Email analysis :
NOTE : jobs_exxonmobil@job4u.com
NOTE : www@space.ocn.ne.jp
NOTE : Received : from User (p546209-ipngn200505osakachuo.osaka.ocn.ne.jp [222.147.164.209])
Friday, June 16, 2017
Re Urgent Attention:
EXXON MOBIL CEPU LTD Kabupaten Bojonegoro,Jawa Timur 62152, Indonesia Telephone: +(62)858 9101 0186 Fax Number: +(62)858 9101 0322 Email:jobs_exxonmobil@job4u.com Viridium Associates is the global leader in OIL/GAS staffing and recruitment providing our client ( EXXONMOBILCORPORATION) with permanent, temporary and project based solutions. Viridium Associates employs a team of 130 professionals globally with operations in Indonesia, Singapore, UK and in the U.S. (Texas and Florida).Viridium Associates has partnered with OIL/GAS industry leader EXXONMOBIL CEPU LIMITED CORPORATION that is looking for experience and qualify candidates for the job. Human Resources Manager of EXXONMOBIL CEPU LIMITED has found your experience and qualifications extremely useful for our requirements. If Interested, kindly send us your updated resume to; (jobs_exxonmobil@job4u.com). With the below details. Your Present Monthly Salary in USD:- Your Preferred Monthly salary in USD:- Total Years Of Experience:- Years Of Experience in Oil & Gas Companies:- Availability:- Current Location:- Most Recent Position Held: Best Regards, Daniel Hadi RECRUITMENT COORDINATOR
Email analysis :
NOTE : jobs_exxonmobil@job4u.com
NOTE : www@space.ocn.ne.jp
NOTE : Received : from User (p546209-ipngn200505osakachuo.osaka.ocn.ne.jp [222.147.164.209])
Email analysis :
NOTE : jobs_exxonmobil@job4u.com
NOTE : www@space.ocn.ne.jp
NOTE : Received : from User (p546209-ipngn200505osakachuo.osaka.ocn.ne.jp [222.147.164.209])
Tuesday, June 13, 2017
Dearest One.
I am contacting you today with full confidence that you respond me with the same spirit that I have contacted you which shall be beneficial to both of us at last. I have some personal discussion that I want to pass to you directly. Can you please respond me so that I will unfold that? Hope to hear from you soonest.
Yours sincerely,
Fatimata Haifa.
Email analysis :
NOTE : fatimatahaifa20@yahoo.co.jp
NOTE : fatimahaifa35@yahoo.co.jp
NOTE : 98.137.67.206
Yours sincerely,
Fatimata Haifa.
Email analysis :
NOTE : fatimatahaifa20@yahoo.co.jp
NOTE : fatimahaifa35@yahoo.co.jp
NOTE : 98.137.67.206
You be receiving $5000 dollars daily
Payment Notification
This message is from our Transfer Head Office in Benin Republic. We are instructed to pay you $5.5 Million dollars which you will be receiving $5000 daily. We will be directing $5000 daily to Our Agent Office in your location where you will go and pickup the $5000. Forward your current address as stated below to enable us link the payment to our agents in your location.
Once you forward your current address as stated below, we will start releasing $5000 to you daily. Send your Full Names______ Address______ Country_____Tel_____Occupation_____Sex______Age_____ Forward the stated address to this email
Waiting to hear from you
Mr. Charles Dowling
Payment Director
Tel:+229-638
772-34
Email analysis :
NOTE : akinwumikolaa@gmail.com
NOTE : moneygramheadoffice@zoho.com
NOTE : Received : from [41.86.238.51]
NOTE : by webmail.numericable.fr with http webmail;
This message is from our Transfer Head Office in Benin Republic. We are instructed to pay you $5.5 Million dollars which you will be receiving $5000 daily. We will be directing $5000 daily to Our Agent Office in your location where you will go and pickup the $5000. Forward your current address as stated below to enable us link the payment to our agents in your location.
Once you forward your current address as stated below, we will start releasing $5000 to you daily. Send your Full Names______ Address______ Country_____Tel_____Occupation_____Sex______Age_____ Forward the stated address to this email
Waiting to hear from you
Mr. Charles Dowling
Payment Director
Tel:+229-638
772-34
Email analysis :
NOTE : akinwumikolaa@gmail.com
NOTE : moneygramheadoffice@zoho.com
NOTE : Received : from [41.86.238.51]
NOTE : by webmail.numericable.fr with http webmail;
Friday, June 9, 2017
Mrs. Nancy Viola
Attention Beneficiary Email ID,
I am Mrs. Nancy Viola.The Homemaker that wins Mega Millions jackpot of US$169 millions at New York Lottery office in January 30th 2016 and to avoid fraudlent notice, see my interview by visit link bellow:
www.dailymail.co.uk/news/article-3668744/Wife-wins-169million-Mega-Millions-jackpot-husband-buys-wrong-ticket.html :.
We just started international charitable donation campaign as we will be give a donation sum of Nine Million six Hundred Thousand United States Dollars each to improve the life of three Lucky individual from any part of worldwide. And your Name and email address was submitted to us by the Google internet management teams as a webmail User and your name is among those listed to receive the donation payment sum of US$9.6 Million through the help of Exchange State Bank Corporation Headquarter in 3992 E Chandler St,Carsonville, Michigan 48419 United States of America According to arrangement we sign: Dr. Dave Kirkbride, The Executive Vice President of Exchange State Bank Corporation Headquarter here in United States of America will contact you as soon as your draft check worth US$9.6 Million is ready to enable them send you the payment through bank to bank wire transfer to any of your bank account information you may provide to them. Therefore, contact the bank management Executive Vice President yourself with below information before 24hours today to enable quick releasing the donation payment to you because bank is always engage with many customers bank busineses.
Contact Person: Dr. Dave Kirkbride.
The Executive Vice President
Exchange State Bank Corporation Headquarter
Phone:..... +1 810 936 5964
Mobile: ....+1 810 515-7689
Email:.. kirkbride.dave1@gmail.com
Email:.. kirkbride.dave1@yahoo.com
Dr. Dave Kirkbride also always receive text message at +1 (810)936 5964 for bank business only. You can text him anytime about your donation payment because too many fraud use email address. So you must make sure you contact Dr. Dave Kirkbride direct once you read this mail message for more information because the donation US$9.6 Million sign in your name now is 100% genuine with due process of law, and it is well free from all illegal activities which you have the lawful right to claim your donation fund as soon as possible. And If you are receiving this notification for the first time, the ( US$9.6 Million ) can only be paid to you upon the receipt of DONATION CODE: [ NANCY+2017/GIFT/TWO+W ] to the bank Executive Vice President.
Congratulations & Happy Celebrations in Advance,
Best Regard.
Mrs. Nancy Viola
Homemaker wins Mega Millions jackpot.
https://www.youtube.com/watch?v=O4-_Gi1JS5E :.
Email analysis :
NOTE : kirkbride.dave1@gmail.com
NOTE : "mrs."@tenor.ocn.ne.jp
NOTE : X-Originating-Ip : [77.234.46.139]
NOTE : 77.234.46.0
I am Mrs. Nancy Viola.The Homemaker that wins Mega Millions jackpot of US$169 millions at New York Lottery office in January 30th 2016 and to avoid fraudlent notice, see my interview by visit link bellow:
www.dailymail.co.uk/news/article-3668744/Wife-wins-169million-Mega-Millions-jackpot-husband-buys-wrong-ticket.html :.
We just started international charitable donation campaign as we will be give a donation sum of Nine Million six Hundred Thousand United States Dollars each to improve the life of three Lucky individual from any part of worldwide. And your Name and email address was submitted to us by the Google internet management teams as a webmail User and your name is among those listed to receive the donation payment sum of US$9.6 Million through the help of Exchange State Bank Corporation Headquarter in 3992 E Chandler St,Carsonville, Michigan 48419 United States of America According to arrangement we sign: Dr. Dave Kirkbride, The Executive Vice President of Exchange State Bank Corporation Headquarter here in United States of America will contact you as soon as your draft check worth US$9.6 Million is ready to enable them send you the payment through bank to bank wire transfer to any of your bank account information you may provide to them. Therefore, contact the bank management Executive Vice President yourself with below information before 24hours today to enable quick releasing the donation payment to you because bank is always engage with many customers bank busineses.
Contact Person: Dr. Dave Kirkbride.
The Executive Vice President
Exchange State Bank Corporation Headquarter
Phone:..... +1 810 936 5964
Mobile: ....+1 810 515-7689
Email:.. kirkbride.dave1@gmail.com
Email:.. kirkbride.dave1@yahoo.com
Dr. Dave Kirkbride also always receive text message at +1 (810)936 5964 for bank business only. You can text him anytime about your donation payment because too many fraud use email address. So you must make sure you contact Dr. Dave Kirkbride direct once you read this mail message for more information because the donation US$9.6 Million sign in your name now is 100% genuine with due process of law, and it is well free from all illegal activities which you have the lawful right to claim your donation fund as soon as possible. And If you are receiving this notification for the first time, the ( US$9.6 Million ) can only be paid to you upon the receipt of DONATION CODE: [ NANCY+2017/GIFT/TWO+W ] to the bank Executive Vice President.
Congratulations & Happy Celebrations in Advance,
Best Regard.
Mrs. Nancy Viola
Homemaker wins Mega Millions jackpot.
https://www.youtube.com/watch?v=O4-_Gi1JS5E :.
Email analysis :
NOTE : kirkbride.dave1@gmail.com
NOTE : "mrs."@tenor.ocn.ne.jp
NOTE : X-Originating-Ip : [77.234.46.139]
NOTE : 77.234.46.0
Thursday, June 8, 2017
URGENT ATTENTION REQUIRED
Hello Friend.
You maybe surprise receiving such message from me, and being skeptical to reply. But I want to tell you to be free to respond. I am giving you my assurance and protection towards the deal I’m about to offer you which at the end we shall be more than happy.
My name is Caldwell William (Bill), born in Columbus, Georgia, USA. I was Commanding General of United States Army North, also known as the Fifth Army, served as the Commander of NATO Training Mission – Afghanistan, and simultaneously as the Commander of Combined Security Transition Command – Afghanistan and Iraq. While I was on duty, a lot happened which I cannot explained further because it was a tragedy.
While on duty, we also discovered a lot of things within my squad. I had in my possession Gold’s and physical Cash which were deposited in one of the security vault here, but safety of it is not guaranteed that is reason why I need your assistance to move it as soon as possible we can reach an agreement. I was planning to move it down to China for safety and for security purposes but it is not easier for I been on duty and handle that at same time.
That is reason why I am contacting you at this point of time, I need your help and if we reached an agreement I will authorize you with the proper documentations giving to me and security codes to retrieve what I had in the vault with the security company here in Iraq to move it down to you. If possible converting to the gold’s to Cash and have it secured also invest in your country on my behalf. But we have to reach an agreement and sign proper documents before this can be execute.
Note. This required 100% trust because you will be rewarded accordingly to the agreement. I need your feedback, and then we can proceed further to achieve our goals.
Thanks for your cooperation and understanding.
Yours Sincere
Caldwell William (Bill).
Email analysis :
NOTE : arodriguez@sinafocal.gov.py
NOTE : caldwilliam929@gmail.com
NOTE : X-Originating-Ip : [150.5.5.1]
You maybe surprise receiving such message from me, and being skeptical to reply. But I want to tell you to be free to respond. I am giving you my assurance and protection towards the deal I’m about to offer you which at the end we shall be more than happy.
My name is Caldwell William (Bill), born in Columbus, Georgia, USA. I was Commanding General of United States Army North, also known as the Fifth Army, served as the Commander of NATO Training Mission – Afghanistan, and simultaneously as the Commander of Combined Security Transition Command – Afghanistan and Iraq. While I was on duty, a lot happened which I cannot explained further because it was a tragedy.
While on duty, we also discovered a lot of things within my squad. I had in my possession Gold’s and physical Cash which were deposited in one of the security vault here, but safety of it is not guaranteed that is reason why I need your assistance to move it as soon as possible we can reach an agreement. I was planning to move it down to China for safety and for security purposes but it is not easier for I been on duty and handle that at same time.
That is reason why I am contacting you at this point of time, I need your help and if we reached an agreement I will authorize you with the proper documentations giving to me and security codes to retrieve what I had in the vault with the security company here in Iraq to move it down to you. If possible converting to the gold’s to Cash and have it secured also invest in your country on my behalf. But we have to reach an agreement and sign proper documents before this can be execute.
Note. This required 100% trust because you will be rewarded accordingly to the agreement. I need your feedback, and then we can proceed further to achieve our goals.
Thanks for your cooperation and understanding.
Yours Sincere
Caldwell William (Bill).
Email analysis :
NOTE : arodriguez@sinafocal.gov.py
NOTE : caldwilliam929@gmail.com
NOTE : X-Originating-Ip : [150.5.5.1]
Wednesday, May 31, 2017
Finance! (Loan Scam)
UNSECURED BUSINESS/PERSONAL LOAN BY LOAN CAPITAL FINANCE
- NO COLLATERAL
- MINIMUM DOCUMENTATION
- BUSINESS LOAN UP TO FIVE(5) MILLION US DOLLARS
CONTACT US TODAY VIA EMAIL: clfin77@foxmail.com
Email analysis :
NOTE : clfin77@foxmail.com
NOTE : angela.nava@zipaquira.gov.co
NOTE : Received : from correo.zipaquira.gov.co ([179.60.243.20])
NOTE : correo.zipaquira.gov.co
CONCLUSION :
The mail server of the colombian government has been used to relay this scam.
About Zipaquira :
Zipaquirá (Spanish pronunciation: [sipakiˈɾa]) is a municipality and city of Colombia in the department of Cundinamarca. Its neighboring municipalities are Tausa and Cogua to the north; Nemocón, Gachancipá and Sopó to the east; Cajicá and Tabio to the south; and Subachoque and Pacho to the west. Its seat of municipal government is 49 kilometers from Santa Fe de Bogotá. It is part of the Greater Bogotá Metropolitan Area, and is the capital of the province. It is also the headquarters of the diocese of the same name and that includes much of the Department of Cundinamarca, extending to the centre of Bogotá, the region of Rionegro, the Ubaté Valley, and the region of Guavio.
- NO COLLATERAL
- MINIMUM DOCUMENTATION
- BUSINESS LOAN UP TO FIVE(5) MILLION US DOLLARS
CONTACT US TODAY VIA EMAIL: clfin77@foxmail.com
Email analysis :
NOTE : clfin77@foxmail.com
NOTE : angela.nava@zipaquira.gov.co
NOTE : Received : from correo.zipaquira.gov.co ([179.60.243.20])
NOTE : correo.zipaquira.gov.co
CONCLUSION :
The mail server of the colombian government has been used to relay this scam.
About Zipaquira :
Zipaquirá (Spanish pronunciation: [sipakiˈɾa]) is a municipality and city of Colombia in the department of Cundinamarca. Its neighboring municipalities are Tausa and Cogua to the north; Nemocón, Gachancipá and Sopó to the east; Cajicá and Tabio to the south; and Subachoque and Pacho to the west. Its seat of municipal government is 49 kilometers from Santa Fe de Bogotá. It is part of the Greater Bogotá Metropolitan Area, and is the capital of the province. It is also the headquarters of the diocese of the same name and that includes much of the Department of Cundinamarca, extending to the centre of Bogotá, the region of Rionegro, the Ubaté Valley, and the region of Guavio.
Tuesday, May 30, 2017
Urgent Attention!! (Scam)
Good Day,
How are u doing today ? Apologies! I am a military woman ,seeking your kind assistance to move the sum of ($4.7.M USD) to you, as far as i can be assured that my money will be safe in your care until i complete my service here in Iraq and come over next month.
This is legitimate, and there is no danger involved. I need your full details to enable us proceed, such as : your Full Name, Full Address, Direct Mobile Number via hesterleigh.annz@gmail.com
Regards ,
Sgt. Leigh .A. Hester
Email analysis :
NOTE : Urgent Attention!!
NOTE : ovia.david2@aol.com
NOTE : hesterleigh.annz@gmail.com
NOTE : X-Aol-Ip : 197.210.227.124
How are u doing today ? Apologies! I am a military woman ,seeking your kind assistance to move the sum of ($4.7.M USD) to you, as far as i can be assured that my money will be safe in your care until i complete my service here in Iraq and come over next month.
This is legitimate, and there is no danger involved. I need your full details to enable us proceed, such as : your Full Name, Full Address, Direct Mobile Number via hesterleigh.annz@gmail.com
Regards ,
Sgt. Leigh .A. Hester
Email analysis :
NOTE : Urgent Attention!!
NOTE : ovia.david2@aol.com
NOTE : hesterleigh.annz@gmail.com
NOTE : X-Aol-Ip : 197.210.227.124
Dear Lucky Winner, (Lottery Scam)
APEC LOTTERY PROMO
Ref Number: NLUS/910/16454
Batch Number: VC/32/ID1141
Dear Lucky Winner,
We are happy to announce to you that your email address have won $2,000,000.00 (Two Million US Dollars). You were selected among the 10(Ten) lucky winners during the internet ballot draw of the APEC LOTTERY PROMO.
You are advised to contact the claim department immediately with the below information for the release of your prize money.:
Mr Lawrence Markins (Claim Agent)
Tel: +1-323-999-9775
Fax: +1-8176281183
Email: apeclototerpromo@consultant.com
International prize Department
CONGRATULATIONS!!!
Yours faithfully,
Mrs. Alice schieble
Online Coordinator.
Email analysis :
NOTE : rebeccaschieble8@yahoo.com
NOTE : apeclototerpromo@consultant.com
NOTE : Received : from sonic.gate.mail.ne1.yahoo.com
NOTE : client-ip=77.238.178.205;
Ref Number: NLUS/910/16454
Batch Number: VC/32/ID1141
Dear Lucky Winner,
We are happy to announce to you that your email address have won $2,000,000.00 (Two Million US Dollars). You were selected among the 10(Ten) lucky winners during the internet ballot draw of the APEC LOTTERY PROMO.
You are advised to contact the claim department immediately with the below information for the release of your prize money.:
Mr Lawrence Markins (Claim Agent)
Tel: +1-323-999-9775
Fax: +1-8176281183
Email: apeclototerpromo@consultant.com
International prize Department
CONGRATULATIONS!!!
Yours faithfully,
Mrs. Alice schieble
Online Coordinator.
Email analysis :
NOTE : rebeccaschieble8@yahoo.com
NOTE : apeclototerpromo@consultant.com
NOTE : Received : from sonic.gate.mail.ne1.yahoo.com
NOTE : client-ip=77.238.178.205;
Thursday, May 18, 2017
Congratulations! You've won ｣2,000,000! (Scam leak)
Your E-mail/Mobile Number has won £2,000,000 GBP in the Coca-Cola Promo,
To claim go to www.moboccolagify.com , click CLAIM enter Ref#: CC74117Q
Email analysis :
NOTE : ash0611jnag@gmail.com
NOTE : Received : from User (unknown [109.236.88.198])
NOTE : (Authenticated sender: admin@demo.pop-it.fr)
NOTE : by mail1.demo.pop-it.fr
Scam analysis :
CLICK : http://www.moboccolagify.com/
REDIRECTED : http://www.moboccolagify.com/cgi-sys/suspendedpage.cgi
RESULT : The scam was removed.
www.moboccolagify.com analysis :
Domain Name: moboccolagify.com
Registry Domain ID: 2099820320_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: https://www.namesilo.com/
Updated Date: 2017-05-11
Creation Date: 2017-02-22
Registrar Registration Expiration Date: 2018-02-22
Registrar: NameSilo, LLC
Registrar IANA ID: 1479
Registrar Abuse Contact Email: abuse@namesilo.com
Registrar Abuse Contact Phone: +1.4805240066
Reseller: QHOSTER.COM
Status: clientTransferProhibited
Registrant Name: Catherine Wosoh
Registrant Street: Bow Cottage, Robin Hood Ln, Wrightington
Registrant City: Appley Bridge
Registrant State/Province: Wigan
Registrant Postal Code: WN6 9QG
Registrant Country: GB
Registrant Phone: +44.02033897270
Registrant Email: xavierjapa147@gmail.com
Admin Name: Catherine Wosoh
Admin Street: Bow Cottage, Robin Hood Ln, Wrightington
Admin City: Appley Bridge
Admin State/Province: Wigan
Admin Postal Code: WN6 9QG
Admin Country: GB
Admin Phone: +44.02033897270
Admin Email: xavierjapa147@gmail.com
Registry Tech ID:
Tech Name: Catherine Wosoh
Tech Organization:
Tech Street: Bow Cottage, Robin Hood Ln, Wrightington
Tech City: Appley Bridge
Tech State/Province: Wigan
Tech Postal Code: WN6 9QG
Tech Country: GB
Tech Phone: +44.02033897270
Tech Email: xavierjapa147@gmail.com
Name Server: NS1.QHOSTER.NET
Name Server: NS2.QHOSTER.NET
Name Server: NS3.QHOSTER.NET
Name Server: NS4.QHOSTER.NET
xavierjapa147@gmail.com analysis :
xavierjapa147@gmail.com
Name Marianne Dillon
Address 4988 WORTH ST
City MILLINGTON
State MICHIGAN
Country US United States
Phone +1.9893251951
Fax +1.8017659400
List of domains registred by xavierjapa147@gmail.com :
newteamonli.com :
Registrant Name: MARIANNE DILLON
Registrant Organization:
Registrant Street: 4988 WORTH ST
Registrant City: MILLINGTON
Registrant State/Province: MICHIGAN
Registrant Postal Code: 48746
Registrant Country: US
Registrant Phone: +1.9893251951
Registrant Email: XAVIERJAPA147@GMAIL.COM
moboccolaltd.com :
Out
leekansoliccitor.com
Name: samuel buchman
Organization: buchman Inc
Mailing Address: 12927 288th St, Lindstrom 55045 US
Phone: +1.9706730990
Email:xavierjapa147@Gmail.com
Conclusion : Too much leakage to send a scam with no content...
To claim go to www.moboccolagify.com , click CLAIM enter Ref#: CC74117Q
Email analysis :
NOTE : ash0611jnag@gmail.com
NOTE : Received : from User (unknown [109.236.88.198])
NOTE : (Authenticated sender: admin@demo.pop-it.fr)
NOTE : by mail1.demo.pop-it.fr
Scam analysis :
CLICK : http://www.moboccolagify.com/
REDIRECTED : http://www.moboccolagify.com/cgi-sys/suspendedpage.cgi
RESULT : The scam was removed.
www.moboccolagify.com analysis :
Domain Name: moboccolagify.com
Registry Domain ID: 2099820320_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: https://www.namesilo.com/
Updated Date: 2017-05-11
Creation Date: 2017-02-22
Registrar Registration Expiration Date: 2018-02-22
Registrar: NameSilo, LLC
Registrar IANA ID: 1479
Registrar Abuse Contact Email: abuse@namesilo.com
Registrar Abuse Contact Phone: +1.4805240066
Reseller: QHOSTER.COM
Status: clientTransferProhibited
Registrant Name: Catherine Wosoh
Registrant Street: Bow Cottage, Robin Hood Ln, Wrightington
Registrant City: Appley Bridge
Registrant State/Province: Wigan
Registrant Postal Code: WN6 9QG
Registrant Country: GB
Registrant Phone: +44.02033897270
Registrant Email: xavierjapa147@gmail.com
Admin Name: Catherine Wosoh
Admin Street: Bow Cottage, Robin Hood Ln, Wrightington
Admin City: Appley Bridge
Admin State/Province: Wigan
Admin Postal Code: WN6 9QG
Admin Country: GB
Admin Phone: +44.02033897270
Admin Email: xavierjapa147@gmail.com
Registry Tech ID:
Tech Name: Catherine Wosoh
Tech Organization:
Tech Street: Bow Cottage, Robin Hood Ln, Wrightington
Tech City: Appley Bridge
Tech State/Province: Wigan
Tech Postal Code: WN6 9QG
Tech Country: GB
Tech Phone: +44.02033897270
Tech Email: xavierjapa147@gmail.com
Name Server: NS1.QHOSTER.NET
Name Server: NS2.QHOSTER.NET
Name Server: NS3.QHOSTER.NET
Name Server: NS4.QHOSTER.NET
xavierjapa147@gmail.com analysis :
xavierjapa147@gmail.com
Name Marianne Dillon
Address 4988 WORTH ST
City MILLINGTON
State MICHIGAN
Country US United States
Phone +1.9893251951
Fax +1.8017659400
List of domains registred by xavierjapa147@gmail.com :
newteamonli.com :
Registrant Name: MARIANNE DILLON
Registrant Organization:
Registrant Street: 4988 WORTH ST
Registrant City: MILLINGTON
Registrant State/Province: MICHIGAN
Registrant Postal Code: 48746
Registrant Country: US
Registrant Phone: +1.9893251951
Registrant Email: XAVIERJAPA147@GMAIL.COM
moboccolaltd.com :
Out
leekansoliccitor.com
Name: samuel buchman
Organization: buchman Inc
Mailing Address: 12927 288th St, Lindstrom 55045 US
Phone: +1.9706730990
Email:xavierjapa147@Gmail.com
Conclusion : Too much leakage to send a scam with no content...
lovelykumah
Hello Dear am well pleased to contact you here, i am female, please i will like you to mail me back so that i will send you my pictures and to discuss the confidential issue i have to discuss with you. please reply me back for more details,miss lovely my email(lovelykumah11@hotmail.com)
Email analysis :
NOTE : lovelykumah11@hotmail.com
NOTE : Received : from sonic.gate.mail.ne1.yahoo.com
NOTE : by sonic325.consmr.mail.gq1.yahoo.com
NOTE : client-ip=98.137.67.179;
Saturday, May 13, 2017
Need mnoey?Eaarn 50.000 per moonth.
###MAKE MONEY ON1|NE###
===EAARN 50.000 PER MONNTH===
1.You need 0nly email to regisster
2.Fluly automattic sytsem!NOTHING TO DO...
3.@bs0lutely passvie inc0me
http://www.wildstonesolution.com/wp-content/plugins/wordpress-seo/vendor/xrstf/composer-php52/lib/5bc10d79da.html
The title of the scam can also be : Need mooney?Eran 50.000 per moonth. with a different content
###MAAKE MONNEY ONLLNE###
===EAARN 50.000 PER MONTH===
1.You neeed only emmail to reg|$ter
2.Fuliy automatic ssytem!NOTHING TO DO...
3.Absolute1y passive lnc0me
http://www.ieee-papers.com/wp-content/themes/twentyseventeen/2159b211e2.html
Email analysis :
NOTE : mhurdsj@excite.it
NOTE : gfgrimaud@tjb-barre.com
NOTE : 202.150.50.14
NOTE : 113.186.177.167
Phishing analysis :
CLICK : http://www.wildstonesolution.com/wp-content/plugins/wordpress-seo/vendor/xrstf/composer-php52/lib/5bc10d79da.html
Result : Redirect to Google, the phishing was removed...
CLICK : http://www.ieee-papers.com/wp-content/themes/twentyseventeen/2159b211e2.html
RESULT : Redirect to Google, the phishing was removed
NOTE : Two wordpress websites were compromised to do this phishing.
===EAARN 50.000 PER MONNTH===
1.You need 0nly email to regisster
2.Fluly automattic sytsem!NOTHING TO DO...
3.@bs0lutely passvie inc0me
http://www.wildstonesolution.com/wp-content/plugins/wordpress-seo/vendor/xrstf/composer-php52/lib/5bc10d79da.html
The title of the scam can also be : Need mooney?Eran 50.000 per moonth. with a different content
###MAAKE MONNEY ONLLNE###
===EAARN 50.000 PER MONTH===
1.You neeed only emmail to reg|$ter
2.Fuliy automatic ssytem!NOTHING TO DO...
3.Absolute1y passive lnc0me
http://www.ieee-papers.com/wp-content/themes/twentyseventeen/2159b211e2.html
Email analysis :
NOTE : mhurdsj@excite.it
NOTE : gfgrimaud@tjb-barre.com
NOTE : 202.150.50.14
NOTE : 113.186.177.167
Phishing analysis :
CLICK : http://www.wildstonesolution.com/wp-content/plugins/wordpress-seo/vendor/xrstf/composer-php52/lib/5bc10d79da.html
Result : Redirect to Google, the phishing was removed...
CLICK : http://www.ieee-papers.com/wp-content/themes/twentyseventeen/2159b211e2.html
RESULT : Redirect to Google, the phishing was removed
NOTE : Two wordpress websites were compromised to do this phishing.
Friday, May 12, 2017
(no subject)
السلام عليكم انا مدام نادية محمد اريد منك ان تساعدنى لاننى لدى مشروع اريد ان اعرضه اليك لذا ارجو منك التواصل معى على هذا الايميل
nadia55mohammed@gmail.com
Translation :
Salam alaikum. I am Madame Nadia Mohamed. I want you to help me because I have a project I want to introduce to you so I hope you can contact me on this email
Nadia55mohammed@gmail.com
Email analysis :
NOTE : nadia55mohammed@gmail.com
NOTE : ib@caucasus.net
NOTE : Received : from webmail.caucasus.net
NOTE : (unknown [213.157.215.234])
NOTE : by mail.caucasus.net (Postfix)
nadia55mohammed@gmail.com
Translation :
Salam alaikum. I am Madame Nadia Mohamed. I want you to help me because I have a project I want to introduce to you so I hope you can contact me on this email
Nadia55mohammed@gmail.com
Email analysis :
NOTE : nadia55mohammed@gmail.com
NOTE : ib@caucasus.net
NOTE : Received : from webmail.caucasus.net
NOTE : (unknown [213.157.215.234])
NOTE : by mail.caucasus.net (Postfix)
Rich and Famous
JOIN THE GREAT ILLUMINATI BROTHER HOOD TODAY AND LIVE A BETTER AND HAPPY LIFE. WELCOME TO THE GREAT TEMPLE OF RICHES AND FAME. Are you a business, Man, politician, musical, student and you. want to be rich, powerful and be famous in life. You can achieve your dreams by being a member of the Great illuminati brother hood. With this all your dreams and heart desire can be fully accomplish, if you really want to be a member of the great illuminati brother hood, contact the Lord illuminati now, Note: newly recruited members are entitled with 100 thousand US Dollars , A Golden Ring, that will protect and guild you from enemies, and a free visa to United State Of America . Please will do not share blood. Do not miss this opportunity. Call Jack lord Now . ¡¡¡ +19066620480. Or email now on: illuminatitemple792@gmail.com
Email analysis :
NOTE : illuminatitemple792@gmail.com
NOTE : gcdash@nitrkl.ac.in
NOTE : X-Originating-Ip : [172.16.0.20]
NOTE : Received : from zmbox2.nitrkl.ac.in
NOTE : (zmbox2.nitrkl.ac.in [172.16.0.24])
NOTE : X-Mailer : Zimbra 8.6.0_GA_1194 (zclient/8.6.0_GA_1194)
NOTE : Received : from mailhost2.nitrkl.ac.in (saraswati.nitrkl.ac.in. [27.48.137.18]
Email analysis :
NOTE : illuminatitemple792@gmail.com
NOTE : gcdash@nitrkl.ac.in
NOTE : X-Originating-Ip : [172.16.0.20]
NOTE : Received : from zmbox2.nitrkl.ac.in
NOTE : (zmbox2.nitrkl.ac.in [172.16.0.24])
NOTE : X-Mailer : Zimbra 8.6.0_GA_1194 (zclient/8.6.0_GA_1194)
NOTE : Received : from mailhost2.nitrkl.ac.in (saraswati.nitrkl.ac.in. [27.48.137.18]
Wednesday, May 10, 2017
Tammy Joorst (Email Leak)
Good day
how can you supply me?
Email analysis :
NOTE : 3563909@myuwc.ac.za
NOTE : 3556254@myuwc.ac.za
NOTE : regie44@outlook.com
Email leak :
saymorebc@hotmail.com, sayyashdesigns@yahoo.com, sazdesign67@yahoo.com.au, sbaladev_24@yahoo.com, sbasnyat@las-cruces.org, sbbwa.secretary@gmail.com, sbc@sbcinv.net, sbc4radio@yahoo.com, sbghosh@hotmail.com, SBIRRO1984@hotmail.com, sbrady@hotmail.com, sbryson@westernleisureservices.com.au, sbsbjulia@gmail.com, sbugan@ncpg.gov.za, sburdisso@hotmail.com, scampbell3523@gmail.com, scampher@gmail.com, scamwarners9@gmail.com, scanvps@hotmail.com, scardoso_1@yahoo.com.ar, scarfyw1@yahoo.com.au, scarletcourierupdate@yahoo.co.uk, scc.info@tsogosun.com, scchiou_43197@yahoo.com.tw, scentedcandlelady@gmail.com, schakrabarty@gmail.com, schalk.ltgroep@mailbox.co.za, scharvest@gmail.com, scheffer.luana@gmail.com, schewitzl@gmail.com, schickelizabeth@hotmail.com, schoa2014@gmail.com, schoeman.yolandy@gmail.com, schoemanattorneys@gmail.com, scholtzrg@gmail.com, School@yahoo.de, sclsis@hotmail.com, scmibs@hotmail.com, sconature@gmail.com, sconejumpclub@hotmail.com, scordony@hotmail.com, SCOssiya@hotmail.com, scott_lee2000@yahoo.com, scottadamslv@gmail.com, scottandersonelectrical@gmail.com, scottandersonelectrical@gmail.co, scottdishner@gmail.com, scottjohn06@hotmail.com
how can you supply me?
Email analysis :
NOTE : 3563909@myuwc.ac.za
NOTE : 3556254@myuwc.ac.za
NOTE : regie44@outlook.com
Email leak :
saymorebc@hotmail.com, sayyashdesigns@yahoo.com, sazdesign67@yahoo.com.au, sbaladev_24@yahoo.com, sbasnyat@las-cruces.org, sbbwa.secretary@gmail.com, sbc@sbcinv.net, sbc4radio@yahoo.com, sbghosh@hotmail.com, SBIRRO1984@hotmail.com, sbrady@hotmail.com, sbryson@westernleisureservices.com.au, sbsbjulia@gmail.com, sbugan@ncpg.gov.za, sburdisso@hotmail.com, scampbell3523@gmail.com, scampher@gmail.com, scamwarners9@gmail.com, scanvps@hotmail.com, scardoso_1@yahoo.com.ar, scarfyw1@yahoo.com.au, scarletcourierupdate@yahoo.co.uk, scc.info@tsogosun.com, scchiou_43197@yahoo.com.tw, scentedcandlelady@gmail.com, schakrabarty@gmail.com, schalk.ltgroep@mailbox.co.za, scharvest@gmail.com, scheffer.luana@gmail.com, schewitzl@gmail.com, schickelizabeth@hotmail.com, schoa2014@gmail.com, schoeman.yolandy@gmail.com, schoemanattorneys@gmail.com, scholtzrg@gmail.com, School@yahoo.de, sclsis@hotmail.com, scmibs@hotmail.com, sconature@gmail.com, sconejumpclub@hotmail.com, scordony@hotmail.com, SCOssiya@hotmail.com, scott_lee2000@yahoo.com, scottadamslv@gmail.com, scottandersonelectrical@gmail.com, scottandersonelectrical@gmail.co, scottdishner@gmail.com, scottjohn06@hotmail.com
..£1million Donated To You##..
You have been selected to receive a whooping sum of £1million which the Davies family donated to you After scooping £61million - in one of Britain's biggest Lotto Euro Millions .My family and i decided to set up a foundation aimed at providing financial aids and assistance to reputable individuals around the world to help fight cancer, in their various community.
It's a great way to give back to the world after miraculously cheated death, Read more about me and my family on the News Link Below.
Kindly forward your Full name, age, Tel.No, Address
Sincerely,
Davies Family Charitable Trust
Email analysis :
NOTE : Davies Family Charitable Trust
NOTE : daviesctrust@cox.net
NOTE : Received : from [192.168.176.198] (71.41.196.26)
NOTE : X-Originating-Ip : [71.41.196.26]
NOTE : by Exchange.ku.dk (172.28.3.173)
It's a great way to give back to the world after miraculously cheated death, Read more about me and my family on the News Link Below.
Kindly forward your Full name, age, Tel.No, Address
Sincerely,
Davies Family Charitable Trust
Email analysis :
NOTE : Davies Family Charitable Trust
NOTE : daviesctrust@cox.net
NOTE : Received : from [192.168.176.198] (71.41.196.26)
NOTE : X-Originating-Ip : [71.41.196.26]
NOTE : by Exchange.ku.dk (172.28.3.173)
Richard Maxwell
We have deposited the check of your fund($25.400`000`00USD)through MONEY GRAM department after our final meeting regarding your fund, All you will do is to contact money gram director (479)3853899 He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as,
Receiver's Name_______________
Address: ________________
Country: _____________
Phone Number: _____________
Though,Mr.Richard Maxwell sent $4000 in your name today so contact Mr.richardmaxwe or you call him as soon as you receive this email(richardmaxwell314@gmail.com) and tell him to give you the reference, sender name and question/answer to pick the $5000 Please let us know as soon as you received all your fund,
Best Regards.
MONEY GRAM AGENT
Email analysis :
NOTE : X-Originating-Ip : [185.56.137.11]
NOTE : Received : from mail.ochoa.com.do (mail.ochoa.com.do [172.17.1.231])
NOTE : servicedesk@ochoa.com.do
NOTE : richardmaxwell314@gmail.com
Receiver's Name_______________
Address: ________________
Country: _____________
Phone Number: _____________
Though,Mr.Richard Maxwell sent $4000 in your name today so contact Mr.richardmaxwe or you call him as soon as you receive this email(richardmaxwell314@gmail.com) and tell him to give you the reference, sender name and question/answer to pick the $5000 Please let us know as soon as you received all your fund,
Best Regards.
MONEY GRAM AGENT
Email analysis :
NOTE : X-Originating-Ip : [185.56.137.11]
NOTE : Received : from mail.ochoa.com.do (mail.ochoa.com.do [172.17.1.231])
NOTE : servicedesk@ochoa.com.do
NOTE : richardmaxwell314@gmail.com
NOTICE OF ONGOING INVESTIGATION
Federal Bureau Of Investigations
Headquarters Washington Dc.
Building 935 Pennsylvania Ave.
NW WASHINGTON, D.C. 20535-0001
E-Mail: fbi.gov0012@usa.com
NOTICE OF ONGOING INVESTIGATION
Attn Recipient:
This is agent Josh, we were sent by the Director of Federal Bureau of Investigation (JAMES B.COMEY), we are currently in Africa as an FBI/ United States delegate that have been delegated to investigate these fraudsters who are in the business of swindling Foreigners that has transactions in Africa. Be informed that during our investigations we found out that there is a total amount of $2.5 Million that has been assigned in your name as the beneficiary and these fraudsters are busy swindling you without any hope of receiving your fund, these are the works of the fraudsters who needed to extort money from you in the name of this transfer, We have to inform you that we have arrested some men in respect of this delayed overdue fund. We have a very limited time to stay in Africa here so I advise you urgently respond to this message. These criminals will be caught unaware and we don't want them to know this new development to avoid jeopardizing our investigation, you need to conceal anything that has to do with this exercise to enable us get all the necessary information we required. I will be expecting your swift response as soon as you receive this email and notify us of any message or phone call you receive from those fraudsters for us to investigate on it before you make any contact with them.
In case if found this message in spam folder, it could be due to your Internet Service Provider, ISP. So kindly move to your inbox before replying.
Regards,
JACKSON JOSH
International Banking Unit
862 955-2836
Email analysis :
NOTE : X-Originating-Ip : [197.234.219.26]
NOTE : Received : from mzcstore262.ocn.ad.jp
NOTE : (mz-fcb262p.ocn.ad.jp [180.8.111.198])
NOTE : jackson.fbi@yahoo.com
NOTE : "WWW."@star.ocn.ne.jp
Headquarters Washington Dc.
Building 935 Pennsylvania Ave.
NW WASHINGTON, D.C. 20535-0001
E-Mail: fbi.gov0012@usa.com
NOTICE OF ONGOING INVESTIGATION
Attn Recipient:
This is agent Josh, we were sent by the Director of Federal Bureau of Investigation (JAMES B.COMEY), we are currently in Africa as an FBI/ United States delegate that have been delegated to investigate these fraudsters who are in the business of swindling Foreigners that has transactions in Africa. Be informed that during our investigations we found out that there is a total amount of $2.5 Million that has been assigned in your name as the beneficiary and these fraudsters are busy swindling you without any hope of receiving your fund, these are the works of the fraudsters who needed to extort money from you in the name of this transfer, We have to inform you that we have arrested some men in respect of this delayed overdue fund. We have a very limited time to stay in Africa here so I advise you urgently respond to this message. These criminals will be caught unaware and we don't want them to know this new development to avoid jeopardizing our investigation, you need to conceal anything that has to do with this exercise to enable us get all the necessary information we required. I will be expecting your swift response as soon as you receive this email and notify us of any message or phone call you receive from those fraudsters for us to investigate on it before you make any contact with them.
In case if found this message in spam folder, it could be due to your Internet Service Provider, ISP. So kindly move to your inbox before replying.
Regards,
JACKSON JOSH
International Banking Unit
862 955-2836
Email analysis :
NOTE : X-Originating-Ip : [197.234.219.26]
NOTE : Received : from mzcstore262.ocn.ad.jp
NOTE : (mz-fcb262p.ocn.ad.jp [180.8.111.198])
NOTE : jackson.fbi@yahoo.com
NOTE : "WWW."@star.ocn.ne.jp
Thursday, May 4, 2017
I wait to read from you
Greetings,
I represent an investment interest that is interested in investing abroad, a large volume of resources, we are seeking your participation as an overseas representatives to treat the investment in your country. If interested, please contact me by writing back.( )
Thank you very much
Email analysis :
NOTE : vb00149@surrey.ac.uk
NOTE : v.bokinala@surrey.ac.uk
NOTE : 19investment@gmail.com
NOTE : client-ip=195.245.231.133;
Received : from [85.158.136.51] by server-6.bemta-5.messagelabs.com
NOTE : Received : from 178.33.210.30 (131.227.131.245)
NOTE : by EXHT021P.surrey.ac.uk (131.227.200.35)
NOTE : with Microsoft SMTP Server (TLS) id 8.3.485.1;
NOTE : EXHT021P.surrey.ac.uk
NOTE : www.surrey.ac.uk
NOTE : The @UniOfSurrey servers were used to relay a scam.
NOTE : The email of #vivek_bokinala was used to relay this #scam
I represent an investment interest that is interested in investing abroad, a large volume of resources, we are seeking your participation as an overseas representatives to treat the investment in your country. If interested, please contact me by writing back.( )
Thank you very much
Email analysis :
NOTE : vb00149@surrey.ac.uk
NOTE : v.bokinala@surrey.ac.uk
NOTE : 19investment@gmail.com
NOTE : client-ip=195.245.231.133;
Received : from [85.158.136.51] by server-6.bemta-5.messagelabs.com
NOTE : Received : from 178.33.210.30 (131.227.131.245)
NOTE : by EXHT021P.surrey.ac.uk (131.227.200.35)
NOTE : with Microsoft SMTP Server (TLS) id 8.3.485.1;
NOTE : EXHT021P.surrey.ac.uk
NOTE : www.surrey.ac.uk
NOTE : The @UniOfSurrey servers were used to relay a scam.
NOTE : The email of #vivek_bokinala was used to relay this #scam
_ C O N G R A T U L A T I O N S _
WESTERN UNION ASIA
[HEAD OFFICE] - KUALA LUMPUR, MALAYSIA
" WESTERN UNION GRANT 2017 "
YOUR EMAIL WAS SELECTED AND HAVE BEEN AWARDED THE SUM OF $500,000.00 USD. YOU WILL BE ISSUED A WESTERN UNION NETSPEND MASTERCARD CREDITED WITH $500,000.00 USD
NOTE: The Delivery Of Your WESTERN UNION NETSPEND MASTERCARD To Your HOME is FREE !
Your Reference No: WU/WUA2017/BBKMY
For More Information , Please Contact -
Western Union Agent: MELISSA BINTI MUBARAK
Contact E-mail: westernunion.melissamubarak@gmail.com
Office Telephone: +60165781566
CONGRATULATION ONCE AGAIN FROM WESTERN UNION © [ ASIA ].
Email analysis :
NOTE : wu.asia2017@gmail.com
NOTE : westernunion.melissamubarak@gmail.com
NOTE : info@viniwee.com
NOTE : Received : from User (unknown [51.15.147.28])
NOTE : by host.viniwee.com
[HEAD OFFICE] - KUALA LUMPUR, MALAYSIA
" WESTERN UNION GRANT 2017 "
YOUR EMAIL WAS SELECTED AND HAVE BEEN AWARDED THE SUM OF $500,000.00 USD. YOU WILL BE ISSUED A WESTERN UNION NETSPEND MASTERCARD CREDITED WITH $500,000.00 USD
NOTE: The Delivery Of Your WESTERN UNION NETSPEND MASTERCARD To Your HOME is FREE !
Your Reference No: WU/WUA2017/BBKMY
For More Information , Please Contact -
Western Union Agent: MELISSA BINTI MUBARAK
Contact E-mail: westernunion.melissamubarak@gmail.com
Office Telephone: +60165781566
CONGRATULATION ONCE AGAIN FROM WESTERN UNION © [ ASIA ].
Email analysis :
NOTE : wu.asia2017@gmail.com
NOTE : westernunion.melissamubarak@gmail.com
NOTE : info@viniwee.com
NOTE : Received : from User (unknown [51.15.147.28])
NOTE : by host.viniwee.com
Thursday, April 27, 2017
Assalamualaikum
Greeting !
How are you? My name is Kayla Morni Mohd, a Citizen of Syria lived in Aleppo- Syria., I'm one of the former senior inspector for Syria National Petroleum Company(Kawkab Oil Company). I have Business investment transaction worth $8.2 Million. I will like to relocate out from Syria, Because here in Syria is serious war here. I wait to hear from you as soon as you see this message
regards,
Kayla Morni Mohd
Email analysis :
NOTE : morie8@bigpond.com
NOTE : X-Originating-Ip : [46.23.66.106]
How are you? My name is Kayla Morni Mohd, a Citizen of Syria lived in Aleppo- Syria., I'm one of the former senior inspector for Syria National Petroleum Company(Kawkab Oil Company). I have Business investment transaction worth $8.2 Million. I will like to relocate out from Syria, Because here in Syria is serious war here. I wait to hear from you as soon as you see this message
regards,
Kayla Morni Mohd
Email analysis :
NOTE : morie8@bigpond.com
NOTE : X-Originating-Ip : [46.23.66.106]
Subscribe to:
Posts (Atom)