Thursday, September 4, 2014

Cartasi Phishing



Gentile cliente,

Grazie ai recenti trasferimenti illegali di conti elettronici, il tuo conto CartaSl č stato bloccato per la tua sicurezza. Questo č stato fatto per assicurare il tuo conto e le tue informazioni private. Come misura di sicurezza, vi consigliamo di collegarti al vostro Conto CartaSl e cambiare il tuo codice di accesso
Il nostro sistema ti aiuterŕ rapidamente a cambiare il tuo codice di accesso. Il tuo conto non sarŕ sospeso in questo caso, perň, se invece, 48 ore dopo aver ricevuto questo messaggio, il tuo conto non verrŕ confermato, ci riserviamo il diritto di sospendere la tua registrazione CartaSl. CartaSl č autorizzato a fare qualsiasi tipo di operazione affinche anticipi le fraude.

Vi preghiamo di confermare e aggiornare i vostri dati oggi

Cordiali saluti,
CartaSl S.p.A

Conferma

Copyright 2014 CartaSi S.p.A. All rights reserved.

NOTE : info@cartasl.com
NOTE : Gentile ***
NOTE : Click "Conferma"
NOTE : "Conferma" open http://j.mp/wget-clientes
NOTE : Redirect to http://carta-si-it-gtwpage.www1.biz/cas/




NOTE : "Prosegui" redirect to http://carta-si-it-gtwpage.www1.biz/cas/confirm.php?cmd=login-submit&dispatch=b4bf53c0db18fd85h0a134
NOTE : Redirect to http://www.cartasi.it/gtwpages/index.jsp

WWW1.BIZ WHOIS :
=========================================================
Domain Name: WWW1.BIZ
Domain ID: D1145943-BIZ
Sponsoring Registrar: NETWORK SOLUTIONS INC.
Sponsoring Registrar IANA ID: 2
Registrar URL (registration services): whois.biz
Domain Status: clientTransferProhibited
Registrant ID: 52605919
Registrant Name: ChangeIP Network OperationsZZZ
Registrant Address1: 1200 Brickell Avenue
Registrant Address2: Suite 1950
Registrant City: Miami
Registrant State/Province: FL
Registrant Postal Code: 33131
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.8007913367
Registrant Facsimile Number: +1.7862246593
Registrant Email: noc@changeip.com
Administrative Contact ID: 52605919
Administrative Contact Name: ChangeIP Network OperationsZZZ
Administrative Contact Address1: 1200 Brickell Avenue
Administrative Contact Address2: Suite 1950
Administrative Contact City: Miami
Administrative Contact State/Province: FL
Administrative Contact Postal Code: 33131
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.8007913367
Administrative Contact Facsimile Number: +1.7862246593
Administrative Contact Email: noc@changeip.com
Billing Contact ID: 16819660
Billing Contact Name: ChangeIP.com
Billing Contact Organization: ChangeIP.com
Billing Contact Address1: 1200 Brickell Avenue
Billing Contact Address2: Suite 1950
Billing Contact City: Miami
Billing Contact State/Province: FL
Billing Contact Postal Code: 33131
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.8007913367
Billing Contact Email: billing@changeip.com
Technical Contact ID: 52605919
Technical Contact Name: ChangeIP Network OperationsZZZ
Technical Contact Address1: 1200 Brickell Avenue
Technical Contact Address2: Suite 1950
Technical Contact City: Miami
Technical Contact State/Province: FL
Technical Contact Postal Code: 33131
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.8007913367
Technical Contact Facsimile Number: +1.7862246593
Technical Contact Email: noc@changeip.com
Name Server: NS1.CHANGEIP.ORG
Name Server: NS2.CHANGEIP.ORG
Name Server: NS3.CHANGEIP.ORG
Created by Registrar: BULKREGISTER.COM, INC.
Last Updated by Registrar: NETWORK SOLUTIONS INC.

WHOIS CARTASL.COM :
=========================================================
Domain Name: CartAsl.com
Registry Domain ID: 1862943261_DOMAIN_COM-VRSN
Registrar WHOIS server: whois.NameBright.com
Registrar URL: http://www.NameBright.com
Updated Date: 2014-06-15T00:00:00.000Z
Creation Date: 2014-06-15T00:00:00.000Z
Registrar Registration Expiration Date: 2015-06-15T00:00:00.000Z
Registrar: BlastDomains LLC
Registrar IANA ID: 1678
Registrar Abuse Contact Email: abuse@NameBright.com
Registrar Abuse Contact Phone: +1.303.893.0547
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Domain Admin
Registrant Organization: HugeDomains.com
Registrant Street: 2635 Walnut Street
Registrant City: Denver
Registrant State/Province: CO
Registrant Postal Code: 80205
Registrant Country: US
Registrant Phone: +1.303.893.0552
Registrant Email: domains@hugedomains.com
Registry Admin ID:
Admin Name: Domain Admin
Admin Organization: HugeDomains.com
Admin Street: 2635 Walnut Street
Admin City: Denver
Admin State/Province: CO
Admin Postal Code: 80205
Admin Country: US
Admin Phone: +1.303.893.0552
Admin Email: domains@hugedomains.com
Registry Tech ID:
Tech Name: Domain Admin
Tech Organization: HugeDomains.com
Tech Street: 2635 Walnut Street
Tech City: Denver
Tech State/Province: CO
Tech Postal Code: 80205
Tech Country: US
Tech Phone: +1.303.893.0552
Tech Email: domains@hugedomains.com
Name Server: nsg1.namebrightdns.com
Name Server: nsg2.namebrightdns.com
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System:
http://wdprs.internic.net
--- Last update of WHOIS database: 2014-09-04T09:15:24.390Z ---
=========================================================

MAIL :
=========================================================
NOTE : Received : from sum8686.hostlife.net ([195.16.88.107])
NOTE : Received : from cartasl.com (unknown [37.59.149.228])
NOTE : info@cartasl.com does not designate 195.16.88.107 as permitted sender)
=========================================================

eFax message from "15085195849" - 1 page(s), Caller-ID: 1-229-524-2811

eFax

Fax Message [Caller-ID: 1-229-524-2811] You have received a 1 page fax at 2014-09-03 10:42:17 EDT. * The reference number for this fax is atl_did1-1406318502-19175917910-54. View this fax using your PDF reader. Please visit www.efax.com/en/online_fax_FAQ if you have any questions regarding this message or your service.

Thank you for using the eFax service!

Powered by j2 © 2012 j2 Global Communications, Inc. All rights reserved. eFax® is a registered trademark of j2 Global Communications, Inc. This account is subject to the terms listed in the eFax® Customer Agreement.

< FAX_20140903_1409680198_144.pdf >

My Dear Beneficiary

Good Morning Once Again My Dear Beneficiary, This Is Barrister Mathew Alfred the Only Accredited Attorney from Head Quarter Office Western Union Money Transfer Service Benin Republic Chapter, Please I Have A Question To Ask You Right Now In Regard To Your Fund Transfer, What Is Your Suggestion Concerning Your Fund Which Has Been Deposited Here For Long Time Now? Do You Want To Abandon Your Fund Here Simple Because Of The Western Union Transfer Cost Rate Which Is Not Up To The Two Percent Of What Is Coming On Your Way Please What Are Your Reasons? I am Asking You These Questions Because Of the Love I Have For You Otherwise I Can Not Even Bother To Ask You Because It Is Your Fund Not Mine And I Can’t Not Sit Down Washing You, Losing Your Fund Because Of The Little Fee You Suppose To Pay To Receive Your Fund. Please I Need Your Reply As Soon As You Read This Message Thanks And I Pray That This Message Will Merit Your Understanding.

Best Regard
Barrister Mathew Alfred Esq
from Western Union Head Office Benin Republic

Email extracted :

web@audiosolutions.net.au, web@justinmichie.com, webdesign@webstop.com.au, webdeveloper@eldorrado.com, webmaster@4crazy.ch, webmaster@achristianlink.com, webmaster@becomeone.com, webmaster@beltonen-freaks.com, webmaster@bestpricedentistry.com, webmaster@boaze.com, webmaster@borinquentours.net, webmaster@bybloshotel.com, webmaster@camreo.com, webmaster@carolinayh.com, webmaster@cash-back-deals.com, webmaster@crystalcoastag.org, webmaster@detectordog.com, webmaster@distributeurs-automatiques.be, webmaster@dr-belair.com, webmaster@easytravelgroup.co.uk, webmaster@eroticasmansion.com, webmaster@francinedee.com, webmaster@freshslice.com, webmaster@globalshopsearch.com, webmaster@humpsoftware.com, webmaster@internetquepos.com, webmaster@irondragonsoftware.com, webmaster@juicedpro.com, webmaster@kellyscrossstitch.com, webmaster@keywordon.com, webmaster@lasting-expressions.com, webmaster@leylandcooper.com, webmaster@linkspider.co.uk, webmaster@maw2000.net, webmaster@moviestatus.com, webmaster@nanas-boutique.com, webmaster@netprofitsite.com, webmaster@oregoncitylink.com, webmaster@parceljunction.com, webmaster@peacockgallery.org.uk, webmaster@pedalifyouwant.com, webmaster@perfectme.co.za, webmaster@petpal.info, webmaster@plr8.com, webmaster@pocketgamepark.com, webmaster@progressivegardening.com, webmaster@rosevillebareskinperfected.com, webmaster@saxoncourt.com, webmaster@scrapwithshelby.com, webmaster@service-raider.co.uk, webmaster@sexy-x-rated.com, webmaster@sgpropertydeals.com, webmaster@sharese.com, webmaster@slidewizards.com, webmaster@spacemodz.com, webmaster@swish-db.com, webmaster@swr-enterprises.org, webmaster@sydneystore.net, webmaster@tecnouser.com, webmaster@teenbisex.net, webmaster@tekhz.com, webmaster@telecommtraining.info, webmaster@thealtontowersguide.com, webmaster@thedisciplinarian.com, webmaster@theeroticanetwork.info, webmaster@toservehim.com, webmaster@vortexwebdesign.com, webmaster@wayofgun.com, webmaster@win2k3.info, weddingvows@on.aibn.com, wendy@barcelonaprelude.com, wendy@perfectfitweb.com, werbeagentur@red-baron.de, wermagic.garry@aol.co.uk, werwin2@nc.rr.com, westgate@west.net, wfleonard@saxonenterprises.net, wfowler1@excite.com, wgrindstaff@ec.rr.com, whitework@hotmail.ca, wholenike168@yahoo.com.cn, wholesale@tradur.com, wickerman@neo.rr.com, wightlightsupplies@fsmail.net, wilbake@fastmail.fm, wilg@coralwave.com, will@worshamvaughan.com, william.craig@wcci.biz, william@gordonengraving.co.uk, william@mortonvisuals.com, william@snuder.com, william@williammarshallrealtor.com, williamhoedt@tx.rr.com, wilson@accreditservices.co.uk, wilson@surfbest.net, windsurface@centurylink.net, wiwewa@bluewin.ch, wizerhealth@yahoo.ie, wlancaster@kc.rr.com

Please act accordingly !!!

Dear Beneficiary,

I am Janet L. Yellen, the newly-sworn Chair, U.S. Federal Reserve Bank. You will get more information about me here.

http://www.federalreserve.gov/aboutthefed/bios/board/yellen.htm
http://www.washingtonpost.com/business/economy/new-fed-chief-janet-yellen-has-long-history-of-breaking-barriers/2014/02/02/9e8965ca-876d-11e3-833c-33098f9e5267_story.html

I have made it my first point of call since taking office to settle all outstanding payments accrued to individuals/corporations with respect to local and overseas contract payment, debt re-scheduling and outstanding compensation payment. This is to make sure all outstanding payments are settled before the end of the fiscal year 2014. I have your file here in my office and it says that you are yet to receive your fund valued at $850,000 (Eight Hundred and Fifty Thousand United States Dollars only). This money will now be transferred to your nominated bank account or your preferred payment option. You are advised to kindly reply this email with the below details enclosed to help us process your payment;

(1) Full Names:
(2) Residential Address:
(3) Current Phone Number:
(4) Age:
(5) Country of Residence:
(6) Occupation:

Thanks for your co-operation as I wait to hear from you.

Janet L. Yellen
Chair, U.S. Federal Reserve Bank

Note: The information contained in this e-mail is private & confidential and may also be legally privileged. If you are not the intended recipient, please notify us, preferably by e-mail, and do not read, copy or disclose the contents of this message to anyone.

Rép :Release/Transfer Notice of your Approved Funds

ALPHA BANK
66 Cannon Street, EC4N 6EP.
From the Desk of Mr.Stewart Hartley
Official Web Account:
Our Ref: UK/OHG/OXD1/2014
TELEX: UKGOVAB.

Highly Confidential...

PAYMENT FILE: UN/AB/10/385953

Attn: Dear Beneficiary

Release/Transfer Notice of your Approved Funds ($800,000.00USD) Eight hundred thousand united states dollars.May you remain favored and I pray. Sorry for the inconveniences and payment delay that was rendered to you in your line of contract/Inheritance Payment transaction with some government and private Officials some while ago. Be informed that Presently we are being paid by the WORLD BANK in conjunction with the ( UNITED NATION ) in other to avert beneficiary funds delays and compensate victims of scam in recent times and also payment of contract inheritance sum. So far,we have succeeded in Settling (Mrs.Ann Kleyser,Mr. Edward Drake, Mr.Chun Yeung etc). Your Funds were returned back to Treasury,some while ago because you did not finalize your claim for it. A week ago,The Executive Committee collectively agreed to release the sum of $800,000.00 USD to you but to our surprise you sent down your representatives,Mr Tim Parker and Mr.Rowland Somer to collect this Funds on your behalf this morning. Dear Beneficiary Did You Send Them ?? And since you do not send them you are advise to kindly re-confirm to us the followings below so that the Bank will not be held responsible for paying into the wrong account Name.

1) Your full name.
2) Contact Address
3) Phone,
4) Fax.
5) Occupation.
6) A valid proof of Identification.

In receipt of the above information, your payment will be approved and paid to you by electronic wire transfer (T/T) to your nominated bank account,you are advice to get back to me immediately you receive this mail for immediate payment and instructions to credit your account, which is schedule to hold within 24 hours upon confirmation of the above mention requirement,via email ( alphabankplc17@aol.co.uk )

Officially Sealed

Mr Stewart Hartley
Dir,of Foreign Payment Transfer
Alpha Bank

Simply Contact Diplomat Paul Adams

Attn: Please,

Simply Contact Diplomat Paul Adams, for your consignment box 1.7M, with your full delivery address,phone number And your nearest airport to land, for the delivery of your Consignment box, contact Email (ladyrose.cynthia1@aol.fr)

Thanks
Miss.Rose Cynthia

Rép : We have decide to donate the below sum to you

Hello

My wife Violet and I Allen Large won 11.2M USD in a lottery 6-49 in July, 2010. We have decided to donate the sum of $500,000.00USD to you as part of our charity project. Contact us via our personal email for more details ( mr_mrs_allen.violet_large@aol.com ) and for verification : http://www.lotterypost.com/news/222928 You are to contact our attorney Mr Dale Sandera via the email below and reconfirm your home address and your phone number so that he can forward to you all the paper works on how you can received/claim this funds.

Email: dalesanderachambers@live.com
Email: dalesandera_chambers@lawyer.com

Allen and Violet Large
LOWER TRURO,
CANADA

Your First Payment Of $8,000.00 Has Been Sent !!

Good Day? My Dear, Please contact Money Gram office for your funds worth sum of $1.500,000.00 has been released and the transfer began today through Money Gram and amount which you will be receiving each day is $8,000.00 daily. So contact the manage in Money Gram Right now and ask him for your first payment,Money Gram offices manage name is Dr,Mike Muna, and ask him what you need to do to enable them activate your account file so that you will be Able to pick your first payment ok Email: (www.moneygramtransfer@yahoo.com) or call Tel:+234-818-844-1236

1.Your receiver's name=====
2.Your country========
3.Your cities========
4.Your telephone=======
6.Your id passport=====

Promotion Officer
YOURS SINCERELY,
Names:Mrs Susan Uda
Website: www.moneygram.com
Email: www.moneygramtransfer@yahoo.com
Save time, send money, earn rewards! MoneyGram is a service people trust.
ANNIVERSARY DAY
Thank you for using Money Gram!

LONDON ATM DEPT

Dear Beneficiary

This is to inform you that your delayed payment has been approved for disbursement by the British Finance ministry in conjuncture with the United Nations Financial settlement unit. We are fully mandated to pay you the sum of US$1.7Million as compensation. Your email address is among those earmarked for payment in the month of September 2014. Due to petitions received from foreigners about fake government officials engaged in diverting their funds; the British ministry of Finance ordered that all foreigners' funds should be paid via the ATM Debit card systems whereby you can use the ATM card for cash withdrawal from any POS center around your country.

Note: Because of impostors, you are required to use this code (ATM-150270) as your subject when contacting this payment center. Clearly state your full names, phone number, and delivery address where you want the card delivered to you. All the relevant payment approvals/letter of administration shall be issued to you for your acknowledgement. You are warned to stop any further communication with any other person(s) or office(s) proving to be government officials to avoid any hitches in receiving your Payment.

Yours Faithfully,

Mrs. Helen Wards
ATM payment dept
51 De Montfort Street
Leicester , LE1 7BB , UK .

YOUR SHIPMENT NO AWB7704567114

Attention Beneficiary,

We wish to inform you that the diplomatic agent conveying your two consignment box with (Shipment No AWB7704567114), is presently stranded in your Airport. The diplomat arrived your State with your consignment boxes worth of $1.7Millions(One Million, Seven Hundred United States Dollars Only) few hours ago. You recall he was cleared for the delivery and he left for your destination immediately. But unfortunately He misplaced your address as He could not locate you. He is currently stranded at your airport, So you are advised to reconfirm your information again to the Diplomat immediately to enable him deliver your consignment box to your door step without any further delay.

You are to reconfirm this information to him immediately as follows:

(1)Your Full Name:_______________
(2)Current Home Address:___________
(3)Your Home phone:______________
(4)Your Cell Phone:__________________________
(5)Name of your Nearest Airport :_______________________

Please send the contact information to him through his e-mail address, You should contact the diplomatic agent with the email below and with the required information requested above.

Here are the diplomat contact:

Diplomat Name : Diplomat Nasir Boniface
EMAIL: dipnasirb@barid.com

So contact him Immediately to deliver your consignment box first thing tomorrow morning and get back to us immediately you contact him to make sure that your fund has been delivered to you. He is waiting to hear from you today with the information.

NOTE: The Diplomatic agent does not know that the content of the consignment box is $1.7 Millions United States Dollars and under no circumstances should you let him know the content. The consignment was moved from here as family treasures, so never disclose to anyone the content to make sure it got to you safely.

Yours in service,
Dr. Sandra Johnson
Foreign Dispatch Unit

HELLO DEAR AND HOW ARE YOU DOING TODAY

good day dear and how are you? i am Lila by name its nice meeting you, it will be my great pleasure to know more about you ok, so i will like you to reply back to me through my private email address, is very important, because i am not always at the dating site OK, Write to me now so that we talk more and shear picture together OK, please do not fail to write to me OK
------------------------------------------------------------------------------------------
Guten Tag liebe und wie sind Sie? ich bin Lila nach Namen seiner nice meeting you, wird es mir eine große Freude, mehr über Sie wissen, ok, also ich werde wie Sie, um wieder mit mir durch meine private E-Mail-Adresse zu antworten, ist sehr wichtig, weil ich nicht immer an die Dating-Website OK, Schreiben Sie mir jetzt so, dass wir mehr und Scher Bild miteinander reden OK, bitte versäumen Sie nicht, mir zu schreiben OK
------------------------------------------------------------------------------------------
Buen día querida y cómo estás? soy Lila por su nombre su placer conocerte, que será un gran placer para saber más de ti ok, así que me gustaría que para responder de nuevo a mí a través de mi dirección de correo electrónico privado, es muy importante, porque no siempre estoy en el sitio de citas bien, escribir para mí ahora para que podamos hablar más y la imagen de cizalla juntos bien, por favor no deje de escribir a mí Aceptar
---------------------------------------------------------------------------------------
Bonne journée chère et comment êtes-vous? je suis Lila par nom de son plaisir de vous rencontrer, ce sera un grand plaisir à en savoir plus sur vous ok, donc je voudrais que vous répondez de nouveau à moi à travers mon adresse email privé, est très important, parce que je ne suis pas toujours à la site de rencontre sur OK, Ecrivez-moi maintenant de sorte que nous parlons de plus en image de cisaillement ensemble OK, s'il vous plaît ne manquez pas de m'écrire OK
------------------------------------------------------------------------
goede dag lieve en hoe gaat het? ik ben Lila op naam zijn leuk je te ontmoeten, zal het mij een groot genoegen om meer over je ok weten, maar ik zal graag willen dat u antwoord terug mij via mijn prive e-mailadres is zeer belangrijk omdat ik ben niet altijd op de dating site OK , hier is mijn prive e-mail

lilazigar@yahoo.com

Schrijf mij nu zo dat we praten meer en shear afbeelding samen OK, dan kunt u niet nalaten om me te schrijven OK
-------------------------------------------------------------------------
Хороший день дорогая и как ты? я Лила по имени его приятно познакомиться, это будет мое большое удовольствие знать больше о вас хорошо, таким образом, я хотел вас ответить обратно ко мне через мой личный адрес электронной почты, очень важно, потому что я не всегда в сайт знакомств в порядке, Напишите мне сейчас, так что мы говорим все больше и картина сдвига вместе хорошо, пожалуйста, не не в состоянии написать мне ОК