Wednesday, January 20, 2016

Rép : Business Proposal

I am Alexandra , representing the operation and corporate affairs in contract related matters of Exxon Mobil in LondonI have a private brief to re-profile the sum of US$12.5M in your name Regards

Peter Alexandra

Email analysis :

NOTE : peteralexandra40@yahoo.com.hk
NOTE : xvsdfaw@aol.co.uk
NOTE : X-Aol-Ip : 209.197.20.243


NOTE : Received : from GOOD-PC (unknown [209.197.20.243])

Manchester-Boston Regional Airport (MHT), New Hampshire

From: Mr. Jeffrey Hosch
Inspection Officer.
United Nations Inspection Agency
New Hampshire, US.

Attention: Sir,

I am Mr. Jeffrey Hosch, Head of Inspection Unit United Nations Inspection Agency in Manchester-Boston Regional Airport (MHT), and New Hampshire.

During our daily routine Inspection, I discovered an abandoned shipment through a Diplomat from the United Kingdom which was transferred from JF Kennedy Airport to our facility here in New Hampshire, and when scanned, it revealed an undisclosed sum of money in 2 Metal Trunk Boxes weighing approximately 110kg each.

The consignment was abandoned because the Content was not properly declared by the consignee as money rather it was declared as personal effect/classified document to either avoid diversion by the Shipping Agent or confiscation by the relevant authorities. The diplomat's inability to pay for Non Inspection fees among other relevant fees are the reason why the consignment is delayed and abandoned.

By my assessment, each of the boxes contains about $4,000,000.00(Four Million United States dollars) or more. They are still in the airport storage facility up to this moment of sending you this message. The Consignments like I said are two metal trunk boxes weighing about 110kg each (Internal dimension: W61 x H156 x D73 (cm) effective capacity: 680 L) Approximately. The details of the consignment including your name and email on the official document from United Nations' office in London where the shipment was tagged as personal effects/classified document is still available with us.

As it stands now, you have to reconfirm your (1) Full Name, (2) Phone Number, (3) Full Residential Address, so I can cross-check and see if it corresponds with the one on the official documents. It is now left for you to decide if you still need the consignment or allow us repatriate it back to the UK (place of origin) as we were instructed. Like I did say again, the shipper abandoned it and ran away most importantly because he gave a false declaration, he could not pay for the yellow tag, he could not secure a valid non inspection document(s), etc.

You can either come in person, or you engage the services of a secure shipping/delivery Company/agent that will provide the necessary security that is required to deliver the CONSIGNMENTS to your doorstep or the destination of your choice. I am going to assist you in making sure the parkages are delivered.

Kindly respond to this email > >( mrjeffreyhosch1@gmail.com ).

Best Regards,

Jeffrey Hosch
Inspection Officer.
United Nations Inspection Agency
(603) 574-4919

Email analysis :

NOTE : hos50@deptofficesstr.is-great.net
NOTE : mrjeffreyhosch1@gmail.com
NOTE : X-Originating-Ip : [105.112.39.86]


Provider : Airtel Networks Limited
Country : Nigeria
City : Lagos
Latitude : 6.4531
Longitude : 3.3958

Your $2.5 Million Compensation

THIS MAIL IS ONLY FOR THE OWNER OF THIS E-MAIL ADDRESS:

A report came in to this office regarding a fund transfer which you are supposed to receive from COTONOU, UBA BANK. Investigation has been made and we had discovered that the bank manager Mr. Yusuf was behind all the delays and plans to divert this funds to his personal banking account.

The report was made from the State Finance Commission yesterday that your funds have not be released to you. The police took actions and we tracked this BANK. The bank manager was arrested, he is now in jail for attempting a fraud act to seize a fund $2.5 Million a compensation which was made approved by the State Government to you as beneficiary.

The State Finance Commission had given order to the bank authorities to issue a Certified Cashier's check and send it to your home address. So we are sending you this notice, to know if you would prefer the $2.5 Million paid to you by Cashier's check or crediting the $2.5 Million into an ATM VISA CARD?

Waiting on your urgent response.

YOURS IN SERVICE,
MR.PETERS DURU.
INSPECTOR GENERAL OF INTERPOL
CRIME STATE DEPARTMENT.

Email analysis :

NOTE : xx@yy
NOTE : interpolcrimedpt@126.com
NOTE : Received : from [91.212.182.38] (KTVOIP2 [91.212.182.38])


NOTE : by tux.mailserverbox.com
NOTE : client-ip=103.252.101.88;

UNCGA987

Attention Beneficiary,

Some emails was chosen at random from our Automated random search machine and you happen to be one of the Lucky beneficiaries of the ongoing United Nations Cash Grant Award of $1,000,000.00USD ( One Million Dollars). This cash grant award was initiated to help better the lives of people due to the increasing rate of UN-employment in the world.

Below is your winning Number.
UNCGA987.

NOTE: This number is to be kept confidential. Contact the Grant Award
office for your immediate processing of your winning.

Once again Congratulation

Email: claims_uncashgrant@outlook.com

Email analysis :

NOTE : mofoia-hosoffice@samoaonline.ws
NOTE : claims_uncashgrant@outlook.com
NOTE : Mime-Version : 1.0
NOTE : X-Sender : mofoia-hosoffice@samoaonline.ws
NOTE : Received : from smtp1.coconet.ws (smtp1.coconet.ws. [202.4.60.22])
NOTE : Received : from webmail.samoaonline.ws (webmail.coconet.ws [202.4.60.23])
NOTE : by smtp1.coconet.ws (Postfix)
NOTE : client-ip=202.4.60.22;


NOTE : User-Agent : Roundcube Webmail/0.8.6
NOTE : (no subject)

Your Expedia account was restricted (Phishing)

Dear partner,

A recent attempt to Sign in to your Expedia PartnerCentral was restricted.

As a security precaution, we have temporarity suspended access to your account services

What do I have to do?

Please click the button below and follow the procedure in order to complete the verification process.

https://expediaparnercentral.com/

Full access to your account will be regained once verified

© 2016 Copyright. All rights reserved. Confidential and proprietary.

Phishing analysis :

CLICK : https://expediaparnercentral.com/
OPEN : http://crias.cl/images/.x/partner/expediapartnercentral.com/
SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://www.expediapartnercentral.com/Account/Logon?MESSAGE=*&RP_ID=1

Email analysis :

NOTE : info@rns.com.tr
NOTE : Received : from static.107.167.76.144.clients.your-server.de
NOTE : ([144.76.167.107]:49865 helo=[127.0.0.1])


NOTE : by sv67.ifastnet16.org with esmtpa (Exim 4.86)
NOTE : (envelope-from < info@rns.com.tr >)
NOTE : Received : from sv67.ifastnet16.org (sv67.ifastnet16.org. [31.22.7.248])


crias.cl whois :
==================================
Titular: Verónica Delgado (CENTRO DE REHABILITACION INFANTIL AKTION SONNENSCHEIN LTDA)
Fecha de creación: 2007-08-21 13:15:16 CLT
Fecha de expiración: 2016-09-18 09:15:16 CLT Renovar ahora
Servidor de Nombre: ns1.accesoprime.cl
Servidor de Nombre: ns2.accesoprime.cl
==================================

rns.com.tr whois :
==================================
Registrant:

Rns Madencilik Sanayi Ve Dis Tic. Ltd. Sti.
atasehir bulv. 38. ada 3/3 no:66 Istanbul, Turkiye
muratyalcinkaya1@hotmail.com
Phone : + 216-456-1027

Billing Contact:

NIC Handle : rmv27-metu
Organization Name : RNS Madencilik ve San. D** Ticaret Ltd. *ti.
Address : Uzuntarla Mevkii No:19/1 *ile / Turkiye Istanbul,
Phone : + 90-262-6440088-

Domain Servers:

ns1.ifastnet16.org
ns2.ifastnet16.org

** Additional Info:
Created on..............: 2009-May-07.
Expires on..............: 2016-May-06.
==================================

Tuesday, January 19, 2016

MR. ROBERT ANTHONY

ATTENTION,

THIS MESSAGE IS FROM THE WESTERN UNION, TO THE OWNER OF THIS E-MAIL, HOW ARE YOU TODAY, I WRITE TO INFORM YOU THAT WE HAVE ALREADY SENT YOU USD5000.00 DOLLARS THROUGH WESTERN UNION AS WE HAVE BEEN GIVEN THE MANDATE TO TRANSFER YOUR FULL COMPENSATION PAYMENT TOTAL SUM OF US$500 000.00,VIA WESTERN UNION AS INSTRUCTED BY OUR GOVERNMENT.

I WAS CALLING YOUR TELEPHONE NUMBER TO GIVE YOU THE INFORMATION THROUGH PHONE BUT YOU DID NOT PICK UP MY CALLS THROUGH OUT THAT YESTERDAY EVEN THIS MORNING. NOW I DECIDED TO EMAIL YOU THE MTCN AND SENDER'S NAME SO THAT YOU WILL PICK UP THIS USD5000.00 TO ENABLE US SEND ANOTHER PAYMENT TODAY AS YOU KNOW WE WILL BE SENDING YOU ONLY USD 5000.00 PER DAILY. PLEASE RUN TO WESTERN UNION TO PICK UP THE USD5000.00 AND CALL ME BACK TO SEND YOU ANOTHER PAYMENT TODAY MANAGER MR. ROBERT ANTHONY TELEPHONE NUMBER TEL# +2299898770668 CALL OR EMAIL ME ONCE YOU PICKED UP THIS USD5000.00. HERE IS THE WESTERN UNION INFORMATION TO PICK UP THE MONEY:

MTCN # 1021285837
SENDER'S NAME:::::: PETER LEEN
AMOUNT'S $5,000.00
TEST QUESTION:::::WHAT COLOUR
TEST ANSWER::::::GREEN

I AM WAITING FOR YOUR CALL ONCE YOU PICK UP THE MONEY. MEANWHILE YOU ARE REQUIRE TO SEND US THE TRANSFERRING FEE WHICH IS $65US FOR THE WHOLE TRANSFER CHARGES, THAT WE HAVE ALREADY REMITTED TO YOUR NAME, SO WITHOUT THE TRANSFER FEE YOU CAN NOT PICK THE MONEY FOR IT'S ON HOLD AND THE MTCN CANNOT BE RELEASED TO YOU UNTIL YOU SEND THE TRANSFER FEE, THAT IS AN INSTRUCTION FROM THE FEDERAL MINISTRY OF FINANCE (FMF). PLEASE EMAIL ME YOUR DIRECT TELEPHONE NUMBER BECAUSE I NEED TO BE CALLING YOU ONCE WE SEND ANY PAYMENT FOR THESE INFORMATION'S.

HERE IS THE INFORMATION THAT YOU WILL USE TO SEND THE TRANSFER CHARGE SO THAT YOUR FIRST PAYMENT WILL BE RELEASE TO YOU FOR ANOTHER TO BE SENT

RECEIVER NAME::::::::::::::::::::::::Dominic Igwilo
COUNTRY:::::::::::::::::::::::::::::REPUBLIC OF BENIN
CITY ::::::::::::::::::::::::::::::::COTONUO
TEXT QUESTION :::::::::::::::HONEST?
ANSWER ::::::::::::::::::::::::TRUST
MTCN::::::::::::::::::::::::::
SENDER'S NAME:

HERE IS THE E-MAIL ADDRESS YOU CAN CONTACT US AS SOON AS YOU MADE THE PAYMENT OF US$65: FOR THE TRANSFER OF YOUR FIRST PAYMENT
WE ARE LOOKING FORWARD TO HEARING FROM YOU.
DIRECTOR; MR. ROBERT ANTHONY
TEL : +229 98770668

Email analysis :

NOTE : ANTHONY.@image.ocn.ne.jp
NOTE : atmc_ard@outlook.com
NOTE : 153.149.236.31 as permitted sender


NOTE : X-Originating-Ip : [41.216.50.80]