Order for Sp/LLC /2015 (Virus)

Dear Sir/Madam,

It was nice to see you again. In attachment you will find the order for Sp/LLC /2015 Please first confirm the price with us. If you have any question about the changes, please ask. In attachment also the logo’s for NieZoe Woven Label new. I know the woven label NieZoe you have to take more quantity. Please let us know the quantity and price. We can use in future also.

Thank you in advance.

Met vriendelijke groet,

Best regards,

Mit Mreundlichen Krussen,
logo
Larlou Lvan Looten
Sales Manager

Nmbyerstraat Noord 162 | 6225 EJ Maastricht The Netherlands | HR14054804 VAT NL809075957B00
T 0031 43 3521470

File analysis :

SHA256 : cc4db92ec0f923c02171c746fd8417b6763257d9a2fcfd6b30818da344791ea3
Filename : Sp-LLC -2015.docx
ALYac : Gen:Variant.Kazy.679360
Ad-Aware : Gen:Variant.Kazy.679360
Arcabit : Trojan.Kazy.DA5DC0
BitDefender : Gen:Variant.Kazy.679360
DrWeb : BackDoor.Bladabindi.1056
ESET-NOD32 : a variant of MSIL/Injector.KSL
Emsisoft : Gen:Variant.Kazy.679360 (B)
F-Secure : Gen:Variant.Kazy.679360
Fortinet : MSIL/Injector.KSL!tr
GData : Gen:Variant.Kazy.679360
Kaspersky : HEUR:Trojan.Win32.Generic
MicroWorld-eScan : Gen:Variant.Kazy.679360
TrendMicro-HouseCall : TROJ_GE.856647F7

Email analysis :

NOTE : NieZoe@NieZoe.COM
NOTE : nisakorn@thai-nichi.com
NOTE : Received : from User ([UNAVAILABLE].
NOTE : [66.76.199.160]) by 0.0.0.0:25 (trex/5.4.2);

NOTE : Received : by smtp24.relay.ord1a.emailsrvr.com
NOTE : (Authenticated sender: nisakorn-AT-thai-nichi.com)

Mr.Chucks Lawson

Attn Dear Friend Good Day.

How are you today together with your family, I hope that everything is fine, I trust this mail meets you in a perfect condition. You may not understand why this mail came to you now. But if you do not remember me, you might have received an email from me last year regarding a Bank to Bank wire transfer proposal which we never concluded. I am using this medium to inform you that the Bank to Bank wire transfer business has been concluded with another person who financed it to a logical conclusion. I thank you for you're great effort to our unfinished transfer of funds into your account due to one reason or the other best known to you.

But I want to inform you that I have successfully transferred the fund out of the bank to my new partner's account in Qatar that was capable of assisting me in this great venture. Due to your effort, sincerity, courage and trustworthiness you showed during the course of the transaction I want to compensate you and show my gratitude to you with the sum of $1,700.000 USD and I left the Fund in care of my work partner who works as a manager at Western Union Office in Republic of Benin before I made my trip down here in Western Asia. I told him to be send the funds to you whenever you contact him with your full details.Western Union Agent Mr.Chucks Lawson.. contact him now for your payment, and I will advice you to ask the Western Union management what you need to do before they can allow you to receive their Western Union transfer.

Contact person: Mr.Chucks Lawson.

This is the sender's full name for the first transfer they made to you (DEBORAH ALFREDO),Ask the Western Union management to give you the MTCN (Money Transfer Control Number), Question and Answer code, to pick up transfer. from any outlet Western Union store in your city, I instructed them to keep sending you $3500 twice daily till the payment of $1,700.000 USD is completed. Again re-confirm to the Western Union management your Full Name, Telephone number and Address so that they will be sure of whom they are dealing with. For your information they can only transfer 2 parts of payments to you everyday which is $7,000. United States Dollars.

CONTACT HIM WITH YOUR FULL INFORMATION.

Full Name:--------
State:----------
City:-----------
Zip Code-------
Full Address:-------
Contact Phone:------

Try to indicate this code when contacting Western Union Management to avoid any mistake. Here is the code. (AQHoo4xx7KG) also use it as your subject. Remember without this Code they can't release any payment to you so ensure that you contact them with the Code and try to comply with their instruction. I am currently in Qatar to set up a project.Please don't forget to ask the Western Union Management what you need to do i am sure they will require a little fee from you to enable them validate your transfer file. remain bless my regards to your family.

Yours Sincerely
MR.Andy Rodriguez
Former MD Western Union Office Benin Republic.

Email analysis :

NOTE : MrChucks@blue.ocn.ne.jp
NOTE : western_union4242@qq.com
NOTE : Received : from mzcstore322.ocn.ad.jp
NOTE : (mv-osn-hcb008 [118.23.100.201]) by mv-osn-hcb008.ocn.ad.jp
NOTE : X-Originating-Ip : [41.85.176.21]

Attn:Owner Of Atm Card

Attention Owner Of Atm Card,

I have registered your ATM CARD of $6.9Million usd with a Courier Company with registration code of ( Shipment Code awb 33xzs). please Contact with your delivery information such as,

Your Name:
Your Address:
Your Telephone Number:
Your Age:

Regards,

Walter Gabriel

Email analysis :

NOTE : Attn:Owner Of Atm Card
NOTE : opwpw2@aol.com
NOTE : waltergabriel@qq.com
NOTE : Received : from HP-PC (168.1.83.70-static.reverse.softlayer.com [168.1.83.70])
NOTE : (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested)
NOTE : X-Aol-Ip : 168.1.83.70

Dane Harley

Hello,

This is Dane Harley Finance,a loan cooperate financial for real estate and any type of business financing, We offer loans to individuals, enterprises and other organizations to cooperate who need financial assistant. or have you be denied of a loan from the bank? Whether stocks down and need refinancing? Are you looking for financial assistance? I offer loan at a maximum low rate of 3%, both safe and unsecured, every interested applicant should contact us to this Email: daneharleyfinance2000@hotmail.com

First necessary information needed,

Name:
Surname:
gender:
Country:
Age:
Occupation:
The purpose of the loan
phone Number
Loan amount required as
term loan
Monthly income / annual income:

Please: After you submit your information to us, you should always endeavor to check your e-mail 2-3 times a day to read updates from us. Thank you and we look forward to working with you!

regards,
Dane Harley

Email analysis :

NOTE : daneharleyfinance2000@hotmail.com
NOTE : donaldwilson013@gmail.com

Dear Client Responds To Proceed Your Payment From Coriss Bank International !

Dear Client ,

I'm Mr. Edward Mur by name (The Chairman Treasury Federal Govt Benin Rep, I hereby to inform you in regards your duel compensated Fund valued $5,000.000.00 (Five Million US Dollars) will be transferred into your nominated Bank Account, I would advise you to contact the Director Foreign dept payment Coriss Bank International Benin Republic Mr. Micheal Antony by email send your full name, Bank details, phone numbers for them to process your fund payment transfer on your Name.

If you are interested to receive your fund, please furnish them with the following details below:

1 Your Full Name
2 Your Current Delivery Address
3 Your Confidential Phone Number
4 Copy of your ID or Drivers License
5 Occupation
6 Sex and Age
7 Marital Status

The fund offered in your name as approved by Mr President ,so Call Mr. Micheal Antony at (00229 99456773) IMMEDIATELY because a letter of approval has been granted from the President Benin Republic in supervision by Interpol police Force.

Thanks
Mr. Edward Mur

Email analysis :

NOTE : corisbk.dir.michealantony@outlook.com
NOTE : bank@themis.ocn.ne.jp
NOTE : Received : from mzcstore271.ocn.ad.jp
NOTE : (mv-osn-hkg001 [122.28.14.176]) by mv-osn-hkg001.ocn.ad.jp
NOTE : X-Originating-Ip : [41.86.234.165]

This Could be Our Best Pick Ever! (Scam sent from DoD)

Be ready for my latest pick that will multiply 248%! This is the perfect time for BLUE WATER PETROLEUM, CORP. (B WPC) as the short risks now have to be closed! Recent headlines: Blue Water amplifies its newest solution. Strength Index screams B WPC is underestimated, this can stir a huge spike on Jul 20th! Continue trading ASAP!

Email analysis :

NOTE : Received : from unknown (HELO localhost)
NOTE : (gsve@packeteer.com@164.182.92.37)

NOTE : by 82.25.203.98 with ESMTPA;
NOTE : Received : from cpc23-linc11-2-0-cust97.12-1.cable.virginm.net
NOTE : (HELO 82.25.203.98) (82.25.203.98)

NOTE : 164.182.92.37

Reflexion from Scam.cz :

Is this scam coming from DoD , and what is DoD ?

The Department of Defense (DoD, USDOD or DOD) is an executive branch department of the federal government of the United States charged with coordinating and supervising all agencies and functions of the government concerned directly with national security and the United States Armed Forces. The Department is also the largest employer in the world, with more than 2.13 million active duty servicemen and women as well as their support staff of civilian workers. Adding to the total is over 1.1 million National Guardsmen and Reservists from the four services,[b] bringing the total to just over 3.2 million employees. The Department of Defense is headed by the Secretary of Defense, a cabinet-level head who reports directly to the President of the United States. Beneath the Department of Defense are three subordinate military departments: the United States Department of the Army, the United States Department of the Navy, and the United States Department of the Air Force. In addition, four national intelligence services are subordinate to the Department of Defense: the Defense Intelligence Agency (DIA), the National Security Agency (NSA), the National Geospatial-Intelligence Agency (NGA), and the National Reconnaissance Office (NRO). Other Defense Agencies including the Defense Advanced Research Projects Agency (DARPA), the Defense Logistics Agency (DLA), the Missile Defense Agency (MDA), Defense Threat Reduction Agency (DTRA), and the Pentagon Force Protection Agency (PFPA), all of which are under the command of the Secretary of Defense. Military operations are managed by nine regional or functional Unified Combatant Commands. The Department of Defense also operates several joint services schools, including the National Defense University (NDU) and the National War College (NWC).

Is the ip 164.182.92.37 from DoD is compromised ?

This Company is Picking Up Steam!

Tanaris Power Inc will charge 1.1 billions of androids! T P-H_X will be the new Motorola. They have created the most reliable baterries!!! Big pr Friday: Tanaris Power Holdings Inc. obtains 7 hardrock ownerships in Quebec, CA!!! Purchase T P-H_X Monday prior it turns into Motorola!

Email analysis :

NOTE : lacie3597906.da8e1@pedersenco.com
NOTE : Received : from unknown (HELO localhost)
NOTE : (lacie3597906.da8e1@pedersenco.com@177.235.189.165)
NOTE : by 113.22.154.222

Prélèvement mensuel inαԁαρté CHEZ FREE (Phishing)

Phishing analysis :

NOTE : CLICK PHOTO
OPEN : http://rtolat.com/ppsd2dsr
REDIRECT : http://profavto.gorodbg.ru/images/stories/fre/freeeeeeeeeeeeeee/frebox0097/freemobs/
SCREENSHOT :

Whois analysis :

Registrant Name: Miten Bhai
Registrant Organization: RTolat
Registrant Street: Suvidha Char rasta,Ahmedabad
Registrant City: Ahmedabad
Registrant State/Province: Other
Registrant Postal Code: 380007
Registrant Country: IN
Registrant Phone: +91.9825048464
Registrant Email: mtolat@yahoo.com
Name Server: ns1000.mochahost.com
Name Server: ns2000.mochahost.com
DNSSEC:Unsigned Registrar
Abuse Contact Email: abuse-contact@publicdomainregistry.com

domain: GORODBG.RU
nserver: ns1.ruweb-nn.ru.
nserver: ns2.ruweb-nn.ru.
state: REGISTERED, DELEGATED, VERIFIED
person: Private Person
registrar: REGTIME-RU
admin-contact: https://whois.webnames.ru
created: 2009.04.28
paid-till: 2016.04.28
free-date: 2016.05.29
source: TCI

Email analysis :

NOTE : Compagnie Française de Recouvrement
NOTE : fache@serverdedicati.aruba.it
NOTE : Received : from lareche ([5.249.158.130])
NOTE : X-Mailer : Internet Mail Service (5.5.1960.3)

Rép : Proposal

Hello friend,

I found your details on the internet for an honest person, i'm Thong Sarath a cambodian developer and businessman,

Please i would like you to consider my request in this email.

I have been accused of murder of a fellow Tycoon Late Mr.Ung meng chou in 2014, i have been arrested and detained in prison pending investigation and decision of the court but i still plead my innocence.

I want you to work with my lawyer to transfer $15 million dollars from my bank account to your account on a business treaty because the government may try to freeze my accounts,you will get 30% of all transfered funds, and as soon as i'm released; i will come to meet you to collect my 70%, contact my lawyer Barrister Kea Av, his email is keaav@yahoo.com.hk

Regards,

Excellency Sarath.

---
This email has been checked for viruses by Avast antivirus software.
http://www.avast.com

Email analysis :

NOTE : thongsarath@qq.com
NOTE : keaav@yahoo.com.hk
NOTE : Received : from [36.37.244.138]
NOTE : (port=13699 helo=User)
NOTE : by vps.monchale.com.br
NOTE : with esmtpa (Exim 4.85)
NOTE : Received : from unknown (HELO vps.monchale.com.br)
NOTE : (67.23.234.96)

Re,contact my Secretary

Hello Good Friend.

I'm happy to inform you about my success in getting those funds transferred under the cooperation of a new partner from Paraguay. Presently i'm in Paraguay for investment projects with my own share of the total sum.

Now contact my Secretary,his name is MR Ruben.Smith, on his email address here as (smith_ruben@inbox.ru) ask him to send you the total ($1.2m)one million two hundred thousand dollars which i kept for your compensation for all the past efforts and attempts you try to assist me in this matter. I appreciated your efforts at that time very much only that it fail us some how. so feel free and get in touched with my secretary and instruct her where to send the amount to you.

Please do let me know immediately you receive it so that we can share the joy after all the sufferness at that time. in the moment, i am very busy here because of the investment projects which me and the new partner are having at hand, finally, remember that I had forwarded instruction to the secretary on your behalf to receive that money, so feel free to get in touch with MR Ruben.Smith, he will send the amount to you without any delay.....Do not forget to use some money inside to give thanks giving to ALMIGHTY GOD IN ANY YOUR RELIGION.....my secretary email address is is (smith_ruben@inbox.ru).

1.YOUR NAMEIN-FULL:
2:YOURRESIDENCE ADDRESS=
3:YOUROCCUPATION=
4:YOURDIRECT PHONE NUMBER=
5:YOURORIGIN=======
6:YOUR AGE=

Send an email to him with the above email and apply for your fund as i have informed him about you already.

Thanks.
Dr. Mr.Joe Wilson.

Email analysis :

NOTE : smith_ruben@inbox.ru
NOTE : ofile680@gmail.com
NOTE : www-data@troyes-expo.com
NOTE : Received : from 84.ip-176-31-185.eu
NOTE : (HELO vps23749.ovh.net) (176.31.185.84)

Зачем вам нужен лендинг и как его создать?

Привет!

Многие люди в интернете мечтают продвинуть свой или партнерский продукт. Вечная проблемма людей как продать свой товар или услугу. Где найти клиента? Как продвинуть партнерский продукт и заработать на нем?

Знакомая ситуация, не так ли...

А все банально просто, чем больше людей получит твое предложение, тем больше заказов будет лично у тебя. Не имет никакого значения, что именно ты хочешь продвинуть - электронный товар, физический товар, услугу или партнерский продукт. Важно только одно, чем больше людей знает о твоем предложении - тем выше твоя прибыль. ХОТИТЕ НАУЧИТЬСЯ ПОЛУЧАТЬ НЕИССЯКАЕМЫЙ ПОТОК КЛИЕНТОВ ИЗ ИНТЕРНЕТА? ХОТИТЕ УВЕЛИЧИТЬ ПРОДАЖИ В 100-НИ РАЗ ??? ХОТИТЕ СТАТЬ УЗНАВАЕМЫМ И ЗАЯВИТЬ О СЕБЕ ? Данную проблему отлично решает правильный персонализированный Landing Этому можно запросто обучиться глянув курс Сергея.

http://***/vzxdzi/

Если вам не удается просмотреть или отправить форму, заполните ее здесь. landing page c высокой конверсией. Пошаговое ... Вы можете отписаться от уведомлений Введите email на который больше не хотите получать письма в поле ниже и нажмите кнопку готово Никогда не используйте формы Google для передачи паролей. На платформе Google Формы Компания Google не имеет никакого отношения к этому контенту. Сообщение о нарушении - Условия использования - Дополнительные условия

Whois :

nserver: ns2.hostingru.net.
nserver: ns3.hostingru.net.
nserver: ns.hostingru.net.
state: REGISTERED, DELEGATED, VERIFIED
person: Private Person
registrar: REGRU-RU
admin-contact: http://www.reg.ru/whois/admin_contact
created: 2015.06.19
paid-till: 2016.06.19
free-date: 2016.07.20
source: TCI

Email analysis :

NOTE : forms-shares-noreply@google.com
NOTE : anovikov0007@gmail.com

[SPAM]FBI ALERT!!!

NOTE: If you received this message in your SPAM/BULK folder, that is because of the restrictions implemented by your Internet Service Provider, we (FBI) urge you to treat it genuinely.

Federal Bureau of Investigation
Anti-Terrorist And Monitory Crime Division.
Federal Bureau Of Investigation.
J.Edgar.Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C.
20535-0001, USA

Customers Service Hours / Monday To Saturday:

Attention Dear Beneficiary ,

We bring to your notice that your email address was randomly selected as email address of scammed victims who are to be compensated that is why we are in contact with you so take your time to read this information carefully. Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization, this ended 3days ago. It is obvious that you have not received your funds valued at $3.5 Million us dollars due to past corrupt Governmental Officials who almost held the funds to themselves for their selfish reason and some individuals who have taken advantage of your funds all in an attempt to swindle your funds which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the president of the United States Of America President Obama to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card? ATM Card: We will be issuing you a custom pin based ATM card of the
INTERSWITCH WORLD BANK which you will use to withdraw up to $10,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2019. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it even if you do not have a bank account. Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $380 instead of $420 saving you $40. Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever need to pay for is for the ups courier service delivery of your package which is $380 us dollars . And we guarantee the receipt of your fund to be successfully delivered to you within the next 24hrs after the receipt of payment has been confirmed. Note: Everything has been taken care of by The United Nations, Federal Bureau Of Investigation including tax offices, custom paper and clearance duty services so all you will ever need to pay is $380 which is for the ups courier service delivery of your package. DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for shipping your ATM card is $420 but because UPS have temporarily discontinued the C.O.D which gives you the chance to pay when package is delivered for international shipping We had to sign contract with them for bulk shipping which makes the fees reduce from the actual fee of $420 to $380 nothing more and no hidden fees of any sort! BELOW ARE

FEW LIST OF TRACKING NUMBERS YOU CAN

TRACK FROM (UPS) WEBSITE(http://WWW.UPS.COM)TO CONFIRM PEOPLE

LIKE YOU WHO HAVE RECEIVED THEIR PAYMENT SUCCESSFULLY.
JOHNNY ALMANTE ==============1Z2X59394198080570
GARY METZGER ==============1Z2X59394195952759
GLEN PAPANIKAS ==============1Z2X59394198690947
CAROL R BUCZYNSKI ==============1Z2X59394197862530
KARIMA EMELIA TAYLOR ==============1Z2X59394198591527
LISA LAIRD ==============1Z2X59394196641913
POLLY SHAYKIN ==============1Z2X59394198817702
MOREOVER, THIS IS ANOTHER PEOPLE THAT RECEIVED THEIR
PAYMENT THROUGH UPS WEBSITE (WWW.DHL.COM).
RICHARD AUTRY ============== 869713119185
GARY METZGER ============== 871363130860
MARK STUBBS ==============871363116168

To effect the release of your fund valued at $3.5Million us dollars you are advised to contact our correspondent,your special Fbi funds transfer agent Mr. MARK RUBEN with the
information below,

Name: Mr. MARK RUBEN
Email:agent.markruben@qq.com
mrmarkjones7@gmail.com

You are advised to contact him with the information's as stated below:

1.Full Name:......................
2.Delivery Address:......................
3.Phone:......................
4.Fax Number:......................
5.A Copy of Your Identity:......................
6.Age:......................
7.Marital Status:......................
8.Country:......................
9.Occupation:......................
10.Preferred Payment Method (ATM / Cashier Check)...............

Upon receipt of payment the delivery officer will ensure that your package is sent within 24 working hours and your funds transferred to you with immediate effect, Because we are so sure of getting a successful transfer of your funds ,giving you a 100% money back guarantee if you do not receive payment/package within the next 24hrs after you have made the payment for the UPS COURIER SERVICE DELIVERY of your package. And make sure that you keep the receipt of the $380 payment that you made because that is the prove you will show to the delivery team when they arrive at your door step with your package so as to avoid any embarrassment and setback.

Yours sincerely,
Miss Donna Gwen
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
J. Edgar. Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C.
20535-0001, USA

Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with your assigned Fbi funds transfer agent Mr. MARK RUBEN. Forward any emails you get from impostors to this office so we could act upon and commence investigation.

Email analysis :

NOTE : mrmarkjones7@gmail.com
NOTE : info@senders.com
NOTE : Received : from User (62-90-35-18.barak.net.il [62.90.35.18])
NOTE : by smtp.comercialtv.jp (Postfix) with ESMTPA

Congratulations / Your $2.5 Million Part Payment

Central Bank of Nigeria.
Legal Department
Contract / Inheritance Payments Monitoring Unit
CBN House, Garki, Abuja
Nigeria.

Dear Valued Beneficiary,

We are writing to inform you that we received a petition on your behalf concerning your unpaid contract / inheritance payment which have been long over due.We therefore wish to apologise on behalf of the Federal Government of Nigeria for the delays and all the inconveniences you might have encountered this past years trying to receive your money. However,we have been directed by the Office of the Presidency,Federal Republic of Nigeria to contact you and let you know that the sum of $2.5 Million USD (Two Million Five Hundred Thousand United States Dollars) has been approved to be paid to you as part payment for your long overdue payment with the Ministry of Finance. Your payment file with us indicates that you have a total of $15 million dollars outstanding payment.But the Office of the Presidency has approved just $2.5 million part payment to be paid to you while the balance shall be paid thereafter. Although,there is a counter email claim from one Sarah McDaniel who said you are incapacitated due to an accident you encountered and she has sent this website below as evident so as to enable us pay her instead of you.

The Website: http://www.car-accidents.com/pages/car_accident_photo.html

Meanwhile,the Management of Central Bank of Nigeria has scheduled to pay these $2.5 million USD to you through our Automated Teller Machine Card (ATM Card). We have processed and programmed the ATM Card to pay you a maximun of $20,000 (Twenty Thousand United States Dollars) everyday in any ATM Mechine in your country.We have also arranged with our accredited lawyer, Barrister Michael Idris for him to pick it up from our office for his onward delivery to your contact address. We therefore implore you to contact our Bank Accredited Lawyer immediately through his personal contact details below for the delivery of your ATM card as scheduled.

Name: Barrister Michael Idris
Email: michaelidris01@yahoo.com.hk
Phone: +2348030499249.

Please note that you are expected to pay the Lawyer the sum of $125.00usd only for the secure delivery of the ATM card to your address. Also ensure that you send these your undermentioned personal information to him.

1.Your complete Names
2.Your contact address for the delivery.
3.Your phone number.

Yours sincerely,

Angela Chinedu.
(Director of Legal Dept)

Email analysis :

NOTE : michaelidris01@yahoo.com.hk
NOTE : zone@saudimail.net
NOTE : Received : from User (unknown [173.208.184.14])
NOTE : (Authenticated sender: taeki) by taeki.kr (Postfix) with ESMTPA

hello dear

how are you,

i m glad to write you this simple sentence,please i want us to be friends,hope you don't mind? some thing about me is cooking,reading and camping,please can you tell me something about you? please waiting to read from you. i will send to you my photo

thanks and god bless you,
my regards to your family,

miss jina

Email analysis :

NOTE : jinamorgan@outlook.com
NOTE : jenamongan@yahoo.com
NOTE : Received : from [41.214.116.56]
NOTE : by web141202.mail.bf1.yahoo.com via HTTP;

MARK.O JENNY

Attention,

We have deposited the check of your fund ($7.900`000USD) through Western Union department after our finally meeting regarding your fund, All you will do is to contact Western Union director mr johnson brown via E-mail:(western.u@land.ru ).He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong
transfer such as,

Receiver's Name_______________
Address: ________________
Country: _____________
Phone Number: _____________

Though, mr johnson brown has sent $5000 in your name today so contact , you call him +229-98-5895-65 as soon as you receive this email and tell him to give you the Mtcn, sender name and question/answer to pick the $5000 Please let us know as soon as you received all your fund,

Email analysis :

NOTE : western.u@land.ru
NOTE : johnmike21@cantv.net
NOTE : Philip.Alcock@Verizon.net

From: United Nations Office..

From: Ms. Carman L. Lapointe.
UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT SERVICES
Internal Audit,Monitoring,Consulting And Investigations Division.

My name is Ms. Carman L. Lapointe, from the United Nations. It is a distinct pleasure to write you again and as you are well aware many foreigners have invested thousands of United States Dollars into Nigeria transactions in Hopeless Dreams to have none of them become a reality.

Right now, as directed by our secretary general Mr.Ban Ki-Moon, We have agreed with the Nigeria Government that One Hundred Thousand United States Dollars Only would be paid to you through the Western Union Money Transfer Via special arrangement as first installment.

This is to enable you have enough funds to pay for the Tax Clearance and bank charges before you will receive the balance of your funds. Please take note that you will pay US$185 only, being Notarization fee and this is the only financial obligation that you will undertake to receive the One Hundred Thousand United States Dollars Only through the Western Union Money Transfer.

Lastly,i will like you to reconfirm your information to me such as your full name, address and telephone number so that I will proceed with your Western Union Money Transfer within the next 24 hrs and the transaction information will be released to you.

I await your response for further proceedings.

Sincerely yours,

Ms. Carman L. Lapointe
{Under-Secretary-General}
United Nations

Email analysis :

NOTE : un.sec@aol.com
NOTE : notice@un.org
NOTE : no_reply@fcvnet.net
NOTE : 41.138.69.44 (smtp1.comtel.co.za)

Temos uma mensagem para voce - Alfa

Boleto de Cobrança Referente ao pedido: 00197742

Caro(a) cliente

Informo que a duplicata com vencimento em 05/07 no valor de R$2.554,07 não foi paga.
Faça o download da 2ª via da duplicata atualizada para pagamento.

Download boleto atualizado

Aguardamos o pagamento do boleto. O não pagamento do acordo nos prazos estabelecidos
acarretara multa e juros de mora de 0,5% (meio por cento) ao dia.

Atenciosamente.
Aldo A. Silva
Setor Financeiro.
Alfa finaceira Ltda
CNPJ: 61.198.164/0001-60

ref: 933170

[Time_long]

Virus analysis

CLICK : Download boleto atualizado
OPEN : http://bit.ly/1e0X1SA
DOWNLOAD FILE : Documento_N_908301238HAK38-31.zip
SHA256 : 50fb97d11dc2dfd85ebf2242aa8919829ac955906094f1868d13dadabda45ffe
Avast : Win32:Malware-gen
Baidu-International : Trojan.Win32.Downloader.aa
DrWeb : Trojan.MulDrop5.63051
Kaspersky : HEUR:Trojan-Downloader.Win32.Generic
Sophos : Mal/BredoZp-B

Email analysis :

NOTE : melissa.santana@trifil.com.br
NOTE : Received : from vps2477.vpsunit.com (83.125.87.89)
NOTE : 83.125.87.89 (vps2477.vpsunit.com)

Greetings From Money Gram Office.

MONEY GRAM TRANSFER SERVICE BENIN REPUBLIC.
Address; 417 Avakpa Pharmacy Port-Novo Benin Republic.
Moto. Serve to your wish

ATTENTION DEAR BENEFICIARY

Greetings From Money Gram Office.
Dated 15/07/ 2015

Please be informed that during our investigations, we discovered that you were being elected as the monthly Money Gram award winner with the prize of 5.2million united state dollars.And Your funds worth sum of $5.200,000.00 must be released immediately you get back to us,and the transfer began today through Money Gram and amount which you will be receiving each day is $7,500.00 daily. So contact the manager in Money Gram Right now with below listed inforamtion and ask him for your first payment, Money Gram offices manager name is Mr.frank Ibe , ask him what you need to do to enable them activate your account file so that you will be Able to pick your first payment contact them with your information below at (moneygramoffice3@yeah.net)

1.Your receiver's name=====
2.Your country========
3.Your cities========
4.Your telephone=======
5.Your sex/age===========
6.Your id passport=====
7.Your test question========
8.Your answer=========

Promotion Officer
YOURS SINCERELY,
Names: Mrs.Lugard,
FROM I.M.F

Email analysis :

NOTE : Usa@cocoa.ocn.ne.jp
NOTE : Received : from mzcstore252.ocn.ad.jp
NOTE : (mv-osn-hcb010.ocn.ad.jp [122.1.235.84])
NOTE : by mv-osn-hcb010.ocn.ad.jp
NOTE : X-Originating-Ip : [41.216.50.147]

ahoj

Váš e-mail vyhrál 900.000 od společnosti Microsoft, poslat jméno, zemi a telefonní číslo

Email analysis :

NOTE : amontes@rec.unicen.edu.ar
NOTE : X-Originating-Ip : [101.57.192.172]
NOTE : Received : from mail.rec.unicen.edu.ar (unknown [10.4.0.201]) by mail.rec.unicen.edu.ar (Postfix) with ESMTP

(Private & Confidential)

Attn: Beneficary,

We are pleased to inform you that the Second Batch Payment Schedule Approval Committee recently inaugurated by the International Banks for reconciliation and development (World Bank) and the International Monetary Fund (IMF) based on series of petitions received from International bodies such as cooperate bodies and Non Governmental Organization (NGO) on the inability of most Government of different Countries in the world, Commercial Banks, Probate Offices and World Lottery Organization to settle their Clients Contract Debt, Inheritance and Winning Prize Fund. After an extensive close door meeting between the boards of directors, it was resolved and agreed upon, that this body; the Second Batch Payment Schedule Approval Committee, comprised of selected intelligence officers from the Metropolitan Police and FBI will work extensively to ensure that your Unclaimed Funds will be paid to you without any hitch and delay through the World Bank and IMF Insurance Body as agreed. The total sum of $3,985,000.00 (Three Million Nine Hundred and Eighty-Five Thousand US Dollars) as initial payment has been endorsed and approved for payment to you. Being the second batch of payment issued to various individuals, Companies, and Organizations, we will delight in following the procedures in the course of payment for our first batch receivers. To safe-guard enlisted/qualified Clients/Beneficiaries from further extortion of unnecessary payments of any kind whatsoever, we have appointed, accredited and endorsed an attorney to work under our care in this regards, he is a well known activist, a human rights lawyer and knowledgeable in various fields. Be informed that your payment will come in either of the forms below..

CERTIFIED BANK DRAFT

This payment order will be in a Certified Bank Draft in that amount and can be repurchased from any bank in the world. This means is advised for those who can handle and manage such huge sums of money.

ATM VISA/MASTER CARD

This payment order will be in an ATM Visa or Master Card in that amount programmed to dispense a maximum of $5000.00USD for each use and can be used for a maximum of 4 times in a day after each 6 hours hence it can dispense a total of $24,000.00USD in a day. Instructions have been given to the endorsed paying bank in Nigeria to issue either a Certified Bank Draft or an ATM Visa/Master Card in that amount in your favor upon your receipt of your option.The reason why we have used Nigeria as the claims center is because of the reduced tendency and involvement of the Nigerian Government and the stability of the Country We advice that you establish contact with our attorney, a human rights lawyer who will render free legal services to all beneficiaries who have been listed on our second batch payment schedule. In other words, the body will take care of his flight fees, service charges and other contingencies throughout his one month stay in Nigeria until we confirm that you have received and confirmed your payments, Hence He requires no fee or charges from you the beneficiary to ensure that you are on the right track to receive your funds without being misled apart from the official Affidavit Document charges of $350 which is to be paid by you. He is very much conversant with the delivery and all international law and will perfectly guide you through under our supervision. You are to reconfirm to Dr. David Brown the following details of yours as listed below.

You can email our attorney at.
Name: Dr. David Brown
Email: drbdavid.agent@gmail.com

RECONFIRM YOUR PERSONAL INFORMATION

Full Name:
Current/Valid Residential Address:
Nominated Delivery Address:
Age:
Sex:
Occupation:
Country:
Home Cell Number:
Direct Mobile Number:
Payment Type: (CERTIFIED BANK DRAFT) (ATM MASTER CARD)
Scan Copy of your Identification (OPTIONAL)

Choose from the two option listed above Atm Master Card or Certified Bank Draft and ask her how you can send the Affidavit Document charges and how much will the Affidavit Document charges cost. Make sure that you email her immediately to notify her that you got the email and have responded to the email to enable she check her email..

Yours faithfully,
Dr Ken Rowland
System Administrator Official
M.P.H. Department

Warning: This is only meant for beneficiaries whose e-mail address is list as second batch receivers in this payment schedule, we will not entertain another person coming forward for claim of the fund meant for another in this payment schedule unless there is a valid power of attorney presented, You are also advised not to reply to this email if you have received your funds in the past as this email is specifically meant for those who have not yet gotten their prize funds within the past 5-7 years. You will be prosecuted and made to face the wrath of law if it is discovered that you have submitted any false information in this course.

Email analysis :

NOTE : drbdavid.agent@gmail.com
NOTE : postmaster@ifecdigitaldoctor.com
NOTE : Received : from User (unknown [41.138.182.249])
NOTE : by sv1510.wakasugi1511.info (Postfix)
NOTE : 133.242.225.187 (sakura01.cloud.wakasugi1511.info)

Attention,

We have concluded plans to effect payment of $4.1M, through western union, the maximum amount you will be receiving daily starting from today is$5,000USD until your funds is completely transferred,

Kindly Contact Western union Agent:
Dr Benn james
TEL: +229 62 63 83 18
E-mail:western.unionoffice2015@yahoo.com

Contact Mr Benn Adam today and request for MTCN, senders name and question/answer to pick the first $5,000USD, notify me once you receive complete funds $4.1M.

Thank you
Mr john Williams

Email analysis :

NOTE : western.unionoffice2015@yahoo.com
NOTE : HMRC.REFND@rbts.com
NOTE : Received : from mzcstore261.ocn.ad.jp (mv-osn-hcb005 [222.146.51.141])
NOTE : by mv-osn-hcb005.ocn.ad.jp

FUND STOP ORDER FROM THE PRESIDENCY

OFFICE OF PRESIDENCY FEDERAL REPUBLIC OF NIGERIA
FEDERAL REPUBLIC OF NIGERIA
OFFICE OF THE PRESIDENCY
ON FOREIGN PAYMENTS/GOVERMENT EXPENDITURE
PHASE 2, GWALGWADA,
ASO ROCK VILLA
ABUJA-NIGERIA. A

Executive President Federal Republic of Nigeria.
Auditor General Of the Federation

Attn:

STOP ORDER FROM THE PRESIDENCY

This is to bring to your notice about the due process of your outstanding contractual payment which was suspended by the Central Bank of Nigeria there by stopping the telex unit to pause the transfer of your contract fund to your nominated bank account. As a result of this development verification conducted by the Finance Ministry in conjunction with the Debt Verification Panel on your contract case file has been endorsed for payment awaiting your confirmations. In view of several efforts already made by us to contact you for the following reasons based on the new account submitted to this office on your behalf: (1) My Office desks have just received a sworn affidavit from Mr. RAINER HESSE of Germany to re-route your payment into a new bank account number as stated VACAP Federal Credit Union, 1700 Robin Hood Road, Richmond, VA 23220.Account number 32501.of Mr. RAINER HESSE. The sum of 10 Million Five Hundred Thousand US Dollars ($10,500,000.00 Usd ). (2) Please, confirm to our department if you have instructed Mr. RAINER HESSE to appoint an attorney/agent on your behalf thereby asking that he receive cash call remittance on your behalf. (3) It have come to our notice that you are being contacted by unauthorized individuals with respect to your contract payment but unfortunately this office is not aware of your unofficial dealings and warned that it is at your own risk. (4) Please, also confirm if you have authorized Mr. RAINER HESSE to change your banking particulars to the following particulars stated below: VACAP Federal Credit Union, 1700 Robin Hood Road, Richmond, VA 23220. Account number 3250163 Also re-confirm your Contract Number, Contract Amount, Private Telephone and Fax number, your Private e-mail address, Your residence Mailing Address,Your Office and home telephone Numbers, so that we can cross-check it with our file records. We have decided to contact you for re-verification because we suspected that Mr. RAINER HESSE is trying to divert your money through the sworn affidavit into a new different bank account. You are advised to call the Chairman Debt Verification Panel upon the receipt of this mail.

Yours faithfully,

Dr.Ibrahim Dankwobe
Personal Adviser.

Warning:This communiqu is from the PRESIDENTIAL BOARD OF TRUSTEE ON CONTRACT PAYMENT upon the advice of the Presidential adviser on Contract are advised to adhere strictly to directive. Any fund beneficiary who ignores instruction will be doing so at his own risk and should not blame the Federal Government Of Nigeria for non-payment of their contract funds.

FRONT DESK OF THE PRESIDENT FEDERAL REPUBLIC OF NIGERIA
Website:http://www. Nigeria.gov.ng/

Email analysis :

NOTE : presidencyfg@gmail.com
NOTE : payfgn5@outlook.com
NOTE : Received : from User (unknown [46.183.222.118])
NOTE : by makizou.com (Postfix) with ESMTPA

CONTACT JAMES MACCURRY ESQ

THIS IS NOT A SCAM.

I am Ms. Debra Jacobs from New York, United States. I'm thinking of relocating since I received my compensation payment through legal assistance of James McCurry (Esq) I was among those that partcipated in the Compensation award payment in many years ago and they failed to pay me, I have paid over US$140,000 while I was in the US, trying to get my payment all to no avail. So I decided to travel down to James McCurry (Esq) with all my compensation documents, And I was directed to meet James McCurry (Esq), who is the member of COMPENSATION AWARD COMMITEE, and I contacted him and he explained everything to me. He said whosever was contacting us for compensation without the knowledge of his office is fake and scam. He took me to the paying bank for the claim of my Compensation payment. Right now I am one of the happiest woman on earth because I have received my Compensation funds of $2,500,000.00. Moreover, James McCurry (Esq), reviewed to me the full information of those that are yet to receive their payments and I saw your email address as one of the beneficiaries, that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you. I will advise you to contact James McCurry (Esq). The money I paid to James McCurry (Esq) was not upto $300.

You have to contact him directly on this information below.

COMPENSATION AWARD HOUSE
Name : James McCurry (Esq)
Email: jamesmccurryesq@inbox.lv
Pennsylvania, USA.

Contact James McCurry (Esq) and stop dealing with any other person contacting you for compensation payment henceforth for your interest because of my experience as a victim.

Send your following information to James McCurry (Esq)

Your Full Name:...............
Direct Phone:....................
Country.................
Occupation:.....................
Gender:.........
Age:..............


Once again stop contacting those people, I will advise you to contact James McCurry (Esq) so that he can help you to compensate you instead of dealing with those liars that will be turning you around asking for different kind of money to complete your Payment.

Thank You and Be Blessed.

Ms. Debra Jacobs
49 Unger Avenue Buffalo, NY 14210 USA

Email analysis :

NOTE : jamesmccurryesq@inbox.lv
NOTE : sports@businessmirror.com.ph
NOTE : Received : from [41.138.172.189]
NOTE : (port=58089 helo=User) by server.businessmirror.com.ph
NOTE : with esmtpsa

DHL EXPRESS COURIER COMPANY BENIN REPUBLIC,

DHL EXPRESS COURIER COMPANY BENIN REPUBLIC,
BENIN REPUBLIC LOT
NO,23PATTE D'OIE 03
BP 2147, AIRPORT EXPRESS WAY/
COTONOU BENIN REPUBLIC.
OFFICE TEL +229 68809519,

Attention: Betty Davidson,

We hereby acknowledge receipt of your mail and your $3.2M in ATM MASTER CARD was programmed in line with Mr.James B, Comey the Director Of FBI Benin after the board meeting with our CEO yesterday with agenda on how to deliver your ATM MASTER CARD; your ATM MASTER CARD will be sent to you via DHL express Courier Company Benin Republic. And it will cost you only $80.00 dollar for the delivery fee. The maximum withdrawal value $18,000.00 withdrawal at a time and three times per day and you are entitle to use it 7 days in a week and all the steps to use ATM MASTER CARD was well stated in the user's Manual for your understanding, you will receive the user’s manual from the agent once he arrives in your home. It is mandatory by Mr.James B,Comey,that you sending the $80 dollar fee via the MONEY-GRAM to our accredited accountant Name:Mike Udevi .

HERE IS INFORMATION WERE YOU USE TO SEND IT THROUGH WESTERN UNION OR MONEY GRAM TRANSFER

RECEIVER'S NAME:.......MIKEL UDEVEZE
COUNTRY:...............BENIN REPUBLIC
CITY:..................COTONOU
TEXTQUESTION:..........Who is great
ANSWER:................Lord
AMOUNT:................$80.00 DOLLAR ONLY
SENDER'NAME............
MTCN PAYMENT INFORMATION:.................................?

after making payment forward the payment information to my email as soon as possible..

Rev John Collins. DIRECTOR,
DHL EXPRESS COURIER COMPANY
BENIN REPUBLIC LOT NO,23PATTE
D'OIE 03 BP 2147, AIRPORT EXPRESS WAY/
COTONOU BENIN REPUBLIC.
OFFICE TEL +229 68809519

Email analysis :

NOTE : dagent12014@gmail.com
NOTE : JERRY@friend.ocn.ne.jp
NOTE : X-Originating-Ip : [41.138.90.64]
NOTE : Received : from mzcstore522.ocn.ad.jp
NOTE : (mv-osn-hkg002 [122.28.30.180]) by mv-osn-hkg002.ocn.ad.jp

ATTN:YOUR ONLINE BANK ACCOUNT IS BEEN PROCESSED!!!

ECONOMIC & FINANCIAL CRIME COMMISSION
(EFCC) FOREIGN OPERATIONS DEPT,

Attn: Beneficiary,

I am Mr.Ibrahim Lamorde the chairman of ECONOMIC & FINANCIAL CRIME COMMISSION (EFCC). EFCC in alliance with economic community of West African states (ECOWAS) with head Office here in Nigeria. We have been working towards the eradication of fraudsters and scam Artists in Western part of Africa With the help of United States Government and the United Nations. We have been able to track down so many of this scam artist in various parts of west African countries which includes (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMEROUN AND SENEGAL) and they are all in our custody here in Lagos Nigeria. We have been able to recover so much money from these scam artists. The United Nation Anti-crime commission and the United State Government have ordered the
money recovered from the Scammers to be shared among 100 Lucky people around the globe. This email is being directed to you because your email address was found in one of the scam Artists file and computer hard disk in our custody here in Nigeria and with the information gathered from this Scam artist, we notice that you have been scammed of so much money and have decided to compensate you with a little token to recover the lost of your fund. You are therefore being compensated with the total sum $2.5 Million Dollars. We have also arrested all those who claim that they are barristers, bank officials, Lottery Agents who has money for transfer or want you to be the next of kin of such funds which does not exist. Since your name appeared among the lucky beneficiaries who will receive a compensation of US$2.5 Million, we have made arrangement to register an Online Banking through our Global Bank, where you will have full access to your Online Banking Account Fund, to transfer your fund personally to your Private Bank Account with no complication of things or questioning as the Account will be fully registered in your Name. Feel free to contact the processing officer Mr. GREG PETERS. The online Banking Processing is made much easier for you to transfer your fund to your private Bank Account personally, to avoid any delay or complication of things. With this Online Banking Transfer Processing, you can only transfer the Maximum Amount of US$500.000.00 daily/instalmentally until the total amount of your Compensated/deposited fund is transfered and completely paid to you. So you are advice to contact, processing officer MR. GREG PETERS with your provided information?s required for verification below.

CONTACT PERSON: MR.GREG PETERS.
CONTACT EMAIL ADDRESS: efccheaddepartment21@gmail.com
CONTACT TELEPHONE: +234-7013200474

Provide the information bellow to enable the processing of your Online Banking Account for deposition of your total compensated fund.

1)YOUR FULL NAME.
2)YOUR ADDRESS.
3)YOUR TELEPHONE NUMBER.
4)YOUR OCCUPATION
5)YOUR IDENTITY.
6) COUNTRY

Contact Mr. GREG PETERS with the information required for verification to enable him start the processing of your Online Banking Account Registration.

We guarantee your safety and wish you the best of luck.

Best Regard,

Mr. Ibrahim Lamorde
CHAIRMAN ECONOMIC & FINANCIAL CRIME COMMISSION
(EFCC) FOREIGN OPERATIONS DEPT,
LAGOS-NIGERIA.

NOTE: If you received this message in your SPAM/BULK folder, that is because of the restrictions implemented by your Internet Service Provider, we (EFCC) urge you to treat it genuinely.

Email analysis :

NOTE : efccgregpeters23@hotmail.com
NOTE : test@ContentFirst.Marketing
NOTE : Received : from 209-255-152-162.ip.mcleodusa.net
NOTE : ([209.255.152.162] helo=User)
NOTE : by ContentFirst.Marketing with esmtpa (Exim 4.72)
NOTE : (envelope-from < test@ContentFirst.Marketing >)

BARRISTER SAMUEL WALKER

BARRISTER SAMUEL WALKER
DIRECTOR FOREIGN OPERATION
DEPARTMENT ATM CARD
ECOBANK BANK OF NIGERIA

RE: SWIFT CREDIT CARD PAYMENT

AFTER EXTENSIVE CLOSE DOOR MEETING WITH BOARD OF DIRECTORS AND OTHER STAKE HOLDERS IN THE GOVERNMENT INCLUDING SUBCOMMITTEES OF THE HOUSE OF ASSEMBLY AND THE HOUSE OF REP FEDERAL REPUBLIC OF NIGERIA. IT WAS RESOLVED AND AGREED UPON THAT YOUR FUND WOULD BE RELEASED ON A SPECIAL METHOD OF PAYMENT, BY TAG NAME READS SWIFT CREDIT CARD. THIS METHOD OF PAYMENT IS DESIGNED BY THE GOVERNMENT TO AVERT FRAUD PERPETRATION OR STOPPAGE OF FUND BY SOME AGENCIES. EITHER THROUGH ANTI TERRORIST CERTIFICATE OR OTHER CERTIFICATES. THIS SWIFT CREDIT CARD WOULD BE ISSUED TO YOU AS SOON AS YOU RESPOND TO THIS EMAIL,THIS BANK HAS BEEN MANDATED TO TAKE CHARGE OF THE ISSUANCE OF THE SWIFT CREDIT CARD AND YOUR PAYMENT FILE SHOULD BE PASSED TO MY DESK FOR CLARIFICATION. UPON CERTIFICATION THAT YOUR PAYMENT FILE IS OK, THIS OFFICE WILL DIRECT YOU ON HOW TO RECEIVE YOUR OVER DUE FUND VIA ATM SWIFT CREDIT CARD. BUT PLEASE NOTE THAT WE CANNOT BE ABLE TO PAY YOU THE FULL PAYMENT DUE TO INADEQUATE FUND, WE WILL ONLY PAY YOU THE SUM OF $5 MILLION DOLLARS AS PART PAYMENT, PLEASE BEAR WITH US AND WE PROMISE TO MAKE AN ARRANGEMENT FOR YOUR REMAINING PAYMENT IN 5MONTHS TIMEIN THE LIGHT OF THIS AFOREMENTIONED, YOU ARE REQUIRED TO FURNISH THIS OFFICE WITH THE FOLLOWING INFORMATION:

YOUR FULL NAME:
ADDRESS:
NEXT OF KIN NAME AND YOUR DATE OF BIRTH:
YOUR TELEPHONE NUMBER:

THE CARD WOULD BE ISSUED IN YOUR FAVOUR, AND ALL YOUR INFORMATION WILL BE INSERTED INTO THE CARD. UPON COMPLETION OF THIS ISSUANCE OF THE CREDIT CARD, IT WOULD BE SEND TO YOU TOGETHER WITH THE ACCESS PIN NUMBER VIA COURIER TO YOUR RESIDENTIAL ADDRESS.

www.thebanker.com/.../520/Nigerian_Banking.html

THANKS,
YOURS FAITHFULLY,
BARRISTER SAMUEL WALKER.

Email analysis :

NOTE : barristersamwalker@gmail.com
NOTE : Received : from User (unknown [105.112.8.187])
NOTE : by yourdedicatedwebhost.com

Rép : Purchase Order

Good day,

I am Sandra Matinez from Garnet Chemicals Here in Tennessee Unites State. We am urgently in need of the attached product please send us more details and quote your best price of the product .

I are looking forward to your early reply.
Regards,

Regards
Sandra
Garnet Chemical
150 East 58th Street
Main Floor A+D Building - 10155
Tennessee, City, Chattanooga
Direct Mobile: +14237098388
Email: sandra.matinz@aol.com
Email: sandra.m@garnetchemicals.com

Purchase Order.ace

File analysis : Purchase Order.ace

SHA256 : ac5a73fa12ef31c352342af6fa0c1afc7b4731044d575dbbcff92a0ed00b3454
AVG : Luhe.Fiha.A
ESET-NOD32 : a variant of MSIL/Injector.KUC
Ikarus : Trojan.MSIL.Injector
Sophos : Mal/DrodAce-A

Email analysis :

NOTE : sandra.matinz@aol.com
NOTE : smatinz@hitachi-koki.com.sg
NOTE : Received : from [52.2.188.185]
NOTE : (account prohorova@wiegand-logistics.ru HELO WIN-POBK0T90HNH.ec2.internal)
NOTE : by backend12.aha.ru (CommuniGate Pro SMTP 4.3.11)
NOTE : Received : from aha.ru (backend12.aha.ru. [62.113.86.201])

eFax message from "unknown" - 1 page(s), Caller-ID: 1-893-787-7876

Fax Message [Caller-ID: 1-893-787-7876


You have received a 1 page fax at Fri, 17 Jul 2015 07:03:05 +0900. * The reference number for this fax is atl_did1-1400166434-62714347775-154. Click here to view this fax using your PDF reader. Please visit www.eFax.com/en/efax/twa/page/help if you have any questions regarding this message or your service.


Thank you for using the eFax service!

j2 Global | eFax | eVoice | FuseMail | Campaigner | KeepItSafe | OneBox
2014 j2 Global, Inc. All rights reserved.
eFax is a registered trademark of j2 Global, Inc.

This account is subject to the terms listed in the eFax Customer Agreement.

Virus analysis :

CLICK : atl_did1-1400166434-62714347775-154
CLICK : here
OPEN : http://descubreone.mx/securestorage/get_document.html
DOWNLOAD : A virus.
REDIRECT : https://www.efax.com/

Email analysis :

NOTE : message@inbound.efax.com
NOTE : Received : from unknown (HELO GPFSHLVXV) (119.194.222.13)
NOTE : 119.194.222.13 ()
NOTE : *@blueturtle.com.au
NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.2.0

"IMPORTANT MESSAGE TO YOU" ML

Dear Beneficiary,

We receive an email that you are dead and you ask one Dr.John mark to come and claim your FUND as your next of kin, now and he has also agreed to pay for the DELIVERY fee which is $850 so I am writing you to know if you are DEAD OR ALIVE, if you do not reply back before 12hrs we will have no Mother alternative than to believe that you are truly dead according to Dr. John mark.

After the board meeting held at our headquarters, we have resolved in finding a solution to this problem and as you may know we have arranged your payment through our SWIFT CARD PAYMENT CENTER in Europe, America and Asia Pacific which is the instruction given by The president of NIGERIA and if you are still alive you can get back to me as fast as you can or you can call me on +234-80-270-04310, so take note that every thing has been paid for it is just for the DELIVERY fee that this Dr.John mark has agreed to pay for and also if you refuse to get back to us am afraid we shall direct him to the bank where your original FUND is and they will collect the Fee from him that means that, he has written that you are dead and you ask him to come and claim the FUND on your behalf as the next of kin to you. Will send you your ATM CARD which you will use to withdraw your money in any ATM machine in any part of the world, but the maximum withdrawal is ($3,000) US dollar per day. Note that this ATM CARD of yours has been activated and a security pin code number will be issued to you from this Bank as soon as you receive your Card for a safer withdrawal. Please contacts the ATM CARD payment departments Rev Oliver Roy Park information are as below; He shall be expecting to receive your information you have to stop any further communication with anybody or office.On this regards, do not hesitate to contact him for more details and direction, and also please do update him with any new development.

Name: Rev Oliver Roy Park
Director of ATM Payment Department
Email: oliverroy.park@solution4u.com
Telephone Number: +234-80-270-04310

NOTE: For None Appearance, Do Not Contact Rev Oliver Roy Park, if you can not pay for the cost of delivery and Kindly

Reconfirm:

Please take note that you have been given just 12hours to get back to us so that we can know if you are alive, and fill the Information Below:

(1) Your Full Name:
(2) Driver License:...........
(2) Address where you want the payment center to send your ATM CARD:
(3) Phone And Fax Number:
(4) Your Next of Kin:
(5) Occupation:
(7) Age........................

We await your swift response in regard of this email we have received from Dr.John mark. Note: Because of impostors, we hereby issue you with our code of conduct, which is (GREEN) so you have to indicate this code when contacting this office.

FUND RELEASE OFFICE.
Mr Harry Owen
Regards.

Email analysis :

NOTE : oliverroy.park@solution4u.com
NOTE : info@lee.com

Attention: Sole Beneficiary,

We have finally succeeded in getting your package worth of $5.7 million out of delivery your consignment with the help of Mrs Susan White Attorney General of Federal High Court of Justice BENIN REPUBLIC which act as your foreign Attorney representative here in BENIN REPUBLIC.

So every necessary arrangement has been made successfully with the Agent William Dagar of the Consignment Box and every Documents guiding your delivery is well updated so you are advice to re-confirm your full delivery information to the Agent right now as he is currently at New Jersey International Airport? Address with your Consignment Box, As he called me this morning to inform me that he misplaced your delivery address which he had.

So you are advice to reconfirm your full delivery information to the diplomat and call him with this number or text him sms message 609-248-0671 so as to have easy conversation with him and to enable you give him full direction to get your Consignment Box delivered to you and hand you over your Consignment Box safe and sound, Furthermore you are advice to be very fast as the Agent William Dagar has no time to waste due to his flight ticket,

So the Information you are Required to Reconfirm to the Agent is as Follow.
Your Full Name
Mobile Phone Number
Current Home Address
Country
City
Nearest Airport as he is at Newark International Airport in New Jersey, right now because of the Searching and Scanning of the Consignment which made him to misplace your address

Contact person,
Name- Agent William Dagar
Contact Email: diplomant_office@yahoo.com
Contact number 609-248-0671
So contact him to deliver your Consignment box first thing tomorrow morning possibly today, So get back to us immediately you contact the Agent to make sure that your fund has getting to you without any hitch,

Regards
Mr James Mike,
+229 99742426

Email analysis :

NOTE : diplomant_office@yahoo.com
NOTE : polly@mirror.ocn.ne.jp