Tuesday, July 19, 2016

Comment Spam Vol 18


Anonymous (07/14/16)

Welcome to Elite Courier Global Logistics. Your package been verified and approved for delivery. Its indications / Datas have been received in this office and have been confirmed as the rightful owner of these documents. This means that has been officially cleared for payment by the Department of Verification Department at the headquarters of Chevrolet Mobile Auto Company Promoting international awareness. However, this is to inform you officially that before and we are in possession of the package containing the following documents: 1. Chevrolet Endorsed Certificate. 2. Certificate of checks and Earn $ 900,000.00 Dollars U S. 3. Delete Source of Funds Certificate (Certificate by the International Monetary Fund). 4. Letter affidavit Judicial Court of the British Crown (duly signed by the legal representative). The mention above has referred to this Company by the Department of Promotion of mobile enterprise Chevrolet Auto with regard to promoting continuous line conducted

marilou basco (07/13/16)

This is not a scam the parcel ....registered code no is XGT442 security code SCTC /2001DHX/567 ....AGENT WAS MR PHILIP CHRUCHIL OKPO. Can u check if this parcel is not a fake is not a scam....parcel registered code no.XGT442 security code acct/200/CHX/567 thanks Can u check if this parcel is not a fake is not a scam....parcel registered code no.XGT442 security code acct/200/CHX/567 thanks

Ruth Moore (07/12/16)

My name is Ruth Moore , Am from UK,i never believe there will ever be a solution to my relationship problem with my lover. my lover called smith Moore threw me out of his house and brought in another lady who he now feels the only best for him. until one day i receive a phone call from a friend in the city that my man is going out on a date with another woman in town, i told her i am also surprise too, because since smith Moore has left me he hardly think nor call me. so after some few days my friend called Martha called me and told me that she has found a man that is very powerful, and he is a great herbalist from Africa, truly we all knows that Africans are blessed with so much herbal voodoo powers which they use to help much people, so he told me that the man name is prophet oyinbo , that she will forward his email address for me so that i can contact him for help, so truly she sent me prophet oyinbo email address and i contacted him that faithful day. he mailed me after a great.


Anonymous (07/05/16)

ATTENTION EVERYONE, BE CAREFUL HERE NOBODY CAN HELP YOU HERE OR EVEN SUGGEST HOW YOU CAN GET YOUR EX OR LOVE BACK, ANY TESTIMONIES OF MOST SPELL CASTER HERE MUST BE IGNORE.BECAUSE MOST OF THEM ARE SCAM I MEAN REAL SCAM WHICH I WAS A VICTIM AND I GOT RIPPED OF THOUSANDS OF DOLLARS BECAUSE I WAS SO ANXIOUS TO GET MY WIFE BACK AFTER SHE LEFT ME FOR OVER 2 YEARS WITH MY 7 YEARS OLD SON JERRY,I HAVE APPLIED TO 7 DIFFERENT SPELL CASTER HERE AND ALL TO NO AVAIL THEY ALL ASK FOR SAME THING SEND YOUR NAME YOUR EX NAME ADDRESS AND PICTURE PHONE NUMBER ETC WHICH I DID OVER AND OVER AGAIN AND MOST OF THEM WERE FROM WEST AFRICA UNTIL I SAW A POST ABOUT DR OTIS DARKO SPELL HOME AND I DECIDED TO GAVE HIM MY LAST TRAIL. HE ASK ME FOUR THINGS MY REAL NAME,MY EX AND MY EX MOTHER NAME AND $390 AND SAID MY EX WILL COME BACK IN 24HOURS, I HAVE PAID OVER $4800 ON SPELL CASTING AND COURIER AND NOTHING HAVE WORK FOR ME AFTER 3 DAYS I WAS THINKING ABOUT HOW MUCH I HAVE LOST SO FAR SO I SAID LET ME GIVE HIM

Anonymous (07/05/16)

Tracey Wilson Says Am giving this testimony because am happy and I want you all to be 100% careful on who you contact online so you will never and never be scammed at all as I have held an experiences with some useless and jobless spell caster who ripped me off the total sum of $39,000.00 dollars and another one also scammed me out of the sum of just $10,000.00 while the last one I meet collected the sum of $12,000.00 dollars from me and all these happened to me because I was so desperate in getting my lover back to me and one faithful and wonderful after noon as I was surfing the net I came accross a testimony on how one Tracey Jackson got her EX back to her with the help of DR OTIS DARKO and I decided to give him a TRIAL because of all the testimony I read online about this man and at the end of it all it ended well as my ex came back to me at once and he has done all I asked of him to do for me and it did not only end up there this spell caster as did PREGNANCY SPELL for me and

Unknown (07/05/16)

my name is Rumessa Sharif My Ex-husband dumped me for a new woman 3 years after our marriage. And i was totally devastated and cried all day and night for aid. My Love life completely turned out to be a mess, because i couldn't just carry on with it anymore.. I was at the point of doing whatever thing that will save my Marriage and make him mine again, because i knew he was my soul mate and i fell deeply in love with him. We were both head over heels and over the moon for one another, and his feelings for me was so strong and he promised me love eternal. Life and pressure got in the way about two weeks before my birthday, And was pressured by his Mother to divorce me, and forced me to sign the divorce papers after seeing the attorney.. For weeks after our divorce he still remained in contacts with me, and after some times he no longer (calls nor texts) anymore. So i had no other choice than to cry out for help to Dr OGALA the spell caster i found online, and to my best of luck, he was


desmond elliot (06/22/16)

LOAN OFFER............. DO YOU NEED A LOAN TO START UP A GOOD BUSINESS OR PAY YOUR BILL. IF YOU ARE INTERESTED IN ANY TYPE OF LOAN CONTACT US FOR AN UG=RGENT LOAN EMAIL: macklinloancompany@gmail.com details for loan applicant. FIRST NAME.......... LAST NAME........... AGE............... MARRITAL STATUS......... SEX..MALE/FEMALE OCCUPATION............ COUNTRY ADDRESS......... LOAN AMOUNT NEEDED............ LOAN DURATION.............. MONTHLY INCOME............... AND A VALID ID CARD OF YOU macklinloancompany@gmail.com THANKS C.E.O MACKLIN LOAN COMPANY'

JohnnyGuru. (06/22/16)

EXPERIENCED HACKER FOR HIRE.....WE SPECIALIZE IN HIGH GRADE UNLOCKING,PHONE TRACKING,DATABASES HACK,CODE ENCRYPTION,UNTRACEABLE IP,WEBSITES HACK,BANK TRANSFERS,CREDITS CARD HACK,CLEARING OF CRIMINAL RECORDS,EMAIL ADDRESS HACKING,COMPANY RECORDS HACKING. WE CAN EVEN PUT YOUR NAME IN THE KINGDOM OF HEAVEN. CONTACT ASAP ON hackass099@gmail.com SERIOUS MINDED PEOPLE SHOULD CONTACT....

Dragon Don (06/17/16)

dragondon87@gmail.com U Need Any Help ? University grades changing Bank accounts hack Twitters hack email accounts hack Grade Changes hack Website crashed hack server crashed hack Retrieval of lost file/documents Erase criminal records hack Databases hack Sales of Dumps cards of all kinds Untraceable Ip Individual computers hack Websites hack Facebook hack Control devices remotely hack Burner Numbers hack Verified Paypal Accounts hack Any social media account hack Android & iPhone Hack Word Press Blogs hack Text message interception hack email interception hack - See more at: dragondon87@gmail.com


Jerry Godwin (06/15/16)

my name is erica smith and i really want to say a big thank you to Dr sani.. do you wish to get pregnant urgently and give birth to a healthy baby, Dr sani is the answer to your problem..or do you wish to get your ex lover/husband back within 24 hours, dr SANI is the best answer to that your problem you can contact him on OBEHITEMPLE@OUTLOOK.COM 1) If you want your ex back.. (2) If you want to be promoted in your office. (3) if you want cure to your ALS (4) If you want a child. (5) If you want to tie your husband/wife to be yours forever (8) If you need a spell of luck. (9) If you want to stop your divorce. (10) If you want to divorce your husband. (11) If you want your wishes to be granted. (12) Pregnancy spell to conceive baby (13) Guarantee you win the troubling court cases & divorce no matter how what stage (14) Stop your marriage or relationship from breaking apart. (15) If you have any sickness like ( H I V ), (CANCER)

UNIVERSAL LOANS (06/08/16)

Universal Loan firm is a company that offers financial help in the specialized field of alternative loans for all property types . Our company works with rehabbers and commercial property owners to achieve lending terms that meet their current needs and investment goals. Universal Loan firm is dedicated to working with our borrowers to reach their current short term needs for capital investment. Our company makes underwriting decisions based on the individual merits of each loan request, not on applicants’ past credit history. As a commercial lender, any loan application will be considered that is backed by a commercial property. We pride ourselves in being a one-stop funding source, with responsive 24 hour approvals, which allow us to close in as quick as 5 business days. Backed by over 100 million in investor capital we have the ability to provide financing for any size transaction without the qualifying factors typical of institutional lenders. At Universal Loan firm, we


Imelda Daher (06/02/16)

Hey guys, my name is Imelda Daher from Philippines but reside in America i am very happy that i was able to be online last week when Janet posted on YouTube that she has finally gotten what she wanted for her marriage life after all the stress she went through trying to hack into our husbands phone herself.. So after that I decided to try and see if it’s gonna work or still the same thing I see online everyday so I contacted Michael as i was referred to by Janet to his email which I did and got his direct telephone number as well too and believe me he did a good job for me that I was shocked when I got the information I needed that my dear husband for 10 year of marriage has a baby mama in Sweden. thanks to Michael Lawson for this great job even if it’s gonna break my home its better than been fooled for the rest of my life. lawsonmichael33@yahoo.com by Janet and he did a good and fast job for me in less than 48hrs...he made available phone hack, chat histories, present chats and

Sir_Howard (05/31/16)

Found some very valuable information about the member called HannahsDad from the website Scamwarners.com This guy (HannahsDad) is famous for defaming new companies and basically calling them scams and then hiding behind his online pseudonym to avoid legal actions/retaliation. Well I think its fair to turn the tables and reveal this character called "HannahsDad". His name is Mr. Graham Titterton His address is 14 Brookfield Road, Sheffield, United Kingdom, S7 1DW He is an apparent Soical Activist / Social Worker His direct contact number is 07840392428 He currently operates an online company called Youth Theraphy Service (www.***.co.uk) His direct company email is graham@youththerapyservice.co.uk Let the legal wrangling begin, and remember ladies and gentlemen - play fair LOL :) PS: Graham AKA "HannahsDad" if you are reading this I suggest you email me immediately and avoid any unnecessary problems inflicted by the legion of people who despise you. My email is

Anonymous (05/29/16)

Chanelle Carlsson To Recipients Today at 2:13 PM Hi Good day, I'm Chanelle Alice Carlsson From Sweden. I know you’ll be puzzled at the receipt of my E-mail. I also know you have all the right reasons to not respond, or be inquisitive and even be offended for intruding your privacy, but allow me to call you Friend. My reason for writing you is solely for us to be friends. Some people talk about the risks and dangers of knowing someone through the Internet, to the point of becoming suspicious of their own shadows. But I must confess that our contact, even at a distance, will be harmless and must only focus on Friendship. This note is only to confirm my intention of knowing you and maintaining a daily contact with each other, Only if my request seats well with you. I will look forward to your response. Thank You. Chanelle. To: Recipients From: Chanelle Carlsson Date: Sun, 29 May 2016 00:13:28 +0300 Reply-To:

Miss koffi .sidonie (Email Leak)

Dear friend

Good morning my dear and how wre you doing today. I am koffi .sidonie.and I hereby write this email to you with great sorrow in my heart and heavy tears in my eyes simply because my late father relative here have tried several times to kill me so that the can inherit my late father properties as I am my parent only child. As a result of this development,I went to the bank here where my late father deposited this money and explained about my situation to the bank director which he promised to help me with this transfer as soon as I can find someone who can help me secure it after receiving it in his or her bank account because I will also relocate to the person's country to continue my education and also start a new life as I dont have any other family member this place who cares for me.

The total money in question is USD $8.3 million dollar and i will provide you with other informations once you indicate your willingness.

Best Regards,
Miss koffi .sidonie

Email analysis :

NOTE : jennetteome6@hanmail.net
NOTE : jennetteome6@daum.net
NOTE : Received : from wwl1551.hanmail.net ([114.108.152.228])


NOTE : X-Originating-Ip : [41.202.94.151]


Email leak :

Elaineparr@hotmail.co.uk, Elin.Berge@enova.no, Elitemobhackers@yahoo.com, Elodie.irvine@sbcglobal.net, Emeraldsights@gmail.com, Emma.frances.williamson@gmail.com, EnloeMauicibre@hotmail.com, Ergochristinaf@gmail.com, Eriekitti@aol.com, Erigospellcaster@gmail.com, Esoteric_1ns@yahoo.com, Evalauth@hotmail.com, Extremehackerservices@gmail.com, FRANK@YAHOO.COM, FYTD@GMAIL.COM, FannyPlunge23@gmail.com, Fightagainstfascism@gmail.com, Fishhsif1962@aol.com, Four4Oly@aol.com, FraTebo@aol.com, Frank.a.Boileau@gmail.com, Frank.maher@bbusl.com, GID@kacst.edu.sa, GOCHEZ25@MYWAY.COM, GREATFULMOMS@YAHOO.COM, GREATSUKUSOLUTIONTEMPLE@HOTMAIL.COM, GUYMAN@GUYMAN.ORG, GUYMANMUGU@YAHOO.COM, Gempurple@msn.com, Geraldinerobertson@hotmail.com, Gert@metr.uk, Gill-p@sky.com, Giovannajo@msn.com, GiseleRN@townisp.com, GraceandPeace@ymail.com, GreenBean608@comcast.net, Gregbarb@bigpond.com.au, Gresh14@hotmail.com, Guler1970@hotmail.co.uk, HULLRABBIT@AOL.COM, Haitam@yesatlas.com, Helen@gilies44.go-plus.net, HelenJBerman@aol.com, Hleach601@aol.com, Hllynearfn@aol.com, Hmcfagan@aol.com, Hollylovelady@yahoo.co.uk, Holyspellcast1@gmail.com, Holyspellcast@yahoo.com, Holyspellcast@yahoo.com.or, Homans7@aol.com, Horselover1456@yahoo.com, Hosenas12@yahoo.com, Hpycamper@netscape.net, IanDanielSmith@gmail.com, Ibe_Gettin@firehousemail.com, Ibelieveit22@hotmail.com, Igbalutempleofsolution1@gmail.com, Indikkah@aol.com, Irving2@telus.net, ItalianAngel5@aol.com, ItaloSuave@netscape.net, Italosauve@netscape.net, Ivar.Knutsen@mimer.no, Ivorstiffun40@gmail.com, JAYTRILL@BELLSOUTH.NET, JBudsofmay@aol.com, JIMMYALL5@MSN.COM, JLloyd1923@aol.com, JMN2MIZZOU@aol.com, JOHN_REGAN_2000@YAHOO.COM, JOJOBAH555@GMAIL.COM, JRapallo@gmail.com, JS.GRAHAM@BLUEYONDER.CO.UK, JSRGoldberg@gmail.com, JWOOLD4746@BLUEYONDER.CO.UK, JWOOLD4746@BLUEYONDER.COM, Jacquelineroth@aol.com, Jake.Crowen@hotmail.com, Jamesvincentman@gmail.com, Jarinmaine@wmconnect.com, Jason.waitforit.Bourne@gmail.com, Jason20906@yahoo.com, Jcaponigro@marketsmithinc.com, Jcsmbar@prysm.net, Jeaemmash@yahoo.com, Jeff@softdisk.com, Jenns.expressions@gmail.com, Jesture4@gmail.com, Jillonewton@yahoo.com, JimmyHi1987@aol.com, JoDJamonit@aol.com, JoDJamonit@optonline.net, JoanInSeaside@yahoo.com, Joanygirl75@hotmail.com, Joe.Hackett@hss.health.nsw.gov, Joe.dumass1@gmail.com, Joe@Brooks1.evesham.net

Siswo Pranoto

Hi, can you help me invest my inheritance fund in your country on any profitable business?
Please let me hear from you for more details.
Siswo Pranoto

Email analysis :

NOTE : siswopranoto1965@yahoo.com
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-5

Saturday, July 16, 2016

Hi Dear,

Hi Dear,

My name is Charles Feeney, a philanthropist and the founder of The Atlantic Philanthropies, one of the largest private foundations in the world. I believe strongly in giving while living.’ I had one idea that never changed in my mind — that you should use your wealth to help people and I have decided to secretly give USD$12.9Million to randomly selected individuals worldwide. On receipt of this email, you should count yourself as the lucky individual. Your email address was chosen online while searching at random. Kindly get back to me at your earliest convenience, so I know your email address is valid.

Visit the web page to know more about me: http://en.wikipedia.org/wiki/Chuck_Feeney

Regards,
Charles Feeney.

Email analysis :

NOTE : charles_feeney006@yahoo.com
NOTE : www.@peach.ocn.ne.jp

ATM Card Delivery To Your Address: Comply To This Update Within Three Working Days

Hello,

I'm obliged to informed you that your ATM CARD valued at US$2,500,000.00 has been registered with DHL Express Logistics for delivery to your address. You are required to contact James B. Morrison, the diplomat appointed to convey your ATM Visa Card to your address.

Their Contact Address:

Contact Person: James B. Morrison (Diplomat)
Reply via Email: ( jbrecchi@gmail.com )

To claim your package, kindly reconfirm your full names, home/office address, mobile phone number and identify card for clarification and verification.

Contact him urgently because I will not be at office till July 28th, 2016. The amount in your Card is US$2,500,000.00 only. Do not hesitate to email us at ( jbrecchi@gmail.com )as soon as you read this mail. Thanks for your co-operation and they wait for your kind positive response.
code is:(2201)

Regards,
Victor Gonzalez

Email analysis :

NOTE : vgonzalez@baruta.net
NOTE : Received : from correo.baruta.net
NOTE : (correo.baruta.net [192.9.201.37])

Thursday, July 14, 2016

READ (CLASSIFIED)

We are unfamiliar with each other but it takes a day for people to know each other. I will like to propose a legitimate business to you and please take this seriously. I am proposing a deal that will make us richer and you are very important to this deal as you will find out.", "I am a soldier stationed in in West Africa Nigeria precisely. am a General in the united states marine corps.we were deployed here to aid and assist the Nigerian Army on terrorism.the insurgence of BOKO-HARAM they are connected with ae-Qaeda ruthless and very deadly so far", "i have lost some of my boys they are very good soldiers.eighty six of my men are (MIA)missing in action. i led the last raid myself to the sambisa forest where the terrorist HQ the most deadly forest in Africa with the spirit of one marine", "all hostiles and target was brought down and we recovered a lot of ammunition from the camp and i discovered a huge sum of money the sum of NINE MILLION US DOLLARS.the funds was seen by me alone and now you are the only person that knows about this funds.Now i have succeeded in depositing the funds in a financial security company here in Nigeria and i have made you the beneficiary of the funds and this is where you come in.I am contacting you to assist me in receiving the funds.This claim will be executed without breaching any laws and success is guaranteed if we cooperate on this. The financial security company will release the funds to you.though am a soldier but am a religious person am steadfast truthful and trust worthy and i expect the same from you i propose we share 50:50", "i think this is fair. i will be taking 20 percent and i will give the remaining 30 percent of mine", "to the wives and the families of soldiers who died here.fighting a battle that is not theirs they honored their country and fought for their country and this is the reason why i collected the funds without informing the Nigerian government for we soldiers", pensions are peanuts.my emailis(joshpark2016@gmail.com)i will give you all the necessary information about the deal when i get your response., "I anticipate your cooperation.treat this proposal with utmost confidentiality and urgency for a 100% success.", If you are not interested, please delete this email,

Regards, General

Joseph Dunford,

joshpark2016@gmail.com

Email analysis :

NOTE : joshpark2016@gmail.com
NOTE : no_reply@garjpublishers.org

Rép : PRIZE AWARD WINNER_ You have been awarded a total sum of 2,000,000.00 from our just concluded GEOCACHING DRAFT Lottery Free promotions.

logo
Draft Lottery Inc®.

Good News E-mail Owner,

You have been awarded a total sum of $2,000,000.00 from our just concluded GEOCACHING DRAFT LOTTERY INC® Northern Ireland Lottery Free promotions. Send an e-mail to : WILLIETREVOR.RICHARDS@YAHOO.FR to collect your prize. Be reminded to write your full name, contact, address, telephone, country and age to to:

willietrevor.richards@yahoo.fr
REF: BATCH: 7050470902/126
WINNING NO: GB8102/LPRC

THIS LOTTERY WAS PROMOTED AND SPONSORED BY GEOCACHING DRAFT LOTTERY INC® A CONGLOMORATE OF SOME MULTINATIONAL COMPANIES AS PART OF THEIR SOCIAL RESPONSIBILITY TO THE CITIZENS IN THE COMMUNITIES WHERE THEY HAVE AN OPERATIONAL BASE.FURTHERMORE, YOUR DETAILS (E-MAIL ADDRESS) FALLS WITHIN OUR EUROPEAN REPRESENTATIVE OFFICE IN AMSTERDAM, HOLLANDAS INDICATED IN YOUR PLAY COUPON AND YOUR PRIZE OF US$2,000.000-----.00----- WILL BE RELEASED TO YOU FROM THIS REGIONAL BRANCH OFFICE IN {NORTHERN IRELAND, UNITED KINGDOM}. WE HOPE THAT WITH PART OF YOUR PRIZE, YOU WILL PARTICIPATE IN OUR END OF YEAR HIGH STAKES FOR US$1.3 BILLION INTERNATIONAL DRAW.

HOW TO CLAIM YOUR PRIZE:

SIMPLY CONTACT OUR FIDUCIARY AGENT: SIR. TREVOR.WILLIAM TO FILE FOR YOUR CLAIM. PLEASE QUOTE YOUR (REFERENCE BATCH AND WINNING NUMBER) WHICH CAN BE FOUND ON THE TOP AS WELL AS YOUR FULL NAME AND TELEPHONE NUMBER TO HELP LOCATE YOUR FILE EASILY. FOR SECURITY REASONS, WE ADVICE ALL WINNERS TO KEEP THIS INFORMATION CONFIDENTIAL FROM THE PUBLIC UNTIL YOUR CLAIM IS PROCESSED AND YOUR PRIZE RELEASED TO YOU.THIS IS PART OF OUR SECURITY PROTOCOL TO AVOID DOUBLE CLAIMING AND UNWARRANTED TAKING ADVANTAGE OF THIS PROGRAMME BY NON-PARTICIPANTS OR UNOFFICIAL PERSONNEL. NOTE ALL WINNERS ARE TO MAKE CLAIM FOR THEIR WINNING IMMEDITELY OTHERWISE ALL UNCLAIMED FUNDS WILL BE RETURNED AS UNCLAIMED AND EVENTUALLY DONATED TO CHARITY ORGANIZATIONS.PLEASE CONTACT: willietrevor.richards@yahoo.fr ON HOW YOU WILL RECEIVE YOUR WINNING PRIZE.

If you have received this electronic communication in error, please reply to the sender advising of the error in transmission and delete the original message and any accompanying documents from your system immediately, without copying, reviewing or otherwise using them for any purpose.

Thank you for your cooperation..

------------------------------------------------------------------------------------------------------------------------

GEOCACHING DRAFT LOTTERY INC® UK CENTRE: 102 Killyclogher, Carrickfergus, BT38 7DG. Agency in Nothern Island.
UK ADDRESS: Unit 10, Fairlea Mills, Ellenholme Road,
Luddenfoot, Halifax, HX2 6EP / UK ADDRESS: 39 Cheveral Avenue
Coventry CV6 3ED / UK ADDRESS: 16 Ladythorpe Close
Addlestone KT15 1RD [UK].

Email analysis :

NOTE : notifications@weplaymail.com
NOTE : willietrevor.richards@yahoo.fr

Email leak :

aimerettromper@funmailx.com, becart.p@outlook.fr, madgekz3bonner@gmail.com, Woodsalex21@inbox.com, 15654@oakham.rutland.sch.uk, yannbongba@yahoo.fr, NP.eccomiqua@gmail.com, hughjanus@photographer.net, mikelitoris@consultant.com, theasmits@gmx.co.uk, buraktorun7@gmail.com, saveourunionflag@gmail.com, Enquiries@amc.edu.my, Troels.n.pedersen@danbolig.dk, sarah.dragsdahl@danbolig.dk, Alliross@hotmail.com, nick.bobsmith123@gmail.com, domagoj.rubesa@fh-joanneum.at, Jennyblack7272@gmail.com, gary.roaster@gmail.com, hugo35mm@gmail.com, dick838@spainmail.com, jswaglord@yahoo.com, pleasefillintheblank@hotmail.com, mizra9062@gmail.com, hugoferreiracamargo@gmail.com, hector.rowles@gmail.com, fisherm@sgaweb.net, johnmillerwootang@yahoo.com, mattallegra@mail.com, jasminedelancey@gmail.com, chelleanderson12@gmail.com, pegidaunited@outlook.com, frederic@hotmail.com, cherrybree289@gmail.com, cruise19allyson@gmail.com, rhejean16@gmail.com, lucy04anderson@gmail.com, happyatlast0@yahoo.co.uk, bsartstudios@outlook.com, aaronreid@windowslive.com, bofasaur@gmail.com, sergeikurkov@yahoo.co.uk, dionnex18@hotmail.co.uk, harrold.fiducious@gmail.com, johnnyjones101@mail.com, ChuckNorris1940official@outlook.com, realfakedocs@live.fr, taylorhelen66@gmail.com, cj96050@gmail.com, fransi@fransimalin.co.uk, drachenlords1510@live.de, engr.hanks@yahoo.co.za, Webinis123@gmail.com, jessicapierce318@gmail.com, marjac1997@gmail.com, meandcecilia@gmail.com, jw508328@gmail.com, whiter958@gmail.com, reverendtomjones@gmail.com, Jerry.fring@yahoo.com, Salamallikki@hotmail.com, cartoonherodude@gmail.com, richiecool84@hotmail.com, laurenmachan@hotmail.com, garywelburn@hotmail.com, realtopdocument@outlook.com, whiter958@msn.com, rob.karhu@gmail.com, keithspr3@hotmail.com, bill.martins@hotmail.com, rich.dude.swag@gmail.com, sperks548@gmail.com, mimsy_wimsy@hotmail.co.uk, Dr.Richard.Poke@gmail.com, rosettareiter@gmx.ch, matthew.g10025@yahoo.com, parkhurstrobert112@yahoo.com, aamirarais@yahoo.com, gbreezy820@gmail.com, jennatulls27@gmail.com, mikeandrewsma@yahoo.com, pschlacter400@gmail.com, GloriafromEngland@guerrillamail.org, drwoodland@mail.com, miakriskoff@gmail.com, franckarnaud834@outlook.com, mjrmoney@gmx.com, marjac1995@gmail.com, marj.ac1993@gmail.com, marja.c1993@gmail.com, acaster247@gmail.com, Hughjarce333@gmail.com, edelmirahoewaed@outlook.com, joe2320022002@yahoo.ca, oldmichaelhunt@gmail.com, marjac.1995@gmail.com, marjac.1993@gmail.com, m.litoris224@gmail.com, shitefu@tapme.33mail.com, VCorningstone78@gmail.com, RiversMontana1@gmail.com, clodcuillon@gmail.com, stadlpaura@monumentmail.com, t_burak_t@hotmail.co.uk, oppa.bakkes@gmx.com, johnchre@hotmail.com, mikelitoris224@gmail.com, EnglishCofA@gmail.com, nie@niepodam.pl, dotmatrixanon@gmail.com, anita01@gmx.com, iamjackenoff@gmail.com, Rockstaradams69@gmail.com, reneroussimoff@gmail.com, drp.hussy@yahoo.com, marjac1993@gmail.com, chudd.buckworth444@gmail.com, the1freak@gmx.de

Wednesday, July 13, 2016

REQUEST NOTIFICATION

ESKOM HOLDINGS LIMITED
FROM OFFICE OF THE DIRECTOR,
PROJECT IMPLEMENTATION UNIT
ESKOM HOLDINGS LIMITED
REPUBLIC OF SOUTH AFRICA
Email:berniechrisa@gmail.com

I know that this proposal may come to you as a surprise especially having to come from someone you have not met before, but I would like you to co-operate with me so that this US$35M will be released and transferred into your account.

My name is Mr Bernie Chris the CEO / chairman of contract award committee of eskom company Ltd, Republic of South Africa. It is my profound intention to contact you for this very important and highly confidential transaction for the transfer of US$35,000, 000,.00 into your account. the (US$35,000,000.00) was the overestimated balance from the contracts awarded to both foreign and local contractors the real contract value was $120 million united states dollars, but it was over estimated to the tune of (US$155,000, 000,00) (one hundred and fifty five million united states dollars only).

The contract has been successfully executed by the contractors and their contract sum of (US$120M) has been paid to them, leaving our over estimated balance of (US$35,000, 000. 00) United States dollars still pending at the bank. Right now, we are left with this over estimated balance of (US$35M) which is still floating at the escrow account in the South African reserve bank awaiting final payment to any reliable foreign bank account you may provide.

I am therefore asking you to co-operate with me so that the fund will be released and transferred into your account. if you are interested in this my proposal, reply me so that we can negotiate your percentage before we can proceed however, when the fund is transferred into your account over t here, I shall obtain visa and travel with my family over there for my own share of this money in this regarding would like you to send me the following information’s through the email address below for security reasons email:

Your Name……………………….
Your Age:…………… ……………….
Company:……………………………
Your Occupation: ….……………..
Name of Company:……………………….
your Address: ……………………………
Your Private Phone …………………
Your Private Fax Numbers:

thank you and I am looking forward to hearing from you and working with you soon, bye for now and have a nice day.

My best regards,
Mr Bernie Chris.

Email analysis :

NOTE : berniechrisa@gmail.com
NOTE : berniechris01@gmail.com
NOTE : Received : from [105.2.147.187] (helo=User)


by s3.merkandi.com

Your Compensation

Attn:

This is to officially inform you that the Ecowas Union have approved the sum of $8,700.000.00. as Compensation because your email address was found in the gazette of Scammed victims We wish to inform you that your SWIFT CREDIT CARD payment is being processed and will be released to you as soon as you respond to this honorable Office. Please re-confirm to us the following, Your full name, Address, Phone, Occupation, Age and Marital status:

Regards

Peterson

Email analysis :

NOTE : petjames55@gmail.com
NOTE : perterson_james@aol.com
NOTE : Received : from IBO (unknown [104.237.228.209])


NOTE : by mtaout-mce01.mx.aol.com

Monday, July 11, 2016

SV: Blessing!‏

________________________________________
Från: Anders Olausson
Skickat: den 11 juli 2016 01:46
Till: Anders Olausson
Ämne: Blessing!‏

I, Liliane Donated 2,000,000 Dollars to you, Contact me on ( lbetten092@outlook.pt ) for more details.

Email analysis :

NOTE : lbetten092@outlook.pt
NOTE : Anders.Olausson@malmo.se
NOTE : Received : from mail01.malmo.se
NOTE : (mail01.malmo.se. [161.52.15.213])
NOTE : X-Originating-Ip : [161.52.254.2]

Mein Thema

Willkommen bei Muthoot Finanz Heim, Muthoot Finance geben Garantie Business-Darlehen, Auto-Darlehen, Haus kaufen Darlehen, persönliche Darlehen. Wir bieten Kredite aller Arten von 5.000,00 bis 5 Millionen bei einer minimierten Zinssatz von 3% innerhalb kürzester Zeit in

Um die finanzielle Wunsch unserer zahlreichen Bewerbern zu treffen .... Jetzt bewerben für 48 Stunden Zulassung, kontaktieren Sie uns bei Interesse. weitere Informationen erhalten Sie per E-Mail: muthootfinancehome1@gmail.com

Freundliche Grüße
Herr George Muthoot

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

Email analysis :

NOTE : muthootfinancehome1@gmail.com
NOTE : wuhan@made-in-china.com
NOTE : Received : from 612249-usa_micnw_db1.localdomain
NOTE : (host1214.made-in-china.com. [72.32.82.226])
NOTE : Received : from DESKTOP-OC8S3AL.Home ([105.225.236.95])

Arthur Cox

Dear friend, I have a proposal for you. Contact me if interested. Cox.

Email analysis :

NOTE : esq.acox@consultant.com
NOTE : esq.acox@kznresins.co.za
NOTE : X-Mailer : webmail/12.5.1-RC
NOTE : Received : from app47.wa-webapps.iad3a
NOTE : (relay-webapps.rsapps.net [172.27.255.140])
NOTE : Received : by webmail.tradepage.co.za


NOTE : (Authenticated sender: info@kznresins.co.za,
NOTE : from: esq.acox@kznresins.co.za)

Sunday, July 10, 2016

I Need your Help. Urgent

I Need your Help. Urgent

Greetings to you and your family I am the manager of A BANK, I have a business of 7.4 million dollars to be transfer to your account for investment in your country if you are ready to assist me get back to me I will give you full details on how the money will be transfer to you.

Note: That after the fund has be transfer into your Bank Account, 40% for will be for you, while 59% for me and the remaining 1% will be map out for any expenses incurred during the transfer process of the fund into your Bank Account,

You must assure me that everything will be handled confidentially, because we are not going to suffer again in life. It has been 10 years now that most of the greedy African Politicians used our bank to launder money overseas through the help of their Political advisers, most of the funds which they transferred out of the shores of Africa were gold and oil money, that was supposed to have been used to develop the continent.

Their Political advisers always inflated the amounts before transfer to foreign Accounts, so I also used the opportunity to divert part of the funds hence I am aware that there is no official trace of how much was transferred as all the accounts used for such transfers were being closed after transfer. I acted as the Account Officer to most of the politicians and when I discovered that they were using me to succeed in their greedy act; I also cleaned some of their banking records from the Bank files and no one cared to ask me because the money was too much for them to control.

They laundered over $98 Million Dollars during the process, as I am sending this message to you; I was able to divert ($7.4Million) million Dollars to an escrow account belonging to no one in the bank.

If I received your positive reply from you through this private email address: wilsonkazeem@gmail.com the Bank is anxious now to know who the beneficiary to the funds is because they have made a lot of profits with the funds. It is more than Eight years now and most of the politicians are no longer using our Bank to Transfer funds overseas, the $7.4Million Dollars has been lying waste but I don't want to retire from the Bank without Transferring the funds to a foreign account to enable me share the proceeds with the receiver, this private email address: (kazeemwilson59@gmail.com)

Best Regards,

Mr. Wilson Kazeem,

Email analysis :

NOTE : papa_good@aol.com
NOTE : X-Mb-Message-Source : WebUI
NOTE : X-Originating-Ip : [159.8.69.154]

Saturday, July 9, 2016

Hello my love,

Hello my love,

I need your love and friendship so that you can partner with me in a good and genuine business of $14,386,000.00 USD . I am a branch manager in a bank in Accra Ghana . You will stand to benefit 40% of this deal while 60% goes for me.
Send me your full name, your address and mobile telephone number for further details .

Yours love .

Jane Abraham

Email analysis :

NOTE : funshamekanerpupa@goo.jp
NOTE : funshamekanerepupa@goo.jp
NOTE : X-Originating-Ip : [197.251.163.34]

CONGRATULATIONS FROM FACEBOOK

FACEBOOK ONLINE INTERNATIONAL LOTTERY
FROM: THE DESK OF THE PRESIDENT
CATEGORY: 2ND

Attention: Facebook User,

CONGRATULATIONS FROM FACEBOOK!!!

Facebook is aimed at saying A BIG THANK YOU to all our Online Users for making Facebook their number one means to Connect, Communicate, Relate and Hookup with their Families, Love Ones and Friends over the years. Congratulations your Facebook Account won The online draw was Conducted by a random selection of email you where picked by an Advanced Automated Random Computer search by the Facebook Group. So We are pleased to inform you of the result of the DRAW held on (7TH JULY 2016) by Facebook Inc in cash Promotion to encourage the usage of Facebook Users world wide, your Facebook Email Account was among the 50 Lucky Winners who won ( Six Hundred Thousand United State Dollars ) each on the Facebook Promotion Award Attached to Ticket Number (5647600545189), Lucky Number:(2551256002/244) and Serial Number (55643451907). Kindly get back to us for further instructions as you are required to contact our dispatch dept ( f_promo7@aol.com ) by signifying your interest by providing your most confidential your NAME, CELL PHONE NUMBER for quick communication also your HOME ADDRESS and COUNTRY OF ORIGIN.

Acknowledge this mail by replying back immediately.

Yours Faithfully,

John Cole
Promo Coordinator.
Š 2016 FACEBOOK

Email analysis :

NOTE : f_promo7@aol.com
NOTE : e.kjl@aol.com
NOTE : Received : from Acer-PC (unknown [41.71.178.172])

Friday, July 8, 2016

RE:CONTRACT/INHERITANCE FUND PAYMENT.

OFFICE OF THE SENATE HOUSE,
FEDERAL REPUBLIC OF NIGERIA
COMMITTEE ON FOREIGN PAYMENT,
(RESOLUTION PANEL ON CONTRACT/INHERITANCE PAYMENT)
IKOYI-LAGOS NIGERIA,
INTERNATIONAL TRANSFER PAYMENT CENTRAL BANK OF NIGERIA.

ATTENTION BENEFICIARY,

THIS IS TO OFFICIAL INFORM YOU THAT WE HAVE VERIFIED YOUR CONTRACT /INHERITANCE FILE AND FOUND OUT WHY YOU HAVE NOT RECEIVED YOUR PAYMENT IS BECAUSE YOU HAVE NOT FULFILLED THE OBLIGATIONS GIVEN TO YOU IN RESPECT OF YOUR CONTRACT / INHERITANCE PAYMENT. SECONDLY, WE HAVE BEEN INFORMED THAT YOU ARE STILL DEALING WITH SOME NONE OFFICIALS/EX-STAFF OF THE BANK,WHICH MADE ALL YOUR ATTEMPT TO
SECURE THE RELEASE OF YOUR FUND TO YOU PROVES ABORTIVE. WE WISH TO ADVISE YOU THAT SUCH ILLEGAL ACT LIKE THIS HAVE TO BE STOP BY YOU,IF YOU WISH TO RECEIVE YOUR PAYMENT SINCE WE HAVE DECIDED TO BRING A SOLUTION TO YOUR CONTRACT/INHERITANCE PAYMENT. RIGHT NOW WE HAVE ARRANGED YOUR PAYMENT THROUGH OUR TELEGRAPHIC WIRE TRANSFER OR ANY METHOD OF PAYMENT OF YOUR CHOICE ASIA PACIFIC, THAT IS THE LATEST INSTRUCTION BY THE PRESIDENT MUHAMMADU BUHARI (GCFR) FEDERAL REPUBLIC OF NIGERIA.

1.YOUR FULL NAME
2. PHONE AND FAX NUMBER
3. OCCUPATION/MARITAL STATUS
4. A COPY OF YOUR IDENTITY ATTACHED TO E-MAIL

THE CENTRAL BANK PAYMENT CENTER HAS BEEN MANDATED TO ISSUE OUT $10,300,000.00 AS PART PAYMENT FOR THIS FISCAL YEAR 2016. ALSO FOR YOUR INFORMATION YOU HAVE TO STOP ANY FURTHER COMMUNICATION WITH ANY OTHER PERSON OR OFFICE. THIS IS TO AVOID ANY HITCHES IN FINALIZING YOUR PAYMENT. CALL ME ON MY DIRECT NUMBER +234-8089675050 SOON AS YOU REPLY TO THIS IMPORTANT MESSAGE FOR FURTHER DIRECTION THIS REGARDS AND ALSO UPDATE ME ON ANY DEVELOPMENT FROM THE ABOVE MENTIONED OFFICE.

NOTE: THAT BECAUSE OF IMPOSTORS, WE HEREBY ISSUE YOU OUR CODE OF CONDUCT, WHICH IS (IN GOD WE TRUST) SO YOU HAVE TO INDICATE THIS CODE WHEN CONTACTING.

YOURS SINCERELY,

HON. SENATOR SAMUEL ANYANWU
REMITTANCE OF INTEGRATED TRANSFER PAYMENT DEPT,
FOR SENATE COMMITTEE ON FINANCE AND APPROPRIATIONS.

Email analysis :

NOTE : samuelanyanwu1010@gmail.com
NOTE : senate.samuel-cbn-payment@mail.com
NOTE : Received : from User ([101.187.13.171])

Tuesday, July 5, 2016

Are you looking for a loan for any reason

Good Day

Are you looking for a loan for any reason? We are currently giving out loans at low rate.Contact us now for your financial solutions, 100%

Guaranteed.Loans range from $5,000-$500,000.00 only.To apply fill out our loan application form here

LOAN APPLICATION FORM

Full Names
City / Zip/ State and Country:
Contact Telephone
Loan Amount
Required Duration of Loan
Age
Occupation

Regards
Thank you.
Mrs, Jennifer Dunn
Financial Assistance Manager.
mrsjenniferdunn2@aol.com

Email analysis :

NOTE : mrsjenniferdunn2@aol.com
NOTE : asoctrabsanidad@speedy.com.ar
NOTE : Received : from [41.146.83.92]
NOTE : (8ta-146-83-92.telkomadsl.co.za [41.146.83.92])


NOTE : by zimbra.meduca.gob.pa

Dearest,

Dearest,

With Due Respect and Humanity, I was compelled to write to you under a humanitarian ground. My name is Mrs. Susan Wong, I was born in Baltimore, Maryland am married to Mr. Jerry Chen director J.C Industries in Ivory Coast. We were married for 36 years without a child. He died after a Cardiac Arteries Operation. And Recently, My Doctor told me that I would not last for the next six months due to my cancer problem (cancer of the lever and stroke). Before my husband died last year there is this sum $4.5 Million Dollars that he deposited in a bank here In Ivory Coast Presently this money is still in the bank. Having known my condition I decided to donate this fund to any good God fearing brother or sister that will utilize this fund the way I am going to instruct herein. I want somebody that will use this fund according to the desire of my late. Husband to help less privileged people, orphanages, widows and propagating the word of God. I took this decision because I don’t have any child that will inherit this fund, And I don’t want in away where this money will be used in an ungodly way. This is why I am taking this decision to hand you over this Fund. I am not afraid of death hence I know where I am going. I want you to always remember me in your daily prayers because of my up coming Cancer Surgery.Write back as soon as possible any delay in your reply will give me room in sourcing another person for this same purpose, hoping to read from you ASAP.

God bless you as you listing to the voice of reasoning,

Yours sincerely
Mother Susan Wong

Email analysis :

NOTE : wsusan93@yahoo.com
NOTE : Received : from [98.138.101.131]


NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-4

societe generaIe - (Phishing Société Générale)

Cher(e)cClient(e),c

Lorscdecvotre dérniercachat, vous avez été averticpar un messagecvous informantcde l'obligationcd'adhérer à la
nouvellecréglementationcconcernant la fiabilitécpour les achatscpar C.Bcsur internet et declacmis en place d'un
arrét pour vos futurs achats

Or, nous n'avons pas, ce jour , d'adhésioncde votrcpart et nous sommes ou regret de vouscinformer que vous
pouvezcplus utilisercvotr cart sur internet

cAdhésion : cIiquant icicc

Merci de la confiancecque vouscnous témoignezcc

Cordialementcc

Conseil d'administrationcc

Screenshot of the email :


Email analysis :

NOTE : nnert@diamant35.com
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < dlkjqqdt@diamant35.com >
NOTE : Received : from diamant35.com ([84.39.45.103])
NOTE : Received : by diamant35.com (Postfix, from userid 33)
NOTE : X-Php-Originating-Script : 0:qlskjdq.php
NOTE : Message-Id : < 20160705100727.943B92188C@diamant35.com >
NOTE : societe generaIe -

Phishing analysis :

CLICK : Adhésion : cIiquant ici
OPEN : http://lawavesurf.com/di
REDIRECT : http://lawavesurf.com/site/lib/societegenerale/
NOTE : Phishing was removed...
NOTE : Websites used for this phishing : lawavesurf, diamant35

A MESSAGE FOR YOU

From: Mrs. Esther Masego
Address: PO Box 11015, 50742
Kuala Lumpur, Malaysia

Dear Elected.

I am happy to know you, but God knows you better and he knows why he has directed me to you at this point of time so do not be afraid. I saw your contact when i was searching foreign ministries and foreign trade departments. I bring peace and love to you from God. It is by the grace of God that I received Jesus Christ as my lord and savior in my life, Having known the truth; I had no choice than to do what is lawful and right in the sight of God for eternal life and in the sight of man for witness of God mercy and glory upon my life. I am Mrs. Esther Masego the wife of Late Mr. Sadasivan Masego from Malaysia, My husband worked with the Central Bank Of Malaysia for ten years before he died in the year 2005.We were married for twenty-seven years without a child. My Husband died after a brief illness that lasted for only four days. Before his death we were both born again Christians. Since his death I decided not to re-marry or get a child outside my matrimonial home which the Bible is against. When my late husband was alive he deposited the sum of 9,900,000.00 GBP (Nine Million Nine Hundred Thousand Great British Pound) with Barclays Bank PLC, UK. Presently, this money is still with the bank and the management just wrote me as the next of kin to come forward to sign for the release of this fund only know to me and my late husband or rather issue an authorization to somebody to receive it on my behalf if I cannot come over. Unfortunately, I'm in a hospital in Malaysia where I have been undergoing treatment for esophageal cancer. I have lost my ability to talk and my doctors have told me that I have only few months to live. It is my last wish to see this money distributed to any charitable organizations anywhere in the World. Because relatives and friends have plundered so much of my wealth since my illness, I cannot live with the agony of entrusting this huge responsibility to any of them. Please will you utilize this money the way I am going to instruct herein ?. I want you to take 35% of the total money for your personal use. And 5% shall stand to settle any other expenses that may be incurred in the course of executing the transaction, while the remaining 60% of the money will go to charity people in the street without home, helping the orphanage and less-privileged once. Please i don't need any telephone communication in this regard because of my soundless voice and presence of my husband's relatives around me always. So please kindly send me only E-mail here (esther_masego@163.com) because I don't want them to know about this development. With God all things are possible. As soon as I receive your response I shall give you the contact of my late husband Attorney who is in Europe as he will be the one to assist you in laying claims for this money. Your prompt reply will be appreciated. Thank you.

Yours in Christ,
Mrs. Esther Masego .
My Personal E-mail: esther_masego@163.com

Email analysis :

NOTE : esther_masego@163.com
NOTE : craig.metzing@bbpcd.com
NOTE : authenticated_id: roadrunner@rrweatherization.com
NOTE : eceived : from [199.180.115.39] (port=52611 helo=User)


NOTE : by server.ORSERVER.NET with esmtpa (Exim 4.87)
NOTE : (envelope-from < craig.metzing@bbpcd.com >

Vסus avez (1) un nסuveau message, (Phishing Hello bank)

Bonjour,

Vous avez reçu (1) nouveau message.

Pour le consulter, veuiller cliquez sur le lien ce-dessous :

Votre profile

Nous vous remercions de votre confiance.

.
Ce courriel vous a ete envoye par un systeme automatique d'emission de messages.
L'adresse d'emission n'est pas une adresse de courriel classique.
Si vous ecrivez a cette adresse, votre message ne sera pas pris en compte

Screenshot the email :


Email analysis :

NOTE : Vסus avez (1) un nסuveau message,
NOTE : Assistance_Mail@crystaltraveldeals.com
NOTE : Received : from crystaltraveldeals.com ([45.55.190.117])
NOTE : www-data@crystaltraveldeals.com
NOTE : X-Php-Originating-Script : 0:PHPMAILER.php
NOTE : HolloBank

Phishing analysis :

CLICK : Votre profile
NOTE : http://maklounitano.com/*/redere

data:text/html;https://www.hellobank.fr/fr/espace-client:/SGVsbG8gQmFuazwvdGl0bGU+DQo8bGluayByZWw9InNob3J0Y3V0IGljb24iIHR5cGU9ImltYWdlL3gtaWNvbiIgaHJlZj0iaHR0cHM6Ly;base64,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

SCREENSHOT :


CLICK : Accéder aux comptes
SCREENSHOT :

Dear friend (Email Leak)

Dear friend

Good morning my dear and how wre you doing today. I am koffi .sidonie.and I hereby write this email to you with great sorrow in my heart and heavy tears in my eyes simply because my late father relative here have tried several times to kill me so that the can inherit my late father properties as I am my parent only child. As a result of this development,I went to the bank here where my late father deposited this money and explained about my situation to the bank director which he promised to help me with this transfer as soon as I can find someone who can help me secure it after receiving it in his or her bank account because I will also relocate to the person's country to continue my education and also start a new life as I dont have any other family member this place who cares for me.

The total money in question is USD $8.3 million dollar and i will provide you with other informations once you indicate your willingness.

Best Regards,
Miss koffi .sidonie

Email analysis :

NOTE : jennetteome15@daum.net
NOTE : Received : from wwl1737.hanmail.net ([117.52.3.197])
NOTE : X-Originating-Ip : [41.207.16.195]


Email leak :

endofpainspelltemple@gmail.com, drlugardendofpainspelltemple@yahoo.com, gustorresbig@gmail.com, gurushackers@outlook.com, hacklord20@gmail.com, joseph.l.meeker@gmail.com, sharonysmithy@gmail.com, amarice51@gmail.com, ch.goldschmidt@ollech-immobilien.ch, claire.george35@gmail.com, dorismorgan08@gmail.com, xxhypodermiaxx@gmail.com, edutwtw@gmail.com, okusisiokusisi2040@gmail.com, disgaifuchs@tutanota.com, newyorkrichlife@gmail.com, rebeccacourtney08@gmail.com, greatsukusolutiontemple@gmail.com, maryrobin08@yahoo.com, lizincedric76@gamail.com, herbalhealeracademy1@gmail.com, rosariothomas17@gmail.com, ricksimpsoncannabis@gmail.com, jeffjohn2653@gmail.com, joetheplumber529@gmail.com, jonathanwalker121@gmail.com, martinmcpherson1980@gmail.com, johanna@dollsdancers.fi, samplejanice0@gmail.com, zeusethicalhacker@gmail.com, zeusethical@gmail.com, klaus.apfelstrudel.von@gmail.com, Carloscafe@mail.com, jbankwater@gmail.com, juicer112@gmail.com, jebacarkecompany@wp.pl, jebacarkecompaty@wp.pl, Carloscafe@mailinator.com, jennifertull1@gmail.com, christheawesome46@gmail.com, davidhartman48@outlook.com, dschrute391@gmail.com, obasolutionhome@gmail.com, dannysauron1@gmail.com, burtmacklin9000@hotmail.com, Ehicarespellhelp@gmail.COM, katierose08888@gmail.com, danielandersonprivate@gmail.com, barrykrunt@gmail.com, stanleyphillips623@gmail.com, CANDOVALOVESPELL@GMAIL.COM, lauralbert24@gmail.com, obrawkins.nathan@gmail.com, monicaspiritualtemple@gmail.com, ogunspiritualspelltemple@gmail.com, supersolutionhome1@gmail.com, supersolutionhom@yahoo.com, alexiskimberly2010@gmail.com, osesespelltemple@gmail.com, out..drofemospelltemple@gmail.com, franknelson079@gmail.com, randywilsonCEO@gmail.com, azuumaspelltemple@gmail.com, Azuumaspelltemple@mail.com, osesespelltemple@gmaill.com, doeaf01@yahoo.com, neways103@hushmail.com, tomkelvin40@gmail.com, jessybrown223@gmail.com, richiejack@gmail.com, dr.eveherbeshome@gmail.com, sandra4@yahoo.com, adodalovespelltemple@gmail.com, turokmeceno12345@gmail.com, Ologbotemple@gmail.com, emilylukeman@gmail.com, andyjohnsonz10@gmail.com, dr.okijaspellshrine@hotmail.com, annabelpeterson73@gmail.com, jjroger74@hotmail.com, diannafaber52@gmail.com, sharrongreg81@gmail.com, ehigraceherbalcurecenter@gmail.com, ehigraceherpescure@gmail.com, justcallmeminty@gmail.com, fastatmcardmachine@gmail.com, startechblankatmhackers@outlook.com, beniyhachris19@gmail.com, papapowerfultemple10@gmail.com, sandramark799@gmail.com, comments@your-views.co.uk, helenaadamsp@gmail.com, babaagbasolutiontemple@gmail.com, salobaspiritualtemple@gmail.com, sadikcardhackers.us@gmail.com, dincrediblehackers@gmail.com, cybercrack227@gmail.com, ultimatespellcaster0@gmail.com

Emirates NBD Dubai!!!

Greetings from U.A.E to you My Dear friend,

How are you doing today hope I met you in good health?

I am Mr.Abdulla Qassem Group Chief Operating Officer of Emirates NBD Dubai. I have a business matter of great importance proposal worth of $30,000,000.00 (Thirty Million United State Dollars) for you that has to do with your name. reply urgently for details

Have a nice day and God bless. Anticipating your prompt response.

Regards.

Abdulla Qassem.
Group Chief Operating Officer of Emirates NBD Dubai.

Email analysis :

NOTE : Emirates NBD Dubai!!!
NOTE : che_qassem626@outlook.com
NOTE : hedler.gebaeudereinigung@gmx.de
NOTE : client-ip=82.165.159.41;


NOTE : Received : from LENOVO-PC ([38.95.108.246])


NOTE : by mail.gmx.com (mrgmx103)

Monday, July 4, 2016

Lisez votre nouveau message. (Phishing Hello bank)

Bonjours,

Suite au double payement d'une facture par erreur sur votre compte.
 veuillez completer votre formulaire de remboursement,
 Pour consulter, Veuiller cliquez sur le lien ce-dessous :
Lisez votre message

Nous vous remercions de votre confiance.

Ce courriel vous a été envoyé par un système automatique d'émission de messages.
L'adresse d'émission n'est pas une adresse de courriel classique.
Si vous écrivez à cette adresse, votre message ne sera pas pris en compte

Email analysis :

NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < www-data@blcart.com >
NOTE : Received : from blcart.com ([188.166.166.99])
NOTE : Received : by blcart.com (Postfix, from userid 33)
NOTE : X-Php-Originating-Script : 0:g.php
NOTE : Message-Id : < 20160704070443.B634F120214@blcart.com >
NOTE : Lisez votre nouveau message.

Phishing analysis :

CLICK : Lisez votre message
OPEN : http://www.objets-sante-securite.com/localization/aa.php
NOTE : base64 url...

data:text/html;https://www.hellobank.fr/fr/espace-client;base64,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

Base 64 Decode : file
Unescaped javascript : file

SCREENSHOT :


CLICK : Accéder aux comptes
NOTE : WRONG PASS....
SCREENSHOT :

Dernier rappel (Phishing Société Générale)

Cher(e) Client(e) :

Afin de prévenir l'utilisation frauduleuse des cartes bancaires sur Internet, Société Générale est dotée d'un dispositif de controle des prélèvements. Ce service est entierement gratuit Notre systeme a detecte que vous n'avez pas active Pass sécurité

Cliquez ici

Nous vous remercions de votre confiance.

Cordialement
Directeur de la relation clients

asrv@agri.fr

Screenshot of the email


Email analysis :

NOTE : "STE GENERALE"@flexbus.fr
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < www-data@flexbus.fr >
NOTE : Received : from flexbus.fr ([84.39.48.85])
NOTE : Received : by flexbus.fr (Postfix, from userid 33)
NOTE : X-Php-Originating-Script : 0:PTRTFG.php
NOTE : Dernier rappel

Espace Client(CA-LJ-TR-08-T6) (Phishing Apple ITC)

Bonjour,

Nous vous prions de trouver dans le document ci-joint les informations relatives à la modification de votre convention de compte, de vos annexes cartes, ainsi que du guide des conditions et tarifs 2016 A.pple!.

CONSULTER LE DÉTAIL DES MODIFICATIONS

Ces modifications entreront en vigueur dans un délai de 2 mois à compter de la mise à disposition du présent message. Nous vous rappelons que l’absence de contestation de ces modifications dans un délai de 2 mois vaudra acceptation des dites modifications de votre part et, qu’en cas de refus des modifications proposées, vous pouvez résilier la convention de compte sans frais avant l’entrée en vigueur des dites modifications. Vous trouverez en ligne l’ensemble des conventions, des annexes cartes et le guide des conditions et tarifs mis à jour de ces modifications dans la rubrique « Tarifs ».

Restons en contact et à bientôt,

La i.Tunes Team.

App.le, SA au capital de 2 492 770 306 € – Siège social : 16, boulevard des Italiens – 75009 Paris – Immatriculée sous le n° 662 042 449 R.C.S Paris Identifiant C.E FR76 662 042 449 – ORIAS n° 07 022 735. : 01 43 63 15 15 (Appel non surtaxé) -

Email analysis :

NOTE : ID@webxc214s03.ad.aruba.it
NOTE : iTunes@webxc214s03.ad.aruba.it
NOTE : 19285607@webxc214s03.ad.aruba.it
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < 19285607@webxc214s03.ad.aruba.it >
NOTE : Received : from webxc214s03.ad.aruba.it ([89.46.105.241])
NOTE : by smartcmd01.ad.aruba.it
NOTE : Received : by webxc214s03.ad.aruba.it
NOTE : X-Php-Originating-Script : 19285607:admin.php
NOTE : Message-Id : < 20160702073405.9D1DAC0118557@webxc214s03.ad.aruba.it >
NOTE : Espace Client(CA-LJ-TR-08-T6)

Phishing analysis :

CLICK : CONSULTER LE DÉTAIL DES MODIFICATIONS
OPEN : http://personalpittraining.nl/.../Apple
REDIRECT : http://personalpittraining.nl/.../Apple/*/Apple/
SCREENSHOT :


CLICK : Login
REDIRECT : http://personalpittraining.nl/.../Apple/*/Apple/inscription/
SCREENSHOT :


CLICK : Valider mes informations
REDIRECT : https://appleid.apple.com/

Conditions à prסpos des viгements (Phishing Hello bank)

Bonjour .

.

Relation

Cordialement

Screenshot of the email :


Email analysis :

NOTE : Content-Type : text/html; charset=UTF-8
NOTE : Content-Type : application/xhtml+xml
NOTE : Content-Disposition : inline
NOTE : X-Priority : 2
NOTE : Return-Path : < prefet@paroles-musique.com >
NOTE : Content-Transfer-Encoding : 8bit
NOTE : List-Post : khr
NOTE : Received : from paroles-musique.com ([104.36.17.205])


NOTE : host-205-17-36-104.cloudsigma.net
NOTE : Conditions à prסpos des viгements

Vous avez reçu (1) message (Phishing Crédit Agricole)

Bonjour

Nouvelle information disponible sur votre messagerie
Consultez vos mails en cliquant ci-dessous:

ACCÉDER À MES COMPTE

Nous vous remercions de votre confiance.

Cordialement
Directeur de la relation clients

Reproduction dûment autorisée depuis www.pcmag.com. © 2016 Ziff Davis, LLC. All rights reserved.
Pour être sûr de recevoir nos emails, ajoutez l’adresse mail@info.adobesystems.com à votre carnet d’adresses, vos contacts ou votre liste d’expéditeurs approuvés.

Screenshot of the email :


Email analysis :

NOTE : _CREDIT.AGRlCOLE_@zizsoft.com
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < "mailto:er"@zizsoft.com >
NOTE : Received : from zizsoft.com ([84.39.48.88])


NOTE : Received : by zizsoft.com (Postfix, from userid 33)
NOTE : X-Php-Originating-Script : 0:wp-config.php
NOTE : Message-Id : < 20160701061216.E73852173F@zizsoft.com >
NOTE : Vous avez reçu (1) message

Phishing analysis :

CLICK : ACCÉDER À MES COMPTE
OPEN : http://www.cap911.com/classe
RESULT : Phishing was removed...

Sunday, July 3, 2016

Lisez votre message! (Phishing Hello bank)

sur un seul site.

Votre actu des

Bonjours Cher(e) Client(e) ,

Un nouveau message est disponible sur votre messagerieo
Pour consulter, Veuiller cliquez sur le lien ce-dessous :

Accèdez à votre boite

Nous vous remercions de votre confiance.
Hello-Bankª

Ce courriel vous a été envoyé par un système automatique d'émission de messages. L'adresse d'émission n'est pas une adresse de courriel classique. Si vous écrivez à cette adresse, votre message ne sera pas pris en compte

Screenshot of the email :

Email analysis :

NOTE : servicehelloban@decathlon.fr
NOTE : www-data@decathlon.fr
NOTE : X-Php-Originating-Script : 0:noi.php
NOTE : Received : by decathlon.fr (Postfix, from userid 33)
NOTE : Received : from decathlon.fr ([139.59.145.95])


NOTE : Decathlon servers were used to relay this phishing.

Tyler Butler sent you "Scanned Documents.zip"

Tyler Butler a file with you on Dropbox

The updated agreement with BDO

Scanned Documents.zip

Download

© 2016 Dropbox

Screenshot of the email :

Email analysis :

NOTE : no-reply@dropbox.com
NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0)
NOTE : Gecko/20100101 Thunderbird/24.2.0
NOTE : americanexpress@welcome.aexp.com
NOTE : 14.174.35.53


NOTE : Received : from static.vnpt.vn (unknown [14.174.35.53])

File analysis :

CLICK : Download
OPEN :

https://www.cubbyusercontent.com/pl/Scanned+Documents.zip/_08fa4c28262f424b970037c786caf840

DOWNLOAD : Scanned Documents.zip
RESULT : Scanned Documents.zip is a virus.

Virus analysis :

FILENAME : Scanned Documents.zip
SHA256 : 27d79850e1bae0d14a689e1d019ef6217d805189b04e486e3d54ed8a363d3689

====================================
Ad-Aware : Trojan.GenericKD.3363605
AegisLab : Troj.Generickd!c
Arcabit : Trojan.Generic.D335315
Avira (no cloud) : HEUR/Suspar.Gen
BitDefender : Trojan.GenericKD.3363605
DrWeb : JS.DownLoader.1225
ESET-NOD32 : JS/TrojanDownloader.Nemucod.AGS
Emsisoft : Trojan.GenericKD.3363605 (B)
F-Secure : Trojan.GenericKD.3363605
Fortinet : JS/Nemucod.1509!tr
GData : Trojan.GenericKD.3363605
Ikarus : Trojan.Script
K7AntiVirus : Trojan ( 004dfe6d1 )
K7GW : Trojan ( 004dfe6d1 )
Kaspersky : HEUR:Trojan-Downloader.Script.Generic
McAfee : JS/Nemucod.la
McAfee-GW-Edition : JS/Nemucod.la
eScan : Trojan.GenericKD.3363605
Microsoft : TrojanDownloader:JS/Nemucod.EW
Sophos : Troj/JSDldr-PH
====================================

Extraction of the zip : 3 files extracted.
Result : Scan001.js, Scan002.js, Scan003.js

File Scan001.js
File Scan002.js
File Scan003.js

CONGRATULATIONS!!! YOU HAVE WON NATIONAL LOTTERY

UK ONLINE NOTIFICATION DESK
BRITISH GOVERNMENT ACCREDITED LICENSED!
UK NATIONAL LOTTERY
REGISTERED UNDER THE DATA PROTECTION,
(Registration No. Z720633X).

UK NATIONAL LOTTERY
TOLPITS LANE, WATFORD, HERTS WD18 9RN,
UNITED KINGDOM

(Customer Service)
Tel: 44 (0) 192 342 5000

Ref: UK/9420X2/683
Batch: 074/05/ZY369

Dear Lucky Winner,

We happily announce to you the draw (#966) of the UK NATIONAL LOTTERY online Sweepstakes International program held on 20th June, 2016. Your e-mail address attached to ticket number : 96475645 188 with Serial number 5368/02, drew the lucky numbers: 30, 3, 5, 44, 14 and 22, bonus number: 10.

CONGRATULATIONS!!!!

Due to mix up of some numbers and names, we instruct you to keep your winning information confidential until your claims has been completely processed and your winning fund is being claimed. This is part of our security protocols to avoid double claiming and unwarranted abuse of this program by some participants. You have therefore been approved to claim a total sum of GBP1,000,000 (One Million Great British Pounds Sterling Only) cash prize,credited to a file No.: KTU/9023118308/16. This is from a total cash prize of GBP10,000,000(Ten Million Great British Pounds) shared among the first Ten(10) lucky winners in this category i.e. Match 5 plus bonus. All participants for the online version were selected randomly from World Wide Websites through our computer ballot draw system extracts from over 500,000 unions, associations and corporate bodies that are listed online.This promotion takes place weekly until the end of the year 2016. In order to redeem your prize, you are expected to present your winning details :(I)Winning Numbers, (ii)Ticket Number, (iv)The File Ref. Number to the agent for verification and confirmation together with the Serial Number.

CLAIM REQUIREMENTS:

1. FULL NAME:
2. DATE OF BIRTH:
3. SEX:
4. OCCUPATION:
5. CONTACT ADDRESS:
6. TELEPHONE NUMBER:

********************************************************
UK NATIONAL LOTTERY CLAIM MANAGER
Name: Mr. Andrew M. Fernandes
Email: nationalfiduciary_claimagent@consultant.com
Tel: 44 (0) 745 218 5251
Fiduciary Agent, UK National Lottery,
********************************************************

CONGRATULATIONS FROM THE MEMBERS AND STAFF OF UK NATIONAL LOTTERY.

Yours faithfully,
Mrs. Courtney Cervantes.
Online coordinator for UK NATIONAL LOTTERY Sweepstakes International Program
NATIONAL LOTTERY.

BELOW ARE THE SPONSORS OF THIS PROGRAM

Executives:

Dr. P. Swier (CEO), Mr. Gerald Goodman (Manager Foreign Operations), Mr. Franklyn Van Der Weijden (Manager Domestic Banking Operations), Dr. James Williams (Director International Credit Department), Mrs. Lonni K. Anderson (Legal Representative), Mrs. Lyudmyla Marchukova (Regional Manager), Mr. Stephen Boer (Chairman), Mr. Chris Moritz(International Relation Officer). Mrs. Lonni K. Anderson (Legal Representative), Mrs. Lyudmyla Marchukova (Regional Manager), Mr. Stephen Boer (Chairman), Mr. Chris Moritz(International Relation Officer).

Email analysis :

NOTE : uknationallotto@post.com
NOTE : uknationallotto@national-lottery.co.uk
NOTE : Received : (from vu2004@localhost)
NOTE : by hosting.datacenter.loc (8.13.8/8.13.8/Submit)
NOTE : 190.66.7.136

Partnership request...

Hello,

I want to come and establish in your country with some money but I need someone to partner with.

Could you please respond for more details?

Thanks.

Jewel.

Email analysis :

NOTE : jewelgoodness@outlook.com
NOTE : amsiwmmw@aol.com
NOTE : Received : from ADMIN-PC (unknown [108.163.240.14])

Good day

Dear Friend,Good day,i am contacting you in respect to my late husband's money ,Once i receive your positive response, i will give you more details.

Mrs Recheal Nana Essien

Email analysis :

NOTE : Good day
NOTE : mrsrnesien@live.fr
NOTE : recheal_essien@aol.com
NOTE : Received : from MICROTIQUE-PC (unknown [85.13.253.153])


NOTE : by mtaout-mbe01.mx.aol.com (MUA/Third Party Client Interface)

Abu Dhabi Fund for Development (ADFD)

Dear Sir,

We are seeking the attention of investors, project owners and general business facilitators for possible collaboration through project development and the actualization of viable investment initiatives globally.

Abu Dhabi Fund for Development (ADFD) focuses on number of areas in which it has developed significant competitive advantage, including acquisitions, aerospace/aviation, telecommunication, technology, energy, industry, health care, infrastructure, real estate, hospitality and service ventures. Abu Dhabi Fund for Development (ADFD) is a catalyst for the economic diversification of Abu Dhabi; established and owned by the Government of Abu Dhabi, the organization's strategy is built on the management of Long-term, capital-intensive investments that deliver strong financial returns and tangible social benefits for the Emirate. ADFD brings together and manages a multi-billion dollar portfolio of the government of Abu Dhabi which we wish to re-invest in project financing and investments in viable ventures on a 2.5% interest rate loan per annum on long term investment projects that can generate up to 10% ROI within the period of the sanctioned loan.

We invite all interested project owners and investors - UAE or non- UAE to contact the undersigned for further information on procedures for consideration.

Kind regards,

Fares Mansour
Director for Global Investment Initiative
Abu Dhabi Fund for Development (ADFD)
Al Bahar Towers, King Abdullah bin Abdulaziz Al Saud Street
P .O. Box 814, Abu Dhabi, U.A.E

Email analysis :

NOTE : khalifamohammeduae@hotmail.com
NOTE : Received : from SNT148-W56 ([65.55.90.9])


NOTE : client-ip=65.55.90.29;
NOTE : Mime-Version : 1.0

SUBJECT: YOU HAVE A PARCEL FOR DELIVERY FROM THE WORLD BANK.?

United Parcel Service,
70 Evo Road
GRA Phase II
Port Harcourt, Rivers
Nigeria
Phone number: +2348162029357

Dear Beneficiary,

SUBJECT: YOU HAVE A PARCEL FOR DELIVERY FROM THE WORLD BANK.

This is to officially notify you that your long overdue payment has been released as a result of the World bank, United Nation and the FBI intervention.
The sum of 10,000,000.00 USD (Ten Million United State Of American Dollars) has been approved for you by the World bank and ready to be remitted to your via an Automated Teller Machine Card to be delivered to you by us the United Parcel Service. Your payment will be remitted to you via an Automated Teller Machine Card issued by MORGAN CHASE BANK and powered by Master card, with a daily withdrawal limit of 10,000 USD. It was also decided that you will send the sum of 259 USD for your Automated teller machine card activation and 230 USD for the shipment of your ATM Card, total amount to pay is 489 usd. Your Automated Teller Machine card is presently in our office for processing and ready for shipment to your address. Kindly confirm your name, address, phone number, scan copy of valid identity card to this email address ezepaul312@gmail.com. As soon as you confirm your address, payment details will be sent to you so you can remit the 489 USD so we can dispatch your ATM card.

You can call paul on : +2348162029357 for details.

We await your swift reply as we have 72 hours to dispatch your ATM card.

Thank you.

Best regards,
Mr paul
UPS NIGERIA
ezepaul312@gmail.com
Phone number: +2348162029357

Email analysis :

NOTE : ezepaul312@gmail.com
NOTE : sssss.hhhh@aol.fr
NOTE : Received : from USER-PC (unknown [197.211.53.30])


NOTE : by mtaout-aad01.mx.aol.com (MUA/Third Party Client Interface)

Salam Hasan

Do you have ATM cash machine in your country?

Hello Dear,

How are you today, i am your friend from Burkina Faso. Can you use ATM Visa card to withdraw money on ATM cash machine in your country?. i want to transfer money to you from my country, it is the part of the money taken by the old politician newly forced out of power. i will change the account to your name and apply for a visa card with your name in our bank, i will send the visa card to you and you will be withdrawing money with it and always send my own percentage of the money. whenever you withdraw money you will send 50% to me and you will take 50% of the money. the visa card and the bank account will be on your name, there is no any risk involve, i assure you will never get into problem. I will be waiting for your information as soon as possible.

Your name...........................................
Age.................................................
Sex.................................................
Country.............................................
Occupation..........................................
Phone number........................................

Best Regards.
Salam Hasan.
+226 79134016

Email analysis :

NOTE : salamhasan116@gmail.com
NOTE : salamhasan114@gmail.com
NOTE : Received : from [154.66.171.50] (port=44864 helo=[10.80.204.71])
NOTE : by mail1.alpha.hostsg.com with esmtpa

ideal1

Attention

We have deposited the check of your fund (8,500 000.00USD) through Western Union department after our finally meeting regarding your fund, All you will do is to contact Western Union director Mr Dan Ike. He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as,

Receiver's Name:_______________
Address: ________________
Country: _____________
Phone Number: _____________

Though, Mr Dan Ike has sent $5000 in your name today so contact Mr Dan Ike as soon as you receive this email call +22998492837 or (info.westernunion1@post.cz)and tell him to give you the Mtcn, sender name and
question/answer to pick the $5000 Please let me know as soon as you received all your fund,

Best Regards.
Mr Rorbert Roy

Email analysis :

NOTE : info.westernunion1@post.cz
NOTE : ideal1@qatar.net.qa
NOTE : Received : from [82.148.101.116]


NOTE : (Forwarded-For: 197.234.219.92)

Rép : Urgent Response

My name is Jones Kunene a legal practitioner based in Johannesburg and the personal attorney to late Mr. Randolph Marriott, a Foreign National who died along with his wife and two sons in a robbery attack in their farm settlement home in Johannesburg, South Africa. My client was a successful and an accomplished family man who made enough fortune before his untimely death. Since then I have made several inquiries through his Embassy to locate any of his extended relatives but this exercise has proved unsuccessful. After several unsuccessful attempts, I decided to trace his relatives to locate any member of his family, not much progress was recorded.

Mr. Randolph Marriott was an influential wealthy businessman, a diamond magnet here in Johannesburg and he left behind a deposit of Fourteen Million, Five Hundred Thousand United States Dollars (USD$14.500, 000.00USD) in his domiciliary bank account in a commercial bank here in South Africa. After the death of Randolph Marriott, his bankers contacted me as his attorney to provide his next of kin who should inherit his funds. The board of directors of his bank adopted a resolution and I was mandated to provide his next of kin for the payment of these funds or forfeit the money to the bank as an abandoned property. The bankers had planned to invoke the abandoned property decree of 1996 to confiscate the funds after the expiration of the period given to me.

Fortunately, in the verge of my search, I came across your name through a consultancy firm in your Chamber of Commerce & Industry that provided me with your reputable data. Being convinced that you might provide clue to my search. I therefore decided to contact you with these facts before me because of the similarities. By virtue of my closeness to the deceased and his immediate family, I am very much aware of my client’s financial standing and the bank account he operates.

I have reasoned very professionally and I feel it will be legally proper to present you as the next of kin to my deceased client, so that you can be paid the funds left in his bank account. I therefore seek your consent to present you as the next of kin to the deceased since you are at an advantage. The proceeds of this bank account valued at USD$14.5Million US Dollars can be paid to you. We shall both share the funds equally, 50% for me and 50% to you. I shall assemble all the necessary legal documents that will be used to back up our claim. All I require is your honest cooperation to enable us seeing the deal through.

NOTE: PLEASE GET IN TOUCH WITH ME BY EMAIL FOR PRIVACY AND CONFIDENTIALITY TO ENABLE US DISCUSS FURTHER Tel: + 27 840 142 450 (joneskunene@webmail.co.za) or (joneskunene@hotmail.com)

I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law.

Yours Sincerely,
Jones Kunene Attorney

Email analysis :

NOTE : joneskunene@webmail.co.za
NOTE : no.reply@drkhalid.co.uk
NOTE : Received : from User ([223.197.230.165])