Wednesday, October 14, 2015

Dear customer

Dear customer

We have deposited the check of your fund ($1.500`000`00USD) through Western Union department after our finally meeting regarding your fund, All you will do is to contact Western Union director Mr. gorgel give you direction on how you will be receiving the funds daily. Remember to send him your Full information to avoid wrong transfer such as,

Receiver's Name______________
Address: ________________
Country: _____________
Phone Number: _____________

Though, Mrs. Sandra Synder has sent $5000 in your name today so contact Mr. gorge (unionw55@gmail.com ) or you call him +229-98695512 as soon as you receive this email and tell him to give you the Mtcn, sender name and question/answer to pick the $5000 but the only fee you will pay before you pick your payment is $100

Email analysis :

NOTE : WILLIAMS@seagreen.ocn.ne.jp
NOTE : unionw55@gmail.com
NOTE : X-Originating-Ip : [41.216.50.54]


NOTE : Received : from mzcstore362.ocn.ad.jp
NOTE : (mv-osn-hcb010.ocn.ad.jp [122.1.235.84])
NOTE : by mv-osn-hcb010.ocn.ad.jp

Facturation mensuelle revoquée

Bon jour


http://www.spi0n.com

Mail

Id

029202

Phishing analysis :

NOTE : CLICK IMAGE
CLICK : http://www.4londonjobs.co.uk//pikatest@free.fr
REDIRECT : http://maalabalich.com/mar
NOTE : The phishing seems inactive.

Whois investigation :

4londonjobs.co.uk
=========================================
Registrant: Uma Nagisetty
Registrant type: UK Individual
Registrant's address:
57 Oxleay Road
Harrow London Middlesex
HA2 9UZ United Kingdom
Registered on: 22-Nov-2009
Expiry date: 22-Nov-2015
Last updated: 26-Apr-2015
Name servers:
ns1.propertyjobsuk.com
ns2.propertyjobsuk.com
=========================================
spi0n.com
=========================================
Domain Name: spi0n.com
Registry Domain ID: 1581514919_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.ovh.com
Registrar URL: http://www.ovh.com
Updated Date: 2014-12-01T13:52:29.0Z
Creation Date: 2010-01-11T19:06:50.0Z
Registrar Registration Expiration Date: 2016-01-11T19:06:50.0Z
Registrar: OVH, SAS
Registrar IANA ID: 433
Registrar Abuse Contact Email: abuse@ovh.net
Registrar Abuse Contact Phone: +33.899498765
Domain Status: clientTransferProhibited
Domain Status: clientDeleteProhibited
Registrant Name: Enard Boris
Registrant Organization: Feed Up Networks
Registrant Street: 6 Rue Anna Politkovskaia
Registrant City: Toulouse
Registrant State/Province:
Registrant Postal Code: 31200
Registrant Country: FR
Registrant Phone: +33.953157944
Registrant Email: g63elrq9eygeol6wgkm9@q.o-w-o.info
Admin Name: Enard Boris
Admin Organization: Feed Up Networks
Admin Street: 6 Rue Anna Politkovskaia
Admin City: Toulouse
Admin State/Province:
Admin Postal Code: 31200
Admin Country: FR
Admin Phone: +33.953157944
Admin Email: nvh4k8l53bplhrylgtq7@i.o-w-o.info
Tech Name: Santang??lo St??phane
Tech Street: spi0n.com, office #6077944, c/o OwO, BP80157
Tech City: 59053
Tech State/Province:
Tech Postal Code: Roubaix Cedex 1
Tech Country: FR
Tech Phone: +33.899498765
Tech Email: smfgdydubi1cl2lv65r8@n.o-w-o.info
Name Server: dave.ns.cloudflare.com
Name Server: lady.ns.cloudflare.com
=========================================
maalabalich.com
=========================================
Domain was outdated...

Email analysis :NOTE :

NOTE : Content-Type : text/html; charset=UTF-8
NOTE : X-Mailer : PHPMailer (phpmailer.sourceforge.net)
NOTE : X-Mailer : EMS
NOTE : Return-Path : < www-data@131.ip-167-114-231.eu >


NOTE : Received : from mwinf5c69 ([167.114.252.189])


NOTE : Facturation mensuelle revoquée

DONATION

Am Mr. Tom Crist. I am donating a grant of $850,000 USD to you. Contact me.. tomcrisdonation@gmail.com for further details.

Mr Tom Crist .........

This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

Email analysis :

NOTE : Md donation
NOTE : tomcrisdonation@gmail.com
NOTE : X-Originating-Ip : [198.199.123.157]

CAN I TRUST YOU WITH MY 8.5 MILLION DOLLARS

My name is Mrs. Melissa & I have 8.5 million dollars to invest in charity name to help poor ones in your country, contact me via melissacharity2@gmail.com

Email analysis :

NOTE : Melissa
NOTE : emailinbox79.onmicrosoft.com
NOTE : melissacharity2@gmail.com
NOTE : X-Originating-Ip : [101.60.152.53]

ATTENTION : ATM MASTER CARD OWNER,

FROM THE DESK OF MR.DAVID JEFF POLAK.
DIRECTOR ATM CARD DEPARTMENT
ZENITH BANK PLC
FEDERAL REPUBLIC OF BENIN WEST AFRICA.
OUR REF:Z.B./MF/B01/Vol 01
EMAIL:(atmmastercardoffice2015@gmail.com)

ATTENTION : ATM MASTER CARD OWNER,

WE HERE BY NOTIFYING YOU THAT ZENITH BANK PLC HAVE BEEN MANDATED TO ISSUE OUT YOUR PAYMENT OF $4.5MILLION USD THROUGH ATM CARD . YOU HAVE TO STOP FURTHER COMMUNICATION WITH ANY OTHER PERSON(S) OR OFFICE(S) OR MINISTRY OF FINANCE AFRICA TO AVOID HITCHES IN RECEIVING YOUR ATM CARD PAYMENT. ZENITH BANK MANAGER HAVE CONFIRMED AUTOMATION OF YOUR SWIFT PAYMENT THROUGH AN ELECTRONIC ATM CARD PAYMENT. THE BANK HAVE ARRANGED YOUR PAYMENT THROUGH SWIFT CARD PAYMENT CENTER ASIA PACIFIC THIS CARD CENTER WILL SEND YOU AN ATM CARD WHICH YOU WILL USE TO WITHDRAW YOUR MONEY IN ANY ATM MACHINE IN ANY PART OF THE WORLD . THE MAXIMUM DAILY WITHDRAWAL IS $5,000USD PER DAY. A TOTAL OF $5,000USD AT A TIME . NOW YOU ARE TO TAKE CARE OF YOUR FUND BY CONTACTING THE BANK TODAY. THIS IS A SPECIAL ARRANGEMENT IN COLLABORATION WITH MASTER CARD COMPANY USA. KINDLY CONTACT THE BELOW PERSON WHO IS IN POSITION TO RELEASE YOUR ATM PAYMENT CARD TO YOU. YOU ARE REQUESTED TO FORWARD TO DR.morris uba:

FULL NAME:
HOME ADDRESS:
COUNTRY:
TELEPHONE NUMBER:
FOR IMMEDIATE MAILING OF THE ATM CARD TO YOUR ADDRESS.

CONTACT HON DR.morris uba WITH THIS INFORMATION:

HON DR.morris uba
FOREIGN PAYMENT DEPARTMENT
ZENITH BANK BENIN REPUBLIC
EMAIL:(atmmastercardoffice2015@gmail.com)
TELL:+229 98895029

NOTE THAT BECAUSE OF IMPOSTORS THE (ZENITH BANK) HEREBY ISSUED YOU OUR CODE OF CONDUCT WHICH IS ATM-0212 SO YOU HAVE TO INDICATE THIS CODE WHEN CONTACTING DR.morris uba ON THE CARD CENTER BY USING IT AS YOUR SUBJECT. KINDLY NOTIFY (ZENITH BANK) IMMEDIATELY TO CONFIRM THE RECEIPT OF THIS MASSAGE FROM THE ZENITH BANK PLC.

MR.DAVID JEFF POLAK
HEAD OF ATM DEPT
(ZENITH BANK)
BENIN

Email analysis :

NOTE : WWW@smile.ocn.ne.jp
NOTE : atmmastercardoffice2015@gmail.com
NOTE : X-Originating-Ip : [41.86.234.165]
NOTE : 153.149.233.35 (mbkd0234.ocn.ad.jp)
NOTE : Received : from mzcstore211.ocn.ad.jp
NOTE : (mv-osn-hkg001 [122.28.14.176]) by mv-osn-hkg001.ocn.ad.jp (Postfix)

PARTNERSHIP

Interim Assistance General Manager,
(Operations, Maintenance, Transportation)
Harrisburg International Airport Pennsylvania
One Terminal Drive, Middletown,
PA 17057, Pennsylvania USA

Hello Good Friend,

Your Abandoned Package For Delivery

I have very vital information to give to you, but first I must have your trust before I review it to you because it may cause me my job, so I need somebody that I can trust for me to be able to review the secret to you. I am Mr. Chris Martins, head of luggage/baggage storage facilities (Operations, Maintenance, Transportation) here at the Harrisburg International Airport, Pennsylvania USA. During my recent withheld package routine check at the Airport Storage Vault, I discovered an abandoned shipment from a Diplomat from London and when scanned it revealed an undisclosed sum of money in a Metal Trunk Box weighing approximately 110kg. The consignment was abandoned because the Contents of the consignment was not properly declared by the consignee as "MONEY" rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the United States Non Inspection Charges which is $3,700USD. On my assumption the consignment is still left in our Storage House here at the Harrisburg International Airport Pennsylvania till date. The details of the consignment including your name, your email address and the official documents from the United Nations office are tagged on the Trunk box. However, to enable me confirm if you are the actual recipient of this consignment as the assistant director of the Inspection Unit, I will advise you provide your current Phone Number and Full Address, to enable me cross check if it corresponds with the address on the official documents including the name of nearest Airport around your city. Please note that this consignment is supposed to have been returned to the United States Treasury Department as unclaimed delivery due to the delays in concluding the clearance processes so as a result of this, I will not be able to receive your details on my official email account. So in order words to enable me cross check your details, I will advise you send the required details to my private email address for quick processing and response. Once I confirm you as the actual recipient of the trunk box, I can get everything concluded within 48hours upon your acceptance and proceed to your address for delivery. Lastly, be informed that the reason I have taken it upon myself to contact you personally about this abandoned consignment is because I want us to transact this business and share the money 70% for you and 30% for me since the consignment has not yet been returned to the United States Treasury Department after being abandoned by the diplomat so immediately the confirmation is made, I will go ahead and pay for the United States Non Inspection Fee of $3,700 dollars and arrange for the box to be delivered to your doorstep Or I can bring it by myself to avoid any more trouble but you have to assure me of my 30% share. I wait to hear from you urgently if you are still alive and I will appreciate if we can keep this deal confidential. Please get back to me via my private Email:( martinschris372@gmail.com) for further
directives

Thank you.
Chris Martins
Interim Assistance General Manager,
(Operations,Maintenance,Transportation)
Harrisburg International Airport Pennsylvania
One Terminal Drive, Middletown.

Email analysis :

NOTE : payzone848@yahoo.com
NOTE : martinschris372@gmail.com
NOTE : 89.34.26.138 ()
NOTE : Received : from [154.118.24.53] (port=57513 helo=User)
NOTE : by hgondyum with esmtpa (Exim 4.85) (envelope-from < payzone848@yahoo.com >)