nasty clip will be shared with public straight away.
There's no point in looking for me too - it won't result in any success. Transactions with cryptocurrency are completely anonymous and untraceable.
There's no point in reinstalling your OS on devices or trying to throw them away. That won't solve the issue,
since all clips with you as main character are already uploaded on remote servers.

Things that may be concerning you:
That funds transfer won't be delivered to me.
Breathe out, I can track down everything right away, so once funds transfer is finished,
I will know for sure, since I interminably track down all activities done by you (my Trojan virus controls all processes remotely, just as TeamViewer).
That your videos will be distributed, even though you have completed money transfer to my wallet.
Trust me, it is worthless for me to still bother you after money transfer is successful. Moreover, if that was ever part of my plan, I would do make it happen way earlier!

We are going to approach and deal with it in a clear manner!

In conclusion, I'd like to recommend one more thing... after this you need to make certain you don't get involved in similar kind of unpleasant events anymore!
My recommendation - ensure all your passwords are replaced with new ones on a regular basis.

Scam analysis :

NOTE : Spoofing
NOTE : Received : ⁨from 58-27-133-42.wateen.net (unknown [])
NOTE : BTC / 1HTxR4q4vxQKxtCXB95tdSC5xtsa2uPcMP

Tuesday, June 27, 2023

Can you be trusted??

My sincere greetings to you.

It's my pleasure to write to you, I came across your profile on the Google search email database. I am Mrs. Melissa Dawson, a widow to the late Mr Les Dawson. I am 65 years old, I was a missionary but I stopped my missionary work when I discovered I am having a breast cancer disease from all indication my condition is really critical and it is quite obvious that I won't live more than Four month, According to my doctor report this is because the Cancer disease has gotten to a very bad stage. I want you to answer the following questions,

  1. Are you a God fearing person ?
  2. If I donate 5 Million United States Dollars to you, will you be able to utilize it wisely to achieve my heart's desire of supporting poor people around you ?
  3. Will you open a charity foundation in the name of my husband and I ?

I really need you to use the funds to help the poor which is very essential and also the widow and cancer patient as me. I know this is hard, and it takes a very strong heart to get this done, but you should keep this saying in your heart, I am like Moses in the Bible, He came to the Red Sea and Pharaoh behind him and no way to turn but God delivered him all by a miraculous deliverance. It will be a miracle from God to be able to help all the dear people God has laid on our hearts, as you have been laid on my heart for a period of time. to proceed with the charity work for the less privileged. I cannot continue to do all these by myself any more. I strongly desire to reach out to the poor and needy people, but I would prefer to continue this with the assistance of a kind person.

This is why with God in my heart I contact you and I want you to contact me so we can be in contact with all the poor souls out there. Give new lives, hopes, and days. I have come to find out that wealth acquisition without Christ is vanity and I hope you will agree with this also. I will be praying hard that Satan will not stop this effort.

Do contact me and I will tell you more of what you wish to know. Note that the Lord has a great reason for contacting me and I will be very grateful if you will heed to the call of the Lord by replying to me.

Yours in Christ,

Remember me in your daily prayers.

Mrs. Melissa Dawson.

Email analysis :

NOTE : melissa.dawson11oo@gmail.com

Friday, March 10, 2023

From Reverend Sister Margareth Johnson.

Dear Beloved,

May the peace of the Lord be with you.

I am Reverend Mary Thomas from St Paul's Cathedral London,United Kingdom.

Did you receive the email I sent you last week with regards to your willed fund from Late Rev. Father William Ferdinand of St Paul's Cathedral London,United Kingdom.

Remain bless as i wait to here from you via my private email ( sister.margaretjs@yandex.com ).

Reverend Margareth Johnson.

Email analysis :

NOTE : sister.margaretjohnson@aol.com
NOTE : test@sask-erms.ca
NOTE : mx.cmbrancusi.ro
NOTE : Received : ⁨from []
NOTE : (unknown []) by mx.cmbrancusi.ro

Monday, October 24, 2022

Project #...

I just want to apologize for any inconvenience this email may cause you. I got your email details on a B2B marketing site, I'm interested in establishing and operating a very lucrative business as a means of achieving a profitable and successful business with you.

I'm actually seeking a potential partner in other to execute the business as it involves an extensive profit. I'm willing to offer 50% of the profit that will be made from the business. Do revert back to me for more details if you are interested in my offer.

Look Forward to your Positive Response
Thanks & Regards,

Email analysis :

NOTE : fengh2989@gmail.com
NOTE : kristinelouhongwei@gmail.com
NOTE : (smtp.cablenet.com.ar)⁩
NOTE : ⁨from ec2-3-67-76-212.eu-central-1.compute.amazonaws.com
NOTE : ([]:50266 helo=gmail.com

Settle your debt in order to avoid additional fees. (BTC Scam)

Hi there!
Have you seen lately that an email sent by me to you from your own account?
Yeah, that merely concludes that I have gained a complete access to a device of yours.

For the past several months, you were under my close observation.
Still surprised how could that happen? The thing is, your device was infected by a malware from one of adult websites that you lately accessed.
It may seem complicated to you, nevertheless let me try to clear it out to you.

With aid of Trojan Virus, I gained full access to your PC as well as any other device in your possession.
That merely denotes that I am able to see you whenever I like just by turning on the camera and microphone in your PC, while you don't even know about that.
Moreover, I have also obtained your entire contacts list, including your entire correspondence.

Indeed, you wonder, "But my PC is equipped with a valid antivirus, so how could that be possible?
Why haven't I seen any warning?" To be frank, the reply is very straightforward: malware of mine is based on drivers,
whose signatures get updated on 4-hourly basis, causing it to become simply untraceable, and as result leaving your antivirus idle.

I got a video showing the way you are jerking off on my left screen, while on the right screen there is a video that you watched during your masturbation session.
Still unclear how bad that could become? One mouse click is enough to send that video to your entire list of social network, as well as e-mail contacts.
In addition, I can as well provide access to your entire e-mail correspondence as well as messengers that are currently in your use.

All you need to do to in order to avoid that from occurring - transfer $1550 (USD) in Bitcoin equivalent to my Bitcoin address
(if you still don't know how that could be done, just use your browser and key-in: "Buy Bitcoin").

Below is bitcoin address (BTC Wallet) of mine: 16trAbrqfAkfpN2zoJ2gQQdsYebkspgHpQ

Upon getting evidence of payment from your side, I will instantly proceed with removing those videos, and that is all, you won't ever hear about me anymore.
You are left with 2 days (or 48 hours) to perform that transaction.
After opening this e-mail, I will get a notice, which will automatically start my timer countdown.

Any attempts to complain to authorities won't be of any use to you, because this e-mail is simply untraceable, just like Bitcoin ID of mine.
I was working on this for quite an extended period of time; so do not even think that I can make a mistake.

In event that, I occasionally discover that you shared this message with anyone else,
I will straight away proceed with making your video public as stated earlier.

Good luck.

Email analysis :

NOTE : client-ip=;
NOTE : helo=pc-143-71-46-190.cm.vtr.net

Friday, October 21, 2022

You have outstanding debt. (BTC Scam)

Hello there!

Unfortunately, there are some bad news for you.
Around several months ago I have obtained access to your devices that you were using to browse internet.
Subsequently, I have proceeded with tracking down internet activities of yours.

Below, is the sequence of past events:
In the past, I have bought access from hackers to numerous email accounts (today, that is a very straightforward task that can be done online).
Clearly, I have effortlessly logged in to email account of yours (*@*).

A week after that, I have managed to install Trojan virus to Operating Systems of all your devices that are used for email access.
Actually, that was quite simple (because you were clicking the links in inbox emails).
All smart things are quite straightforward. (^-^)

The software of mine allows me to access to all controllers in your devices, such as video camera, microphone and keyboard.
I have managed to download all your personal data, as well as web browsing history and photos to my servers.
I can access all messengers of yours, as well as emails, social networks, contacts list and even chat history.
My virus unceasingly refreshes its signatures (since it is driver-based), and hereby stays invisible for your antivirus.

So, by now you should already understand the reason why I remained unnoticed until this very moment...

While collecting your information, I have found out that you are also a huge fan of websites for adults.
You truly enjoy checking out porn websites and watching dirty videos, while having a lot of kinky fun.
I have recorded several kinky scenes of yours and montaged some videos, where you reach orgasms while passionately masturbating.

If you still doubt my serious intentions, it only takes couple mouse clicks to share your videos with your friends, relatives and even colleagues.
It is also not a problem for me to allow those vids for access of public as well.
I truly believe, you would not want this to occur, understanding how special are the videos you love watching, (you are clearly aware of that) all that stuff can result in a real disaster for you.

Let's resolve it like this:
All you need is $1450 USD transfer to my account (bitcoin equivalent based on exchange rate during your transfer), and after the transaction is successful, I will proceed to delete all that kinky stuff without delay.
Afterwards, we can pretend that we have never met before. In addition, I assure you that all the harmful software will be deleted from all your devices. Be sure, I keep my promises.

That is quite a fair deal with a low price, bearing in mind that I have spent a lot of effort to go through your profile and traffic for a long period.
If you are unaware how to buy and send bitcoins - it can be easily fixed by searching all related information online.

Below is bitcoin wallet of mine: 17kmbhxxMsrFhmQNim1jbjD6AeBUQ2SbYp

You are given not more than 48 hours after you have opened this email (2 days to be precise).

Below is the list of actions that you should not attempt doing:
Do not attempt to reply my email (the email in your inbox was created by me together with return address).
Do not attempt to call police or any other security services. Moreover, don't even think to share this with friends of yours. Once I find that out (make no doubt about it, I can do that effortlessly, bearing in mind that I have full control over all your systems) - the video of yours will become available to public immediately.
Do not attempt to search for me - there is completely no point in that. All cryptocurrency transactions remain anonymous at all times.
Do not attempt reinstalling the OS on devices of yours or get rid of them. It is meaningless too, because all your videos are already available at remote servers.

Below is the list of things you don't need to be concerned about:
That I will not receive the money you transferred.
- Don't you worry, I can still track it, after the transaction is successfully completed, because I still monitor all your activities (trojan virus of mine includes a remote-control option, just like TeamViewer).
That I still will make your videos available to public after your money transfer is complete.
- Believe me, it is meaningless for me to keep on making your life complicated. If I indeed wanted to make it happen, it would happen long time ago!

Everything will be carried out based on fairness!

Before I forget...moving forward try not to get involved in this kind of situations anymore!
An advice from me - regularly change all the passwords to your accounts.

Email analysis :

NOTE : client-ip=; helo=client-75-0.sulcatel.com.br

Nous avons détecté des opérations inhabituelles (Phishing Crédit Mutuel)

Cher client,

Nous avons détecté des opérations inhabituelles se produisaient sur votre espace client, si vous n'êtes pas à l'orgine de ces opérations, connecter vous à votre espace afin de les annuler.

Pour accéder à votre espace client en ligne cliquez sur le lien ci-dessous:

Mon espace client.

Ceci est un message automatique généré par nos serveur, vous pouvez l'ignorer si vous êtes à l'origine de ces opérations.

Service Crédit Mutuel

Email analysis :

NOTE : www-data@webmail.unisannio.it
NOTE : ⁨ ([])⁩
Phishing analysis :
NOTE : https://musing-jennings.143-198-174-17.plesk.page/mmm/mwed/wdrz/
NOTE : Hacked Plesk interface.

Tuesday, August 16, 2022

Business Proposal (Scam)

Greetings contact,

I'm Alexander Ryan a Research Assistant of the Research and Development Department working with Torrent Laboratory And Pharmaceuticals Ltd UK; One of the leading Bio Pharmaceutical Companies here in England.I'm looking for a reliable businessman/individual in your region to represent my company in sourcing some of our basic raw material used in the manufacturing of high quality Anti-Viral Vaccines, Cancer treatment and other life saving Pharmaceutical Products.

contact This may not be your area of specialization but it will be another income generating business out of your specialty. This is because Our company is yet to locate any seller to buy from, however, I have been able to discover a local dealer who can supply us with this product. He is selling at a cheap rate , which is far cheaper than our previous purchases.

My director is not yet aware that I have found a new seller. Now THIS IS MY PROPOSAL TO YOU; I want you to stand in as a new local dealer from your country and I will introduce you to our company. The reason for this is because I don't want my company to have direct contact with the local agent that sells this herbal oil extract very cheap. This will enable us to work together as partners and make real cool profits. You as the local seller will supply our company at a good rate which I will inform you later when we are in agreement and this will attract the attention of our company director to buy from you as against the previous rate . You will be amazed with our total profit .

I will give you more specific profit details when I receive feedback from you if you are interested.

Alexander Ryan,
Research & Dev Dept
Torrent Laboratory And Pharmaceuticals Ltd UK

Email analysis :
NOTE : Torrent@laboratory.co.uk
NOTE : Received : ⁨from srv1cp.webhostingbeograd.rs (srv1cp.webhostingbeograd.rs [])

From Mr. Chusak Jaidee. (Scam)

Good day.

I sent you an email yesterday, did you receive it? It is a very important message, anyway reply back to confirm that you already got my message to enable me give you more details..
Best Regards.

Mr. Chusak Jaidee

Email analysis :

NOTE : mrchusakjaidee48@gmail.com
NOTE : jmrchusak@gmail.com
NOTE : client-ip=;⁩

Thursday, June 30, 2022

UMF/C19ZA/UK67P! (Scam)

You have been compensated with the sum of $830,000 USD (Eight Hundred & Thirty Thousand United States Dollars) by UNESC with iV no. UMF/C19ZA/UK67P! You are therefore advised to urgently email: consultantoffice76@gmail.com for more information and clarification on how to receive your compensation fund.

Email analysis :

NOTE : orifhac@gmail.com
NOTE : consultantoffice76@gmail.com

Monday, June 27, 2022

check our e-scooter again (Scam)


We are a manufacturer and distributor of electric scooters and electric bikes. Our products are exported to over 40 nations and regions worldwide, including North America, the United States, Europe, and the Middle East. We have warehouses in the EU and the US for quick delivery. We have steadily achieved market reputation in recent years as a result of our high-quality manufacturing and solid financial condition. Our main advantages are high quality and quick delivery. We have a skilled R&D staff and rigorous QC process testing. We have never stopped innovating fresh ideas in the consumer electronics sector.

Details about this electric scooter:
350W motor power
8.5-inch tire size
Disc brakes are used.
Maximum speed: 30 km/h (with app )
25-28 kilometers (km)
Climbing Gradient: 15°
Load Capacity: 264lbs/120kg
36V 7.5Ah battery capacity
Time to charge: 3-6 hours
Size when folded: 42*17*19inch/108*43*50cm
42*17*44inch/108*43*112cm product dimensions
Body Composition: Iron Aluminum
IP54 protection rating
Yes, it is foldable.
The color is black.
12 kg net weight
15kg gross weight
CE, UL certification

The front and rear wheels have 8.5-inch tires for maximum comfort even on bumpy roads.
It folds quickly and easily in 3 seconds (folded size: 42*17*19 inches, unfolded size: 42*17*44 inches). It is portable and may be readily kept in car trunks, elevators, subways, and other small locations.

If you'd like to purchase one or two of our e-scooters. Please respond to our email with your address and we will have the shipment ready for you.

Email analysis :

NOTE : corey@2n2m.com
NOTE : coreypa@slomoswag.com
NOTE : from smithtoolsupply.com (earsview.com [])

following up regarding our projector (Fraud)

How are things going for you?

This sort of projector is now available for usage in our warehouse.
I'll write you a more detailed introduction to the product and send it to you via email.

Highlights: 8500 Lumens HD Video Projector: The brightness of the projector is two to three times that of comparable tiny projectors. Because of the extremely vivid image it offers for films and movies, which supports resolutions up to 1080P, you can spend quality time with your family or friends at home or outside.

The projector's viewing size extends from 40 to 200 inches, and the projection distance may be adjusted from 1.2 to 6.5 meters. Despite its outstanding projection effect, the design is still portable, and the body size is around the same as that of a journal.

2.4G Wifi Connection & Bluetooth 5.0 Function Because the projector has a bluetooth function, you can wirelessly connect your favorite bluetooth speaker to it at any moment. Furthermore, the projector features a 2.4G wifi connection. An ultra-fast 2.4G WiFi connection allows for online gaming as well as uninterrupted movie watching. Wireless screen sharing allows you to stream all of your favorite entertainment from your iOS or Android smartphone and enjoy it on another screen.

The term "Multimedia Connection Support" refers to the projector's ability to connect to a variety of devices, including USB, HDMI, AV, SD, and audio. Connecting it to your smartphone, TV Stick or Box, video game console, personal computer, tablet, laptop, DVD player, TF card, or USB Sticks is straightforward.

All of the company's goods are backed by "Expert After-sales Services," a 1-year repair warranty, and lifetime professional technical support. Our mission is to give outstanding home theaters to families all over the world, as well as the best value solutions for giant-screen projection. We are optimistic that everyone will soon understand the attractiveness of large screens and projection technology.

Pricing for our projectors:
A single projector will set you back $259,90.
Each of the two projectors will cost $239.90.

Would you like to take a projector today?
Just give us your localtion details, and we will arrange shipment for you.

Email analysis :

NOTE : jeff@eharbour.net
NOTE : Received : ⁨from slautogallery.com (g-2solutions.com [])

Seeking Investment Opportunity (Scam)


Re: Seeking Investment Opportunity

We have come across your name and email address and express our interest in your business.

As fund managers, we have been appointed to allocate funds for a family office whose principal has passed away and one of his surviving family members has given us the mandate to invest some of his funds left on deposit with our firm.

Funds are available in the nine-figure region.
The objective is to achieve a higher return than institutional banking offers in order to have the funds safeguarded against inflation.

To make an informed decision to proceed, we will need to receive further information from you. If you have a business plan, executive summary, or prospectus that you can send to us, that would be a good place to start.

If this is of interest to you, please contact the undersigned by return email, so that we can move forward.

Looking forward to hearing from you.

Sincerely yours,
Wealth Portfolio
Email: wealthportfolio2@gmail.com

Email analysis :

NOTE : saya.afiq9715@yahoo.com
NOTE : wealthportfolio2@gmail.com
NOTE : annelise.olsen0823@gmail.com
NOTE : client-ip=

Friday, May 13, 2022


Dear: Sir,

I am aware that this letter had come to you as a surprise as we had not met before or handled any business deal in the past. Nevertheless, I have contacted you with genuine intentions, and I hope I can trust you with this Inheritance opportunity which I explain below.

My name is MR. VAN GURT, an account manager with TD Canada Trust Bank, Toronto, Ontario, Canada. I retrieved your contact address in my search for the next of kin to a deceased customer of our bank MR. HENRY CRAIS, a citizen of your country, lived and died in Toronto from Cardiac Arrest in 2012. Unfortunately, this customer died intestate, leaving his bank account with an open beneficiary status. All efforts made by our bank to locate his relatives have been unsuccessful, so I decided to write to you as I have monitored this account in the bank for almost ten years now and no one has come forth with any claim. I want to present you to our bank as his next of kin to claim this dormant account worth USD 10.764 Million (Ten Million Seven Hundred Sixty Four Thousand US Dollars).

You will apply to the bank as an extended relative to the deceased customer while I work from the inside to ensure all needed information and evidence is provided to you to back up your claim. The account has an open beneficiary status, which is why I have contacted you to come forth and claim the funds as the next of kin and beneficiary. Since he is from your country, it is easy for you to become his official next of kin. If we do not claim the funds now, the funds would be reverted to the system as the unclaimed estate at the expiration of a 10-year dormancy period.

I assure you that this transaction will be handled under due inheritance procedures, and every necessary legitimate arrangement will be put in place to make you the real beneficiary of the inheritance funds. It also requires all confidentiality at this stage, and I believe you are ready to keep this discreet until you can claim the funds from the bank. Once the funds are released to you, they will be shared between the two of us.

Please send your response to my email: vangurt40@gmail.com indicating readiness to proceed with this transaction. Then I will give you more details, and we shall have an in-depth discussion regarding the successful completion of this transaction.
I await your response.


Email analysis :

NOTE : hudak171@gmail.com
NOTE : vangurt40@gmail.com
NOTE : ⁨ ([])⁩

Thursday, January 27, 2022



I am sure this mail would be coming to you as a surprise since we have never met before and you would also be asking why I have decided to chose you amongst the numerous internet users in the world. I saw your profile on the Internet, which has made me accomplish my request.

I am Mrs. Caroline Freund, the bill and exchange manager of Cahoot Finance UK. In my department, I discovered an abandoned sum of USD 8,000,000.00. (Eight Million USD), on account of our foreign customers (MR Paul Louis Halley) who died along with his wife in 2003 in a plane crash.

This dead client late Paul Louis Halley has the sum of $ 8,000,000.00 in his bank account with my bank since 2003 until today.

After going through the late Paul Louis Halley file in the bank, I discovered that he did not have next of kin or the account beneficiary in his account opening documents.

Therefore I now sincerely and consciously seek your consent to present your data as the next of kin / Will Beneficiary to the deceased so that the total value of $ 8,000,000 will be transferred to you, which will be shared with this percentage ratio of 60 % to me and 40% to you.

According to our Banking Act of 1990, if the money is unclaimed after a period of eighteen (18) years, it will be a government property. Therefore, I have planned to upload your data in our banking system as a Next of Kin of the late Mr. Halley because I have tried my best to locate any of his family members but all such efforts were not successful.

I check this account for over 7-8 years and no one has ever come forward to claim the fund. But I've found that (Late Mr. Paul Louis Halley) has no next of kin or the account beneficiary before he died. So, after going through his file in our bank. I sincerely and consciously seek your consent to present your data as the next of kin / Will Beneficiary to this account, so that the total value of USD 8,000,000.00, would be transferred to any bank account of your choice for our mutual benefit. I'm going to share the money in the ratio of 60% to me and 40% to you.

When you contact me, I will give you more information.

Mrs. Caroline

Email analysis :

NOTE : mrs.caroline.freund@indamail.hu
NOTE : info@havensecuresolutions.co.ke
NOTE : client-ip=

Wednesday, January 26, 2022

REPORT (Fraud + Email leak)

what even is that

Email analysis :

NOTE : elmaildellolaquel@gmail.com
NOTE : client-ip=;⁩
Email leak (312 emails) :

no_reply@paypalinfoo.com, alexsullivan123@gmail.com, samuelafletcher420@gmail.com, reverendhaywoodjablomay@gmail.com, jakem7013@gmail.com, raaraaross@gmail.com, 2max4533@gmail.com, buttonjohnathan@gmail.com, shrekfetus@gmail.com, oldiesaregoodies79895@gmail.com, mariolacromoix@gmail.com, masterdick68@gmail.com, richardrider42069@gmail.com, ottotowner6@gmail.com, brasdenbr@gmail.com, stiab.macs@gmail.com, cstoops416@gmail.com, mooremichelle165@gmail.com, monicarice1994@gmail.com, kkonijn@gmail.com, lennontout123@gmail.com, mrkevinirvan@gmail.com, mordendennis99@gmail.com, ashleylikezdonutz@gmail.com, erzvet@gmail.com, fishermansebas@gmail.com, dtruvativ419@gmail.com, brad.holton28@gmail.com, lilz.helly@gmail.com, tinnedmeats@outlook.com, aidan.olf@gmail.com, hotdogsaregoodforyou@gmail.com, red.hood.638@gmail.com, oldmanhotrods55@gmail.com, humanjiggg@gmail.com, rolf.imholze@gmail.com, wallyrocher@outlook.com, parkarnabeel1@gmail.com, ligmab944@gmail.com, esmupimpis@gmail.com, plinkiplinkidoodah@gmail.com, minakshisnarma@gmail.com, letthegamesbegin81@outlook.com, michaeldale722@gmail.com, tehalolea@icloud.com, afisc123@gmail.com, 838max@gmail.com, jw3608476@gmail.com, fletchertheo40@gmail.com, hmikey013@gmail.com, d.kucukkose@gmail.com, ben.czhode@gmail.com, Gouda Deli deligouda96@gmail.com, cownews@outlook.com, scottross1337@gmail.com, fishyg81@gmail.com, josephmawthur@gmail.com, rickthebeanman69@gmail.com, codydaniels086@gmail.com, ashlynicolephoto@gmail.com, marko.vanpolo101@gmail.com, lennycooper101@gmail.com, roma1roma2010@outlook.com, ramish.celery@gmail.com, js7090221@gmail.com, Hugh Janus hugh3802@gmail.com, haroldnutsach@gmail.com, amandas6322@outlook.com, alsi.beats@gmail.com, scottstorch1@gmail.com, bofasaur@gmail.com, sarahchan611@outlook.com, zambrotta.marco@gmail.com, inbitts22@gmail.com, rufusvonsprinkletrousers@gmail.com, parisonlymb@gmail.com, donwhisker69@gmail.com, williamsbingo1945@gmail.com, glockradio2003@gmail.com, thomasarnoldhenry@gmail.com, thaddiusdagenais@gmail.com, greghansen420@outlook.com, anya8xe@gmail.com, johnmcdanielson1987@gmail.com, bhero1484@gmail.com, njenkin4@gmail.com, brattenfellh@gmail.com, bennyscott1991@gmail.com, lilgracel803@gmail.com, hughsexton7@gmail.com, the.real.ericb76@gmail.com, pamiat.merkuria.0607@gmail.com, osmananila@gmail.com, hugo.hundevold@gmail.com, seancambridge1955@gmail.com, johnbsmith1122@gmail.com, mknulladigsjalv@gmail.com, efaulkner236@gmail.com, mindyourz85@gmail.com, dylanlexie1@gmail.com, ioguestlist@gmail.com, bloostashawkezayuz@gmail.com, kelly.litoris@gmail.com, zaraax3@gmail.com, timothy.noreplyteam@gmail.com, benjsavage@gmail.com, philipsnicolas1@outlook.com, elicias317@gmail.com, paul.websitedesigner@gmail.com, jason.scholtus@outlook.com, s.slobodo@gmail.com, beverleyfwilcox@gmail.com, corvellmorningstar@gmail.com, adriandoherty420@gmail.com, pythons.javascript@gmail.com, mikelid7@gmail.com, micheal.t.cart@gmail.com, elainazalinsky69@gmail.com, larrybaines478@gmail.com, stevecaroll86@gmail.com, owen.siegfried57@gmail.com, langitz@gmail.com, maccerbilding7@gmail.com, desi20402@gmail.com, bus2restin@gmail.com, jruperts999@gmail.com, frankyjones11@gmail.com, jamestramosblue@gmail.com, sexymansix@gmail.com, anatoly.egorychev@gmail.com, bobjekoson@gmail.com, superviseur.daniel.roltmit@gmail.com, khajiitcow21@gmail.com, timmyyou4@gmail.com, francebean75@gmail.com, errone1011@gmail.com, andersmoen06@gmail.com, bazzlem8@gmail.com, mmofficemail@gmail.com, voidstruck@gmail.com, justinburns538@gmail.com, hertzvrental@gmail.com, sjorsottjes@gmail.com, brainofkeios@gmail.com, sonnymccree73@gmail.com, drtmcnoland@gmail.com, bukhariabaasi@gmail.com, wfallferit@outlook.com, johster1@gmail.com, jeffreycosgarden@gmail.com, crypticbuisnessacc@gmail.com, als17339@gmail.com, crystal.phobitex@gmail.com, johntillman202@gmail.com, sophiawright.indusmusic@gmail.com, kaledrashi@gmail.com, thomasdegrutin@gmail.com, contact.squaredtv@gmail.com, miketendersonpayday2@gmail.com, ishumedical@gmail.com, david.mendyk@gmail.com, billmathers98@gmail.com, wee.mad.shug@gmail.com, scabbedanus@gmail.com, jpcallagham@gmail.com, deeoh1999@gmail.com, r.blankwell@gmail.com, loveb3603@gmail.com, chg30mail@gmail.com, julie35regan@gmail.com, timj9492@gmail.com, kaiventura123@outlook.com, veronicalevy15@gmail.com, chrisransom1955@gmail.com, amogusussu@gmail.com, brownsk050@gmail.com, amyjohnsons831838@gmail.com, ameliastone123456789@gmail.com, lizzlovezcatz@gmail.com, getcatch611@gmail.com, jonathon.fromme@gmail.com, serinesopoth@gmail.com, trichardian@gmail.com, ppcox13@gmail.com, ratflipperalt1@gmail.com, felix.levins@outlook.com, diplomat979@gmail.com, bobbymiller1579@gmail.com, anastasialacognzi@outlook.com, austdyno@gmail.com, repatriation.pn@gmail.com, hughjainus53@gmail.com, rogermakke83@gmail.com, 3jalbi.global@gmail.com, throwawaybutmine@gmail.com, dr.eday1271@gmail.com, guntermacdougall@gmail.com, richardorafice@gmail.com, mohamet68@gmail.com, themrjohhnysins@gmail.com, jonasvanschaik@gmail.com, yanyipeng2015@gmail.com, darklink3@gmail.com, gyamfileslie@gmail.com, g.banhojen@gmail.com, chuckufarlly6969@gmail.com, ctv.sys@gmail.com, davidpacey@gmail.com, james.d.trajan@gmail.com, tombrandt300@gmail.com, reynoldkobe@gmail.com, david.krappenschitz44@gmail.com, tagerollings07@gmail.com, jbaysidaho96@gmail.com, joedhayen@gmail.com, juliusalston1990@gmail.com, hugh1mungous1@gmail.com, joeburke790@gmail.com, vinnywalker19@outlook.com, jhonfredriksson@gmail.com, dianahunt698@gmail.com, isola.kaunsgaard@gmail.com, qscvbnzero@gmail.com, chetakvatphinh@gmail.com, sir.bit.cam@gmail.com, deedoodiddle@gmail.com, mybigfoottoe@gmail.com, jamesralphy3@gmail.com, james20012009@gmail.com, willienaylor@outlook.com, maazalfakhar@gmail.com, iamnoone247742@gmail.com, watmore.john83@gmail.com, projectstuffzz@gmail.com, creepyguitaremails@gmail.com, jonh165nvd@gmail.com, thomasjames124y@gmail.com, trollolol2day@gmail.com, jamescpaulson@gmail.com, firstmoneyboy@gmail.com, coddin.battah@gmail.com, christopherfarsee@gmail.com, washamasheen@gmail.com, connor.henderson@gmail.com, chapmanoscar22@gmail.com, hovcantcatchme@gmail.com, jerryhapley@gmail.com, dorothybeatriceyaeger@gmail.com, charlienorton714@gmail.com, johansmit377@gmail.com, pennington007@gmail.com, testindustries@gmail.com, willenamackie@gmail.com, johndavis9119@gmail.com, toastouh@gmail.com, cashappcontact@gmail.com, sincloretem@gmail.com, b.j.gobbledick@gmail.com, jones.chad1973@gmail.com, dmmgoldcoast@gmail.com, johnrogersmillionare@gmail.com, frei.malaquias@gmail.com, djangou007@gmail.com, karlluger3000@gmail.com, felixprice72@gmail.com, practices964@gmail.com, oldnovacrobin@gmail.com, b.mathyous@gmail.com, dammyone2@gmail.com, fratellirodati@gmail.com, doc.ndf@gmail.com, hope.forthebest442@gmail.com, ratbarthegreat1@gmail.com, matthewclarkinson@gmail.com, radicaldemocrat22@gmail.com, 4ruanes@gmail.com, hololivemoment@gmail.com, hcus1998@gmail.com, johnathanmonroe372@gmail.com, wewantstit@gmail.com, ericaeigh@gmail.com, joshuaaf1994@gmail.com, apartment.lease59@gmail.com, karenrwood13@gmail.com, thomasball1951@gmail.com, michealhawkins319@gmail.com, airsoftfattysvan@gmail.com, benjamin.dover1990.123@gmail.com, keithpb1982@gmail.com, alishapetraschi@gmail.com, jeffchadrickson@gmail.com, burtmacklinfbi111@gmail.com, annehorsens@gmail.com, allangrandt777@gmail.com, steveswarley@gmail.com, veda143@gmail.com, leiaswift@gmail.com, bensenjurton69@gmail.com, linkedinyahoo703@gmail.com, ja53860@gmail.com, ellis.dummer@gmail.com, dilly duck missdillyduck@gmail.com, richmanfatwallet2@gmail.com, dickieshagger@gmail.com, rommelghosh@gmail.com, benwilliams8475@gmail.com, ann.zanzibar@gmail.com, gary.vernadez@gmail.com, navfrom6@gmail.com, alexfisherman1972@gmail.com, ekramer045@gmail.com, dr.ugubu@gmail.com

Friday, December 3, 2021

Get back to me (Scam)

Nicholas Isaac
Nicho Law Group TD Canada Trust
Tower 161 Bay Street, 27th Floor
Toronto, ON M5J 2S1


I'm Nicholas Isaac , expert in corporate and legal claims. I'm Managing Partner at Nicholas Isaac law firm Toronto, Canada.

It may surprise you to receive this letter from me, since there has been no previous correspondence between us. I am tracing the family of our client, there is an unclaimed “permanent life insurance policy” held by our deceased client and that is the reason I am contacting you.

The transaction pertains to an unclaimed “Payable-on-Death” (“POD”) savings monetary deposit in the sum of Fifteen Million Eight Hundred and Seventy Five Thousand United States Dollars ($15,875,000) with a reputable financial institution. The policy holder was one of our clients, Mr. Robert, a real estate tycoon. He died in an auto accident nine years ago. Since his death no one has come forward for the claim and all our efforts to locate his relatives have been unsuccessful.

The insurance company code stipulates that “insured permanent policies" not claimed must be turned over to the abandoned property division of the state after 10 years.

Therefore, I ask for your consent to be in partnership with me for the claim of this policy benefit, in view of the fact that you share the same last name and nationality with the deceased. If you permit me to add your name to the policy, all proceeds will be processed on your behalf. I wish to point out that I want 10% of this money to be donated to charity while we share the remaining 90% in the ratio of 50% to me 40% to you.

This is 100% risk free as I do have all the necessary documents to process the payout in a highly professional and confidential manner. I will provide all the relevant documents to substantiate your claim as the beneficiary. This claim requires a high level of confidentiality. You should provide a reachable mobile telephone number for faster communication.

Your prompt response will be appreciated.

Nicholas Isaac

Email analysis :

NOTE : nicholas_isaac40@aol.com
NOTE : hr@globalavenue.ca
NOTE : wp.sarwatech.com: hotelnpj@siddharthabiz.com⁩
NOTE : client-ip=