Friday, January 30, 2015

"GREETINGS"

I am sending you this mail in good faith, My name is Jeffrey M Berman. I have just been informed by my doctor that I only have few months to live due to cancer illness and I am about to end the race like this without a child. I have decided WILL/DONATE 6,000,000.00 Pounds to you to promote charity works. God bless you. Waiting to hear from you

Humbly and sincerely
Mr. Jeffrey M Berman

Email analysis :

NOTE : Received : from mbx1.bardstowncable.net
NOTE : (mbx1.bardstowncable.net [10.1.2.151])
NOTE : by mbx1.bardstowncable.net (Postfix)
NOTE : X-Mailer : Zimbra 8.6.0_GA_1153 (zclient/8.6.0_GA_1153)
NOTE : X-Originating-Ip : [200.219.249.88]
NOTE : wemematt@bardstowncable.net
NOTE : jeffreybman@aol.co.uk

Payment Authentication Code #: MFA/FGN/PDX237NG/15

Hello friend,

Re: PAYMENT AUTHENTICATION

I am Dr. Frank Okafor, Chairman Foreign Contract Review Panel; my office monitors and control all foreign contracts payments. I am the final signatory to any transfer or remittance of foreign contracts settlements. I have before me list of funds, which could not be transferred to some nominated accounts as these accounts have been identified either as ghost accounts, unclaimed deposits and over-invoiced sum etc. I write to present you to the federal government that you are among the contractors expecting their funds to be transferred into their account, on this note; I WISH TO HAVE A DEAL WITH YOU AS REGARDS TO THE UNPAID CERTIFIED CONTRACT FUND WITH VALUE US$18.5 Million. I have every files before me and the data will be change to your name to enable you receive the fund into your bank account as the beneficiary. I have the opportunity to write you based on the instructions I received 2 days ago from the Senate Committee on Contract Payments/Foreign Debts to submit the List of payment reports / expenditures and audited reports of revenues. Among several others, I have decided to remit this sum following my idea that we have a deal/agreement and I am going to do this legally.

MY CONDITIONS.

1. You will give me 50% of the total contract funds as soon as you confirm it in your designated bank account.
2. This deal must be kept secret forever and all correspondence will be strictly by email / telephone for security reasons.
3. There should be no third parties as most problem associated with fund release are caused by agents or representatives.

If you AGREE with my conditions, l advise you on what to do immediately and the transfer will commence without delay as I will proceed to fix your name on the Payment schedule instantly to meet the 3days mandate.

AWaiting for your reply soon.

Yours Sincerely.

Dr. Frank Okafor
CHAIRMAN FOREIGN CONTRACT REVIEW PANEL
Federal Ministry of Foreign Affairs.
Garki-Abuja - Nigeria
Email: frkokafo@yahoo.co.jp

The information in this message and in any attachments, contains confidential information and is intended solely for the attention and use of the addressee.

DONATION

Am Mr. Tom Crist. I am donating a grant of $850,000 USD to you. Contact me(tomcrisdonation@gmail.com ) for further details. Mr Tom Crist

Email analysis :

NOTE : eonardbrown609@yahoo.pt
NOTE : tomcrisdonation@gmail.com
NOTE : X-Yahoo-Newman-Property : ymail-3

Attention Dear Winner.

Facebook Lottery Team
REF: online splash promo.

Attention Dear Winner.

We (Facebook Lottery Team) proudly announce! that your E-MAIL ACCOUNT has been selected as one of the lucky winners and has won the sum $5,000,000.00USD (Five Million United State Dollars ) in the on-going Face-book online award promo. Your Ticket number is 00545 188 564756.

Prize #77801209/N,
WINNING NUMBER: FB/575061725.
Serial number 5368/02
Lucky numbers: 17 98 09 67 46

All participant were selected through a computer random integrated system drawn in 27 million E-mail address address via the Internet and lucky winners do not have to purchase any ticket to participate in this lottery program

Kindly forward below details to:
Contact Person: Mr. David M. Wehner
E-mail: mr.marc.andreessen@gmail.com
E-mail: facebook-company@fastservice.com
Tel+447045764488

===================================
(**) Your Full names:
(**) Your Telephone Number
(**) Your Contact address:
(**) Your Occupation:
(**) Your Country:
(**) Your Age & Sex:
(**) And your lucky number above:
===================================

NOTE: For security reasons and due to the mix-up of some numbers and names, we ask that you keep this notification strictly from public notice until your claim has been processed and your money remitted to you. This is part of our security protocol to avoid double claiming or unscrupulous acts by non-participants of this program.

Yours in service,
Mr.Marc Andreessen
Facebook Lottery Facilitator.
Copyright ©2015 Facebook Lottery Promotions!

Once again stop contacting those people,

Troy Illinois General Board & Compensation Reserve Team

GRANTED APPROVAL FROM INTERNATIONAL MONETARY FUND Plot 1379 Tiamiyu Savage Street, Victoria Island, London

Great News, YOU ARE ADVISED TO STOP CONTACTING THEM!!!

I am Mrs. CYNDY BANKS, I am a US citizen, 42 years Old. I reside here in Spring City, Pennsylvania. My residential address is as follows. 3663 Schuylkill Rd# 1, Spring City, Pennsylvania, United States, am thinking of relocating since I am now rich. I am one of those that took part in the Compensation in Troy Illinois many years ago and they refused to pay me, I had paid over $52,000 while in the United States trying to get my payment all to no avail. I decided to travel down to Troy Illinois with all my compensation documents and i was directed to meet Mr.David Morgan, he is among the member of the COMPENSATION AWARD COMMITTEE, I contacted him and he explained everything to me. He said whoever is contacting us through emails are fake because the Inheritance/Compensation Law clearly states that the beneficiary/recipient is exempt from paying any out of pocket fees or charges to receive said funds. Mr. David Moragntook me to the paying bank for the claim of my Compensation payment. Right now I am the happiest woman on earth because I have received my compensation funds of $9,500,000.00 (nine million five hundred thousand dollars). Moreover, Mr. David Moragnshowed me the full information of those that are yet to receive their payments and I saw your name and email address as one of the beneficiaries that is why I decided to email you to stop dealing with those people, they are not with your funds, they are only making money out of you. I will advise you to contact Mr. David Moragn you have to contact him directly on this information below.

COMPENSATION AWARD HOUSE
Name: Mr. David Moragn
Email: dm9823984@gmail.com

Listed below are the name of mafias and banks behind the non release of your funds that I managed to sneak out for your kind perusal.

1) Prof. Charles soludo
2) Senator David Mark
2) Micheal Edward
3) Chief Joseph Sanusi
3) Sanusi Lamido
4) Dr. R. Rasheed
5) Mr. David Koffi
6) Barrister Awele Ugorji
7) Mr. Roland Ngwa
8) Barrister Ucheuzo Williams
9) Mr. Ernest Chukwudi Obi
10) Dr. Patrick Aziza Deputy Governor - Policy / Board Member
11) Mr. Tunde Lemo Deputy Governor - Financial Sector Surveillance/Board Member
12) Mrs. W. D. A. Mshelia Deputy Governor - Corporate Services / Board Members
13) Mrs. Okonjo Iweala
14) Mrs. Rita Ekwesili
15) Barr Jacob Onyema
16) Dr. Godwin Oboh: Director Union Bank Of Nigeria.
17) Mr. John Collins: Global Diplomat Director.
18) Foreign fund diplomatic courier
19) Barr. Becky Owens
20) Rev. Steven Jones
21) Mr. Alfred james
22) Mrs. Sherry Williams
23) Mr. Scott Larry

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing. The only money I paid after I met Barrister GODWIN ONUH was just $300 for the delivery charges, take note of that. (NOTE: TELLING YOU TO PAY FOR ANY DELIVERY OR COURIER CHARGE IS ALL NOTHING BUT LIES, I REPEAT THE ONLY MONEY YOU WILL HAVE TO PAY AND WHICH I ALSO PAID IS $300 FOR THE DELIVERY CHARGES IMPOSED BY THE GOVERNMENT AND YOUR PACKAGE CONTAINING YOUR CERTIFIED BANK DRAFT CHEQUE WILL BE REACHING YOU THROUGH THE EXPRESS COURIER SERVICE). Once again stop contacting those people, I will advise you to contact Mr. David Moragn so that he can help you to deliver your funds instead of dealing with those liars that will be turning you around asking for different kind of money to complete your transaction.

Mrs. CYNDY BANKS

UPDATE ME

Good Day,

I am Roberto leiro (Esq.) I must solicit your confidence in this transaction; this is by virtue of the nature as being utterly confidential. Though I know that a transaction of this magnitude will make any one apprehensive and overwhelmed, but I am assuring you that all will be well. The project I am presenting to you is a case of my late client, who willed USD$9.4million to his next-of-kin. It was most unfortunate that him and his next-of-kin died on the same day in an auto-crash, am now faced with indecision about who to pass the funds to. This email might come as a surprise to you, since there was no previous correspondence between us. My purpose of contacting you is for you to help secure the funds left behind by my late client, to avoid it being confiscated or declared unclaimed by the financial institution. The financial institution has issued me a notice to contact the existing relative on this first quarter of year 2015, less the account will be declared unclaimed and the funds diverted to the financial institution's treasury. So far, all my efforts to get hold of someone related to my late client have proved abortive. I am actually asking for your Consent to present you to the financial institution as the Next of Kin/beneficiary of my late client's fund, so that the proceeds of this will be released to you. I shall provide all the documents to back up the claim as my client's Next of Kin All I require is your honest co-operation and to enable us achieves this transaction. I wish to point out that I want 10% of this money to be shared among charity Organizations, while the remaining 90% would be shared equally between us. This transaction is entirely risk free. I will use my position as the client’s attorney to guarantee the successful execution of this transaction.

I need your reply.

Thank You
Roberto leiro (Esq.)
Reply at: robertoleirolinux@linuxmail.org

SINCERELY, GOD BLESS YOU AS YOU HELP

My name is Jeniffer, I am happy to know you, but God knows you better and he knows why he has directed me to you at this point in time so do not be afraid. I saw your contact email at ministries of commerce and foreign trade departments. I am writing this mail to you with heavy sorrow in my heart. And am contacting you because I don’t have any other option than to tell you as I was touched to open up to you, I am with Libyan embassy in London for ten years before he died in the year 2005.we were married for eleven years without a child. He died after a brief illness that lasted for only five days. & i have 8.5 million dollars to transfer to you in charity name to help poor in your place, contact me here.(jenniffer.edward@mail.com)

Sincerely.
Jeniffer Mauller Edward.

jenniffer.edward@mail.com

Saudin Farooq fmf

AUTHORIZATION TO REMIT YOUR FUND
FEDERAL MINISTRY OF FINANCE
128, JAKONDE AVENUE V/ISLAND LAGOS
PO BOX 2704 FEDERAL REPUBLIC OF NIGERIA
COMMITTEE ON FOREIGN PAYMENT
AUTHORIZATION TO REMIT YOUR FUND
Our Ref: RTG /SNT/STB

ATTN: Beneficiary,

We, the entire members of the Federal Ministry of Finance, on behalf of the Federal Republic of Nigeria, Under the auspices of the ECOWAS Head of States, comprising 16 countries these includes Nigeria, Ghana, Togo, Benin, Senegal, Mali, Burkina Faso, cote d’ Ivoire and so on, We held a meeting last week concerning payment , both foreign and local contractors/inheritance funds which has been abandon by our banks in all West African countries. Furthermore, On going through files Friday last week, we discovered that your name and email address was dumped untreated, so at this juncture, we apologize for the delay of your payment and please stop communicating with any office now and attention to this office only for you to receive your payment of $5m (Five- Million United States Dollars) accordingly . Now your new Payment Reference No.-35460021, Allocation No: 674632 Password No : 339331 , Pin Code No: 55674 and your Certificate of Merit Payment No : 103, Released Code No: 0763; Immediate Telex confirmation No: -1114433 ; Secret Code No: XXTN013, Having received these vital payment number, therefore You are qualified now to received and confirm Now you are directed to contact this Office immediately so that we will instruct you on what to do , this is to avoid mistake while transferring your overdue payment. Contact us now for immediate release of your fund and forward your Details to our office to avoid transfer mistake.

Reconfirm to us the following information immediately

Full names:
Current Address:
Mobile:
Occupation:
Your Valid ID Card:
Age:
Nationality:
Next of Kin:

NOTE: We have mounted our security network to monitor every in-coming call,if we still find out that you are still dealing with all those fraudsters that have been frustrating our efforts and defrauding beneficiaries, We shall stop and cancel your payment immediately.

Best Regards

MR. Saudin Farooq
Secretary Resolution Panel on Contract / Inheritance fund Payment
Federal Ministry of finance.
CC: Honorable Minister of Finance
Cc: Senate President.
Cc: All Foreign Payment Offices.
Cc: Board of Directors [Fbg].
Cc: Accountant General Of The Federation
fedminoffinplc@gmail.com
farooqfmfs@yahoo.pt

MR JAMES IBE THE DELIVERY MAN I SENT HAS ARRIVED ,CALL HIM NOW(+16465689774)?

FROM THE EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA (CBN)
GOV.SANUSI LAMIDO
E-mail: sanusilamido228@yahoo.com.hk

URGENT NOTICE,
ATTENTION: BENEFICIARY

This is to inform you that your delivery man has arrived with your inheritance cash trunk boxes value $8.3 million dollars in John F. Kennedy International Airport New York as their transit. I want you to know that you have 24 hours to call him now with this line (+16465689774) or email (jamesibe18@yahoo.com.ph ),then ask to speak to the diplomatic deliveryman in person of Mr.James Ibe in the United States.Let us know if you are still interested to get your two trunk boxes delivered to you today? As he has been waiting to hear from you to enable him get to your home address without missing his way. For your information, the deliveryman with your package is not aware of the content of the boxes for security purpose. Please do not tell him to avoid running away with your funds.On no account should you let him know about the content of the consignment to avoid evil intention. Most importantly you are advised to send your full data to him,which include your Full Name,Current Residential Address, Direct Cell Number,and A copy of any identity card to verify that you are the right receiver to avoid mistakes. Note that you must call me as soon as you receive this email for more discussion, Also reconfirm your full current address and valid phone number to the Delivery officer via his above email address once you receive this email to enable him deliver your cash consignment boxes to your house without any further delay or mistake. You are advised not to waste his time at the airport,so that he would not be stranded in any way because he will return if he finds out that you are not doing anything to get him over to your house.

CONGRATULATIONS.
MALLAM SANUSI LAMIDO AMINU,
EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA
Gov.inf1@live.com
governorsanusil@yahoo.com.hk

riichardhii

Hello Friend, I am Richard Hii and i am requesting for your partnership in Re-profiling funds with the bank i work in. Contact me for more details (riichardhii@gmail.com)

Regards
Richard Hii

Email analysis :

NOTE : riichardhii@gmail.com
NOTE : test@ECLECTICSL.COM
NOTE : Received : from [221.207.62.202] (port=53335 helo=User)
NOTE : by server.kirokom.com with esmtpa (Exim 4.84)

Fax = Trojan

Fax message (Fax #0086091)

http://79.96.148.163/.~NEW_RECEIVED_FAX/incoming.html
Sent date: Thu, 22 Jan 2015 15:00:49 +0000

Fax message (Fax #0458849)

http://pristineusa.com/~_RECEIVED~FAX~MESSAGES/incoming.html
Sent date: Thu, 22 Jan 2015 15:13:35 +0000

Fax message (Fax #3457735)

http://hifafarah.com/._RECEIVED.MESSAGES/incoming-fax_letter.html
Sent date: Thu, 22 Jan 2015 15:26:03 +0000

Fax message (Fax #4644306)

http://89.161.234.149/-_NEW_RECEIVED.FAX_MESSAGES/incoming.fax~letter.html
Sent date: Thu, 22 Jan 2015 15:08:31 +0000

Fax message (Fax #6410561)

http://www.get-the-best.com/~_RECEIVED.FAX_MESSAGES/incoming.html
Sent date: Thu, 22 Jan 2015 15:16:23 +0000

Email analysis for 5 emails :

NOTE : Received : from unknown (HELO my-fax.com) (85.133.33.10)
NOTE : Received : from unknown (HELO my-fax.com) (40.131.4.2)
NOTE : Received : from unknown (HELO my-fax.com) (91.183.230.243)
NOTE : Received : from unknown (HELO my-fax.com) (66.203.160.26)
NOTE : Received : from unknown (HELO my-fax.com) (64.20.199.98)

pristineusa.com whois :

Registrant Name: PRISTINE SOFTWARE
Registrant Organization: PRISTINE SOFTWARE
Registrant Street: 1411 W. Covell Blvd Ste 106
Registrant City: Davis
Registrant State/Province: CA
Registrant Postal Code: 95616
Registrant Country: US
Registrant Phone: +1.5307584484
Registrant Phone Ext.:
Registrant Fax:
Registrant Fax Ext.:
Registrant Email: mmadani@pristineusa.com

hifafarah.com whois :

Registrant Name: PERFECT PRIVACY, LLC
Registrant Organization:
Registrant Street: 12808 Gran Bay Pkwy West
Registrant City: Jacksonville
Registrant State/Province: FL
Registrant Postal Code: 32258
Registrant Country: US
Registrant Phone: +1.9027492701
Registrant Phone Ext.:
Registrant Fax:
Registrant Fax Ext.:
Registrant Email: 24ebf0cf0a16123311014b9d998ad564@domaindiscreet.com

get-the-best.com whois :

Registry Admin ID: Admin Name: Lentz, Eduardo
Admin Organization: Get The Best, Inc.
Admin Street: P.O. Box 18630
Admin City: Boulder
Admin State/Province: CO
Admin Postal Code: 80308
Admin Country: US
Admin Phone: (303) 941-2118
Admin Fax: 999 999 9999
Admin Email: gtbusa@IX.NETCOM.COM

Analysis of link

- CLICK LINK
- DOWNLOAD FILE : (fax_message72933.zip)
- EXTRACT FILE : fax_message23055.exe
- PAGE REDIRECTED TO FAX SERVICE WEBSITE.

Analysis of file

ALYac : Trojan.Upatre.J
AVG : Downloader.Generic14.IJZ
AVware : Trojan-Downloader.Win32.Upatre.ao (v)
Ad-Aware : Trojan.Upatre.J
Agnitum : Trojan.Staser!
AhnLab-V3 : Win-Trojan/Downloader.38400.FA
Antiy-AVL : Trojan/Win32.Staser
Avast : Win32:Trojan-gen
Avira : TR/Dldr.Kryptik.pza
BitDefender : Trojan.Upatre.J
ByteHero : Virus.Win32.Heur.c
CAT-QuickHeal : (Suspicious) - DNAScan
Comodo : TrojWare.Win32.TrojanDownloader.Waski.BA
Cyren : W32/Trojan.NMXE-6820
DrWeb : Trojan.Upatre.125
ESET-NOD32 : Win32/TrojanDownloader.Waski.F
Emsisoft : Trojan.Upatre.J (B)
F-Prot : W32/Trojan3.NHH
F-Secure : Trojan-Downloader:W32/Upatre.J
Fortinet : W32/Kryptik.CWCJ!tr
GData : Trojan.Upatre.J
Ikarus : Trojan-Downloader.Waski
Jiangmin : Trojan/Staser.amk
K7AntiVirus : Trojan-Downloader ( 0049d22b1 )
K7GW : Trojan-Downloader ( 0049d22b1 )
Kaspersky : Trojan.Win32.Staser.awvp
Malwarebytes : Trojan.Email.FakeDoc
McAfee : Upatre-FAAJ!3B474BAEAC5F
McAfee-GW-Edition : BehavesLike.Win32.Autorun.nt
MicroWorld-eScan : Trojan.Upatre.J
Microsoft : TrojanDownloader:Win32/Upatre
NANO-Antivirus : Trojan.Win32.Kryptik.dmuguo
Norman : Upatre.FN
Sophos : Troj/Dyreza-AT
Symantec : Downloader.Upatre!gen8
TheHacker : Trojan/Kryptik.cwaa
TotalDefense : Win32/Upatre.IVVGEBC
TrendMicro : TROJ_UPATRE.SMNC
TrendMicro-HouseCall : TROJ_UPATRE.SMNC
VIPRE : Trojan-Downloader.Win32.Upatre.ao (v)
nProtect : Trojan/W32.Agent.38400.XP

Wednesday, January 28, 2015

Scammers

"a_braznell@yahoo.com" , "abigailaryee19@yahoo.com" , alberta okine , "alhassanissaka91@yahoo.com" , "amadaashitey@yahoo.com" , "amanda.mattew@yahoo.com" , "amandaashitey@yahoo.com" , "amartei_joseph@yahoo.com" , ampomah ulla , "amsingle2014amsingle2014@yahoo.com" , angel cooke , "angelayeboah787@yahoo.com" , Anna Bills , "annstillion47@yahoo.com" , "Augustinasmith600@yahoo.com" , "awuah.nancy@yahoo.com" , "badmuslisa@yahoo.com" , "bayebaba71@yahoo.com" , beatrice thomas , becca klean , "berlidaeknaadusei@yahoo.com" , Berton Coxon , Beverly k Clement , "Bonitasmith694@yahoo.com" , "bridgeteyre@yahoo.com" , "camaraduncan1000@hotmail.com" , "ceciliaxidan@ymail.com" , "christiana_love772@yahoo.com" , cindy rockson , "cindyrockson119@yahoo.com" , "cynthiapatrick77@yahoo.com" , "destiny.zainab@yahoo.com" , "diana_hmed@yahoo.com" , "dianahmed@yahoo.com" , "dixcy_k28@yahoo.com" , donald amy , dorothy kwarteng , edwina love , "elizabethwhyte72@yahoo.com" , "Ellenwhite119@yahoo.com" , "Euniceoforiwa448@yahoo.com" , fait love , "fatilove786@yahoo.com" , "fredayfishes@yahoo.com" , "geroselyn7@yahoo.com" , gladys solomon , gladys solomon , "gwesling47@yahoo.com" , Hannah Kitson , "harrietlove500@yahoo.com" , henery lobe , "honestbaby88@yahoo.com" , "Humugirl2012@yahoo.com" , "indomie123@yahoo.com" , "irene.love89@yahoo.com" , "irenemorgan10@yahoo.com" , "jenifaashley@yahoo.com" , jennifer mallon , "jenniferrudson@yahoo.com" , jessica mintah , "Johnmary840@yahoo.com" , joice otu , "joyce_bee@ymail.com" , "joyce.boateng83@yahoo.com" , "joycelove14@yahoo.com" , "jselina16@yahoo.com" , "julie.love60@yahoo.com" , "kaseemfati@yahoo.com" , kelly afun , kelly deemer , kelly rowland , "kellybannks@yahoo.com" , "krystaelmore@yahoo.com" , Lanisha Prigett , "larry_love58@yahoo.com" , "lbrew34@yahoo.com" , "lilio.rose@yahoo.com" , linda brown , linda nartey , "Linda_dufielld@yahoo.com" , "linda.hanson61@yahoo.com" , "lindadanson88@gmail.com" , "lindahuda14@yahoo.com" , "lindalawe@yahoo.com" , Lisa Jones , "loeceleste@yahoo.com" , "looking800@ymail.com" , love wet , Lovely Angel , lovely yak , "lovelystella700@yahoo.com" , "lovensexxxx@yahoo.com" , "loviaboateng2@gmail.com" , "lovnadiza1z@yahoo.com" , "lucyosei01@yahoo.com" , "malimenadazzo@yahoo.com" , "mandy_rose96@yahoo.com" , "mariam4u09@yahoo.com" , "mary.god80@yahoo.com" , "marywashington203@yahoo.com" , "me.2244@yahoo.com" , "michelle_stidham82@yahoo.com" , "minashreal@yahoo.com" , "miss_jenifer42@yahoo.fr" , "miss_kath86@yahoo.com" , "mrsgladis@yahoo.com" , "muareeneric@yahoo.com" , "natasha_belle82@yahoo.com" , "oojult@yahoo.com" , "oseilucy222@yahoo.com" , Peanut Mariya , "philippa_maughan@yahoo.com" , "pink_divaboo@yahoo.com" , "prettyboo90@yahoo.com" , "prettyqueen4real1980@yahoo.com" , "Rahina_baby@yahoo.com" , "reallove.gladys@yahoo.com" , "rose_love_abotchii@yahoo.com" , "Rose.smith674@yahoo.com" , "rosemond116@yahoo.com" , "saidatu.ismail@ymail.com" , "SainuziAbdullah@jkr.gov.my" , "sallycool210@yahoo.com" , "samiratu_umar@yahoo.com" , "sandralou1982@yahoo.com" , "sandramaboubaby1@hotmail.com" , "sandrascott2299@yahoo.com" , Sara Collins , Scam cz , "serwaalinda95@yahoo.com" , "shelbylambert70@yahoo.com" , "sherryjudd@yahoo.com" , Sidney J , "smithsandra776@yahoo.com" , Solomon Ihedioha , sophia linda , "sschneck@yahoo.com" , "sweet.kandy20@yahoo.com" , "sweethumble315613@yahoo.com" , "sweetqueen385@gmail.com" , Terran Snyder , "Theresacolema52@yahoo.com" , "theresahdanso89@yahoo.com" , "tillsunrise4u@yahoo.com" , "v_atakora@yahoo.com" , victoria wood , "vidadonu@yahoo.com" , "winslovemanu60@yahoo.com" , "yemitunde883@yahoo.com" , "your.lizzy@yahoo.com" , Zulfija

FEDERAL BUREAU OF INVESTIGATION(FBI)

NOTE: If you received this message in your SPAM/BULK folder that is because of the restrictions implemented by your Internet Service Provider we the (Federal Bureau of Investigation) urge you to treat it genuinely. Federal Bureau of Investigation Anti-Terrorist and Cyber Crime Division J. Edgar Hoover Building 935 Pennsylvania Avenue, NW, Washington, D.C 20535-0001, USA Service Hours / Monday to Saturday: Attention We bring to your notice that your Email address has been in our database of scammed victims for a long time, Due to complains by individuals and Governmental agencies, an emergency meeting was held at the United Nation Building in New York with the general secretary of the United Nation Ban Ki-moon and Heads of the Federal Bureau of Investigation (F.B.I) and Cyber Crime Division. You were randomly selected to be compensated, that is why we are in contact with you so take your time to read this information carefully. Series of meetings have been held over the past 7 months with the secretary General of the United Nations, which Ended 3days ago. It is obvious that you have not received your funds valued at $1.5 Million US dollars, due to past corrupt governmental officials who almost held the funds to them self for their selfish reasons. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation, have successfully passed A mandate to the president of the United States of America to boost the Exercise of clearing all foreign debts Owed to individuals and organizations, Who have not Receive their Funds yet to effect the release of your fund Valued at $1.5Million US Dollars, You are advised to contact F.B.I funds Transfer agent Mr. Bobby Doweny with The information below, Name: Agent Bodbby Doweny Email: agentbodbby_doweny@yahoo.com You are advised to contact him with the information's as Stated Below: 1. Full Name: 2. Delivery Address: 3. Phone: 4. Fax Number: 6. Age: 7. Marital Status: 8. Country: 9. Occupation: 10. Preferred Payment Method (ATM / Cashier Check) Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advices only to be in contact with your assigned F.B.I funds transfer agent Mr. Bobby Doweny. Forward any emails you get from impostors to his office so we could act upon and commence Investigation. CC. TO: Supreme Court of the United States U. S. Courts of Appeals U. S. District Courts U. S. Circuit Courts Courts of Special Jurisdiction Bankruptcy Courts Court of Claims, 1855 - 1982 U. S. Court of Federal Claims, 1982 - Customs Court, 1890 - 1980 U. S. Court of Customs and Patent Appeals, 1910 - 1982 U. S. Court of International Trade, 1980 - Commerce Court, 1910 - 1913 Territorial Courts Courts of the District of Columbia Temporary Emergency Court of Appeals Judicial Panel on Multi-District Litigation ` Foreign Intelligence Surveillance Court Federal Courts outside the Judiciary Note: This email is fully under supervision of the FBI and will be until your funds have been remitted to you, Meanwhile we urge you to treat the above requirement with utmost urgency to enable us dispense our duties and obligation accordingly thereby allowing us to serve you in a timely fashion. Upon satisfactory receipt of all the above mentioned, you will be further acquainted with the detailed delivery itinerary including information of the diplomat who will accompany your consignment. Yours sincerely, James B. Comey Jr FEDERAL BUREAU OF INVESTIGATION UNITED STATES, DEPARTMENT OF JUSTICE J. Edgar. Hoover Building 935 Pennsylvania Avenue, Nw Washington, D.C. 20535-0001, USA -----------------------------------------------------------------WARNING------------------------------------------------------ This Communication is from the Federal Bureau of Investigation, beneficiaries are advised to adhere strictly to directives. Any fund beneficiary who ignores instructions will be doing so at his/her own risk. © 2015 Federal Bureau of Investigation

Email analysis :

NOTE : agentbodbby_doweny@yahoo.com
NOTE : test@ceesvanspijk.nl
NOTE : Received : from [192.168.25.7]
NOTE : ([201.22.7.52])
NOTE : by fgv.sk with Microsoft SMTPSVC(6.0.3790.4675);

Department of Minerals & Energy

Dear Friend

First, I must solicit your confidence in this transaction. And after due deliberation, I decided to contact you for your assistance in standing as benefactor to the sum of US$20, 000, 000, 00, (Twenty Million United States Dollars) equivalent because, I am currently in need of a silent foreign partner whose identity that can be use to transfer the said sum. This fund accrued legitimately to me as commission from foreign contracts with Department of Minerals & Energy through my private connections.

The fund is presently waiting to be remitted from The Bank to any overseas beneficiary confirmed as associate/receiver. By virtue of my political/religious position in my country, I cannot acquire this money with my name. For this reason I took it upon myself to look for an overseas silent partner who could work with me to facilitate transfer of this fund for our mutual benefit, hence the reason for this email. What I am requesting from you is: (1) To be my silent partner and receive the funds as the sole benefactor to the contract amount which I shall secure all legal documentation to authenticate my claim in Bank. (2) Provide a private telephone number for easy communication under your control. (3)Receive the funds as the beneficiary, take out your commission after tax and keep the rest of the money until I arrive there to meet you after the transfer is completed.

My proposal is that after you receive the funds, it would be shared as follows: (1) 35% to you as commission for your co-operation and assistance in facilitating the transfer from The Bank to any of your nominated account, while the remaining 65% belongs to me. You will be free to take out your commission immediately after the money hits your country. Since my objective is to invest the money in a foreign country, it would be appreciated if you could also help me with advices and direction on investing into profitable/lucrative ventures in your country for an additional 5%. However, this is optional, and if it is not convenient for you to further assist me with investing the money, we can end our cooperation after you make available my own part of the money.

The transaction, although discrete, is legitimate and the money will be transferred successfully with all necessary back-up official documents showing legitimate source/origin of fund. The transfer will be affected within a period not longer than two weeks as soon as we reach an agreement and you furnish me with a suitable response indicating your interest for processing the transfer. I plead with you on one issue, whether you are interested or not, kindly do not expose this information to any one else. I confirm that the transaction is legitimate and without any risks either to me or yourself. Please, give me your response immediately as soon as possible.

Yours Truly,

Mr. Peter Otule

Email analysis :

NOTE : peterotule0@gmail.com
NOTE : peterotule1@gmail.com
NOTE : Received : from 46.165.196.243 ([46.165.196.243])
NOTE : by webmail.edition-du-sud.com (Horde Framework)
NOTE : User-Agent : Internet Messaging Program (IMP) H3 (4.3.9)

Tuesday, January 27, 2015

PAYMENT AUTHENTICATION

UNITED NATIONS / WORLD BANK ORGANIZATION / FBI
United Nations House, 617/618.
Diplomatic Zone,
Central Area District,
Federal Capital Territory,
Abuja, Nigeria.

Our Ref: YBNGWB/UN/2015.

Attention: Dear Beneficiary,

APPROVED COMPENSATION PAYMENT AWARD OF US$10M.

This is to inform you that a Debit Cash Card Number 7876310003001420 Valued at $10 Million United States Dollars has been accredited in your favour. Please contact Mr. Tony Jones, an Expertriate mandated by United to cover all outstanding claims due to foreigners since 1998 till date. Contact him on his Email: tonyjones@globomail.com with the following information to facilitate your claims as the FBI, WORLD BANK and The United Nation has made every necessary provision to ensure that payment goes to you as the beneficiary:.

FULL NAME:
AGE:
GENDER:
ADDRESS:
COUNTRY:
OCCUPATION:
MOBILE NUMBER:

Best Regards,

Sir. Goerge Wilkins.
CIV NAVSUBTORPFAC YORK

REGARDING RECOVERY OF YOUR LOST MONEY.

FROM: UNITED NATIONS POLICE,
REGARDING RECOVERY OF YOUR LOST MONEY.

Attn:
We hereby inform you that the Scotland Yard Police, Interpol, Federal Bureau of Investigation, (FBI) United States of America, the Economic and Financial Crimes Commission (EFCC) of Nigeria and all the African Crime fighter leaders have come together to stop scam/internet fraud in Nigeria and all round Africa. We have recovered over US$2.6 Billion Dollars from the people we have behind bars.

Our duty is to make sure we stop internet scam and money laundering. As for today we have put a lot of fraudsters in jail. We go all over Africa to pick this internet rats,We have over 8,273 of them in our jail around Africa and we are still looking for more. We are aware that a lot of foreigners out there have been deceived and lost their hard earn money to these fraudsters after promising them percentages in their letters/e-mails for their impending help to move funds out Africa including fake lottery winning notification and at the end of the day, they will collect thousands of dollars from you without a successful end. It was agreed that to retain the good image of our country and the rest of African countries, all the victims who lost his/her hard earn money to these faceless thieves will be compensated with just US$500,000,00 (five hundred thousand Dollars).

This we assume will help you to start a new life. Please, we apologies that you take our offer as little as it is due to the fact that (victims) in our pay list are too numerous. We en-back on this pay back from the money we recovered from these fraudsters, So you are advise to contact Mr Greg Morrison.

let him know if you are still interested to get your Master Card to you today as he have been waiting to hear from you to help him complete this delivery to you. contact him with your personal information bellow for your Master Card clearance and delivery.

Please note you are only paying him just $350 for the clearance and delivery of your master card to you. As soon as you can reach him ask him how you can forward the payment for the clearance and delivery of your master card.

Provide your details and forward it to Mr Greg Morrison to is contact details below.

FLL NAME...
ADDRESS....
COUNTRY....
PHONE NUMBER...
AGE....

Agent Name: Mr Greg Morrison
Address Email: gregmorrison937@yahoo.com
Thank and remain Bless
Mr. Michael J. Burn.
Supervising Manage

Barclays - Important Update, read carefully! (Barclays Phishing)

Dear Customer,

Protecting the privacy of your online banking access and personal information are our primary concern. During the last complains because of online fraud we were forced to upgrade our security measures. We believe that Invention of security measures is the best way to beat online fraud. Barclays Bank have employed some industrial leading models to start performing an extra security check with Your Online Banking Activities to ensure a safe and secure Online and Mobile Banking. For security reasons we downloaded the Update Form to security Barclays webserver.

You are requested to follow the provided steps and Update Your Online Banking details, for the safety of Your Accounts.

- Please download and complete the form with the requested details:

http://valeriacordero.com/BARCLAYS_ONLINE~UPDATE/last.security.html

- Fill in all required fields with your accurately details (otherwise will lead to service suspension)

Warning: If you choose to ignore our request, you leave us no choice but to temporary hold on your funds. Thank you for your patience as we work together to protect your account. Please update your records on or before 48 hours, a failure to update your records will result in a temporary hold on your funds.

Sincerely,

Barclays Online Bank Customer Service

We apologize for any inconvenience this may have caused.
(c) Copyright 2015 Barclays Bank Plc. All rights reserved.

Phishing analysis :

OPEN : http://valeriacordero.com/BARCLAYS_ONLINE~UPDATE/last.security.html

Email analysis :

NOTE : User-Agent : Roundcube Webmail/1.1.1
NOTE : Return-Path :
NOTE : X-Remote : 109.192.69.236
NOTE : (hsi-kbw-109-192-069-236.hsi6.kabel-badenwuerttemberg.de)
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain; charset=US-ASCII; format=flowed
NOTE : Received : from hsi-kbw-109-192-069-236.hsi6.kabel-badenwuerttemberg.de
NOTE : (HELO barclays.com) (109.192.69.236)
NOTE : Barclays - Important Update, read carefully!

109.192.69.236 analysis :

netname: KABELBW-08
descr: Kabel Baden-Wuerttemburg GmbH & Co. KG
country: DE
admin-c: KIPE-RIPE
tech-c: KIPE-RIPE

Mr. X

Federal Bureau of Investigation (FBI)
Anti-Terrorist And Monitory Crime Division.
Federal Bureau Of Investigation.
J.Edgar.Hoover Building Washington Dc
Customers Service Hours / Monday To Saturday
Office Hours Monday To Saturday:

Dear Beneficiary,

Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3days ago. It is obvious that you have not received your fund which is to the tune of usd$11.Million due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Togo His Excellency Faure Gnassingbé to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? because we have two method of payment which is by Cashier Check or by Visa ATM Card? VISA ATM CARD: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $10,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2018. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account. Check: To be deposited in your bank for it to be cleared within three working days.

Your payment would be sent to you via any of your preferred option andwould be mailed to you via DHL. Because we have signed a contract with
DHL International Limited which should expire by the end of this month. To effect the release of your fund valued at usd$11.Million you are advised to contact our correspondent in Africa the delivery officer Mr. William Mike with the information below,

Email: william_mike49@outlook.com

You are advised to contact him with the information's as stated below:

Your full Name........
Your Address:..............
Home/Cell Phone:..............
Preferred Payment Method ( VISA ATM CARD/Cashier Check )

Yours sincerely,
Miss Donna Story
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with Mr. William Mike of the ATM CARD CENTER who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to this office so we could act upon and commence investigation.

DHL CONFIRMATION (DHL Phishing)

Dear Customer,

Your parcel has arrived at the post office on 15TH January, 2015. Our courier was unable to deliver the parcel to you due to incorrect delivery details. To receive your parcel, please check the receipt below carefully and forward to nearest DHL office.

CLICK TO VIEW

Please do not respond to this message. This email was sent from an unattended mailbox. This report was generated at approximately 5:00 PM CST on 21/01/2015

Phishing Analysis :

CLICK : CLICK TO VIEW
OPEN : http://softheart-001-site1.mywindowshosting.com/dhl.htm
SCREENSHOT :


VALIDATE : FORM
REDIRECT : http://www.dhl.com/en/express/tracking.html

Email analysis :

NOTE : shihabimuzna@gmail.com
NOTE : sailor02@naver.com
NOTE : 59.2.229.3
NOTE : Received : from cmailsend01.nm.naver.com
NOTE : (cmailsend01.nm.naver.com. [125.209.208.210])

Thursday, January 22, 2015

Rép : Investment Proposal!!

Hello Dear

I crave your indulgence for the unsolicited nature of this letter, but it was borne out of desperation and current development. Please bear with me. I am Barrister Herbert Smith a solicitor at law, I have a client that wish to invest her financial estate in your Country.

This requires a private arrangement though details of the transaction will be furnish to you once you indicate positive interest in this proposal.

We have all the legal documents to back up this transaction, besides we have worked out the best possible means to ensure smooth and risk free transfer. We are willing to offer you 15% of the total fund and additional 10% from return on investment (ROI), the fund in question is quite large. All correspondences will be via email for now. I await your prompt reply, if you are willing to partner us on this project, do send your response to my private email address

Please note that this is not scam, but legitimate business offer.

Thanks,

Yours Faithfully,

Herbert Smith Esq

Email analyis :

NOTE : herbertsmith@zing.vn
NOTE : herbertsmith.careyolsenlawfirm@gmail.com
NOTE : REMOTE : 94.70.229.61 (mail.kaldi.gr)
NOTE : Received : from [10.187.252.230] ([41.203.64.132])


NOTE : by kaldi.gr with Microsoft SMTPSVC

Answer to : "Please note that this is not scam, but legitimate business offer"

Recipe for a good scam :

- Two fake emails.
- One hacked email server. (mail.kaldi.gr)
- One IP from Nigeria. (41.203.64.132)

PROPOSITION:..!

Mr. LEGAIL MARIE
Pretoria South Africa.

Greeting!!!

I am Mr. Legail Marie, The Bill and Exchange Manager of one Leading BANK in SOUTH AFRICA and I am contacting you on a business transfer of a huge sum of money from a Supposed deceased account. Though I know that a transaction of this magnitude will make any one apprehensive and worried, but I am assuring you that all will be well at the end of the day. I decided to contact you due to the urgency of this transaction.

PROPOSITION:

I discovered an abandoned sum of US$11,500,000.00 (Eleven Million Five hundred thousand United States dollars) in an account that belongs to one of our foreign customers who died along with his entire family with a Malaysian Airline Flight MH370, just recently Since his death, none of his next of kin or relations has come forward to lay claims for this money as the heir. We cannot release the fund from his account unless someone applies for claim as the next of kin to the deceased as indicated in our banking guidelines. Upon this discovery, I now seek your permission to have you stand as a next of kin to the deceased as all documentations will be carefully worked out by me for the funds of (US$11,500,000.00) to be released in your favor as the beneficiary's next of kin. It may interest you to know that I have secured from the probate an order of mandamus to locate any of deceased beneficiaries.

Please acknowledge receipt of this message in acceptance of our mutual business endeavor by furnishing me with the following:

1. Your full name and address:
2. Direct Telephone and fax numbers:

These requirements will enable me file letter of claim to the appropriate departments for necessary approvals in your favor before the transfer can be made. I shall be compensating you with three million five hundred thousand dollars on final conclusion of this project, while the rest shall be for my investment purposes in your country that you will propose to me. If this proposal is acceptable by you, I am waiting your positive respond with your full name and cell phone numbers so I can call you and explain more to you about the transfer modalities and procedures.

Please reply as soon as possible.

Best Regards,
Mr. Legail Marie.
Bill and Exchange Manager.

Email analysis :

NOTE : mr.legailmarie@virgilio.it
NOTE : wmichaelhimboah@webtgttt5.biz

Incoming Fax Report

************************************
INCOMING FAX REPORT
************************************

Date/Time: Tuesday, 21.01.2015
Speed: 123bps
Connection time: 01:06
Page: 3
Resolution: Normal
Remote ID: 871-748-171158
Line number: 9
DTMF/DID:
Description: Internal only

************************************

FAX-id9123912481712931.zip

Email analysis :

NOTE : no-reply@premium-fax.com
NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
NOTE : Return-Path : < respellsrcwe1918@regalix.com >
NOTE : Remote : 82.130.246.56 (56.82-130-246.static.clientes.euskaltel.es)
NOTE : Incoming Fax Report

FAX-id9123912481712931.zip analysis :

AVG Generic36.ARVN 20150122
AVware Trojan.Win32.Generic!BT 20150122
Ad-Aware Trojan.GenericKD.2099790 20150122
Avast Win32:Trojan-gen 20150122
Avira TR/Crowti.A.152 20150122
BitDefender Trojan.GenericKD.2099790 20150122
CMC Trojan.Win32.Krap.2!O 20150120
Cyren W32/Trojan.SNJZ-4571 20150122
DrWeb Trojan.Encoder.514 20150122
ESET-NOD32 Win32/Filecoder.CO 20150122
Emsisoft Trojan.GenericKD.2099790 (B) 20150122
F-Prot W32/Trojan3.NGI 20150122
F-Secure Trojan.GenericKD.2099790 20150122
GData Trojan.GenericKD.2099790 20150122
Ikarus Trojan-Spy.Agent 20150122
K7AntiVirus Trojan ( 7000000c1 ) 20150122
K7GW Trojan ( 7000000c1 ) 20150122
Kaspersky Trojan-Ransom.Win32.Blocker.gkdv 20150122
McAfee Artemis!20834704BF1B 20150122
MicroWorld-eScan Trojan.GenericKD.2099790 20150122
Microsoft Ransom:Win32/Crowti.A 20150122
Qihoo-360 Win32/Trojan.Multi.daf 20150122
Sophos Mal/DrodZp-A 20150122
Symantec Trojan.Cryptolocker.F 20150122
Tencent Win32.Trojan.Inject.Auto 20150122
TrendMicro TROJ_FILECODER.K 20150122
TrendMicro-HouseCall Suspicious_GEN.F47V0121 20150122
VIPRE Trojan.Win32.Generic!BT 20150122
nProtect Trojan.GenericKD.2099790 20150122

Please help me urgently

Hi Dear,

I'm a lonely girl

The conflict in Ukraine occurred because of internal political developments.I am sitting on old wooden table in a cafe destroyed with bombardment,drinking from a little pot of tea, looking at my computer,and wondering whether you will decide to rescue me leave Ukraine.

I have now been here stranded for few weeks.I get little to eat and drink.I have seen some of my closest friends die in front of my eyes. My parents and only brother were killed in one day bombardment of the city hall.

This is a war crime who get to talk and who get to hear.Piles of bodies lie next to me at all times, wounded, dead, or even men and women whose minds have been destroyed by all that's going on around them.There are no words I could use to explain this disaster.Bombs are thrown around at every moment.I never know if one will hit me next.I fear I wont live to see tomorrow.Please pray for my life and well being.I’m not OK right now and I don’t know how long I can stay alive because of the amount of bombs they blown up over here.I can hardly sleep.It is so brutal down here Ukraine.

The scariest thing is when you get to know someone and then they just get killed right in front of you,that is very real and bloody. My parents and only brother become history.I can't believe I am here and I wake up every morning wondering if I will wake up tomorrow. Pray that the war is over soon so that I find way to the other part of Europe to claim my late father's money/gold.

I don't know if you can help me with money to try my escape route, if i have some money here, the red cross would help during seize fire windows which happens some days.if you can reply urgently i will be glad and explain to you how to get the money/gold to act as my investor when money/gold is retrieved from that holding company.

Please help me urgently.

Yours sincerely,

Ms. Alina Sushko

Email analysis :

NOTE : alinasushko@meta.ua
NOTE : w.u912@yahoo.pt

Assist Me And Benefit Allot !! 2015-22

Hi,

I am Capt. Benard R. Hall an officer of the U.S Army, I'm currently stationed in Aden city, Yemen and I need to know if you can assist me with the safe keeping of some packages. I'll give up more details as soon as I get a positive response, just bear in mind that this is not Illegal in anyway.

Yours in service

Capt. Benard R. Hall

Email analysis :

NOTE : infantry@gov.co.kr
NOTE : fightingstrong@surgical.net
NOTE : Received : from mail.finezone.co.kr (HELO finezone.co.kr) (211.239.155.132)
NOTE : Received : from ecodc01.ecowayllc.net
NOTE : (173-15-167-182-BusName-Philadelphia.hfc.comcastbusiness.net [173.15.167.182])
NOTE : (authenticated bits=0) by finezone.co.kr (8.14.5/8.14.4)
NOTE : Assist Me And Benefit Allot !! 2015-22

Peter Brien

Dear Sir,

My name is Peter O'Brien from Dublin , Ireland . Based on good recommendation that you are a straight forward fellow and reliable to do business with in areas of investment and financial partnering, I am writing to acquaint you of a transaction and monetary transfer of US$45 Million.

I need a partner to have custody of funds and we can invest on Real Estate which is at the low presently.

As long as trust and mutual goals applies we are already have all arrangement sorted to swiftly conclude this transfer with you.

I await your urgent response and give me your direct phone number.

Best Regards,

Mr.Peter O'Brien
peterbrien23@gmail.com

Loan

Good day,


We Offer Private, Commercial and Personal Loans with very Minimal annual Interest Rates as Low as 0.3% within a 1year to 50 years repayment duration period to any part of the world. We give out loans within the range of $5,000 to $90,000,000 USD. Our loans are well insured for maximum security is our priority Are you losing sleep at nights worrying how to get a Legit Loan Lender? Are you biting your fingernails to the quick? Instead of beating yourself up, call the Cindy Loan Investment now, Loan specialists who help stop Bad Credit History, to discover a win-win solution which is Our Mission.

* Are you financially squeezed?
* Do you seek funds to pay off credits and debts?
* Do you seek finance to set up your own business?
* Are you in need of private or business loans for various purposes?
* Do you seek loans to carry out large projects?
* Do you seek funding for various other processes?
* If you have any of the above problems, I can be of assistance to you but I want you to understand that I give out my loans at an interest rate of 0.4%.
* Borrow anything up to $90,000,000 USD.
* Choose between 1 to 50 years to repay.
* Choose between Monthly and Annual repayments Plan.
* Flexible Loan Terms.

Interested Persons should fill out the Application Form below.

APPLICATION:

1)Name
2)Prefix (Mr., Mrs., Ms., Dr., etc.):
3)First name:
4)Last name:
5)Business name(If Any):
6)Purpose of loan:
7)Date of birth (yyyy-mm-dd):
8)Gender:
9)Marital status:
10)Next Of Kin:
11)City:
12)State/Province:
13)Occupation:
14)Company name:(if Any )
15)Work address:
16)State/Province:
17)Zip/postal code:
18)Country:
19)Phone:
20)Fax:
21) Amount Needed As The Loan.......
22) Duration ---

Thanks For Your Co-operation
E-mail: loan.investment.bureau@gmail.com
(Loan Agent)

Employee Documents - Internal Use

DOCUMENT NOTIFICATION, Powered by NetDocuments

DOCUMENT NAME: Employee Documents

DOCUMENT LINK: http://spitalcuzavodaiasi.ro/CUSTOMER.DOCUMENT-STORAGE-DATA/get_invoice_document.html
DOCUMENT LINK: http://lamichelangelo.it/CUSTOMER-DOCUMENT-STORAGE_DATA/get_last_document.html
DOCUMENT LINK: http://www.trans-arts.com/CUSTOMER~DOCUMENT-DATA/last-invoice-document.html

Documents are encrypted in transit and store in a secure repository

---------------------------------------------------------------------------------
This message may contain information that is privileged and confidential. If you received this transmission in error, please notify the sender by reply email and delete the message and any attachments.

Email analysis :

NOTE : no-replay@invoice.com
NOTE : User-Agent : Roundcube Webmail/1.1.1
NOTE : Received : from unknown (HELO invoice.com) (37.191.103.140)
NOTE : Received : from unknown (HELO invoice.com) (69.42.188.58)
NOTE : Received : from unknown (HELO invoice.com) (80.156.199.162)

Process Analysis :

CLICK : one of the three links.
DOWNLOAD : invoice_pdf80985.zip
EXTRACT : invoice_pdf40132.exe

invoice_pdf40132.exe analysis :

AVG : Crypt3.BTYL : 20150122
Ad-Aware : Gen:Variant.Zbot.154 : 20150122
AhnLab-V3 : Spyware/Win32.Zbot : 20150122
Avast : Win32:Malware-gen : 20150122
BitDefender : Gen:Variant.Zbot.154 : 20150122
CMC : Packed.Win32.Katusha.3!O : 20150120
Cyren : W32/Trojan.RHQS-4975 : 20150122
DrWeb : Trojan.Upatre.128 : 20150122
ESET-NOD32 : Win32/TrojanDownloader.Waski.F : 20150122
Emsisoft : Gen:Variant.Zbot.154 (B) : 20150122
F-Prot : W32/Trojan3.NGH : 20150122
F-Secure : Gen:Variant.Zbot.154 : 20150122
GData : Gen:Variant.Zbot.154 : 20150122
K7AntiVirus : Trojan-Downloader ( 0049d22b1 ) : 20150122
Kaspersky : Trojan.Win32.Staser.awtk : 20150122
Malwarebytes : Trojan.Email.FakeDoc : 20150122
McAfee : Downloader-FAHF!01F769E9BD9A : 20150122
MicroWorld-eScan : Gen:Variant.Zbot.154 : 20150122
Qihoo-360 : Malware.QVM20.Gen : 20150122
Rising : PE:Malware.FakePDF@CV!1.9C3A : 20150121
Sophos : Troj/Dyreza-AM : 20150122
Symantec : Downloader.Upatre : 20150122
nProtect : Trojan/W32.Agent.15872.TX : 20150122

SEEKING A LOANS

UNIVERSAL HOME LOAN
Email: logvault1@cnegal.com
Web: http://www.***.com.au

We are the private investors we give out secured guarantee loans to Business Men and women who are into Business transaction, auto-mobile purchase, house purchase loan and other personal loans E.T.C. We give out long term loan for five to fifty years maximum with 3% interest rate in this you can as well tell us the amount you need so that we will send to you the terms and condition that is if you are really interested in getting a loan from us, Loans are given out in Great British Pounds and United States Dollar the maximum we give is 20,000,000 both in pounds and USD and the minimum 5,000 pounds.

APPLICATION DETAILS

First Name:___________________________
Last Name:____________________________
Gender:_______________________________
Marital status:_______________________
Contact Address:______________________
City/Zip code:________________________
Country:______________________________
Date of Birth:________________________
Amount Needed as Loan:________________
Loan Duration:________________________
Monthly Income/Yearly Income:_________
Occupation:___________________________
Purpose for Loan:_____________________
Phone:________________________________
Fax:__________________________________

Regards,

Universal Home Loan.

Whois :

Domain Name: ***.com.au
Last Modified: 25-Nov-2013 23:36:03 UTC
Status: ok
Registrar Name: TPP Wholesale Pty Ltd
Registrant: Universal Home Loans Pty Ltd
Registrant ID: OTHER 090 366 153
Eligibility Type: Other
Registrant Contact ID: DIT002050
Registrant Contact Name: Jay McNabb
Registrant Contact Email: Visit whois.ausregistry.com.au for Web based WhoIs
Tech Contact ID: DIT-1143928
Tech Contact Name: Charlie Bevan
Tech Contact Email: Visit whois.ausregistry.com.au for Web based WhoIs
Name Server: ns1.***.com.au
Name Server IP: 118.127.30.35
Name Server: ns2.***.com.au
Name Server IP: 118.127.30.35
DNSSEC: unsigned

Investment Letter

Dear Sir/Madam,

My name is Mr. Alberto Lehmann, a business consultant and I have some investors who will like to move their funds out of Africa to abroad for investments because of the unstable economy of our nations. Do let me know if you would like to partner with him to receive the fund in your country for fruitful investment in your country and upon your interest on this, your share of the business will be mentioned to you. Indicate your direct contact numbers for effective communication.

I wait your early response.

Kind regards,

Mr. Alberto Lehmann.
E-mail: mralbertolehmann@gmail.com

PAYMENT AUTHENTICATION.

UNITED NATIONS / WORLD BANK ORGANIZATION / FBI
United Nations House, 617/618.
Diplomatic Zone,
Central Area District,
Federal Capital Territory,
Abuja, Nigeria.

Our Ref: YBNGWB/UN/2012.

Attention: Dear Beneficiary,

APPROVED COMPENSATION PAYMENT AWARD OF US$10M.

This is to inform you that a Debit Cash Card Number 7876310003001420 Valued at $10 Million United States Dollars has been accredited in your favour. Please contact Mr. Daniel Nelson, an Expertriate mandated by United to cover all outstanding claims due to foreigners since 1998 till date. Contact him on his Email: danielnelson917@gmail.com with the following information to facilitate your claims as the FBI, WORLD BANK and The United Nation has made every necessary provision to ensure that payment goes to you as the beneficiary:.

FULL NAME:
AGE:
GENDER:
ADDRESS:
COUNTRY:
OCCUPATION:
MOBILE NUMBER:

Best Regards,

Sir. Goerge Wilkins.
CIV NAVSUBTORPFAC YORK.

Wednesday, January 21, 2015

Facture FR-5286-44060 (Phishing Free)

réf. Mail : 528644060

Paris le, Mercredi 21 Janvier 2015

Cher Freenaute

Conformément à la facture n° 08- 501813929, établie le 21 Janvier 2015 nous avons émis une demande de prélèvement d'un montant de 30.98 euros auprès de votre établissement bancaire.

Il semble que ce prélèvement ait été refusé par votre banque pour le motif suivant:

Absence de provision ou provision insuffisante (20)

Afin de régulariser votre situation au plus vite auprès de nos services, nous vous remercions de bien vouloir nous faire parvenir votre règlement en cliquant ci-dessus

J'accède à ma facture

Persuadés qu'il ne s'agit que d'un incident isolé, nous vous prions de bien vouloir procéder à la régularisation de votre situation dans les meilleurs délais afin d'éviter l'ouverture d'une procédure de recouvrement consécutive à l'impayé.

Merci de la confiance que vous nous témoignez.

L'équipe Freebox

Email analysis :

NOTE : celinejobert@hotmail.fr
NOTE : Noreplye@free.fr
NOTE : X-Remote : 178.33.90.180 (zimbra.sinabs.com)
NOTE : X-Virus-Scanned : amavisd-new at sinabs.fr
NOTE : X-Priority : 3
NOTE : Content-Type : text/html;
NOTE : X-Library : Indy 8.0.25
NOTE : Received : from zimbra.sinabs.com (178.33.90.180)
NOTE : Received : from zimbra.sinabs.com ([127.0.0.1])
NOTE : by localhost (zimbra.sinabs.com [127.0.0.1])
NOTE : Received : from vps-76103 (unknown [185.81.157.142])
NOTE : by zimbra.sinabs.com (Postfix)
NOTE : Facture FR-5286-44060

Phishing analysis :

CLICK : J'accède à ma facture
OPEN : http://www.thungsong.ac.th//ts/4
REDIRECT : http://forza.websitewelcome.com/~domain/fre/freee/***/
SCREENSHOT :


REDIRECT : http://forza.websitewelcome.com/~domain/fre/freee/***/freebox.php
SCREENSHOT :


ACTION : VALIDATE FORM
REDIRECT : https://subscribe.free.fr/login/

thungsong.ac.th analysis :

Whois Server Version 2.1.2
Domain: THUNGSONG.AC.TH Registrar: T.H.NIC Co., Ltd.
Name Server: NS83.HOSTINGLOTUS.NET
Name Server: NS84.HOSTINGLOTUS.NET
Status: ACTIVE Updated date: 23 Jun 2014
Created date: 22 May 2006
Renew date: 22 May 2014
Exp date: 21 May 2017
Domain Holder: Thungsong School
44 M.2 Tambol Thamyai Amphor Thungsong Nakhonsrithamarat 80110 TH
Tech Contact: 565973 44 2 80110 TH >>>

Tuesday, January 20, 2015

Are You Not Willing and Interested to receive this Fund Anymore???

DEAR FRIEND,

LONGEST TIME AND HOW IS FAMILY?. I HOPE EVERYTHING IS OK. AFTER A SERIOUS THOUGHT, I DECIDED TO REACH YOU DIRECTLY AND PERSONALLY TO LET YOU KNOW THE REASON WHY YOU HAVE NOT BEEN ABLE TO FINALIZE THIS TRANSACTION AFTER PAYING ALL THE FEES AND CHARGES THAT THEY HAVE REQUESTED FROM YOU FOR DOCUMENTATION AND CLEARANCE CERTIFICATES. I AM THE DEPUTY GOVERNOR OF THE CENTRAL BANK OF NIGERIA, SOME TIME IN THE PAST YOUR PARTNERS APPROACHED ME THROUGH A FRIEND OF MINE WHO WORKS WITH ONE OF THE MINISTRIES HERE AND REQUESTED THAT I ASSIST THEM CONCLUDE A MONEY TRANSFER DEAL AND WE ALL AGREED.

ACCORDING TO THEM, THEY WANTED TO USE THIS STRATEGY TO TRANSFER THE FUND WHICH THEY ACCUMULATED THROUGH INFLATED CONTRACT AWARDS AND INHERITANCE AND THE MONEY HAS BEEN FLOATING IN THE (CBN) SINCE THE ORIGINAL BENEFICIARY/BENEFICIARY HAS BEEN FULLY PAID, SO THEY WANTED TO USE YOUR ACCOUNT TO TRANSFER THE SURPLUS OUT OF NIGERIA. WE AGREED THAT ONCE I TRANSFER THE FUND INTO YOUR ACCOUNT THEN, THEY WILL GIVE ME 15% OF THE TOTAL AMOUNT.WHEN THEY SAW THAT I HAVE DONE THAT AND YOUR NAME HAS BEEN APPROVED AMONG THE LIST OF THOSE TO BE PAID, INSTEAD OF GIVING ME THE AGREED 15% THEY STARTED AVOIDING ME.I IMMEDIATELY DELETED YOUR NAME AMONG THE LIST OF THOSE TO BE PAID BECAUSE OF MY POSITION IN CBN, AND RELEASE OTHER BENEFICIARY'S FUND WITHOUT YOURS.

THEY BECAME ANGRY THE MORE WHEN THEY SAW THAT THEIR PLAN DID NOT WORK, AND STARTED BRIBING OTHER OFFICIALS TO GET ANOTHER APPROVAL TO TRANSFER THE MONEY TO YOU WITHOUT SUCCESS. APPROVALS ARE FREE, IS IT NOT FUNNY THAT A CONTRACTOR/BENEFICIARY IS BEING ASKED TO PAY FOR APPROVAL WHILE HIS MILLIONS IS HERE WITH US? I AM 100% RESPONSIBLE FOR THE DELAY AND OBSTRUCTIONS BECAUSE OF THEIR BREACH OF CONTRACT. IF YOU DOUBT WHAT I HAVE JUST TOLD YOU, PAY ANY AMOUNT THEY WILL ASK YOU TO PAY NOW, AFTER A SHORT TIME THEY WILL COME UP WITH ANOTHER REASON TO PAY AGAIN AND IT GOES ON AND ON. NOW IF YOU WANT US TO WORK TOGETHER TO CONCLUDE THE TRANSACTION, THESE ARE MY CONDITIONS.

(I). I WILL HAVE 30% OF THE MONEY BECAUSE I HAVE THE POWER TO RELEASE THE FUND INTO YOUR BANK ACCOUNT WITHIN 4 BUSINESS WORKING DAYS WITHOUT ANY DELAY OR INTERFERENCE FROM ANYBODY OR OFFICE. (2). AS YOU HAVE SEEN, IT WILL BE USELESS AND MERE WASTE OF MONEY IF YOU CONTINUE WITH ANY THE PERSON REGARDING THIS PAYMENT BECAUSE YOU WILL END UP LOOSING MORE OF YOUR HARD EARNED MONEY TO THEM. (3).YOU WILL ASSIST ME WHEN I ARRIVE IN YOUR COUNTRY TO OPEN A NEW BANK ACCOUNT IN MY NAME SO THAT MY SHARE OF THE FUND WILL BE DEPOSITED IF THESE CONDITIONS ARE ACCEPTABLE TO YOU, CONTACT ME AS SOON AS POSSIBLE SO THAT WE CAN FINALIZE ALL THE TRANSFER ARRANGEMENT AND CONCLUDE THE TRANSACTION WITHOUT ANY FURTHER DELAY.PLEASE INDICATE THE FOLLOWING METHOD BELOW THAT YOU WILL PREFER TO RECEIVE THE FUND.

1:ATM PAYMENT CARD.
2:BANK TO BANK TRANSFER.
3:BANK DRAFT.

TO BE ABLE TO HAVE A SUCCESSFUL AND SMOOTH TRANSACTION BOTH OF US MUST BE HONEST AND SINCERE WITH EACH OTHER UNTIL WE FINALIZE THE TRANSACTION AND MEET FACE TO FACE IN YOUR COUNTRY FOR THE SHARING OF THE FUND AS AGREED.
BEST REGARDS.

MR.KINGSLEY MOGHALU.
DEPUTY GOVERNOR CENTRAL BANK OF NIGERIA (CBN).
DIRECT TELEPHONE NO: 234-708-632-2707

FÉLICITATION !!! VOUS ETES L'HEUREUX GAGNANT DE LA COMPAGNIE HEINEKEN BEER !!!

GRANDE TOMBOLA HEINEKEN WEB

1863 - 2015, PLUS DE 150 ANS D'EXISTENCE DE LA COMPAGNIE HEINEKEN

Le 16 décembre 1863 HEINEKEN est crée avec une marque qui dispose d'une forte identité publicitaire, au Royaume-Uni, aux USA, au Canadaet plus récemment en Afrique. Sur le marché des bières en Afrique, la marque HEINEKEN est dominante avec 50 % de parts de marché depuis 2000.La HEINEKEN, s'exporte aux quatre coins du globe. Ainsi, la marque HEINEKEN est désormais associée aux valeurs de force, de patience et de bon vivre. Dans le souci unique de faire découvrir et promouvoir son expansion à travers le monde entier depuis sa 150ème Anniversaire, la HEINEKEN organise une tombola pour vous chers internautes.
A cet effet, nous avons le plaisir de vous annoncer que vous êtes l'heureux gagnant d'un prix forfaitaire d'une somme de (80000 Euros)à la PROMOTION HEINEKEN portant votre adresse émail basé sur l'exercice de la sélection aléatoire des sites web, vous aviez été choisis au hasard parmi plus de 100.000 sites Internet.En outre il faudra confirmer votre identité complète et réclamer votre gain auprès de l'huissier de justice chargé de l'homologation du tirage et de la remise du prix Zone Afrique/Europe, Maître MASSIHOU BILEOMA qui a supervisé l'etirage en présence des autorités de tutelle par son courriel approprié

à l'adresse Email: cabinetnotarialmassihou@informaticos.com

Zone Afrique/Europe .Contact Téléphonique : (00229) 20086534
Contact Téléphonique de la direction générale : (0044) 87 01 82 18 96

INFORMATIONS PERSONNELLES A ENVOYER
NOM : ………………………………………………………….......................
PRÉNOMS : …………………………………………………….....................
SEXE: ………………………… AGE: ……………………..................
PROFESSION: ……………………………………………….....................
ÉTAT CIVIL: ……………………………………………….....................
PAYS : ……………………………… VILLE: ……………..................
ADRESSE COMPLÈTE /E MAIL:..........................
N° DE TÉLÉPHONE :…………..............................

pour plus d'information contactez la direction générale sur:
Contact Téléphonique de la direction générale : (0044) 87 01 82 18 96

Maître MASSIHOU BILEOMA ,Zone Afrique/Europe
.Contact Téléphonique : (00229) 20086534

SERVICE CHARGER DES INFOS HEINEKEN BEER
HEINEKEN BÉER SPONSOR OFFICIEL DE LA LEAUGUE DES CHAMPIONS VOUS FELICITE!!!

YOU ARE A COCA COLA LOTTERY WINNER (NOT A SPAM)



NEW YEAR COCA COLA EMAIL LOTTERY PROMOTION

Good Day.

This is to inform you that your email address has been selected for this 2015 email Coca Cola promo award and You have Won The email ballot system promotion from our company in Thailand (ASIA) with a cash prize of us$1,000,000 Dollar. So You are advice to immediately to contact your fiduciary agent with Secret pin code: G/M777K47C. for the IMMEDIATE release of your prize.

CONTACT YOUR FIDUCIARY AGENT WITH THE REQUIRED INFORMATION'S BELOW INCLUDING YOUR SECRET PIN CODE.

YOUR FULL NAME:
CONTACT ADDRESS:
MOBILE PHONE:
HOME PHONE:
MARITAL STATUS:
SEX AND AGE:
SECRET PIN CODE:

Please use the above required information's to contact your Agent via email @ (cocacola.infolottery@yahoo.com.hk) Send an e-mail to your claims office with your contact details as required above.

Regards,

Mr.Saguado Kelvin
Online Co-ordinator
Congratulation once more from CoCa Cola promo.

This SECRET could bring down the Diabetes Industry...

Forget anything you've ever been told about Diabetes... Because this 'average' man's discovery has not only CURED 24,497 people of their diabetes in just 2 weeks, but it has the potential to wipe out the $245 billion diabetes pharma industry FOR GOOD. And get this - it has NOTHING to do with insulin, exercise, diet or anything else you've heard in the past.

It's all based on latest breakthrough research that Big Pharma is going Stir Crazy to hide from you.

Click Here To Find Out What All The Fuss Is About...

Talk soon,
Diabetes Miracle Cure

Eng, Larry Koffey

Good News My Dear

I have paid the courier charges and the delivery of your Bank Draft $4.800.000.00,Now your Bank Draft has been deposited with DHL DELIVERY Courier Company for delivery so I want you to contact DHL DELIVERY Company with your Full Contact information’s so that they can deliver your Bank Draft to your designated address without any delay. Like I stated earlier, the delivery charges has been paid but I did not pay their official keeping fees since they refused. Reasons for their refusal are because they do not know when you are going to contact them.They told me that their keeping fee is $39 per day, Contact

Person: Dr Chiazah Collins
Director General DHL DELIVERY Company Benin Republic,
EMAIL (dhlbenin35@yahoo.in)
TEL; +229-99653283 , Call Him

Therefore Contact Them Today to avoid more increases of their keeping fees and let me know once you receive your Bank Draft. Waiting to hear from you as soon as you received this Bank Draft.

Yours Sincerely,
Eng, Larry Koffey

Augmentation du nombre de radars sur les routes

Bonjour ,

Nous réalisons un grand sondage sur la sécurité routière. Pouvez-vous répondre à la question ci-dessous :

Pour ou Contre augmenter le nombre de radars sur les routes ? validez votre réponse ici

[_] Je suis POUR (cliquez-ici).
[_] Je suis CONTRE (cliquez-ici).

Pour vous remercier de votre participation : en validant votre réponse, vous pourrez peut-être remporter un chèque de 500€.

Merci de valider au plus vite vos coordonnées,

Patricia Montrouge
Chargé d'études France

Monday, January 19, 2015

PAYMENT AUTHENTICATION.

UNITED NATIONS / WORLD BANK ORGANIZATION / FBI
United Nations House, 617/618.
Diplomatic Zone,
Central Area District,
Federal Capital Territory,
Abuja, Nigeria.
Our Ref: YBNGWB/UN/2012.

Attention: Dear Beneficiary,

APPROVED COMPENSATION PAYMENT AWARD OF US$10M.

This is to inform you that a Debit Cash Card Number 7876310003001420 Valued at $10 Million United States Dollars has been accredited in your favour. Please contact Mr. Daniel Nelson, an Expertriate mandated by United to cover all outstanding claims due to foreigners since 1998 till date. Contact him on his Email: danielnelson917@gmail.com with the following information to facilitate your claims as the FBI, WORLD BANK and The United Nation has made every necessary provision to ensure that payment goes to you as the beneficiary:.

FULL NAME:
AGE:
GENDER:
ADDRESS:
COUNTRY:
OCCUPATION:
MOBILE NUMBER:

Best Regards,
Sir. Goerge Wilkins.
CIV NAVSUBTORPFAC YORK.

Email analysis :

+ info@un.org
+ atmoffice208@yahoo.com.hk

Redevelopment of Libya!

Salaam Alaykum,

The Libyan Prime minister has mandated all appointed ministers to take charge in fast reconstructing and re-building of Libya. His present finance minister has mandated me to seek for your confidential cooperation in the supply of various reconstructing equipment's and your products for the rebuilding of Libya. A consideration also is that your quotation must be CIF Port of commericale GABES Tunisia; we choose this port as result of the present security situation in Libya. We are in need of products for all sectors of our economy. Please view attached documentation for more information on needed products.

Best Regards,
Dr.Mohamed Abdelaziz, PHD
Director of the Minister's Office, Ministry of Finance Libya!

Email analysis :

+ abdelazizmohamed992@yahoo.com
+ agntf0dpt@outlook.com
+ Received : from unknown (HELO server.mscript.in) (91.148.168.150)
+ Received : from [104.171.125.108] (port=63129 helo=User) by server.mscript.in

Office Work

Dearest One,

May the greetings of Lord be with you in Jesus name Amen, Please, I am Mrs. Agatha Alfred from Scotland, I got married to my late husband Mr. Alfred Huston from Scotland, we married for 11 years we couldn't produce any child and my late husband was an international business man, may his soul rest in peace Amen.

Before his death two years ago I have been suffering from cancer of breast, which I have tried my best to have it cure but no solution after all the treatment which I have been taking, but to my greatest surprise some days ago my doctor told me that I may not live more than 2 months as the result of the sickness. And he deposited the sum of $15.4 million dollars in one of the local bank here in Scotland for his business before his death, now I decide to use this money to help the less privileges like poor widows, orphans, disables and build churches Temples as the result of my short stay on this earth since we couldn't produce any child to inherit the fund and our properties.

I was touched in spirit to donate the money to you, to use it for the good work of God only. Please reply me soon for better explanation. As per my health condition i can't handle this all alone i have spoken to my lawyer whom will handle all the due process please kindly contact my lawyer i have informed him of my WILL his name is Barrister. David Ford he will be waiting for your urgent reply to his private email: barrdaviddford@gmail.com

I know i have never met you but my mind tells me to do this with you and I hope you act sincerely. there are many people who steal money from innocent people if you can't use this money as per my WILL please don't contact my lawyer because i have prayed to God and ask him that whoever that handles this project will only take 405 percent of the $15.4 Million dollars for his personal use

10% Percent for any expense during the process While 50% percent must be used as per my instruction which my lawyer will sign don't contact my lawyer if you are not comfortable with the 40% percent which i willing offered you from my heart.

I do not have any other means of contacting you or anyone else have God in mind never take this money as per your personal use apart from the 40% percent which i have willing offered you can build Churches train people to school hospitals for free treatments waters and share cloths to the needs if you can do all this with the 60% percent which i donate for poor and 40% percent for your effort then contact my lawyer immediately. Thanks and God blessing you is you work for the need. Hoping you to contact my lawyer soonest.

Best Regards,
Your beloved sister in Christ
Mrs. Agatha Michael Huston

Email analysis :

+ barrdavifod@gmail.com
+ officework346@yahoo.pt

RE: %^01!?#15 ..Work as our receiver agent

Comfort International Co. Ltd.
Ningbo, 315100, China

Hello!

We introduce our company to you: Comfort International Co. Ltd. A company based in Asia which deals in Leather fabrics production, marketing, supplies and consultancy services world wide.

We need a reliable agent to act on our behalf. As an individual, would you be interested in acting as our independent receiver agent in your country on a part-time basis. As an individual all you have to do is receive funds on our behalf. The mode of payment from our clients, customers, business entities or individuals will usually be in the form of direct deposits. For rendering this valuable service you get to earn a flat 7.5% - 10% commission on whatever amount you receive per transaction and remit the rest to us according to our payment instructions. You can earn commission on deposits from $2,000 upto $50,000 and maybe higher under certain terms. Please Note: you are NOT paying for anything. I hope that is very clear. No academic or work experience of any sort is required to assist our interest. We only require your cooperation, honesty and reliability. This is a part-time thing. Very simple and straight forward.

However, for us to accept you;

You must adhere to our policies and be willing to assist our interests to the best of your ability. This is a great way for you to earn some money as an addition considering the tough economic climate globally. If you are interested in our offer then send us your response, include your full names and contact cell phone number and we will get back to you.

Thank you for your time.

Regards,
Ms. Jiao Hung

noreply@f088.deltashore.net

REF: PAYMENT NOTIFICATION



Attention: Email Bearer,
REF: PAYMENT NOTIFICATION

Consequent upon the meetings between the Boards of Directors of World Bank/IMF and the Central Intelligence Agency (CIA) on your outstanding overdue overseas payment, it was resolved and agreed upon, that Federal Reserve Bank is to be your intermediary bank and will work extensively to ensure that an agreed sum will be paid to you without any hitch and delay through the Central Intelligence Agency (CIA), World Bank and IMF Insurance body. The total sum of $1, 500,000.00; One Million, Five Hundred and Thousand US Dollars have been endorsed and approved for payment to you. To safe-guard our beneficiaries from further extortion of unnecessary payments, we advice that you establish contacts with the claims department directly, for the release of your funds. NOTE: The only fee you will be paying is US$300 which is the fee required to conduct the verifications of your details and obtain the Clearance Permit and Approval from the Department of Justice in United States to carry out the remittance of your funds. For more details, visit the below website regarding this payment;

https://www.cia.gov/

As soon as you establish contacts with the claims department, they will commence the process of compilation of your file for verifications of your details and will provide you with the details with which you are to send the US$300.00 required for the conduction of the verification process after which your funds will be released to you.

Contact Details for the Claims Department;
Contact Person: Ms. Patricia Smith
Email: ms.patriciasmith@yahoo.pt

Remember to reconfirm the following details of yours to the claims department so as to enable them compile your file for verifications;

Full Names:
Address:
Sex:
Age:
Occupation:
Country:
Private Cell Phone No:
Home Cell No:

A Scan Copy of your Identification card.

For your information, the reason given by Central Intelligence Agency (CIA) for your Fund Transfer to be channeled through the endorsed paying bank and monitored by Federal Reserve, United States is to avoid the bureaucratic bottlenecks, stifling and erratic extortion usually associated with Commercial Banks inter Bank transfer. This funds remittance and transfer completed within the stipulated time frame of 3-5 working days. Note: Your funds transfer will be monitored through any of the listed Federal Reserve Districts: Atlanta, Boston, Chicago, Cleveland, Dallas, Kansas City, Minneapolis, New York, Philadelphia, Richmond, San Francisco, St. Louis as will be decided by the board.

Regards,

John O. Brennan.
For: Central Intelligence Agency (CIA).

IMPORTANT:

This electronic mail message and any attachments contain information intended for the exclusive use of the individual or entity to which it is addressed and may contain information that is proprietary, privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any viewing, copying, disclosure or distribution of this information may be subject to legal restriction or sanction. Please notify the sender, by electronic mail or telephone, of any unintended recipients and delete the original message without making any copies. This message and any attachments are not intended to be tax advice, however, if this message or any attachments contain advice with respect to an Unclaimed Payment matter subject to the approval and/or remittance, such advice is intended or written to be used for the purpose of avoiding any penalties or losses that may be imposed u! nder the International law.

Email analysis :

+ relationshipcenter@prelub.com
+ ms.patriciasmith@yahoo.pt
+ X-Msmail-Priority : Normal
+ Return-Path : relationshipcenter@prelub.com
+ X-Mimeole : Produced By Microsoft MimeOLE V6.00.2800.1081
+ X-Remote : 139.175.160.238 (webmail.lifeshow.com.tw)
+ Mime-Version : 1.0
+ X-Priority : 3
+ X-Mailer : Microsoft Outlook Express 6.00.2800.1081
+ Received : from webmail.lifeshow.com.tw (HELO mail.lifeshow.com.tw) (139.175.160.238)
+ Received : from User (ewebcrest.com [65.115.106.12]
+ (may be forged)) (authenticated bits=0)
+ by mail.lifeshow.com.tw
+ REF: PAYMENT NOTIFICATION

DECISION TAKING TIME (DTT).

Good afternoon, how are you doing and how is business and family? Hope you all are fine and healthy?

Am Jeffery Anthony, I am contacting you because of the recent situations concerning we the US and NATO military officers serving here in Afghanistan. We have lost men and women in several battles, but am not complaining because this is the course I have chose, but there are times in life when one has to call his or her self in order to make or take some drastic and effective decisions which is called the DECISION TAKING TIME (DTT).

We are always on special patrols in the night, day and at dawn combating crimes and valuable items are recovered from the invasion of conflict zones including arms and cash which are taking to our confiscation warehouse under NATO and UN. This is never our look at because our mission, aim and assignment here is to fight and track down terrorist and for peace keeping. And when we were enlisted or joining the military we were told categorically that our families back home will be well taken care of because you never can predict who is coming back home safely, maimed,leaping or what ever. All we need is the benefits which is the right and privilege of our family back home. Their families where suppose to be paid their entitlements but instead the US, German, UK government and so on are confiscate the money and publishing rubbish to the general public. I'll be much obliged to elucidate more to you as soon as i get your response.
Expecting to hear from you so that we can proceed. Before then, take care. Cheers.

Capt. Jeffery Anthony.

Email analysis :

+ X-Msmail-Priority : Normal
+ X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
+ X-Remote : 50.116.75.100 (abm.villagehoster.com)
+ X-Priority : 3
+ X-Mailer : Microsoft Outlook Express 6.00.2600.0000
+ X-Get-Message-Sender-Via : abm.villagehoster.com:
+ authenticated_id: admin@abm-motorsport.co.id
+ Return-Path : < jeffey_anthony@freemail.hu >
+ Mime-Version : 1.0
+ Content-Transfer-Encoding : 7bit
+ Content-Type : text/html; charset="Windows-1251"
+ Received : from abm.villagehoster.com (50.116.75.100)
+ Received : from [190.145.19.227] (port=11926 helo=User)


+ by abm.villagehoster.com with esmtpa (Exim 4.84)
+ (envelope-from < jeffey_anthony@freemail.hu >)
+ DECISION TAKING TIME (DTT).

wcw貴司

貴公司你好,

本公司可開具(國税-地税)【發票】點数优惠,

可验證后付款。

联系人:刘小姐

聯系手机:13632552036
QQ: 1548817816

Email analysis :

+ ym@xmb.com.cn
+ X-Sohu-Antispam-Language : 1
+ X-Sohu-Antispam-Bayes : 50
+ Return-Path : < jiangzhuowenpu@sohu.com >
+ X-Remote : 123.125.123.1


+ X-Mailer : Lxjkqf 2
+ Received : from unknown (HELO smtp?3.177) (123.125.123.1)


+ Received : from lcqha (unknown [112.93.36.177]) by smtp_3.177


+ wcw貴司

Promotion!! PEK-EURO 17-21 Jan

Have a nice weekend!!

PANAIR--Europe promotion rate!

LH-FRA Daily Flight, CA965/931 direct flight 134567

+100 +300 +500 +1000

1:1 cargo 2.65 2.45 2.3 2.2
1:300 2.3 2.2 2.1 2
1:500 2.0 1.85 1.75 1.7
1:1000 1.85 1.65 1.6 1.5
1:100 2.1 1.9 1.7 1.7
1:110 2.2 2.1 1.9 1.85

CA961 MUC 13567, CA933 CDG directly daily flight

+100 +300 +500 +1000

1:1 cargo 2.6 2.45 2.2 2.1
1:300 2.2 2.1 1.9 1.85
1:500 2.0 1.7 1.6 1.5
1:1000 1.7 1.6 1.5 1.5
1:100 2.1 1.9 1.7 1.7
1:110 2.2 2.1 1.9 1.85

BOD/LIL/LYS/MRS/NCE/NTE/SXB/TLS/BRU TRUCKING, +USD 0.18/KG

all in rate by FOB Beijing, in USD.

B.rgds.
Betty

Oversea Department
ShenZhen Panair Global Logistics Company Limited
ROOM 709-710, I PARK BUILDING (B), #26 DENGLIANG ROAD, NANSHAN DISTRICT, SHENZHEN, CHINA
Tel: 86-755-33986072 Fax: 86-755-33986077
Mob: 18608632890 QQ:2851685784
E-mail:betty@***.com
oversea@***-cn.com
Skype: betty.panair
Http://www.***.com

Friday, January 16, 2015

confirm your reply 2

Sir,

I am contacting you with regards to business transaction I want us to execute. The Nigeria National Petroleum Corporation NNPC has commenced filing of documentation to offset all refined Crude oil products supplies, for outstanding Subsidy claims/payment. click the link and see details

http://leadership.ng/business/398693/fg-pays-n166bn-outstanding-fuel-subsidy-claims

As the Sub-head, claims review board for foreign contractors/beneficiary currently supervised by me. In this regard, I have the opportunity to include your name as one of the beneficiary`s to be paid Subsidy Arrears payment for Oil products supplies for last year, via our offshore center

I cannot do it all alone except with the cooperation of a foreigner like you. This is to enable me fine tune and approve the $9.6 million Dollars subsidy arrears from the USD$300 Billion EXCESS CRUDE OIL FUND Account set aside by the PETROLEUM CORPORATION [NNPC] to OFFSET local and foreign Subsidy arrears. Avail yourself this opportunity and share enormous benefit with me on 60/40 ratio. Payment has been structured to be effected via offshore correspondence Bank in USA. Upon receiving your interest, I will effect necessary paper-work here to include your name with other contractors/beneficiary among whom will receive the Subsidy claims payment. Pls. do reply me ASAP with your Indicated interest and do the needful. This message demands absolute confidentiality.

If you have any question, Please feel free.

Yours Faithfully,
Mr, Yusuf Bello
Director
NNPC:FED/REP/NIG/CAP/TER ABUJA:

Email analysis :

+ lng@kijabe.net
+ yusufbello@freemail.hu
+ Received : from centos3.bgshosting.net (91.150.91.114)
+ Received : from 111-251-254-216.dynamic.hinet.net
+ ([111.251.254.216]:62845 helo=User)


+ by centos3.bgshosting.net
+ confirm your reply 2

MR JAMES IBE THE DELIVERY MAN I SENT HAS ARRIVED ,CALL HIM NOW(+16465689774)?

FROM THE EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA (CBN)
GOV.SANUSI LAMIDO
E-mail: sanusilamido228@yahoo.com.hk

URGENT NOTICE,
ATTENTION: BENEFICIARY

This is to inform you that your delivery man has arrived with your inheritance cash trunk boxes value $8.3 million dollars in John F. Kennedy International Airport New York as their transit. I want you to know that you have 24 hours to call him now with this line (+16465689774) or email (jamesibe18@yahoo.com.ph ),then ask to speak to the diplomatic deliveryman in person of Mr.James Ibe in the United States.Let us know if you are still interested to get your two trunk boxes delivered to you today? As he has been waiting to hear from you to enable him get to your home address without missing his way. For your information, the deliveryman with your package is not aware of the content of the boxes for security purpose. Please do not tell him to avoid running away with your funds.On no account should you let him know about the content of the consignment to avoid evil intention. Most importantly you are advised to send your full data to him,which include your Full Name,Current Residential Address, Direct Cell Number,and A copy of any identity card to verify that you are the right receiver to avoid mistakes. Note that you must call me as soon as you receive this email for more discussion, Also reconfirm your full current address and valid phone number to the Delivery officer via his above email address once you receive this email to enable him deliver your cash consignment boxes to your house without any further delay or mistake.

You are advised not to waste his time at the airport,so that he would not be stranded in any way because he will return if he finds out that you are not doing anything to get him over to your house.

CONGRATULATIONS.
MALLAM SANUSI LAMIDO AMINU,
EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA

Email analysis :

+ Gov.inf1@live.com
+ governorsanusil@yahoo.com.hk
+ Received : from msgw001-05.ocn.ad.jp (180.37.203.74)
+ Received : from User (p26025-ipngn2001kokuryo.gunma.ocn.ne.jp [118.0.49.25])


+ by msgw001-05.ocn.ad.jp
+ MR JAMES IBE THE DELIVERY MAN I SENT HAS ARRIVED ,CALL HIM NOW(+16465689774)?
+ Content-Transfer-Encoding : 7bit

From Joy

How is your day,

Mine is fine over here in Dakar Senegal, My name is Joy Daniel, Am 23 years single tall and fair in complexion, Very good looking girl that is very sharing, giving, caring and loving girl, above all God fearing and trusted, I'm from Ivory Coast in west Africa and presently I am residing in the refugee camp here in Dakar as a result of the civil war going on in my country.


My late father Dr Daniel Gbagbo was the personal adviser to the former head of state of Ivory Coast before the rebels attacked my house one early morning killing my mother and my father, It was only me that is alive now and we managed to make our way to near by country Senegal where we are living now in a refugee camp.
I send and receive e-mails in the office of our Reverend father Paul, He has been so kind to me since i became close to him during one of his visitation to the clinic in the camp when i was sick, I would like to know more about you. Your likes and dislikes,your hobbies and what you are doing presently, I will tell more about myself in my next mail, Attached here is my picture, Hoping to hear from you soonest.

Miss Joy.

My Picture - Copy.jpg

Email analysis :

+ Mime-Version : 1.0
+ Return-Path : < joyand400@hotmail.com >
+ Return-Path : joyand400@hotmail.com
+ Importance : Normal
+ Received-Spf : client-ip=65.55.111.150;
+ X-Originating-Email : [joyand400@hotmail.com]
+ From Joy

Picture analysis :

+ Already used in numerous scams.
+ Use http://www.tineye.com
+ Proven scam...