Tuesday, October 21, 2014

Account Reviewed (PayPal Phishing)

Update Personal Information

Dear PayPal Member,

It has come to our attention that your PayPal account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. If you could please take a few minutes out of your online experience and update your personal records, you will not run into any problems in the future with the online service. However, failure to update your records could result in account suspension. We advise you to update your records as soon as possible. To update your account information, please download and open the attachment file that we sent via this email, and simply open it with your web browser. Once you have updated your account records, any activities going through your account will no longer be interrupted. We apologize for any inconvenience. Please understand that this is to keep you and your account in a protected state.

Copyright © 1999 - 2014 PayPal. All rights reserved.

< Verification.html >

Phishing analysis :

OPEN : Verification.html
FIND : http://www.secured-line.su/reach.php

secured-line.su whois :

domain: SECURED-LINE.SU
nserver: ns1.dnsfrnws.com.
nserver: ns2.dnsfrnws.com.
nserver: ns3.dnsfrnws.com.
nserver: ns4.dnsfrnws.com.
state: REGISTERED, DELEGATED
person: Private Person
e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2014.07.10
paid-till: 2015.07.10
free-date: 2015.08.12
source: TCI

Email analysis :

NOTE : Return-Path : < staff@accounts8.com >
NOTE : Received : from 188.165.201.20 ([24.38.112.187]) by softysoft.fr
NOTE : X-Mailer : GroupWise 12.0.162984
NOTE : Mime-Version : 1.0
NOTE : Account Reviewed

Hi

Hello,

Good day to you, My name is Mr. Mark. I am contacting you in regards to my family search for a good and reliable man or woman or company organization that can assist us in to an investment project in abroad. You can contact me back for more details.

Thank you.

Email analysis :

NOTE : Return-Path : < seconci@seconci-df.org.br >
NOTE : Received : from mail.seconci-df.org.br
NOTE : (HELO cc-04.seconci-df.org.br) (200.199.213.21)
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by cc-04.seconci-df.org.br (Postfix)
NOTE : Received : from cc-04.seconci-df.org.br ([127.0.0.1]) by localhost
NOTE : (cc-04.seconci-df.org.br [127.0.0.1])
NOTE : Received : from cc-04.seconci-df.org.br
NOTE : (cc-04.seconci-df.org.br [127.0.1.1]) by cc-04.seconci-df.org.br (Postfix)
NOTE : X-Virus-Scanned : amavisd-new at seconci-df.org.br
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain; charset=utf-8
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Originating-Ip : [207.244.89.112]
NOTE : X-Mailer : Zimbra 6.0.10_GA_2692 (ZimbraWebClient - FF3.0 (Win)/6.0.10_GA_2692)
NOTE : Hi

re:gold offer and investement proposal

Hello

We currently have gold ingots.

offer of sale.

We are looking for potential buyers or sellers very serious to sell our stock veryimportant. We also grant loan credits and also we intervene in l ' capital projects has short andlong-term Contact us for more information.

neat
Camara

Email analysis :

NOTE : Received : from mailler15.lws-hosting.com (mailler15.lws-hosting.com. [193.37.145.82])
NOTE : Received : from mailler15.lws-hosting.com (localhost.localdomain [127.0.0.1])
NOTE : by filter.mynetwork.local
NOTE : Received : from mailler15.lws-hosting.com (localhost.localdomain [127.0.0.1])
NOTE : by filter.mynetwork.local
NOTE : Received : by mailler15.lws-hosting.com (Postfix, from userid 10001)
NOTE : Received : from mail15.lwspanel.com (mailler15.lws-hosting.com [193.37.145.82])
NOTE : (Authenticated sender: contact@djogbe-invest.com)
NOTE : Return-Path : < contact@djogbe-invest.com >
NOTE : X-Spam-Checker-Version : SpamAssassin 3.3.1 (2010-03-16)
NOTE : on mailler15.lws-hosting.com
NOTE : Mime-Version : 1.0
NOTE : X-Sender : contact@djogbe-invest.com
NOTE : User-Agent : Roundcube Webmail/1.0.3
NOTE : re:gold offer and investement proposal

URGENT REPLY

ATTENTION BENEFICIARY,

NOTE THAT WE HAVE DECIDED TO PAY YOU YOUR ONIES THROUGH MONEY GRAM URGENT REMITTING OFFICE SINCE YOU WAS UNABLE TO RECEIVE YOUR MONEY THROUGH WESTERN UNION DUE TO THEIR MANAGEMENT BUT NOW WE HAVE SENT YOUR FULL COMPENSATION PAYMENT OF US$1.8Millions USD TO YOU THROUGH MONEY GRAM, YOU WILL BE RECEIVING 5.000.00USD PER DAY, BUT I WANT YOU TO CONTACT THE MANAGEMENT IN MONEY GRAM RIGHT NOW AND ASK HIM FOR YOUR FIRST PAYMENT .HIS NAME IS DR:CHRIS PATRICK, ASK HIM TO GIVE YOU THE MONEY GRAM PAYMENT INFORMATION SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY PROBLEM. HIS EMAIL ADDRESS IS: infoservicemoneygram@yahoo.com

Your name:_____________
Country:______________
Phone no:____________
0ccupation:__________
Address/city:___________
Age/sex:______________

EMAIL HIM NOW SO THAT HE CAN PROVIDE THE MONEY GRAM INFORMATION TO YOU AS URGENT AS YOU CAN.

THANKS AND GOD BLESSING YOU
Mr.David Paulon.

Email analysis :

NOTE : Return-Path : < apache@u15433785.onlinehome-server.com >
NOTE : Received : from u15433785.onlinehome-server.com (216.250.115.17)
NOTE : Received : from u15433785.onlinehome-server.com (unknown [127.0.0.1])
NOTE : by u15433785.onlinehome-server.com (Postfix)
NOTE : Received : by u15433785.onlinehome-server.com (Postfix, from userid 48)
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain
NOTE : Content-Transfer-Encoding : 8bit
NOTE : URGENT REPLY

[Spam] INSTRUCTION TO RELEASE YOUR INHERITANCE FUND

If this email is not spam, click here to submit the signatures to FortiGuard - AntiSpam Service.

INTERNATIONAL MONETARY FUND (IMF)
HEAD OFFICE NO: 23 AVELELON RAOD,
Abuja Nigeria.
EMAIL(infodervice@gmail.com)

INSTRUCTION TO RELEASE YOUR INHERITANCE FUND

ATTENTION:

This is to intimate you of a very important information which will be of a great help to redeem you from all the difficulties you have been experiencing in getting your long over due payment due to excessive demand for money from you by both corrupt Bank officials and Courier Companies after which your fund remain unpaid to you. I am Mr John Lee a highly placed official of the International Monetary Fund (IMF). It may interest you to know that reports have reached our office by so many correspondences on the uneasy way which people like you are treated by Various Banks and Courier Companies/ Diplomat across Europe to Africa and Asia /London Uk and we have decided to put a stop to that and that is why I was appointed to handle your transaction here in Nigeria. All Governmental and Non-Governmental prostates, NGOs, Finance Companies, Banks, Security Companies and Courier companies which have been in contact with you of late have been instructed to back up from your transaction and you have been advised NOT to respond to them anymore since the IMF is now directly in charge of your payment. The most annoying thing is that the bad officials won't tell you the truth that on no account will they ever release the fund to you, instead they allow you spend money unnecessarily, I do not intend to work here all the days of my life, I can release this fund to you if you can certify me of my security. I needed to help you release the fund because you need to know the statues of your funds and cause for the delay, Please this is like a Mafia setting in Nigeria, you may not understand it because you are not a Nigerian. Listed below are the mafia's and banks behind the non release of your funds that i managed to sneak out for your kind perusal. PLEASE CHECK AMOUNT THESE NAMES IF THERE IS ANY ONE AMONG THEN WHO HAVE SCAMMED YOU, IF YES GET BACK TO ME FOR LEGAL ACTION TO BE TAKEN.

1) Prof. Charles soludo(CBN)
2) FBI
3) Senator David Mark
4) Chief Lamido Sanusi(CBN)
5) John Rob(Barclays bank plc)
6) Mrs Stella Brown(Barclays bank plc)
7) Ronald Franklin
8) Barrister Ucheuzo Williams
9) Mr. Ernest Chukwudi Obi
10) Mr. Mike Jombo

Deputy Governor - Policy / Board Member

11) Mr. Tunde Lemo Deputy Governor - Financial Sector Surveillance / Board Member
12) Mrs. W. D. A. Mshelia Deputy Governor - Corporate

Services / Board Members

13) Mrs. Okonjo Iweala
14) Mrs. Rita Ekwesili
15) Keith B. Bolcar Deputy Secretary. (Homeland Security.)

You are hereby advised NOT to remit further payment to any institutions with respect to your transaction as your fund will be transferred to you directly from our source. I hope this is clear. Any action contrary to this instruction is at your own risk. Respond to this e-mail on (infodervice@gmail.com) with immediate effect and we shall give you further details on how your fund will be released.

Reconfirm the information bellow

1. Full Name:
2. Address:
3. Nationality:
4. Age: Date of Birth:
5. Occupation:
6. Phone: Mobile/Cellular.....................Fax:..
7. State of Origin:
8. Copy of your identity Card

Also Call me as soon as you receive the letter so that you will be given an immediate response: Direct Hotline: EMAI(infodervice@gmail.com)

Regards,
YOURS SINCERELY,
MANAGING DIRECTOR IMF

Email analysis :

NOTE : Return-Path : < ministerio.salud@chaco.gov.ar >
NOTE : Return-Path : ministerio.salud@ecomchaco.com.ar
NOTE : Received : from mail.chaco.gov.ar
NOTE : (HELO ex-transport.chaco.gov.ar) (201.217.244.208)
NOTE : Received : from User (176.196.207.170)
NOTE : by Ex-transport.chaco.gov.ar (10.2.0.162)
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html; charset="_iso-2022-jp$ESC"
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Priority : 3
NOTE : X-Msmail-Priority : Normal
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2800.1081
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2800.1081
NOTE : X-Spaminfo : FortiGuard - AntiSpam ip, connection black ip ###.###.###.###
NOTE : [Spam] INSTRUCTION TO RELEASE YOUR INHERITANCE FUND

Get back to me soon

Dear Friend.

I am Mrs. Susan Jones a seasoned banker with Clydesdale Bank here in London and I wish to request for your assistance in a deal that involves Ј7.2M (Seven million, Two Hundred Thousand Great British pounds sterling) with our Bank. This deal by virtue of its nature must be utterly confidential and top secret. Though I know that a transaction of this magnitude will make any one apprehensive and worried, but I am assuring you that this will be done under a legitimate arrangement that will protect both of us from any breach of the law. I came to know you in my private search for a reliable and reputable Business Person/individual that can handle this confidential deal with me, which required maximum confidence and trust from both sides.

MY PROPOSITION;

I am an account officer to one of the dormant accounts with our bank that belong to one of our deceased customer Mr. Paul Louis Halley a French citizen rich man that was into several business here in London before his death along with his wife in an air crash. Before their untimely death our customer deposited the Sum of Ј7.2M (Seven million, Two Hundred Thousand Great British pounds sterling) with our bank here in London.

This website will give you comprehensive picture of what I am talking about (http://newswww.bbc.net.uk/2/hi/uk_news/england/oxfordshire/4537663.stm). During the bank audit exercise, it was discovered that a lot of accounts has been dormant as an unclaimed credit balance, hence our management decided during the current re-capitalization in our banking sector, to phase out all accounts that has been dormant. I being the account officer to late Mr. Paul Louis Halley, I have made several inquiries to his high commission to locate my client's extended relatives, but all my efforts proved abortive, I then decided to trace his relatives or family member over the internet, and hence I found you as my instinct convinces me that you will be a trustworthy and honest business partner and I decided to contact you to assist me in repatriating my late client's deposit before it got confiscated or declared unserviceable by our bank, Clydesdale Bank here in London.

I therefore wish to request for your assistance and permission to present you as the appointed next of kin to Mr. Paul Louis Halley so that the Ј7.2M (Seven million, Two Hundred Thousand Great British pounds sterling) can be released and paid into your account as the beneficiary. Be informed that this transaction is risk free otherwise I will not contact you because it is against our bank policy. Please get in touch with me immediately if you are interested to assist me by furnishing me with the following information;

1. Your full names
2. Your full address
3. Direct Telephone numbers

Looking forward to your prompt response.

Yours Sincerely,
Mrs. Susan Jones

Email analysis :

NOTE : Return-Path : < info@clydesdalebank.co.uk >
NOTE : Received : from mailer.novisplet.com (91.223.182.69)
NOTE : Received : from User (fl-209-26-22-227.sta.embarqhsd.net [209.26.22.227])
NOTE : by mailer.novisplet.com
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html; charset="Windows-1251"
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Priority : 3
NOTE : X-Msmail-Priority : Normal
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Get back to me soon