Friday, December 18, 2015

Un conseiller LCL vous a adressé un (+1) message (Phishing LCL)

Bonjour,

Un conseiller LCL vous a adressé un message.
Pour le consulter et accéder à votre messagerie sécurisée, merci de vous connecter à LCL.fr, rubrique « Accédez à vos comptes ».

A très bientôt sur le service LCL de gestion de comptes.

LCL
-----------------------------------

Attention, il est inutile de répondre à ce message, votre mail ne fera l'objet d'aucun traitement.

Crédit Lyonnais - SA au capital de 1 847 860 375 € - SIREN 954 509 741 - RCS Lyon.
Société de courtage d'assurance inscrite sous le numéro d'immatriculation d'intermédiaire en assurance ORIAS : 07001878 . Siège social : 18 rue de la République, 69002 Lyon . Pour tout courrier : LCL, 20 avenue de Paris, 94811 Villejuif Cedex.

Phishing analysis :

CLICK : Accédez à vos comptes
OPEN : http://bit.ly/1ZaLZgF
NOTE : http://ugandasafarimasters.com/LCL/particulier/connexion.nouveau.messages/log/lcl/
NOTE : http://ugandasafarimasters.com/
SCREENSHOT :


ugandasafarimasters.com whois :

Domain Name: UGANDASAFARIMASTERS.COM
Registry Domain ID: 1552646263_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2015-04-21T11:23:05Z
Creation Date: 2009-04-17T21:42:14Z
Registrar Registration Expiration Date: 2016-04-17T21:42:14Z
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Registrar Abuse Contact Email: domainabuse@tucows.com
Registrar Abuse Contact Phone: +1.4165350123
Reseller: Netfirms
Registrant Name: Wensi Nuwagaba
Registrant Organization: Imaginet
Registrant Street: 57 Naguru Drive
Registrant City: Kampala
Registrant State/Province: NA
Registrant Postal Code: NA
Registrant Country: UG
Registrant Phone: +256.773102176
Registrant Email: nwensi@yahoo.co.uk
Admin Name: Wensi Nuwagaba
Admin Organization: Imaginet
Admin Street: 57 Naguru Drive
Admin City: Kampala
Admin State/Province: NA
Admin Postal Code: NA
Admin Country: UG
Admin Phone: +256.773102176
Admin Email: nwensi@yahoo.co.uk
Tech Organization: Domains Manager
Tech Street: 7030 Woodbine Ave. Suite 800
Tech City: Markham
Tech State/Province: ON
Tech Postal Code: L3R 6G2
Tech Country: CA
Tech Phone: +1.4166612100
Tech Phone Ext:
Tech Fax: +1.4166610700
Tech Email: support@netfirms.com
Name Server: NS1.IMAGINETSVRS.COM
Name Server: NS2.IMAGINETSVRS.COM
DNSSEC: unsigned

Email analysis :

NOTE : services.clients.lcl.fr@fly-hobby.ru
NOTE : X-Remote : 81.30.48.12 (mail.nettrans.ru)
NOTE : Mime-Version : 1.0
NOTE : Received : from mail.nettrans.ru (81.30.48.12)
NOTE : Received : from localhost (localhost.localdomain [127.0.0.1])
NOTE : by mail.nettrans.ru (Postfix)
NOTE : Received : from mail.nettrans.ru ([127.0.0.1])
NOTE : by localhost (mail.nettrans.ru [127.0.0.1])
NOTE : Received : from CLOUD1BTOR5J12 (unknown [185.73.37.188])
NOTE : by mail.nettrans.ru (Postfix)
NOTE : Un conseiller LCL vous a adressé un (+1) message

YOUR URGENT ATTENTION IS NEEDED

Attn; Dear Beneficiary,

Please your urgent Attention is needed, we wish to inform you that our Diplomatic agent conveying your consignment box valued the sum of $4.5 Million United States Dollars misplaced your address, we required you Reconfirm the following information's below so that her can deliver your Consignment box to you today and return immediately,

FULL NAME: ===========
COUNTRY: ===========
CITY: ===========
CURRENT HOME ADDRESS: =========
TELEPHONE/CELL PHONE NUMBER.======
AGE/OCCUPATION: =======
SEX:MAN.

She is waiting to hear from you today with the information's to bring your Consignment funds to your doorstep. NOTE: That Diplomat agent Rose Clara did not know the content of The consignment box contains a huge amount of money which is $4.5 Million United States Dollars and on No circumstances should you let her be at peril with the Consignment box, The consignments were moved from here as family Treasures, so never Disclose the real content to her until you receive your consignment.

Best Regards
Mike E. Jallo

Email analysis :

NOTE : diplomrosejam@gmail.com
NOTE : nori@cpost.plala.or.jp
NOTE : Received : from mweb02 ([172.23.12.182])
NOTE : by msa02b.plala.or.jp with ESMTP
NOTE : 58.93.240.2 (msa02.plala.or.jp)

Rép :Confirm

Attention Please!!!

I have registered your ATM CARD of $10.5 with ATM card office department with registration code of ( Shipment Code awb 33xzs). please Contact with your delivery information such as:- Your Name, Your Address and Your Telephone Number.

Name of Dir: Mr.Sam Harry
Reply To E-mail:atm_card@qq.com

I have paid for the Insurance & Delivery fee.The only fee you have to pay is their activation fee only.Please indicate the registration Number and ask Him how much is their activation fee so that you can pay it and receiver your fund

Best Regards,
Mrs.Rose Mary

Email analysis :

NOTE : ms.rosemary@live.co.uk
NOTE : atm_card@qq.com
NOTE : Received : from ouropret by server.ouropretodooeste.com with local (Exim 4.86)
NOTE : (envelope-from < ouropret@server.ouropretodooeste.com >)

MTCN READY FOR PICK UP

We have deposited the check of your fund (4.500`000`000USD) through western unions department after our finally meeting regarding your fund,All you will do is to contact director Mr. Tom west via email (desk.top7@hotmail.com) He will give you direction on how you will be receiving the funds daily.Remember to
send him your Full information to avoid wrong transfer such as,

Receiver's Name_______________
Address: ________________
Country: _____________
Phone Number: _____________
YOUR;Age and occupation_______

Though,JAMES is about to send 6000 on your behalf but the neede information is the only thing holding him so contact Mr.Tom west or you call him +229 9847657 as soon as you receive this email and tell him to give you the information ok,the only fee you are advise to pay is renewed and activation fee which is 145 dollars. contact Mr Tom west TO GIVE YOU INFO TO SEND THE NEEDED FEE TO ENABLE YOU START RECEIVING YOUR FUND TODAY OK

Email analysis :

NOTE : desk.top7@hotmail.com
NOTE : desk.top1@cantv.net

CANTV Telephone service company. CANTV is one of the first telephone service enterprises in Venezuela, founded in 1930. The company was re-nationalized in 2007 and is the largest telecommunications provider in Venezuela. Headquarters: Caracas, Venezuela. Founded: June 20, 1930. Parent organization: Government of Venezuela

NOTE : Received : from host1-110-static.228-95-b.business.telecomitalia.it (HELO panamed.it) (95.228.110.1)


NOTE : Received : from User ([75.144.110.1] RDNS failed)


NOTE : by panamed.it with Microsoft SMTPSVC(6.0.3790.4675);

Thursday, December 17, 2015

Urgent Attention Needed Please,

Hello,

How are you Doing Today?

I am Renee Torres, 16 years old from Wooster in the State of Ohio United States of America. I was raised up by a single mother who died few years ago.

Before she died she bequeathed her properties valued $3.9 Million dollars to me as her only daughter, but my stepfather who has problems with drugs and alcohol has been treating me very bad and threatening to kill me if i don’t handover the properties documents to him.

I need to live this house as soon as possible, all i need is a guardian who will stand for me to claim my inheritance because i have no other surviving family member to run to. Please help me and i will forever remain grateful to you, i will explain further when i hear from you

Attached is my picture for you to know what i look like

I hope to hear from you soon

Regards

Miss Renee Torres

Email analysis :

NOTE : reneetow96@gmail.com
NOTE : Received-Spf : avnorg@tri.tribomidia.com.br designates 192.163.199.37 as permitted sender)
NOTE : X-Source-Args : /usr/bin/php /home/avnorg/public_html/wp-includes/css/YellowMailer.php
NOTE : Return-Path : < avnorg@tri.tribomidia.com.br >
NOTE : Mime-Version : 1.0
NOTE : X-Source-Dir : avn.org.br:/public_html/wp-includes/css
NOTE : X-Authenticated-Sender : tri.tribomidia.com.br: avnorg
NOTE : X-Php-Script : avn.org.br/wp-includes/css/YellowMailer.php for 45.217.0.155
NOTE : X-Source : /usr/bin/php
NOTE : Received : by 10.27.134.85
NOTE : Received : from tri.tribomidia.com.br (tri.tribomidia.com.br. [192.163.199.37])
NOTE : Received : from avnorg by tri.tribomidia.com.br with local (Exim 4.86)
NOTE : (envelope-from < avnorg@tri.tribomidia.com.br >)
NOTE : Urgent Attention Needed Please,

I NEED YOUR KIND TRUST!!! (Contact via: p.houseman74@foxmail.com)

Hello friend,

I hope my email meets you well. I am in need of your assistance. My name is Dr. Philip Houseman; I am an American soldier stationed here in Aleppo Syria, we have some amount of funds that we want to move out of the country.we need your help to receive this funds on our behalf. Please i hope you are most suitable for this opportunity.You will be entitled to 30 percent for your help. Contact via: p.houseman74@foxmail.com

Dr. Philip Houseman

Email analysis :

NOTE : caustin@brightmoorcc.org
NOTE : p.houseman74@foxmail.com
NOTE : Received : from es-ra1.xxpert.com (127.0.0.1)
NOTE : (envelope-from < caustin@brightmoorcc.org >)
NOTE : Received : from BMCC500.brightmoorcc.org ([205.251.179.130])
NOTE : by es-ra1.xxpert.com (SonicWALL 8.2.0.4663)
NOTE : Received : from BMCC500.brightmoorcc.org ([::1])