Friday, January 12, 2018

The Payment

ATTENTION MY DEAR,
I SENT THIS EMAIL BEFORE TO YOU BUT I DID NOT HEAR FROM YOU AND I'M
SENDING IT AGAIN TO YOU TO INFORM YOU THAT THE CONSIGNMENT CONTAINING
YOUR INHERITANCE FUNDS $4.3MILLION WILL BE FINALLY DISPATCHED TO YOUR
DESIGNATED ADDRESS TOMORROW: SO YOU ARE REQUIRED AS A MATTER OF URGENT
TO FORWARD YOUR CURRENT DELIVERY ADDRESS.

PLEASE NOTE THAT THE SHIPPING COMPANY DOES NOT KNOW THAT THE CONTAINS
OF THE CONSIGNMENT IS MONEY SINCE IT WAS DECLARED AS FAMILY TREASURE
HENCE ON ARRIVAL TO DOORSTEP YOU SHOULD NOT ALLOW ANY DELAY IN PICKING
IT UP TO AVOID IT BEING SENT FOR SCREENING/X RAY BECAUSE I DON'T WANT
US BEING CHARGED FOR MONEY LAUNDERING /CURRENCY TRAFFICKING BY YOUR
COUNTRY OKAY.

FOLLOW UP THE MOVEMENT OF THE CONSIGNMENT AND CONTACT THE DIRECTOR IN
CHARGE OF YOUR PAYMENT MR JAMES BAYAGIDA
(jamesbayagida@outlook.com)

Email analysis :

NOTE : monicadavis0007@gmail.com
NOTE : 209.85.220.65

Tuesday, April 4, 2017

Payment

Hello,

We wish to inform you that your email as been selected and awarded the sum of 8,000,000.00 (Eight Million Pounds sterling) with reference number 77100146. This compensation funds is from the United Nations.

To receive payment Send us your full personal details to deliver your funds as soon as possible..

Gloria Peter

Email analysis :

NOTE : dgpfd30@gmail.com
NOTE : faizal.kadir@lphs.gov.my
NOTE : X-Originating-Ip : [192.168.54.14]
NOTE : X-Mailer : Zimbra 8.7.1_GA_1670 (zclient/8.7.1_GA_1670)
NOTE : Received : from mail.lphs.gov.my (mail.lphs.gov.my. [175.144.214.42])

Thursday, March 2, 2017

Cash Payment

We are here to inform you that your total Inheritance Payment of $7.8Million USD that you have been waiting for so many year is here in our office and if you wish to receive your total funds in cash, please email me as soon as possible with your full contact details so that you will receive your funds in cash to your home address with out any more delays and I will be expecting you to get back to me ASAP.

This cash was brought to us this yesterday by the cash payment office BENIN REPUBLIC, please reconfirm the below information, to avoid delivery of your cash to wrong hand.

Full names............
Parcel owner address......
Country/State........
Occupation...........
Passport/Driving License
Tel...........

We will register your cash payment and send you some document's that back up the delivery before we proceed for safety delivery of your package as soon as you reconfirm the required information for safety delivery.

Mr. Frank Edward
Director Cash Payment Office
Cell Phone: +229-9874-5558
Email:cash.fund@deliveryman.com
Email:cashpayment67@gmail.com

Email analysis :

NOTE : strothkj@lightlink.com
NOTE : cash.fund@deliveryman.com
NOTE : User-Agent : Roundcube Webmail/0.4.2
NOTE : Received : from vm1.lightlink.com (vm1.lightlink.com [64.57.176.82]) by smtp.lightlink.com (Postfix)

Monday, November 21, 2016

GOOD NEWS


Your first payment of $5000.00 has been sent today via MONEY GRAM. You are advise to Contact M.G with your full information to enable them give you Sender Name, Question and Answer to pick up your First Payment Mtcn#3600-532-391, For more information contact Pastor. Fred Wilson, Tel:(+2295157950) Email:(w.w.w.moneygramfund@gmail.com) he'll keep sending you payment until your total fund is Completed

Email analysis :

NOTE : mrssusanleo@cantv.net
NOTE : w.w.w.moneygramfund@gmail.com
NOTE : Received : from 41.86.238.51 ([41.86.238.51])


NOTE : by webmail-02.datacenter.cha.cantv.net

Tuesday, August 23, 2016

dollars

We are here to inform you that your total funds of US10.5m us dollars are now released, your first payment of US$5000.00 will be sent today. but we need to hear from you first,please it is very urgent that you will get back to us with your full inf.call director +229 99784699

Email analysis :

NOTE : union.w83@yahoo.com
NOTE : genmedb@tin.it
NOTE : Received : from (41.138.89.195)


NOTE : by webmailtin.pc.tim.it;


NOTE :



NOTE : Scam

Thursday, August 4, 2016

Your first payment of $5000 has been sent today via Western Union.

Attention My Dear, Your first payment of $5000 has been sent today via Western Union. You are advise to Contact Western Union with your full information to enable them give you Sender Name, Question and Answer to pick up your First Payment MTCN= 0716797753, For more information contact Mr. Idi Ebube, Tell: +229 68513046Email(office333uwn@yeah.net) he'll keep sending you payment until your total fund is Completed $2.5usd Best Regards, Dennis frank

Email analysis :

NOTE : office333uwn@yeah.net
NOTE : sintrajudorg@sin.sintrajud.org.br
NOTE : X-Source : /usr/bin/php
NOTE : client-ip=198.154.249.79;

Saturday, July 23, 2016

World Bank Compensation Payment.

REF/PAYMENT (USD$3,500,000.00 )
WORLD BANK COMPENSATION

GOOD DAY,

YOUR E-MAIL ID APPEARED IN OUR PAYMENT SCHEDULE LIST OF BENEFICIARIES THAT WILL RECEIVE THEIR FUNDS IN THIS SECOND QUARTER PAYMENT OF THE YEAR FOR WORLD BANK INHERITANCE AND COMPENSATION COMMISSIONING PAYMENT. THIS PAYMENT IS GIVEN TO YOU UNDER FINANCIAL COMPENSATION FOR VICTIMS OF ONLINE CRIME/SCAM AS ENDORSED BY THE NATIONAL COMPENSATION CENTER LAUNCHED AT THE 39TH G8 SUMMIT. YOUR E-MAIL ID AND OTHER DATA WAS MENTIONED BY OUR SECURITY INTELLIGENT MONITORING DATABASE VIA COMPUTER HARD-DISK, YOU ARE HEREBY ADVISED NOT TO COMMUNICATE OR DUPLICATE THIS MESSAGE TO ANYONE TO PREVENT DOUBLE CLAIMS. YOU WILL RECEIVE YOUR COMPENSATION PAYMENT THROUGH ATM CARD VALID FOR 3 YEARS FROM MONTH OF ISSUANCE; IT IS AN EURO PAY MASTERCARD AND VISA (EMV) CHIP AND PIN DEBIT CARD, USED ACROSS ALL CHANNELS INCLUDING POS, ONLINE AND THE ATM CARD CASH WITHDRAWALS IN THE CURRENCY OF THE COUNTRY YOU ARE MAKING YOUR WITHDRAWAL, MAXIMUM DAILY. CASH LIMIT IS $2,500.00 PER DAY AND POS SPENDING IS UPGRADED TO S DAILY LIMITED OF $5,000.00. FOR THE RECORDS A TOTAL NUMBER OF 1,056 BENEFICIARIES ARE ALREADY IN CONTACT WITH THEIR RESPECTIVE SETTLEMENT CENTER AND A TOTAL NUMBER Of 678 BENEFICIARIES HAVE BEEN PAID AS OF JANUARY 2016. OVER 500 ARE ALREADY AT THE LAST VERIFICATION STAGE AND WILL RECEIVE THEIR PAYMENTS WITHIN FEW DAYS.

PLEASE PROVIDE FOLLOWING INFORMATION AS STATED BELOW:

1. YOUR FULL NAME:
2. CONTACT / POSTAL ADDRESS (FOR SHIPPING OF CARD)
3. YOUR AGE:
4. OCCUPATION:
5. MOBILE TELEPHONE NUMBER:

ALL RESPONSE SHOULD BE SENT TO CHAIRMAN SENATE COMMITTEE ON FINANCE & APPROPRIATION AT THIS GIVEN ADDRESS AND QUOTE YOUR RELEASE CODE FIC/EDS/EMV/42/2016 FOR IMMEDIATE

NAME: SENATOR SAMUEL ANYANWU
E-MAIL: samuelanyanwu1010@gmail.com

PLEASE BE WARNED, THE INTERNATIONAL COMMISSIONING PAYMENT DEPARTMENT DOES NOT INSTRUCT ANY OTHER BANK OR AGENT IN THIS PAYMENT TRANSACTION, WE ADVISE YOU TO STOP ALL OTHER COMMUNICATIONS YOU ARE HAVING WITH ANY OTHER AGENT OR BANK OFFICIALS TO AVOID UNNECESSARY COMPLICATIONS.

WARM REGARDS,

MR. GEORGE EDWARD

INTERNATIONAL COMMISSIONING PAYMENT
WORLD BANK GROUP MILLBANK TOWER,
12TH FLOOR, 21-24 MILLBANK,
LONDON SW1P 4QP UNITED KINGDOM

Email analysis :

NOTE : samuelanyanwu1010@gmail.com
NOTE : mr.george-org@mail.com
NOTE : Received : from User ([41.138.176.180]) by aptlabs.co.kr

Friday, July 1, 2016

This is an important message.

Greetings,

You've won Ј950,000.00 (Nine Hundred and Fifty Thousand Pounds) on Lottoball draw number 7109-98454322710-545538 conducted this month and your payment centre is London, United Kingdom.
To receive this prize, please contact Dr. Eric Sellers on: ersellers01@hotmail.com quoting your draw number.
Congratulations

Cheers,

Maureen Stevens
Notification officer
Lottoball UK

Email analysis :

NOTE : talktostevens@outlook.com
NOTE : Maureen-S@lottoball.com
NOTE : Received : from User ([80.77.186.114]) by curtis-srv02.Curtisassoc.com

ABOUT YOUR PAYMENT

UNITED BANK FOR AFRICA NIGERIA
HEAD OFFICE ADDRESS UBA HOUSE
57 MARINA P.O. BOX 2406 LAGOS NIGERIA
PHONE:+234 8104484003
FAX: 234 674 478 8273
Greetings,

Am Frank Emeka , director cash processing unit, united bank for Africa [UBA the only bank appointed by the A.U. Members lead by President Robert Mugabe. Because of the frauds going on in West Africa countries where some innocent beneficiaries were asked to pay in advance before receiving their money owed to them. The above Africa union held meeting in Nigeria and resolve to pay all beneficiaries in cash through means of diplomatic courier service. We receive your files from international monetary fund (I.M.F.) as one of the beneficiaries. Take note:Three thousand united state dollars (usd$3,000)have been mapped out for all expenses in taxes and other doccumets that matters. Therefore, I want you to bear it in mind that your total fund will not be five million five hundred thousand united state dollars ($5.500,000.00) but five million four hundred and ninety seven thousand united state dollars ($5.497,000.00). Dear as a senior banker, controlling this cash payment now, I advise you not to waste your money by paying any body in advance again, and if you just follow my instruction, you will receive your money in three days time. Your fund will now be packaged in box and take to the diplomatic courier service for immediate shipment, I will also send the picture of the box by attachment to you to see how the money is packed, and I will send you more mails to give you more information for you to know the genuineness of this transaction. Therefore, do forward your home address and direct phone number to this E-Mailfrankemeka709@gmail.com All the documents will be sent to you if I am assured that you have stopped sending money to those fraudsters. Am waiting to hear from you with the required information of yours.

Frank Emeka
Director cash processing unit
united bank for Africa. (U.B.A)
frankemeka709@gmail.com

Email analysis :

NOTE : lnfo@uba.com
NOTE : X-Php-Script : www.adverthub.com.ng/3.php for 105.112.17.127

Friday, June 17, 2016

Your Outstanding Payment

Dear Sir,

INSTRUCTIONS TO CREDIT YOUR ACCOUNT THROUGH ONLINE/SWIFT SERVICES

We write to inform you that we have been authorized by the office of the President of European Central Bank and Federal Ministry of Finance to investigate the reasons associated with the unnecessary delay to the release of your outstanding Inheritance payment and effect your transfer from Federal Government reserve account immediately.

Your fund has been transferred to your Bank account.Kindly find attached your TRANSFER RECEIPT.Please download our TRANSFER RECEIPT attached and give us a feed back if the transfer is made to the right account.

The appointment of this Bank to correct all the anomalies surrounding your payment was further authenticated and endorsed by the World Bank delegates that visited this country recently.

With Much Love Have a wonderful day ahead.

Best regards
Javier Marín
CEO Santander Group.

CONFIDENTIALITY NOTICE: This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please contact the sender and delete this message immediately

Email analysis :

NOTE : santander.group@inretex.com
NOTE : User-Agent : Roundcube Webmail/1.1.4
NOTE : X-Antiabuse : Primary Hostname - midland.website.haus
NOTE : Received : from [::1] (port=33098 helo=inretex.com) by midland.website.haus
NOTE : Received : from dee-24.com ([68.171.209.105])

Monday, February 22, 2016

ACCRUED INTEREST PAYMENT NOTICE......///

WORLD BANK GROUP UNITED STATES OF AMERICA
42, 122 E 42nd St, New York, NY 10168, United States
ACCRUED INTEREST PAYMENT UNIT / INTELLIGENT DEPARTMENT
Phone +1-7169022295= Fax +-1 -7162427998
E-MAIL: drechoblum123@gmail.com

Attention:Beneficary

SUBJECT: ACCRUED INTEREST PAYMENT NOTICE

We the World Bank Auditors find it necessary to inform you today that a payment file was found in your name among the (378) bonefied creditors during our visitation here in New York America, on general financial annual auditing debt/transaction reconciliation for the year,2014/2015. Accrued interest occurs as a result of the difference in timing of cash flows of transaction of both the past and present; it originated from World Bank mass assisted project with accrual accounting. During the cause of the ongoing general annual auditing, we discovered an over flow funds in our financial computer data base system, in which after much careful verification on the over flow funds, we confirmed an accrued interest Sum USD$2.182 000.00 yielded through long time Contract / Lottery/ATM card and Inheritance payments under different successful and unsuccessful transactions , after dully deliberation on the interest funds by the management board, we concluded to pay off the interest funds to all enlisted beneficiary on our payment manifest booklet. Based on that note, you are required to submit your full information’s such as your address, Profession, Identification, country and direct telephone number and also your payment option of how you prefer to receive your interest payment, although we have our payment release platform, we shall process your accrued interest amount U.S.D$2.182 000.00 due in your name upon the receipt of the above requirements, we shall process your accrued interest funds as soon as you respond to this message

NB: your accrued interest payment release processing is legally protected from scam / fraud oppression with Anti-Scam Certificate; you will receive copy of the anti-scam certificate through the appropriate authority, your accrued interest originated from World Bank mass assisted project funds, carefully audited and approved for payment. It comprises of transactions executed now and the past which the interest is reading unclaimed in your name.

Accept our congratulations while looking forward to have your sincere response,

Best Regards
Dr. Blum Echo
Director of World Bank accrued interest American office.

Avast logo
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Email analysis :

NOTE : drechoblum123@gmail.com
NOTE : info@ocemi.it
NOTE : Received : from User (unknown [197.242.107.69])


NOTE : by mail.pro-red.com.ar (Postfix)

Monday, February 8, 2016

Attention

Attention!

Your first payment of $5000 is about to sent today. You are advice to contact Mr. Michael Godwin with your full information. Such as

Your name.....
Your country....
Your phone number.......
Your address.......

To enable him send your First Payment of $5000 today. For more Information contact Mr. Michael Godwin, Email (inc.wuoutlat@yahoo.com.sg) Telephone number :( +229)68992326) Call him Or SMS, He will keep sending you payment until your total fund is Completed $2.5usd.

Best Regards,

Mr. Ronald Alex

Email analysis :

NOTE : Mr. Ronald Alex
NOTE : inc.wuoutlat@yahoo.com.sg
NOTE : ".wu"@tiara.ocn.ne.jp
NOTE : Received : from mzcstore342.ocn.ad.jp
NOTE : (mz-fcb342p.ocn.ad.jp [180.37.198.138])
NOTE : by vcwebmail.ocn.ad.jp (Postfix)
NOTE : X-Originating-Ip : [41.86.234.165]

Monday, January 25, 2016

Jose Allen

Attention dear,

This 5000usd MTCN#:(6822-863-590)in your name at western union waiting for you now,but it must be activate before you can pickup the payment therefore contact now for more information of the activation, for the collection of your 5000usd immediately within 45 minutes. So contact managing director: Mr. Rogers White E-mail(ino.wu@mail15.com) Phone#: +229-98544307.

Sincerely yours,
Mr.Jose Allen

Email analysis :

NOTE : .Allen.@siren.ocn.ne.jp
NOTE : ino.wu@mail15.com
NOTE : X-Originating-Ip : [41.86.238.6]

Wednesday, January 13, 2016

Contact Money Gram For Your Compensation Payment

Attention Dear Beneficiary.

This is Mrs. Roseline Anyagbuo Attorney & Counsels at Law Federal High Court Of Justice Benin Rep. Address: plot 102 jbse island avenue kparakou, Cotonou Rep. Of Benin note that we have decided to pay you your money through money gram urgent remitting office since you were unable to receive your money through a courier company, western union, bank to bank wire transfer and ATM visa card due to their management but now we have sent your full compensation payment of $753,987.00 USD. To you through money gram. You will be receiving 5,000usd per day, but I want you to contact the management of the money gram agent right now and ask him for your first payment. his name is (Mr.Olisa Emeka ) and ask him to give you the money gram payment information so that you can be able to pick up your funds through money gram without any problem.

Vital finance bank money gram transfer
Department. location address; plot 1261,
Areola Hopewell street co/b/rep,
Contact person: Mr.Olisa Emeka
Tel phone number: +229 68627042
Email address (moneygrampayment1@qq.com)

And contact here with your full information.

You’re name...............
Country...............
Phone no...............
Address/city..............
Age/sex............

Call or email him now so that he can provide the money gram information to you as urgent as you can. also do let me know immediately they have started sending your money, but try to comply with them to enable them serve you better.

Thanks,
We wish you good luck
Best regards,
Mrs. Roseline Anyagbuo

Email analysis :

NOTE : wdwdwd@athena.ocn.ne.jp
NOTE : moneygrampayment1@qq.com
NOTE : X-Originating-Ip : [41.222.194.18]

Thursday, December 17, 2015

I am a living testimony

Hi ,

You have to read this to amend your mistakes my dear, I am contacting you because of the information I saw about your fund payment, this will be of a great help to redeem you from all the difficulties you have been experiencing in regards to your long over due payment due to excessive demand for money from you by the non officials departments.

I am Mrs. Vera Townsend from Atlanta Ga USA. I am one of those who was a victim of fraud in the West Africa Region, I have spent over 60.000.00 US Dollars trying to get my payment and all to no avail, not knowing I was dealing with the wrong people.

One day, I got an e-mail from a Man called Alexander David from Oregon in USA telling me to stop dealing with people contacting me if any and contact an FBI Agent in Washington DC to receive my fund which I did by traveling down to Washington DC, I was directed to meet the only elected payment FBI Agent in the country (USA) which happened to be the same FBI Agent that David told me about and I tabled my problem to him, Be hold he explained everything to me, he said that whoever contacting us through emails for ATM Card, UPS, DHL and Cashier Check E.T.C are Fake.

After, he took me to the paying bank for the claim of my Compensation payment, Right now I am the happiest woman on earth because I have received my long due compensation payment of $15M, Moreover the FBI Agent, showed me the full information’s of those that are yet to receive their payments and I saw your email Address and your fund amount as one of the beneficiaries, that’s why I decided to email you to stop dealing with those criminals contacting you, honestly they are not with your fund, they are only making money out of you, I will advise you to stop any contact with them and contact the payment FBI Agent to claim your fund with the following E-mail:agent.fredwalters.2013@gmail.com ( ) before it’s too late. The only money I paid to received my fund was $435 usd for obtaining of your fund legal documents.

Note: The $435 usd was the only money i paid concerning this transaction God Bless you and remain bless

I am a living testimony.

Yours Truthfully
Mrs.Vera Townsend

Email analysis :

NOTE : agent.fredwalters.2013@gmail.com
NOTE : 208.92.134.175
NOTE : Received : from smtp.ymarketing.ca (HELO plesk.ymarketing.ca) (208.92.134.175)
NOTE : Received : from WIN-J6UMUL46BJD.interserver.net (unknown [66.23.227.162])
NOTE : by plesk.ymarketing.ca (Postfix)
NOTE : I am a living testimony

Tuesday, December 15, 2015

INFORMATION PAYMENT NOTIFICATION

From The Office Of
Mr Danladi Musa
Chairman Debt Reconciliation
Committee Federal Republic
Of Nigeria

Attn:Beneficiary

I have a good news for you regarding your long over due payment.Be informed that the new central bank governor Godwin Emefiele issued an irrevocable payment standing order for the payment of your long over due inheritance funds, via international certified ATM master card. If you have not received your full payment,please get back to this office to enable us pay your outstanding debt as soon as possible. I will like to have the following information below from you upon your reply to enable me commence on the final approval and payment.

(1)your full Name,
(2)Telephone Number
(3)Contact Address.
(4)Total Amount

Congratulation.
Yours sincerely,
Danladi Musa

Email analysis :

NOTE : Danladi Musa
NOTE : danladimusa691@yahoo.com.hk
NOTE : X-Originating-Ip : [89.252.159.112]

Saturday, October 31, 2015

YOUR URGENT RESPONSE IS HIGHLY NEEDED

FEDERAL REPUBLIC OF NIGERIA
OFFICE OF THE PAYMENT VERIFICATION PANEL
LAGOS LIAISON OFFICE
EMAIL..tonyebere220@gmail.com
Date: 30/10/2015

ATTENTION DEAR BENEFICIARY,

YOUR OUTSTANDING PAYMENT.

We hereby bring to your notice that your outstanding payment with the Federal Government of Nigeria has reached this office for verification and clarifications before the release. Anyway, without wasting much time,I have personally investigated this payment down to the Ministry were this contract was executed and from my findings it is clear that you did not execute this contract in question, from all available information, it looks like some officials in the Ministry were trying to use you to claim this particular value which they over invoiced for their own selfish interest. I know it might interest you to know how I managed to find out this truth, yes. I investigated this payment up to the ministry were this contract was executed and after some checks I was surprise to see that the most vital/important documents regarding to this contract bears a different name and beneficiary.

Based on this I decide to contact the supervisor that signed the attestation report, on getting to the contract award and supervisory commission I collected the contract attestation report and found out that this document steel bears the name: B& B PETROLEUM ENG.PTY as the company that executed this contract. I keep this to my self and came down to my base. As a matter of fact I have been thinking whether to report my findings to the appropriate body for cancellation of this payment, but I have this second thought of contacting you since I am not a saint and in a position to approve this payment for the president to give go ahead order to the release, I feel this might be a Gods given opportunity. So it is based on this I am writing you, if you will accept with my understated conditions I can normalize all the relevant papers of this payment and the funds will be release within 14 working days. Contract attestation report is not in your name, the fund owner ship certificate is also not in your name. Actually your partners as I should say did a very great work in manipulating almost all the documents to your favor. Now, I want you to know that, with my position, I can amend this problems and this money will be paid to your nominated bank account which both of us will share on a 50/50 %if only you will accept with my conditions. So, if you see it wise to get this perfected with me feel free to contact me. I shall let you know my conditions as soon as I here from you.

Thanks,
Tony Ebere.

Email analysis :

NOTE : christ_obinna1@yahoo.fr
NOTE : Partho.Sharma@yahoo.co.in
NOTE : tonyebere220@gmail.com
NOTE : X-User-Agent : Mozilla/5.0 (Windows NT 5.1; rv:34.0) Gecko/20100101 Firefox/34.0
NOTE : X-Remote : 91.202.243.138
NOTE : Received : from 41.58.7.53 ([41.58.7.53])
NOTe : by mail.diamant.toyota.ua
NOTE : for Partho.Sharma@yahoo.co.in;

Tuesday, October 27, 2015

Payment Swift Copy

sir,

Upon request,Your customer has advised for your payment. Be informed that the following payment is made to your account as per attached HSBC payment swift copy. You are adviced to confirm receipt of payment as detailed.

Yours faithfully,
Global Payments and Cash Management.

HSBC

1 HSBC Payment Swift copy.doc (total 1.3KB)

View slide show (1)Download

Link analysis :

NOTE : http://peridotsgroup.com/colins/HSBC%20Payment%20Swift%20copy.doc
NOTE : BitDefender : Malware site
NOTE : Emsisoft : Malware site

File analysis :

Avira : EXP/CVE-2012-0158
CAT-QuickHeal : Exp.RTF.CVE-2012-0158
DrWeb : Exploit.Rtf.CVE2012-0158
Kaspersky : Exploit.Win32.CVE-2012-0158.j
Qihoo-360 : virus.exp.20120158
Rising : NORMAL:Hack.CVE-2012-0158.a!1614593 [F]
Sophos : Troj/DocDrop-DT
Symantec : Bloodhound.RTF.3
TrendMicro : HEUR_RTFMALFORME

Email analysis :

NOTE : purchasemanager@tescogroup.com
NOTE : Received : by endpoint708401cf.chios.panth.io
NOTE : 162.242.168.6 ()

Reference to your Payment

To Your Attention;

On behalf of the board and management of Foreign Payment Department, I Mrs. Kathryn Bennett,the Managing Director of Foreign Payment Department wishes to inform you that your contractual payment w hich was suspended by the Nigerian government is due for Immediate collection.

Be informed that we have concluded all arrangements to transfer your fund to your account through Sterling Bank Plc. In line with the binding contractual payment policies, kindly furnish us with the following as set forth.

Your complete Banking details where you want the fund to be transfer and a copy of your international passport or any other means of identification as the true Beneficiary .your telephone number. The Contract Amount is $2.7Million, You shall required Setting up a Non Resident Account with Sterling Bank Plc, before your fund will be release transfer to your account in your country.

Your immediate response is needed.

Best Regards
Mrs. Kathryn Bennett.
Director Foreign Payment Department

Email analysis :

NOTE : fplc379@gmail.com
NOTE : dondonthecat22@yahoo.co.jp
NOTE : Received : from [41.71.163.249]
NOTE : by web102019.mail.ssk.yahoo.co.jp

Monday, October 12, 2015

Your order has been successfully processed

Hello,

Your order has been successfully processed and is Pending Setup.

*Click Here For Updates

Once setup is complete you will be automatically transferred to your new online system.

Thank you,

Payments Today

Scam analysis :

CLICK : Click Here For Updates
OPEN : http://www.optical-machinery.com/link.php?M=******&N=**&L=**&F=H
REDIRECT : http://www.damien-laurent.com/
SCREENSHOT :


Domain analysis :

Domain Name: damien-laurent.com
Registrar WHOIS Server: whois.regtons.com
Registrar URL: http://regtons.com
Creation Date: 2015-05-20T00:00:00Z
Registrar Registration Expiration Date: 2016-05-20T00:00:00Z
Registrar: GRANSY S.R.O D/B/A SUBREG.CZ
Registrar IANA ID: 1505
Registrar Abuse Contact Email: abuse@regtons.com
Registrar Abuse Contact Phone: +420.734463373
Registry Registrant ID: G-807567
Registrant Name: Domain Administrations Limited Domain Administrations Limited
Registrant Street: 597 Sandringham Rd
Registrant City: Auckland
Registrant Postal Code: 1025
Registrant Country: NZ
Registrant Phone: +64.93742415
Registrant Email: info@trading-platform-online.com
Registry Admin ID: G-807567
Admin Name: Domain Administrations Limited Domain Administrations Limited
Admin Organization:
Admin Street: 597 Sandringham Rd
Admin City: Auckland
Admin Postal Code: 1025
Admin Country: NZ
Admin Phone: +64.93742415
Admin Email: info@trading-platform-online.com
Registry Tech ID: G-807567
Tech Name: Domain Administrations Limited Domain Administrations Limited
Tech Organization:
Tech Street: 597 Sandringham Rd
Tech City: Auckland
Tech Postal Code: 1025
Tech Country: NZ
Tech Phone: +64.93742415
Tech Email: info@trading-platform-online.com
Name Server: gina.ns.cloudflare.com
Name Server: seth.ns.cloudflare.com
DNSSEC: unsigned

Domain Name: optical-machinery.com
Registry Domain ID: 1916902279_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.regtons.com
Registrar URL: http://regtons.com
Updated Date: 2015-08-04T00:00:00Z
Creation Date: 2015-04-06T00:00:00Z
Registrar Registration Expiration Date: 2016-04-06T00:00:00Z
Registrar: GRANSY S.R.O D/B/A SUBREG.CZ
Registrar IANA ID: 1505
Registrar Abuse Contact Email: abuse@regtons.com
Registrar Abuse Contact Phone: +420.734463373
Domain Status: ok
Registry Registrant ID: G-807567
Registrant Name: Domain Administrations Limited Domain Administrations Limited
Registrant Street: 597 Sandringham Rd
Registrant City: Auckland
Registrant Postal Code: 1025
Registrant Country: NZ
Registrant Phone: +64.93742415
Registrant Phone Ext: None
Registrant Email: info@trading-platform-online.com
Registry Admin ID: G-807567
Admin Name: Domain Administrations Limited Domain Administrations Limited
Admin Street: 597 Sandringham Rd
Admin City: Auckland
Admin State/Province:
Admin Postal Code: 1025
Admin Country: NZ
Admin Phone: +64.93742415
Admin Email: info@trading-platform-online.com
Registry Tech ID: G-807567
Tech Name: Domain Administrations Limited Domain Administrations Limited
Tech Organization:
Tech Street: 597 Sandringham Rd
Tech City: Auckland
Tech Postal Code: 1025
Tech Country: NZ
Tech Phone: +64.93742415
Tech Email: info@trading-platform-online.com
Name Server: ns.wedos.net
Name Server: ns.wedos.cz
Name Server: ns.wedos.eu
Name Server: ns.wedos.com
DNSSEC: unsigned

Email analysis :

NOTE : lucreuben@optical-machinery.com
NOTE : bounces@optical-machinery.com
NOTE : X-Php-Originating-Script : 0:email.php
NOTE : 37.157.193.32 (optical-machinery.com)
NOTE : Received : from vm16963 ([127.0.0.1]) by localhost
NOTE : (vm16963.wedos.net [127.0.0.1])