Important Message from PayPal ! (PayPal Phishing)

Your PayPaI Account logged form another device !

If you are seeing the messages this means that your account has been visited from an another place given below :

IP : 176.97.103.90

Country : Ukrania

Ville : Odessa

As a security measure, your account has been Iimited.

Case id : PP-801-707-057

Don't worry, you will be able to get your account back just after finishing this steps.

To continue follow this link : :Click Here✔

Notice :If you receive this email in the SPAM folder,click on "Not Spam" button to fix it

Email analysis :

NOTE : Received : from cptweb02 ([77.95.37.80])

NOTE : PayPal@service.com

Phishing analysis :

CLICK : Click Here✔
OPEN : https://jasper.nswebhost.com/~brainrec/paypal-support/
REDIRECT : https://jasper.nswebhost.com/~brainrec/paypal-support/paypal/login.php
SCREENSHOT :

PERSÖNLICHE INFORMATIONEN

Hallo , sehr geehrter kunde,

vor allem trage ich zu ihrer kenntnis, dass der zinssatz von 2% und einer monatlichen rückzahlung nach ihren kapazität.

- Nur leute, die seriös sind und die ein projekt in anspruch nehmen können, bereit.
- Angebot gültig von 2000 EURO zu 5.000.000 EURO mit einer laufzeit bis zu 50 jahren.

Dann, wenn seine bedingungen einverstanden sind, bitte füllen sie das folgende formular aus, um die bank führt die studie aus dem ordner " bereit.Bitte beachten sie das formular ausfüllen bereit unten:

PERSÖNLICHE INFORMATIONEN

- Name : ......................................................
- Vorname : ..................................................
- Adresse : .................................................
- Telefon : .............................................
- Plz : ............................................
- Geburtsdatum : ...................................
- Stadt : .......................................................
- Beruf : ...............................................
- Monatliches gehalt .............................
- Betrag zu leihen:.............................
- Fälligkeit der rückzahlung: .............................

Betreff ihrer anfrage .............................

Whataspp ......................................................

die kopie ihres personalausweises oder ihres reisepasses, oder die seriennummer des einen oder des anderen. Es ist zu melden, wenn sie erfüllen alle die verfahren zu folgen und, dass ihre informationen überprüft unser service control GPRS könnten sie im besitz ihrer unter in 72 stunden zu folgen . adresse mail: ginette_bourgeois@mail.com

Danke, dass wir schnell reagieren, um zufriedenheit verkaufen, da sie
ist der unsrigen.

Herzlich
Ginette Bourgeois.

Email analysis :

NOTE : ida.yanuarti@brisyariah.co.id
NOTE : ginette.bourgeoisfnasscredit@gmail.com
NOTE : X-Mailer : Zimbra 8.7.1_GA_1670 (zclient/8.7.1_GA_1670)
NOTE : Received : from smtprihlah.brisyariah.co.id (rihlah.brisyariah.co.id. [219.83.42.151])

hello

Dear Friend,

Please read this slowly and carefully as it may be one of the most important mails you'll ever get. My name is Mrs.Ane Michael from Norway and I am very sorry for the attachment, I am a 59 years old woman. I was married to late Mr. Johan Michael who is my husband, and also the CEO ROCKSOURCE ASA, Norway, and a seasoned contractor in Kuwait. He died on, 12th November 2016 in Kuwait.

My late husband and I were married for years without a child of our own and after his death i decided not to re-marry or get a child outside my matrimonial home. As I speak to you, i have been diabolized with congested heart failure, of which the doctors have confirmed and told me that I would not live along.. After my husband passed away last year, I realized he deposited a huge sum of money with Security Company.

The money that was deposited in the Security company was a total of US$9.5million .As I write to you, I feel that the money in the Security company would be a waste if i die and that is why I have come to a conclusion of donating the money out to the less privilege and also the motherless babies home.

My husband's brother is an addicted smoker and drinker who spend his money on expensive drinks and unnecessary things and so I do not wish for him to have any of the money which my husband worked so hard for all his life. After going through your profile over the internet i decided contact you for friendship and assistance for distribution of my inheritance. Please, my dear friend I have come to you to help me carry out this last wish of mine because i am too weak to move about and also have been confined to a wheel chair for long due to the state of my health and so I can't travel all the way from here.

It is true that I don't know you, but I have been directed by God to do this. If you wish to help me, write back to me at your earliest convenience so that I would direct you on how to contact the Security Company for the transfer of the funds to you whichever way you may wish to nominate for this purpose. Please send me your name, address, occupation, age, sex, marital status and contact telephone numbers to enable me forward it to the security company for the claim. I will give you my lawyer contact information for i may not be able to carry out, I am weak less privilege to write or talk.

I await your urgent reply.

Thanks for your kindness

God Bless,

Yours Sincerely,

Mrs. Ane Michael

Email analysis :

NOTE : sa_michael@163.com
NOTE : test@o.jp
NOTE : Received : from User (static.108.195.40.188.clients.your-server.de [188.40.195.108])

NOTE : by mx4.fardesk.net

D

Can we talk

Email analysis :

NOTE : wherrera@EMAIL.USCUPSTATE.EDU

NOTE : LL@BB.COM
NOTE : X-Originatororg : email.uscupstate.edu

NOTE : client-ip=104.47.33.62;

NOTE : email.uscupstate.edu server of @uscupstate was used to relay a scam.

ATTENTION BENEFICIARY,

ATTENTION BENEFICIARY,

PAYMENT MADE THROUGH RIA MONEY TRANSFER

This is Barrister DORA W LONG Attorney & Counsels At Law Federal High Court Of Justice Benin Rep.Address:Plot 102 Jbse Island Avenue Kparakou,Cotonou Rep.Of Benin NOTE THAT WE HAVE DECIDED TO PAY YOUR MONEY THROUGH RIA MONEY TRANSFER URGENT REMITTING OFFICE SINCE YOU WAS UNABLE TO RECEIVE YOUR MONEY THROUGH A WESTERN UNION AND MONEY GRAM DUE TO THEIR MANAGEMENT BUT NOW WE HAVE SENT YOUR FULL COMPENSATION PAYMENT OF $2.5Million USD. TO YOU THROUGH RIA MONEY TRANSFER OFFICE. YOU WILL BE RECEIVING $4,000.00USD PER DAY UNTIL YOU RECEIVE YOUR TOTAL FUND, BUT I WANT YOU TO CONTACT THE MANAGEMENT IN RIA MONEY TRANSFER OFFICE RIGHT NOW AND ASK HIM FOR YOUR FIRST PAYMENT. HIS NAME IS ( MR BONI ROGER ) AND ASK HIM TO GIVE YOU THE RIA MONEY TRANSFER ORDER INFORMATION AND PIN NUMBER SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH RIA MONEY TRANSFER WITHOUT ANY PROBLEM AND NOTE THAT YOU WILL BE RECEIVING $4,000.00 FROM ANY RIA MONEY TRANSFER OFFICE DAILY UNTIL THEY FINALIZE THE TOTAL PAYMENT TO YOU. CONTACT OFFICE ; RIA MONEY TRANSFER OFFICE LOCATION ADDRESS; 01 BP 1735 R.P. GINKOME COTONOU / BENIN REPUBLIC

CONTACT PERSON: MR BONI ROGER.
EMAIL ADDRESS: riamoney@mail.ru

AND CONTACT HIM WITH YOUR FULL INFORMATION.

YOU’RE NAME:____________
YOUR COUNTRY:________________
PHONE NO:_______________
ADDRESS/CITY:___________
AGE/SEX:________________

CONTACT HIM NOW SO THAT HE CAN DIRECT YOU AND PROVIDE THE RIA MONEY TRANSFER INFORMATION TO YOU AS URGENT AS YOU CAN.ALSO DO LET ME KNOW IMMEDIATELY THEY HAVE STARTED SENDING YOUR MONEY, REMEMBER WE HAVE PAY RIA MONEY TRANSFER CHARGES BUT YOU ARE TO SEND TO THEM ONLY $89 TO ENABLE THEM OBTAIN YOUR INTERNATIONAL TRANSFER PAPER PERMIT AT FEDERAL ADMINISTRATIVE TRUST FUND OFFICE OK, JUST ASK THEM TO GIVE YOU INFORMATION ON WHERE TO SEND THE $89 TO THEM OK, TRY TO COMPLY WITH THEM URGENT TO ENABLE THEM SERVE YOU BETTER.

THANKS,
BARRISTER DORA W LONG

Email analysis :

NOTE : "karina."@crux.ocn.ne.jp
NOTE : riamoney@mail.ru
NOTE : X-Originating-Ip : [185.93.181.102]
NOTE : Received : from mzcstore262.ocn.ad.jp
NOTE : (mz-fcb262p.ocn.ad.jp [180.8.111.198])

NOTE : by vcwebmail.ocn.ad.jp

ANTONIO MAURICIO DA SILVA PITANGUEIRA

Good Day My Dearest, My name is Mrs. Hollin Vera, i have an urgent matter to discuss with you regarding my €4,850,000.00 I want to donate through you, please reply me urgently for more details and do not ignore this mail without an answer. E-Mail: hollinkverakvan@gmail.com Thanks and god bless you.

Email analysis :

NOTE : hollinkverakvan@gmail.com
NOTE : antoniomauricio@ifba.edu.br
NOTE : Received : from zimbramail.ifba.edu.br (unknown [10.1.0.65])
NOTE : by robusto.ifba.edu.br (Postfix)
NOTE : Received : from fazendeiro.ifba.edu.br
NOTE : (fazendeiro.ifba.edu.br. [200.128.35.15])
NOTE : X-Mailer : Zimbra 8.0.7_GA_6021 (zclient/8.0.7_GA_6021)
NOTE : X-Originating-Ip : [200.128.35.53]

NOTE : ifba.edu.br server was used to relay this scam

Atm Card

Hello dear,

I have deposited the check to the ATM OFFICE. All you have to do is to contact them at: (anthonykevin197@gmail.com) they will give you direction on how you will be receive your ATM card. My agreement with them is USD$6000 daily until the whole of $2.5USD is withdraw end.You are not expected to pay for the delivery fee or stamp duty fee or any certificate fee because all the fee is already Paid for you. The only fee you will send to them before the delivery is activation fee which i do not know the amount when you contact the ATM office, try to ask them how much is activation fee.

Contact person: Rev. Anthony Kevin
Email: anthonykevin197@gmail.com
Cell Phone+229-99908887

contact him with belwo information,

Your Full Name:....................................
Your Home Addres...................................
Direct Cell Phone Number..................................

Thanks
And Remain Bless

Mrs. Mary Nduba

Email analysis :

NOTE : yanzka@svitonline.com
NOTE : anthonykevin197@gmail.com
NOTE : Received : from [212.109.32.44] (helo=webmail.svitonline.com)

NOTE : by relay2.kiev.sovam.com

Important Business

I try to contact you for important business; its financial portfolio of $60,700,500.00 will be transfer to your account only; if you are interested contact me back

with below details.

Kind regards,
Graeme Smith
3 Park Terrace
Manor Road
Luton
LU1 3HN
Email:graemesmithght@hotmail.com

Email analysis :

NOTE : enio.tavares@ifsertao-pe.edu.br
NOTE : graemesmithght@hotmail.com
NOTE : Received : from ifsertao-pe.edu.br

NOTE : (mail.ifsertao-pe.edu.br. [200.133.4.52])

NOTE : @ifsertaope server was used to relay a financial scam

GOOD NEWS

Your E-mail ID has just won an italian Oxfam donations so get back to us for more information's.

Email analysis :

NOTE : nga.nguyenthi@imv.com.vn
NOTE : oxfaminternational344@gmail.com
NOTE : X-Mdremoteip : 41.151.61.222

:::::

Accept My Donation

Email analysis :

NOTE : mrsalex2017@yandex.com
NOTE : AL@lnf.com
NOTE : Received : from REAGAN.landfnet.longandfoster.com
NOTE : ([fe80::858b:2d7a:9683:9c68])
NOTE : by EBH2.landfnet.longandfoster.com ([::1])
NOTE : Received : from tumbleweed-out.longandfoster.com
NOTE : (ebh2.landfnet.longandfoster.com [172.18.1.190])
NOTE : X-Originating-Ip : [192.168.2.74]
NOTE : client-ip=216.181.46.194;

Investment Business Offer

From: Charles Myers
Fidelity Worldwide Investments
Direct Line : Upon demand

Dear Friend,

I am Charles Myers, The portfolio Fund Manager of Fidelity World Investments.Fidelity World Investments is the World Largest Fund Management Company with over GBP1.2billion Capital Investment Fund.Nevertheless, as The Fidelity Fund Manager, I handled all the Investor's Direct Capital Funds and secretly extracted 0.51% Excess Maximum Return Capital Profit (EMRCP) per annual on each of the Investor's Marginal Capital Fund.

As an expert,I have made over GBP2,745,000,00 from the Investor's EMRCP and hereby asking you to stand as an Investor to receive the fund as Annual Investment Proceeds from Marginal Fidelity Capital Fund.

All confirm-able documents to back up the claims will be made available to you prior to your acceptance. Meanwhile, I have worked out the modalities and technicalities whereby the funds can be claimed in any of our 6 Clearing Houses without any hitches.Our sharing ratio will be 60-40.

If you are interested Please kindly reply me asap through my private email address (ch.myers52@gmail.com).

Sincerely Yours,

Charles Myers.
Portfolio Fund Manager.

Email analysis :

NOTE : ch.myers52@gmail.com
NOTE : eceived : from User (ec2-54-89-188-186.compute-1.amazonaws.com [54.89.188.186])
NOTE : by k-an.click (Postfix)
NOTE : Received : from k-an.click (by.ptr182.ptrcloud.net [153.122.105.51])

RE: CHANGE OF ACCOUNT PARTICULARS ON YOUR BENEFICIARY FILE.

FROM THE DESK OF: MR. THABO ELVIS
FIRST NATIONAL BANK JOHANNESBURG, SOUTH AFRICA
5TH FLOOR 4 FIRST PLACE, BANK CITY
CNR PRITCHARD AND SIMMONDS STREET JOHANNESBURG
P.O. BOX 7791 JOHANNESBURG 2000
Tel: 0027 783 677 681

Attn:Sir/Ma

RE: CHANGE OF ACCOUNT PARTICULARS ON YOUR BENEFICIARY FILE.

This is to inform you of the information submitted by Mr. Adams Wood of Indo-China group Ltd, with an application to receive the contract payment of US$25,500,000.00(Twenty Five Million Five Hundred Thousand United States Dollars) on your behalf. Please as a matter of urgency, you are required to verify the following information and inform us if you are aware or know anything about this.

1. Did you instruct one Mr. Adams Wood of Indo-China group Ltd .Hong-Kong, whose information's is below, to claim and receive the payment on your behalf?

2.Did you sign any "Deed of Assignment" in his favor thereby making him the current beneficiary with the following account details: Account Name: Indo-China Group Ltd, A/C #USD114-1025567-8, Bank Name: Standard Chartered Bank, Hong Kong, Swift Code: SCBL 11K111.

Finally, you are hereby advised to indicate to this honorable office with immediate effect, if you are the person that instructed Mr. Adams Wood to come for the claim of the fund to enable me endorse for the final payment.

For approval order on your behalf, you are to call with the above Phone Number for more clarifications.

We wait to hearing from you soon, and be rest assured of our professional service.

Yours faithfully,
Mr. T. I Elvis

Email analysis :

NOTE : caglebrown14@gmail.com
NOTE : thaboelvis10@outlook.com
NOTE : client-ip=98.138.91.104;

ATTENTION DEAR BENEFICIARY (UBA Scam)

ATTENTION DEAR BENEFICIARY.

I AM PATIRCK WHITE, DIRECTOR CASH PROCESSING UNIT,UNITED BANK FOR AFRICA[U.B.A] THE ONLY BANK APPOINTED BY THE O.A.U MEMBERS LED BY PRESIDENT JOHN KUFFOR. BECAUSE OF THE FRAUD GOING ON IN WEST AFRICA COUNTRIES WHERE SOME INNOCENT BENEFICIARIES WERE ASK TO PAY IN ADVANCE BEFORE RECEIVE THE MONEY OWED TO THEM. THE ABOVE AFRICA UNION HELD MEETING IN BENIN REPUBLIC AND RESOLVE TO PAY ALL BENEFICIARIES IN CASH THROUGH MEANS OF DIPLOMATIC COURIER SERVICE.WE RECEIVE YOUR FILES FROM INTERNATIONAL MONETARY FUND(I.M.F) AS ONE OF THE BENEFICIARIES.TAKE NOTE; TEN THOUSAND UNITED STATE DOLLARS (US$10,000) HAVE BEEN MAPPED OUT FOR ALL EXPENSES IN SENDING THE MONEY TO YOU THROUGH GENUINE DIPLOMATIC COURIER SERVICE AND HOW IT WAS SPENT WILL BE DETAILS TO YOU.THEREFORE, I WANT YOU TO BEAR IT IN MIND THAT YOUR TOTAL FUND WILL BE NO MORE THREE MILLION FIVE HUNDRED THOUSAND UNITED STATE DOLLARS ($3.500,000.00) BUT THREE MILLION FOUR HUNDRED AND NINETY THOUSAND UNITED STATE DOLLARS ($3,490,000.00). IF ANYBODY TELLS YOU THAT HE IS PAYING YOU IN BANK DRAFT OR TELE-GRAFIC MONEY TRANSFER BOTH WESTERN UNION OR MONEY GRAM, DO NOT LISTEN TO HIM OR HER BECAUSE DUE TO THIS FRAUD NO INTERNATIONAL BANK HON OURS OUR REMITTANCE INSTRUCTION ANY MORE. THAT IS WHY WE SETTLED TO PAY IN CASH THROUGH COURIER. WE ALSO RECEIVED A SECURITY REPORT THAT YOU PAID THE FRAUDSTERS WHO HAVE BEEN DECEIVING YOU, TELLING YOU THAT THEY ARE GOING TO SEND THIS MONEY TO YOU.DEAR,AS A SENIOR BANKER, CONTROLLING THIS CASH PAYMENT NOW, I ADVISE YOU NOT TO WASTE YOUR MONEY BY PAYING ANY BODY IN ADVANCE AGAIN,AND IF YOU JUST FOLLOW MY INSTRUCTION, YOU WILL RECEIVE YOUR MONEY IN THREE DAYS TIME. YOUR FUND WILL NOW PACKAGE IN BOX AND TAKE TO THE DIPLOMATIC COURIER SERVICE FOR IMMEDIATE SHIPMENT, I WILL ALSO SEND THE PICTURE OF THE BOX BY ATTACHMENT TO YOU TO SEE HOW THE MONEY IS PACKED, I WILL SEND YOU MORE MAILS TO GIVE YOU MORE INFORMATION WITH MY INTERNATIONAL PASSPORT FOR YOU TO KNOW THE GENUINE OF THIS TRANSACTION THEREFORE, DO FORWARD YOUR HOME ADDRESS AND DIRECT PHONE NUMBER TO ME FOR QUICK DELIVERY BECAUSE TIME IS NOT IN OUR SIDE ALL THE DOCUMENTS WILL BE SENT TO YOU IF I AM ASSURED THAT YOU HAVE STOPPED SENDING MONEY TO THOSE FRAUDSTER . BUT GOD WILL SURELY JUDGE ALL OF THEM WHO LIVES BY CHEATING. MY BIBLE SAYS WHAT DOES IT PROFIT A MAN IF YOU GAIN THE WHOLE WORLD BUT LOOSE YOUR SOUL, WHICH IS NOTHING.

I AM WAITING TO HEAR FROM YOU WITH THE REQUIRED INFORMATION OF YOURS.

MR PATIRCK WHITE
DIRECTOR CASH PROCESSING UNIT
UNITED BANK FOR AFRICA
Email:(unitedofafricabank330@gmail.com)

Email analysis :

NOTE : unitedofafricabank330@gmail.com
NOTE : "MRPATIRCKWHITE."@sirius.ocn.ne.jp
NOTE : X-Originating-Ip : [197.234.219.54]

DONATION! (United Nations Scam)

United Nations Development Programme.
United Nations Donation Programme 2017.

NOTIFICATION FOR DONATION TO YOU FOR DEVELOPMENT AT YOUR REGION.

This is to inform you that you have been selected to receive this donation award sum of £ 850,000.00 Eight Hundred and Fifty Thousand Pounds) as charity donations/aid from the UNDP, ECOWAS,EU,and the UNO in accordance with the enabling act of Parliament. On behalf of the foundation, we say congratulations to you.

Yours Sincerely,
anna ryan.

Email analysis :

NOTE : unfundsonline@officials.co.uk
NOTE : sgp@subrednorte.gov.co

NOTE : Received : from WIN-5QP472LOLBN.ec2.internal
NOTE : (ec2-54-157-204-125.compute-1.amazonaws.com [54.157.204.125])
NOTE : by mail1.esesuba.gov.co
NOTE : Received : from mail1.esesuba.gov.co
NOTE : (107.205.60.190.host.ifxnetworks.com. [190.60.205.107])

Urgent : Confirm Your Payment Now (United Nations Scam)

Attention ; Your Payment

I am António Guterres, Secretary-General under the United Nations Organisation . You can get more details about me here; https://en.wikipedia.org/wiki/António_Guterres At the recently concluded meeting with the World Bank and the United Nations, U.S. Department of the Treasury, and other world organization leaders , an agreement was reached between all parties that all outstanding payments accrued to individuals/companies with respect to local and overseas contract payment, debt re-scheduling and outstanding payment should be settled immediately. Fortunately, you have been selected alongside a few other beneficiaries to receive your own payment of $4.5 Million (four Million and Five hundred Thousand United States Dollars only) being your own funds from the World Bank,U.S. Department of the Treasury and United Nations Financial Authority (UNFA). We have been notified that you are yet to receive your fund valued at $4.5 Million (four Million and Five hundred Thousand United States Dollars only). This money will now be transferred to your nominated bank account or by Check/ATM Card and that you will receive . You are advised to kindly reply this email with the following info stated here below in order to update our records and your File, and as well to facilitate the processing of your payment for effectual remittance into your bank account or by Check/ATM Card.

(1) Full Names:
(2) Residential Address:
(3) Country of Residence:
(4) Age:
(5) Phone/Cell Number:
(6) Occupation:

As soon and you receive the Mail and understand .please be advice to contact our remittance payment officer who is to proccess your payment to you without any futher delay and that you will receive your payment/funds in tthe next 48 Hours of contacting him .

United Nations Financial Authority (UNFA) payment

Remittance payment officer

Names : Moore Anderson
Email Address : mooreandersonoffice16@gmail.com

Yours faithfully,
António Guterres
Secretary General
United Nations Organisation
(United Nations Financial Authority (UNFA))
______________________________________________________________________________________________________

Note: The information contained in this e-mail is private & confidential and may also be legally privileged. If you are not the intended recipient, please notify us preferably by e-mail, and do not read, copy or disclose the contents of this message to anyone.

Email analysis :

NOTE : info@svarbi.ru
NOTE : Received : from [69.85.230.131]

NOTE : (helo=IUDSBS.iudmed.local) by mhost.svarbi.ru
NOTE : 69.85.230.131

DO YOU WANT TO BE A MEMBER OF THE GREAT ILLUMINATI ?

Hello, it is unfortunate that our secret fraternity have become what most people now use as there aim of getting money, I would say sorry to those who have falling to the once who claim of being an agent of our secret fraternity called Illuminati, any Illuminati member who doesn't show you his or her identity card is a fake and besides avoid those claiming a real agent on facebook there is no real agent on facebook due to the issue of fraudulent. The Illuminati is mainly from Egypt and Kenya, and note that our present head office is now in USA, it is no longer in UK again due to the fraudulent that are now existing there. there are only five agent which was recently send to Nigeria to establish the church of Lucifer over here. And the other thing is that we the real Illuminati are scarce and very have to identify , you can only identify us with our email address and our head office cellphone number which is +19162779776 and our email ID which normally include "666" on it, an! d please for those who haven't yet be scammed and are willing to join, please be careful cos there are alot of fraudsters and so many imposter now who claims they are real. So now I will want those who are interested to hit this email address: illuminatiword0666@gmail.com , for the link on how to join our fraternity or hit us a message on our whatsapp with this number +2348119239306 for quick conversation on how to start. And there are still alot of fraudsters on whatsapp now and please you shouldn't add anyone on facebook or email any how, make sure you are terrified with it before you make any attempt, so be careful and also please beware of fraudsters..

Email analysis :

NOTE : illuminatiword66@gmail.com
NOTE : Return-Path : < apache@c2-interway.com >
NOTE : client-ip=85.88.136.13;

Dear Friend. (BOA Scam)

Dear Friend,

I am Mr. Hammed Priod, the director of the accounts & auditing dept .at the Bank of Africa Ouagadougou-west Africa. (B.O.A) with due respect, I have decided to contact you on a business transaction that will be beneficial to both of us.

At the bank's last accounts/auditing evaluations, my staff came across an old account which was being maintained by a foreign client who we learn was among the deceased passengers of motor accident.

Since his death, even the members of his family haven't applied for claims over this fund and it has been in the safe deposit account, I discovered that it cannot be claimed since our client is a foreign national and we are sure that he has no next of kin here to file claims over the money. As the director of the department, this discovery was brought to my office so as to decide what is to be done.

I decided to seek ways through which to transfer this money out of the bank and out of the country too.

The total amount in the account is thirteen million five hundred thousand dollars (USD 13,500,000.00).with my positions as staffs of the bank, I am handicapped because I cannot operate foreign accounts and cannot lay bonafide claim over this money. The client was a foreign national, you will only be asked to act as his next of kin and I will supply you with all the necessary information and bank data to assist you in being able to transfer this money to any bank of your choice where this money could be transferred into.

I want to assure you that this transaction is absolutely risk free since I work in this bank, which is why you should be confident in the success of this transaction because you will be updated with information as at when desired.

I will wish you to keep this transaction secret and confidential as I am hoping to retire with my share of this money at the end of transaction which will be when this money is safety in your account. I will then come over to your country for sharing according to the previously agreed percentages. You might even have to advise me on possibilities of investment in your country or elsewhere of our choice. May God help you to help me to a restive retirement, Amen.

Please for further information and enquiries feel free to contact me back immediately for more explanation and better understanding.

I am waiting for your urgent response!!!

Thanks and remain blessed.

Mr. Hammed Priod

Email analysis :

NOTE : kdri0177@gmail.com
NOTE : client-ip=212.82.96.164;

Respond Urgently

Attn: Fund Beneficiary,

You are legally contacted regarding the release of your long awaited fund of $5million. After a detailed review of your file, I wish to inform you that your Swift Credit Card payment is being processed and will be released to you as soon as you respond to this office.Please re-confirm to us the following information:

Your Name,

Your Address,

Your Phone,

Your Age, Occupation, drivers license or international passport.

Waiting your urgent response
Dr Edward Williams.

Email analysis :

NOTE : dredwardwilliams776@gmail.com
NOTE : info@privahaus.de
NOTE : Received : from [10.22.96.195] (unknown [105.112.34.195])
NOTE : (using TLSv1 with cipher AES256-SHA (256/256 bits))
NOTE : (No client certificate requested) by ispcp.adminfrontend.de

February (#1114)

Attention: Winner,

We happily announce to you the February (#1114) of the UK DATA BASE NATIONAL LOTTERY, on line Sweepstakes International program held in February 2017. Your email address attached to ticket number: 56475600545 188 with Serial number 5368/02 drew the lucky numbers: 10 7 24 31 42 49 5 Bonus Ball which subsequently won you the lottery in the 2nd category i.e. match 5 plus bonus. You have therefore been approved to claim a total sum of #1,000,000.00(One Million Pounds Starlings in cash credited to file KTU/9023118308/03. This is from a total cash prize of#4,000,000.00 shared among-st the first four (5) lucky winners in this category i.e. Match 5 plus bonus. All participants for the on line version were selected randomly from World Wide Websites through computer draw system and extracted from over 100,000 unions, associations, and corporate bodies that are listed on line. Please note that your lucky winning number falls within our European booklet representative office in Europe as indicated in your play coupon. In view of this, your #1,000,000.00 (One Million Pounds Sterling's) would be released to you by any of our payment offices in Europe. This is part of our precautionary measure to avoid double claiming and unwarranted abuse of this program.Please be warned. To file for your claim, please Contact our claims agent:

1. Full name..................
2. Country....................
3. Contact Address......
4. Telephone Number..
5. Marital Status.........
6. Occupation..............
7. Age...........................
8. Sex...........................

Below is the details no how you are to contact the FUND RELEASE PAYMENT DEPARTMENT.
=======================================
John Smoke
EMAIL: seniordepartmentdischarge@europe.com
Telephone: +44 704 573 9543.
Fax No: +44-844-774-6340.
=======================================

Big Chefs
Online coordinator uk national lottery,
Sweepstakes International Program.
Open 7 days 8am-8pm

Email analysis :

NOTE : seniordepartmentdischarge@europe.com
NOTE : ik@demsagroup.com
NOTE : Received : from User (74.208.80.218)

NOTE : by Demsaexch.DEMSAWRK.COM (192.168.1.222)

DONATION!

United Nations Development Programme.
United Nations Donation Programme 2017.

NOTIFICATION FOR DONATION TO YOU FOR DEVELOPMENT AT YOUR REGION.

This is to inform you that you have been selected to receive this donation award sum of £ 850,000.00 Eight Hundred and Fifty Thousand Pounds) as charity donations/aid from the UNDP, ECOWAS, EU,and the UNO in accordance with the enabling act of Parliament. On behalf of the foundation, we say congratulations to you.

Yours Sincerely,
anna ryan.

Email analysis :

NOTE : unfundsonline@officials.co.uk
NOTE : sgp@subrednorte.gov.co
NOTE : Received : from WIN-5QP472LOLBN.ec2.internal
NOTE : (ec2-54-157-204-125.compute-1.amazonaws.com [54.157.204.125])
NOTE : by mail1.esesuba.gov.co

NOTE : mail1.esesuba.gov.co

NOTE : www.esesuba.gov.co

Have you received your payment?

FEDERAL RESERVE BANK
90 HENNEPIN AVENUE
MINNEAPOLIS
MN 55401. USA

Attn: Beneficiary,

This is to inform you that we have received a payment instruction from Mr. Chan T Kin, a Citizen of China demanding that we should transfer your funds to him, as you have given him the mandate and authorization for him to receive your funds interest. Note that he has given us a bank account in Hong-Kong, where we will transfer your funds to him without delay.

Bank of China (Hong Kong)
25 Wu Pak Street, Aberdeen, HK
Account Name: Chan Tak Kin
Swift code: BKCHHKHHCLS
Routing number: 026003269
Account number: 012-879-6-034422-0

Please let us know if you have truly instructed and directed him to receive your funds in Hong-Kong We have informed him to get an official Power of Authorization from you, before we will release the funds to him, which we are still waiting for however we want to inform you that, you have the next five (5) official working days to get back to us on this notice or we will release the funds to him. Thanks for your co-operation.

Yours truly;
Mr. Neel Kashkari

FEDERAL RESERVE BANK
90 HENNEPIN AVENUE
MINNEAPOLIS
MN 55401. USA

Email analysis :

NOTE : Have you received your payment?
NOTE : neel.kashkari2@barid.com
NOTE : FederalReserveBank@info.al
NOTE : Received : from uniform.unisonplatform.com ([185.46.120.139])
NOTE : Received : from [50.225.28.116] (port=61185 helo=User)

Your Package Delivery Notification. (Fedex Scam)

Dear Customer!!!

We have been waiting for you to contact us for your Confirm able package that is registered with us for shipping to your residential location. We had thought that your sender gave you our contact details. It may interest you to know that a letter is also added to your package.

We understand that the content of your package itself is a Bank Draft worth of $750,000.00 USD, FedEx does not ship money in CASH or in CHECKS but can ship Bank Drafts. The package has been registered with Us for mailing by your colleague from United Nations Organization, and your colleague explained that he is from the U.S.A but he is currently in Africa for a three (3) months Surveying Project as he works with a Consultant firm in Nigeria, We are sending you this email because your Package is been registered on a Special Order. For your information, the VAT & Shipping charges as well as Insurance fees have been paid by your colleague before your package was registered. Note that the payment that is made on the Insurance, Premium & Clearance Certificates, are to certify that the Bank Draft is not a Drug Affiliated Fund (DAF). This will help you avoid any form of query from the Monetary Authority of your country.
However, you will have to pay a sum of $105.00 USD to the FedEx Delivery Department being full payment for the Security Keeping Fee of the parcel been registered by your colleague, FedEx Company as stated in our privacy Terms & condition page. Send your Postal address, telephone and your name In full this is mandatory to reconfirm your Postal address and telephone.
Please note that packages are not shipped nor delivered on Saturday, Sunday and on holidays. If your order has been placed on any of these days, then it may be shipped the next business day.

Kindly complete the below form and send it to the FEDEX DELIVERY POST With the below information's. This is mandatory to reconfirm your Postal address and telephone numbers.

FULL NAMES:
TELEPHONE:
POSTAL ADDRESS:
SEX:
CITY:
STATE:
OCCUPATION:
COUNTRY:

FEDEX DELIVERY POST

Contact Person: Mr. Lambert O. James.
Email: lambert_james@live.com
**ALL PACKAGES ARE SIGNATURE REQUIRED.
If you have any other questions or concerns, Please feel free to contact us between
Monday-Friday: 9:00am 9:00pm EST
Saturdays: 10:00am 5:00pm EST
Sundays: 10:00am - 4:00pm EST
Have a great day!
Federal Express Co-operation.
FedEx Online Team Management.
All rights reserved. © 1995-2017.

Email analysis :

NOTE : lambertojames@gmail.com
NOTE : horsham@sportspower.com.au

Dear Winner: (Powerball Scam)

Dear Winner:

Your email has won you $1,000,000 US Dollars in the Ongoing Powerball online Lottery, with your Lucky Number 7.15.20.29.41.22. For details of claims: Send us your: Full name, Home Address Age/Sex. Occupation.

Note: If You Receive This Message in Your Junk or Spam Its Due To Your Internet Provider.

Yours in service,
Mr. Bopha Williams.
Powerball Online Lottery.

______________________________________________________________

Ce message et toutes les pièces jointes (ci-après le "message") sont confidentiels et établis à l'intention exclusive de ses destinataires.
Toute modification, édition, utilisation ou diffusion non autorisée est interdite.
Tout message électronique est susceptible d'altération.
SPIE et ses filiales déclinent toute responsabilité au titre de ce message s'il a été altéré, déformé, falsifié, édité ou diffusé sans autorisation.

This message and any attachments (the "message") are confidential and intended solely for the addressees.
Any unauthorised alteration , printing , use or dissemination is prohibited.
E-mails are susceptible to alteration.
SPIE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed, falsified, printed or disseminated without authorisation.
______________________________________________________________

Email analysis :

NOTE : powerballclaims1@zoho.com
NOTE : p.paasse@spie.com
NOTE : 147.98.15.1

Oportunidad de financiación (préstamo de dinero)

Tuvimos su dirección esmalte en el motor de investigación en Internet y tenemos elegir corresponder con ustedes. Necesitaba préstamos de dinero (financiación). Internacional le concede a Diamond Finance compuestas de expertos financiero en condiciones de una financiación al importe del que tenía necesidad, la solicitud de préstamo de dinero no podrá exceder para los proyectos individuales de € 5000 euros a € 40.000 euros, y de 40.000 euros a € 1.000.000 euros para los que son colectivos (SOCIEDAD, EMPRESA, ONG) con un porcentaje del 2% por año. Ahí tienes los ámbitos en los cuales podemos aún ayudarle a serealizar se que es imposibles: La agricultura, la agropastoral, la ganadería, préstamo inmobiliario, préstamo a la inversión, préstamo automóvil, préstamo personal, préstamo escolar, préstamo familiar. Se les fija, prohibiciones bancarias y no tiene el favor desBanques o mejor tiene un proyecto y necesita financiación noscontactar nos: internacional.diamondfinanzas@yahoo.com

25 de años credibilidad, calidad y satisfacción a los servicios de nuestro cliente.

Email analysis :

NOTE : paolo@freespiriterni.it
NOTE : internacional.diamondfinanzas@yahoo.com
NOTE : X-Senderip : 41.216.50.119

Contact Rev. Dr. Madibe Nbongo(UBA bank ATM director)

Dear Beneficiary,

We have actually been authorized by the newly appointed United Nation secretary general, and the governing body of the UNITED NATIONS Monetary Unit, to investigate the unnecessary delay on your payment, recommended and approved in your favor. During the course of our investigation, we discovered with dismay that your payment has been unnecessarily Delayed by corrupt officials of the Bank who are Trying to divert your funds into their private accounts.To forestall this security for your funds was organized in the form of your personal Identification number (PIN) ATM CARD and this will enable only you to have direct Control over your funds in the ATM CARD. We will monitor this payment ourselves to avoid the hopeless situation created by the Officials of the bank.

An irrevocable payment guarantee has been issued by the World Bank Group and the International Monetary Fund (IMF) on your Payment. However, we are happy to inform you that based on our recommendation/Instructions; your complete Inheritance funds have been credited in your favor through ATM VISA CARD. You are therefore advice to contact UBA Bank below:

Contact Person: Rev. Dr. Madibe Nbongo
Director ATM Payment Department
(United Bank for Africa Plc Cotonou, Benin Republic)
E-mail: ubank064@gmail.com
E-mail: ubab0347@gmail.com

Contact him now for the delivery of your ATM Card. As soon as you establish a contact with him, an ATM card will be issued to you immediately which you can use to withdraw your funds in any Bank ATM Machine in your Country, but the maximum is $5000 per day. So if you like to receive your funds through this means you're advised to contact(REV. DR. MADIBE NBONGO) with the following information as stated below:

1. Your Full Name:
2. Address Where You Want the Courier Company to Send Your ATM Card
To or (P.O Box)
3. Nationality:
4. Occupation:
5. Mobile Number:
6. Private E-Mail Address:

NOTE: You are advised to furnish (REV. DR. MADIBE NBONGO) with your correct and valid details. Also be informed that the amount to be paid to you is USD$7.Million We expect your urgent response to this email to enable us monitor this payment effectively thereby making contact with (REV. DR. MADIBE NBONGO) as directed to avoid further delay.

Note that you are going to be responsible for the delivery cost based on the company you choose among three companies we use to deliver packages which will be listed to you upon your responds on this mail.

Congratulations.
Regards,
MRS. DORIS SAMUEL

Email analysis :

NOTE : X-Originating-Ip : [41.138.91.244]

NOTE : ubank064@gmail.com
NOTE : "WWW."@crux.ocn.ne.jp
NOTE : client-ip=153.149.233.4;

Vasiliki Tsaknaki

ARE YOU LOOKING FOR LOAN OF ANY KINDS, IF YES EMAIL FOR MORE INFO

ALL REPLY TO zedvancelender@gmail.com

Email analysis :

NOTE : tsaknaki@kth.se
NOTE : X-Originating-Ip : [197.210.24.25]

Email leak :

"Eddie.Hargreaves@mail.com" , "EdgarInvestments@tormail.org" , "Edward@yourcarrierquote.com" , "Ekofrmjerzy@aol.com" , "Elisebartonsmythe@hotmail.com" , "Ellie.bridgit@outlook.com" , "Elliotsullivan67@gmail.com" , "Elsie.smithers@gmail.com" , "Elwinderbucher@gmx.com" , "ElyOfIce@zoho.com" , "Elzakarypurcell@gmail.com" , "EmilyJohanson0605@gmail.com" , "Enginesb5@gmail.com" , "EnglishCofA@gmail.com" , "Enquiries@amc.edu.my" , "Eric.Donaldson.spam@gmail.com" , "Erichammeran@mail.com" , "Ericsonlil@yahoo.com" , "Erwin.Noordam@yahoo.com" , "Evilmask01@gmail.com" , "Express4g@aol.com" , "FWThompson@europe.com" , "FabioLorenzo357@gmail.com" , "Farahrasshad@sharklasers.com" , "Fariousinc@gmail.com" , "Father.Jed@gmail.com" , "FenderTele@gmx.co.uk" , "Fgfortgshs@gmail.com" , "FinchJ1978@gmail.com" , "Fionalews@mail.com" , "Firey.pancake@gmail.com" , "Fishingforsnorlax@gmail.com" , "FlossieBowers@gmail.com" , "Floyd.J.Owens@gmail.com" , "Fortunataapple@gmail.com" , "Fost555@gmail.com" , "FoxieHouston@gmail.com" , "Fr.Meemersmith@gmail.com" , "FrancineSparks@hotmail.com" , "FrankEJam@gmail.com" , "Fred248@hushmail.com" , "FredARQ@gmail.com" , "FredFredburger@Europe.com" , "Funfriendsfast@mailinator.com" , "Fuzzywaters52@gmail.com" , "G.a.clooney@gmail.com" , "G.moore68@hotmail.com" , "G8page@gmail.com" , "GMP1@mail.com" , "GP@HANNAPLUMBING.com" , "Gardnera218@gmail.com" , "Gavinscottrealilluminati@gmail.com" , "Generalkawundeaa@gmail.com" , "Generodan@gmail.com" , "GeoffBridges1961@gmail.com" , "Gerardhugo@mail.com" , "Gideonglee123@gmail.com" , "Gingerprincemoreton@gmail.com" , "Glenrobinsonthebossman@mail.com" , "GloriafromEngland@guerrillamail.org" , "Gormderikkeerung@gmail.com" , "Goulon210@gmail.com" , "Grant9951@carworldaz.dealer.com" , "GreenArrow142@gmail.com" , "Greg.H.Davis@outlook.com" , "Greggbeckleys@gmail.com" , "Greta.Jones12@outlook.com" , "Grizz.Santangelo@gmail.com" , "GrumpyRob@live.co.uk" , "Gscott223@engineer.com" , "Gubronotamu@gmail.com" , "Guiseppemannone@gmail.com" , "Gurustunts@gmail.com" , "Guyrichardchapman@gmail.com" , "H.Hartt@yahoo.co.uk" , "HMRind@tutanota.com" , "Halvdan.Svarte@yahoo.com" , "Hans-Hubermeyer@hotmail.de" , "Happygreen65@gmail.com" , "HarryBrown1971@live.co.uk" , "Hawkingspeter35@gmail.com" , "Heinesberg@gmail.com" , "Hernandezlouiz@gmail.com" , "Heywoodyabusov@yahoo.com" , "Heywoodyabusov@yahoomail.com" , "HiersKammers@gmail.com" , "HiersKammers@yahoo.com" , "Holden5150@hotmail.com" , "Hope.forthebest442@gmail.com" , "Hornyforlove69@outlook.com" , "Hortense.ruffnees@gmail.com" , "HorvatPW@gmail.com" , "Hotreeze33@gmail.com" , "Houlton@gmail.com" , "Howardnorth69@gmail.com" , "HueRektion@gmail.com" , "Hugh.a.nuss@gmail.com" , "Hugh.morris.work@gmail.com" , "Hugh_willey@yahoo.co.uk"

( Investing IN Your Country )

I am soliciting your assistance to move an investment profit funds from my Bank for investment in your country. This is genuine and I hope it will appeal to you. I need your consent to provide details.

Contact me on my email ( chen.yang005@yandex.com ) for more details.

Regards,
Yang

Email analysis :

NOTE : cnaupari@devida.gob.pe
NOTE : ( Investing IN Your Country )
NOTE : chen.yang005@yandex.com
NOTE : X-Originating-Ip : [165.228.4.225]

Statut d'impots : A valider (Phishing impots.gouv.fr)

Je consulte les démarches à suivre >> Cliquez Ici

Email analysis :

NOTE : remboursement@impots.gouv.fr (NO DKIM PROTECTION)
NOTE : Content-Type : text/html
NOTE : Mime-Version : 1.0
NOTE : Return-Path : www-data@vds2459.sivit.org
NOTE : Received : from vds2459.sivit.org (vds2459.sivit.org. [195.5.208.132])
NOTE : Received : by vds2459.sivit.org (Postfix, from userid 33)
NOTE : Received-Spf : client-ip=195.5.208.132;
NOTE : Statut d'impots : A valider

Phishing analysis :

SCREENSHOT :

CLICK : Je consulte les démarches à suivre >> Cliquez Ici
OPEN :

http://www.afflutesresitancessegments.com/Denominations.directes/Approuves.composments.members/index.html

REDIRECT :

http://www.afflutesresitancessegments.com/Denominations.directes/Approuves.composments.members/composition.php?

SCREENSHOT :

CLICK : VALIDER
REDIRECT :

http://www.afflutesresitancessegments.com/Denominations.directes/Approuves.composments.members/send.php

SCREENSHOT :

CODE DISCLOSURE (ENCODED) :

Ceci%20est%20un%20champ%20obligatoire.%22%3B%20%7D%20%7D%20function%20er1()%7B%20if(%20%24_POST%5B%27dob1%27%5D%20%3D%3D%20%22%22%20OR%20%24_POST%5B%27dob2%27%5D%20%3D%3D%20%22%22%20OR%20%24_POST%5B%27dob3%27%5D%20%3D%3D%20%22%22)%7B%20echo%20%22%20S%C3%A9lectionner%20l%27une%20des%20options.%22%3B%20%7D%20%7D%20%3F%3E%3C%3Fecho(%24_POST%5B%27nom%27%5D)%3B%3F%3E%3C%3Fecho(%24_POST%5B%27prenom%27%5D)%3B%3F%3E%3C%3Fecho(%24_POST%5B%27email%27%5D)%3B%3F%3E%3C%3Fecho(%24_POST%5B%27adresse%27%5D)%3B%3F%3E%3C%3Fecho(%24_POST%5B%27adresse2%27%5D)%3B%3F%3E%3C%3Fecho(%24_POST%5B%27ville%27%5D)%3B%3F%3E%3C%3Fecho(%24_POST%5B%27postale%27%5D)%3B%3F%3E%3C%3Fecho(%24_POST%5B%27tele%27%5D)%3B%3F%3E%0A

Incident sur votre compte (Phishing Free)

Votre satisfaction notre priorité

Cher(e) Client(e),

Nous sommes au regret de vous informer que votre abonnement mobile est impayé suite au refus du prélèvement de ce mois par votre établissement bancaire.

Nous vous invitons à régulariser votre facture en suivant le bouton ci-dessous afin d'éviter la perte de votre ligne mobile:

Régler votre facture

A bientôt !

Armand Thiberge - PDG, Free Mobile

Ceci est un message automatique.

Email analysis :

NOTE : EASY+REQUEST@magenvimigo.msn.com
NOTE : Cmm-Sender-Ip : 217.72.192.75
NOTE : Received : from mout.kundenserver.de ([217.72.192.75])

Phishing analysis :

SCREENSHOT :

CLICK : Régler votre facture
OPEN : http://requestfree.eu/*
REDIRECT : freemobileapp.eu/request/*
SCREENSHOT :

URGENT: Confirmation Of Your Online Banking. (JPMorgan Phishing attempt)

Dear Chase Online(SM) Customer,

As part of our commitment to help keep your account secure, we have detected an irregular activity on your account and we are placing a hold on your account for your protection. Please click on the following link and follow the instructions for proper verification.

CLICK HERE

NB: If this important message seems to be spam/junk please move to inbox to enable you click on the link above, We are here to assist you anytime. Your account security is our priority. Thank you for choosing Chase.

Sincerely,
Chase Fraud Department

Copyright © 2016 Chase Online. All rights reserved
JPMorgan Chase & Co.

Email analysis :

NOTE : info@onlinebanking.com
NOTE : bblazzard@lusd.k12.ca.us
NOTE : Received : from onlinebanking.com (unknown [68.65.134.234])

Phishing analysis :

CLICK : CLICK HERE
OPEN : http://mobwarsdoa.com/banking/chaseonline/Logon.php?LOB=RBGLogon&_pageLabel=page_logonform

Viet Xuan Luong (Scam)

I am Viet Xuan Luong. I am an American soldier presently on active service with 4th Squadron battalion here in Afghanistan. I served with the third Infantry Division in Iraq before thousand of my lucky colleagues were pulled out in August Last year, leaving me among the unlucky ones drafted to Afghanistan where I am serving presently. Am seeking your urgent help, please get back to me via email and I will tell you more about it thank you and God bless you.

Respectfully submitted.
Viet Xuan Luong

Email analysis :

NOTE : vietxuanluong6@gmail.com
NOTE : janainamaiara@unifap.br
NOTE : X-Originating-Ip : [105.112.42.159]

Service client : Sécuriser votrᥱ Cybᥱrplus ! (Phishing Banque Populaire)

Bonjour

Le département technique procède à une mise à jour de logiciel programmée de
façon à améliorer la qualité de nos services . Nous vous demandons avec
bienveillance de sécuriser votre Cyberplus .

21-01-2017 : Régulation de votre dossier en linge.

Nous vous remercions de votre confiance.
Cordialement
Conseil Clientèle.

Email analysis :

NOTE : noreply@nej.fr
Received : from 184.164.74.221

Phishing analysis :NOTE :

CLICK : http://opticaguadalquivir.es/puce
REDIRECT : http://www.tailors-hostel.com/gestion/txt/-/ilon/resf/Pages/
SCREENSHOT :

Microsoft account termination request in progress. (Microsoft Phishing, Swisscom Phishing, Directory listing)

Microsoft Security info

We received a message from you requesting for your account termination, please ignore this message if the request was from you. Your account would be deleted from our system in the next 24 hours.

(Note: All mails in your inbox, spam, draft, and sent items would be terminated, and access to your account would be denied.)

Click on cancel request if the message wasn't from you.

CANCEL REQUEST

Cancel the termination request to keep enjoying Microsoft!

Thanks,

The Microsoft account team.

Safety Certification Copyright © 2017 Microsoft

Phishing analysis :

SCREENSHOT :

CLICK : http://ow.ly/***
RESULT : A BASE64 is loaded in the url bar.
RESULT : data:text/html;base64,
SCREENSHOT :

RESULT : Microsoft phishing
CODE SOURCE ANALYSIS : form action="http://dolphinsclubtema.org/wp-includes/js/mine/pahgy/result.php
NOTE : Another wordpress website hacked...
GO TO : http://dolphinsclubtema.org/wp-includes/js/mine/

RESULT : Repository of phishing.
GO TO : http://dolphinsclubtema.org/wp-includes/js/mine/bluewin

RESULT : Swisscom Phishing

GO TO : http://dolphinsclubtema.org/wp-includes/js/mine/pahgy/

RESULT : Microsoft phishing

GO TO : http://dolphinsclubtema.org/wp-includes/js/mine/viko/

RESULT : Microsoft phishing

Mr.David Kamau

I am the final signatory to all foreign transfers of huge funds moving within banks both the local and international levels in line to foreign contracts settlement. I have before me the list of foreign contract payment files, which are due to be transferred to their nominated accounts. Meanwhile, we identified some of these accounts to be ghost accounts, unclaimed deposits and over invoiced sum etc. I wish to have a deal with you as regards to the unpaid fund. I have a file before me and hope the date's are correct and UN-tampered. As it is my duty to recommend the transfer of these surplus fund to the Federal Government Treasury and Reserve Accounts as unclaimed deposit. I have the opportunity to write you based on the instruction I received two days ago from the senate committee on contract payment/foreign debts to submit the list of payment reports expenditures and audited reports of revenues. Among several others, I have decided to remit the total sum of USD15.2 million following Mr.David Kamau.

Email analysis :

NOTE : mr.davidkamau1@yahoo.com
NOTE : mrdavidkamau1@gmail.com
NOTE : X-Rocketymmf : bsobeab
NOTE : Received : from [41.86.234.171]

NOTE : by web101604.mail.kks.yahoo.co.jp