Thursday, October 12, 2017

Important Business Proposal

I am Asma al-Assad, the wife of Bashar Hafez al-Assad of Syria . I saw your profile on the investment, and it would be great to work with you to exchange ideas in the framework of initiatives aimed at business opportunities. If you are interested, please send an e-mail using asma-al-assad@outlook.com

Looking forward to explore possible areas of mutual interest.

Yours sincerely
Asma al-Assad

AA
Asma Al-Assad

Email analysis :

NOTE : asmmaalassad@gmail.com
NOTE : Received : from [192.168.0.2] (unknown [188.206.108.197])


NOTE : by mymail.caregrowth.com
NOTE : client-ip=27.54.160.10;

My proposal (Military scam)

Hello Friend,

I am currently in the military unit here in Afghanistan,we have some amount of funds that we want to move out of the country. My colleagues and I need a good partner someone we can trust. It is risk free and legal. Reply to this email for more details. majortownsend01@gmail.com

Regards.

Email analysis :

NOTE : jamel.ocampo@11d07.mspz7.gob.ec
NOTE : majortownsend01@gmail.com
NOTE : X-Originating-Ip : [186.47.232.92]

Richard Gross's invitation is waiting for your response (LinkedIn Phishing)

LinkedIn
Richard Gross invited you to connect 3 days ago.

Accept

View Invitation

Richard Gross
CEO at HOC Trading LLC
More people who want to connect with you

Frank White
CONTRACTOR

View Message Here

Unsubscribe | Help
You are receiving LinkedIn notification emails.
This email was intended for User. Learn why we included this.
LinkedIn
© LinkedIn. Mailing address: Room 817, 18F, Building 18, #1 DiSheng Bei Road, Bejing Yizhuang Development Area, China. LinkedIn and the LinkedIn logo are registered trademarks of LinkedIn.

Email analysis :

NOTE : chair-curricula@meu.edu.jo
NOTE : X-Originating-Ip : [105.112.23.133]


Phishing screenshot :



Phishing analysis :

CLICK : ACCEPT
OPEN : https://maralspa.cl/LNKD/i.php
REDIRECT : https://lincoln-institute.com.ar/img/logos/www.linkedin/5e48c0aef72e80880ea2117442efdb31/
SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://lincoln-institute.com.ar/img/logos/www.linkedin/5e48c0aef72e80880ea2117442efdb31/index2.html
SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://www.linkedin.com/start
SCREENSHOT :

Tuesday, October 10, 2017

MICROSOFT® REWARD!!! (Microsoft Scam)

MICROSOFT® CORPORATION
Cardinal Place
80-100 Victoria Street
London,SW1E 5JL
United Kingdom

Dear Winner

This message is from the Office of the MICROSOFT® Co-Operation. We are pleased to inform you of the result for the just concluded annual draws of the MICROSOFT® Online Lotto for regular users of Msn,Hotmail and Bing search engine for the year 2017.Your email address in the 1st category and therefore attracted a cash award of ?845,000.00 GBP (Eight Hundred and Forty Five Thousand Great British Pounds Sterling) in cheque credited to Email Bonus Numbers: MSLP-54399. Please proceed with your claims by writing to our Foreign Co-coordinator (Derrick McCourt) Public/Online Sector U.K So he can assist you in redeeming your price with the following details

Name:

Occupation:

Valid Mobile no :

Age :

Country:

Derrick McCourt

General Manager, Public/Online Sector U.K

E-mail: (derrickmccourt1@dr.com)
MICROSOFT® CORPORATION

Email analysis :

NOTE : shien@npo-wahaha.net
NOTE : derrick.mccourt@yandex.com
NOTE : Received : from unknown (HELO User) (shien@npo-wahaha.net@104.193.10.122)


NOTE : by aser.buddha.co.jp

Lors votre dernier achats (Phishing Société Générale)

Adhésion : Faite votre demande en ligne en cliquant-ici

Email analysis :

NOTE : Received : from 5.62.57.67 (IP may be forged by CGI script)
NOTE : by infong73.kundenserver.de
NOTE : Return-Path : < noreply@nrj.fr >
NOTE : noreply@nrj.fr
NOTE : X-Mailer : PHPMailer [version 1.73]

Phishing screenshot :


Phishing analysis :

CLICK : Faite votre demande en ligne en cliquant-ici
OPEN : http://hinsorn.ac.th/obeclms/osita/
REDIRECT : http://seraylv3.beget.tech/near/sg/ce18c0b32e0328aa61d8c9d10b1f34c6/
SCREENSHOT :


SPOOFED EMAIL : noreply@nrj.fr