Saturday, July 23, 2016

Your SSL Certificate has expired

Dear customer,

You are receiving this notification because your Salesforce SSL certificate has expired.
In order to continue using Salesforce.com, you are required to update your digital certificate.

The new Salesforce digital certificate can be downloaded from:
https://salesforce.dattodrive.com/index.php/s/ZoeW7Vs1kfLcUdF/download

Instruction:
Unzip the downloaded file first. SSL certificate cannot be installed if it is zipped.
Double click the SSL certificate file and click 'OK' to confirm installation.
According to our Terms and Conditions, failing to renew the SSL certificate will result in account suspension or cancellation:
http://www.salesforce.com/company/privacy/security.jsp

Thank you for using Salesforce.com

Email screenshot :


Email analysis :

NOTE : support@salesforce.com
NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
NOTE : Return-Path : < americanexpress@welcome.aexp.com >
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Content-Type : text/plain; charset=ISO-8859-1; format=flowed
NOTE : paultayoy@alpestour.com
NOTE : Received : from 62.42.178.94.dyn.user.ono.com
NOTE : (62.42.178.94.dyn.user.ono.com [62.42.178.94])
NOTE : Your SSL Certificate has expired

Analysis of the link :

CLICK : https://salesforce.dattodrive.com/index.php/s/ZoeW7Vs1kfLcUdF/download
OPEN : https://salesforce.dattodrive.com/index.php/s/ZoeW7Vs1kfLcUdF/download
SCREENSHOT :

Wichtig: Konto-Update (Strato Phishing)

Sehr geehrter Kunde:

Wir führen Wartungsarbeiten an unserer Kundendatenbank , wodurch Sie verpflichtet sind, Ihre Daten sofort zu überprüfen.

Wir betrachten diesen Prozess zwingend

Aktualisieren Sie Ihr Konto

Freundliche Grüße
Strato

Email screenshot :


Email analysis :

NOTE : byron.d@aldamafoods.com
NOTE : Mime-Version : 1.0

Phishing analysis :

CLICK : Aktualisieren Sie Ihr Konto
OPEN : https://db.tt/iBIofV7y
REDIRECT : base64 redirect (raw file on pastebin) (converted html file on pastebin)
SCREENSHOT :

PLEASE PROTECT YOUR ACCOUNT (MailBox Phishing)

Hello Dear

We're letting you know your account will be decline within 24hrs
If you haven't already confirmed, immediately deletion can occur any scheduled.
Need a earlier confirmation as notified before your availability,
kindly confirm your account in our database to avoid this interruption

Click Here to confirm

Best Regards,
The Mailbox Account team

Copyright Š 2016 MailboxTeam Inc. All rights reserved.

Email screenshot :


Email analysis :

NOTE : MailboxTeam@officialmail.com
NOTE : client-ip=80.78.246.99;


Phishing analysis :

CLICK : Click Here
OPEN : http://googldoc.casadekebab.com/google/google/*/
SCREENSHOT :

YOU WON

Your email has won $4,600,000 on Lucky No.39-44-25-17-88 from the UK Lotto online draws of July 2016 held in Thailand. Contact MR. JOHN EDWARD of UK Lotto with your Full Names, Country, Address, Telephone, Age & Gender for payment instructions.Via: edwardjo1430@yahoo.com

Stewart Jerome.

Email analysis :

NOTE : edwardjo1430@yahoo.com
NOTE : jiller.born@aol.com
NOTE : Received : from ADMIN-PC (unknown [77.243.189.212])
NOTE : X-Aol-Ip : 77.243.189.212

COMPASSION FUND

UNITED BANK FOR AFRICA NIGERIA
HEAD OFFICE ADDRESS UBA HOUSE
57 MARINA P.O. BOX 2406 LAGOS NIGERIA
PHONE:+234 8104484003
FAX: 234 674 478 8273
Greetings,
Am Frank Emeka , director cash processing unit, united bank for Africa [UBA the only bank appointed by the A.U. Members lead by President Robert Mugabe.

Because of the frauds going on in West Africa countries where some innocent beneficiaries were asked to pay in advance before receiving their money owed to them.

The above Africa union held meeting in Nigeria and resolve to pay all beneficiaries in cash through means of diplomatic courier service. We receive your files from international monetary fund (I.M.F.) as one of the
beneficiaries.

Take note:Three thousand united state dollars (usd$3,000)have been mapped out for all expenses in taxes and other doccumets that matters.
Therefore, I want you to bear it in mind that your total fund will not be
five million five hundred thousand united state dollars ($5.500,000.00) but five million four hundred and ninety seven thousand united state
dollars ($5.497,000.00).

Dear as a senior banker, controlling this cash payment now, I advise you not to waste your money by paying any body in advance again, and if you just follow my instruction, you will receive your money in three days time.

Your fund will now be packaged in box and take to the diplomatic courier service for immediate shipment, I will also send the picture of the box by attachment to you to see how the money is packed, and I will send you more mails to give you more information for you to know the
genuineness of this transaction.

Therefore, do forward your home address and direct phone number to this E-Mailfrankemeka709@gmail.com
All the documents will be sent to you if I am assured that you have stopped sending money to those fraudsters.
Am waiting to hear from you with the required information of yours.

Frank Emeka
Director cash processing unit
united bank for Africa. (U.B.A)
frankemeka709@gmail.com

Email analysis :

NOTE : lnfo@uba.com
NOTE : apache@localhost.localdomain
NOTE : Received : from regency-centers-2

World Bank Compensation Payment.

REF/PAYMENT (USD$3,500,000.00 )
WORLD BANK COMPENSATION

GOOD DAY,

YOUR E-MAIL ID APPEARED IN OUR PAYMENT SCHEDULE LIST OF BENEFICIARIES THAT WILL RECEIVE THEIR FUNDS IN THIS SECOND QUARTER PAYMENT OF THE YEAR FOR WORLD BANK INHERITANCE AND COMPENSATION COMMISSIONING PAYMENT. THIS PAYMENT IS GIVEN TO YOU UNDER FINANCIAL COMPENSATION FOR VICTIMS OF ONLINE CRIME/SCAM AS ENDORSED BY THE NATIONAL COMPENSATION CENTER LAUNCHED AT THE 39TH G8 SUMMIT. YOUR E-MAIL ID AND OTHER DATA WAS MENTIONED BY OUR SECURITY INTELLIGENT MONITORING DATABASE VIA COMPUTER HARD-DISK, YOU ARE HEREBY ADVISED NOT TO COMMUNICATE OR DUPLICATE THIS MESSAGE TO ANYONE TO PREVENT DOUBLE CLAIMS. YOU WILL RECEIVE YOUR COMPENSATION PAYMENT THROUGH ATM CARD VALID FOR 3 YEARS FROM MONTH OF ISSUANCE; IT IS AN EURO PAY MASTERCARD AND VISA (EMV) CHIP AND PIN DEBIT CARD, USED ACROSS ALL CHANNELS INCLUDING POS, ONLINE AND THE ATM CARD CASH WITHDRAWALS IN THE CURRENCY OF THE COUNTRY YOU ARE MAKING YOUR WITHDRAWAL, MAXIMUM DAILY. CASH LIMIT IS $2,500.00 PER DAY AND POS SPENDING IS UPGRADED TO S DAILY LIMITED OF $5,000.00. FOR THE RECORDS A TOTAL NUMBER OF 1,056 BENEFICIARIES ARE ALREADY IN CONTACT WITH THEIR RESPECTIVE SETTLEMENT CENTER AND A TOTAL NUMBER Of 678 BENEFICIARIES HAVE BEEN PAID AS OF JANUARY 2016. OVER 500 ARE ALREADY AT THE LAST VERIFICATION STAGE AND WILL RECEIVE THEIR PAYMENTS WITHIN FEW DAYS.

PLEASE PROVIDE FOLLOWING INFORMATION AS STATED BELOW:

1. YOUR FULL NAME:
2. CONTACT / POSTAL ADDRESS (FOR SHIPPING OF CARD)
3. YOUR AGE:
4. OCCUPATION:
5. MOBILE TELEPHONE NUMBER:

ALL RESPONSE SHOULD BE SENT TO CHAIRMAN SENATE COMMITTEE ON FINANCE & APPROPRIATION AT THIS GIVEN ADDRESS AND QUOTE YOUR RELEASE CODE FIC/EDS/EMV/42/2016 FOR IMMEDIATE

NAME: SENATOR SAMUEL ANYANWU
E-MAIL: samuelanyanwu1010@gmail.com

PLEASE BE WARNED, THE INTERNATIONAL COMMISSIONING PAYMENT DEPARTMENT DOES NOT INSTRUCT ANY OTHER BANK OR AGENT IN THIS PAYMENT TRANSACTION, WE ADVISE YOU TO STOP ALL OTHER COMMUNICATIONS YOU ARE HAVING WITH ANY OTHER AGENT OR BANK OFFICIALS TO AVOID UNNECESSARY COMPLICATIONS.

WARM REGARDS,

MR. GEORGE EDWARD

INTERNATIONAL COMMISSIONING PAYMENT
WORLD BANK GROUP MILLBANK TOWER,
12TH FLOOR, 21-24 MILLBANK,
LONDON SW1P 4QP UNITED KINGDOM

Email analysis :

NOTE : samuelanyanwu1010@gmail.com
NOTE : mr.george-org@mail.com
NOTE : Received : from User ([41.138.176.180]) by aptlabs.co.kr