Service CIient - Nouveau message

FREE MOBILE

Cher(e)aClient(e) :

La dernière facture FREE MOBILE de votre ligne a fait l'objet d'un défaut de paiement.

Nous vous invitons à régulariser votre situation sans délai en effectuant
le paiement dans votre Espace Abonné

EspaceoAbonné

Cordialement
Votre ConseillertFREEtMOBILE

-me-

Email analysis :

NOTE : FREE.MOBlLE@senior-meilleuresoffres.net
NOTE : X-Php-Originating-Script : 0:ark.php
NOTE : Received : by news.monoprix.fr (Postfix, from userid 33)
NOTE : ark@news.monoprix.fr

Phishing screenshot :

Phishing analysis :

CLICK : EspaceoAbonné
OPEN : http://www.libertycoingalleries.com/var
REDIRECT : http://tee-managerdesigner.com/vqmod/css/faicon/28452fa1dfa2fa1778723ec9ae1bd38f/
SCREENSHOT :

Affected services :

NOTE : news.monoprix.fr (Relaying the phishing email.)
NOTE : libertycoingalleries.com (Hosting the redirect to the phishing.)
NOTE : tee-managerdesigner.com (Hosting the phishing.)
NOTE : hostgator.com (Hosting the phishing page.)
NOTE : Free (Victim)

Enc:DHL delivery Cust. Ref: 539000135

dhllogo.gif

Dear *@*.*,

A Package is coming your way through DHL.
Kindly confirm if the address is correct and you can also track your Package till it gets to your doorstep.

Track Your Package

DHL Worldwide Delivery ©.

Email analysis :

NOTE : inbox@vaemail.ru
NOTE : Received : from vaemail.ru (vaemail.ru. [80.85.159.162])
NOTE : client-ip=80.85.159.162;

Phishing analysis :

CLICK : Track Your Package
OPEN : http://thedanbury.com/dhl/DHLAUTO/track/dhl.php?email=*
RESULT : Phishing was removed...

Please acknowledge receipt of this mail

Dear Beneficiary,

I am Steven Terner Mnuchin, Secretary of the Treasury under the U.S. Department of the Treasury. You can get more details about me here on the link below;

https://www.treasury.gov/about/Pages/Secretary.aspx

At the recently concluded meeting with the World Bank and the United Nations, an agreement was reached between both parties for us to settle all outstanding payments accrued to individuals/corporations with respect to local and overseas contract payment, debt re-scheduling and outstanding compensation payment. Fortunately, you have been selected alongside a few other beneficiaries to receive your own payment of $10.5million (Ten Million five hundred thousand United States Dollars only). We have been notified that you are yet to receive your fund valued at $10.5million This money will now be transferred to your nominated bank account through our foreign bank unit in South East Asia Phnom Penh Cambodia.

You are advised to kindly reply this email with the below details enclosed to help us process your payment through our foreign payment bank in Cambodia.

(1) Full Names:
(2) Residential Address:
(3) Country of Residence:
(4) Age:
(5) Phone/Cell Number:
(6) Occupation:

Yours faithfully,

Steven Terner Mnuchin
Secretary of the Treasury
(U.S. Department of the Treasury)
Contact email; steventernermnuchin27@gmail.com

Email analysis :

NOTE : Japanjbkoy@eagle.ocn.ne.jp
NOTE : steventernermnuchin27@gmail.com
NOTE : Received : from User (231.129.151.153.ap.dti.ne.jp [153.151.129.231])

Michael Contos

Hello, I'm Michael And i work for E-Loan Company located in California USA, my company giving out loan's at 2.5% interest rate world wide if you are interested get back so i can provide you with the information on how to get loan.
Michael Contos

Email analysis :

NOTE : teodozjabukowska@umlub.pl
NOTE : michaelgeorgecontos@gmail.com
NOTE : Received : from zimbra.umlub.pl (zimbra.umlub.pl [10.6.11.11])
NOTE : by zimbra.umlub.pl (Postfix)

Good day to you,

Desk of Mrs. Farida M. Waziri
St. Joseph Medical Center
1717 South J Street, Tacoma,
WA 98405 -USA.
Phone: (253) 948-4897
Date: 03/13/ 2017
CONFESSING MY SINS:

Good day to you,

I wishes to inform you that I had communication with my Bank ECOBANK regarding the $750,000.00 I assigned to your name as Atone for the atrocities I committed against you during my leadership as Nigeria E.F.C.C Boss and they confirmed that if transfer should be terminated as threatened by SECURITY OUTFIT due to your inability to abide by transfer due process that fund can still be converted and process via ATM Card and mail to your address along the ATM Secret Pin if only you could keep it confidential.

The question is to know if you're still interested in receiving this offer and also to know if you can be able to sort DHL cost of mailing the ATM Card to your address at receipt of package since I'm still incapacitate and cannot take such responsibility from here as I'm still laying critical ill here in ST'JOSEPH Hospital TACOMA.

Note: Until I'm able to receive your feed-back only then can my account officer Mr. Frank Iheji be advised other-wise, but in-case you have decided to forfeit the offer please you should hesitate to notify me as it ins't compulsory to claim this offer after-all. Meanwhile, I beg you remember me in your prayers as I'm waiting to undergo another heart surgery operation in couple of days and I'm scared.

Your urgent response will be appreciated.

Regards,

Yours Sincerely,

Mrs. Farida Mzaber Waziri,
Former Nigeria (E.F.C.C) Boss
Phone: (253) 948-4897

Email analysis :

NOTE : steven336@yahoo.com
NOTE : "www."@royal.ocn.ne.jp
X-Originating-Ip : [41.79.219.211]