Saturday, April 2, 2016

Please Confirm (Dropbox Phishing)

Please confirm

Attached PO and TT copy, check on dropbox. Our agent will contact you soon for Carton design.

Regards,
UhlSport Gmbh
+49-219383112

http://www.diabeez.in/cgisys/dropboxx/downloadPO-D1956-1.htm?

Phishing analysis :

CLICK : http://www.diabeez.in/cgisys/dropboxx/downloadPO-D1956-1.htm?
SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://www.dropbox.com/s/paic7kvmg1lqnsg/PO%201026240.pdf?dl=0
SCREENSHOT :


Email analysis :

NOTE : mldminn@outlook.com
NOTE : 25.152.2.60 as permitted sender
NOTE : X-Ms-Exchange-Crosstenant-Originalarrivaltime : 01 Apr 2016 08:47:01.9167 (UTC)
NOTE : X-Originatororg : outlook.com
NOTE : X-Ms-Exchange-Transport-Crosstenantheadersstamped : VE1EUR01HT230
NOTE : X-Forefront-Antispam-Report : CIP:25.152.2.60;IPV:NLI;CTRY:GB;EFV:NLI;SFV:NSPM;SFS:(10019020)
NOTE : Authentication-Results : spf=softfail (sender IP is 25.152.2.60)
NOTE : X-Ms-Exchange-Crosstenant-Fromentityheader : Internet
NOTE : Accept-Language : en-US
NOTE : Content-Language : en-US
NOTE : Mime-Version : 1.0
NOTE : Please Confirm

Notes from Scam.cz :


  • 25.152.2.60 servers were used to relay this phishing.
  • 25.152.2.60 = UK Ministry of Defence
  • https://www.gov.uk/government/organisations/ministry-of-defence
  • Inside the UK ministry of defence, there is a station relaying dropbox phishing.

From Dr. Fabien Barou.

UNITED NATIONS COMPENSATION IN CONJUNCTION WITH FEDERAL GOVERNMENT OF COTE D’IVOIRE IN AFFILIATION WITH WORLD BANK.

ATTN: Beneficiary,

Hope all is well with you and Your family?, you may not understand why this mail came to you,It is in regards to the recent meeting between the United Nations and the Present United States Government to restore the dignity and Economy of the Nations, Base on the Agreement with the World Bank Assistance to help and make the world a better place for all with the sole aim of abolishing poverty. We have been having a meeting for the passed 7 months which ended 2 days ago.

The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Cote D’Ivoire his Excellency President Alassane Ouattara to boost the exercise of clearing all foreign debts owed to Foreigners and Compensate all that have lost their hard earned money from African Fraudsters.

This email is to all the people that have been scammed in any part of the world, the UNITED NATIONS have agreed to compensate them with the sum of USD$850,000 each (Eight hundred and fifty thousand United State Dollars), this includes every foreign contractors that may have not received their contract sum, and people that have had an unfinished transaction or international businesses that failed due to Government problems, Contracts Sum, Lottery/Gambling etc.

Your name and email was in the list submitted by our Monitoring Teams and the Federal Bureau of Investigation (FBI) observers and this is why we are contacting you, this have been agreed upon and have been signed.

You are advised to get back to me immediately, as I am the representative in Cote D’Ivoire, so contact me immediately for your Cheque worth the total sum of USD$850,000 (Eight hundred and fifty thousand United State Dollars). This funds are in DRAFT Form for security purpose ok? So I will send it to you via UPS Courier Company and you can clear the CHEQUE in any bank of your choice in your country.
Contact me immediately for your Cheque delivery with the following information’s.

1. Full name:...............
2. Phone and Fax number:.............
3. Address:............
4. Your age and current occupation:..........
5. Your International passport:..............

NOTICE: This E-mail is covered by the
Electronic Communication Privacy Acts, 18 U.S.C Sec 2510-2521, is Confidential and may be legally privileged.

The information is solely For the use of the addresses named above. If you are not the intended Recipient, any disclosure, copying, distribution, or other use of the Contents of this information are strictly prohibited.

Thanks,
Best regards,
Dr. Fabien Barou.

Email analysis :

NOTE : fabien_barou10@yahoo.co.jp
NOTE : fabien.barou@onet.eu
NOTE : Received : from [146.185.31.215]

HELLO MY DEAR

Hello dear,

My name is Miss Aimal Hashmi, As I search for a nice friend and came across your contact, My mind and my heart told me to contact you for friendship, A friend who truly understand his or her friend and share their feelings together. please kindly accept my request.

Your Friend, Aimal

Email analysis :

NOTE : aimalhashmi153@yahoo.com
NOTE : aimaldemian@yahoo.com

URGENT REPLY

Dear Friend

Please accept my apologies, I do not want to invade your privacy .I am Barrister Aman Luky i wrote ealier mail to you but no answer.In my first post i informed you about my late client Gershon ,which bear the same surname with you.After his death i received several letter from the bank where he made a deposit of us$14M (fourteen million United States dollars).before his death.The bank ask me to provide his next of kin or any of his relative who may make his claim to the fund,otherwise it will confiscated by the bank because i could not locate any of his relative hence i contacted you for this claim since you have the same surname with him.After your reply i shall give you the details and the procedure of the transaction,waiting to hear from you.

Yours faithfully,
Barrister.Aman Luky.

Email analysis :

NOTE : amanluky2001@gmail.com
NOTE : stellajames.lawyer@gmail.com

DEAL

Hello,

I have a transaction deal for you privately. Contact me for more details.

Regards,
Iain.

Email analysis :

NOTE : iainconn@outlook.com
NOTE : janne.kuhn@wur.nl

YOUR PAYMENT SLIP IS READY

SWIFT MESSAGE
Swift Input : FIN103 CUSTOMER CREDIT
Date of issue : 14 / 03/ 2016
Maturing At : / 24 / 03/2016
Amount : 950,000.00 USD

TRANSIT BULK DELIVERY TRANSFER NOTIFICATION: REF. S076554920134392/AF298/WQM1/Z01

Hello Dear,

We refer to the thirty- six (36) payments sent to our branch on the 14th of March 2016 under the instructions of the International Centre for Settlement of Contracts & Investments Disputes (ICSID) which is a United Nations World Bank Assisted Project to compensate 100 owed foreign contractors/Scam victims with the sum of US$950,000 each through Western Union Services. Further to this, Your name was shortlisted and submitted to us as the beneficiary to one of the payments under the above-mentioned transaction references. We have been trying to reach you on the phone to give you the MTCN and the deposit slip all to no avail. However, be informed that We have concluded arrangement to effect your payment through a daily Money Transfer Control Number (MTCN). But the maximum amount you shall be receiving henceforth is $5,000 daily until the total funds is completely paid out to you. Kindly contact Western Union Branch Agent with the below information for the pick up details:

Contact Person: Brown Cooper
Contact Email: swiftpaymasters-online@hotmail.com
Contact Phone Number: +2349090918039

Make Sure you contact him with your Contract/Inheritance reference number S076554920134392/AF298/WQM1/Z01 and your current contact details such as;

1. Your Full Names: ...............................
2. Your Cell Phone Number:.........................
3. Your Home Address: .............................
4. Your Occupation:................................
5. Your Age and Sex:...............................

Although, a non-activated daily installment of 5,000.00 USD has been inputted and sent to your name, hence you are to activate your account with them for security reasons, so kindly contact Mr.Brown Cooper and tell him to give you the MTCN, Sender Name, Question/Answer to pick the 5,000.00 USD.

Please let me know as soon as you have received it.

Thank you.
David Johnson.
Branch Mgr, Product/Service Dept.

Email analysis :

NOTE : swiftpaymasters-online@hotmail.com
NOTE : alert4@westernalert.es.cx

FROM MONEY GRAM BANK OFFICE.

FROM MONEY GRAM BANK OFFICE.

NOTE THAT WE HAVE DECIDED TO PAY YOU YOUR MONISE THROUGH MONEY GRAM URGENT REMMITTING OFFICE SINCE YOU WAS UNABLE TO RECEIEVE YOUR MONEY THROUGH WESTERN UNION DUE TO THEIR MANAGEMENT BUT NOW WE HAVE SENT YOUR FULL COMPENSATION PAYMENT OF $1.500.000.00USD TO YOU THROUGH MONEY GRAM OFFICE,
YOU WILL BE RECEIVING 9,000.00USD PER DAY, BUT I WANT YOU TO CONTACT THE MANAGEMENT IN MONEY GRAM RIGHT NOW AND ASK HIM FOR YOUR FIRST PAYMENT .HIS NAME IS MR.PETER ADAM ASK HIM TO GIVE YOU THE MONEY GRAM PAYMENT INFORMATION SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH MONEY GRAM OFFICE WITHOUT ANY PROBLEM.

EMAIL ADDRESS IS (mgram9005@gmail.com)
AND CONTACT HIM WITH YOUR FULL INFORMATION.
CALL MR. PETER ADAM Tel: (+229) 9165289

>

Your name..................
Country......................
Phone no......................
Address/city...............
166GYAge/...................

CALL OR EMAIL HIM NOW SO THAT HE CAN PROVIDE THE MONEY GRAM INFORMATION TO YOU AS URGENT AS YOU CAN.
BE NOTED THAT THE ONLY PAYMENT YOU ARE GOING TO PAY THEM IS $85.00USD ONLY FOR TRANSFERRING YOUR FIRST PAYMENT OF $4500USD TO YOU WITH OUT ANY DELAY.

THANKS AND GOD BLESSING YOU

Mr. Phillip Oduoza

FROM UNO COMPENSATION OFFICE

Email analysis :

NOTE : mgram9005@gmail.com
NOTE : admin@increase.mx

Hello dear"

Hello dear" how are you doing? Please excuse me for invading your privacy through this medium, Actually i felt compelled to contact you to get acquainted with each other. As for me, my name is [ Blessing Williams], I'm a young lady looking for a real friendship and I hope that you will grant me the opportunity for us to know ourselves very well, Anyway i shall be waiting for your prompt reply so that i can tell you more about me couple with my pictures OK, Take care of your self and have a pleasant day, Blessing
Email...[blessing3real@hotmail.com]

Email analysis :

NOTE : blessing3real@hotmail.com
NOTE : ibrahim.djamal@kominfo.go.id
NOTE : X-Mailer : Zimbra 8.6.0_GA_1194 (ZimbraWebClient - FF43 (Win)/8.6.0_GA_1194)
NOTE : X-Originating-Ip : [202.89.117.12]

Telegraphic Wire Transfer Payment from Bank of America United States.

Bank of America
150 Broadway Ave
New York, NY 10038 Usa.
Telegraphic Wire Transfer Payment from Bank of America United States.

This is an official notice from the Bank of America in regards to the transfer of your inheritance/ lottery funds worth $10.5 million united states dollars. Meanwhile we are very sorry for the delay in this transaction which was as a result of the latter we received from one Mr.David Carter We wish to notify you that a Man named Mr.David Carter sent a letter to our Bank here in the united states claiming that you are dead and he stated that before you died, you informed him about your funds worth $10.5 million which is in our bank here in the United States. Note that Mr.David Carter also sent a copy of your death certificate to us, to prove to us that you are dead as he claimed, but we did not believe him because we know that there are so many scam activities going on here in the united states. As a matter of fact, he also gave us every reason to believe that you are dead, and he is ready to take care of what ever it will cost to get your funds transferred into his own account,we decided to contact you first to be sure that you are dead as he claimed before releasing your funds worth $10.5 million to him. So are you dead or are you still alive? Be informed that we are going to release the funds to Mr.David Carter if you do not respond back to us within the next 2 working days. Please , kindly fill all the information below to enable us transfer your funds to your account before Mr David Carter will claim your funds.

Full Name:
Address:
Telephone:
Mobile:
Fax:
Email:

Bank Name:
Address:
Account No.:
Routing No.:
Swift Code:
Account Name:

However, we shall proceed to issue all payments details to the said Mr.David Carter if we do not hear from you within the next two working days from today.

I will be waiting for your urgent response.

Sincerely yours,

Mr. Brian t. Moynihan
Manager Bank of America

Email analysis :

NOTE : thomaskmont222@gmail.com
NOTE : Japanjpnch@themis.ocn.ne.jp
NOTE : Received : from User
NOTE : (p86094-ipngnfx01marunouchi.tokyo.ocn.ne.jp [153.142.238.94])