Thursday, December 8, 2016

Greeting from ANNEBEL

My name is Annabel sorry I got your email address from mail Directory today i decieded to contact you and to know you more ,I have very important thing i will love to share with you .just to help me express my self well ,write me back i will give you full detail.thanks i will be waiting.Annabel

Email analysis :

NOTE : From Annabel
NOTE : anabelhassan2@hotmail.com
NOTE : maria.johnson749@yahoo.com
NOTE : X-Yahoo-Newman-Property : ymail-3
NOTE : Mime-Version : 1.0
NOTE : client-ip=98.139.213.55;


NOTE : Name is unclear : Annebel ? Annabel ? Annabelle ? Maria Johnson ? Scam !

CONGRATULATIONS FOR YOUR AWARD OF $18.5MILLION USD

Attention Please!!!

I have registered your ATM CARD of $18.5usd with Delivery Company, Please Contact with your delivery information such as, Your Name, Your Address and Your Telephone Number.

E-mail: (iinfoo.bankuba@gmail.com)
Tel:+229)-61431140

I have paid for the delivery fees and only what your paying for is the insurance fees,And Which is $85.Please forward your information to them immediately.

Best Regards,
Miss Sussane Harry

Email analysis :

NOTE : "officefile."@triton.ocn.ne.jp
NOTE : iinfoo.bankuba@gmail.com
NOTE : client-ip=153.149.230.41;


NOTE : *.*.*.JavaMail.root@triton.ocn.ne.jp
NOTE : X-Originating-Ip : [149.6.145.26]

Wednesday, December 7, 2016

Bernabe Saturno

Are you in need of a loan to pay off your bills, start up a business or do you need a loan to expand your existing business? Arrival Moniment Loan is offering out business and personal loans to individuals, companies and co-operate bodies in need of loans. We offer loans at 3% interest rate.

If interested, please get back to us with the following information's at arrivalmonimentloans@outlook.com

Name:.... Country:... Age:.... Loan Amount:.... Loan Duration:...Contact number:...

We will love to do business with you.

Email analysis :

NOTE : bsaturno@minsa.gob.pa
NOTE : arrivalmonimentloans@outlook.com
NOTE : X-Originating-Ip : [10.130.86.42]
NOTE : Received : from Mailbox1.minsa.gob.pa ([10.20.151.2])
NOTE : by Mailbox1.minsa.gob.pa ([10.20.151.2])
NOTE : ... ?
NOTE : minsa.gob.pa


NOTE : Mailbox1.minsa.gob.pa server was used to relay this scam.

Friday, December 2, 2016

Rappel ! (Phishing Carte Bleue)


Bonjour,

Une nouveau message en ligne est disponible sur votre Messagerie e-carte bleue.

Pour la consulter et accéder a votre messagerie sécurise.

veuillez vous adresser à https://service.e-cartebleue.com/fr/

Nous vous remercions par avance et restons bien sur à votre disposition pour
toute précision utile.

Cordialement.

Ce courriel vous a été envoyé par un système automatique d'émission de messages.
L'adresse d'émission n'est pas une adresse de courriel classique. Cette adresse e-mail ne peut pas recevoir de réponses.

Phishing screenshot :


Phishing analysis :

CLICK : https://service.e-cartebleue.com/fr/
OPEN : http://edilbarbetta.com/wp-content/them/
SCREENSHOT :


DETAIL : Wordpress website...

Domain analysis :

Name Server NS01.ONE.COM
Name Server NS02.ONE.COM
Expiration Date 11-sep-2017
Registrar Ascio Technologies, Inc
Registrant Name Luca Barbetta
Registrant Phone +39.3489532272
Registrant Email edilbarbetta@gmail.com
Domain Name EDILBARBETTA.COM
Sponsoring Registrar IANA ID 106
Whois Server whois.ascio.com
Referral URL http://www.ascio.com
Name Server NS01.ONE.COM
Name Server NS02.ONE.COM
Status ok https://icann.org/epp#ok
Updated Date 16-aug-2016
Creation Date 11-sep-2015
Expiration Date 11-sep-2017
Last update of whois database Fri, 02 Dec 2016 09:37:40 GMT
Registry Domain ID 1959304579_DOMAIN_COM-VRSN
Registrar WHOIS Server whois.ascio.com
Registrar URL http://www.ascio.com
Updated Date 2016-08-16T08:16:43Z
Creation Date 2015-09-11T00:00:00Z
Registrar Registration Expiration Date 2017-09-11T18:13:36Z
Registrar Ascio Technologies, Inc
Registrar IANA ID 106
Registrar Abuse Contact Email abuse@ascio.com
Registrar Abuse Contact Phone +44.2070159370
Domain Status OK
Registrant Name Luca Barbetta
Registrant Street via Tasso 8
Registrant Street Ve
Registrant City La Salute di Livenza
Registrant Postal Code 30029
Registrant Country IT
Registrant Phone +39.3489532272
Registrant Email edilbarbetta@gmail.com
Admin Name Master Host
Admin Organization One.com
Admin Street Kalvebod Brygge 24
Admin City Copenhagen V
Admin State/Province Copenhagen V
Admin Postal Code 1560
Admin Country DK
Admin Phone +45.46907100
Admin Fax +45.70205872
Admin Email hostmaster@one.com
Tech Name Master Host
Tech Organization One.com
Tech Street Kalvebod Brygge 24
Tech City Copenhagen V
Tech State/Province Copenhagen V
Tech Postal Code 1560
Tech Country DK
Tech Phone +45.46907100
Tech Fax +45.70205872
Tech Email hostmaster@one.com
DNSSEC unsigned
Last update of WHOIS database 2016-12-02T09:37:52 UTC

Email analysis :

NOTE : services.e-cartebleue@bell.net
NOTE : services.e-cartebleue@service.fr
NOTE : 184.150.200.79

CHECK YOUR BANK ACCOUNT, YOUR ACCOUNT HAS BEEN ACCREDITED WITH US$12.8 MILLION

Dear customer,

Congratulations please check your bank account,your fund of
US$12.8 million has been transferred to your bank account.

Gordon Williams
BARCLAYS BANK LONDON.
williamsgordon7@aol.com
+442038085314

Email analysis :

NOTE : williamsgordon7@aol.com
NOTE : X-Sender : INFO@BARCLAYSBANK.COM
NOTE : Organization : BARCLAYS BANK LONDON
NOTE : 91.135.16.19 is neither permitted
NOTE : Received : from pop.dtg.lv (pop.dtg.lv [91.135.16.4])


NOTE : by smtp.dtg.lv (Postfix)
NOTE : client-ip=91.135.16.19;