Tuesday, October 10, 2017

MICROSOFT® REWARD!!! (Microsoft Scam)

MICROSOFT® CORPORATION
Cardinal Place
80-100 Victoria Street
London,SW1E 5JL
United Kingdom

Dear Winner

This message is from the Office of the MICROSOFT® Co-Operation. We are pleased to inform you of the result for the just concluded annual draws of the MICROSOFT® Online Lotto for regular users of Msn,Hotmail and Bing search engine for the year 2017.Your email address in the 1st category and therefore attracted a cash award of ?845,000.00 GBP (Eight Hundred and Forty Five Thousand Great British Pounds Sterling) in cheque credited to Email Bonus Numbers: MSLP-54399. Please proceed with your claims by writing to our Foreign Co-coordinator (Derrick McCourt) Public/Online Sector U.K So he can assist you in redeeming your price with the following details

Name:

Occupation:

Valid Mobile no :

Age :

Country:

Derrick McCourt

General Manager, Public/Online Sector U.K

E-mail: (derrickmccourt1@dr.com)
MICROSOFT® CORPORATION

Email analysis :

NOTE : shien@npo-wahaha.net
NOTE : derrick.mccourt@yandex.com
NOTE : Received : from unknown (HELO User) (shien@npo-wahaha.net@104.193.10.122)


NOTE : by aser.buddha.co.jp

Lors votre dernier achats (Phishing Société Générale)

Adhésion : Faite votre demande en ligne en cliquant-ici

Email analysis :

NOTE : Received : from 5.62.57.67 (IP may be forged by CGI script)
NOTE : by infong73.kundenserver.de
NOTE : Return-Path : < noreply@nrj.fr >
NOTE : noreply@nrj.fr
NOTE : X-Mailer : PHPMailer [version 1.73]

Phishing screenshot :


Phishing analysis :

CLICK : Faite votre demande en ligne en cliquant-ici
OPEN : http://hinsorn.ac.th/obeclms/osita/
REDIRECT : http://seraylv3.beget.tech/near/sg/ce18c0b32e0328aa61d8c9d10b1f34c6/
SCREENSHOT :


SPOOFED EMAIL : noreply@nrj.fr

Hi User, I sent you message on your LinkedIn network (LinkedIn Phishing)

Information from scam.cz :

- The linkedIn phishing has other formulas.
- Same phishing link as in this phishing.


Email analysis :

NOTE : dir-finance@meu.edu.jo
NOTE : X-Originating-Ip : [105.112.16.77]

Hi User, Ahmed Kinawy invitation is awaiting your response. (LinkedIn Phishing)

LinkedIn
Ahmed Kinawy wants to add you to their network

mahmoud ahmed
Ahmed Kinawy
CEO at RIOTRADE BUSINESS GROUP
Dubai:· 5,640 connections
Accept Ahmed's invitation

LinkedIn is a social network and online platform for professionals. Learn More
Unsubscribe | Help

You are receiving Invitation emails. LinkedIn will use your email address to make suggestions to our members in features like People You May Know.
This email was sent to you.
LinkedIn

© 2017 LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2. LinkedIn is a registered business name of LinkedIn Ireland Unlimited Company. LinkedIn and the LinkedIn logo are registered trademarks of LinkedIn.

Email analysis :

NOTE : hsmuisem@meu.edu.jo
NOTE : Received : from [172.20.10.3] (105.112.24.147)


Phishing screenshot :


Phishing analysis :

CLICK :
OPEN : https://florenciaeventos.com.ar/jkk/i.php
REDIRECT : https://florenciaeventos.com.ar/Lin/www.linkedin/c393e7e29942131cf98a4f0aecb5c2a2/
SCREENSHOT :


FILL : FORM
REDIRECT : https://florenciaeventos.com.ar/Lin/www.linkedin/c393e7e29942131cf98a4f0aecb5c2a2/index2.html
SCREENSHOT :

PAYMENT DETAILS (Western Union Scam)

Attn:

Western Union money transfer center has completed the trace of the money transfer directed to you. We are redirecting a fund transfer to you. Your lump sum payment is ready since 14th September. You have to claim it now or it will expire soon. There a PIN Code on your western union account so no agent can claim your points. Because you have not used your WU Points since you started to use western union services, your points have doubled and accumulated. This has earned you over $17,000 overtime.

Please note; Each time you receive or send money from western union, you earn points for the service. This points can be converted to money after a period of time. Some western union agent will not tell you this and they will use up your western union points and convert them to free cash payment from western union. This is the reason why western union withdraws the licenses from many of our agents. If your agents refused to give you information about your western union points, don't argue, just write to western union and your points will be revealed to you. Make sure to keep your western union card safe if you don't have a western union card you can also demand the card from any of our western union agents.

Western Union After claiming you lump sum. It will start again from zero. Please, reply and include on this email your:

Full Names:
Date of Birth:
Address:
Telephone:

Western Union will send your mtcn number to pickup cash daily from any of our western union agent location near you.

Signed:

Dr. Karlina Herman,
Western union money transfer (WUMT)
www.westernunion.com

� 2017 Western Union Holdings, Inc., All Rights Reserved.

Virus-free. www.avg.com

Email analysis :

NOTE : westernunion@englandmail.com
NOTE : ecashport@post.com
NOTE : Received : from User (e2.starplexx.com [92.51.240.121])


NOTE : (Authenticated sender: test@chlazeni.cz)