Thursday, January 15, 2015

Account Notice (Paypal Phishing)

Thu 15/1/2015 5:28:36

Dear Valued Customer,

Unauthorized access has been detected in your account.

Unfortunately, due to this event, our security system has limited the access to your account. Account Limitations prevent you from completing certain actions with your account, such as withdrawing, sending, or receiving money. These limitations are implemented when we see unusual or suspicious activity to help protect both PayPal buyers and sellers. Please verify your account by completing the form which is attached in this email. By doing this, restrictions in your account will be lifted.

We apologize for any inconvenience.

Thank you,
PayPal Security Team

Email analysis :

+ services@ppsec.com
+ Content-Type : multipart/mixed; boundary="--17415"
+ Mime-Version : 1.0
+ Return-Path : < services@ppsec.com >
+ X-Mailer : Balsa 14.0.103581
+ Received : from unknown (HELO mail.dsdemails.co.uk) (216.98.153.222)
+ Received : from 216.98.153.222 ([219.232.247.108]) by dsdemails.co.uk
+ Account Notice

Phishing analysis :

OPEN : Attached.html
FORM : http://www.csticket.su/submit.php

csticket.su analysis :

domain: CSTICKET.SU
nserver: ns1.hostns222777.com.
nserver: ns2.hostns222777.com.
nserver: ns3.hostns222777.com.
nserver: ns4.hostns222777.com.
state: REGISTERED, DELEGATED
person: Private
Person e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2015.01.11
paid-till: 2016.01.11
free-date: 2016.02.13
source: TCI

rawixidawax@hotmail.com analysis :

domain: FE-CC.SU
nserver: ns1.freedns.ws.
nserver: ns2.freedns.ws.
nserver: ns3.freedns.ws.
nserver: ns4.freedns.ws.
state: REGISTERED, DELEGATED
person: Private Person
e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2014.02.18

Your legal fund approval

ECONOMIC AND FINANCIAL CRIMES COMMISSION
, FOMELLA STREET, OFF ADETOKUNBO ADEMOLA CRESCENT,
WUSE II, ABUJA, NIGERIA

We have contacted you before but no response from you on the discovery of the below information contain in this email regarding the treat and ugly experience you might have been and still going through from scammer's knowing that they send out thousands of scam email daily looking for who to rip off, however you simply ignored our notice and we are writing yet again to advice you; it has been re confirmed to this Agency that some group of impostors are currently to if not already ripping you off claiming they are Banks, Delivery Company ,EFCC Nigeria, IMF, FBI, Western Union, Money gram, Diplomat Agents and others imposed offices around the globe especially in West Africa region such as Nigeria, Ghana and Benin Republic and you have being their victim paying money after money for endless acquiring of fake documents ,certificates, there is always another fees to be paid whenever you are dealing with these hoodlums another surely and it is very sad to know you have not find out that these people are all crime.

This information is reaching you from the office of the Internet Scam Investigation Group, the people you are dealing with are all internet criminals operating from different part of Africa, they only want your money and they are the same people but write you differently and that is why you received a lot of email daily and thereby confusing from knowing the truth since you find it very easy sending your personal information to any email claiming they have fund for you without a proper inquiry, they are not what they claim they are and I don't know if you have sent them any money at all, if yes I tell you they will keep demanding until you realize that they are impostors, it is time for you to open your eyes before you remain a victim of internet scam forever, this will serve as eye opener to you to stop further dealings at all and follow the guideline we shall give you to find out if you truly have any REAL fund belonging to you in Africa or any where in the World.

I ask, have you been able to find out why you receive all kinds of emails daily claiming it have funds for you? Have you asked yourself if there is any fund awarded in your name at all? Or do you believe anybody that contacts you and says they have fund for you? I really pity your situation after going through the details forwarded to our office today.

Recently, report from the headquarters of the West Africa Internet Scam Monitoring Unit revealed that 70% of internet Scam in Africa is carried out by touts and jobless men in Africa and Nigeria Benin Republic to be precise (unemployment rate in Africa) and for this reason we are on assignment to stop further scam to you and also it was revealed that these criminals has partners working for them in Benin Republic, London, USA and other European and Asian Countries so at times you are contacted from even your own Country but it is all but scam.

Anybody caught to be involved in scam will serve 12years Jail terms as abiding to Economical and Financial Crime Commission (EFCC) constitution in section 42 subsections 102 of 2010 Constitution. West Africa Community will not be liable for your lost fund if you continue with those impostors who have been scamming you over the years and up till now you have not received a dime, contact the Commission to make inquiry if you have fund at all here or Africa, report the names of those fake offices you are dealing with immediately.

If you want to put an end to this scam you have experienced or still experiencing and if you ever want to receive your fund from Africa if there is any, first is to commission INQUIRE the only truth of your fund will be found in the office of the African Ministry of State for foreign Transaction where you will inquire if there is any real fund in your name presenting your names for verification, below contact address belongs to the staffs Federal Ministry of Foreign Affairs where this inquiry should be made by you to Mr.Eze Michael Email:ezemichael@superposta.com

Meanwhile we are not telling you there is a fund for you in he Ministry but contact them on the email above and inquire first to know if there is any real fund in your name in Africa they should be able to investigation and let you know.

Sincerely,
Detective Edward Alex
Head Internet Scam Investigation and Information Group
Economical and Financial Crime Commission

Email analysis :

+ officefile4444@gmail.com
+ ezemichael@superposta.com
+ Received : by 27.123.205.142;
+ X-Yahoo-Newman-Property : ymail-3

Intruder Detection

Wed 14/1/2015 21:16:25

Dear Valued Customer, Unauthorized access has been detected in your account.Unfortunately, due to this event, our security system has limited the access to your account.Account Limitations prevent you from completing certain actions with your account, such as withdrawing, sending, or receiving money.These limitations are implemented when we see unusual or suspicious activity to help protect both PayPal buyers and sellers.Please verify your account by completing the form which is attached in this email. By doing this, restrictions in your account will be lifted.We apologize for any inconvenience.

Thank you,
PayPal Security Team

----36185--
----31890

Content-Transfer-Encoding: base64
Content-Type: application/octet-stream; name="Verification.html"

Email analysis :

+ accounts@paysrv.com
+ X-Mailer : Evolution 2.0.159426
+ Content-Type : multipart/mixed; boundary="--31890"
+ Mime-Version : 1.0
+ Received : from 68-116-17-190.static.knwc.wa.charter.com
+ (HELO mail.westernmaterials.com) (68.116.17.190)
+ Received : from 68.116.17.190 ([140.117.169.188])
+ by mail.westernmaterials.com

Solution to receive your unclaimed fund(s)

From: Kazo Rofai (Personal assistant to Mr. Komi Koutché the Honorable Minister of Economy and Finance)
OUR REF: PRES/MINFIN/BJ/0795/15

Sir/Ma,

Following the executive order received from the President and Commander in Chief of the Armed Forces of the Republic of Benin, as a result of petitions and counter petitions by foreigners over the non-payment of their Inheritance and Contracts Funds due to the inimical activities of some unscrupulous elements amongst our bank and government officials, I have been mandated to oversight your immediate payment of the outstanding sum. From the records of outstanding funds-claim due for payment with the Bank/Government of Benin, your name/company was discovered among the list of the beneficiaries whom have not yet received their funds in respect of their claims. At this juncture, you should reconfirm to me the below listed data for further verification with the information already made available to us.

1) Your full name/address.
2) Phone / fax and mobile numbers.
3) Profession, age and marital status.
4) Amount Claimable.

As soon as these information are received, I will furbish to you the contact information of the government affiliate bank and a personal account officer so as to enable them proceed and process your payment through wire transfer or a certified bank draft or the issuance of an ATM Card from anyone of their prime banks in Europe and a transfer confirmation copy will be given to you for your perusal. We regret all inconveniences you encountered within the period you were seeking to claim your bona fide funds. Anticipating your instant response and cooperation to enable us serve you better for the redemption of your funds.

Mr. Kazo Rofai (P/A)
(Minister of Economy and Finance)
http://www.gouv.bj/personnalites-politiques/ministre-de-l-economie-et-des-finances-mef

Email analysis :

+ mef_bj@mail2consultant.com
+ mef.gov@mailbox.hu
+ Solution to receive your unclaimed fund(s)