Wednesday, October 29, 2014

EC21 Membership Update. (EC21 Phishing)

Date: 2014.10.29

Dear Valued User:
EC21.com service verification !

Your EC21.com service account needs an important email verification due to the new upgrade on our system security server. you are therefore required to verify your email account by following the reference below:

Click here now to get your email verified >>

Thank you.
EC21 service team
support@ec21.com

Dynamic Marketplace for Global B2B – EC21
Copyright(c) EC21 Inc. All Rights Reserved.

Phishing analysis :

CLICK : Click here now to get your email verified >>
OPEN : http://sudhasheth.com/EC21.com/index.html
VALIDATE FORM :


REDIRECT : http://supplier.ec21.com/

sudhasheth.com whois :

Domain Name: SUDHASHETH.COM
Registrar URL: http://www.wildwestdomains.com
Registrant Name: sudha sheth
Name Server: NS1.GVODNS.COM
Name Server: NS2.GVODNS.COM
DNSSEC: unsigned
Registry Registrant ID:
Registrant Name: sudha sheth
Registrant Organization:
Registrant Street: 1201,Era 4,MarathonNextgen ganpatrao Kadam marg,
Registrant City: Mumbai
Registrant State/Province: Maharashtra
Registrant Postal Code: 400013
Registrant Country: India
Registrant Phone: +91.9987498648
Registrant Email: shethsudha@hotmail.com

Email analysis :

NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html
NOTE : Return-Path : < http@neo.backiel.com.pl >
NOTE : Received : from neo.backiel.com.pl (neo.backiel.com.pl. [194.88.154.10])
NOTE : Received : by neo.backiel.com.pl (Postfix, from userid 51)
NOTE : Received-Spf : client-ip=194.88.154.10;
NOTE : X-Php-Originating-Script : 51:mailer.php
NOTE : Content-Transfer-Encoding : 8bit
NOTE : EC21 Membership Update.

Diplomat Louis Thomas

From:Diplomat Louis Thomas
United State, New York.

This is to inform you that your funds of US$7.5 Million has been approved for immediate delivery to you. For the purpose of clarification,you are advised to reconfirm your Full Names,Direct Mobile, Home, Office Telephone Numbers, Your International Passport or Driver's License,Physical Address with Zip Code and your so that there will been no error during the delivery of the funds to you in your country of residence. Your quick response will be highly appreciated.

From:Diplomat Louis Thomas

Reward Notification

Final Notification

We are delighted to announce that your e-mail address has just won you the sum of $2.5 Million in our E-mail free Online draws held in England October 2014. Your e-mail emerge in category A and you are entitled to reward sum of $2.5 with this Free Ticket Numbers:EGN658214. You are advised to immediately send your contact details to Dr.John J. Dignam.on his email address (johnkig2@aol.com) Tel: +447448769707 for immediate transfer of your reward cash prize to you. N.B. Any breach of confidentiality on the part of the Winners will result to disqualification, You are to immediately contact Dr.John J Dignam only with this email (johnkig2@aol.com)

Kind Regards
Dr.John K. Dignam.
Tel: +447448769707
Email: johnkig2@aol.com

Email analysis :

NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < 101@ushk.ru >
NOTE : Return-Path : 101@ushk.ru
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Mime-Version : 1.0
NOTE : X-Priority : 3
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Clientproxiedby : EX-CA-MB-01.USHK.RU (fc00:1:1:1::15)
NOTE : To EX-CA-MB-01.USHK.RU (fc00:1:1:1::15)
NOTE : Content-Type : text/plain; charset="Windows-1251"
NOTE : Received-Spf : client-ip=195.58.7.97;
NOTE : Received : from mail.ushk.ru (mail.ushk.ru. [195.58.7.97])
NOTE : Received : from User (192.168.0.1) by EX-CA-MB-01.USHK.RU (fc00:1:1:1::15)
NOTE : Final Notification

Rép : FINAL NOTICE ON THE TRANSFER OF YOUR FUNDS IN YOUR FAVOR

FEDERAL RESERVE BANK,
Intl. Banking Centre
33 Liberty street, New York
NY 10045

To: Sir,

This message is intended for the named recipient only and may contain privileged and confidential information. If you have received this in error, please notify us immediately. Please do not disclose the contents to anyone or copy it to outside parties. Thank you.

RE: FINAL NOTICE ON THE TRANSFER OF YOUR FUNDS IN YOUR FAVOR

We write to you regarding the difficulties you have been having in receiving your long over dued payment, based on the reports by the FBI, The Government has issued an express order that all beneficiaries such as you be paid immediately, the government will buy back the debt owed to you and recover the funds itself because it will be impossible for you as an individual to receive the payment, Following the directives of the government regarding your over delayed payment, we wish to let you know that we have been having a series of meetings with the Department of Homeland Security,Washington, USA, the United Nations and the World Bank regarding the immediate release your funds to your designated bank account. We wish to explain further that we were authorized to release the funds to your account immediately to avoid all you have been going through in the past, we have verified and approved the funds for immediate remittance to your account, to this end we advise that you send the following information to me via email so we can commence with the transfer immediately.

Your full name:
Your Telephone Number:
Your Home Address.
Your complete banking details
Your Occupation
The expected amount

Once we receive the information we will verify them and then get back to you with the final transfer process. Your urgent response to this message is expected, you are advised to STOP all communications with anyone else regarding this payment, if the government discovers that you are still making contacts with other people we will be forced to cancel this payment permanently and I assure you it will never be paid again. Your urgent response shall expedite the remittance of your funds within the next few banking days.

Kindly contact us via this email add ( info@federalreservebank.tk )

Regards,
MS. CHRISTINE CUMMING
Vice President

Email analysis :

NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < federalreservebank3@yahoo.es >
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Mime-Version : 1.0
NOTE : X-Priority : 3
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : Content-Type : text/html; charset="Windows-1251"
NOTE : Received : from unknown (HELO s18541.pbxtra.fonality.com)
NOTE : (207.8.234.158)
NOTE : Received : from User (pbxtra18541 [127.0.0.1])
NOTE : by s18541.pbxtra.fonality.com (Postfix)
NOTE : Rép : FINAL NOTICE ON THE TRANSFER OF YOUR FUNDS IN YOUR FAVOR

INTERNATIONAL DEBT SETTLEMENT DEPARTMENT

ATTENTION BENEFICIARY

Am Jim Eric White United Nation Organization representative in west Africa with base in Benin Republic going by series of petition received from International Financial Agencies on the way your inheritance fund was handled by our correspondence office, after extensive close door meeting with Board of Directors and other Stakeholders in the Government, Subcommittees of the Federal Republic of Benin. It has been resolved and agreed upon that your Inheritance Fund would be released to you on a special method of payment, which is SWIFT ATM CARD. This method of payment is designed by the Government to avert fraud perpetration or stoppage of fund by some Agencies either through Anti-Terrorist Certificate or other certificates and this swift atm card would be issued to you upon meeting the Bank Requirement. Furthermore,this office has been mandated to take charge of the Issuance of the credit card, and your inheritance payment file should be passed to my desk for clarification upon certification that your file is OK. This Office would direct you on how to receive your overdue inheritance fund via SWIFT ATM CARD. The card would be delivered to you via Courier service and in the light of this aforementioned, you are required to furnish this office with the following information if different from the one we already have:

Your Full Name........................................
Address:..............................................
Country of origin......................................
Occupation............................................
Your Next of Kin Name.................................
your date of Birth....................................
Your telephone number.................................
fax...................................................
Office address(if any)................................

This information would be used in opening of an account here and its from the account that the ATM Card would be used in the issuance of swift atm card in your favor with the card number and all your information inserted into the card, Upon completion of this issuance of the ATM Card it will be sent to you via Courier service to your residential address. Kindly furnish this office with your contact information in order to reconfirm if its in line with the one contained in our payment data. Be informed that your fund has been called back and its now in suspended account here UNITED BANK FOR AFRICA (UBA) and a new account will be opened in your name before the Card is issued.

Waiting for an urgent response via our office mail address: officefile19@yahoo.com

Yours Faithfully,
Mr. Jim Eric White
United Nation org. Reps.
West Africa

Ce n'était pas facile, mais j'ai réussi

Bonjour ,

Je suis Prof. Dr. F. Brandt et je viens de trouver la faille dans les systèmes de roulettes sur les casinos en ligne. Il n’a pas été facile, mais j’ai utilisé mes connaissances en informatiques et cryptographiques et j’ai réussi. Il fonctionne à 100% et c'est incroyablement simple.

Jouez maintenant et commencez de gagner!

Si vous avez des questions, n'hésitez pas à me demander.

À bientôt!
Prof. Dr. F. Brandt

Email analysis :

NOTE : Return-Path : < brandtmethode@silver-trace.com >
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Received : from mail4.silver-trace.com
NOTE : (HELO 2091042181064.silver-trace.com) (209.104.218.106)

Link analysis :

CLICK : Jouez maintenant et commencez de gagner!

OPEN : http://silver-trace.com/link.php
PARAM : ?M=55865709
PARAM : &N=78152
PARAM : &K=501bed76e96969e2e28f00282516c799
PARAM : &L=105444
PARAM : &W=34216
PARAM : &F=H

REDIRECT : http://www.brandtmethod.com/FR/
PARAM : ?tid=465450983d25880

silver-trace.com whois :

Domain Name: SILVER-TRACE.COM
Registry Domain ID: 1870222565_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.instra.net
Registrar URL: http://www.instra.com/
Updated Date: 2014-08-14T17:56:22Z
Creation Date: 2014-08-08T12:59:11Z
Registrar Registration Expiration Date: 2015-08-08T12:59:11Z
Registrar: Instra Corporation Pty Ltd.
Registrar IANA ID: 1376
Registrar Abuse Contact Email: legal@instra.com
Registrar Abuse Contact Phone: +61.397831800
Reseller: Instra Corporation Pty Ltd http://www.instra.com/
Domain Status: ok - http://www.icann.org/epp#OK
Registrant Name: Barbara Carmack
Registrant Street: 3355 West 80th Street
Registrant City: Hialeah
Registrant State/Province: Florida
Registrant Postal Code: 33018 Registrant Country: US
Registrant Phone: +1.3058270049
Registrant Email: barbara_carmack@yahoo.com

brandtmethod.com whois :

Domain Name: BRANDTMETHOD.COM
Registry Domain ID: 1876157951_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.instra.net
Registrar URL: http://www.instra.com/ Updated Date: 2014-10-09T18:44:10Z
Creation Date: 2014-09-17T14:09:35Z
Registrar Registration Expiration Date: 2015-09-17T14:09:35Z
Registrar: Instra Corporation Pty Ltd.
Registrar IANA ID: 1376
Registrar Abuse Contact Email: legal@instra.com
Registrar Abuse Contact Phone: +61.397831800/
Registrant Name: C/O Private Ranger Limited
Registrant Organization: Registrant of brandtmethod.com
Registrant Street: Level 31 Vero Centre, 48 Shortland Street
Registrant City: Auckland Registrant State/Province: Auckland District
Registrant Postal Code: 1010 Registrant Country: NZ
Registrant Phone: +64.98011234
Registrant Email: 6852201@privateranger.com

CHINA SHIPPING

Dear friend,

Nice day!

This is Kevin,we are a professional international freight forwarder in Shenzhen China. As an importer if you have any cargos from China(Shenzhen/Guangzhou/Shanghai/Ningbo/Qingdao...), we hope we can serve you with shipping by sea or air. As your territory is contained in our advantage shipping line.

Here are our core business:

- FCL/LCL sea freight
- Air freight
- customs clearance
- collect goods from different suppliers
- bonded warehouse
- Related paper work
- insurance agent business

If you have any inquiries, we surely offer our competitive rates and professional service to you! Hope we can start our cooperation in near future!

Best Regards
KEVIN

*******************************************************
CHINA PLUS LOGISTICS LTD
Room 906,North Block,International Commercial Building,
Renmin Nan Road,Luohu District,Shenzhen,China
TEL:86-0755-82196550 MOB:86-13533252054
FAX:86-0755-82209825
QQ:32841398
SKYPE:ehaifeng99
Website:www.plus-cargo.com

FROM THE DESK OF YOUR DIPLOMATIC AGENT MR. JAMES LONG

FROM THE DESK OF YOUR DIPLOMAT
AGENT JAMES LONG
FOREIGN DELIVERY MAN OF GOD,
WORLD REGULATORY

ATTENTION. MY DEAR

I AM DIPLOMATIC AGENT MR. JAMES LONG PLEASE WHAT IS GOING ON? WHERE ARE YOU RIGHT NOW,WELL IF WHAT AM HEARING IS NOT TRUTH KINDLY GET BACK TO ME VERY URGENT TO THIS EMAIL, WE HAVE A CRUCIAL SITUATION HERE IN THIS INTERNATIONAL AIRPORT OHIO IN UNITED STATE OF AMERICA, PLEASE I NEED TO KNOW THE TRUTH BEFORE HANDING OVER YOUR CONSIGNMENT TO THEM FOR ME TO GO BACK TO MY COUNTRY, THE SITUATION HERE IN THIS AIRPORT IS THAT SOME GROUP OF PERSONS IN NUMBER OF TWO UNITED STATE OF AMERICA CAME TO THIS AIRPORT AND TOLD ME THAT YOU HAD AN AUTO-CRASH LAST week AND YOU DIED TWO DAYS AGO THEREAFTER, AND THAT UPON YOUR DEATH, YOU ASSIGNED THEM TO BE THE NEXT OF KIN OVER YOUR FUNDS AND PROPERTIES, SO PLEASE I AM VERY MUCH CONFUSED HERE I DON’T KNOW WHAT TO DO BECAUSE THEY BROUGHT A DEATH CERTIFICATE SIGNED BY A MEDICAL DOCTOR SHOWING THAT YOU ARE DEAD. THEY ALSO BROUGHT A SIGNED LETTER OF CHANGE OF OWNERSHIP AND APPOINTMENT OF NEXT-OF-KIN OVER YOUR PROPERTIES INCLUDING YOUR FUNDS ON THE CONSIGNMENT BOX WORTH $2.5MILLIONS THAT ARE WITH ME IN THIS AIRPORT. THEY SAID THAT YOU EVEN MADE A PROVISION OF THE NEEDED $150.00 USD FOR THEM TO CLEAR ALL THE OUTSTANDING BILL DELAYING THE SMOOTH DELIVERY OF YOUR CONSIGNMENT BOX TO YOU IN YOUR HOME, BUT PERSONALLY I'M NOT WELL CONVINCED THAT YOU ARE DEAD THAT IS WHY I ASKED THEM TO HOLD BACK THE $150.00 AND COME BACK NEXT WEEK SO THAT I WILL DO MY OWN INVESTIGATIONS TO FIND OUT IF YOU ARE DEAD OR ALIVE BECAUSE I AM CONFUSE IF IS TRUTH OKAY. PRIOR TO THIS DEVELOPMENT I TOLD THEM TO COME BACK NEXT WEEK, BUT IN THE MEANWHILE I HAVE REPORTED THIS CASE TO THE AIRPORT POLICE AUTHORITY, SO IF INDEED YOU ARE ALIVE, I WILL WANT YOU TO WRITE ME BACK IMMEDIATELY YOU RECEIVE THIS EMAIL WITH YOUR FULL INFORMATION TO ENABLE ME VERIFY AND KNOW IF IT SAME INFORMATION I HAVE FOR THIS DELIVERY OK.BEFORE IT WILL BE TOO LATE, TO DECIDE ON HOW TO GET THEM ARREST WITH THE AIRPORT POLICE AUTHORITY WHEN THOSE MEN COMES BACK NEXT WEEK MONDAY. DUE TO MY SITUATION HERE IN AIRPORT I CAN NOT MAKE A CALL SO I WANT YOU TO CALL MY DIRECTOR ON +229 61390784 OR YOU WRITE ME BACK WITH THE PAYMENT INFORMATION OF THE NEEDED FEE OF $150.00 DOLLARS,YOU CAN SEND THE FEE TO THE BENIN REPUBLIC WHICH IS THE ORIGIN COUNTRY OF THE CONSIGNMENT BOX,we implore you to expedite immediate action in sending the $150.00 via Western Union OR Money Gram Money Transfer.

You are instructed to send the money through Money Gram money transfer only for urgent pick up as soon as possible with the below information.

RECEIVER NAME ....... ANTHONY OKAFOR
COUNTRY... BENIN REPUBLIC
CITY.... COTONOU
TEXT QUESTION...URGENT
ANSWER....NEEDED
AMOUNT .....$150.00 USD only
SENDER NAME.....
MTCN.........

KINDLY DO THAT IMMEDIATELY BECAUSE IF YOU FAIL TO DO THAT, I WILL ASSUME THAT YOU ARE DEAD AS THEY HAVE CLAIMED, AND HAND OVER YOUR CONSIGNMENT BOX WORTH $2.5MILLIONS OVER TO THEM AND GO BACK TO MY COUNTRY, YOUR NON-COMPLIANCE WILL MEAN THAT ACTUALLY YOU ARE DEAD AS THEY CLAIM AND I WILL NOT HESITATE TO HAND OVER YOUR CONSIGNMENT BOX TO THEM AND GO BACK AS THEY HAVE PLEADED TO ME.

I WILL BE WAITING TO HEAR FROM YOU TODAY?

THANKS
YOURS FAITHFULLY
DIPLOMAT MR. JAMES LONG
E-MAIL { m.rjameslong02014@gmail.com }

PLEASE CONTACT THE I.R.S OFFICE FOR YOUR CONSIGNMENT BOX.

U.S.A. Internal Revenue Service Department. Bureau of Consular Affairs Washington , DC 20520 Greeting from USA I.R.S, Contact person:Mr.Douglas Shulman Email:(usaservice@outlook.com) Attention: We write to inform you that your package with No.-35460021, Allocation No: 674632 Password No: 339331, Pin Code No: 55674 and your Certificate of Merit Payment No: 103, Released Code No: 0763; Immediate Telex confirmation No:-1114433; Secret Code No: XXTN013. has been in Customs facility custody waiting for resolutions of the clearance to further the delivery to your delivery address by the delivery Agent who came all the way from Africa.We have been waiting for you to contact us regarding your consignment box which the agent suppose to deliver to you which was on hold by USA Customs Department and they are requesting for clearance certificate which will be obtain from the origination of the consignment box before it will be released from the Customs to the delivery agent to complete the delivery. After the phone call we made on your behalf to the USA Customs Authority and the Government of Benin Republic, it was resolved that the delivery of your consignment to your address must be complete within five (5) working days upon your compliance to our directives; You should send the sum of $85.00 usd to obtain the needed Ownership-clearance certificate from Benin Republic. The clearance charges which was initially on the high price has been cut down by the US Embassy in Benin Republic considering the poor economic situations that make it difficult for the middle class citizens to meet up with the clearance of their entitlement. We will upon the confirmation of your clearing charge assign our Diplomat Agent (Mr.CHRIS PATTO) to travel to USA and collect your package and proceed with the delivery. Meanwhile you are advice to reconfirm the below information upon contacting us to avoid delivery to wrong person after obtaining the needed Ownership-clearance certificate from Benin Republic because that is what the Customs here are waiting for . 1- Your Full Name:................ 2- Your Delivery Address:............ 3- Your Contact Telephone Number:........ 4- Your Occupation:................ 5- Your Identification (Passport number or ID Card number):....... Once you notify us with the above information and the needed Ownership-clearance certificate from Benin Republic, the USA Customs will release your consignment to you and it will be delivered to you by the agent, You can contact us with the following information, Contact person:Mr.Douglas Shulman Email: (usaservice@outlook.com) Info Line:+229 981-884-46 You also advise to contact the delivery agent as well with the delivery address of yours and his e-mail address is this below. Name : Mr.CHRIS PATTO E-mail:(chrispatto@cpll.cn) Phone number:518 557 59 93. Note that you are expected to pay only $85.00 usd for Ownership-clearance certificate and you are to pay it to Benin Republic as the origination of the package in favor of Mr:EMEKA JOHN as our accountant officer in Benin Republic Send the $85.00 usd through western union once you receive this mail with the information below for immediate release of your package, Receivers Name:====Mr.EMEKA JOHN Country/City:=======Benin Republic Test Question:=======what city Answer: ===========Cotonou Amount:===========$85.00.00usd Once you send the money to Benin Republic to this name , please try to notify us with the MTCN so that we can contact Mr:EMEKA JOHN for easy pick up and for immediate action on the release of your Ownership-clearance certificate. Note that any unclaimed consignment will be return to Benin Republic Government after 3days. So you are urgently advised to comply with our directives so that the Customs will release your consignment. Yours Sincerely Mr:Douglas Shulman Commissioner of Internal Revenue Service.