Wednesday, May 10, 2017

Richard Maxwell

We have deposited the check of your fund($25.400`000`00USD)through MONEY GRAM department after our final meeting regarding your fund, All you will do is to contact money gram director (479)3853899 He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as,

Receiver's Name_______________
Address: ________________
Country: _____________
Phone Number: _____________

Though,Mr.Richard Maxwell sent $4000 in your name today so contact Mr.richardmaxwe or you call him as soon as you receive this email(richardmaxwell314@gmail.com) and tell him to give you the reference, sender name and question/answer to pick the $5000 Please let us know as soon as you received all your fund,

Best Regards.

MONEY GRAM AGENT

Email analysis :

NOTE : X-Originating-Ip : [185.56.137.11]

Scammer with IP 185.56.137.11

NOTE : Received : from mail.ochoa.com.do (mail.ochoa.com.do [172.17.1.231])
NOTE : servicedesk@ochoa.com.do
NOTE : richardmaxwell314@gmail.com

NOTICE OF ONGOING INVESTIGATION

Federal Bureau Of Investigations
Headquarters Washington Dc.
Building 935 Pennsylvania Ave.
NW WASHINGTON, D.C. 20535-0001
E-Mail: fbi.gov0012@usa.com

NOTICE OF ONGOING INVESTIGATION

Attn Recipient:

This is agent Josh, we were sent by the Director of Federal Bureau of Investigation (JAMES B.COMEY), we are currently in Africa as an FBI/ United States delegate that have been delegated to investigate these fraudsters who are in the business of swindling Foreigners that has transactions in Africa. Be informed that during our investigations we found out that there is a total amount of $2.5 Million that has been assigned in your name as the beneficiary and these fraudsters are busy swindling you without any hope of receiving your fund, these are the works of the fraudsters who needed to extort money from you in the name of this transfer, We have to inform you that we have arrested some men in respect of this delayed overdue fund. We have a very limited time to stay in Africa here so I advise you urgently respond to this message. These criminals will be caught unaware and we don't want them to know this new development to avoid jeopardizing our investigation, you need to conceal anything that has to do with this exercise to enable us get all the necessary information we required. I will be expecting your swift response as soon as you receive this email and notify us of any message or phone call you receive from those fraudsters for us to investigate on it before you make any contact with them.

In case if found this message in spam folder, it could be due to your Internet Service Provider, ISP. So kindly move to your inbox before replying.

Regards,
JACKSON JOSH
International Banking Unit
862 955-2836

Email analysis :

NOTE : X-Originating-Ip : [197.234.219.26]

Scammer with IP 197.234.219.26

NOTE : Received : from mzcstore262.ocn.ad.jp
NOTE : (mz-fcb262p.ocn.ad.jp [180.8.111.198])
NOTE : jackson.fbi@yahoo.com
NOTE : "WWW."@star.ocn.ne.jp

Thursday, May 4, 2017

I wait to read from you

Greetings,

I represent an investment interest that is interested in investing abroad, a large volume of resources, we are seeking your participation as an overseas representatives to treat the investment in your country. If interested, please contact me by writing back.( )

Thank you very much

Email analysis :

NOTE : vb00149@surrey.ac.uk
NOTE : v.bokinala@surrey.ac.uk
NOTE : 19investment@gmail.com
NOTE : client-ip=195.245.231.133;

Messagelabs

Received : from [85.158.136.51] by server-6.bemta-5.messagelabs.com

85.158.136.51

NOTE : Received : from 178.33.210.30 (131.227.131.245)

Scam from 131.227.131.245

NOTE : by EXHT021P.surrey.ac.uk (131.227.200.35)

Scam from 131.227.200.35

NOTE : with Microsoft SMTP Server (TLS) id 8.3.485.1;
NOTE : EXHT021P.surrey.ac.uk
NOTE : www.surrey.ac.uk

@UniOfSurrey servers were used to relay this scam

NOTE : The @UniOfSurrey servers were used to relay a scam.
NOTE : The email of #vivek_bokinala was used to relay this #scam

_ C O N G R A T U L A T I O N S _

WESTERN UNION ASIA

[HEAD OFFICE] - KUALA LUMPUR, MALAYSIA

" WESTERN UNION GRANT 2017 "

YOUR EMAIL WAS SELECTED AND HAVE BEEN AWARDED THE SUM OF $500,000.00 USD. YOU WILL BE ISSUED A WESTERN UNION NETSPEND MASTERCARD CREDITED WITH $500,000.00 USD

NOTE: The Delivery Of Your WESTERN UNION NETSPEND MASTERCARD To Your HOME is FREE !

Your Reference No: WU/WUA2017/BBKMY

For More Information , Please Contact -

Western Union Agent: MELISSA BINTI MUBARAK
Contact E-mail: westernunion.melissamubarak@gmail.com
Office Telephone: +60165781566

CONGRATULATION ONCE AGAIN FROM WESTERN UNION © [ ASIA ].

Email analysis :

NOTE : wu.asia2017@gmail.com
NOTE : westernunion.melissamubarak@gmail.com
NOTE : info@viniwee.com
NOTE : Received : from User (unknown [51.15.147.28])


NOTE : by host.viniwee.com

Thursday, April 27, 2017

Assalamualaikum

Greeting !

How are you? My name is Kayla Morni Mohd, a Citizen of Syria lived in Aleppo- Syria., I'm one of the former senior inspector for Syria National Petroleum Company(Kawkab Oil Company). I have Business investment transaction worth $8.2 Million. I will like to relocate out from Syria, Because here in Syria is serious war here. I wait to hear from you as soon as you see this message

regards,

Kayla Morni Mohd

Email analysis :

NOTE : morie8@bigpond.com
NOTE : X-Originating-Ip : [46.23.66.106]

AUTOMATIC USPS statement: your package has been postponed

This is an automatic message: you are obliged to read this letter to accept
the order.
Please, use the link seen down below to contact the USPS support team.

http://www.stbishoy.org/wp-content/b4d47c6405.html

Thanks and best regards.
Takeisha Wernecke - USPS Senior Station Manager.

Email analysis :

NOTE : wo56816421@occhristian.pvt.k12.ia.us
NOTE : USPS Priority
NOTE : Received : from occhristian.pvt.k12.ia.us (unknown [186.151.239.161])
NOTE : User-Agent : Opera Mail/10.62 (Win32)
NOTE : 186.151.239.161


Phishing analysis :

CLICK : http://www.stbishoy.org/wp-content/b4d47c6405.html
OPEN : http://www.stbishoy.org/wp-content/b4d47c6405.html
REDIRECT : http://servisedelivery.com/bot14/lgen.php
RESULT : Phishing is unresponsive...

Stbishoy.org analysis :

Registrant Email: stbishoy.org@proxy.dreamhost.com
Updated Date: 2016-11-01T18:00:21
Creation Date: 2009-08-02T04:33:23
Registry Expiry Date: 2017-08-02T04:33:23

Servisedelivery.com analysis :

Updated Date: 2017-04-24T17:04:10
Creation Date: 2017-04-24T00:00:00
Registrar Registration Expiration Date: 2018-04-24T00:00:00
Registrar Abuse Contact Email: abuse@bizcn.com
Registrant Name: Wuxi Yilian LLC
Registrant Organization: Wuxi Yilian LLC
Registrant Street: No.1001 Anling Road
Registrant City: Xiamen
Registrant State/Province: Fujian
Registrant Postal Code: 361008
Registrant Country: cn
Registrant Phone: +86.5922577888
Registrant Fax: +86.5922179606
Registrant Email: whoisprivacyprotect@whoisservices.cn

Tuesday, April 25, 2017

Hi (Donation Scam)

Hello,

Donation proposal for you, Contact me for more details.

Regards,
Greg.

Email analysis :

NOTE : gregoryniklos@gmail.com
NOTE : jimenezm319@cod.edu
NOTE : Received : from MAIL13.cdnet-ad.ad.cod.edu ([::1])
NOTE : by MAIL13.cdnet-ad.ad.cod.edu ([::1])
NOTE : Received : from MAIL13.cdnet-ad.ad.cod.edu (10.11.0.3)
NOTE : by MAIL13.cdnet-ad.ad.cod.edu (10.11.0.3)
NOTE : Received : from MAIL13.cdnet-ad.ad.cod.edu (10.11.0.3)
NOTE : by EDGE1.cod.edu (10.11.0.106)
NOTE : Received : from mail.cod.edu (edge1.cod.edu [192.203.136.103])

192.203.136.103 server was used to relay this scam.

NOTE : X-Originating-Ip : [105.112.35.87]

Scammer from 105.112.35.87

NOTE : cod.edu server was used to relay this scam

cod.edu server was used to relay this scam

NOTE : jimenezm319 account was used to relay this scam.
NOTE : @collegedupage server was used to relay a scam.

Compensation Settlement On Escrow Accounts. (IMF Scam)

INTERNATIONAL MONETARY FUND
1900 PENNSYLVANIA Ave NW
WASHINGTON DC.
20431.

Attention Beneficiary

This is to formally inform you that your file on your fund transfer has reached Mr. Carla Grasso Managing Director of the IMF(The International Monetary Fund). We are also aware that your transaction has been dormant for a while now, and we will like to know why. It will be in your own interest to get back to the department director Mr David who is in charge of the transfer unit of IMF, get back to him as soon as possible, failure to do so we shall confiscate your funds to charity.

Email.......imf_davidhanks147@yahoo.com

Fill Out the information to him if you are ready to get your FUNDS

Your Full Name:...............
Direct Phone:....................
Country.................
Occupation:.....................
Gender:.........
Age:..............
Bank details.............
A Scan Copy Of Your Identity Card Or Drivers License.

And take note any other email you receive form anybody claiming to have your fund should be sent to this office and you are advised to stop any transaction or payment to the institutions who have been in contact with you lately for they are scam and the FBI and EFCC are after them,so be smart the IMF is now in-charge of all dept .

We await your reply.

Have a good day.

Department Director
Mr. David Hanks

Email analysis :

NOTE : Received : from vizyontanitim.com
NOTE : (toroon12-1279381067.sdsl.bell.ca [76.65.206.75])

Scammer with the IP 76.65.206.75

NOTE : imf.davidhanks247@gmail.com
NOTE : info@vizyontanitim.com

Monday, April 24, 2017

Congratulations!

Congratulations! You e-mail has just won you the sum of $1,000,000.00 USD as a charity donations/aid from Oxfam International in conjunction with South African National Lotto Further information on the processing and disbursement of your grant entitlements,alongside the provision of your qualification documentations, will be disclosed to you by the National Lottery Secretary, Barrister. Mark Knox. Please contact him with your Qualification Number[OXG /101/231/BDB] as soon as possible.

Barrister. Mark Knox
National Lotto Secretary
Email: oxfaminternational9@gmail.com

Email analysis :

NOTE : oxfaminternational9@gmail.com
NOTE : buidoanquyet@hanam.gov.vn

A governmental vietnamese website was used to relay a scam.

NOTE : Received : from mail1.HaNam.gov.vn ([192.168.2.3])
NOTE : by MAIL2.HaNam.gov.vn (IBM Domino Release 9.0 HF683)
NOTE : Received : from mail.hanam.gov.vn (mail.hanam.gov.vn. [113.160.198.113])

mail.hanam.gov.vn was used to relay a scam.

NOTE : A governmental vietnamese website was used to relay a scam.

Sunday, April 23, 2017

ExxonMobil Recruitment ( Urgent Employment )

ExxonMobil Recruitment
You are hereby notified that your qualifications and experiences which you submitted at a job finding site were found suitable for the requirements of ExxonMobil Oil & Gas Exploration.

For verification and screening you are to submit your most recent Resume / CV as soon as possible for an employment interview to be conducted. On notification of interest, & for re-confirmation purposes you're required to submit your most recent Resume / CV via exxonmobilofficeuae@gmail.com . We shall conduct an online interview to necessitate the issuance of our employment contract agreement.

Regards ,

Management

ExxonMobil Oil & Gas Exploration

Email analysis :

NOTE : exxonmobilofficeuae@gmail.com
NOTE : julli_ann@aol.fr
NOTE : Received : from Mike (unknown [197.210.226.131])

CONFIRM THIS TO ME FAST!!!!

Dr.Mohamed Ahmed.
MINISTER OF FINANCE(MOF)
OPERATIONAL TOWERS;8/10
CARRIER CRESCENT,COTONOU.BENIN REPUBLIC.
HOT-LINE(00229)98-77-63-27
EMAIL;drmohamedahmed13@yahoo.com
Attn: Sir/Madam.

I am Dr.Mohamed Ahmed, minister of finance (M.A.R),I monitor offices and control the affairs of all banks and financial institutions in Benin republic concerned foreign contract payments. I am the final signatory to all foreign transfers of huge funds moving within banks both the local and international levels in line to foreign contracts settlement. I have before me the list of foreign contract payment files, which are due to be transferred to their nominated accounts. Meanwhile, we identified some of these accounts to be ghost accounts, unclaimed deposits and over invoiced sum etc. I wish to have a deal with you as regards to the unpaid fund. I have a file before me and hope the date's are correct and UN-tampered. As it is my duty to recommend the transfer of these surplus fund to the Federal Government Treasury and Reserve Accounts as unclaimed deposit. I have the opportunity to write you based on the instruction I received two days ago from the senate committee on contract payment/foreign debts to submit the list of payment reports expenditures and audited reports of revenues. Among several others, I have decided to remit the total sum of USD15.2 million following the idea that we have a deal/agreement and I am going to perfect the paper work legally.

MY CONDITIONS

1.You will have to provide foreign account where the funds will be transferred.

2.This deal must be kept secret forever, and all correspondence will be strictly by private email /telephone for security purposes.

3.There should be no other third parties as most problems associated with such payments are caused by their agents or representatives. If you AGREE with my Conditions, contact me directly through this email address;(drmohamedahmed13@yahoo.com) will advise you on the next line of action and immediately the funds transfer will commence without further delay as I would proceed to fix your name on the payment schedule instantly within the next 5 working days.

NOTE:DUE TO THE HIGH RATES OF INTERNET SCAMMERS,IF YOU ARE REPLYING TO THIS EMAIL,DO WRITE "YOUR BROTHER" AT THE SUBJECT OF YOUR REPLY ,THAT SERVES AS OUR SECRET CODE FOR THIS TRANSACTION,BECAUSE I DO NOT WANT YOU OR ME TO FALL VICTIM OF ANY CIRCUMSTANCES.

THANKS,
YOURS FAITHFULLY
Dr.Mohamed Ahmed.

Email analysis :

NOTE : drmohamedahmed13@yahoo.com
NOTE : "www."@orange.ocn.ne.jp
NOTE : X-Originating-Ip : [197.234.219.49]

Tuesday, April 11, 2017

Your USD$15.5million cashier check.

Attention please

We have received the check from the bank last week and kept the check with Dr. Jerry Udo as we discussed, Please email him immediately inorder to send you the cheque. I am in Colombia now.

I kept USD$15.5million cashier check & will send you the rest of money after my business trip here. I sent you so many emails last week but all bounced back. So contact Dr. Udo with his below email address for him to send the check to you: ( jerryudo@mail2Winner.com ) or call him at +229 99485442

Thanks and do let me know when you have received it. 'Copy & paste' (jerryudo@mail2Winner.com)

Regards
Majvor Forsberg
United Nations Rep, U

Email analysis :

NOTE : jerryudo@mail2Winner.com
NOTE : info@gmail.com
NOTE : Received : from [41.138.91.233] (helo=User)
NOTE : by x068vm10.dattaweb.com

x068vm10.dattaweb.com

Monday, April 10, 2017

LOAN OFFER

Do you need an urgent loan? We give out Business Loans, Personal Loans,
Student Loans,Car Loans E.t.c ,If you are interested contact us via:
elsonfinancialgroup@hotmail.com

Contact us today for an urgent loan. Contact us via:
eolsonfinancialgroup@hotmail.com

Email analysis :

NOTE : simonetta@granatelli.it
NOTE : OLSON FINANCIAL GROUP
NOTE : Received : from granatelli.it ([62.149.158.90])

Scam from 62.149.158.90

NOTE : by smtpcmd05.ad.aruba.it

ATTENTION PLEASE

THIS is YOUR DIPLOMATIC AGENT MR ROBERT JOHNSON I AM HERE TO DELIVER YOU CONSIGNMENT BOX worth

U.S.D 4.5 Million
I want you to kindly Reconfirm Your Full Name,.........
Current Home Address,..................................
Nearest Airport,.......................................
your Direct Cell,......................................

Phone # So that preparation can be made for the delivery of the consignment to your home address.
I wait to hear from you as soon as you recieve this email.

Thanks for your cooperation .you can be reached at (770) 737-1610

Email analysis :

NOTE : mrrobert829@gmail.com
NOTE : "www."@juno.ocn.ne.jp
NOTE : Received : from mzkstore501.ocn.ad.jp
NOTE : (mz-ukg501p.ocn.ad.jp [118.23.186.195])
NOTE : X-Originating-Ip : [210.146.36.62]

Scam from 210.146.36.62

Thursday, April 6, 2017

Payment

Hello,

We wish to inform you that your email as been selected and awarded the sum of 8,000,000.00 (Eight Million Pounds sterling) with reference number 77100146. This compensation funds is from the United Nations.

To receive payment Send us your full personal details to deliver your funds as soon as possible..

Gloria Peter

Email analysis :

NOTE : badrol@mpn.gov.my
NOTE : dgpfd30@gmail.com
NOTE : Received : from mail.mpn.gov.my
NOTE : (mail.mpn.gov.my [10.10.0.4]) by mail.mpn.gov.my

mail.mpn.gov.my

NOTE : https://mail.mpn.gov.my

zimbra

NOTE : http://mpn.gov.my

mpn.gov.my

NOTE : @mp_nilai was used to relay an United Nations scam.

Dear Did you get my email? It's urgent.

Kindly confirm me if this is your correct email address. I am barrister James Wilfred , Please kindly contact me There is an important issue i need to discuss with you concerning my deceased client late. latimerjohn00@gmail.com

Email analysis :

NOTE : amouzoukaka@gmail.com
NOTE : Received : by 10.237.34.79
NOTE : latimerjohn00@gmail.com

Wednesday, April 5, 2017

Please acknowledge receipt of this mail


Dear Beneficiary,

I am Steven Terner Mnuchin, Secretary of the Treasury under the U.S. Department of the Treasury. You can get more details about me here on the link below;

https://www.treasury.gov/about/Pages/Secretary.aspx

At the recently concluded meeting with the World Bank and the United Nations, an agreement was reached between both parties for us to settle all outstanding payments accrued to individuals/corporations with respect to local and overseas contract payment, debt re-scheduling and outstanding compensation payment. Fortunately, you have been selected alongside a few other beneficiaries to receive your own payment of $10.5million (Ten Million five hundred thousand United States Dollars only). We have been notified that you are yet to receive your fund valued at $10.5million This money will now be transferred to your nominated bank account through our foreign bank unit in South East Asia Phnom Penh Cambodia.

You are advised to kindly reply this email with the below details enclosed to help us process your payment through our foreign payment bank in Cambodia.

(1) Full Names:
(2) Residential Address:
(3) Country of Residence:
(4) Age:
(5) Phone/Cell Number:
(6) Occupation:

Yours faithfully,

Steven Terner Mnuchin
Secretary of the Treasury
(U.S. Department of the Treasury)
Contact email; steventernermnuchin27@gmail.com

Email analysis :

NOTE : Japanjbkoy@eagle.ocn.ne.jp
NOTE : steventernermnuchin27@gmail.com
NOTE : Received : from User (231.129.151.153.ap.dti.ne.jp [153.151.129.231])

Scam from 153.151.129.231

Michael Contos

Hello, I'm Michael And i work for E-Loan Company located in California USA, my company giving out loan's at 2.5% interest rate world wide if you are interested get back so i can provide you with the information on how to get loan.
Michael Contos

Email analysis :

NOTE : teodozjabukowska@umlub.pl
NOTE : michaelgeorgecontos@gmail.com
NOTE : Received : from zimbra.umlub.pl (zimbra.umlub.pl [10.6.11.11])
NOTE : by zimbra.umlub.pl (Postfix)

Zimbra

Tuesday, April 4, 2017

Good day to you,

Desk of Mrs. Farida M. Waziri
St. Joseph Medical Center
1717 South J Street, Tacoma,
WA 98405 -USA.
Phone: (253) 948-4897
Date: 03/13/ 2017
CONFESSING MY SINS:

Good day to you,

I wishes to inform you that I had communication with my Bank ECOBANK regarding the $750,000.00 I assigned to your name as Atone for the atrocities I committed against you during my leadership as Nigeria E.F.C.C Boss and they confirmed that if transfer should be terminated as threatened by SECURITY OUTFIT due to your inability to abide by transfer due process that fund can still be converted and process via ATM Card and mail to your address along the ATM Secret Pin if only you could keep it confidential.

The question is to know if you're still interested in receiving this offer and also to know if you can be able to sort DHL cost of mailing the ATM Card to your address at receipt of package since I'm still incapacitate and cannot take such responsibility from here as I'm still laying critical ill here in ST'JOSEPH Hospital TACOMA.

Note: Until I'm able to receive your feed-back only then can my account officer Mr. Frank Iheji be advised other-wise, but in-case you have decided to forfeit the offer please you should hesitate to notify me as it ins't compulsory to claim this offer after-all. Meanwhile, I beg you remember me in your prayers as I'm waiting to undergo another heart surgery operation in couple of days and I'm scared.

Your urgent response will be appreciated.

Regards,

Yours Sincerely,

Mrs. Farida Mzaber Waziri,
Former Nigeria (E.F.C.C) Boss
Phone: (253) 948-4897

Email analysis :

NOTE : steven336@yahoo.com
NOTE : "www."@royal.ocn.ne.jp
X-Originating-Ip : [41.79.219.211]

Scam from 41.79.219.211

WARNING! WARNING! WARNING!

WARNING! Your parcel has been here fore more than six months, and we have tried to reach you through your email address but it seems you are not responding, our Agent said He could not reach you because He don't have your full details and am afraid. your parcel might be canceled if You don't claim it in some weeks. I guess you know the parcel am talking about? Am talking

about your COMPENSATION fund that worth $5.5Million.From The United Nations Compensation Commission (UNCC) .Am Williams Jerry, Foreign remittance Department Manager UBA in Benin Republic. I found your name and accompanied data enumerated among foreigners who have not been paid their compensation funds for losses and damage suffered as a direct result of Iraq’s

unlawful invasion and occupation of Kuwait in 1990-91. in Africa. click or follow this link to read about the fund from UNCC.

http://www.un.org/News/Press/docs/2003/ik344.doc.htm

contact now for more information on how it will reach you, with this info.

Your full Name:
Your Age:
Your Gender:
Your Full Address:
Your Profession:
Your Email & phone:

Send me email via:williams.jerry52@yahoo.com or call +22999084254
Thanks.
Yours sincerely; Williams Jerry, Foreign remittance Department Manager UBA...........

Email analysis :

NOTE : williams.jerry52@yahoo.com
NOTE : "www."@vega.ocn.ne.jp
NOTE : X-Originating-Ip : [41.74.9.27]

Scam from 41.74.9.27