Tuesday, January 6, 2015

Please Confirm (Amazon phishing)

CONFIRM ACCOUNT

There has been too many login attempts on your account, to continue using the Amazon service you must confirm your account. Please follow the steps in the next window that opens.

Confirm Account

We thank you for your patience regarding this matter, this is done to protect our customers. Failure to confirm will mean suspension of these services.

Processing at Amazon.

Phishing analysis :

CLICK : Confirm Account
OPEN : http://www.processingamazoadmin.website/
RESULT : Phising removed...

Email analysis :

NOTE : Content-Type : multipart/alternative; boundary="----=_NextPart_*"
NOTE : Mime-Version : 1.0
NOTE : X-Msmail-Priority : High
NOTE : Return-Path : < marcos.oliveira@niceveiculos.com.br >
NOTE : Return-Path : marcos.oliveira@niceveiculos.com.br
NOTE : X-Mailer : Smart_Send_3_1_6
NOTE : X-Priority : 1
NOTE : Received : from mailer-1.internext.com.br (mailer-1.internext.com.br. [72.55.191.59])
NOTE : Received : from static.10.27.251.148.clients.your-server.de (HELO WINHEVSA8GJ7V7mshomenet)
NOTE : (marcos.oliveira@niceveiculos.com.br@148.251.27.10)

PayPal Phishing

Dear PayPal Customer,

During your regular scheduled accounts maintenance verification procedure, We have detected a slight error regarding your PayPal Account This might be due to Unauthorization access to your PayPal Account...Please verify your information by Downloading the Attachment file and open in a browser to Continue. NOTE: At PayPal, your protection is our top priority and We're committed to keeping your PayPal accounts safe from unauthorized access. IMPORTANT: *If your PayPal information is not verified within 48 hours then your ability you access your PayPal account will be restricted.

Very sincerely,
PayPal Review Department

Copyright © 2015 PayPal, Inc. All rights reserved. PayPal is located at
2211 N. First St.,
San Jose, CA 95131.

Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, log in to your account and click 'Contact Us' at the bottom of any page.

Phishing analysis :

Extract was removed from pastebin...

Email analysis :

NOTE : service@paypal.name
NOTE : X-Mailer-Sent-By : 1
NOTE : X-Mailer-Sid : 10
NOTE : Return-Path : bounce@anatrez.com
NOTE : X-Remote : 188.138.65.69 (static-ip-188-138-65-69.inaddr.ip-pool.com)
NOTE : Mime-Version : 1.0
NOTE : Content-Disposition : inline
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Message-Id : < *@anatrez.com >
NOTE : Received : from static-ip-188-138-65-69.inaddr.ip-pool.com (HELO anatrez.com) (188.138.65.69)
NOTE : Important: We noticed unusual activity in your PayPal account (Ref #PP-003-627-576-424)

SEEKING FOR INVESTMENT PARTNERSHIP WITH YOU!...........................................PLEASE GET BACK TO ME.

Sir,

The world statistics shows that the economy of your country is great and investment friendly.

I have a client that want to invest into REAL ESTATE OR INTO ANY PROFITABLE AND LUCRATIVE BUSINESS,and I want to know, if bylaw your country allow investor to come in,And if you can act the-funds manager.Your reply will be highly appreciated and every other details about the funds will be sent to you.You are advise to please reply to(willkbull@yandex.com)

Best regards.
Donald Charlie

Email analysis :

NOTE : mr.bensonjp@yahoo.com
NOTE : zuky45@online24.co.uk

Mr. JohnKelly

Dear Friend ,

We have concluded to effect your payment of $1.7Million, through western union, but the maximum amount you will be receiving each day starting from tomorrow is $4,500.00 daily until the funds is completely transferred.

Kindly Contact Western union Agent:
MR. BEN RICHARD
TEL: +22998359944
E-mail:wumt006@outlook.com

Also reconfirm your information to them below

YOUR NAME----------------------
YOUR ADDRESS-----------
YOUR PHONE-------------
OCCUPATION-----------------

Though, I sent $4,500.00 in your name today,but MR. BEN RICHARD said that you should contact first with your information. So contact MR. BEN RICHARD or you call him as soon as you receive this email and tell him to give you the MTCN, sender name and question/answer to pick the $4,500.00 Please let me know as soon as you received all your funds $1.7Million,

Thank you.
Mr. John Kelly

Libya Reconstruction contract bid

Salaam Alaykum,

The Libyan Prime minister has mandated all appointed ministers to take charge in fast reconstructing and re-building of Libya. His present finance minister has mandated me to seek for your confidential cooperation in the supply of various reconstructing equipment's and your products for the rebuilding of Libya.

A consideration also is that your quotation must be CIF Port of commericale GABES Tunisia; we choose this port as result of the present security situation in Libya. We are in need of products for all sectors of our economy. Please email me for more clarification if interested.

Best Regards,

Dr.Mohamed Abdelaziz, PHD
Director of the Minister's Office, Ministry of Finance Libya!
libyaministryoffinance@ovi.com
burak.burakotocom@dr.com

Email analysis :

NOTE : libyaministryoffinance@ovi.com
NOTE : User-Agent : Roundcube Webmail/1.0.1
NOTE : burak.burakotocom@dr.com
NOTE : Received : from unknown (HELO server.mscript.in) (91.148.168.150)
NOTE : Received : from localhost ([::1]:52081 helo=webmail.boostelectronics.com)
NOTE : by server.mscript.in
NOTE : (envelope-from )
NOTE : Libya Reconstruction contract bid

You can be his next of kin

Dear Good friend,

My name is Mr. Malik Fariz ,I worked as personal Attorney to late Mr. Zulfiqar Ahmed , an expatriate, who was a consultant with PETROLIAM NASIONAL BERHAD (PETRONAS) Malaysia. He died on April 21st, 2009. Since then I have made several inquiries as to locate any of his extended relatives, but all proved abortive.

After several unsuccessful attempts, hence I decided to contact you. I am contacting you to assist in retrieving the money valued at (US$15.5 Million ) that was left behind by my client (Mr. Zulfiqar Ahmed ) with the HSBC BANK BERHAD, Malaysia before it declared un-serviceable account and be confiscated by the bank. Consequently, the bank issued a notice to provide any member of late Zulfiqar Ahmed family or relatives within 10 days or the account will be closed.

I hereby seek your consent to act as relative to late Zulfiqar Ahmed and claim the money US$15. 5 Million from the bank. I will provide the necessary information to be used in convincing the bank that you relate to late Zulfiqar Ahmed . Whoever I present to the bank will claim the money, since I am his personal Counsel before he dies; the bank knows me, because I represent him in all his banking dealings with the bank.

When you claim the money, we share it 50% / 50%. All I require is your honest cooperation to enable us succeed
without any hitch. I guarantee that this will be executed under a legitimate arrangement that will protect us from any breach of the law.

I wait for your urgent reply, send your reply to my private email address fzmk65@outlook.com
l'm sending this mail with my office email address.

Sincerely,
Malik Fariz
fzmk65@outlook.com
robd@ebeships.com