Saturday, December 20, 2014

Inquiry From TradeKey (Tradekey Phishing)

TradeKey Logo

Dear Tradekey Customer,

You have received a new business inquiry from Rashid al-Maktum on Tradekey.com unfortunately, we are unable to deliver further inquiries to your email address. Please visit the Tradekey.com member services centre to verify your email account information.

*Please Sign in here with your email-address and e-mail password to verify your account.

Wishing you the very best of business,

Thank you for using our services.

http://int2.tkcdn.com/lang/images/iso_horizontal.gif

Privacy Policy - Terms of Use - Intellectual Property Policy
Copyright © 2014 TradeKey.com

Phishing analysis :

CLICK : *Please Sign in here with your email-address and e-mail password to verify your account.
OPEN : http://staging.sojournmusic.com/tradekey.com/index.html
SCREENSHOT :


ACTION : FILL FORM
CLICK : Sign In
REDIRECT : http://www.tradekey.com/
ANALYSIS : http://staging.sojournmusic.com/ RELAY TRADEKEY PHISHING
ANALYSIS : CODE SOURCE OF THE PHISHING PAGE : http://pastebin.com/raw.php?i=Rjp0N096

Email analysis :

NOTE : Received-Spf : client-ip=95.215.227.59;
NOTE : X-Source-Args : /usr/sbin/proxyexec -q -d -s /var/run/proxyexec/cagefs.sock/socket /bin/cagefs.server
NOTE : Return-Path : < wwwiliad@dedicated1.i-spy360.com >
NOTE : Mime-Version : 1.0
NOTE : X-Source-Dir : iliad.mu:/public_html/wp-includes/Text/Diff/Renderer
NOTE : X-Php-Script : www.iliad.mu/wp-includes/Text/Diff/Renderer/jamb.php for 41.151.173.119


NOTE : Content-Transfer-Encoding : 8bit
NOTE : X-Get-Message-Sender-Via : dedicated1.i-spy360.com
NOTE : :authenticated_id: wwwiliad/only user confirmed/virtual account not confirmed
NOTE : Content-Type : text/html
NOTE : Received : from blackmartini.mu (vps.i-spy360.com. [95.215.227.59])
NOTE : Received : from wwwiliad by dedicated1.i-spy360.com with local (Exim 4.84)
NOTE : (envelope-from < wwwiliad@dedicated1.i-spy360.com >)
NOTE : Inquiry From TradeKey

FINAL NOTE :

NOTE : illiad.mu was used to send the phishing. (Leaked wordpress installation)
NOTE : The phishing is hosted by sojournmusic.com (Leaked wordpress installation)
NOTE : The phishing mail was sent by 41.151.173.119

YOUR PAYMENT NOTIFICATION

YOUR PAYMENT NOTIFICATION:
Dr. Kelvin Chidi Director
Inter-switch Unit ATM ISSUANCE.

This is to officially inform you that we have verified your contract/inheritance file presently on my desk, and I found out that you have not received your payment due to your lack of co-operation and not fulfilling the obligations giving to you in respect to your contract/inheritance payment.Secondly, you are hereby advised to stop dealing with some non-officials in the bank as this is an illegal act and will have to stop if you so wish to receive your payment immediately. After the board meeting held at our headquarters, we have resolved in finding a solution to your problem and as you may know we have arranged your payment through our SWIFT CARD PAYMENT CENTER in Europe, America and Asia Pacific which is the instruction given by The president of NIGERIA This card center will send you an ATM CARD which you will use to withdraw your money in an ATM MACHINE in any part of the world, but the maximum is ($3,000) Three Thousand Us Dollars per transaction. So if you like to receive your fund this way,

(1) Your Full Name:
(2) Address where you want the payment center to send your ATM CARD:
(3) Phone And Fax Number:
(4) Your Next of Kin:
(5) Occupation:

We shall be expecting to receive your information you have stop any further communication with anybody or office.On this regards, do not hesitate to contact me for more details and direction, and also please do update me with any new development.

Thanks for your co-operation.
Best Regards, Dr. Kelvin Chidi
Contat Me dr.kelvinchidi3@yahoo.fr
Director Inter-switch Unit

Note: Because of impostors, we hereby issue you with our code of conduct, which is (105) so you have to indicate this code when contacting this office.

Email analysis :

NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < test1@foundation.com >
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : X-Remote : 64.91.228.122 ()
NOTE : X-Priority : 3
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : X-Get-Message-Sender-Via : host2.interconnectnetworks.com
NOTE : : authenticated_id: test1@THEPLDGROUP.COM
NOTE : Content-Type : text/plain; charset="Windows-1251"
NOTE : Received : from unknown (HELO host2.interconnectnetworks.com) (64.91.228.122)
NOTE : Received : from [12.198.159.210] (port=4729 helo=User)
NOTE : by host2.interconnectnetworks.com with esmtpa (Exim 4.82)
NOTE : (envelope-from )
NOTE : YOUR PAYMENT NOTIFICATION

IN REGARD TO YOUR ATM MASTER CARD PACKAGE WITH U.P.S

I RECEIVED AN EMAIL ALERT FROM UPS IN REGARD TO YOUR PACKAGE WHICH HAVE BEEN WITH THEM FOR TWO WEEKS NOW AND THE INTERNATIONAL SHIPPING AGENT IN CHARGE PLANNED TO RETURN YOUR PACKAGE TO THE FEDERAL MINISTRY
OF FINANCE OF NIGERIA. THE TOTAL AMOUNT IN YOUR ATM MASTER CARD CONTAIN IS $10.5 MILLION USD AND THIS INCLUDE INTEREST RATE UP TILL DATE.THE MASTER CARD WAS PROGRAMMED TO HAVE ACCESS GLOBALLY WHICH YOU
CAN MAKE WITHDRAW OR TRANSACTION IN ANY PART OF THE WORLD.

IT SEEMS YOU DON'T WANT TO SHOW ANY SERIOUSNESS TOWARDS THE SHIPMENT OF YOUR PACKAGE THAT WHY HE WANT TO RETURN IT AND HE NEED PERMISSION FROM ME FIRST BEFORE HE WILL RETURN THE PACKAGE. I ORDER HIM TO STOP
AND I ALSO ASSURE HIM THAT I WILL MAKE SURE THE CHARGE FEE REQUIRED IS ENABLE THE SHIPMENT FEE WHICH IS $65 WILL BE PAID AND THIS WILL BE THE LAST FEE REQUIRED FROM YOU. IN REGARD TO YOUR ATM MASTER CARD PACKAGE WHICH WORTH $10.5 MILLION USD I WILL HELP YOU AND MAKE SURE YOU RECEIVE IT AND MY INVESTIGATION SHOWS YOU HAVE SPENT A LOT RECENTLY IN REGARD TO THIS PACKAGE AND THIS WILL BE THE LAST FEE.

REMEMBER YOU HAVE SPENT A LOT TOWARDS THIS PACKAGE ONCE THE CHARGE FEE REQUIRED NOW IS PAID SHIPMENT WILL COMMENCE AND YOU WILL RECOVER ALL YOU HAVE SPENT RECENTLY. THE CHARGE FEE REQUIRED NOW IS NOT MUCH SO YOU WILL BE ABLE TO AFFORD THE LAST FEE NEEDED WHICH IS $65 ONLY MY ADVICE TO YOU IS TO GO AHEAD AND SEND THE CHARGE FEE VIA WESTERN UNION. THE WESTERN UNION INFORMATION BELOW BELONG TO OLAIYA EMEKA THE BRANCH MANAGER OF UPS INTERNATIONAL SHIPPING DEPARTMENT NIGERIA.

THIS IS THE INFO TO SEND THE $65 AS BELOW

RECEIVER NAME:EGEOLU DANEL
ADDRESS LAGOS IN NIGERIA
TEXT QUESTION WHAT FOR
ANSWER GOOD
AMOUNT:$65
+2348103080473
MTCN#

YOUR SHIPMENT WILL COMMENCE ONCE THE CHARGE FEE IS PAID TODAY. AND AS SOON AS YOU MADE THE PAYMENT GET BACK TO ME WITH THE SENDER NAME???? MTCN NUMBER???FULL SENDER ADDRESS USED:???TEXT QUESTION???ANSWER???? AWAIT YOUR REPLY AND REMEMBER SHIPMENT WILL COMMENCE TODAY AND IT WILL TAKE ONLY 26 HOURS TO GET THE PACKAGE SHIPPED TO YOU.

HAVE A WONDERFUL DAY

BEST REGARDS,
MRS PATT JOYCE BUTLER
EMAIL ME ON: mscarm-lapointe2015@yandex.com
Tele: +2348103080473

Email analysis :

NOTE : mrs-patt890@outlook.com
NOTE : Received : from snt004-omc2s36.hotmail.com (65.55.90.111)
NOTE : Received : from SNT151-W79 ([65.55.90.72]) by SNT004-OMC2S36.hotmail.com

CALL MR FEBIAN PATRICKS ON +18638847168 FOR YOUR FUND

WORLD BANK GROUP
From Desk of the President
World Bank Group,
Switzerland.
:............................. ..............................
.............................. .............................. .

I am Dr.JIM YONG KIM , the President World Bank Group.Therefore, you are legally and highly notified with every absolute authorization on your funds and transaction long awaited release set up to fight against scams and frauds activities World Wide.In a nut shell, the concerned are as follow, unpaid Contract payment, Funds Inheritance or Lottery Winning due to unauthorized/incapability of financial Institutions/security companies In releasing such huge sum of money due to Fraud, terrorist and money Laundry activities going on world wide.This financial institute known as World Bank Group has Mandated the World Bank via the desk of Mr Febian Patricks funds remittance departmental head to release the long awaited funds of $3,000.000,00 (3 Million United States Dollars) with interest accrue to beneficiaries through direct TELEGRAPHIC WIRE TRANSFER Upon the provision of your Banking account details for your express funds transfer into your nominated account without any delay with every obedience to our instruction and in line to your funds release with immediate action.Hence your funds have cleared from Terrorist and Money laundry activities and your money will be released into your provided Banking account through World Bank As regards to this arrangement, You are advised to contact the the desk of Mr Febian Patricks funds remittance departmental head Director through his contact below:

Contact person: Mr. Febian Patricks
Email: mr.febianpatricks@gmail.com
Phone number:+18638847168

inform him to release and transfer your funds into your provided Banking account urgently.You are therefore advised to forward your direct telephone numbers Your complete name and your complete Banking details most importantly be aware that 3 Million UNITED STATES Dollars Only is due to you.Finally ,Mr Febian Patricks is awaiting to receive your contact attention on your funds Release Without any delay. Make your contact quickly and expressly to him now irrespective of the time as he is waiting for your attention for your funds and it's transfer interest into your provided account.In other alternative, he may send you an ATM master card which will enable you to withdraw all your funds from it.

Thanks for Your Cooperation.
Dr.Jim Yong Kim
(President) World Bank Group

shyysn@yahoo.pt
mr.febianpatricks@gmail.com

Your atm card payment Notification

ATTN: BENEFICIARY,!!!

Now we have arranged your payment of ($3.5 Millions) by ATM payment card which you will be withdrawing $5000.00 usd on daily base until the whole monies is completely withdrawn by you via the ATM . The minister trust funds of Federal Republic Of Nigeria, United Bank For Africa [UBA] West African States, The United Bank For Africa, Nigeria Declared your payment through this system to avoid another hoax as you had disappointed in the past on paying your inheritance funds. So get to the ATM of Asia Pacific of United Bank For Africa for your ATM card.

Thus is their email contact.

Mr.Godwin Campbell.

Telephone; (+234)818 679 4002
E-mail; mrgodwin_campbell@yahoo.co.jp

Contact the ATM card payment center and they will send the card to you within 48 hours on comply with them. With the following details below. Reconfirm your information bellow to him.

Receiver name -----------------
Country-----------------------
City------------------------
Tel --- ------------------------
Your Occupation-----------------
Home Address------------------------
sex___________________________
age___________________________
ID____________________________

Contact him immediately you receive this mail with your full information.

Best Regard,

Mr. Francis Bolton

mrgodwin_campbell@yahoo.co.jp
france.bolton@yahoo.pt

URGENT CONTACT FOR THE DELIVERY OF YOUR ATM MASTER CARD WORTH ( USD$8,5M.)

Dear Beneficiary,

This is to officially inform you that we have written to you before without getting respond from you and we believe that our previous mail did not get to you therefore we write you again. We are contacting you concerning the release of your inheritance fund / Draft /Cheque /ATM Card which have been delayed for transfer by some officials who claims to be in position of your fund thereby extorting money from you in one way or the other. Your Fund has finally been approved for transfer by the West Africa Fund Monitoring Unit. Your fund will be transfer to you via MasterCard ATM which is cashable in any ATM machine or Bank anywhere in the world. We hereby inform you that the ATM card worth US$8.5, 000.000.00 has been credited in your favour as the first part payment of your inheritance fund which has been delayed by these officers who claim to be in position of your fund. Therefore you are warned to stop any further communication with anybody concerning your inheritance fund. Your fund to be released via MasterCard ATM in act to uphold the rule of law which we represent.You have to reconfirm the informations below for security reasons. The only money you are obliged to pay is $95 dollars which is the cost of the Delivery.

Contact the verification officer incharge of the delivery:

Name: Mr.Charles Gado.
E-mail: atmdepartment2014@gmail.com
TEL: +229-9858-8727

Send them the following information’s of yours for the conclusion of your ATM Card:

Full Name:__________
Delivery Address:____
Country:_______
Occupation:_____
Phone Number:____
Age:______
sex:______

Regards,
Miss.Linda James.