Monday, February 27, 2017

Rép : PLS,GET BACK TO ME ASAP ( ROI Scam)

Dear Friend

I seek your permission to work with you as my partner. I have about ?12.6 million from a very real source and I want the funds to be invested in your country. I want you to invest into real estate and other companies, which could yield high returns on investment (ROI), invest to lead. Please contact me through this email (michaelwellingon21@gmail.com)

Sincerely,

Michael Wellington

Phone + 48223074610
Fax + 48223078061

Email analysis :

NOTE : gdfhhghhf1@staff.aruba.it
NOTE : michaelwellingon21@gmail.com
NOTE : web.dakiksms.com
NOTE : client-ip=188.132.250.250


NOTE : Received : from ip-145-55.sn3.clouditalia.com
NOTE : ([213.136.145.55]:59398 helo=User)


NOTE : by web.dakiksms.com

Dear Beneficiary, (ATM Scam)

Dear Beneficiary,

Due to delay,Your funds has been deposited in a US bank by Michael Poteet and Bluebird ATM Card will be delivered to you by next week,Please fill this form and send it to me now

1) Name
2) Address
3)Apt,Suite,Floor,ETC ( Optional )
4) City
5) State
6) Zip
7) Phone
8) Email address
9) Date Of Birth
10 ) Social Security Number ( Enter Full 9 digits )

Please fill the form now and send it to me immediately so that the ATM Card will be delivered to you. Your entire $4.8 Million United State Dollars is intact and you will withdraw $10,000 daily.

I will be waiting for your next email and the form filled properly to avoid delay or any more excuses

Regards
Michael Poteet
E=mail: delivery963@gmail.com

Email analysis :

NOTE : delivery963@gmail.com
NOTE : "www."@salsa.ocn.ne.jp
NOTE : X-Originating-Ip : [185.93.180.102]


NOTE : Content-Type : text/plain; charset=ISO-2022-JP
NOTE : Received : from mzkstore607.ocn.ad.jp (mz-ukg607p.ocn.ad.jp [153.149.211.134])


NOTE : by vcwebmail.ocn.ad.jp

Saturday, February 25, 2017

Your iTunes ID (Phishing attempt)

Update your account when you're ready.

We suspect that someone is trying to use your account. When you're ready, click the link below to update your account information. For your safety your account has been temporarily locked.

https://appleid.apple.com/IDMSWebAuth/login.html?appIdKey=fgd55eeklw56q96w qq64.

Case ID: 662498345

This link will expire after 24 hours.
Sincerely,
Apple Support

Get help online

Visit Apple Support to learn more about your product, download software updates, and much more.

Join the conversation

Find and share solutions with Apple users around the world.

copyright 2016 Apple Inc.
All Rights Reserved / Privacy Policy / Support / Give us feedback
On behalf of Apple Distribution International

Phishing screenshot :


Email analysis :

NOTE : no-reply@services-apple.com
NOTE : X-Php-Originating-Script : 33:01.php(4) : eval()'d code
NOTE : Received : by cptweb02 (Postfix, from userid 33)
NOTE : CPT WEBSERVER
NOTE : client-ip=77.95.37.80;


Phishing analysis :

CLICK : https://appleid.apple.com/IDMSWebAuth/login.html?appIdKey=fgd55eeklw56q96w qq64.
OPEN : Link wasn't activated...
RESULT : Phishing attempt.

Friday, February 24, 2017

Trip to the IP of the scams. (Vol 1)

Trip to the IP of the scams.



Japan (153.149.230.25) :


Poland (85.128.137.104) :


Sweden (176.61.138.111.png) :


USA (64.68.124.162) :

Text Him a message right now at +1-(709)-400-0765

Pls, Attn: My Dear.

This is from Federal government Origin for your fund, We want to informed you that Our diplomatic agent just arrived at (ATLANTA GEORGIAN AIRPORT IN USA) right now with your Consignment BOX by international monitoring fund (IMF) as world beneficially of the year 2017 which worth's of $9.7 millions US Dollars inside the Consignment BOX. and we sent him today to delivered the BOX to you at your home address . He need your effort right now for him to reach you with the Consignment BOX , The Name of your delivering Agent is David Mark ,he is now at USA airport whit your Consignment BOX, Text Him a message right now at +1-(709)-400-0765 And give him all about your information to avoid wrong delivering?

Such as:

Your Name,......
Your Address.....
Your Telephone Number:........
your country and state...........
and your nearest airport..........

Warning ?

Don't contact any person or agent again about the delivering because if you do, you will lost your Consignment BOX and your Fund of 9.7 millions US Dollars Inside ? The Name of the Attorney DIRECTOR from office is Mr Frank Ike ,his E-mail:is (fben77977@gmail.com). HE IS THE MANAGER THAT APPROVE THIS Consignment BOX TO YOU DIRECT FROM THE DHL OFFICE AT BENIN REPUBLIC Call him right now for more information at +22999247469.

Thanks ?

Email analysis :

NOTE : fben77977@gmail.com
NOTE : "WWW."@fork.ocn.ne.jp
NOTE : client-ip=153.149.230.25;