Thursday, October 12, 2017

My proposal (Military scam)

Hello Friend,

I am currently in the military unit here in Afghanistan,we have some amount of funds that we want to move out of the country. My colleagues and I need a good partner someone we can trust. It is risk free and legal. Reply to this email for more details. majortownsend01@gmail.com

Regards.

Email analysis :

NOTE : jamel.ocampo@11d07.mspz7.gob.ec
NOTE : majortownsend01@gmail.com
NOTE : X-Originating-Ip : [186.47.232.92]

Richard Gross's invitation is waiting for your response (LinkedIn Phishing)

LinkedIn
Richard Gross invited you to connect 3 days ago.

Accept

View Invitation

Richard Gross
CEO at HOC Trading LLC
More people who want to connect with you

Frank White
CONTRACTOR

View Message Here

Unsubscribe | Help
You are receiving LinkedIn notification emails.
This email was intended for User. Learn why we included this.
LinkedIn
© LinkedIn. Mailing address: Room 817, 18F, Building 18, #1 DiSheng Bei Road, Bejing Yizhuang Development Area, China. LinkedIn and the LinkedIn logo are registered trademarks of LinkedIn.

Email analysis :

NOTE : chair-curricula@meu.edu.jo
NOTE : X-Originating-Ip : [105.112.23.133]


Phishing screenshot :



Phishing analysis :

CLICK : ACCEPT
OPEN : https://maralspa.cl/LNKD/i.php
REDIRECT : https://lincoln-institute.com.ar/img/logos/www.linkedin/5e48c0aef72e80880ea2117442efdb31/
SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://lincoln-institute.com.ar/img/logos/www.linkedin/5e48c0aef72e80880ea2117442efdb31/index2.html
SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://www.linkedin.com/start
SCREENSHOT :

Tuesday, October 10, 2017

MICROSOFT® REWARD!!! (Microsoft Scam)

MICROSOFT® CORPORATION
Cardinal Place
80-100 Victoria Street
London,SW1E 5JL
United Kingdom

Dear Winner

This message is from the Office of the MICROSOFT® Co-Operation. We are pleased to inform you of the result for the just concluded annual draws of the MICROSOFT® Online Lotto for regular users of Msn,Hotmail and Bing search engine for the year 2017.Your email address in the 1st category and therefore attracted a cash award of ?845,000.00 GBP (Eight Hundred and Forty Five Thousand Great British Pounds Sterling) in cheque credited to Email Bonus Numbers: MSLP-54399. Please proceed with your claims by writing to our Foreign Co-coordinator (Derrick McCourt) Public/Online Sector U.K So he can assist you in redeeming your price with the following details

Name:

Occupation:

Valid Mobile no :

Age :

Country:

Derrick McCourt

General Manager, Public/Online Sector U.K

E-mail: (derrickmccourt1@dr.com)
MICROSOFT® CORPORATION

Email analysis :

NOTE : shien@npo-wahaha.net
NOTE : derrick.mccourt@yandex.com
NOTE : Received : from unknown (HELO User) (shien@npo-wahaha.net@104.193.10.122)


NOTE : by aser.buddha.co.jp

Lors votre dernier achats (Phishing Société Générale)

Adhésion : Faite votre demande en ligne en cliquant-ici

Email analysis :

NOTE : Received : from 5.62.57.67 (IP may be forged by CGI script)
NOTE : by infong73.kundenserver.de
NOTE : Return-Path : < noreply@nrj.fr >
NOTE : noreply@nrj.fr
NOTE : X-Mailer : PHPMailer [version 1.73]

Phishing screenshot :


Phishing analysis :

CLICK : Faite votre demande en ligne en cliquant-ici
OPEN : http://hinsorn.ac.th/obeclms/osita/
REDIRECT : http://seraylv3.beget.tech/near/sg/ce18c0b32e0328aa61d8c9d10b1f34c6/
SCREENSHOT :


SPOOFED EMAIL : noreply@nrj.fr

Hi User, I sent you message on your LinkedIn network (LinkedIn Phishing)

Information from scam.cz :

- The linkedIn phishing has other formulas.
- Same phishing link as in this phishing.


Email analysis :

NOTE : dir-finance@meu.edu.jo
NOTE : X-Originating-Ip : [105.112.16.77]