Florian Burtard

I am Vincent Cheng Chairman of the Shanghai Banking Limited.I have a confidential brief from Hong Kong,asking for your partnership for funds transfer.Reply to me with my email vinctcheng1@hotmail.com if interested?

Regards
Vincent Cheng

forwarded to you by Florian Burtard,Secretary.

Email analysis :

NOTE : fburtard@ent-place.fr
NOTE : Received : from mx01.ent-place.fr
NOTE : (mx01.ent-place.fr. [194.214.114.170])

NOTE : X-Originating-Ip : [172.25.252.146]

Financial Hjálp

Við getum hjálpað þér með lán allt frá € 2,000.00 til € 5,000,000.00 á 3,15% vöxtum á ári. Við erum einkafyrirtæki sem fólk í þörf fyrir hjálp peninga án BKR athugun. fyrir frekari upplýsingar; (lending.tree@charter.net) We can help you with a loan ranging from € 2,000.00 to € 5,000,000.00 at 3.15% interest per year. We are a private company which people in need of money help without BKR scrutiny. for more info ;(lending.tree@charter.net)

Email analysis :

NOTE : lending.tree@charter.net
NOTE : Ferrisl@email.sc.edu
NOTE : X-Originating-Ip : [116.202.154.213]

NOTE : Mime-Version : 1.0

GRANT PAYMENT CENTER(GPC) GLOBAL BANK HEADQUATER NEW YORK U.S.A.

GRANT PAYMENT CENTER(GPC) GLOBAL BANK HEADQUATER NEW YORK U.S.A. We have been notice that you have not been paid for long over due grant payment by the UN. This is due to so corrupt hoodlums and some corrupts government officials who try to divert your money into their private pocket. We have arrange your payment through international ATM CARD. Payment center this is some of the instruction passed by the united nation in respect to all over delayed payment center department will send you your ATMCARD VALUED SUM OF ($8M) Which you are to use in any where in the world. And the maximum withdrawal is $15,000. So kindly contact the payment center on (grant.payment.center@gmail.com) with the bellow information current residential address direct phone number. Arrangement has been made to procced the delivery through our liable courier agent. Best read bell lorris +1 706 503 2156 +229 986 638 26

Email analysis :

NOTE : aaronthreep.wood@gmail.com
NOTE : vorotak@server.hetzner.in.ua
NOTE : client-ip=148.251.15.212;

oferta de financiamento

Eu sou um francês bolsas individuais de dinheiro do empréstimo 5.000€ a 5.000.000€ para qualquer pessoa capaz de pagá-lo com uma taxa de juros de 2 a 3% ao ano e um período variando de 1 a 35 anos, dependendo da quantidade solicitada. Fazemo-lo nas seguintes áreas: - Financeira de Crédito Home Loan Investimento Auto empréstimo Dívida consolidação empréstimo crédito empréstimo pessoal Redemption Criação de Empresas. Você está preso, se você está realmente precisando, por favor contacte-me para mais informações. Entre em contato conosco pelo e-mail: cecilejosee.guillerme@gmail.com

Email analysis :

NOTE : morten@josefsen.org
NOTE : cecilejosee.guillerme@gmail.com
NOTE : User-Agent : Workspace Webmail 6.5.0
NOTE : X-Originating-Ip : 207.244.86.195

NOTE : client-ip=72.167.218.226;

Tammy Pratt

Hello, I am Tammy Pratt the mega winner of $126M In Mega Millions Jackpot, I'm donating to 5 random individuals if you get this email then your email was selected after a spin ball.I have spread most of my wealth over a number of charities and organizations. I have voluntarily decided to donate the sum of $2 Million USD to you as one of the selected 5, to verify my winnings please see my you tube page below. WATCH ME HERE: https://www.youtube.com/watch?v=I2utlVhjLwQ&oref THIS IS YOUR DONATION CODE: [ 2312011 ] Reply with the DONATION CODE to this email: tammypratt011@gmail.com Hope to make you and your family happy. Regards Tammy Pratt

Email analysis :

NOTE : profis@ufma.br
NOTE : tammypratt011@gmail.com
NOTE : (unknown [111.118.150.213]) by carolina.ufma.br

Video :

Video is no more available.

Dear Friend. My private email address is (mrshmaria@foxmail.com

Dear Friend.

I am Mrs. Maria, the Head of file Department in Bank of Africa. I seek your assistance and I am assured of your capability to champion this business opportunity, to remit the sum of $10.5 million U S dollars into your account. If you are interested please let me know so that i can send you the full details of this transaction. I agree that 40% of this money will be for you, while 10% will be set aside for all expenses incurred during the business and 50% would be for me. If you are interested to execute this business with me, you should contact me in my private email and provide me the below requested information to avoid any delays, and I will furnish you with more elaborate information. My private email address is (mrshmaria@foxmail.com)

(1)Your Name
(2)Your age.........................
(3)Your occupation..................
(4)Your full residential address...............
(5)Your private phone and fax number

I await your prompt response. Best regards,

Mrs. Maria
Email(mrshmaria@foxmail.com)

call me if you are instrested +226 65369757

Email analysis :

NOTE : u_oi@aol.fr
NOTE : Received : from 88.150.176.22

Assurance ****** (Hameçonnage Ameli)

Madame,Monsieur

Après les derniers calculs de votre assurance maladie , nous avons déterminé que vous êtes admissible à recevoir un remboursement d'un montant de 99.00 euro. Nous vous invitons à consulter les démarches à suivre en Cliquant-ici

Cordialement,

Ameli.fr - assurance maladie ameli 2016 France
https://www.ameli.fr

Email analysis :

NOTE : onrage.forge@paltalk.free.fr
NOTE : Cmm-Sender-Ip : 104.47.36.75

Phishing analysis :

CLICK : Cliquant-ici
OPEN : http://exxpo.com.br/js/extjs/js.html
RESULT : Phishing was removed...

documents (Virus)

Ramona huger Office Manager
Box Rentals LLC
Sanibel Executive Suites
Crestwood Apts.
Cleveland Apts.
rayatboxrentals@cableone.net
www.sanibelsuites.com
2230 East 8th St / Office
Joplin, Mo.64801
Cell-417-312-3661
Office-417-624-7900
Fax- 417-624-7971

5496921_55724.zip

Email analysis :

NOTE :

NOTE : Return-Path : < ramona.huger@cableone.net >
NOTE : Mime-Version : 1.0
NOTE : Message-Id : < *.*.*.JavaMail.zimbra@cableone.net >
NOTE : X-Mailer : Zimbra 8.0.7_GA_6021 (ZimbraWebClient - GC46 (Win)/8.0.7_GA_6021)
NOTE : Thread-Topic : documents
NOTE : Received : from PHC-i5-VAIO (unknown [113.186.230.214])

NOTE : [SPAM] documents

File analysis :

Download : 5496921_55724.zip.
Result : 5496921_55724.zip is a virus.

Virus analysis :

SHA256 16bb72cc0a9a02626ef293df46696f489935e5890df483251976d38d1bf613d9
ALYac JS:Trojan.Crypt.PV
AVG JS/Downloader.Agent.54_Q
Ad-Aware JS:Trojan.Crypt.PV
AhnLab-V3 JS/Obfus.S137
Antiy-AVL Trojan/Generic.ASMalwRG.70
Arcabit JS:Trojan.Crypt.PV
Avira (no cloud) HEUR/Suspar.Gen
Baidu JS.Trojan-Downloader.Nemucod.jn
BitDefender JS:Trojan.Crypt.PV
CAT-QuickHeal JS.Locky.FA
Cyren JS/Nemucod.CA1
DrWeb JS.DownLoader.2236
ESET-NOD32 JS/TrojanDownloader.Nemucod.AZC
Emsisoft JS:Trojan.Crypt.PV (B)
F-Prot JS/Nemucod.CA1
F-Secure JS:Trojan.Crypt.PV
Fortinet JS/Nemucod.SMK9!tr
GData JS:Trojan.Crypt.PV
Ikarus Trojan-Ransom.Script.Locky
K7AntiVirus Trojan ( 004f43681 )
K7GW Trojan ( 004f43681 )
Kaspersky Trojan-Downloader.JS.Cryptoload.als
McAfee JS/Nemucod.jg
McAfee-GW-Edition JS/Nemucod.jg
eScan JS:Trojan.Crypt.PV
Microsoft TrojanDownloader:JS/Swabfex.P
Sophos Mal/DrodZp-A
Tencent Js.Trojan.Raas.Auto

Open Virus :

NOTE : CYTUKE64504.wsf
NOTE : Windows Script File (WSF)
NOTE : http://pastebin.com/BqrxRQqW
RAW : http://pastebin.com/raw/BqrxRQqW

CHANGE OF YOUR BANK ACCOUNT DETAILS.

CHANGE OF YOUR BANK ACCOUNT DETAILS.

We have received an official notification on 09-19-2016 from Teresa L. Haskins, who claimed that you have authorized her to handle everything concerning the release of your inheritance Fund which is US$3.5 Million as she has confirmed to us that you are now in the Hospital taking care of your cancer illness. Meanwhile, in the consideration to our Official code of conduct and services here in west, Africa, we deem it necessary that we should get in touch with you first for confirmation before we can proceed with her request. Therefore, we need your prompt instruction to proceed with her in this matter for the purpose of remitting the fund to her nominative bank account details below:-

Bank: Bank of America
Address: 1143 Nashville Pike
Gallatin, Tennessee 37066
Account Name: Teresa Haskins
Account Number: 483032646884
Electronic Transfer: 064000020
Wire Transfer: 026009593

The release of the fund will be fixed as soon as we receive your prompt response to this message. it is very important that you should get in touch with Mr. Sani Kabir with immediate confirmation to enable the bank's administrative department transfer this money to her above mentioned bank account as you instructed. Contact back via email address ( sanikabir.private@hotmail.com )

NOTE: Failure to reply will give the other option than to believe you are the one that gave her the power to receive the payment on your behalf and enable us to proceed to complete the transfer to her above nominative bank account.

Yours faithfully,
Mr. Asue Ighodalo.
Chairman, Sterling Bank Plc.

Email analysis :

NOTE : sanikabir.private@hotmail.com
NOTE : dispatch@mail.roymiller.com
NOTE : 104.167.99.34 (reversing.co.il)