This is an important message.

Greetings,

You've won Ј950,000.00 (Nine Hundred and Fifty Thousand Pounds) on Lottoball draw number 7109-98454322710-545538 conducted this month and your payment centre is London, United Kingdom.
To receive this prize, please contact Dr. Eric Sellers on: ersellers01@hotmail.com quoting your draw number.
Congratulations

Cheers,

Maureen Stevens
Notification officer
Lottoball UK

Email analysis :

NOTE : talktostevens@outlook.com
NOTE : Maureen-S@lottoball.com
NOTE : Received : from User ([80.77.186.114]) by curtis-srv02.Curtisassoc.com

Dear Friend. My private email address is (mrsmaria@foxmail.com)

Dear Friend.

I am Mrs. Maria, the Head of file Department in Bank of Africa. I seek your assistance and I am assured of your capability to champion this business opportunity, to remit the sum of $10.5 million U S dollars into your account. If you are interested please let me know so that i can send you the full details of this transaction. I agree that 40% of this money will be for you, while 10% will be set aside for all expenses incurred during the business and 50% would be for me. If you are interested to execute this business with me, you should contact me in my private email and provide me the below requested information to avoid any delays, and I will furnish you with more elaborate information. My private email address is (mrsmaria@foxmail.com)

(1)Your Name
(2)Your age.........................
(3)Your occupation..................
(4)Your full residential address...............
(5)Your private phone and fax number I await your

prompt response. Best regards,
Mrs. Maria
Email(mrsmaria@foxmail.com)
call me if you are instrested +226 65369757

Email analysis :

NOTE : mrs.mariacc3@aol.jp
NOTE : X-Originating-Ip : [77.67.50.246]

ABOUT YOUR PAYMENT

UNITED BANK FOR AFRICA NIGERIA
HEAD OFFICE ADDRESS UBA HOUSE
57 MARINA P.O. BOX 2406 LAGOS NIGERIA
PHONE:+234 8104484003
FAX: 234 674 478 8273
Greetings,

Am Frank Emeka , director cash processing unit, united bank for Africa [UBA the only bank appointed by the A.U. Members lead by President Robert Mugabe. Because of the frauds going on in West Africa countries where some innocent beneficiaries were asked to pay in advance before receiving their money owed to them. The above Africa union held meeting in Nigeria and resolve to pay all beneficiaries in cash through means of diplomatic courier service. We receive your files from international monetary fund (I.M.F.) as one of the beneficiaries. Take note:Three thousand united state dollars (usd$3,000)have been mapped out for all expenses in taxes and other doccumets that matters. Therefore, I want you to bear it in mind that your total fund will not be five million five hundred thousand united state dollars ($5.500,000.00) but five million four hundred and ninety seven thousand united state dollars ($5.497,000.00). Dear as a senior banker, controlling this cash payment now, I advise you not to waste your money by paying any body in advance again, and if you just follow my instruction, you will receive your money in three days time. Your fund will now be packaged in box and take to the diplomatic courier service for immediate shipment, I will also send the picture of the box by attachment to you to see how the money is packed, and I will send you more mails to give you more information for you to know the genuineness of this transaction. Therefore, do forward your home address and direct phone number to this E-Mailfrankemeka709@gmail.com All the documents will be sent to you if I am assured that you have stopped sending money to those fraudsters. Am waiting to hear from you with the required information of yours.

Frank Emeka
Director cash processing unit
united bank for Africa. (U.B.A)
frankemeka709@gmail.com

Email analysis :

NOTE : lnfo@uba.com
NOTE : X-Php-Script : www.adverthub.com.ng/3.php for 105.112.17.127

Account Alert: Personal Safe Key (PSK)

American Express Personal Safe Key (PSK)

Please create your Personal Security Key. Personal Safe Key (PSK) is one of several authentication measures we utilize to ensure we are conducting business with you, and only you, when you contact us for assistance. American Express uses 128-bit Secure Sockets Layer (SSL) technology. This means that when you are on our secured website the data transferred between American Express and you is encrypted and cannot be viewed by any other party. to create your PSK (Personal Safe Key).
Note: You will be redirected to a secure encrypted website. The contained message may be privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. Sincerely, American Express Customer Service.

Create your PSK

Kind regards,
Dave Barry

American Express. All rights reserved.

Screenshot of the email :

Email analysis :

NOTE : AmericanExpress@welcome.aexp.com
NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0)
NOTE : Gecko/20100101 Thunderbird/24.2.0
NOTE : Return-Path : < americanexpress@welcome.aexp.com >
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Content-Type : text/html; charset=ISO-8859-1
NOTE : Received : from adsl-97.79.107.137.tellas.gr (79.107.137.97)

NOTE : Account Alert: Personal Safe Key (PSK)

Phishing analysis :

CLICK : Create your PSK
OPEN : http://verifybyamericanexpress.com/create
NOTE : Website is unresponsive...
NOTE : Domain name analysis...

verifybyamericanexpress.com analysis :

Domain name: verifybyamericanexpress.com
Registry Domain ID: 77428276_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.todaynic.com
Registrar URL: http://www.now.cn/
Update Date: 2016-06-27T16:00:00Z
Creation Date: 2016-06-28T14:44:31Z
Registrar Registration Expiration Date: 2017-06-27T16:00:00Z
Registrar: Todaynic.com, Inc.
Registrar IANA ID: 697
Registrar Abuse Contact Email: cs@now.cn
Registrar Abuse Contact Phone: +86.7563810552
Registrant Name: Mong Lwan
Registrant Organization: n\\a
Registrant Street: 33 Xiamen road
Registrant City: Xiamen
Registrant Province/state: FJ
Registrant Postal Code: 350318
Registrant Country: CN
Registrant Phone: +86.7543376322
Registrant Fax: +86.7543376322
Registrant Email: cs@now.cn
Admin Name: Mong Lwan
Admin Organization: n\\a
Admin Street: 33 Xiamen road
Admin City: Xiamen
Admin Province/state: FJ
Admin Postal Code: 350318
Admin Country: CN
Admin Phone: +86.7543376322
Admin Fax: +86.7543376322
Admin Email: cs@now.cn
Tech Name: Mong Lwan
Tech Organization: n\\a
Tech Street: 33 Xiamen road
Tech City: Xiamen
Tech Province/state: FJ
Tech Postal Code: 350318
Tech Country: CN
Tech Phone: +86.7543376322
Tech Fax: +86.7543376322
Tech Email: cs@now.cn
Name Server: a.dnspod.com
Name Server: b.dnspod.com
DNSSEC: unsigned
Billing Name: Mong Lwan
Billing Organization: n\\a
Billing Street: 33 Xiamen road
Billing City: Xiamen
Billing Province/state: FJ
Billing Postal Code: 350318
Billing Country: CN
Billing Phone: +86.7543376322
Billing Fax: +86.7543376322
Billing Email: cs@now.cn

FROM:..USA DEPARTMENT OF HOMELAND SECURITY!!!.

I,m Jeh Charles. Johnson. The secretary of the U.S Department of Homeland security Washington DC. Office Address: 3801 Nebraska Ave NW, Washington, DC 20016, United States. We received a report from ECOWAS that you have an abandoned fund worth $4.5 Million in West Africa. I have instructed ECOWAS and the concerned authorities to bring the consignment box to our Head office in Washington DC. the fund will arrive my office today. I want you to kindly Reconfirm Your Full Name, Current Home Address, Nearest Airport and your Direct Cell Phone # So that arrangement can be made for the delivery of the consignment to your home address. You can reach me on this email: Hon.jehjohnson01@gmail.com

I can be reached at: (202) 753_0288. Leave me a text or Voice Message if i am unavailable to answer.

(1)Your Full Name: _______________
(2)Current complete Home Address: ___________
(3)Direct tel/mobile Phone Number: ______________
(4)Name of your Nearest Airport: _______________________
(56)A Copy of Your ID for Identification: _____________________

I wait to hear from you.

Honorable Jeh C. Johnson
The secretary of
the U.S Department of
Homeland security
Washington DC
Office Address:
3801 Nebraska Ave NW,
Washington, DC 20016,
United States.

Email analysis :

NOTE : makeobi@azdiamondbacks.com
NOTE : X-Originating-Ip : [41.86.234.171]

NOTE : 63.144.116.250

From Dr.Isabella Jefferson

Hello dear friend,

I'm Dr.Isabella Jefferson I am a UNITED STATES MILITARY NURSE

From united states of America. Am supportive and caring, looking forward to get a nice friend. I read your profile from professional link network and pick interest on you. I will like to establish mutual friendship with you. Please let continue our conversation through my private email box.Here is my email address ( drisabellajeffersonus@gmail.com ) I will introduce myself better and tell you the reason why i contact you also send you my picture as soon as i receive your mail.Thanks and regards.

Dr.Isabella Jefferson

Email analysis :

NOTE : drisabellajeffersonus@gmail.com
NOTE : aminadukson760@asia.com
NOTE : Received : from 41.82.51.166 ([41.82.39.175])

NOTE : by mail.gmx.com (mrgmxus002)