vous avez un message (Phishing CIC)

CI C

Cher(e) Client(e),

Lors de votre dérnier achat, vous avez été averti par un message vous informant de l'obligation d'adhérer à la nouvelle réglementation concernant la fiabilité pour les achats par C.B sur internet et de la mis en place d'un arrét pour vos futurs achats Or, nous n'avons pas, ce jour , d'adhésion de votr part et nous sommes ou regret de vous informer que vous pouvez plus utiliser votr cart sur internet

Adhésion : cIiquant ici

Merci de la confiance que vous nous témoignez

Cordialement

Conseil d'administration

Email screenshot :

Email analysis :

NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < iidheldo@meo.fr >
NOTE : Received : from meo.fr ([84.39.48.4])
NOTE : Received : by meo.fr (Postfix, from userid 33)
NOTE : X-Php-Originating-Script : 0:LKJDKJFD.php
NOTE : vous avez un message

Phishing Analysis :

CLICK : Adhésion : cIiquant ici
OPEN : http://jupiterapparel.com/slk
REDIRECT : http://aidyourlifestyle.com/cgi-sys/suspendedpage.cgi
RESULT : Phishing attempt

Domain analysis :

Domain Name:aidyourlifestyle.com
Registrant Name:Zhern Je Lee
Registrant Country:my
Registrant Phone:+601.0000000
Registrant Email:leezhernje@gmail.com
Admin Name:Zhern Je Lee
Admin Email:leezhernje@gmail.com
Tech Name:Zhern Je Lee
Tech Email:leezhernje@gmail.com
Name Server:NS1011.NEWIPDNS.COM
Name Server:NS1012.NEWIPDNS.COM
====================================
Domain Name: jupiterapparel.com
Registrant Name: Jupiter Apparel
Registrant Organization: Jupiter Apparel
Registrant Street: A - 31, Ram Nagar, Om Vihar
Registrant City: New Delhi
Registrant State/Province: Delhi
Registrant Postal Code: 110059
Registrant Country: IN
Registrant Phone: +91.25334910
Registrant Fax: +91.25331259
Registrant Email: anshul@gsspl.com
Admin Name: Jupiter Apparel
Admin Organization: Jupiter Apparel
Admin Street: A - 31, Ram Nagar, Om Vihar
Admin City: New Delhi
Admin State/Province: Delhi
Admin Postal Code: 110059
Admin Country: IN
Admin Phone: +91.25334910
Admin Fax: +91.25331259
Admin Email: anshul@gsspl.com
Tech Name: Jupiter Apparel
Tech Organization: Jupiter Apparel
Tech Street: A - 31, Ram Nagar, Om Vihar
Tech City: New Delhi
Tech State/Province: Delhi
Tech Postal Code: 110059
Tech Country: IN
Tech Phone: +91.25334910
Tech Fax: +91.25331259
Tech Email: anshul@gsspl.com
Name Server: ns63.domaincontrol.com
Name Server: ns64.domaincontrol.com

Régler votre Situation (Phishing Boursorama)

Bonjour,

Suite au double payement d'une facture par erreur sur votre compte. veuillez completer votre formulaire de remboursement, Pour consulter, Veuiller cliquez sur le lien ce-dessous :

Régler votre situation

Nous vous remercions de votre confiance.

Ce courriel vous a été envoyé par un système automatique d'émission de messages. L'adresse d'émission n'est pas une adresse de courriel classique. Si vous écrivez à cette adresse, votre message ne sera pas pris en compte

Sboursorama| Cl to view the online version

Email screenshot :

Email analysis :

NOTE : X-Php-Originating-Script : 0:lc.php
NOTE : www-data@zankyou.fr
NOTE : aa@zankyou.fr
NOTE : Received : by zankyou.fr (Postfix, from userid 33)
NOTE : Received : from zankyou.fr ([185.107.213.201])

Phishing analysis :

CLICK : Régler votre situation
OPEN : http://inter-mask.com/br.php
REDIRECT : http://inter-mask.com/cgi-sys/suspendedpage.cgi
RESULT : Phishing attempt.

Domain analysis :

Domain Name: inter-mask.com
Registrant Name: Gulshan Nadeem
Registrant Organization: AQC
Registrant Street: Pacca Garah
Registrant City: Sialkot
Registrant State/Province: Punjab
Registrant Postal Code: 51310
Registrant Country: PK
Registrant Phone: +92.3006146147
Registrant Fax: +92.3006146147
Registrant Email: gnadeem786@gmail.com
Admin Name: Gulshan Nadeem
Admin Organization: AQC
Admin Street: Pacca Garah
Admin City: Sialkot
Admin State/Province: Punjab
Admin Postal Code: 51310
Admin Country: PK
Admin Phone: +92.3006146147
Admin Phone Ext:
Admin Fax: +92.3006146147
Admin Email: gnadeem786@gmail.com
Tech Name: Gulshan Nadeem
Tech Organization: AQC
Tech Street: Pacca Garah
Tech City: Sialkot
Tech State/Province: Punjab
Tech Postal Code: 51310
Tech Country: PK
Tech Phone: +92.3006146147
Tech Phone Ext:
Tech Fax: +92.3006146147
Tech Email: gnadeem786@gmail.com
Name Server: ns1.vnameu.net
Name Server: ns2.vnameu.net

24-06-2016 -- Facture n° 11-543167929 (Phishing Free)

Free Mobile

Chèr(e) Freenaute,

Vous êtes abonné au forfait Free Haut Débit.

Conformément à la facture n° 11-543167929 établie le 10 jun 2016

nous avons émis une demande de prélèvement auprès de votre établissement bancaire.

Il semble que ce prélèvement ait été refusé par votre banque pour le

motif suivant : "Absence de provision ou provision insuffisante (20)"

Afin de régulariser votre situation au plus vite auprès de nos services,

nous vous remercions de bien vouloir nous faire parvenir votre règlement :

- par chèque, établi à l'ordre de Free Haut Débit (veuillez ne pas

oublier de mentionner le numéro de téléphone de la ligne concernée au dos du chèque),

à l'adresse suivante : Free Haut Débit 75371 PARIS CEDEX 08

- ou par carte bancaire, directement en ligne à l'adresse suivante :

http://www.free,fr/login/compte/facture_n11-553167929/

Persuadés qu'il ne s'agit que d'un incident isolé, nous vous prions de

bien vouloir procéder à la régularisation de votre situation dans les

meilleurs délais afin d'éviter l'ouverture d'une procédure de recouvrement

consécutive à l'impayé.

Vous avez la possibilité de consulter vos factures en ligne à tout moment

à l'adresse http://www.free.fr/

L'équipe Free Haut Débit.

FAQ : http://www.free.fr/faq/"

Email screenshot :

Email analysis :

NOTE : freemobilesupport@ovh.com
NOTE : Mime-Version : 1.0
NOTE : X-Sid-Pra : freemobilesupport@ovh.com
NOTE : Authentication-Results : hotmail.com; spf=neutral
NOTE : (sender IP is 212.227.17.10)

NOTE : Received : from serv567468 ([13.69.255.41])

NOTE : by mrelayeu.kundenserver.de (mreue103)

Phishing analysis :

CLICK : http://www.free,fr/login/compte/facture_n11-553167929/
OPEN : http://www.iab.una.py/images/imagenes/r13/r3.html
REDIRECT :

https://gator2011.hostgator.com/~contacte/espace.mobile.free.fr.moncompte/login/*/

REDIRECT :

https://gator2011.hostgator.com/~contacte/espace.mobile.free.fr.moncompte/login/*/moncompte/index.php?clientid=*&default=*

SCREENSHOT :

CLICK : Se connecter

CLICK : Ajouter ma carte bancaire

CLICK : Confirmer ma carte bancaire
REDIRECT :

https://gator2011.hostgator.com/~contacte/espace.mobile.free.fr.moncompte/login/*/moncompte/send.php

SCREENSHOT :

REDIRECT : http://portail.free.fr/

The crisis has finished! Work with us!

Hello!

We are looking for employees working remotely.

My name is Lynette, am the personnel manager of a large International company. Most of the work you can do from home, that is, at a distance. Salary is $2500-$5000. If you are interested in this offer, please visit Our Site

Best regards!

Email analysis :

NOTE : Received : from adsl.viettel.vn (unknown [115.79.167.71])

NOTE : client-ip=115.79.167.71;
NOTE : User-Agent : Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.17)
NOTE : Gecko/20110414 Thunderbird/3.1.10
NOTE : vr6.mail.ovh.net [149.202.197.43]

Attn: Consignment Box Owner.

Attn: Consignment Box Owner.

Sorry for this unexpected message to you. I am Richard Paul, a Security Manager at the Dayton International Airport, Dayton Ohio, USA. During a recent routine check at all Security/Storage Units at the airport, I discovered an abandoned shipment in your name coming from Nigeria which was on Transit to your city but was intercepted by the Dayton International Airport Security for lack of proper clearance papers as the consignment was scanned and discovered to contain valuable cash between US$4.5Million US Dollars in estimation that was not properly declared to the authorities since the tags on the consignment showed the item contains Personal Belongings/ Family Treasures which is not in regulations to the delivery requirements by The Transportation Security Administration (TSA) so in this regards, the consignment was placed on hold until proper clearances are provided by a reliable Government source. The details on the consignment are tagged as:

Type: SUITCASE
Wheels: 4 wheels
Handles: Trolley handle with top & side handles
Approximate Dimensions: Height: 3.20 ft, Width: 2.50 ft, Depth: 1.90 ft.
Weight: 180lbs.

However, be informed that the reason I have taken it upon myself as a Security Manager at the Dayton International Airport to contact you personally about this abandoned shipment is because I am a GOD fearing man and i would not want you to loose your consignment box since the box has not yet been returned to the United states Treasury Department for further inspection after being abandoned by the shipper so immediately the confirmation is made, I will go ahead with all negotiations with the airport authorities for the release of the consignment box to me as your representative so I can arrange for the delivery to your city since the encoded Tag on the Bill of entry for the consignment was declared as personal effect so the reconciliation of Correct Manifest information as Valuable cash in the new Bill of entry is needed before the release can be implemented.

Lastly, to enable me confirm if you are the actual recipient of this consignment Box, I will advise you get back to me as quick as possible and re-confirm your address so that i can be sured that the box is going to the rightful owner, also list the closest airport to you to enable me cross check if it corresponds with the address on the official documents including the normalization of your Bill of Entry and arrange for the box to be moved out of this Airport to your address. Once we are through with this process.

Please confirm your information:

1.Full Names:
2.Home Address:
4.Country:
5.Your Cell Number/Home:

For confidentiality purposes,i will advise you to email my private email, for quick processing and response to you, kindly send and confirm your details to my private email account ( richarddppaul@gmail.com ) so we can act swiftly.

Regards,
Richard Paul
Security/Inspection Manager
Dayton International Airport
3600 Terminal Dr, Dayton, OH 45377, United States.

Email analysis :

NOTE : richarddppaul@gmail.com
NOTE : admin@wx163.cn
NOTE : Received : from [107.150.49.199];

APPROVED BY UNITED NATIONS.

INTERNATIONAL FUNDS AUDIT UNIT
UNITED NATIONS LIAISON OFFICE NEW-YORK, USA
870 UNITED NATIONS PLAZA 20-A NEW YORK NY 10017
OUR REF: US/NF/UN/XX2016

FUND US1.5MILLION APPROVED BY UNITED NATIONS

Attn Beneficiary,

We write to inform you that Series of meetings have been held over the past 2weeks with the Secretary General of the United Nations Organization, International Community Board and U.S.Department of State and Africa Union Organization this ended last week. During the meeting, this organization discovered that you have not received your funds due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The International Community Board Committee enhanced by the United Nations/ U.S.Department of State and Africa Union Organization have successfully passed a payment mandate release order to the Bank to clear all over due Contract funds, Lottery winnings and Inheritance funds owed to you and other individuals and organizations who have been found not to have receive their funds. Note that your payment file submitted to the Bank in question is 1.5Million U.S Dollars. In order to know you are ready to receive your approved fund, you are strictly advice to furnish us with the below information for us to cross check in our payment file if is correct, and after all verification, we will then direct you on how to contact the Bank for your fund payment to you.

1. Your Full Name:
2. Address:
3. Home/Cell Phone:
4. Age and Marital Status:
5. Occupation:
6. Any Identification like Int'l Passport/Driver License:

We expecting your urgent response to this email to enable us monitor this payment effectively.

Yours faithfully

Mrs.Theresa Lewis

Assistance Secretary United Nation

Email analysis :

NOTE : lewistheresa@yandex.com
NOTE : qaz@opgufyigfhypooj.tk
NOTE : X-Originating-Ip : [109.74.203.116]

Vous avez un message (Phishing Crédit Agricole)

Bonjour,

Un nouveau message est disponible sur votre messagerie.

Pour le consulter, Veuiller Cliquez sur le lien ce-dessous:

Cliquez ici

Nous vous remercions de votre confiance.

Ce courriel vous a ete envoye par un systeme automatique d emission de messages.
L adresse d emission n est pas une adresse de courriel classique.
Si vous a cette adresse, votre message ne sera pas pris en compte

Email screenshot :

Email analysis :

NOTE : noreply@nrj.fr
NOTE : X-Dinascanner : Este E-Mail no ha sido analizado.
NOTE : Return-Path : < generalconsultora@vl927.dinaserver.com >
NOTE : X-Dinascanner-From : generalconsultora@vl927.dinaserver.com
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 8bit
NOTE : X-Mailer : PHPMailer [version 1.73]
NOTE : Content-Type : text/html; charset="iso-8859-1"
NOTE : Received : from vl927.dinaserver.com ([82.98.176.158])
NOTE : Received : by vl927.dinaserver.com (Postfix, from userid 1004)
NOTE : Vous avez un message

Phishing analysis :

CLICK : Cliquez ici
OPEN : http://www.conseiller-fr-ca.com/zdh//
REDIRECT : http://id-ca-secure.com/login/*/particulier.html?agricole=_banque-run&secure=*
NOTE : THIS PHISHING IS SIMILAR TO THIS PHISHING.
NOTE : SWITCH TO DOMAINS ANALYSIS.

id-ca-secure.com whois :

Domain Name: ID-CA-SECURE.COM
Registry Domain ID: 2035899334_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.vodien.com
Registrar URL: www.vodien.com
Updated Date: 2016-06-17T04:18:07Z
Creation Date: 2016-06-17T04:18:06Z
Registrar Registration Expiration Date: 2017-06-17T04:18:06Z
Registrar: Vodien Internet Solutions Pte Ltd
Registrar IANA ID: 1912
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registrant Name: Josceline BRIALLON
Registrant Organization: N/A
Registrant Street: 23 rue Jeanne d'Arc
Registrant City: Paris
Registrant State/Province: Paris
Registrant Postal Code: 75001
Registrant Country: FR
Registrant Phone: +33.0152896325
Registrant Email: zszeos@gmail.com
Registry Admin ID:
Admin Name: Josceline BRIALLON
Admin Organization: N/A
Admin Street: 23 rue Jeanne d'Arc
Admin City: Paris
Admin State/Province: Paris
Admin Postal Code: 75001
Admin Country: FR
Admin Phone: +33.0152896325
Admin Email: zszeos@gmail.com
Registry Tech ID:
Tech Name: Josceline BRIALLON
Tech Organization: N/A
Tech Street: 23 rue Jeanne d'Arc
Tech City: Paris
Tech State/Province: Paris
Tech Postal Code: 75001
Tech Country: FR
Tech Phone: +33.0152896325
Tech Email: zszeos@gmail.com
Name Server: ns1.singaporehost.sg
Name Server: ns2.singaporehost.sg
Name Server: ns3.singaporehost.sg
DNSSEC:Unsigned
Registrar Abuse Contact Email: domain@vodien.com
Registrar Abuse Contact Phone: +65.62886264

conseiller-fr-ca.com whois :

Domain Name: CONSEILLER-FR-CA.COM
Registry Domain ID: 2035898903_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.vodien.com
Registrar URL: www.vodien.com
Updated Date: 2016-06-17T04:09:26Z
Creation Date: 2016-06-17T04:09:25Z
Registrar Registration Expiration Date: 2017-06-17T04:09:25Z
Registrar: Vodien Internet Solutions Pte Ltd
Registrar IANA ID: 1912
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Josceline BRIALLON
Registrant Organization: N/A
Registrant Street: 23 rue Jeanne d'Arc
Registrant City: Paris
Registrant State/Province: Paris
Registrant Postal Code: 75001
Registrant Country: FR
Registrant Phone: +33.0152896325
Registrant Email: zszeos@gmail.com
Registry Admin ID:
Admin Name: Josceline BRIALLON
Admin Organization: N/A
Admin Street: 23 rue Jeanne d'Arc
Admin City: Paris
Admin State/Province: Paris
Admin Postal Code: 75001
Admin Country: FR
Admin Phone: +33.0152896325
Admin Email: zszeos@gmail.com
Registry Tech ID:
Tech Name: Josceline BRIALLON
Tech Organization: N/A
Tech Street: 23 rue Jeanne d'Arc
Tech City: Paris
Tech State/Province: Paris
Tech Postal Code: 75001
Tech Country: FR
Tech Phone: +33.0152896325
Tech Email: zszeos@gmail.com
Name Server: ns1.singaporehost.sg
Name Server: ns2.singaporehost.sg
Name Server: ns3.singaporehost.sg
DNSSEC:Unsigned

Disposition á propos de votre CB (Phishing Crédit Agricole)

Bonjour,

Suite á une erreur sur votre dernier achat.

Merci de bien vouloire regler votre dossier.

Veuiller Cliquez sur le lien ce-dessous:

Cliquez ici

Nous vous remercions pour votre confiance.
Cordialement,

Conseil d'administration.

Email screenshot :

Email analysis :

NOTE : aaaaa@leslipfrancais.fr
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < www-data@leslipfrancais.fr >
NOTE : Received : from leslipfrancais.fr ([162.243.248.84])

NOTE : Received : by leslipfrancais.fr (Postfix, from userid 33)
NOTE : X-Php-Originating-Script : 0:galiane.php
NOTE : Message-Id : < *.*@leslipfrancais.fr >
NOTE : Disposition á propos de votre CB

Phishing analysis :

CLICK : Cliquez ici
OPEN : http://enter-ac.com/staff.php
NOTE : Phishing was an attempt and account was suspended.

Hello Dearest (Scam)

Hello Dearest

My name is susan, I saw your profile at Facebook and admire it, Please sorry for my embarrassment, I was only interested and wanted to know if we can develop honest relationship. I wish if is the will of God, we can start from here. But For better presentation kindly reach me back (susannabraham@hotmail.com) for more communication, As i did not say much about myself here,

Please reply to my PRIVATE email so that i can send you my photos and my details, I have a reason of contacting you, I have something very important to share with you, Please kindly write me through my email so that i will tell you the reason why i contacted you, here is my email, (susannabraham@hotmail.com) Hoping To Hear From You ,

Yours Susan

Abraham.

Email analysis :

NOTE : susannabraham@hotmail.com
NOTE : Received : from mail.undip.ac.id (localhost [127.0.0.1])
NOTE : by smtp.undip.ac.id (vPostMaster)
NOTE : Received : from smtp.undip.ac.id (rinjani.undip.ac.id. [182.255.0.91])

NOTE : User-Agent : Roundcube Webmail/RCMAIL_VERSION

smtp.undip.ac.id analysis :

OPEN : undip.ac.id
REDIRECT : http://www.undip.ac.id/v2/
SCREENSHOT :

TWITTER : @univ_diponegoro

18-06-2016 -- Mise a jour important (Phishing Crédit Agricole)

La Banque Postale

Votre situation

Bonjour,
Lors de votre dernier achat , vous avez été averti par un message vous informant de l'obligation d'adhérer à la nouvelle réglementation concernant la fiabilité pour les achats par C.B. sur internet et de la mise en place d'un arrêt pour vos futurs achats. Or, nous n'avons pas, ce jour, d'adhésion de votre part et nous sommes au regret de vous informer que vous pouvez plus utiliser votre carte sur internet.
.
Adhésion : Cliquez-ici

Nous vous remercions de la confiance que vous nous témoignez.
Cordialement,

CREDIT AGRICOLE

© CREDIT AGRICOLE 2016

Email screenshot :

Email analysis :

NOTE : creditagricoleinfo@ovh.com
NOTE : Mime-Version : 1.0
NOTE : X-Sid-Pra : creditagricoleinfo@ovh.com
NOTE : Content-Type : text/html; charset=utf-8
NOTE : Received : from lilyoude ([40.115.42.121])

NOTE : by mrelayeu.kundenserver.de
NOTE : 18-06-2016 -- Mise a jour important

Phishing analysis :

CLICK : Cliquez-ici
OPEN : http://www.iab.una.py/images/imagenes/r11/r13.html
REDIRECT : http://important.mise.a.jour.credit.agricole.identification-panel.com/login/*/particulier.html?agricole=_banque-run&secure=*
SCREENSHOT :

CLICK : Confirmer
REDIRECT : http://important.mise.a.jour.credit.agricole.identification-panel.com/login/*/information.php
SCREENSHOT :

CLICK : Valider / Confirmer
REDIRECT : http://important.mise.a.jour.credit.agricole.identification-panel.com/login/*/email.php
SCREENSHOT :

CLICK : Valider / Confirmer
REDIRECT : https://www.credit-agricole.fr/

Greetings to you from the DHL COURIER SERVICES WORLD WIDE

DHL OF NIGERIA Ltd
c913/3North Ridge Crescent Road
North Ridge, P.O Box 207 NIGERIA
E-Mail: revyoungmike@gmail.com

Dear

Greetings to you from the DHL COURIER SERVICES WORLD WIDE, we are writing to inform you that your ATM CARD was brought to our office in NIGERIA his Evening from the Bank Of US at about 3:37pm our time to be delivered to you this mouth 2016 my name, is Rev Mike Young, You are inspected to send your delivery address to us for delivery to commence. I was told by the director of Bank of US that this ATM card is given to you as a compensation to you due to the delayed of your Unclaimed Fund / Inheritance, also we discovered that your Parcel has been unnecessarily Delayed by corrupt officials in NIGERIA. The ATM Card are two each of them is Value is $5.500,000 USD Only . You are advised that a maximum withdrawal value of US$1,500.00 is permitted daily from any ATM machine that has the VISA Card Logo on it and the card have to be renewed in 4 years time which is 2019. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account. Please note that the ATM card is well packaged and cannot be opened because it is protected with a hard cover an insurance policy which makes it impossible for it to be used by any individual except by you the rightful beneficiary. All verifications has been made and you are the sole beneficiary of the funds, you are advice to pay the delivery charges of $85.usd to get your parcel deliver to you within 24 hours.

24 hours Delivery

Mailing……………….. $30.00
Insurance…………. $35.00
Vat (5%)……………..$20.00
Total…………………..$85.00

Payment of $85,usd should be sent to the DHL account officer from any Western Union Money Transfer or Money Gram Money Transfer location nearest to you, As soon as payment is confirm, you will be sent the tracking number to ascertain status of your card shipment..

DESCRIPTION OF PARCEL:

ATM card/original certificate of weight :—–0.20kg
Bonded draft of weight :——————0.17kg
Total weight of parcel :——————–0.37kg
Color of Parcel :—————————-Dark Brown
Length of days :——————————24hours
Delivery Type:——————————-Premium Service
Delivery Status:——————————Virtual Pending
Customer Number:————————–FRAl45771001

Your parcel contains the following documents:

1.Two Visa CARD VALUED THE SUM OF $5.500,000 USD Only
2.CLEAR SOURCE OF FUNDS CERTIFICATES(C.S.F.C…)
3.CERTIFICATES OF ORIGIN OF FUNDS(C.O.F.)

These documents have been securely sealed and packed for security reasons which makes it impossible for anyone to view it until its been delivered to you. Immediately you make the payment delivery is set to take place. please you are advice to send your delivery address to us in time so use the below information to make the payment of the $85.usd so that your package will be deliver to you ASAP. Below is the delivery details needed from you

Your full Name..
Your Delivery Address:..............
Home/Cell Phone:..............

Upon receipt of payment the delivery officer will ensure that your package is sent within 24 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next 24hrs after you have made the payment for shipping.

Receive's Name..........................OGWU VICTOR
Country........................................Nigeria
Test Question..............................In God
Answer.........................................We Trust
Amount...........................................$85.Dollars

I am waiting to hear from you as soon as your make the payment.
With best regards from the DHL COURIER SERVICE

REV. YOUNG MIKE

Dispatch Manager

DHL delivery service

we shall be communicating through email until you received the cards.

Email analysis :

NOTE : revmikeyoung@qq.com
NOTE : audrey@speedy.com.ar

From Dr.Isabella Jefferson

Hello dear friend,

I'M Dr.Isabella Jefferson I am a UNITED STATE MILITARY NURSE From united state of America. Am supportive and caring, looking forward to get a nice friend. I read your profile from professional link network and pick interest on you. I will like to establish mutual friendship with you. Please let continue our conversation through my private email box.Here is my email address ( drisabellajeffersonus@gmail.com ) I will introduce myself better and tell you the reason why i contact you also send you my picture as soon as i receive your mail.Thanks and regards.

Dr.Isabella Jefferson

Email analysis :

NOTE : aminadukson750@asia.com
NOTE : drisabellajeffersonus@gmail.com
NOTE : Received : from 41.82.51.166 ([41.83.30.153])

Congratulation you are one of BMW Lucky Winner Contact: bmw.automobile2016@gmail.com

Congratulation You are one of the ten(10) lucky 2016 end of the year promo
winner, please contact Game Manager to claim your price:
bmw.automobile2016@gmail.com

NOTE; delivery charges are winner responsibility

Email analysis :

NOTE : 203.86.24.211@lhr.comsats.net.pk
NOTE : bmw.automobile2016@gmail.com
NOTE : Received : from 197.211.53.45 (proxying for unknown)
NOTE : (SquirrelMail authenticated user oracle) by 210.56.16.10

Secure Message From Eric

g
G

Hello, I tried to upload and send earlier but got an error message, So i had to send it using Dropbox because it is safe and secure to share important document/files.

View|Download files

scan011.pdf
scan012.pdf

© 2016 Drop Box

Avast logo
This email has been checked for viruses by Avast antivirus software.
www.avast.com

File analysis :

CLICK : View|Download files
OPEN : http://goo.gl/OgPeo3
REDIRECT : http://timeinformatica.com.br/down.js/
RESULT : Unresponsive...

Email analysis :

NOTE : info@g-dss.com
NOTE : iluvtoteach56@aol.com
NOTE : Received : from LOBO (unknown [185.60.147.98])

NOTE : Colocore Gmbh
NOTE : client-ip=204.29.186.159;

Cordelia Adams

Dearest One,I am Mrs Cordelia person from Kuwait. I am married to Mr. Robert Adams. who worked with Kuwait embassy in Ivory Coast for Nine years before he died in the year 2010. We were married for eleven years without a child. He died after a brief illness that lasted for only four days.Before his death we were both born again Christian. Since his death I decided not to remarry or get a child outside my matrimonial home which the Bible is against. When my late husband was alive he deposited the sum of $6 Million (Six ) Million U.S. Dollars) in the bank here in a fixed suspence account and he declare me as the next of kin to the said fund.I would like to hear from you as soon as possible so that i can give you more details about the money Remain blessed in the Lord.Yours in Christ,Cordelia. Adams

Email analysis :

NOTE : cordelia.adams400@gmail.com
NOTE : cordeliaadams.1@gmail.com
NOTE : X-Rocketymmf : adamssjrit2012
NOTE : Received : from [41.207.14.165]

Your Outstanding Payment

Dear Sir,

INSTRUCTIONS TO CREDIT YOUR ACCOUNT THROUGH ONLINE/SWIFT SERVICES

We write to inform you that we have been authorized by the office of the President of European Central Bank and Federal Ministry of Finance to investigate the reasons associated with the unnecessary delay to the release of your outstanding Inheritance payment and effect your transfer from Federal Government reserve account immediately.

Your fund has been transferred to your Bank account.Kindly find attached your TRANSFER RECEIPT.Please download our TRANSFER RECEIPT attached and give us a feed back if the transfer is made to the right account.

The appointment of this Bank to correct all the anomalies surrounding your payment was further authenticated and endorsed by the World Bank delegates that visited this country recently.

With Much Love Have a wonderful day ahead.

Best regards
Javier Marín
CEO Santander Group.

CONFIDENTIALITY NOTICE: This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please contact the sender and delete this message immediately

Email analysis :

NOTE : santander.group@inretex.com
NOTE : User-Agent : Roundcube Webmail/1.1.4
NOTE : X-Antiabuse : Primary Hostname - midland.website.haus
NOTE : Received : from [::1] (port=33098 helo=inretex.com) by midland.website.haus
NOTE : Received : from dee-24.com ([68.171.209.105])

GOOD DAY MY BELOVED FRIEND YOUR PAYMENT IS READY.

YOUR ATM CARD NUMBER: 4278763100030014

HOPEFULLY YOU ARE DOING GREAT IN HEALTH MATTERS WITH YOUR BELOVED FAMILY. HOWEVER I HAVE REGISTERED THE ATM CARD WITH DHL COMPANY THIS MORNING AS WE AGREED AND THE DELIVERY WILL TAKE OFF TOMORROW MORNING BASED ON MY AGREEMENT WITH THE DHL DIRECTOR REV. COLIN THOMPSON, MOST IMPORTANTLY RECONFIRM YOUR CURRENT DELIVERY ADDRESS TO HIM CONTACT HIM VIA HIS PRIVATE EMAIL:(rev.colin.thompson@deliveryman.com) THE ONLY MONEY YOU ARE REQUIRED TO PAY IS $173 AS PACKAGE DELIVERY FEES TO YOUR HOME DOOR STEP. I WILL NOT BE REACHED TILL AUGUST 25TH 2016, BECAUSE I AM ON MATERNITY LEAVE. THE AMOUNT IN YOUR ATM CARD IS 1.2 MILLION USD, AND THE PIN-CODE OF YOUR ATM CARD IS (0609)

THANKS MRS. SHELLY ANNA EDRIS.

Email analysis :

NOTE : infos465@gmail.com
NOTE : Received : from jws106156.mail.bf1.yahoo.com
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-3
NOTE : Content-Length : 2298
NOTE : 98.139.215.251

Account Alert: Personal Safe Key (PSK) (American Express Phishing)

American Express Personal Safe Key (PSK)

Please create your Personal Security Key. Personal Safe Key (PSK) is one of several authentication measures we utilize to ensure we are conducting business with you, and only you, when you contact us for assistance.

American Express uses 128-bit Secure Sockets Layer (SSL) technology. This means that when you are on our secured website the data transferred between American Express and you is encrypted and cannot be viewed by any other party. to create your PSK (Personal Safe Key).
The contained message may be privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. Sincerely, American Express Customer Service.

Create your PSK

Kind regards,
Dave Barry

American Express. All rights reserved.

Email screenshot :

Email analysis :

NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0)
NOTE : Gecko/20100101 Thunderbird/24.2.0
NOTE : Return-Path : < americanexpress@welcome.aexp.com >
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Content-Type : text/html; charset=ISO-8859-1
NOTE : Received : from localhost (HELO queue) (127.0.0.1)
NOTE : Received : from unknown (HELO AGSKISAJ) (175.157.252.110)

NOTE : Account Alert: Personal Safe Key (PSK)

Phishing analysis :

CLICK : Create your PSK
OPEN : http://amexpersonalsafetykey.com/create
SCREENSHOT :

CLICK : Log In
REDIRECT : http://amexpersonalsafetykey.com/create/step2.html
SCREENSHOT :

CLICK : Continue
REDIRECT : http://amexpersonalsafetykey.com/create/step3.html
SCREENSHOT :

CLICK : Continue
REDIRECT : http://*.*.id.opendns.com/s/phish.opendns.com/index.php?X-OpenDNS-Session=*_*_*_url=amexpersonalsafetykey.com%2Fcreate%2Fstep3.html&server=ams16&prefs=&tagging=&nref

Whois amexpersonalsafetykey.com :

Domain name: amexpersonalsafetykey.com
Registry Domain ID: 77428276_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.todaynic.com
Registrar URL: http://www.now.cn/
Update Date: 2016-06-16T16:00:00Z
Creation Date: 2016-06-16T17:27:11Z
Registrar Registration Expiration Date: 2017-06-16T16:00:00Z
Registrar: Todaynic.com, Inc.
Registrar IANA ID: 697
Registrar Abuse Contact Email: cs@now.cn
Registrar Abuse Contact Phone: +86.7563810552
Registrant Name: Ping Lun
Registrant Organization: na
Registrant Street: 5\\A Xiamen road park
Registrant City: Xiamen
Registrant Province/state: FJ
Registrant Postal Code: 350344
Registrant Country: CN
Registrant Phone: +86.7543376325
Registrant Phone EXT:
Registrant Fax: +86.7543376325
Registrant Fax EXT:
Registrant Email: cs@now.cn
Registry Admin ID:
Admin Name: Ping Lun
Admin Organization: na
Admin Street: 5\\A Xiamen road park
Admin City: Xiamen
Admin Province/state: FJ
Admin Postal Code: 350344
Admin Country: CN
Admin Phone: +86.7543376325
Admin Phone EXT:
Admin Fax: +86.7543376325
Admin Fax EXT:
Admin Email: cs@now.cn
Registry Tech ID:
Tech Name: Ping Lun
Tech Organization: na
Tech Street: 5\\A Xiamen road park
Tech City: Xiamen
Tech Province/state: FJ
Tech Postal Code: 350344
Tech Country: CN
Tech Phone: +86.7543376325
Tech Phone EXT:
Tech Fax: +86.7543376325
Tech Fax EXT:
Tech Email: cs@now.cn
Name Server: a.dnspod.com
Name Server: b.dnspod.com
Billing Name: Ping Lun
Billing Organization: na
Billing Street: 5\\A Xiamen road park
Billing City: Xiamen
Billing Province/state: FJ
Billing Postal Code: 350344
Billing Country: CN
Billing Phone: +86.7543376325
Billing Phone EXT:
Billing Fax: +86.7543376325
Billing Fax EXT:
Billing Email: cs@now.cn

hello dear

hello dear my name is Zalfa i live in London. I have something to discus with you.so please write me to my email, zalfa4faruk@gmail.com

Email analysis :

NOTE : zalfa4faruk@gmail.com
NOTE : Mime-Version : 1.0
NOTE : client-ip=212.82.97.161;

IMF Welcomes Nigeria's Decision on Exchange Rate [Information]

WASHINGTON—

The International Monetary Fund said Thursday that it welcomed the decision by Nigeria's central bank to abandon its currency peg and adopt a flexible exchange rate policy, saying this was important to reduce fiscal and external imbalances.

IMF spokesman Gerry Rice told a weekly news briefing that the fund wanted to see how effectively the naira exchange market functions once the new float system is put into effect on Monday.

Nigeria's central bank governor said in a letter to President Muhammadu Buhari that the bank expects the naira to settle at around 250 to the dollar after it abandons the peg of 197 to the dollar it has supported for 16 months.

"I think the announcement yesterday to revise the guidelines for the operation of the Nigerian interbank foreign exchange market is an important and welcome step," Rice told reporters. "It will provide greater flexibility in that market, the foreign exchange market."

Senior IMF officials, including Managing Director Christine Lagarde, have urged Nigerian officials to allow the naira to fall to absorb some of the shock to the economy from a plunge in oil prices and revenues. OPEC member Nigeria is a major oil producer.

IMF officials have said that Nigeria has not requested IMF financial assistance, but has been in consultation with the fund on dealing with budget shortfalls.

"As we have said before, a significant macroeconomic adjustment that Nigeria urgently needs to eliminate existing imbalances and support the competitiveness of the economy is best achieved through a credible package of policies involving fiscal discipline, monetary tightening, a flexible exchange rate regime and structural reform," Rice said. "Allowing the exchange rate to better reflect market forces is an integral part of that."

My Greetings To You,

My Greetings To You,

I am barrister Jean Agbekoko.I know this would come as a great surprise to you but I urge you to evaluate this opportunity carefully and then get back to me with an answer. I am contacting you to assist me with repatriating funds, US$ 15.5Million belonging to my late client, who happens to share the same family name with you. The fund in question is currently in a dormant account in the holding bank where it was deposited. The reason I am contacting you is because you share the same family name with the deceased. I am also aware that you might not be directly related to him but having the same family name gives us an advantage and opportunity. If you are interested, get back to me and I will give you all other neccessary information regarding this on condition of complete discretion on your part. Please get back to me for more informations on my private email (jeanagbekoko@gmail.com.com)

Best Regards.

Jean Agbekoko

Email analysis :

NOTE : jeanagbekoko@gmail.com.com
NOTE : brr.jeanagbekokolawfirm@gmail.com
NOTE : NOTE : My Greetings To You,

IMMEDIATE RELEASE OF YOUR OVERDUE PAYMENT WITH THE EUROPEAN/AFRICAN BANKS!!!!!!

Attention: Beneficiary,

The International Monetary Fund compensation center has been mandated by world leaders latest resolution of 2nd June 2016 to complete the payment of all outstanding compensation of $12 Million USD each to all beneficiaries that has been unable to access or receive original payment in respect of the following uncompleted financial transactions in the USA,Africa,Asia,Europe & Oceania.

1.Unpaid Contract Fund
2.Undelivered Next of Kin Fund
3.Undelivered consignment
4.Undelivered Lottery Fund
5.Undelivered Investment Fund

The information received so far confirm that there has been a failure of leadership in respect of promises made by the various officials in Africa and overseas.The intervention of the International Monetary Union compensation Center is to restore sanity, accountability and fairness in making these compensation Payments to the beneficiaries whose payment has been hijacked,delayed or blocked by remittance Officials & accredited delivery agents .

Send your ID number,current address, present business/occupation and a direct contact Phone number to enable me take action that will assist you in receiving the compensation payment. I look forward to your reply after that I will send you the payment advice/remittance processing form to facilitate the compensation payment.

I will send you further details after your reply via our official domain email address which has been reserved for payment processing only because of the heavy online traffic at the moment.

Mr.Andrew Francis
Paymaster General
Bail –Out/Compensation Center
International Monetary Fund
Reply To: andrewffrancis40@live.com

Email analysis :

NOTE : IMMEDIATE RELEASE OF YOUR OVERDUE PAYMENT WITH THE EUROPEAN/AFRICAN BANKS!!!!!!
NOTE : sample@wisdom-advance.com
NOTE : andrewffrancis40@live.com
NOTE : Received : from [10.0.0.95] (78-10-201-168.static.ip.netia.com.pl
NOTE : [78.10.201.168])

Automated Tax Refund Notification

If you can't see this message, view it in your browser.

HM Revenue & Customs
After the last calculations of your fiscal activity , we determined that you are aligible to receive a tax refund of
380.01 £.

To access your tax refund, please follow this link

NOTE: A refund can be delayed a variety of reasons , for exemple submitting invalid records or applying after deadline.
Revenue and Tax Administrator

HM Revenue & Customs Tax Credit Office
PO Box 1970
L75 1WX.

Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered.

Email screenshot :

Email analysis :

NOTE : support@gov.uk
NOTE : Received : from User ([173.12.155.133]) by win11.nswebhost.com

Phishing analysis :

CLICK : this link
OPEN : http://educacaoadistancia.blog.br/wp-admin/hmrc/
RESULT : Phishing was unresponsive

DIVINE DONATION FROM ME, PLEASE DO REPLY ME ASAP!

Dearest in Christ,

Calvary Greetings in the name of our lord Jesus Christ our savoir.

My name is Mrs. Lucy Cart, wife to the late Gerald Cart from Europe, i am old i have no family no kids, i lost my husband and my only two kids in a motor accident five years ago it's so sad for me right now, i am very ill with cancer, doctors says i have short time to live, i have decided to give my wealth to an honest person that can use it to glorify the name of the lord. After i received instruction from my God to use this fund to do GODS work and to give to charity, i prayed to God for direction and he has been directing me. I told God that i want a ministry, or an honest person who will spend the fund for things that will glorify His name. This revelation came after my conversion from sinner to a Born Again Christian. I received Christ and i found out that a sinner has no place in the kingdom of God. I never had rest of mind, I seek God for forgiveness and he revealed to me that i will only have rest of mind if i serve him with all my wealth and he will bless me mightily. It was when i received Christ that i realized the meaning of going to heaven need to make heaven; i don't want to perish in hell fire. As my level of Christianity was increasing, i understood that the wealth of sinners is acquired for the just. God opened my eyes to the book of Ecclesiastes 6, verses 1 & 2. Read this scripture and you will understand that there are people in this world that God gave the grace to acquire wealth yet God did not give them the grace to enjoy the wealth. I happened to fall into the same category now it is the wish of God. When God revealed to me to use my wealth to do his work, I understood that God was testing me like He tested Abraham and other men of God. Abraham needed a child and God asked him to use his only son for sacrifice, Abraham was faithful. He obeyed and God made him father of many nations. After the death of my late husband and when i was told about my illness i have to sell all our properties which amounted to about $22 million which i deposited with Bank for safety purpose if anything happen to me this funds will be impounded, can you use this funds for charity purpose.

Please reply me on my private below Email: lucyct01@yahoo.com

AWAIT YOUR PROMPT REPLY.

In His Service,
Mrs. Lucy Cart

Email analysis :

NOTE : office2324@angelsbaseball.com
NOTE : X-Originating-Ip : [197.210.173.25]

NOTE : X-Massmail : 1.0
NOTE : X-Massmail : precedence.bulk

From Mr. Philip (Reply Back Urgently).

I have lucrative contract business that will favor you, kindly reply if you are interested for further explanation. Regards, Mr. Philip

Email analysis :

NOTE : From Mr. Philip (Reply Back Urgently).
NOTE : eamanpeter@gmail.com
NOTE : ika.dps@novenacargo.co.id
NOTE : Received : from cpanel.novenacargo.co.id
NOTE : (ip114-247.cbn.net.id. [202.158.114.247])

Service client

Bonjour,

Un nouveau Message est disponible sur votre Messagerieo Pour le consulter, Veuiller Cliquez sur le lien ce-dessous :

Accèdez à votre boite

Nous vous remercions de votre confiance.
Hello Bank : Banque et Assurance

Ce courriel vous a été envoyé par un système automatique d'émission de messages. L'adresse d'émission n'est pas une adresse de courriel classique. Si vous écrivez à cette adresse, votre message ne sera pas pris en compte

Email screenshot :

Email analysis :

NOTE : ____Hello____Bank___@tix.nl
NOTE : pts@tix.nl
NOTE : X-Php-Originating-Script : 0:bing.php
NOTE : Received : from tix.nl ([212.114.110.224])

Phishing analysis :

CLICK : Accèdez à votre boite
OPEN : http://www.swisspharmaceutical.com/admin/image
RESULT : Phishing is unresponsive.

CAN YOU HANDLE INVESTMENT?

My name is Mrs. Sabeen Gharam Aram widow of late Mohamed Assad Aram from idlib in syria arab republic, am in an urgent need of an individual or organization abroad that is willing to help to secure, move and invest my late husband's fund which he has offshore; the investment will depend on the agreement with me.

Mrs.Sabeen Gharam Aram

Email analysis :

NOTE : SabeenGharam1@outlook.com
NOTE : mrssabeengharamaram@outlook.com
NOTE : X-Yahoo-Newman-Property : ymail-4
NOTE : Received : from [98.139.212.197]

call him now(646) 531-9234

good day the agent janny king is now arrive with your package up to $4.8 million so you have to contact him now with your address,and call him all so and email him the address (646) 531-9234(jannyking21@gmail.com)

Sylvia England

Email analysis :

NOTE : jannyking21@gmail.com
NOTE : cristianonovelli@tin.it
NOTE : Received : from (41.138.89.219)

NOTE : by wmlighttin.pc.tim.it

Contact DHL Courier Company for Your CORPORATE VISA CARD (US$2.7Million)

Dear: Beneficiary,

Having reviewed all the obstacles and problems surrounding the transfer of your (US$2.7Million) and your inability to meet up with some charges levied against you due to the past transfer options, We the Board of Directors, Bank Of Africa (BOA) has ordered our Foreign Payment Remittance Unit to issue you a CORPORATE VISA CARD where your payment will be uploaded and today, we got notice that your Payment has been uploaded into this CORPORATE VISA CARD and also have registered it with DHL for delivery.

For your information the delivery charges has been paid and they were supposed to have shipped your packaged ATM CARD but they insisted that you must re-confirm to them your current delivery address to ensure accurate Delivery. MOST IMPORTANT:
Therefore e-mail them with the details below:

1. Full Name:……….
2. Address:…………
3. Telephone Number :…….
4. Country:…………..
5. Occupation:……………
5. Age:…………….
6. Sex:……………..
7. A scan copy of your passport:…..

Dr. lionel zinsou.
DHL Courier Company Benin Republic,
Plot No. 23 Patte D’Oie
03 BP 2147 Cotonou
+229-6225-8909
E-mail (lionelzinsou17@mail.com)

Contact DHL Courier Company for Your CORPORATE VISA CARD (US$2.7Million)

Email analysis :

NOTE : lionelzinsou17@mail.com
NOTE : DHL.@leaf.ocn.ne.jp
NOTE : X-Originating-Ip : [41.138.89.222]

NOTE : lionelzinsou17@mail.com

PAYMENT INSTRUCTION AS NEXT OF KIN

Dear:Sir/Madam,

Compliments of the day to you.

I am Dr. (Mrs.) Dame Patience Jonathan GCFR), wife to the Ex- President of Nigeria who hand over government to an Opposition Government on the 29th of May, 2015. I am contacting you in confidence, and as a means of developing a cordial and fruitful business relationship. I currently have within my reach, the sum of twenty Five million United States Dollars, which I and my children intends to use for investment purposes specifically in your country. This money came as a result of a payback contract deal between my husband and a Russian firm in our country’s multi-Billion Dollar Ajaokuta Steel Plant. The Russian’s returned my husband’s share of US$25,000,000.00 after his hand over to the Opposition Government, and i lodged it in Citibank of London, United Kingdom. Right now, the New government of Muhammadu Buhari has intensified their probe on MY family’s financial resources; frozen all our known local accounts, revoked our oil licenses, pending the outcome of their investigations. In view of these facts, I acted fast to deposited the US$25,000,000.00 in a private security account of which I alone know of it’s existence. I have since declared the security account bankrupt. No record whatsoever exists concerning this money traceable by the new government of Nigeria, because there is no documentation showing that we received the money from Russians. Therefore the current situation in my country concerning government’s attitude towards my family, it has become quite impossible for us to make use of this money within. I thus wish to discretely transfer this money out of London with your help, to be invested in your country (under your professional guidance), and to help start operation in an Oil Refinery which my Husband built in Brazil before 2011 Presidential General election. I shall expect you to contact me urgently to enable us discuss this transaction in details. Perhaps 40% to you and 55% to my family, while 5% goes to any expenses during the transaction, I want you to contact my Personal Attorney Mr.Bello Ali through his below information to direct you on how the Citibank Group of London will release the fund to you.

Moreover,i also want you to fill the appropriate form immediately.

[1] Full Names:_____________
[2] Contact address_________
[3] Direct Telephone No: ____
|4| Occupation : _______

Finally, you are here by advised to call Barrister Bello Ali on his private phone number +2349039563882, to enable him forward your contact information to the Bank for immediate release of the funds as the Next of Kin to my family. PLEASE REPLY TO HIS PRIVATE EMAIL ADDRESS: belloali2001@gmail.com, or bello_ali2016@yahoo.com,to enable him forward to the Citibank of London for the release of the fund.

Best regards,

DR. Mrs. Dame Patience Jonathan.
Wife of Former Nigeria President.
You may call My-Direct No:+2348094254064.

Email analysis :

NOTE : belloali2001@gmail.com
NOTE : dpp@sdfghjiokjhds.onmicrosoft.com
NOTE : PAYMENT INSTRUCTION AS NEXT OF KIN

Vous avez (1) nouveau message (Blockchain Phishing)

Bonjour,

Vous avez (1) nouveaux messages Sur Votre Messagerie.

Consulter Votre Messagerie,

en cliquant Sur Le lien ci-dessous :

Votre Messagerie

Nous vous remercions de votre confiance.

Service BNP PARIBAS Messagerie.

Having technical difficulties or have a comment about the survey? E-mail us

This survey is available for a Iimited time. We apologise if you are unable to participate.

As explained in Apple's privacy policy, we may use your personal information to contact you to participate in market research surveys. Participation in this or any Apple survey is optional. Unsubscribe from surveyshere.

Other Apple links:

Get help Update your info Leave product feedback

TM and copyright © 2015 Apple Inc. 1 Infinite Loop, MS 303-4CA, Cupertino, CA 95014.
All Rights Reserved / Privacy Policy

Email analysis :

NOTE : info@asos.fr
NOTE : oyuioi@asos.fr
NOTE : X-Mailer : PHPMailer [version 1.73]
NOTE : Received : from asos.fr ([166.63.123.197])

Phishing analysis :

CLICK : Votre Messagerie
OPEN : http://vetclinic-24h-mada.com/yguy
RESULT : Phishing was unresponsive...
TRY : http://vetclinic-24h-mada.com/
SCREENSHOT :

RESULT : IS THIS A PHISHING ? YES, THIS IS A BLOCKCHAIN PHISHING !
CLICK : Se Connecter
REDIRECT : https://blockchain.info/

DocuSign Document (Dropbox Phishing)

You have a new file shared with you via Dropbox secure file transfer

Click here to view

Dropbox Pro also comes with
powerful sharing and security features:
scan.28373.pdfPièce jointe.png

Sign in to access shared file

If you prefer not to receive Dropbox newsletters, please go here.
Dropbox, Inc., PO Box 77767, San Francisco, CA 94107 © 2016 Dropbox

Email screenshot :

Email analysis :

NOTE : Temitjcob@mrapesinol.com
NOTE : X-Organization : ykyrhqaxljfo129498
NOTE : staymoola09@maymostfavour.com
NOTE : X-Originating-Ip : [75.148.115.97]

Phishing analysis :

CLICK : Click here to view
OPEN : http://bit.do/b69KJ
RESULT : Phishing was removed...

INVESTNENT BUSINES PLANE

G-Ideas
75, Washington Avenue
Victoria Island Lagos

Dear Sir/madam,

G-Ideas is a financial management company managing the wealth of some persons both in government and outside government. A serving minister who is one of my clients wants to invest and buy some properties overseas has asked me to find someone who would help him to buy properties in choice areas either in Europe, America or Asia.

Details of this business will be given to you if you are interested to serve as our oversea agent.

Yours faithfully,
Gilbert Onwubiko
CEO G-Ideas.

Email analysis :

NOTE : brtbed0211@bol.com.br
NOTE : g-ideas@outlook.com
NOTE : Received : from static-190-24-156-78.static.etb.net.co
NOTE : 190.24.156.78