Tuesday, November 18, 2014

PayPal (Phishing)

PayPal™

Temporary Limited Account!

----------------------------------------------------------------------
We need your help
----------------------------------------------------------------------

Your billing information is either incomplete or out of date.As a result we have temporary limited your account until you update your billing information. Please click here to update and activate your account.. Thank you for being a PayPal customer.

Account - Help - Fees - Security - Apps - Shop

Please do not reply to this email. We are unable to respond to inquiries sent to this address. For immediate answers to your questions, visit our Help Center by clicking "Help" located on any PayPal page or email. Copyright © 2014 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.

Phising analysis :

CLICK : "click here"
OPEN : http://urnsosuifc5.esy.es/ansfo/login.php
REDIRECT : urnsosuifc5.esy.es/ansfo/index.php?cmd=_login-submit&dispatch=
SCREENSHOT :


esy.es whois :

Domain Name: esy.es
Registrant: Hostinger International Limited
Registrar: MARCARIA.COM
Create Date: 2006-03-06

Name Server: ns1.main-hosting.com
Name Server: ns2.main-hosting.com
Name Server: ns3.main-hosting.com
Name Server: ns4.main-hosting.com

Good day

Good day, Your fund of $2.5 Million Dollar, has been released and the transfer began today through Money Gram money transfer at rate of 8000.00 daily. So, Contact money Gram Agent . Ask him what you need to do to activate your account for the daily pick up of your fund. Email:(office.moneygram60@yahoo.com)

Your Receiver Name--------------
Your Country--------------------
Your City-----------------------
Your Tell-----------------------
Your Test Question--------------
Your Test Answer----------------
Your Id-------------------------

Forward the information (office.moneygram60@yahoo.com)Or Call +229 98069674,

Eubank Miller

Thanks

Kingsley Anthony

Imf Dept Office

Notice!!!

This is to intimate you of a very important information which will be of a great help to redeem you from all the difficulties you have been experiencing in getting your long over due payment due to excessive demand for money from you by both corrupt Bank officials and Courier Companies after which your fund remain unpaid to you.

All Governmental and Non-Governmental parasites, NGOs, Finance Companies, Banks, Security Companies and Courier companies which have been in contact with you of lately have been instructed to back off from your transaction and you have been advised NOT to respond to them anymore since the I.M.F is now directly in charge of your payment.You are hereby advised NOT to remit further payment to any institutions with respect to your transaction as your fund will be transferred to you directly from our source. I hope this is clear. Any action contrary to this instructions is at your own risk.

The rest of your data's needed for your fund transfer will be requested directly from your bank manager.

Best Regard's,

Mr.John Paul
Financial Counselor and Dept Director

Red Bull Paid-To-Drive Promotional Campaign

Hello,

At The Brand Consultancy, we are dedicated to furthering the prosperity and health of the beverage industry by providing beverage expertise to our clients. On behalf of Red Bull, we are currently seeking everyday drivers to place removable Red Bull Energy Drink advertisements on their cars, thereby turning your daily commute into a money-making venture. Selected participants would be paid $200 a week to drive around with removable ads on the sides and hood of their vehicle. The ads to be placed on your vehicle are decals. The decals are adhesive, made of vinyl specifically used for cars. They are designed to be removed by drivers; they simply peel off without harming the paint of your car. From car wash to finish, installation optimally takes between 10 and 15 minutes.

If you are interested in our offer, please contact us by sending us an email.

Regards

Mark Morris
The Brand Consultancy US
NY 10012

To: Unpaid Beneficiary,

From: Ms. Carman L. Lapointe
Head Of United Nations Under-Secretary-
General For Internal Oversight Services

To: Unpaid Beneficiary,

This is to inform you that I came to Nigeria yesterday from Canada, after series of complaint from the FBI and other Security agencies from Asia,Europe, South America and the United States of America respectively, against the Federal Government of Nigeria and the British Government for the high volume of fraudulent activities going that is on in these two nations. For more information about me kindly click on the below link or copy and paste on your web browser.

http://www.un.org/Depts/oios/pages/usg.html

Right now, as directed by UN secretary General named Ban Ki-Moon we are working in collaborations with the Nigerian Financial Crime Commission/agencies and we have decided to waive away all your clearance fees/Charges and authorized the Government of Nigeria to effect your overdue payment worth $10.5M only into your account without any delay as approved and instructed by CANADIAN government and UNITED NATIONS. But the only fee you will pay to receive your fund is the Notarization fee. Upon your request, I will tell you the amount and also send you the payment information you will use in sending the Notarization fee. Sincerely, you are a lucky person because I have just discovered that some top Nigerian and Canadian Government Officials are interested in your fund and they are working in collaboration with One Mr. Richard Graves from USA to frustrate you and thereafter divert your fund into their personal account. Note that I have a very limited time to stay in Nigeria here so I would like you to urgently respond to this message with your full name, full address,direct phone number so that I can advise you on how best to confirm your fund in your account within the next 72 hours. Once again, the only fee you will pay to receive your fund is the Notarization fee. Upon your request, I will tell you the amount and also send you the payment information you will use in sending the Notarization fee.

You can reach me with below information:

Email Address: (ms.carman_lapointe001@yahoo.com)

Sincerely yours,
Ms. Carman L.Lapointe
Head Of United Nations Under-Secretary
General For Internal Oversight Services

Softwares

#1 HEADER :
==============================
NOTE : X-Remote : 66.112.38.106
NOTE : (clec1376.customer.centurytel.net)
NOTE : Received : from clec1376.customer.centurytel.net
NOTE : (HELO 66.112.38.106) (66.112.38.106)
NOTE : Received : from unknown (HELO localhost)
NOTE : (kevin.chambers@aya.yale.edu@43.140.90.79)


NOTE : by clec1376.customer.centurytel.net
NOTE : Cheap Software
==============================
#1 TITLE :
==============================
Cheap Software
==============================
#1 MESSAGE :
==============================
We sell industry leading software at the lowest prices(90% discount), with free fast shipping!

Windows 8.1 Blue 32/64-Bit DVD version - 12.99$
Microsoft Office Professional Plus 2014 - 13.99$
Apple Mac OS X 10.7 Lion - 15.99$
and more...

Mail to order: kevin.chambers@aya.yale.edu or just click Reply.
==============================


#2 HEADER :
==============================
NOTE : X-Remote : 174.108.16.78
NOTE : (cpe-174-108-016-078.carolina.res.rr.com)
NOTE : Received : from cpe-174-108-016-078.carolina.res.rr.com
NOTE : (HELO 174.108.16.78) (174.108.16.78)
NOTE : Received : from unknown (HELO localhost)
NOTE : (kevin.chambers@aya.yale.edu@145.178.134.147)


NOTE : by 174.108.16.78;
NOTE : Discount Software
==============================
#2 TITLE :
==============================
Discount Software
==============================
#2 MESSAGE :
==============================
SAME AS #1
==============================


#3 HEADER :
==============================
NOTE : X-Remote : 212.37.102.202 ()
NOTE : Received : from unknown (HELO 212.37.102.202)
NOTE : Received : from unknown (HELO localhost)
NOTE : (kevin.chambers@aya.yale.edu@45.219.131.121) by 212.37.102.202
NOTE : Discount Software
==============================
#3 TITLE :
==============================
SAME AS #2
==============================
#3 MESSAGE :
==============================
SAME AS #1
==============================


#4 HEADER :
==============================
NOTE : X-Remote : 184.6.190.63 (tx-184-6-190-63.dhcp.embarqhsd.net)
NOTE : X-Originating-Ip : 212.30.213.198
NOTE : Received : from tx-184-6-190-63.dhcp.embarqhsd.net (184.6.190.63)
NOTE : Received : from unknown (HELO localhost)
NOTE : (marc@chroman.com@212.30.213.198) by 184.6.190.63
NOTE : Cheap Software
==============================
#4 TITLE :
==============================
SAME AS #1
==============================
#4 MESSAGE :
==============================
We sell industry leading software at the lowest prices(90% discount),
with free fast shipping!

Windows 8.1 Blue 32/64-Bit DVD version - 12.99$
Microsoft Office Professional Plus 2014 - 13.99$
Apple Mac OS X 10.7 Lion - 15.99$
and more...

Mail to order: marc@chroman.com or just click Reply.
==============================