Thursday, September 4, 2014

Cartasi Phishing



Gentile cliente,

Grazie ai recenti trasferimenti illegali di conti elettronici, il tuo conto CartaSl č stato bloccato per la tua sicurezza. Questo č stato fatto per assicurare il tuo conto e le tue informazioni private. Come misura di sicurezza, vi consigliamo di collegarti al vostro Conto CartaSl e cambiare il tuo codice di accesso
Il nostro sistema ti aiuterŕ rapidamente a cambiare il tuo codice di accesso. Il tuo conto non sarŕ sospeso in questo caso, perň, se invece, 48 ore dopo aver ricevuto questo messaggio, il tuo conto non verrŕ confermato, ci riserviamo il diritto di sospendere la tua registrazione CartaSl. CartaSl č autorizzato a fare qualsiasi tipo di operazione affinche anticipi le fraude.

Vi preghiamo di confermare e aggiornare i vostri dati oggi

Cordiali saluti,
CartaSl S.p.A

Conferma

Copyright 2014 CartaSi S.p.A. All rights reserved.

NOTE : info@cartasl.com
NOTE : Gentile ***
NOTE : Click "Conferma"
NOTE : "Conferma" open http://j.mp/wget-clientes
NOTE : Redirect to http://carta-si-it-gtwpage.www1.biz/cas/




NOTE : "Prosegui" redirect to http://carta-si-it-gtwpage.www1.biz/cas/confirm.php?cmd=login-submit&dispatch=b4bf53c0db18fd85h0a134
NOTE : Redirect to http://www.cartasi.it/gtwpages/index.jsp

WWW1.BIZ WHOIS :
=========================================================
Domain Name: WWW1.BIZ
Domain ID: D1145943-BIZ
Sponsoring Registrar: NETWORK SOLUTIONS INC.
Sponsoring Registrar IANA ID: 2
Registrar URL (registration services): whois.biz
Domain Status: clientTransferProhibited
Registrant ID: 52605919
Registrant Name: ChangeIP Network OperationsZZZ
Registrant Address1: 1200 Brickell Avenue
Registrant Address2: Suite 1950
Registrant City: Miami
Registrant State/Province: FL
Registrant Postal Code: 33131
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.8007913367
Registrant Facsimile Number: +1.7862246593
Registrant Email: noc@changeip.com
Administrative Contact ID: 52605919
Administrative Contact Name: ChangeIP Network OperationsZZZ
Administrative Contact Address1: 1200 Brickell Avenue
Administrative Contact Address2: Suite 1950
Administrative Contact City: Miami
Administrative Contact State/Province: FL
Administrative Contact Postal Code: 33131
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.8007913367
Administrative Contact Facsimile Number: +1.7862246593
Administrative Contact Email: noc@changeip.com
Billing Contact ID: 16819660
Billing Contact Name: ChangeIP.com
Billing Contact Organization: ChangeIP.com
Billing Contact Address1: 1200 Brickell Avenue
Billing Contact Address2: Suite 1950
Billing Contact City: Miami
Billing Contact State/Province: FL
Billing Contact Postal Code: 33131
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.8007913367
Billing Contact Email: billing@changeip.com
Technical Contact ID: 52605919
Technical Contact Name: ChangeIP Network OperationsZZZ
Technical Contact Address1: 1200 Brickell Avenue
Technical Contact Address2: Suite 1950
Technical Contact City: Miami
Technical Contact State/Province: FL
Technical Contact Postal Code: 33131
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.8007913367
Technical Contact Facsimile Number: +1.7862246593
Technical Contact Email: noc@changeip.com
Name Server: NS1.CHANGEIP.ORG
Name Server: NS2.CHANGEIP.ORG
Name Server: NS3.CHANGEIP.ORG
Created by Registrar: BULKREGISTER.COM, INC.
Last Updated by Registrar: NETWORK SOLUTIONS INC.

WHOIS CARTASL.COM :
=========================================================
Domain Name: CartAsl.com
Registry Domain ID: 1862943261_DOMAIN_COM-VRSN
Registrar WHOIS server: whois.NameBright.com
Registrar URL: http://www.NameBright.com
Updated Date: 2014-06-15T00:00:00.000Z
Creation Date: 2014-06-15T00:00:00.000Z
Registrar Registration Expiration Date: 2015-06-15T00:00:00.000Z
Registrar: BlastDomains LLC
Registrar IANA ID: 1678
Registrar Abuse Contact Email: abuse@NameBright.com
Registrar Abuse Contact Phone: +1.303.893.0547
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Domain Admin
Registrant Organization: HugeDomains.com
Registrant Street: 2635 Walnut Street
Registrant City: Denver
Registrant State/Province: CO
Registrant Postal Code: 80205
Registrant Country: US
Registrant Phone: +1.303.893.0552
Registrant Email: domains@hugedomains.com
Registry Admin ID:
Admin Name: Domain Admin
Admin Organization: HugeDomains.com
Admin Street: 2635 Walnut Street
Admin City: Denver
Admin State/Province: CO
Admin Postal Code: 80205
Admin Country: US
Admin Phone: +1.303.893.0552
Admin Email: domains@hugedomains.com
Registry Tech ID:
Tech Name: Domain Admin
Tech Organization: HugeDomains.com
Tech Street: 2635 Walnut Street
Tech City: Denver
Tech State/Province: CO
Tech Postal Code: 80205
Tech Country: US
Tech Phone: +1.303.893.0552
Tech Email: domains@hugedomains.com
Name Server: nsg1.namebrightdns.com
Name Server: nsg2.namebrightdns.com
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System:
http://wdprs.internic.net
--- Last update of WHOIS database: 2014-09-04T09:15:24.390Z ---
=========================================================

MAIL :
=========================================================
NOTE : Received : from sum8686.hostlife.net ([195.16.88.107])
NOTE : Received : from cartasl.com (unknown [37.59.149.228])
NOTE : info@cartasl.com does not designate 195.16.88.107 as permitted sender)
=========================================================

eFax message from "15085195849" - 1 page(s), Caller-ID: 1-229-524-2811

eFax

Fax Message [Caller-ID: 1-229-524-2811] You have received a 1 page fax at 2014-09-03 10:42:17 EDT. * The reference number for this fax is atl_did1-1406318502-19175917910-54. View this fax using your PDF reader. Please visit www.efax.com/en/online_fax_FAQ if you have any questions regarding this message or your service.

Thank you for using the eFax service!

Powered by j2 © 2012 j2 Global Communications, Inc. All rights reserved. eFax® is a registered trademark of j2 Global Communications, Inc. This account is subject to the terms listed in the eFax® Customer Agreement.

< FAX_20140903_1409680198_144.pdf >

My Dear Beneficiary

Good Morning Once Again My Dear Beneficiary, This Is Barrister Mathew Alfred the Only Accredited Attorney from Head Quarter Office Western Union Money Transfer Service Benin Republic Chapter, Please I Have A Question To Ask You Right Now In Regard To Your Fund Transfer, What Is Your Suggestion Concerning Your Fund Which Has Been Deposited Here For Long Time Now? Do You Want To Abandon Your Fund Here Simple Because Of The Western Union Transfer Cost Rate Which Is Not Up To The Two Percent Of What Is Coming On Your Way Please What Are Your Reasons? I am Asking You These Questions Because Of the Love I Have For You Otherwise I Can Not Even Bother To Ask You Because It Is Your Fund Not Mine And I Can’t Not Sit Down Washing You, Losing Your Fund Because Of The Little Fee You Suppose To Pay To Receive Your Fund. Please I Need Your Reply As Soon As You Read This Message Thanks And I Pray That This Message Will Merit Your Understanding.

Best Regard
Barrister Mathew Alfred Esq
from Western Union Head Office Benin Republic

Email extracted :

web@audiosolutions.net.au, web@justinmichie.com, webdesign@webstop.com.au, webdeveloper@eldorrado.com, webmaster@4crazy.ch, webmaster@achristianlink.com, webmaster@becomeone.com, webmaster@beltonen-freaks.com, webmaster@bestpricedentistry.com, webmaster@boaze.com, webmaster@borinquentours.net, webmaster@bybloshotel.com, webmaster@camreo.com, webmaster@carolinayh.com, webmaster@cash-back-deals.com, webmaster@crystalcoastag.org, webmaster@detectordog.com, webmaster@distributeurs-automatiques.be, webmaster@dr-belair.com, webmaster@easytravelgroup.co.uk, webmaster@eroticasmansion.com, webmaster@francinedee.com, webmaster@freshslice.com, webmaster@globalshopsearch.com, webmaster@humpsoftware.com, webmaster@internetquepos.com, webmaster@irondragonsoftware.com, webmaster@juicedpro.com, webmaster@kellyscrossstitch.com, webmaster@keywordon.com, webmaster@lasting-expressions.com, webmaster@leylandcooper.com, webmaster@linkspider.co.uk, webmaster@maw2000.net, webmaster@moviestatus.com, webmaster@nanas-boutique.com, webmaster@netprofitsite.com, webmaster@oregoncitylink.com, webmaster@parceljunction.com, webmaster@peacockgallery.org.uk, webmaster@pedalifyouwant.com, webmaster@perfectme.co.za, webmaster@petpal.info, webmaster@plr8.com, webmaster@pocketgamepark.com, webmaster@progressivegardening.com, webmaster@rosevillebareskinperfected.com, webmaster@saxoncourt.com, webmaster@scrapwithshelby.com, webmaster@service-raider.co.uk, webmaster@sexy-x-rated.com, webmaster@sgpropertydeals.com, webmaster@sharese.com, webmaster@slidewizards.com, webmaster@spacemodz.com, webmaster@swish-db.com, webmaster@swr-enterprises.org, webmaster@sydneystore.net, webmaster@tecnouser.com, webmaster@teenbisex.net, webmaster@tekhz.com, webmaster@telecommtraining.info, webmaster@thealtontowersguide.com, webmaster@thedisciplinarian.com, webmaster@theeroticanetwork.info, webmaster@toservehim.com, webmaster@vortexwebdesign.com, webmaster@wayofgun.com, webmaster@win2k3.info, weddingvows@on.aibn.com, wendy@barcelonaprelude.com, wendy@perfectfitweb.com, werbeagentur@red-baron.de, wermagic.garry@aol.co.uk, werwin2@nc.rr.com, westgate@west.net, wfleonard@saxonenterprises.net, wfowler1@excite.com, wgrindstaff@ec.rr.com, whitework@hotmail.ca, wholenike168@yahoo.com.cn, wholesale@tradur.com, wickerman@neo.rr.com, wightlightsupplies@fsmail.net, wilbake@fastmail.fm, wilg@coralwave.com, will@worshamvaughan.com, william.craig@wcci.biz, william@gordonengraving.co.uk, william@mortonvisuals.com, william@snuder.com, william@williammarshallrealtor.com, williamhoedt@tx.rr.com, wilson@accreditservices.co.uk, wilson@surfbest.net, windsurface@centurylink.net, wiwewa@bluewin.ch, wizerhealth@yahoo.ie, wlancaster@kc.rr.com

Please act accordingly !!!

Dear Beneficiary,

I am Janet L. Yellen, the newly-sworn Chair, U.S. Federal Reserve Bank. You will get more information about me here.

http://www.federalreserve.gov/aboutthefed/bios/board/yellen.htm
http://www.washingtonpost.com/business/economy/new-fed-chief-janet-yellen-has-long-history-of-breaking-barriers/2014/02/02/9e8965ca-876d-11e3-833c-33098f9e5267_story.html

I have made it my first point of call since taking office to settle all outstanding payments accrued to individuals/corporations with respect to local and overseas contract payment, debt re-scheduling and outstanding compensation payment. This is to make sure all outstanding payments are settled before the end of the fiscal year 2014. I have your file here in my office and it says that you are yet to receive your fund valued at $850,000 (Eight Hundred and Fifty Thousand United States Dollars only). This money will now be transferred to your nominated bank account or your preferred payment option. You are advised to kindly reply this email with the below details enclosed to help us process your payment;

(1) Full Names:
(2) Residential Address:
(3) Current Phone Number:
(4) Age:
(5) Country of Residence:
(6) Occupation:

Thanks for your co-operation as I wait to hear from you.

Janet L. Yellen
Chair, U.S. Federal Reserve Bank

Note: The information contained in this e-mail is private & confidential and may also be legally privileged. If you are not the intended recipient, please notify us, preferably by e-mail, and do not read, copy or disclose the contents of this message to anyone.

Rép :Release/Transfer Notice of your Approved Funds

ALPHA BANK
66 Cannon Street, EC4N 6EP.
From the Desk of Mr.Stewart Hartley
Official Web Account:
Our Ref: UK/OHG/OXD1/2014
TELEX: UKGOVAB.

Highly Confidential...

PAYMENT FILE: UN/AB/10/385953

Attn: Dear Beneficiary

Release/Transfer Notice of your Approved Funds ($800,000.00USD) Eight hundred thousand united states dollars.May you remain favored and I pray. Sorry for the inconveniences and payment delay that was rendered to you in your line of contract/Inheritance Payment transaction with some government and private Officials some while ago. Be informed that Presently we are being paid by the WORLD BANK in conjunction with the ( UNITED NATION ) in other to avert beneficiary funds delays and compensate victims of scam in recent times and also payment of contract inheritance sum. So far,we have succeeded in Settling (Mrs.Ann Kleyser,Mr. Edward Drake, Mr.Chun Yeung etc). Your Funds were returned back to Treasury,some while ago because you did not finalize your claim for it. A week ago,The Executive Committee collectively agreed to release the sum of $800,000.00 USD to you but to our surprise you sent down your representatives,Mr Tim Parker and Mr.Rowland Somer to collect this Funds on your behalf this morning. Dear Beneficiary Did You Send Them ?? And since you do not send them you are advise to kindly re-confirm to us the followings below so that the Bank will not be held responsible for paying into the wrong account Name.

1) Your full name.
2) Contact Address
3) Phone,
4) Fax.
5) Occupation.
6) A valid proof of Identification.

In receipt of the above information, your payment will be approved and paid to you by electronic wire transfer (T/T) to your nominated bank account,you are advice to get back to me immediately you receive this mail for immediate payment and instructions to credit your account, which is schedule to hold within 24 hours upon confirmation of the above mention requirement,via email ( alphabankplc17@aol.co.uk )

Officially Sealed

Mr Stewart Hartley
Dir,of Foreign Payment Transfer
Alpha Bank

Simply Contact Diplomat Paul Adams

Attn: Please,

Simply Contact Diplomat Paul Adams, for your consignment box 1.7M, with your full delivery address,phone number And your nearest airport to land, for the delivery of your Consignment box, contact Email (ladyrose.cynthia1@aol.fr)

Thanks
Miss.Rose Cynthia