Attention. Beneficiary,
We thank you for your co-operation on the successful transfer of first batch of your part payment of One Million five Hundred Thousand US Dollar ($1,500,000.00) transferred into your bank account as stated below which your NEXT OF KIN have acknowledged receipt of the fund.
NAME OF BANK: CAPITAL ONE BANK
BANK ADDRESS: N.Y. 11373, USA.
ACCOUNT NO: 580294045
ACCOUNT NAME: MARIA T. EL-ZEIN
ROUTING CODE: 021407912
SWIFT CODE: NFBKWS22
However, we write to inform you that the remaining balance of your fund has been approved for payment again and would be transferred to the same bank account as stated above which you provided in the course of the former payment received. Kindly notify us of a change in your banking information if there is any mistake before we proceed with the transfer. Please note that the transfer shall be the same way we made the first payment to you thus; telegraphic transfer and shall be confirm within three (3) banking days from the date of the transfer. Give this matter urgent attention it demands so that you can receive your payment within the time frame of the approval. You are advised to deal directly to this department is my contact email address where you can reach us(centralbnk@accountant.com).
KINDLY NOTIFY US OF ANY MISTAKE OR CHANGES IN YOUR RECEIVING BANK ACCOUNT INFORMATION IF THEY IS ANY.
Yours Faithfully,
Sir.Chucks Adagu
Secretary of Central Bank Benin
Email analysis :
NOTE : centralbnk@accountant.com
NOTE : officefile11102@gmail.com
NOTE : client-ip=209.85.220.41;
Tuesday, November 21, 2017
Deposit Notification
Deposit Notification
This is to notify you of a deposit in your favor with Arab Bank, with details below:
Transaction Type: DEPOSIT
Transaction Amount: 15,500,000.00
Transaction Currency USD
Account Number 3XX..06X
Transaction Narration WEB Dr @ 29866007-NEXT OF KIN*DEPOSIT 18006994264 800-699
Transaction Remarks 413618896864 / 000000000730
Date and Time 17-November-2017. 05:22:26
Deposit charges: 2,345.97
Cleared Balance 15,497,654.03
Uncleared 0.00
For any other inquiries and log in details to your account, please contact our Customer Fulfillment Center (CFC) at arabbnking.customerservice@yandex.com Legal This email message is confidential and for use by the addressee only. If the message is received by anyone other than the addressee, please delete it from your computer. Arab Bank does not accept responsibility for changes made to this message after it was sent. Whilst all reasonable care has been taken to avoid the transmission of viruses, it is the responsibility of the recipient to ensure that onward transmission, opening or use of this message and any attachments will not adversely affect its systems or data. No responsibility is accepted by Arab Bank in this regard and the recipient should carry out such virus and other checks as it considers appropriate.
Email analysis :
NOTE : yanagisawa@vc-s.jp
NOTE : arabbnking.customerservice@yandex.com
NOTE : Received : from c15brzfw.mwprem.net (c15brzfw.mwprem.net. [60.43.159.237])
This is to notify you of a deposit in your favor with Arab Bank, with details below:
Transaction Type: DEPOSIT
Transaction Amount: 15,500,000.00
Transaction Currency USD
Account Number 3XX..06X
Transaction Narration WEB Dr @ 29866007-NEXT OF KIN*DEPOSIT 18006994264 800-699
Transaction Remarks 413618896864 / 000000000730
Date and Time 17-November-2017. 05:22:26
Deposit charges: 2,345.97
Cleared Balance 15,497,654.03
Uncleared 0.00
For any other inquiries and log in details to your account, please contact our Customer Fulfillment Center (CFC) at arabbnking.customerservice@yandex.com Legal This email message is confidential and for use by the addressee only. If the message is received by anyone other than the addressee, please delete it from your computer. Arab Bank does not accept responsibility for changes made to this message after it was sent. Whilst all reasonable care has been taken to avoid the transmission of viruses, it is the responsibility of the recipient to ensure that onward transmission, opening or use of this message and any attachments will not adversely affect its systems or data. No responsibility is accepted by Arab Bank in this regard and the recipient should carry out such virus and other checks as it considers appropriate.
Email analysis :
NOTE : yanagisawa@vc-s.jp
NOTE : arabbnking.customerservice@yandex.com
NOTE : Received : from c15brzfw.mwprem.net (c15brzfw.mwprem.net. [60.43.159.237])
Friday, November 17, 2017
System Upgrade (Standard Bank Phishing)
Dear Valued Customer,
ACCOUNT E-MAILS ALERT
We’re sorry to inform you that we are unable to verify your account identity. In order to protect the security of your account.
We have terminated your ATM account banking session.
In order to resolve this situation,
We implore you to click on the SECURE link below to CONFIRM any possible findings.
http://bebesysalud.com/wp-includes/pomo/numsurver.php
Thank you for choosing Standard Bank.
Standrad Bank Team.
Email analysis :
NOTE : kurt.kemper@dfafrica.co.za
NOTE : info@Standarddbank.co.za
NOTE : Received : from null (za-sl-23.za.mimecast.lan [10.32.36.72]) (Using TLS)
NOTE : by za-smtp-1.mimecast.co.za
Phishing screenshot :
Phishing analysis :
CLICK : http://bebesysalud.com/wp-includes/pomo/numsurver.php
SCREENSHOT :
NOTE : Standard Bank Phishing
ACCOUNT E-MAILS ALERT
We’re sorry to inform you that we are unable to verify your account identity. In order to protect the security of your account.
We have terminated your ATM account banking session.
In order to resolve this situation,
We implore you to click on the SECURE link below to CONFIRM any possible findings.
http://bebesysalud.com/wp-includes/pomo/numsurver.php
Thank you for choosing Standard Bank.
Standrad Bank Team.
Email analysis :
NOTE : kurt.kemper@dfafrica.co.za
NOTE : info@Standarddbank.co.za
NOTE : Received : from null (za-sl-23.za.mimecast.lan [10.32.36.72]) (Using TLS)
NOTE : by za-smtp-1.mimecast.co.za
Phishing screenshot :
Phishing analysis :
CLICK : http://bebesysalud.com/wp-includes/pomo/numsurver.php
SCREENSHOT :
NOTE : Standard Bank Phishing
Account status has been changed (invoice 02574) (PayPal Phishing)
Dear PayPal Customer ,
We detected something unusual about a recent sign-in for the PayPal account . For example, you might be signing in from a new location, device, or app.
To help keep you safe, we've blocked access to your PayPal account , Billing Info, and calendar for that sign-in. Please review your recent activity and we'll help you take corrective action. To regain access, you'll need to confirm that the recent activity was yours.
Review recent activity
Thanks,
The PayPal account team
Copyright© 1996-2017 PayPal.com, Inc. All right reserved
Email analysis :
NOTE : support@vweb12.nitrado.net
NOTE : Received : by vweb12.nitrado.net
Phishing screenshot :
Phishing analysis :
CLICK : Review recent activity
OPEN : www.update-service.clanonzj.beget.tech/
REDIRECT : http://www.update-service.clanonzj.beget.tech/*/login.php?cmd=_account-details&session=*
SCREENSHOT :
NOTE : FILL FAKE INFO
REDIRECT : http://www.update-service.clanonzj.beget.tech/*/Billing.php?cmd=_account-details&session=*&dispatch=*
SCREENSHOT :
NOTE : PayPal Phishing
We detected something unusual about a recent sign-in for the PayPal account . For example, you might be signing in from a new location, device, or app.
To help keep you safe, we've blocked access to your PayPal account , Billing Info, and calendar for that sign-in. Please review your recent activity and we'll help you take corrective action. To regain access, you'll need to confirm that the recent activity was yours.
Review recent activity
Thanks,
The PayPal account team
Copyright© 1996-2017 PayPal.com, Inc. All right reserved
Email analysis :
NOTE : support@vweb12.nitrado.net
NOTE : Received : by vweb12.nitrado.net
Phishing screenshot :
Phishing analysis :
CLICK : Review recent activity
OPEN : www.update-service.clanonzj.beget.tech/
REDIRECT : http://www.update-service.clanonzj.beget.tech/*/login.php?cmd=_account-details&session=*
SCREENSHOT :
NOTE : FILL FAKE INFO
REDIRECT : http://www.update-service.clanonzj.beget.tech/*/Billing.php?cmd=_account-details&session=*&dispatch=*
SCREENSHOT :
NOTE : PayPal Phishing
Verify Your PayPal Account! (PayPal Phishing Attempt)
Dear PayPal user,
This is an automatic message by the system to let you know that you have to confirm your account information within 48 hours. Your account has been frozen temporarily in order to protect it.
To proceed to confirm your account information please click on the link below and follow the instructions that will be required.This will help protect you in the future. The process does not take more than 3 minutes.
Confirm your account
Click here to verify
Once you have updated your account records, your information will be confirmed and your account will start to work as normal once again.
Sincerely,
PayPal Account Review Department
(Case ID #PP-003-498-237-832)
Email analysis :
NOTE : sal.moncalieri@engim.it
NOTE : Received : from zimbra.engim.it (zimbra.engim.it [192.168.67.112])
NOTE : 192.168.67.112
Phishing screenshot :
Phishing analysis :
CLICK : Click here to verify
OPEN : http://rederswhitesincs.com/secure_pp
RESULT : PayPal Phishing attempt
This is an automatic message by the system to let you know that you have to confirm your account information within 48 hours. Your account has been frozen temporarily in order to protect it.
To proceed to confirm your account information please click on the link below and follow the instructions that will be required.This will help protect you in the future. The process does not take more than 3 minutes.
Confirm your account
Click here to verify
Once you have updated your account records, your information will be confirmed and your account will start to work as normal once again.
Sincerely,
PayPal Account Review Department
(Case ID #PP-003-498-237-832)
Email analysis :
NOTE : sal.moncalieri@engim.it
NOTE : Received : from zimbra.engim.it (zimbra.engim.it [192.168.67.112])
NOTE : 192.168.67.112
Phishing screenshot :
Phishing analysis :
CLICK : Click here to verify
OPEN : http://rederswhitesincs.com/secure_pp
RESULT : PayPal Phishing attempt
Subscribe to:
Posts (Atom)