Thursday, February 4, 2016

Bello Philip

Attention

I have instructed my secretary Sir.James Michael to release some funds in a Cashier cheque to you.Write him through his Email:( jamesmichael1@yandex.com ) and forward your details to him.

1. Full Name:.........
2. Country:........
3. Delivery Address:..........
4. Telephone:........../Occupation...........
5. Your Age....../Sex..........

Email analysis :

NOTE : jamesmichael1@yandex.com
NOTE : bellophilip.@siren.ocn.ne.jp
NOTE : Content-Type : text/plain; charset=ISO-2022-JP

Monday, February 1, 2016

complement of the season

My Dear Friend,

I am very happy to inform you about my success in getting that fund Now, I want you to contact my secretary on the information below:

NAME: Mr. Peter Akala EMAIL:( peterakala@ymail.com)

ask he to send you the total sum of ($1.5m) in a bank draft, which I kept for your compensation.because i will be very busy with my new partner.

CONTACT him ON this email( peterakala@ymail.com)

Regards,
Saka

Email analysis :

NOTE : sakabadmuslaw@yahoo.fr
NOTE : sakabadmus@sakalawyer.de.be
NOTE : Received : by 217.12.9.15;


NOTE : client-ip=67.195.87.187;

Monday, August 31, 2015

Notice to Appear

Notice to Appear,

This is to inform you to appear in the Court on the September 02 for your case hearing. You are kindly asked to prepare and bring the documents relating to the case to Court on the specified date.

Note: The case may be heard by the judge in your absence if you do not come.

The copy of Court Notice is attached to this email.

Regards,
Gary Noble,
Court Secretary.

000475484.zip

File analysis :

OPEN : 000475484.zip
RESULT : File is a virus.

Virus analysis :

SHA256 : 0c8d2b8cba6611097793124c3dac9e9313207ba8857b41330ca021c89f52c82f
ALYac : JS:Trojan.JS.Downloader.AN
AVG : JS/Downloader.Agent
AVware : Malware.JS.Generic (JS)
Ad-Aware : JS:Trojan.JS.Downloader.AN
Arcabit : JS:Trojan.JS.Downloader.AN
Avast : JS:Agent-DOB [Trj]
BitDefender : JS:Trojan.JS.Downloader.AN
CAT-QuickHeal : JS.Downloader.Z
Comodo : Heur.Dual.Extensions
DrWeb : SCRIPT.Virus
ESET-NOD32 : JS/TrojanDownloader.Nemucod.AV
Emsisoft : JS:Trojan.JS.Downloader.AN (B)
F-Secure : JS:Trojan.JS.Downloader.AN
Fortinet : JS/Agent.CPL!tr
GData : JS:Trojan.JS.Downloader.AN
Kaspersky : Trojan-Downloader.JS.Agent.hhe
McAfee : JS/Nemucod.c
McAfee-GW-Edition : JS/Nemucod.c
Microsoft : TrojanDownloader:JS/Nemucod.P
NANO-Antivirus : Trojan.Script.Agent.dtchtk
Rising : NORMAL:Trojan.DL.Script.JS.Nemucod.b!1616509[F1]
Sophos : JS/DwnLdr-MON
VIPRE : Malware.JS.Generic (JS)
nProtect : JS:Trojan.JS.Downloader.AN

Email analysis :

NOTE : Notice to Appear
NOTE : gary.noble@wayneshostingworld.co.uk
NOTE : Received : from doggroom by server.wayneshostingworld.co.uk with local (Exim 4.85)
NOTE : Received : from server.wayneshostingworld.co.uk (wayneshostingworld.co.uk. [78.129.234.106])
NOTE : X-Php-Script : doggroomingparlour.co.uk/post.php for 77.111.207.70

Saturday, July 18, 2015

Re,contact my Secretary

Hello Good Friend.

I'm happy to inform you about my success in getting those funds transferred under the cooperation of a new partner from Paraguay. Presently i'm in Paraguay for investment projects with my own share of the total sum.

Now contact my Secretary,his name is MR Ruben.Smith, on his email address here as (smith_ruben@inbox.ru) ask him to send you the total ($1.2m)one million two hundred thousand dollars which i kept for your compensation for all the past efforts and attempts you try to assist me in this matter. I appreciated your efforts at that time very much only that it fail us some how. so feel free and get in touched with my secretary and instruct her where to send the amount to you.

Please do let me know immediately you receive it so that we can share the joy after all the sufferness at that time. in the moment, i am very busy here because of the investment projects which me and the new partner are having at hand, finally, remember that I had forwarded instruction to the secretary on your behalf to receive that money, so feel free to get in touch with MR Ruben.Smith, he will send the amount to you without any delay.....Do not forget to use some money inside to give thanks giving to ALMIGHTY GOD IN ANY YOUR RELIGION.....my secretary email address is is (smith_ruben@inbox.ru).

1.YOUR NAMEIN-FULL:
2:YOURRESIDENCE ADDRESS=
3:YOUROCCUPATION=
4:YOURDIRECT PHONE NUMBER=
5:YOURORIGIN=======
6:YOUR AGE=

Send an email to him with the above email and apply for your fund as i have informed him about you already.

Thanks.
Dr. Mr.Joe Wilson.

Email analysis :

NOTE : smith_ruben@inbox.ru
NOTE : ofile680@gmail.com
NOTE : www-data@troyes-expo.com
NOTE : Received : from 84.ip-176-31-185.eu
NOTE : (HELO vps23749.ovh.net) (176.31.185.84)

Tuesday, May 26, 2015

CONTACT MY SECRETART FOR YOUR BANK DRAFT!!

GooPhilip ENGINEERING COMPANY,
26, V-Island Road,
Ikeja Avenue,
Lagos-Nigeria.

Dear Friend,

Compliment.

How are you and your family doing ? Hope you have not forgotten me? I am Dr Maurice Albert the man from Nigeria who contacted you some time ago to assist me secure the release of some money accrued from the over invoicing of a contract/inheritance that was awarded by my government sometime ago during the military regime. Though you were not able to assist me conclude the transaction, I'm happy to inform you about my success in getting those funds transferred under the assistance and cooperation of a new partner from Brazil. Presently I'm in South Korea for investment projects with my own share of the total sum. Meanwhile, i didn't forget your past efforts and attempts to assist me in transferring those funds, I made sure you are not left out the benefit of the transaction hence I kept aside for you sum of Eight Million Five Hundred Thousand United States Dollar ($8,500,000.00)draft. Please bear with me for the making the initial contact through Email. Mean-while, A woman came to MY SECRETARY OFFICE few Days Ago with a letter,Claiming to be your true Representative.

HERE BELOW IS HER INFORMATION AS SUBMITTED TO MY SECRETARY;

NAME ANNE BRENDA
4031 Villa Vista
Palo Alto, CA 94306
BANK NAME: CITIBANK, ARIZONA, USA.
ACCOUNT NUMBER: 6503809008.

Please,Do reconfirm to MY SECRETARY'S OFFICE, as a matter of urgency if this woman is from you so that he will not be held responsible for paying into the Wrong Name.
If this woman is not your REP,You are requested to fill and send this information's for verification purpose so that your VALID CERTIFIED BANK DRAFT US$8,500,000.00 MILLION US DOLLARS WILL NOT BE delivered into the wrong hand please.

THIS FUND IS AS A RESULT OF INHERITANCE ON YOUR BEHALF:

YOUR NAME:...............................
YOUR ADDRESS:............................
YOUR PHONE NUMBER........................
CELL PHONE NUMBER........................
AGE......................................
SEX:.....................................
YOUR OCCUPATION/POSITION HELD..........................

I appreciated your efforts at that time very much,so feel free and get in touch with my secretary Mr.Paul Adams, l have instructed him on how to send the Bank Draft to you. Please do let me know immediately you receive the Draft so that we can share the joy together after all the sufferings at that time. In the moment, I'm very busy here because of the investment projects which i and my current partner are having at hand. Finally, remember that i have left instruction to my secretary so as soon as you contact him he will send the Draft to you,so feel free to get in touch with MY SECRETARY NOW.

Below is the contact of my secretary
Name: Mr.Paul Adams
Email: mrpauladamssecretarry@gmail.com

Kindest Regard
Dr Maurice Albert.

Email analysis :

NOTE : mrpauladamssecretarry@gmail.com
NOTE : teste@itbnet.com.br
NOTE : Received : from [173.208.223.3] (helo=User) by srv01.itbnet.com.br