From Ms. Sofia Johnson

From Ms. Sofia Johnson
Abidjan,Ivory Coast.

Good day my dear,

In confidence,i have to introduce myself for i am Ms. Sofia Johnson .21 years old,I am the only child of late Mr & Mrs. Yve Johnson. I prayed before contacting you, please for God sake do not see my mail as embrassment as we do not know each other. I wish to request for your assistance in my efforts to procure the transfer of my inherited money for investment ventures under your care and directive,while i continue my education of there in your country. I inherited Six Million,Four Hundred Thousand Dollars ($6,400,000.00) here in my name with one of the prime bank in my country and I will require your assistance in receiving the transfer of my inherited money in your local account for investment purposes,as it is my wish to come over to your country to further my education while you take care of the investment of the money. Please i am an orphane and i need your assistance to transfer my inherited money to your country and also your assistance to secure a nice school for me in your country where I will continue my education Please I am waiting to hear from you soonest. Reply to my private e-mail box. ( jsofia59@yahoo.com)

Yours sincerely,

Ms. Sofia Johnson

Email analysis :

NOTE : jsofia217@daum.net
NOTE : X-Originating-Ip : [207.244.89.91]

NOTE : client-ip=175.126.189.229;

[Compte ID: KKYN33] BMO Alert! (BMO Phishing)

BMO Canada - alert message!

Cher (*@*.*),

Vous n'êtes plus autorisé à accéder à votre service en ligne.Nous avons dû désactiver votre accès pour votre sécurité.

Cela a pu être le cas du fait d'un changement intervenu récemment dans votre adresse, ou parce que des informations incorrectes ont été fournies durant le processus d'enregistrement initial.

Veuillez vérifier votre compte dans les 48 prochaines heures afin d'éviter une suspension complète de votre compte en ligne.

À l'issue d'une vérification réussie de votre compte vous pourrez utiliser votre identifiant comme d'habitude.

Suivez cette page de vérification sécurisée afin de réaliser une authentification en ligne efficace.

https://www.bmo.ca/compter-qc-fr/verif-index3384KKYN/*@*.*

Merci pour votre coopération.

L'équipe sécurité de BMO

(c) 2016 Banque de Montréal

Email analysis :

NOTE : Banque.de.Montreal.BMO-CAN.ID.33840576713015055548courrier.electronique.newmail3384057671.KKYN@juniorlibraryguild.com
NOTE : Sender-Ip : 91.108.160.125
NOTE : Received : from mail.dalmark.co.uk (mail.dalmark.co.uk. [91.108.160.125])

Phishing analysis :

CLICK : https://www.bmo.ca/compter-qc-fr/verif-index3384KKYN/*@*.*
OPEN : http://stantonyschitfund.com/searchv/index.php
RESULT : Phishing was removed.

Your first payment of $5000 has been sent today via Western Union.

Attention My Dear, Your first payment of $5000 has been sent today via Western Union. You are advise to Contact Western Union with your full information to enable them give you Sender Name, Question and Answer to pick up your First Payment MTCN= 0716797753, For more information contact Mr. Idi Ebube, Tell: +229 68513046Email(office333uwn@yeah.net) he'll keep sending you payment until your total fund is Completed $2.5usd Best Regards, Dennis frank

Email analysis :

NOTE : office333uwn@yeah.net
NOTE : sintrajudorg@sin.sintrajud.org.br
NOTE : X-Source : /usr/bin/php
NOTE : client-ip=198.154.249.79;

[Alert] Account Notification ( PayPal Phishing )

PayPal

Access a new device

A device or website that we do not know request access to your account :

Location : Ukraine
IP adress : 176.97.101.83
Navigator : Chrome (Windows)

If you were not please update your account information from the link below:

Update My Account

If you are not responsible for this operation, contact us support@paypal.com.

© PayPal 2016

Email screenshot :

Email analysis :

NOTE : servi@updat.admin.com
NOTE : Received : from sagitta by serwer.hosting-desire.pl with local (Exim 4.87)
NOTE : (envelope-from < sagitta@serwer.hosting-desire.pl >)
NOTE : X-Php-Originating-Script : 1168:rebels.php
NOTE : client-ip=176.112.79.50;

Phishing analysis :

CLICK : Update My Account
OPEN : http://antikytheramech.culture.gr/sites/default/files/Redirect.php
NOTE : Phishing was removed...

You Have Won Our Lottery (Congratulations)

Dear Lottery Winner,

Your e-mail address attached to ballot number: (02-01-19-72-27-16-05) with Serial number 5368/16 drew the lucky numbers: 11-07-02-08-01-27 which subsequently won you the BMW South Africa Lottery in the 3rd category. You have therefore been approved to claim a total sum of Two Million United States Dollars, credited to file BMWSAL/9GM/327739.

Please contact our BMW South African Claim Agent below for further instruction on how to process your payment immediately.

Name: MOHAMMED KHUTA
Email: mohammedkuta27@yahoo.com.sg
Phone: +27622709260

Thanks for your expected cooperations in this regard.

Mr.Sean Moore.
President,BMW South Africa Lottery Board

Email analysis :

NOTE : mohammedkuta27@yahoo.com.sg
NOTE : damok@damok.com
NOTE : Received : from User
NOTE : (62-210-178-122.rev.poneytelecom.eu [62.210.178.122])

NOTE : (authenticated bits=0)

FAMILY GOLD FOR SALE

*This message was transferred with a trial version of CommuniGate(r) Pro* Dear Sir/Madam, We are the Family of Chief Nana Kwaku Baah II, a local miners, we located in New Atuabo Tarkwa in Western Region Ghana; we are seeking for a reliable gold buyer who can be buying our gold in a regular supply basics. We also needs some modern gold mining equipment and machines for the development of the family’s mining concessions and to enhance our production to enable us meet up the supplying demands. Details of Commodity Commodity - Au Dory Bar/Dust Quantity – 50-100KGS Per Month Purity – 98.69 purity Carat - 23. 69 carats Our Local price - $24,500usd per kilo. Awaiting your response to provide you with more details required. Best Regards. Kofi,

Email analysis :

NOTE : koffialbert@yandex.com
NOTE : norlaili.mi@klkoleo.com.my
NOTE : Received : from [176.61.142.204] (account info@cisalmaty.kz HELO User)

NOTE : by cisalmaty.kz (CommuniGate Pro SMTP 6.0.9 _trial_)