Monday, April 10, 2017

LOAN OFFER

Do you need an urgent loan? We give out Business Loans, Personal Loans,
Student Loans,Car Loans E.t.c ,If you are interested contact us via:
elsonfinancialgroup@hotmail.com

Contact us today for an urgent loan. Contact us via:
eolsonfinancialgroup@hotmail.com

Email analysis :

NOTE : simonetta@granatelli.it
NOTE : OLSON FINANCIAL GROUP
NOTE : Received : from granatelli.it ([62.149.158.90])

Scam from 62.149.158.90

NOTE : by smtpcmd05.ad.aruba.it

ATTENTION PLEASE

THIS is YOUR DIPLOMATIC AGENT MR ROBERT JOHNSON I AM HERE TO DELIVER YOU CONSIGNMENT BOX worth

U.S.D 4.5 Million
I want you to kindly Reconfirm Your Full Name,.........
Current Home Address,..................................
Nearest Airport,.......................................
your Direct Cell,......................................

Phone # So that preparation can be made for the delivery of the consignment to your home address.
I wait to hear from you as soon as you recieve this email.

Thanks for your cooperation .you can be reached at (770) 737-1610

Email analysis :

NOTE : mrrobert829@gmail.com
NOTE : "www."@juno.ocn.ne.jp
NOTE : Received : from mzkstore501.ocn.ad.jp
NOTE : (mz-ukg501p.ocn.ad.jp [118.23.186.195])
NOTE : X-Originating-Ip : [210.146.36.62]

Scam from 210.146.36.62

Thursday, April 6, 2017

Payment

Hello,

We wish to inform you that your email as been selected and awarded the sum of 8,000,000.00 (Eight Million Pounds sterling) with reference number 77100146. This compensation funds is from the United Nations.

To receive payment Send us your full personal details to deliver your funds as soon as possible..

Gloria Peter

Email analysis :

NOTE : badrol@mpn.gov.my
NOTE : dgpfd30@gmail.com
NOTE : Received : from mail.mpn.gov.my
NOTE : (mail.mpn.gov.my [10.10.0.4]) by mail.mpn.gov.my

mail.mpn.gov.my

NOTE : https://mail.mpn.gov.my

zimbra

NOTE : http://mpn.gov.my

mpn.gov.my

NOTE : @mp_nilai was used to relay an United Nations scam.

Dear Did you get my email? It's urgent.

Kindly confirm me if this is your correct email address. I am barrister James Wilfred , Please kindly contact me There is an important issue i need to discuss with you concerning my deceased client late. latimerjohn00@gmail.com

Email analysis :

NOTE : amouzoukaka@gmail.com
NOTE : Received : by 10.237.34.79
NOTE : latimerjohn00@gmail.com

Wednesday, April 5, 2017

Service CIient - Nouveau message

FREE MOBILE

Cher(e)aClient(e) :

La dernière facture FREE MOBILE de votre ligne a fait l'objet d'un défaut de paiement.

Nous vous invitons à régulariser votre situation sans délai en effectuant
le paiement dans votre Espace Abonné

EspaceoAbonné

Cordialement
Votre ConseillertFREEtMOBILE

-me-

Email analysis :

NOTE : FREE.MOBlLE@senior-meilleuresoffres.net
NOTE : X-Php-Originating-Script : 0:ark.php
NOTE : Received : by news.monoprix.fr (Postfix, from userid 33)
NOTE : ark@news.monoprix.fr

Phishing screenshot :

Phishing Free

Phishing analysis :

CLICK : EspaceoAbonné
OPEN : http://www.libertycoingalleries.com/var
REDIRECT : http://tee-managerdesigner.com/vqmod/css/faicon/28452fa1dfa2fa1778723ec9ae1bd38f/
SCREENSHOT :

Phishing Free 2

Affected services :

NOTE : news.monoprix.fr (Relaying the phishing email.)
NOTE : libertycoingalleries.com (Hosting the redirect to the phishing.)
NOTE : tee-managerdesigner.com (Hosting the phishing.)
NOTE : hostgator.com (Hosting the phishing page.)
NOTE : Free (Victim)

Enc:DHL delivery Cust. Ref: 539000135

dhllogo.gif

Dear *@*.*,

A Package is coming your way through DHL.
Kindly confirm if the address is correct and you can also track your Package till it gets to your doorstep.

Track Your Package

DHL Worldwide Delivery ©.

Email analysis :

NOTE : inbox@vaemail.ru
NOTE : Received : from vaemail.ru (vaemail.ru. [80.85.159.162])
NOTE : client-ip=80.85.159.162;

Phishing from 80.85.159.162

Phishing analysis :

CLICK : Track Your Package
OPEN : http://thedanbury.com/dhl/DHLAUTO/track/dhl.php?email=*
RESULT : Phishing was removed...

The phishing is on error