Sunday, May 15, 2016

Download your pending document via Dropbox 13-53-09 (Dropbox Phishing)

Hello *@*

You have a pending incoming document shared with you via Dropbox

Dropbox makes it easy to create, store and share online documents, spreadsheets and presentations.

lClick here to view shared docs.

Thanks!
- The Dropbox Team
© 2016 Dropbox

Phishing analysis :

CLICK : lClick here to view shared docs.
OPEN : http://bit.ly/1Y7zmlo
REDIRECT http://www.wmh11.conticom.pl/media/mailto/load_content.php
ADRESS BAR : Change to base64 (data:text/html;charset=utf-8;base64)
SCREENSHOT :


FORM (HTML) : http://homedecoration.pw/mickyrosay/finish.php
CLICK : Sign In
SCREENSHOT :


CLICK : Validate
REDIRECT : https://www.dropbox.com/business?_camp=email_basic&oref=e&_tk=email&_ad=39078

Email analysis :

NOTE : dm3@customerserviceprovider.onmicrosoft.com
NOTE : antcear960@gmail.com
NOTE : X-Organization : yksvextavevak21954
NOTE : X-Author : yksvextavevak21955
NOTE : X-Originating-Ip : [88.51.212.130]

Friday, May 13, 2016

PROPOSAL FOR YOU FROM DR. OFFORI ATTA

Attention: Sir,

Tel: +233203295805,

My name is Mr. Offori Atta; I am the Regional manager of AD Bank of Ghana Takoradi branch in the western Region of Ghana . I am married with two lovely kids. I am a man of peace and I don't want problems, I only hope you can assist me. I have packaged a financial transaction that will benefit you and I, as the Regional manager of AD Bank it is my duty to send in a financial report to my head office in the Capital city Accra at the end of each Business Year. On the course of the last year 2014 Business Report, I discovered that my branch in which I am the manager made Five Million Five Hundred And Twenty Thousand United State Dollars (USD 5,520,000.00) which my head office are not aware of and will never be aware of. I have placed this fund on what we call escrow call account with no beneficiary. As an officer of this Bank I cannot be directly connected to this money, so my aim of contacting you to assist me receive this money in your Bank account and get 30% of the total fund as commission though is negotiable. There are practically no risk involved, it will be a Bank to Bank Transfer, all I need from you is to stand claim as the Original depositor of this funds who made the deposit with my branch so that my head office can order the transfer to your designated Bank account. If you accept to work with me I will appreciate it very much. My private phone number and my email is the above. Call me if you think we can work together so that we can go over the details, Thank you in advance and may God bless.

Yours Truly,

Mr. Offori Atta.

Email analysis :

NOTE : offori.atta@yandex.com
NOTE : offoriy2k@gmail.com
NOTE : Received : from unknown (HELO 41-66-233-108-dedicated.4u.com.gh) (41.66.225.1)


NOTE : by ps37.suite2.arena.ne.jp (210.136.108.28)
NOTE : client-ip=210.136.108.28;

From the Former United States Ambassador to Republic of Benin

From the Former United States Ambassador to Republic of Benin

This is MR. JACK SMITH. the Former United States Ambassador to Republic of Benin, I came down here in Cotonou Benin Republic for an ECOWAS meeting and I was searching for some files that I left in this office before I left and found out that you have not received your fund, and I asked the present ambassador Mr James Knight what happened that you have not receive your fund since last year, and he said that you refused to pay the required fee for the delivery of your ATM CARD.

I'm contacting you this morning because the director of the ATM CARD center here in Benin Republic said that they will divert your ATM CARD to the Government Treasury just because that you cannot pay for the service fee of your ATM CARD which is $90.00 only according to them.But I told them to wait until I hear from you today so that I will know the reason why you rejected such amount of money $5.500.000.00 which will change your life just because of $90.00.

I want your urgent response as soon as you receive this email and explain to me the reason why you have abandon your ATM CARD because of $90.00 But if you don't need it then I can change your name to another person so that this Government will not claim this money but I know that you will love to have it.Please my dear I want to help you to receive this fund because it was a big shock to me that you have not receive your ATM CARD and withdraw your money since last year ago now and I'm very sorry for that and you will receive your fund before the end of this meeting which will take us 2 days and I will be here to monitor it until you receive your fund.

This is the information you will use to send the fee via western union transfer today.

Receiver Name==== Thomas John
Country =======Benin Republic
City ============= Cotonou
Code ============= 229
Text Question ===== When
Answer ============ Now
Amount ======== $90.00
Sender Name ====
Mtcn ====

I will wait to hear from you today with the mtcn number and also reconfirm your information. Contact me via this email- usaembasiy@gmail.com

Your Sincerely
MR. JACK SMITH
Tale: 229 68570892

Email analysis :

NOTE : usaembasiy@gmail.com
NOTE : Embassy.@ray.ocn.ne.jp
NOTE : client-ip=153.149.233.30;


NOTE : X-Originating-Ip : [173.193.202.116]

PARTENARIAT POUR INVESTISSEMENT ET CRÉDIT (PRÊT)

Bonsoir MR/MME,
Comment peut on investir dans votre pays??
Nous sommes un Groupe d'Investisseur privé en quête de Pays stable
pour investir dans les domaines porteurs dans votre pays.
Nous nous baserons sur vos conseils pour toute activité dans laquelle
nous aurons à investir, ce qui nous épargne de tous risques et nous
garantit un retour sur investissement.
Avec nous devenez des Partenaires a part entière pour de nouveaux
Horizons de réalisation.
Par ailleurs, nous décentralisons nos actions en offrant aussi des
Prêt d'un taux de 2.% à court moyens ou long terme à toutes personnes
honnêtes et sincère dans tous les domaines...

Courriel: leiningerlouisandre@gmail.com

Hello MR/MRS
How can we invest in your country ??
We are a private investor group seeking stable country
to invest in promising activities.
We consider all your advices for any activity in which
we will have to invest, so we can be sure to stay
out of all risk and we can guarantee a return on our investment.
With us become a full Partner for new Horizons implemented.
Furthermore, we also decentralize our actions by offering short or long term
Loan at 2% interest rate to honest and sincere people in all personal bizness...

Courriel: leiningerlouisandre@gmail.com

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Email analysis :

NOTE : votre-credit@financier.com
NOTE : leiningerlouisandre@gmail.com
NOTE : Received : from 41.138.89.211 ([41.138.89.211])


NOTE : by webmail.sgs-1848.de (Horde Framework) with HTTP;

Urgent response needed.


Hello,
Do not be surprise at my sudden contact. I have a business request to relate with you and I believe that you can handle this proposal with a serious mind. Upon receipt of your Reply I will send you Details.

You can include your telephone or mobile number for easy Communication.

Best Regards
John Kolbe.
Reply to my private email: jstk0147@yahoo.com

Email analysis :

NOTE : test@edmgears.com
NOTE : jstk0147@yahoo.com
NOTE : Received : from [183.224.41.32] (helo=User)


NOTE : by server1.edmgears.com

Greetings in the name of god

Dear Friend,

Greetings in the name of God,Please let this not sound strange to you for my only surviving lawyer who would have done this died late last year 2015. I prayed and got your email id from your country guestbook.I am Mrs Rose Holtsbery from London,I am 58 years old,i am suffering from a long time cancer of the lungs which also affected my brain.From all indication my conditions is really deteriorating and it is quite obvious that, according to my doctors they have advised me that i may not live for the next two months,this is because the cancer stage has gotten to a very bad stage. I was brought up from a motherless babies home was married to my late husband for twenty years without a child,my husband died in a fatal motor accident Before his death we were true believers.Since his death I decided not to re-marry,I sold all my inherited belongings and deposited all the sum of 10million dollars with a Bank. Presently, this money is still with the bank and the management just wrote me to come forward and claim my money because they have kept it for so long or rather issue a letter of authorization to somebody to receive it on my behalf since I can not come over because of my illness or they get it confiscated. Presently, I'm with my laptop in a hospital here in Switzerland where I have been undergoing treatment for cancer of the lungs. My doctors have told me that I have only a few months to live.It is my last wish to see that this money is invested to any organization of your choice and distributed each year among the charity organization,the poor and the motherless babies home. I want you as God fearing person, to also use this money to fund church,mosque, orphanages and widows,I took this decision,before i rest in peace because my time will soon be up. As soon as I receive your reply I shall give you the contact of the Bank.I will also issue you a letter of authority that will prove you as the new beneficiary of my fund before the bank.

Provide me with your information so i can send it to the bank as the new beneficiary and issue you a letter of authorization.

FULL NAMES:__________SEX: _____ AGE: ______MARITAL STATUS:_______________COUNTRY: ______ CONTACT ADDRESS: ________________________PHONE NO#___________FAX NO#_________________OCCUPATION:______________

Please assure me that you will act accordingly as I stated herein.Hoping to hear from you soon.

Mrs Rose Holtsbery

Email analysis :

NOTE : rshbry156@gmail.com
NOTE : 2055@charter.net
NOTE : Received : from ip-202-60-238-088.cyberec.com
NOTE : (HELO tomatobooks.localdomain) (202.60.238.88)


NOTE : Received : from User (localhost.localdomain
NOTE : [127.0.0.1]) by tomatobooks.localdomain (Postfix)

Thursday, May 12, 2016

RE: THE REASON WHY YOU HAVE NOT SUCCEEDED IN RECEIVING YOUR FUND

Dear Beloved Friend

RE: THE REASON WHY YOU HAVE NOT SUCCEEDED IN RECEIVING YOUR FUND

After waiting to hear from you or your Ghana partner for a long time now, I decided to make this direct approach to you as my new resolution in other not to let it be if I have anything in mind against you. I do not know if you have asked yourself why each time the release of this fund is approved, all of a sudden, the payment will be stopped or one problem or the other will come up if you have not asked this question or you do not know, this is an opportunity for me to tell you. Some time ago, your Ghanaian friends, I mean the people that introduced you to the project approached me through my dear wife who work with the Federal Ministry of Finance and requested me to assist them conclude a money transfer deal they had with you. They requested me to assist them by removing the original contractor’s name, company’s name and bank particulars from the Bank Of Ghana vetting computer and replacing them with your name and bank details in order to make you appear as the rightful beneficiary of this fund. I agreed on condition that they will pay me US$100,000.00 as soon as your name appears as the beneficiary. I did as agreed and demanded to be paid, but your friends started telling me stories, they even told me you promised to send money to me. Do you know that up till now, I have not received a single cent from them and have not set my eyes on any of them? Based on their attitude, I decided to stop the fund release movement because I cannot be denied of my right in my own office considering the risk as it might affect my job.. Secondly, I know the source of the funds that you did not execute any contract in Ghana , although I am the only person privileged to know this information and it is a fact. Why I am making this clear to you is that I can see that you are still making efforts in order to conclude this project. Now I am ready to forget the past. I do not need the US $100.000.00 any longer from you but a good compensation from your mind. I need your assurance that those colleagues will be totally kept out of this transaction. I know that none of them is aware of my new approach to you. Stop spending your money unnecessarily to Bank of Ghana Officers both here and overseas because you will not receive this money without my hand in it. I personally did the work at the beginning and only I can perform it. Finally, I need your promise that no official of the Bank of Ghana will be aware of my involvement in this regard because of my position. Now re-assure me that you will be willing to compensate me and that you will assist my wife to establish a foreign account in your country where my compensation will be lodged. Also a TT FUND RELEASE APPROVAL DOCUMENTS will be sent to you for endorsement after which I will remitthe money within 48 hours. I am a man of my word. If you are ready to conclude this business with me, kindly contact me on my so that we can have a chat over this issue once and for all. But if the reverse is the case, do not bother yourself to reach me and forget about this money.

BEST REGARDS
Dr. Usman Hassan
Chairman payment verification Panel
Email: usmhass67@gmail.com

Email analysis :

NOTE : usmhass67@gmail.com
NOTE : hgh@gmail.com

Attention: Beneficiary, (ATM Scam)

Attention: Beneficiary,

This is to bring to your notice that because of the impossibility of your fund transfer through our western union network, we have credited your total fund of $2,500,000.00 Legitimate USD into an ATM VISA card, and we have paid the delivery fee of your ATM VISA card to you, we paid it because your ATM VISA card worth of $2,500,000.00 which we have registered for deliver, has less than 16 days to expire in the custody of the UPS Company and when it expires, the money will go into federal government treasury account. For that we decided to help you pay off the money so that your ATM VISA card will not expire, because we trust that when you receive this your ATM VISA card, definitely you must pay us back and even compensate us for helping you. Like we stated earlier, the delivery charges has been paid ,therefore the only money you were advice to send to them is their official security keeping fees of $25usd every day. Like I stated earlier, the crediting re-activation, delivery and the company registration charges has been paid by me, but I did not pay their official security keeping fees since they refused, they refused and the reason is that they do not know when you are going to contact them and the demurrage might have increased by then, They told me that their official security keeping fees is $25.00 per a day , and I deposited it yesterday being 11th of May, 2016. Therefore you should contact them with the below contact information;

Company name; UPS Express Customer Service.
Logistic Manager:Mr.Stephen Daniels,
Email; ups.dhlexpresscompan@outlook.com

Try to contact them today and also send them the security official security keeping charge to avoid increasing of their fees and let me know once you receive this your ATM VISA CARD. Contact them today with your full information requested below;

Your Full Name;.......................................
Your Country;..........................................
Your Residence Home Address;..........................
A Copy of You Identification............................
Your Direct Phone ;......................................
Your Cell;.......................................
Age/Sex;.................................................

Try to indicate all this codes to them because it will prove that you are the rightful person that own the ATM visa card deposited in their custody.

Shipment Code awb :33xzs,
ATM Card Registered Code No xgt442:
Security Code sctc:2001dhx:567:
Transaction Code 233:cstc:101:33028:
Certificate Deposit code: sctc:bun.xxiv:78:01
Depositor:Mrs. Susan Mensahs
Manager of UBA Bank Plc

This is to avoid wrong delivery, do that urgent to avoid increase of their keeping fees and let us know once you receive your ATM VISA CARD.

Yours sincerely,
Mr. Stephen Daniels

Email analysis :

NOTE : dhlexpresscompan@outlook.com
NOTE : www.@ninus.ocn.ne.jp
NOTE : X-Originating-Ip : [41.74.9.27]

I am Diplomat OBI JAMES

I am Diplomatic JAMES OBI, I have correct the mistake, So I'm now take my trip back to your Country USA, the mistake was made By my Company Manager to take wrong address, by going to BRAZIL. Now I have corrected the mistaken and I have arrived back to United States Of America California. Los Angeles International Airport, Whiteman Airport (WHP) So you have to go and send the Airport Clearance Fee of $267 for your Atm card, which was loaded in United States Currency Dollars So please go right now and send the clearance fee $267 to this information as stated, Give me more direction how to take local flight or Taxi to come to your address Along with the fee of $267/ Mtcn. Hurry up, because I don't want to sleep here today, Receiver name to send it via Money Gram Or Western Union.

Receiver's Name. JEROME DJOSSA
Country. Benin Republic
City. Cotonou
Text Question. God
Text Answer. .Able
Amount $267.00
MTCN. .
Sender. .

I'm in: California. Los Angeles Whiteman Airport (WHP)
Waiting for the payment Mtcn no of the $267bfor the clearance Fee.
PH No, _+1(441)862 53425 call or sms me.
Regards:
E mail: obijames949@gmail.com
Diplomatic JAMES OBI

Email analysis :

NOTE : I am Diplomat OBI JAMES
NOTE : bureaushell@gmail.com

Wednesday, May 11, 2016

Vous avez un nouveau message (Phishing Fortuneo > Banque Populaire)

Bonjour,

Un nouveau Message est disponible sur votre Messagerie Fortuneo .

Pour le consulter, Veuiller Cliquez sur le lien ce-dessous:

https;//mabanque.fortuneo/fr/connexion

Cordialement,
l'équipe Fortuneo
Nous vous remercions de votre confiance.

My account | My itinerary | Unsubscribe | Privacy Policy | Customer Support
Expedia.ca sent this email and cannot receive replies via email. P.O. Box 47628, Toronto, ON, M3C 3S7, Canada.

Travel Industry Council of Ontario
In accordance with the Ontario Travel Industry Act, 2002, this page contains detailed information on the names, addresses, and registration numbers applicable to the providers of travel and ticket fulfillment services.

Ticket fulfillment services provided by:
Tour East Holidays (Canada) Inc., 15 Kern Road, Suite 9, Toronto, Ontario M3B 1S9.
TICO Registration No.: 50015827
Tour East Holiday (Canada) Inc., 2000 Peel Street, Suite 735 Montréal, QC H3A 2W5.
Quebec License No. 702246.


© 2016 Expedia, Inc. All rights reserved. Expedia, Expedia.ca, and the Airplane logo are trademarks or registered trademarks of Expedia, Inc. in the U.S. and/or other countries. Other product and company names mentioned herein may be trademarks of their respective owners.
(EMID: MR-CM-RFD-teid4.0-issu123-test2-langEN-versX-mcidM-segaX-segbX-segmX-SID4003962-key34080121838-paid167700948-locen_CA) (MD: 20160406054400)

Phishing analysis :

CLICK : https;//mabanque.fortuneo/fr/connexion
OPEN : http://casaruralsanmiguel.com/hkr
REDIRECT : http://13.79.168.131/populaire-1/*/index.php
SCREENSHOT :


ACTION : SELECT A REGION
REDIRECT : http://13.79.168.131/populaire-1/*/index.html
SCREENSHOT :


CLICK : Valider
REDIRECT : http://13.79.168.131/populaire-1/*/bred/index.php
SCREENSHOT :


CLICK : CONNEXION
REDIRECT : http://13.79.168.131/populaire-1/*/bred/connect.php?co=*_*
SCREENSHOT :

Email analysis :

NOTE : rs@zeturf.fr
NOTE : lkhydh@zeturf.fr
NOTE : X-Mailer : PHPMailer [version 1.73]
NOTE : Received : from l3ez.entercloudsuite.local ([185.48.33.67])

Greetings, I am Mr.Johnson Gary a banker,

Greetings, I am Mr.Johnson Gary a banker, i know that this mail will come to you as a surprise as we have never met before, but need not to worry as I am contacting you independently of my investigation and no one is informed of this communication. I need your urgent Cooperation in transferring the sum of $11.3 Million dollars immediately to your private account.The money has been here in our Bank lying dormant for years now without anybody coming for the claim of it.

The fund belong to our deceased Customer Mrs.Joy Lake who perished along with her family since January 31 2001.The Banking laws here does not allow such money to stay more than 15 years,that is the reason why i need your Cooperation in transferring the money to your bank account so that we can use it to secure the future of our both families because i don't want the money to be recalled to the bank treasury as unclaimed fund. By indicating your interest I will send you the full details on how the business will be executed. Please keep this proposal as a top secret and delete if you are not interested,

My contact Email-Johnsongary248@gmail.com
TELE NUMBERS.. +229-98896529
Best Regards,
MR.Johnson Gary.

Email analysis :

NOTE : kuurin@sound.ocn.ne.jp
NOTE : .kuurin.@sound.ocn.ne.jp
NOTE : X-Originating-Ip : [41.86.238.6]

YOU HAVE WON

Your E-MAIL ID just won 750,000 GBP in the ongoing Microsoft Promotion 2016. Send: Full Names, Address, Phone Number: msclaimsdepartment@outlook.com for claims.

Microsoft Lottery Team.

Email analysis :

NOTE : msclaimsdepartment@outlook.com
NOTE : xinwlin@uiowa.edu
NOTE : Return-Path : < xinwen-lin@uiowa.edu >
NOTE : Received : from PAZWORLDPC (197.210.227.100)
NOTE : X-Originating-Ip : [197.210.227.100]

PERSAHABATAN TAK MENGENAL JARAK

Hi,

apa kabar? senang bertemu denganmu di sini dan saya merasa senang setelah melihat profile kamu dan saya harap kita dapat berteman, dan Semoga harimu menyenangkan, God bless you dan saya harap untuk membaca pesan darimu.

thanks

Email analysis :

NOTE : infos@indonesia.com
NOTE : ms.clarita.sukaesih@gmail.com
NOTE : Received : from AdminPC (unknown [202.62.18.103])


NOTE : by smtp.internux.co.id (Postfix)

Tuesday, May 10, 2016

THE WILL OF GOD

Good day Dear Beloved,

My name is Mrs. Anna John, I am a dying woman who had decided to donate what I have to the Charities. I am 65 years old and was diagnosed of cancer about four years ago, immediately after the death of my husband; I have been touched to donate from what I have inherited from my late husband for the good work of charity rather than allow the fund to be claimed by government after my death. I will give you details once i hear back from you.continuous care of the less privileged.half of this amount would still go to you and your church as my token of thanksgiving to God.

Please reply me only with this my private email id: annajohn1@outlook.fr
Regards,
Mrs. Anna John

Email analysis :

NOTE : annajohn9@outlook.fr