Tuesday, July 28, 2015

Happy Weekend

Hello,

I am Miss Richie Kuku. I would like to be your good friend. So, kindly reply back to me for all my details and my pictures for you. Thanks in advance for your friendliness. I wait to see your reply very soon.

Yours new friend,
Richie

Email analysis :

NOTE : richiekuku@hotmail.com
NOTE : babylove123@mynet.com
NOTE : X-Orig : [41.82.147.38]
NOTE : X-Authentication-Warning : reliablecontracting.net:
NOTE : reliable2 owned process doing -bs
NOTE : Received : from s132.n57.n84.n66.static.myhostcenter.com
NOTE : (HELO reliablecontracting.net) (66.84.57.132)
NOTE : Richie Kuku

DON PAUL-SON DOMINGO

Greetings,


I am Mr DON PAUL-SON DOMINGO from SPAIN .

However, I have already sent you this same letter by post one month ago, but I am not sure that the

letter promptly get to you since I have not heard from you, now I am resending it again. I want to trust

this investment fund in your care, be my partner? Regards and respect, please kindly send me your

Cellphone number, And tell me your opinion.

thanks,

DON PAUL-SON DOMINGO


Email analysis :

NOTE : donpaulsondomingoho@outlook.com
NOTE : client-ip=65.55.90.77;
NOTE : Greetings

Notification (Phishing La Banque Postale)

Cher(e) Client(e),

[Vous avez un message non lu]

Pour le consulter veuillez cliquer sur le lien ci-dessous:

Vos comptes en ligne

Cordialement,

Phishing analysis :

CLICK : Vos comptes en ligne
OPEN : http://dicaslowcarb.com.br/postale/

SCREENSHOT :


CLICK : http://www.perennial.de/wp-content/uploads/2015/espace-postale.fr/Declaration/ID-BP.FR.ASPx/ID-BP.FR.ASP/

SCREENSHOT :


perennial.de whois :

Name: Tino Jahnke
Address: Escheburger Weg 43
Postal code: 21039
City: Hamburg
Country: DE
Phone: +49.4012345456
Fax: +49.4012345456
E-mail: tj@perennial.de

dicaslowcarb.com.br whois :

domínio: dicaslowcarb.com.br
titular: Ana Carolina Avesani Moura
país: BR
c-titular: ACAMO17

Email analysis :

NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html; charset="iso-8859-1"
NOTE : X-Mailer : PHPMailer [version 1.73]
NOTE : X-Priority : 3
NOTE : Return-Path : caseiecosystem@dglsrl.it
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Received : from lx.dglsrl.it ([77.220.80.7])
NOTE : Received : by lx.dglsrl.it (Postfix, from userid 505)
NOTE : Message-Id : < ***@www.caseiecosystem.com >
NOTE : Notification.

GOOD NEWS FROM MRS MICHELLE OBAMA

(Greetings from FROM MRS. MICHELLE OBAMA)

How are you doing today together with your family, I hope all is well? My name is Mrs. Michelle Obama and I'm here to notify you that I travel to Benin Republic today to visit President Wife who Live at Cotonou City. I went to Government office for meeting and after the meeting I meet Dr. Yayi Boni President of Benin Republic. And he show me 15 people Which has be scam by DHL Courier Company and Diplomatic agent and I saw your name And your e-mail on the list that is why I contact you. To know if this Is real or fake??? The fund which they suppose to send to you is $7.8Millions. Which you did not receive yet. So kindly update me if you still want to receive your funds get back to me because am coming back to USA on Monday. I just contact I.R.S and Minister of Finance they told me that before they release the
documentation which I will use to deliver the funds to you, it will cost you sum of $250.00 so kindly update me with your delivery address and make sure that you send the $250.00 to the office with below information.

Receiver…Ben David
Country…..Benin Republic
City…….Cotonou
Test Question…..A
Answer……….B
Amount….$250.00

Update me with the MTCN and senders name also your address.

Kindly open the attached file details in email to view my Driving License to assure you that you are dealing with the Mrs. Michelle Obama Okay. Call my office telephone number once you receive this message For more information.(+229-655-120-88) E-mail(mrs.michelleobama505@yahoo.in)

Thank You and God bless you
Regard;
From Mrs. Michelle Obama

Email analysis :

NOTE : Usa@jeans.ocn.ne.jp
NOTE : mrs.michelleobama505@yahoo.in
NOTE : Received : from mzcstore432.ocn.ad.jp
NOTE : (mv-osn-hkg002 [122.28.30.180]) by mv-osn-hkg002.ocn.ad.jp (Postfix)
NOTE : Received : from mv-osn-hkg002.ocn.ad.jp (mv-osn-hkg002.ocn.ad.jp [122.28.30.180])
NOTE : by mf-smf-ucb016.ocn.ad.jp
NOTE : [41.216.50.147]
NOTE : 153.149.233.11 (mbkd0210.ocn.ad.jp)

Second Letter (Last Notice)

Dear Beneficiary,

THIS IS FOR YOUR ATTENTION.

We wish to notify you again that you were listed as a beneficiary to the total sum of US$10,600,000.00 Million (Ten Million Six Hundred Thousand United States Dollars) in the codicil and last testament of the deceased. (Name now withheld since this is our second letter to you). We contacted you because you bear the surname identity and therefore can present you as the beneficiary to the inheritance. We therefore reckoned that you could receive these funds as you are qualified by your name identity. All the legal papers will be processed in your acceptance. In your acceptance of this deal, we request that you kindly forward to us your letter of acceptance; your current telephone and fax numbers and a forwarding address to enable us file necessary documents at our high court probate division for the release of this sum of money. Please contact me on this address: romietager1122@gmail.com for further details.

Yours Faithfully,
Mr. Romie Tager.

Email analysis :

NOTE : romietager1122@gmail.com
NOTE : romietager1122@selbornechambers.co.uk
NOTE : Received : from User (152.178.168.125.sta.wbroadband.net.au [125.168.178.152])
NOTE : (Authenticated sender: tbell@bellmartialarts.com)
NOTE : by dedicated.bell-consulting.org
NOTE : 65.111.176.6 ()

ADHESlON ! (Phishing La Banque Postale)

Si le message ne s'affiche pas correctement, veuillez visiter la version en ligne .

CLICK : la version en ligne .
OPEN : http://gunescocuk.com/web/moncompte.postale.fr/
SCREENSHOT :


REDIRECT : http://www.dicaslowcarb.com.br/comptes/posta.loginclient.fr/3DSecure.login.client/Declaration/ID-BP.FR.ASPx/ID-BP.FR.ASP/

SCREENSHOT :


TWITTER LINK : http://www.dicaslowcarb.com.br/comptes/posta.loginclient.fr

WHOIS : dicaslowcarb.com.br

Domain: dicaslowcarb.com.br
owner: Ana Carolina Avesani Moura
country: BR
owner-c: ACAMO17
nserver: ns1.tamand.com.br
nserver: ns2.tamand.com.br
created: 20140311
changed: 20150702

Email analysis :

NOTE : POSTALE@att.fr
NOTE : Received : by a0118.abansys.com (Postfix, from userid 48)
NOTE : apache@a0118.abansys.com
NOTE : X-Mailer : PHPMailer [version 1.73]