Sunday, December 20, 2015

Dear Valued Member Account Owner!!!!,

This message comes from your (EMAIL SERVICE PROVIDER) messaging admin center to All E-mail Account owners. We are currently improving our Database and E-mail Account Center and creating more certainty for our Legal Service clients. At this moment we are upgrading our data base so that there will be more space for new customers and increasing the surf on the Internet. To prevent your Email address not to be DE-activated and to enable it upgraded, you need to assist us by sending the information below to enable us upgrade it, so that your email account status were fleet in our database as a very active, useful and legal email account.Do send to us the below information to enable us upgrade your Account, else your email account will lost in a short time.

First Name:
Last Name:
Country:
City:
Date of Birth:
Email Address:
E-mail password
Alternative Email:
Secret Question:
Secret Answer:

WARNING!!! E-MAIL OWNERS who refuses to upgrade his or her account within Five days after notification of this update will permanently be deleted from our data base and can also lead to malfunctioning of the client or user's account and we will not be responsible for loosing our account.

Thanks for your understanding as it is geared towards serving you better.

Web-mail Support Team
Warning Code:
ID67565434.

Email analysis :

NOTE : igboboy97@yahoo.com
NOTE : Received : by 66.196.81.114;
NOTE : X-Yahoo-Newman-Property : ymail-3
NOTE : 98.138.91.165 (nm5-vm4.bullet.mail.ne1.yahoo.com)

Attn: Beneficiary,This is the Real Truth About your Fund

I am compelled to write you in respect of your fund remittance, which transfer has remained unsuccessful. I am very sure that you must have lost hope of ever getting your fund transfer released especially after all the frustrations, endless disappointment and broken promises in the hands of some officials. However, I am writing you because I am familiar with the history of this fund release. My privileged knowledge and acquaintance with this payment issue is due to my closeness and association with the immediate past Finance Minister, who I worked with from 2010 until his voluntary retirement in September 20, and in addition to the current position which I still maintain within the Ministry as such and must not be revealed to any other Nigerian official no matter your cordiality and closeness

This request must be noted in view of the fact that the current Finance Minister, Mrs. Ngozi Okonji-Iweala is yet to be briefed on some outstanding issues and information by his predecessor and other top officials of the Ministry who are not political appointees and who have worked in the Ministry for more than 2decades. Briefly, I am quite sure that you must be wondering the reason behind the non-release of your long awaited fund after our Government officially granted approval for its remittance

I may also believe that you would have received countless, unconfirmed and spurious payment Advices and remittance instructions from some officials indicating that they have granted approval for the transfer of your fund. You may have also been directed to visit different cities and countries with the instruction that your fund would be released at such payment post or that your fund could be delivered to you at your residence. All these are cooked up Stories from impostors who wish to extort money from you while they do not have any knowledge of the true position of your fund transfer. Meanwhile, I would like you to note the following

(1) Our government has granted irrevocable payment approval for your fund remittance
(2) Official release of this fund according to the record from the office of the Accountant General of the Federation and Ministry of Finance have been duly effected and documented
(3) Your fund is presently being held at Union Bank of Nigeria, the only authorized and approved bank by the Federal Government to handle all foreign contract debts

However for the avoidance of doubt, the reason for the non-release of your fund is due to the fact that the paying Bank has not received any direct instruction about the beneficiary of the outstanding amount as the fund is still being held in the name of the original contractor's name Elblan IND.S.A. Luxembourg, in view of the non-provision of a proof of ownership of the fund and you were not told the truth by your Nigerian representatives to change Elblan IND.S.A. Luxembourg's name to your own name in other to enable you claim the fund because your Nigerian representatives is very much aware that once the truth about your fund release is told to you, it will put an end to their illegal extortion from you. If you are very certain that you will not disclose this information to anyone, get back to me and I will give you further directives on what you should do immediately. NB: You are advised to stop further dealings with any of your Nigeria Representatives with immediate effect, to avoid further extortion of your money

Get back to me through this EMAIL ( care_customer.dept@qq.com )

Yours sincerely
Prof. Alex G Bender

Email analysis :

NOTE : care_customer.dept@qq.com

Friday, December 18, 2015

Un conseiller LCL vous a adressé un (+1) message (Phishing LCL)

Bonjour,

Un conseiller LCL vous a adressé un message.
Pour le consulter et accéder à votre messagerie sécurisée, merci de vous connecter à LCL.fr, rubrique « Accédez à vos comptes ».

A très bientôt sur le service LCL de gestion de comptes.

LCL
-----------------------------------

Attention, il est inutile de répondre à ce message, votre mail ne fera l'objet d'aucun traitement.

Crédit Lyonnais - SA au capital de 1 847 860 375 € - SIREN 954 509 741 - RCS Lyon.
Société de courtage d'assurance inscrite sous le numéro d'immatriculation d'intermédiaire en assurance ORIAS : 07001878 . Siège social : 18 rue de la République, 69002 Lyon . Pour tout courrier : LCL, 20 avenue de Paris, 94811 Villejuif Cedex.

Phishing analysis :

CLICK : Accédez à vos comptes
OPEN : http://bit.ly/1ZaLZgF
NOTE : http://ugandasafarimasters.com/LCL/particulier/connexion.nouveau.messages/log/lcl/
NOTE : http://ugandasafarimasters.com/
SCREENSHOT :


ugandasafarimasters.com whois :

Domain Name: UGANDASAFARIMASTERS.COM
Registry Domain ID: 1552646263_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2015-04-21T11:23:05Z
Creation Date: 2009-04-17T21:42:14Z
Registrar Registration Expiration Date: 2016-04-17T21:42:14Z
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Registrar Abuse Contact Email: domainabuse@tucows.com
Registrar Abuse Contact Phone: +1.4165350123
Reseller: Netfirms
Registrant Name: Wensi Nuwagaba
Registrant Organization: Imaginet
Registrant Street: 57 Naguru Drive
Registrant City: Kampala
Registrant State/Province: NA
Registrant Postal Code: NA
Registrant Country: UG
Registrant Phone: +256.773102176
Registrant Email: nwensi@yahoo.co.uk
Admin Name: Wensi Nuwagaba
Admin Organization: Imaginet
Admin Street: 57 Naguru Drive
Admin City: Kampala
Admin State/Province: NA
Admin Postal Code: NA
Admin Country: UG
Admin Phone: +256.773102176
Admin Email: nwensi@yahoo.co.uk
Tech Organization: Domains Manager
Tech Street: 7030 Woodbine Ave. Suite 800
Tech City: Markham
Tech State/Province: ON
Tech Postal Code: L3R 6G2
Tech Country: CA
Tech Phone: +1.4166612100
Tech Phone Ext:
Tech Fax: +1.4166610700
Tech Email: support@netfirms.com
Name Server: NS1.IMAGINETSVRS.COM
Name Server: NS2.IMAGINETSVRS.COM
DNSSEC: unsigned

Email analysis :

NOTE : services.clients.lcl.fr@fly-hobby.ru
NOTE : X-Remote : 81.30.48.12 (mail.nettrans.ru)
NOTE : Mime-Version : 1.0
NOTE : Received : from mail.nettrans.ru (81.30.48.12)
NOTE : Received : from localhost (localhost.localdomain [127.0.0.1])
NOTE : by mail.nettrans.ru (Postfix)
NOTE : Received : from mail.nettrans.ru ([127.0.0.1])
NOTE : by localhost (mail.nettrans.ru [127.0.0.1])
NOTE : Received : from CLOUD1BTOR5J12 (unknown [185.73.37.188])
NOTE : by mail.nettrans.ru (Postfix)
NOTE : Un conseiller LCL vous a adressé un (+1) message

YOUR URGENT ATTENTION IS NEEDED

Attn; Dear Beneficiary,

Please your urgent Attention is needed, we wish to inform you that our Diplomatic agent conveying your consignment box valued the sum of $4.5 Million United States Dollars misplaced your address, we required you Reconfirm the following information's below so that her can deliver your Consignment box to you today and return immediately,

FULL NAME: ===========
COUNTRY: ===========
CITY: ===========
CURRENT HOME ADDRESS: =========
TELEPHONE/CELL PHONE NUMBER.======
AGE/OCCUPATION: =======
SEX:MAN.

She is waiting to hear from you today with the information's to bring your Consignment funds to your doorstep. NOTE: That Diplomat agent Rose Clara did not know the content of The consignment box contains a huge amount of money which is $4.5 Million United States Dollars and on No circumstances should you let her be at peril with the Consignment box, The consignments were moved from here as family Treasures, so never Disclose the real content to her until you receive your consignment.

Best Regards
Mike E. Jallo

Email analysis :

NOTE : diplomrosejam@gmail.com
NOTE : nori@cpost.plala.or.jp
NOTE : Received : from mweb02 ([172.23.12.182])
NOTE : by msa02b.plala.or.jp with ESMTP
NOTE : 58.93.240.2 (msa02.plala.or.jp)

Rép :Confirm

Attention Please!!!

I have registered your ATM CARD of $10.5 with ATM card office department with registration code of ( Shipment Code awb 33xzs). please Contact with your delivery information such as:- Your Name, Your Address and Your Telephone Number.

Name of Dir: Mr.Sam Harry
Reply To E-mail:atm_card@qq.com

I have paid for the Insurance & Delivery fee.The only fee you have to pay is their activation fee only.Please indicate the registration Number and ask Him how much is their activation fee so that you can pay it and receiver your fund

Best Regards,
Mrs.Rose Mary

Email analysis :

NOTE : ms.rosemary@live.co.uk
NOTE : atm_card@qq.com
NOTE : Received : from ouropret by server.ouropretodooeste.com with local (Exim 4.86)
NOTE : (envelope-from < ouropret@server.ouropretodooeste.com >)

MTCN READY FOR PICK UP

We have deposited the check of your fund (4.500`000`000USD) through western unions department after our finally meeting regarding your fund,All you will do is to contact director Mr. Tom west via email (desk.top7@hotmail.com) He will give you direction on how you will be receiving the funds daily.Remember to
send him your Full information to avoid wrong transfer such as,

Receiver's Name_______________
Address: ________________
Country: _____________
Phone Number: _____________
YOUR;Age and occupation_______

Though,JAMES is about to send 6000 on your behalf but the neede information is the only thing holding him so contact Mr.Tom west or you call him +229 9847657 as soon as you receive this email and tell him to give you the information ok,the only fee you are advise to pay is renewed and activation fee which is 145 dollars. contact Mr Tom west TO GIVE YOU INFO TO SEND THE NEEDED FEE TO ENABLE YOU START RECEIVING YOUR FUND TODAY OK

Email analysis :

NOTE : desk.top7@hotmail.com
NOTE : desk.top1@cantv.net

CANTV Telephone service company. CANTV is one of the first telephone service enterprises in Venezuela, founded in 1930. The company was re-nationalized in 2007 and is the largest telecommunications provider in Venezuela. Headquarters: Caracas, Venezuela. Founded: June 20, 1930. Parent organization: Government of Venezuela

NOTE : Received : from host1-110-static.228-95-b.business.telecomitalia.it (HELO panamed.it) (95.228.110.1)


NOTE : Received : from User ([75.144.110.1] RDNS failed)


NOTE : by panamed.it with Microsoft SMTPSVC(6.0.3790.4675);