Manchester-Boston Regional Airport (MHT), New Hampshire

From: Mr. Jeffrey Hosch
Inspection Officer.
United Nations Inspection Agency
New Hampshire, US.

Attention: Sir,

I am Mr. Jeffrey Hosch, Head of Inspection Unit United Nations Inspection Agency in Manchester-Boston Regional Airport (MHT), and New Hampshire.

During our daily routine Inspection, I discovered an abandoned shipment through a Diplomat from the United Kingdom which was transferred from JF Kennedy Airport to our facility here in New Hampshire, and when scanned, it revealed an undisclosed sum of money in 2 Metal Trunk Boxes weighing approximately 110kg each.

The consignment was abandoned because the Content was not properly declared by the consignee as money rather it was declared as personal effect/classified document to either avoid diversion by the Shipping Agent or confiscation by the relevant authorities. The diplomat's inability to pay for Non Inspection fees among other relevant fees are the reason why the consignment is delayed and abandoned.

By my assessment, each of the boxes contains about $4,000,000.00(Four Million United States dollars) or more. They are still in the airport storage facility up to this moment of sending you this message. The Consignments like I said are two metal trunk boxes weighing about 110kg each (Internal dimension: W61 x H156 x D73 (cm) effective capacity: 680 L) Approximately. The details of the consignment including your name and email on the official document from United Nations' office in London where the shipment was tagged as personal effects/classified document is still available with us.

As it stands now, you have to reconfirm your (1) Full Name, (2) Phone Number, (3) Full Residential Address, so I can cross-check and see if it corresponds with the one on the official documents. It is now left for you to decide if you still need the consignment or allow us repatriate it back to the UK (place of origin) as we were instructed. Like I did say again, the shipper abandoned it and ran away most importantly because he gave a false declaration, he could not pay for the yellow tag, he could not secure a valid non inspection document(s), etc.

You can either come in person, or you engage the services of a secure shipping/delivery Company/agent that will provide the necessary security that is required to deliver the CONSIGNMENTS to your doorstep or the destination of your choice. I am going to assist you in making sure the parkages are delivered.

Kindly respond to this email > >( mrjeffreyhosch1@gmail.com ).

Best Regards,

Jeffrey Hosch
Inspection Officer.
United Nations Inspection Agency
(603) 574-4919

Email analysis :

NOTE : hos50@deptofficesstr.is-great.net
NOTE : mrjeffreyhosch1@gmail.com
NOTE : X-Originating-Ip : [105.112.39.86]

Provider : Airtel Networks Limited
Country : Nigeria
City : Lagos
Latitude : 6.4531
Longitude : 3.3958

Your $2.5 Million Compensation

THIS MAIL IS ONLY FOR THE OWNER OF THIS E-MAIL ADDRESS:

A report came in to this office regarding a fund transfer which you are supposed to receive from COTONOU, UBA BANK. Investigation has been made and we had discovered that the bank manager Mr. Yusuf was behind all the delays and plans to divert this funds to his personal banking account.

The report was made from the State Finance Commission yesterday that your funds have not be released to you. The police took actions and we tracked this BANK. The bank manager was arrested, he is now in jail for attempting a fraud act to seize a fund $2.5 Million a compensation which was made approved by the State Government to you as beneficiary.

The State Finance Commission had given order to the bank authorities to issue a Certified Cashier's check and send it to your home address. So we are sending you this notice, to know if you would prefer the $2.5 Million paid to you by Cashier's check or crediting the $2.5 Million into an ATM VISA CARD?

Waiting on your urgent response.

YOURS IN SERVICE,
MR.PETERS DURU.
INSPECTOR GENERAL OF INTERPOL
CRIME STATE DEPARTMENT.

Email analysis :

NOTE : xx@yy
NOTE : interpolcrimedpt@126.com
NOTE : Received : from [91.212.182.38] (KTVOIP2 [91.212.182.38])

NOTE : by tux.mailserverbox.com
NOTE : client-ip=103.252.101.88;

UNCGA987

Attention Beneficiary,

Some emails was chosen at random from our Automated random search machine and you happen to be one of the Lucky beneficiaries of the ongoing United Nations Cash Grant Award of $1,000,000.00USD ( One Million Dollars). This cash grant award was initiated to help better the lives of people due to the increasing rate of UN-employment in the world.

Below is your winning Number.
UNCGA987.

NOTE: This number is to be kept confidential. Contact the Grant Award
office for your immediate processing of your winning.

Once again Congratulation

Email: claims_uncashgrant@outlook.com

Email analysis :

NOTE : mofoia-hosoffice@samoaonline.ws
NOTE : claims_uncashgrant@outlook.com
NOTE : Mime-Version : 1.0
NOTE : X-Sender : mofoia-hosoffice@samoaonline.ws
NOTE : Received : from smtp1.coconet.ws (smtp1.coconet.ws. [202.4.60.22])
NOTE : Received : from webmail.samoaonline.ws (webmail.coconet.ws [202.4.60.23])
NOTE : by smtp1.coconet.ws (Postfix)
NOTE : client-ip=202.4.60.22;

NOTE : User-Agent : Roundcube Webmail/0.8.6
NOTE : (no subject)

Your Expedia account was restricted (Phishing)

Dear partner,

A recent attempt to Sign in to your Expedia PartnerCentral was restricted.

As a security precaution, we have temporarity suspended access to your account services

What do I have to do?

Please click the button below and follow the procedure in order to complete the verification process.

https://expediaparnercentral.com/

Full access to your account will be regained once verified

© 2016 Copyright. All rights reserved. Confidential and proprietary.

Phishing analysis :

CLICK : https://expediaparnercentral.com/
OPEN : http://crias.cl/images/.x/partner/expediapartnercentral.com/
SCREENSHOT :

VALIDATE : FORM
REDIRECT : https://www.expediapartnercentral.com/Account/Logon?MESSAGE=*&RP_ID=1

Email analysis :

NOTE : info@rns.com.tr
NOTE : Received : from static.107.167.76.144.clients.your-server.de
NOTE : ([144.76.167.107]:49865 helo=[127.0.0.1])

NOTE : by sv67.ifastnet16.org with esmtpa (Exim 4.86)
NOTE : (envelope-from < info@rns.com.tr >)
NOTE : Received : from sv67.ifastnet16.org (sv67.ifastnet16.org. [31.22.7.248])

crias.cl whois :
==================================
Titular: Verónica Delgado (CENTRO DE REHABILITACION INFANTIL AKTION SONNENSCHEIN LTDA)
Fecha de creación: 2007-08-21 13:15:16 CLT
Fecha de expiración: 2016-09-18 09:15:16 CLT Renovar ahora
Servidor de Nombre: ns1.accesoprime.cl
Servidor de Nombre: ns2.accesoprime.cl
==================================

rns.com.tr whois :
==================================
Registrant:

Rns Madencilik Sanayi Ve Dis Tic. Ltd. Sti.
atasehir bulv. 38. ada 3/3 no:66 Istanbul, Turkiye
muratyalcinkaya1@hotmail.com
Phone : + 216-456-1027

Billing Contact:

NIC Handle : rmv27-metu
Organization Name : RNS Madencilik ve San. D** Ticaret Ltd. *ti.
Address : Uzuntarla Mevkii No:19/1 *ile / Turkiye Istanbul,
Phone : + 90-262-6440088-

Domain Servers:

ns1.ifastnet16.org
ns2.ifastnet16.org

** Additional Info:
Created on..............: 2009-May-07.
Expires on..............: 2016-May-06.
==================================

MR. ROBERT ANTHONY

ATTENTION,

THIS MESSAGE IS FROM THE WESTERN UNION, TO THE OWNER OF THIS E-MAIL, HOW ARE YOU TODAY, I WRITE TO INFORM YOU THAT WE HAVE ALREADY SENT YOU USD5000.00 DOLLARS THROUGH WESTERN UNION AS WE HAVE BEEN GIVEN THE MANDATE TO TRANSFER YOUR FULL COMPENSATION PAYMENT TOTAL SUM OF US$500 000.00,VIA WESTERN UNION AS INSTRUCTED BY OUR GOVERNMENT.

I WAS CALLING YOUR TELEPHONE NUMBER TO GIVE YOU THE INFORMATION THROUGH PHONE BUT YOU DID NOT PICK UP MY CALLS THROUGH OUT THAT YESTERDAY EVEN THIS MORNING. NOW I DECIDED TO EMAIL YOU THE MTCN AND SENDER'S NAME SO THAT YOU WILL PICK UP THIS USD5000.00 TO ENABLE US SEND ANOTHER PAYMENT TODAY AS YOU KNOW WE WILL BE SENDING YOU ONLY USD 5000.00 PER DAILY. PLEASE RUN TO WESTERN UNION TO PICK UP THE USD5000.00 AND CALL ME BACK TO SEND YOU ANOTHER PAYMENT TODAY MANAGER MR. ROBERT ANTHONY TELEPHONE NUMBER TEL# +2299898770668 CALL OR EMAIL ME ONCE YOU PICKED UP THIS USD5000.00. HERE IS THE WESTERN UNION INFORMATION TO PICK UP THE MONEY:

MTCN # 1021285837
SENDER'S NAME:::::: PETER LEEN
AMOUNT'S $5,000.00
TEST QUESTION:::::WHAT COLOUR
TEST ANSWER::::::GREEN

I AM WAITING FOR YOUR CALL ONCE YOU PICK UP THE MONEY. MEANWHILE YOU ARE REQUIRE TO SEND US THE TRANSFERRING FEE WHICH IS $65US FOR THE WHOLE TRANSFER CHARGES, THAT WE HAVE ALREADY REMITTED TO YOUR NAME, SO WITHOUT THE TRANSFER FEE YOU CAN NOT PICK THE MONEY FOR IT'S ON HOLD AND THE MTCN CANNOT BE RELEASED TO YOU UNTIL YOU SEND THE TRANSFER FEE, THAT IS AN INSTRUCTION FROM THE FEDERAL MINISTRY OF FINANCE (FMF). PLEASE EMAIL ME YOUR DIRECT TELEPHONE NUMBER BECAUSE I NEED TO BE CALLING YOU ONCE WE SEND ANY PAYMENT FOR THESE INFORMATION'S.

HERE IS THE INFORMATION THAT YOU WILL USE TO SEND THE TRANSFER CHARGE SO THAT YOUR FIRST PAYMENT WILL BE RELEASE TO YOU FOR ANOTHER TO BE SENT

RECEIVER NAME::::::::::::::::::::::::Dominic Igwilo
COUNTRY:::::::::::::::::::::::::::::REPUBLIC OF BENIN
CITY ::::::::::::::::::::::::::::::::COTONUO
TEXT QUESTION :::::::::::::::HONEST?
ANSWER ::::::::::::::::::::::::TRUST
MTCN::::::::::::::::::::::::::
SENDER'S NAME:

HERE IS THE E-MAIL ADDRESS YOU CAN CONTACT US AS SOON AS YOU MADE THE PAYMENT OF US$65: FOR THE TRANSFER OF YOUR FIRST PAYMENT
WE ARE LOOKING FORWARD TO HEARING FROM YOU.
DIRECTOR; MR. ROBERT ANTHONY
TEL : +229 98770668

Email analysis :

NOTE : ANTHONY.@image.ocn.ne.jp
NOTE : atmc_ard@outlook.com
NOTE : 153.149.236.31 as permitted sender

NOTE : X-Originating-Ip : [41.216.50.80]

I NEED YOUR URGENT REPLY CONFIDENTIAL PLEASE....

Hello My Dear

I am sorry to contact you unannounced through this medium. I am Mr. Ali Nasser staff of iconnected bank Ghana and Head of Administration and Government Relations at iConnected Bank PLC Ghana. I write you this proposal in good faith hoping that I will rely on you . In 2006, one Mr. Daniel, who has the same surname as yours and who is also from your country according to his file as his place of origin, made a fixed deposit for 36 calendar months, valued at $18, 400, 000.00 with my bank. I was his account officer before I rose to the position of Manager Director now. The maturity date for this deposit contract was 16th of January 2009.

Unfortunately, while on a business trip, he died in a deadly earthquake that occurred on May 12, 2008 in Sichuan province of China which killed at least 68,000 people. Since the last quarter of 2009 until today, the management of iConnected bank have been searching for a means to reach him so as ascertain if he will want to roll over the Deposit or have the contract sum withdraw. Since September 2009, when I discovered that this will happen, I learn of his death, so I have tried to think up a procedure to preserve this fund and use the proceed for charity.

Some directors here have been trying to find out from me the information about this account and the owner, but I have kept it closed because, I know that if they become aware that Mr Daniel is now late, they will corner the funds for themselves. Therefore, I am seeking your co-operation to present you as the one to benefit from his fund at his death since you have the same surname with Mr Daniel, so that my bank head quarters will pay the funds to you. I have done enough inside bank arrangement and you only have to put in your details into the information network in the bank computers and reflect you as his next of kin. I am not a greedy person, so I am suggesting we share the funds equal, 50/50% to both parties. My share will assist me to start a charity organization to help the poor and also own a company which has been my dream. Let me know your mind on this and please do treat this information as TOP SECRET. We shall go over the details once I receive your urgent response strictly through my personal ema

Best regards,
MR. Ali Nasser
alinasser0@outlook.com

Email analysis :

NOTE : mr.alinasser@centrum.cz
NOTE : alinasser0@outlook.com
NOTE : Received : from User ([23.25.87.114])

NOTE : by smtpcmd04.ad.aruba.it