Monday, September 26, 2016

Mutual Transaction

I am Mr.Karim Karoui a Banker First Gulf Bank Dubai U.A.E,An account officer to Adona Gold Ltd A national of your country based in Dubai U.A.E, before I rose to the position of Managing Director. , engineer who ran car maker BMW museum and also an oil consultant died along with his entire family in this resent Malaysia ghastly air crash in Indian Ocean that claim the lives of all the 239 passengers You may click this link below for Verification. (http://www.bbc.com/news/world-asia-26503141)

Since his wife was his next of kin and she was in the missing plan also, I decided to trace his relatives over the Internet to locate any member of his family but of no avail, hence I contacted you. I have contacted you to assist in repatriating the money that belongs to my client before it declared unserviceable by the bank management where these huge deposits were lodged. Particularly, the Bank where the deceased had an account valued $5,900,000.00 and 20 killos of gold bar metals the management of my bank has been finding means to reach him so as to ascertain if he will roll over the Deposit or have the contract sum withdrawn. When I discovered that this will happen, I have tried to come up a procedure to preserve this fund and use the proceeds for business.

Some directors here have been trying to find out from me the information about this account and the owner, but I have kept it confidential because I know that if they become aware that He is late, they will corner the funds for themselves. Therefore, am seeking your co-operation to present you as the one to benefit from his fund since you have the same surname, my bank headquarters will pay the funds to you as his next of kin. I have done enough inside bank arrangement and i only have to put in your details into the information network in our bank database and your name will be reflect you as his next of kin.

I seek your consent to present you as the next of kin of the deceased so that the proceeds of this can be paid to you and then you and I can share the money. 70% to me and 25% to you, while 5% should be for expenses or tax as your government may require, I have the certificate of deposit that can be used to back up any claim we may make. All I require is your moral support.

I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law. Please get in touch with me by my email to enable us discuss further.(karimmttd@gmail.com)

Provide me with the information below:

1. Your Full Name:
2. Your Resident/Office Address:
3. Your Marital Status:
4. Your Age:
5. Your Occupation:
6. Private Telephone:

This is to affect the swift transfer of this fund into your account in less than Three (5) Working days
Best regards,
Mr.Karim Karoui

Email analysis :

NOTE : imfteamsgh@gmail.com
NOTE : Ip=[72.237.91.131];Helo=[mail.fayettecti.org]


NOTE : Received : from User (87.138.65.146) by server-8.fvt-nt.fayettevo-tech.org (10.0.0.11)

CONGRATULATIONS !!!

Special report, Note: PAYMENT TO MAKE BY TT AND ATM CARD

Please bear with us since it is a new payment policy to eradicate fraud.

We are pleased to inform you of the announcement made today, You are among the winners of the microsoft 2016 INTERNATIONAL PROMOTION PROGRAM Participants were selected through a computer ballot system drawn from 2,500,000 email addresses of individuals and companies from all part of the world as part of our electronic business Promotions Program. As a result of your visiting various websites we are running the e-business promotions for. You/Your Company email address, attached to ticket number 343-221-8756, with serial number 454-17 drew the lucky numbers 3, 8, 13, 22, 27, 41 and Bonus number 12 , Your INSURANCE Number: FLS433/ 453L /GMSA and consequently you won in the Second Category of the 2016 microsoft International.

You have therefore been approved for the payment of the sum of US$1,000 000, 00 in cash ONE MILLION DOLLARS

Please contact the claim agent below to receive your award prize.
Claim agent : Mr Martin Groben
Google Microsoft Award Department
Tel : +44-2035142636
Fax: +44-2035147453
Email :martingroben99@gmail.com

Congratulation!!
AGAIN: Name in full:
2.Address:
3.Nationality:
4.Age:
5.Occupation:
**Monthly Salary:
6.Telephone Number:
7.Present Country:
8.Short comment on our products. [Optional]
9. Fax [optional]
10.Email address:
11.City
12.postal cod
13.Ticket No:
14.Serial No
15.Lucky No
16.Ins.No:

Send above information in your correspondences with your claims agent

EMAIL ANALYSIS :

NOTE : martingroben99@gmail.com
NOTE : urgentnotice01022@cash4u.com
NOTE : Received : from 41.207.160.93 by mail.anps.com.tw

Your Netflix Membership has been suspended [#839653] ( Phishing )

Validation failed

During a routine check of your account we have failed to validate the billing method we have on record for your account.

To continue using the Netflix service you will need to update/verify your billing information.

CONTINUE >>

Please note that failure to complete the validation process will result in permanent suspension of your netflix membership.

We thank you for your understanding.

Netflix Billing Support

Email analysis :NOTE :

Screenshot of the email :


Phishing analysis :

CLICK : CONTINUE >>
OPEN : http://memrenew02.com/
REDIRECT : http://membership.netflix.co.cgi-key.confirm.eu.web.mynetflix.webscmd.user398742987.renewplan3.com/email_identifier=*/ALL/Login.php
SCREENSHOT :


CLICK : Sign In
REDIRECT : http://membership.netflix.co.cgi-key.confirm.eu.web.mynetflix.webscmd.user398742987.renewplan3.com/email_identifier=*/ALL/YourAccountBilling.php
SCREENSHOT :


CLICK : Update Billing Address
REDIRECT : http://membership.netflix.co.cgi-key.confirm.eu.web.mynetflix.webscmd.user398742987.renewplan3.com/email_identifier=*/ALL/YourAccountPayment.php
SCREENSHOT :


CLICK : Update Payment Method
REDIRECT : http://membership.netflix.co.cgi-key.confirm.eu.web.mynetflix.webscmd.user398742987.renewplan3.com/email_identifier=*/ALL/YourAccountUpdated.php
SCREENSHOT :


CLICK : Continue To Login
REDIRECT : http://membership.netflix.co.cgi-key.confirm.eu.web.mynetflix.webscmd.user398742987.renewplan3.com/email_identifier=*/ALL/Sessions/Home.html
REDIRECT : https://www.netflix.com/us-en/Login

WHOIS : memrenew02.com

Registrar CRAZY DOMAINS FZ-LLC
Name Server NS1.CRAZYDOMAINS.COM
Name Server NS2.CRAZYDOMAINS.COM
Expiration Date 24-sep-2018
Registrant Name MARTIN SINDELAR
Registrant Phone +44.7391544185
Registrant Email SINDELAR-M20@SEZNAM.CZ
Whois Server Version 2.0
Domain Name MEMRENEW02.COM
Registrar CRAZY DOMAINS FZ-LLC
Sponsoring Registrar IANA ID 1291
Whois Server whois.crazydomains.com
Referral URL http://www.crazydomains.com
Name Server NS1.CRAZYDOMAINS.COM
Name Server NS2.CRAZYDOMAINS.COM
Status ok https://icann.org/epp#ok
Updated Date 24-sep-2016
Creation Date 24-sep-2016
Expiration Date 24-sep-2018
Last update of whois database Mon, 26 Sep 2016 02:55:04 GMT
Registry Domain ID 2061620692_DOMAIN_COM-VRSN
Registrar WHOIS Server whois.syrahost.com
Registrar URL http://www.crazydomains.com
Updated Date 2016-09-25T03:04:52Z
Creation Date 2016-09-24T00:00:00Z
Registrar Registration Expiration Date 2018-09-24T00:00:00Z
Registrar IANA ID 1291
Registrar Abuse Contact Email domains@crazydomains.com
Registrar Abuse Contact Phone +61.894220890
Reseller CRAZY DOMAINS
Domain Status ok https://icann.org/epp#ok
Registry Registrant ID 21272770
Registrant Name MARTIN SINDELAR
Registrant Street 26 ALTHORP CLOSE
Registrant City LEICESTER
Registrant State/Province LEICESTERSHIRE
Registrant Postal Code LE2 9GT
Registrant Country GB
Registrant Phone +44.7391544185
Registrant Email SINDELAR-M20@SEZNAM.CZ
Registry Admin ID 7945416
Admin Name MARTIN SINDELAR
Admin Street 26 ALTHORP CLOSE
Admin City LEICESTER
Admin State/Province LEICESTERSHIRE
Admin Postal Code LE2 9GT
Admin Country GB
Admin Phone +44.7391544185
Admin Email SINDELAR-M20@SEZNAM.CZ
Registry Tech ID 7945416
Tech Name MARTIN SINDELAR
Tech Street 26 ALTHORP CLOSE
Tech City LEICESTER
Tech State/Province LEICESTERSHIRE
Tech Postal Code LE2 9GT
Tech Country GB
Tech Phone +44.7391544185
Tech Email SINDELAR-M20@SEZNAM.CZ
DNSSEC unsigned
Last update of WHOIS database 2016-09-25T03:04:52Z

WHOIS : renewplan3.com

Registrar CRAZY DOMAINS FZ-LLC
Name Server NS1.CRAZYDOMAINS.COM
Name Server NS2.CRAZYDOMAINS.COM
Expiration Date 24-sep-2017
Registrant Name BARBARA TUROMSZA
Registrant Phone +61.0431447733
Registrant Email BARBARATUROMSZA@BIGPOND.COM.AU
Whois Server Version 2.0
Domain Name RENEWPLAN3.COM
Registrar CRAZY DOMAINS FZ-LLC
Sponsoring Registrar IANA ID 1291
Whois Server whois.crazydomains.com
Referral URL http://www.crazydomains.com
Name Server NS1.CRAZYDOMAINS.COM
Name Server NS2.CRAZYDOMAINS.COM
Status ok https://icann.org/epp#ok
Updated Date 24-sep-2016
Creation Date 24-sep-2016
Expiration Date 24-sep-2017
Last update of whois database Mon, 26 Sep 2016 02:57:49 GMT
Registry Domain ID 2061455735_DOMAIN_COM-VRSN
Registrar WHOIS Server whois.syrahost.com
Registrar URL http://www.crazydomains.com
Updated Date 2016-09-24T14:26:46Z
Creation Date 2016-09-24T00:00:00Z
Registrar Registration Expiration Date 2017-09-24T00:00:00Z
Registrar IANA ID 1291
Registrar Abuse Contact Email domains@crazydomains.com
Registrar Abuse Contact Phone +61.894220890
Reseller CRAZY DOMAINS
Domain Status ok https://icann.org/epp#ok
Registry Registrant ID 21271357
Registrant Name BARBARA TUROMSZA
Registrant Street 46 GRENFELL STREET MOUNT GRAVATT EAST
Registrant City BRISBANE
Registrant State/Province QLD
Registrant Postal Code 4122
Registrant Country AU
Registrant Phone +61.0431447733
Registrant Email BARBARATUROMSZA@BIGPOND.COM.AU
Registry Admin ID 7945205
Admin Name BARBARA TUROMSZA
Admin Street 46 GRENFELL STREET MOUNT GRAVATT EAST
Admin City BRISBANE
Admin State/Province QLD
Admin Postal Code 4122
Admin Country AU
Admin Phone +61.0431447733
Admin Email BARBARATUROMSZA@BIGPOND.COM.AU
Registry Tech ID 7945205
Tech Name BARBARA TUROMSZA
Tech Street 46 GRENFELL STREET MOUNT GRAVATT EAST
Tech City BRISBANE
Tech State/Province QLD
Tech Postal Code 4122
Tech Country AU
Tech Phone +61.0431447733
Tech Email BARBARATUROMSZA@BIGPOND.COM.AU
DNSSEC unsigned
Last update of WHOIS database 2016-09-24T14:26:46Z

Russell Cooke

Dear sir ,

Please do accept my apologies. I do not wish to invade your privacy, I had written an earlier email to you, but without a response, In my first email, I mentioned to you about my late client Mr. Bruno.Since his death I have received several notifications from his Bank where he made a time deposit of ($7,500,000.00) before his death.The bank has asked me to provide his next of kin or any of his dependent relatives who can make claim to his funds for payment or it will be confiscated by the government.Since I could not locate any of his relatives,I have to contacted you for this claim since you are trust worthy and serious.

Upon your response to me, I would give you the details and procedures for collecting the funds smoothly.

Thank you sir for your time.

Yours sincerely,

Russell Cooke (Q.C)

Email analysis :

NOTE : jcc@cq.stats.cn
NOTE : rc19006@outlook.com
NOTE : Received : from User (217.160.182.57)


NOTE : by CQ-EXHC-02.cq.stats.cn (10.50.99.54)
NOTE : 222.180.197.2 ()

Florian Burtard

I am Vincent Cheng Chairman of the Shanghai Banking Limited.I have a confidential brief from Hong Kong,asking for your partnership for funds transfer.Reply to me with my email vinctcheng1@hotmail.com if interested?

Regards
Vincent Cheng

forwarded to you by Florian Burtard,Secretary.

Email analysis :

NOTE : fburtard@ent-place.fr
NOTE : Received : from mx01.ent-place.fr
NOTE : (mx01.ent-place.fr. [194.214.114.170])


NOTE : X-Originating-Ip : [172.25.252.146]