Friday, December 3, 2021

Get back to me (Scam)

Nicholas Isaac
Nicho Law Group TD Canada Trust
Tower 161 Bay Street, 27th Floor
Toronto, ON M5J 2S1

Greetings.

I'm Nicholas Isaac , expert in corporate and legal claims. I'm Managing Partner at Nicholas Isaac law firm Toronto, Canada.

It may surprise you to receive this letter from me, since there has been no previous correspondence between us. I am tracing the family of our client, there is an unclaimed “permanent life insurance policy” held by our deceased client and that is the reason I am contacting you.

The transaction pertains to an unclaimed “Payable-on-Death” (“POD”) savings monetary deposit in the sum of Fifteen Million Eight Hundred and Seventy Five Thousand United States Dollars ($15,875,000) with a reputable financial institution. The policy holder was one of our clients, Mr. Robert, a real estate tycoon. He died in an auto accident nine years ago. Since his death no one has come forward for the claim and all our efforts to locate his relatives have been unsuccessful.

The insurance company code stipulates that “insured permanent policies" not claimed must be turned over to the abandoned property division of the state after 10 years.

Therefore, I ask for your consent to be in partnership with me for the claim of this policy benefit, in view of the fact that you share the same last name and nationality with the deceased. If you permit me to add your name to the policy, all proceeds will be processed on your behalf. I wish to point out that I want 10% of this money to be donated to charity while we share the remaining 90% in the ratio of 50% to me 40% to you.

This is 100% risk free as I do have all the necessary documents to process the payout in a highly professional and confidential manner. I will provide all the relevant documents to substantiate your claim as the beneficiary. This claim requires a high level of confidentiality. You should provide a reachable mobile telephone number for faster communication.

Your prompt response will be appreciated.

Nicholas Isaac
Attorney

Email analysis :

NOTE : nicholas_isaac40@aol.com
NOTE : hr@globalavenue.ca
NOTE : wp.sarwatech.com: hotelnpj@siddharthabiz.com⁩
NOTE : client-ip=202.51.74.41

Thursday, December 2, 2021

RE: New Order PO023012019// RFQ_4135-00712 Quotation $599,335.00 (Scam)

Dear Sir

Attn!

Please find in the attachment our Purchase Order No. 023012019

Will you confirm this by return mail?

Thank you!

Best regards, / Met oosterse groeten,
来自荷兰的问候

Brenda C.Y. Pi
皮仲玉
Supplier Coördinator

Nadd Al Hamar, Dubai, U.A.E.
Mobile :+971 554100098 / +971 504578983,
Phone : +97143336330 Fax : +97143336338
“Alsumood Group of Companies”
Website : www.alsumooduae.com Email ID : alsumood@emirates.net.ae
Facebook : www.facebook.com/alsumoodgroup.uae Twitter : https://twitter.com/alsumood_group

Email analysis :

NOTE : alsumood@emirates.net.ae
NOTE : 45.137.22.59 ([45.137.22.59])⁩

Monday, October 11, 2021

NOTCE FROM US CUSTOMS HOUSE." (Scam)

This office is writing to you to let you know that we have
successfully brought all foreign transactions down here because of the
complains and reports we are receiving that our dear citizens are
being intimidated, cheated and deprived of their legal right to their
inherited, winning and contract funds from foreign country.

Therefore in proving American's greatness, all matter regarding local
and international transactions from Africa, Europe, Asia etc has be
released and a total sum of $58,700,000.00 United States Dollars is in
your name according to the gathered files so far and you are to
contact us today for the release and the claim of the funds if you are
still interested to receive your funds as we have done our best to
secure all the funds that was unable to transfer from foreign agents.

N:B After this clearing house, all unclaimed funds goes to Federal
treasury as unclaimed funds on the assumption that you are dead.

FOR SECURITY PURPOSE, PLEASE REPLY ME THROUGH THIS
EMAIL;(uscustomsborderprotection7247@gmail.com)

Thanks,
W.Ralph Basham
@ Alexander Hamilton U.S. Custom House # 1 Bowling Green, New York, NY
10004, USA

Email analysis :

NOTE : uscustomsborderprotection7247@gmail.com
NOTE : tochiharusun@docomo.ne.jp
NOTE : Received-Spf : ⁨Softfail (mailfrom) identity=mailfrom;
NOTE : client-ip=195.33.206.195; helo=hbysstage.localdomain;
NOTE : envelope-from=tochiharusun@docomo.ne.jp;

Friday, October 8, 2021

GOOD DAY (Scam)

Dear Sir/ Madam,

I am a Solicitor and the Personal attorney to Mr. Caripides William, a national the United States and Britain , who died on Monday 20th of April 2020 of COVID-19 in the United States. I have contacted you to assist in getting the money that belonged to my late client before they get confiscated by the bank. The funds are valued at $15.5 Million Dollars and the bank has issued me a notice to provide the next of kin or have the account confiscated within the next ten official working days.

I have been unsuccessful in locating the relative therefore i have decided to seek your consent to present you as the next of kin to the deceased, so that the proceeds of this account valued at $15.5 Million Dollars, can be paid to you and then you and me can share the money 50% to me and 45% to you, while 5% will be mapped out for any expenses incurred during the process or tax as your government may require. I have the certificate of deposit that can be used to back up any claim we may make. All I require is your honest cooperation to enable us see the deal through.

I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law. Please get in touch with me via this email (scott_white231@op.pl) so we can discuss further.

Best regards,
SCOTT WHITE.

Email analysis :

NOTE : info@law.com
NOTE : scott_white232@op.pl
NOTE : Arc-Authentication-Results : ⁨i=1; mx.google.com; spf=softfail;
NOTE : google.com: domain of transitioning info@law.com
NOTE : does not designate 109.68.136.88 as permitted sender)
NOTE : smtp.mailfrom=info@law.com

LET THE WILL OF GOD BE DONE (Scam)

My humble Greetings to you .

I am Mrs.Vivian Rorent from the United Kingdom , I married Mr.Rorent Betes from Toronto Ontario who worked with Canadian Embassy here united state of amerca for nine years before he died in the year 2015. We were married for twenty five years without a child. He died after a brief illness that lasted for only four days. Before his death we were both Christian. Since his death I decided not to remarry or get a child outside my matrimonial home.

When my late husband was alive he deposited the sum of FOUR Million five hundred thousand USD in a bank here, so Recently my DOCTOR told me that I would not last for more time due to cancer.Having known my condition I decided to donate this fund to a good person that will utilize the fund in a good way.A person that will use this fund for charity work, I don’t want a situation where this money will be used in an ungodly way.

This is why I am taking this decision. As soon as I receive your reply I shall let you know details. I will also issue you an authority letter that will prove you the present beneficiary of this fund. All I want is you to use the fund to help the poor. I want you to always pray for me for God intervention in my critical condition.

Thanks

Mrs. Vivian Rorent

Email analysis :

NOTE : mayaomur1@gmail.com
NOTE : Sender : ⁨hyonnbi@yahoo.co.jp⁩
NOTE : client-ip=114.110.61.90;⁩

Merchant Account Review - Second Attempt (Scam)

Hi there,

I'm reaching out again regarding a rate review for your merchant account. I last sent you an email a few weeks ago and wanted to make sure you didn't miss it! I know that it is easy to get busy or to miss one message during hectic times.

Let's find a few moments to connect and drop your rates, improve your service, and upgrade your technology. Maybe you're looking to dump pesky "non-compliance fees" or other "junk costs" that your business doesn't need to pay. Or maybe you need faster funding, better support, and to reduce the burden of processing costs. I can do all this and more. This can be a game changer for your business and substantially lower your fees. We have the top service rating in the industry. My team and I will work hard to ensure that every day you have responsive, helpful, and knowledgeable support.

It can be hard to find time, but in just a few minutes the savings and service improvements can be dramatic. We can provide a clear picture of how pricing works, exactly how the costs break down, and help give your business a sense of confidence that you truly have the best deal available. Hopefully, we can connect soon and I can provide more details about our highly competitive approach.

Please give me a call at your earliest convenience: (407) 598-0855

If you'd like to book some time on my calendar, please use the link here.

Best Regards,

Mindy Locknee
Client Relations, Merchant Services
email: mindy@m-merchant-services.com
phone: (407) 598-0855

Your business is important to me, but if you'd prefer not to receive updates, change your preferences here

IMPORTANT: The contents of this email and any attachments are intended for the recipient of this message. They are intended for the named recipient(s) only. If you have received this email by mistake, please notify the sender immediately and do not disclose the contents to anyone or make copies thereof.
99 Wall Street Suite 2-42 New York, NY 10005

Email analysis :

NOTE : mindy@m-merchant-services.com
NOTE : Received : ⁨from [167.172.19.163] ([167.172.19.163:34518]
NOTE : helo=uni-cloud.net) by aa.mta1vsmtp.cc.prd.sparkpost
NOTE : (envelope-from bounce@m-merchant-services.com)
NOTE : Mindy Locknee

Thursday, October 7, 2021

Please Reply ASAP (Scam)

Good day

I have a project that will profit you and I, please reply ASAP with
your names and mobile for full details

James Robertson

Email analysis :

NOTE : robertson.james71@yahoo.com
NOTE : sheikhnaseefa@gmail.com
NOTE : 209.85.219.169 (mail-yb1-f169.google.com)⁩

Tuesday, October 5, 2021

Reconfirmer votre numéro mobile (LCL Phishing)

Chèr(e) client(e),

Vous avez choisi de gérer vos comptes en ligne depuis le site monespace.lcl.fr ou l'application Ma banque, mais vous n'avez pas encore reconfirmé votre numéro de mobile dans votre profil.

ATTENTION : à partir 06 Oct du 2021, afin de renforcer votre sécurité et conformément à la seconde directive européenne sur les services de paiement(2), votre identifiant et votre code secret de connexion ne suffiront plus pour accéder à votre Espace Client.

Tous les 90 jours calendaires, une authentification forte sera nécessaire. Pour cela, vous devez réactiver votre numéro de mobile à l'aide du code unique reçu par sms. À défaut, l'accès à votre Espace Client sera bloqué !

Pour continuer à rester connecté à vos comptes, merci de reconfirmer votre numéro mobile :

reconfirmer votre numéro mobile

Votre numéro de mobile, c'est la première condition indispensable pour rester connecté.

Pour toute question, vous pouvez contacter le numéro d'assistance 01 43 63 23 00 (appel local non surtaxé).

Merci de votre confiance,

Email analysis :

NOTE : email@lcl-pro.fr
NOTE : client-ip=137.184.39.28; helo=webmail.xusom.nl (Digital Ocean)


Phishing analysis :

NOTE : SCREENSHOT ?
NOTE : http://kimfitz.de/pro
NOTE : website did not respond...
NOTE : WHOIS ?

#####################################################################
% IANA WHOIS server
% for more information on IANA, visit http://www.iana.org
% This query returned 1 object
refer: whois.denic.de
domain: DE
organisation: DENIC eG
address: Kaiserstrasse 75-77
address: Frankfurt am Main 60329
address: Germany
contact: administrative
name: Vorstand DENIC eG
organisation: DENIC eG
address: Kaiserstrasse 75-77
address: Frankfurt am Main 60329
address: Germany
phone: +49 69 27235 0
fax-no: +49 69 27235 235
e-mail: ianacontact@denic.de
contact: technical
name: Business Services
organisation: DENIC eG
address: Kaiserstrasse 75-77
address: Frankfurt am Main 60329
address: Germany
phone: +49 69 27235 272
fax-no: +49 69 27235 234
e-mail: dbs@denic.de
nserver: A.NIC.DE 194.0.0.53 2001:678:2:0:0:0:0:53
nserver: F.NIC.DE 2a02:568:0:2:0:0:0:53 81.91.164.5
nserver: L.DE.NET 2001:668:1f:11:0:0:0:105 77.67.63.105
nserver: N.DE.NET 194.146.107.6 2001:67c:1011:1:0:0:0:53
nserver: S.DE.NET 195.243.137.26 2003:8:14:0:0:0:0:53
nserver: Z.NIC.DE 194.246.96.1 2a02:568:fe02:0:0:0:0:de
ds-rdata: 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d
whois: whois.denic.de
status: ACTIVE
remarks: Registration information: http://www.denic.de/
created: 1986-11-05
changed: 2021-06-01
source: IANA
Domain: kimfitz.de
Nserver: ns1023.ui-dns.biz
Nserver: ns1023.ui-dns.com
Nserver: ns1023.ui-dns.de
Nserver: ns1023.ui-dns.org
Status: connect
#####################################################################

Thursday, September 30, 2021

You have an outstanding payment. (BTC Scam)

Hello there!

Unfortunately, there are some bad news for you.Around several months ago I have obtained access to your devices that you were using to browse internet.Subsequently, I have proceeded with tracking down internet activities of yours.

Below, is the sequence of past events:

In the past, I have bought access from hackers to numerous email accounts (today, that is a very straightforward task that can be done online).Clearly, I have effortlessly logged in to email account of yours (***@***).A week after that, I have managed to install Trojan virus to Operating Systems of all your devices that are used for email access.Actually, that was quite simple (because you were clicking the links in inbox emails).All smart things are quite straightforward. The software of mine allows me to access to all controllers in your devices, such as video camera, microphone and keyboard.I have managed to download all your personal data, as well as web browsing history and photos to my servers.I can access all messengers of yours, as well as emails, social networks, contacts list and even chat history.My virus unceasingly refreshes its signatures (since it is driver-based), and hereby stays invisible for your antivirus.So, by now you should already understand the reason why I remained unnoticed until this very moment...While collecting your information, I have found out that you are also a huge fan of websites for adults.You truly enjoy checking out porn websites and watching dirty videos, while having a lot of kinky fun.I have recorded several kinky scenes of yours and montaged some videos, where you reach orgasms while passionately ***turbating.If you still doubt my serious intentions, it only takes couple mouse clicks to share your videos with your friends, relatives and even colleagues.It is also not a problem for me to allow those vids for access of public as well.I truly believe, you would not want this to occur, understanding how special are the videos you love watching, (you are clearly aware of that) all that stuff can result in a real disaster for you.

Let's resolve it like this:

All you need is $1350 USD transfer to my account (bitcoin equivalent based on exchange rate during your transfer), and after the transaction is successful, I will proceed to delete all that kinky stuff without delay.Afterwards, we can pretend that we have never met before. In addition, I assure you that all the harmful software will be deleted from all your devices. Be sure, I keep my promises.That is quite a fair deal with a low price, bearing in mind that I have spent a lot of effort to go through your profile and traffic for a long period.
If you are unaware how to buy and send bitcoins - it can be easily fixed by searching all related information online.

Below is bitcoin wallet of mine: 1B5ic9iQpyafTEfWxHM4Xq6PkzbickrL8g

You are given not more than 48 hours after you have opened this email (2 days to be precise).

Below is the list of actions that you should not attempt doing:

Do not attempt to reply my email (the email in your inbox was created by me together with return address).Do not attempt to call police or any other security services. Moreover, don't even think to share this with friends of yours. Once I find that out (make no doubt about it, I can do that effortlessly, bearing in mind that I have full control over all your systems) - the video of yours will become available to public immediately.Do not attempt to search for me - there is completely no point in that. All cryptocurrency transactions remain anonymous at all times.Do not attempt reinstalling the OS on devices of yours or get rid of them. It is meaningless too, because all your videos are already available at remote servers.

Below is the list of things you don't need to be concerned about:

That I will not receive the money you transferred.- Don't you worry, I can still track it, after the transaction is successfully completed, because I still monitor all your activities (trojan virus of mine includes a remote-control option, just like TeamViewer).That I still will make your videos available to public after your money transfer is complete.- Believe me, it is meaningless for me to keep on making your life complicated. If I indeed wanted to make it happen, it would happen long time ago!

Everything will be carried out based on fairness!

Before I forget...moving forward try not to get involved in this kind of situations anymore! An advice from me - regularly change all the passwords to your accounts.

Email analysis :

NOTE : stephen.connolly@oirgroup.com
NOTE : ⁨170.245.92.201
NOTE : client-ip=170.245.92.201;
NOTE : helo=host-201.voob.net.br.92.245.170.in-addr.arpa;
NOTE : envelope-from=stephen.connolly@oirgroup.com

Sunday, September 5, 2021

Comment Spam Vol 20


Felipe Dylan

To everyone out there who thinks love spells don't work, I’m here to tell you that Lord Zakuza love spell is the best and most powerful.. I am a wealthy man who has lots of assets and possessions but I have difficulty with women. Whenever I try to settle down with any, we end up breaking up and I had no idea of why I was going through such an experience in my relationship. It was so worrying that I couldn’t be myself anymore and I started searching for help everywhere even at my place of work. I was going through my work activities online and I came across a testimony of a lady called ( Febe Anouk ) regarding how Lord Zakuza helped her to restore her relationship with his love spell, I had to give it a try because I needed my Ex lover back that I love so much. I visited Lord Zakuza website online and I told him everything I was going through. Lord Zakuza consoled me and promised to help me out with my situation by preparing a love spell for me. I followed the instructions given by him to me and within 48 hours, my Ex lover came looking for me and pleaded for forgiveness. Since I came in contact with Lord Zakuza, things have changed for good in my life and right now, I am married with two beautiful kids and my home is blessed. All thanks to Lord Zakuza I am forever thankful to you. Visit his website for any help via lordzakuzaspells.com or WhatsApp him on +1 740-573-9483. Try him and your life will be blessed.

ELIZABETH ROMERO

How To Get Your Ex Lover/Partner/Boyfriend/Girlfriend/Wife Or Husband Back I was married for 16 years to a loving mother and wife. We had 2 children together who are now 11 & 13. I reconnected with an old girlfriend from college on Facebook and we began an affair and I left my wife. The woman I had an affair with is a wonderful woman and I love her too and our kids had begun accepting the situation and my wife has kind of moved on, but not in love with the man she is seeing. I thought I fell out of love with my wife and I felt terrible about what I did to her - she is a good woman and I don't know what came over me. I decided to try and get her back and I was recommended to OYINBO for help to get reunited with my wife and within 48 hours after I made contact with OYINBO my wife decided to work things out with me and now we are back together with our children living as one happy family. I really don't know the words to use in appreciation of what OYINBO did for me but I will say thank you sir for reuniting I and my family back. For those in trying times with their marriages or relationship can communicate with OYINBO through the below in formations. Whats App/call/text: +2348074066640 Email:PROPHETOYINBOJESUS@GMAIL.COM

Finance Recovery

This is really a good source of information, I will often follow it to know more information and expand my knowledge, I think everyone should know it, thanks Best recover lost funds service provider.

Justin

This article is loaded with some well-informed data. You have made admirable statements in an exceptional manner about this article. Since this has made me wonder about more things I would want to know about chartered professional accountants of ontario

Mills Dachin

Guys M&D is a group of equipped Hackers working together as a team to track down & to recovery funds back from the most difficult internet SCAMMERS. NOTE!! We've received countless heartbreaking reports of notorious scammers and we’ve successful recover them back. Do contact us on ➡Binary Recovery. ➡University Grades. ➡Wiping Criminal Records ➡FB & IG Telegram Hack ➡Blank ATM Card ➡Phone Hacking Border us with your jobs & allow us give you positive result with our hacking skills. Email pointekhack@gmail.com hyperhackeone@gmail.com cyberhackertap@gmail.com we Guarantee you up to %85 REMEMBER YOUR HAPPINESS IS OUR PRIDE

Finance Recovery

This is very educational content and written well for a change. It's nice to see that some people still understand how to write a quality post.! Best hire a recovery expert service provider.

lohr

Very reliable loan offer You're flagged, banking restrictions, and you do not have the favor of banks or better you have a project and need financing, a bad credit record or need money to pay bills, Fund to invest in companies. So if you need loan do not hesitate to contact us to learn more about our conditions, notably on the rate of 3%. For any other information please contact us by mail: Our email address is on the image of advertising Kind regards walterlohrpaula@gmail.com Very reliable loan offer Our email address is on the image of advertising Kind regards

Unknown

GREAT MOTHER IS REAL. PLEASE BELIEVE HER. I am Lucy Jones and i want to share my testimony on how real Great Mother is and how she helped me to get my ex husband back to me. when my husband left me, i thought it was all over until i saw testimonies of Great mother how she has helped so many people. I never believed but i gave it a try since i had no option. I contacted her and i told her everything. She told me what to do and to my Greatest surprise, my man came back to me in 3 days time just as Great Mother said. Thank you Great mother. Thank you very much. If you need help please contact the Great Mother now on her Email: Greatmotherofsolutiontemple1@gmail.com and you can also reach her on her whatsapp no: +17025514367 you can also check her out on her website: Greatmotherofpowers.blogspot.com

contact office

What if you have been scammed on the internet ? You have been fooled by bulldozers who are rampant in AFRICA, France, all over the world they are very strong to use stolen photos to have men and women who are actually looking for love, you should have been wary not to send money to someone you do not know . We also invite you to contact INFO SCAMS (free service and call from Monday to Sunday 24h / 24) if you are victims of scam, make a report on the official reporting portal of the Ministry of Interior and Public Security . Contact us directly to access our website : You can make a report even if you have not suffered a financial loss : it can be useful to prevent further attempts at scams. Email : celluleinterpolmondial@rocketmail.com / website : signaloipcs.wordpress.com

Joseph Eric

2020 FUNDS/ YOU CAN FINALLY BE FREE FROM DEBT GET OUR BLANK ATM CARD!!! GET YOUR SPECIALLY PROGRAMMED BLANK ATM CREDIT CARD AT AFFORDABLE PRICE, THIS SPECIAL CREDIT COMES WITH NO CREDIT SCORE AND YOU WILL NEVER HAVE TO REPAY FOR ANY TRANSACTION YOU MAKE WITH IT, IT IS FREE MONEY. *We sell this cards to all our customers and interested buyers worldwide,the card has a daily withdrawal limit of $7,500 and up to $60,000 spending limit in stores and unlimited cash out on POS interested buyers should contact via Email: atmgeniuslinks@gmail.com / WhatsApp: +1-713-389-6778 / Telegram: @Anonymous_Ccs / ICQ: https://icq.im/Anouymous_CC WE ALSO RENDER SERVICES SUCH AS: WhatsApp: +1-713-389-6778 1) WESTERN UNION TRANSFERS/ MONEY GRAM TRANSFER 2) BANKS LOGINS 3) BANKS TRANSFERS 4) CRYPTO CURRENCY MINING 5) BUYING OF GIFT CARDS 6) LOADING OF ACCOUNTS 7) WALMART TRANSFERS 8) BITCOIN INVESTMENTS 9) REMOVING OF NAME FROM DEBIT RECORD AND CRIMINAL RECORD 10) BANK HACKING 11) PAYPAL LOADING Interested persons should contact via Email: atmgeniuslinks@gmail.com *You can also call or Whatsapp us today for more enlightenment via +1-713-389-6778 / Telegram: @Anonymous_Ccs / ICQ: https://icq.im/Anouymous_CC *BEWARE OF SCAMMERS AND FAKE HACKERS IMPERSONATING US BUT THEY ARE NOT FROM US CONTACT US ONLY VIA THIS CONTACT * WE ARE REAL AND LEGIT........... 2020 FUNDS/ FORGET ABOUT GETTING A LOAN AND GET OUR BLANK ATM CARD WHATSAPP: +1-713-389-6778.

Elizabeth

Hello! My name is Elizabeth, Four years ago, i tested herpes Virus (HSV-2) positive and i was told that there is no cure that i will live with it till i die, The shock of knowing that the Virus has no cure was something that scared me most. I was never feeling good because each time i intend to be happy, the thought that there is no cure will come into my mind and i will just be sad once more. I lose weight unknowingly to me and it was as if i was going to die, everyday is always ful of fear. After four years as i was online, i came across a testimony about how Doctor Ojeabulu has done so many things and cure so many people then i showed my Doctor that there is a herbal cure for the Virus and the Doctor said there is nothing as such. I decided to give it a try because my present condition was nothing to write about then i write to the email i saw online and he responded and told me all that i need to know. I told my friend and she told me never to believe anything i saw online, i believe her because i was scammed earlier. But i wanted to change my condition then i proceed with the purchase of Doctor Ojeabulu medicine. After some days that i purchased the medicine then i started observing some changes in my health and i went to the hospital and i tested negative. Doctor Ojeabulu has done so many other great things that you and i have seen online, a man complained that his business is in stagnant position and doctor Ojeabulu help him to be successful, a woman lose her husband to another lady after one month of marriage and Doctor Ojeabulu help her also to balance her marriage. Doctor Ojeabulu has so many solutions to any problem that you might be facing that seems to be very difficult to you now. Give it a try and you will see great change in your life. HE IS A SPIRITUALIST, HE HAS ANSWER TO ALMOST ALL YOUR PROBLEMS, CONTACT HIM TODAY AND SEE THE DIFFERENCE IN YOUR LIFE. Contact him with this : email: ojeabulusolutionhome@gmail.com https://drojeabulusolutionhome.wordpress.com/

Friday, August 27, 2021

Hello!!! (Donation Scam)

Good Day

My name is Mrs. Nancy U. Shaw; I am 76 years old and was diagnosed with cancer approximately four years ago, immediately after the death of my husband. I have been touched to donate from what I have inherited from my late husband for the good work rather than allow his relatives to lavish my husband's hard earned fund.

As I lay on my sick bed, I want you to help me in carrying out my last wishes on earth which will also be very profitable to you. I want to WILL a total sum of Eight Million Five Hundred Thousand United States Dollars to you, which I will want you to distribute part of the fund to any charity home on my behalf and the rest for yourself and your family.

I await your urgent reply.

Regards,

Mrs. Nancy Shaw.

Email analysis :

NOTE : mrsnancyshaw@aol.com
NOTE : fredrichardwesternunuionoffice@gmail.com
NOTE : 209.85.220.41 as permitted sender)

Hi there (Pegasus Scam)

Hello, I'm going to share important information with you.
Have you heard about Pegasus?
You have become a collateral victim. It's very important that you read the information below.

Your phone was penetrated with a “zero-click” attack, meaning you didn't even need to click on a malicious link for your phone to be infected.
Pegasus is a malware that infects iPhones and Android devices and enables operator of the tool to extract messages, photos and emails,
record calls and secretly activate cameras or microphones, and read the contents of encrypted messaging apps such as WhatsApp, Facebook, Telegram and Signal.

Basically, it can spy on every aspect of your life. That's precisely what it did.
I am a blackhat hacker and do this for a living. Unfortunately you are my victim. Please read on.

As you understand, I have used the malware capabilities to spy on you.
And by that I mean that I have collected your parts of your private life.

My only goal is to make money. And I have perfect leverage for this.
As you can imagine in your worst dream, I have videos of you exposed during the most private moments of your life, when you are not expecting it.

I personally have no interest in them, but there are public websites, that have perverts loving that content.
As I said, I only do this to make money and not trying to destroy your life. But if necessary, I will publish the videos.
If this is not enough for you, I will make sure your contacts, friends and everybody you know see those videos as well.

Here is the deal. I will delete the files after I receive 0.035 Bitcoin (about 1700 US Dollars).
You need to send that amount here 1Dz3tE5mspT4fk9fxkfZk6fBcgav28XxRd

I will also clear your device from malware, and you keep living your life.
Otherwise, shit will happen.

The fee is non negotiable, to be transferred within 2 business days.

Obviously do not try to ask for any help from anybody unless you want your privacy to be violated.
I will monitor your every move until I get paid. If you keep your end of the agreement, you wont hear from me ever again.
Take care.

Email analysis :

NOTE : helo=ue235.59.digi.net.my
NOTE : 115.164.59.235 ([115.164.59.235])⁩

Thursday, August 26, 2021

Ceci est le dernier avertissement. Votre système a été piraté. (BTC)

Bonjour,

Ceci est le dernier avertissement. Votre système a été piraté.

Toutes les données de votre appareil ont été copiées sur nos serveurs. En outre, une vidéo a été enregistrée à partir de votre caméra dans laquelle vous regardez un ***-film. Mon virus a infecté votre appareil à travers un site Web pour adultes que vous avez récemment visité.

Si vous ne savez pas comment cela fonctionne, je partagerai les détails.

Le virus Trojan me donne un accès complet ainsi qu'un contrôle sur l'appareil que vous utilisez. En conséquence, je peux voir votre entier écran et allumer la caméra et le microphone sans que vous pourrez le comprendre.

J'ai capturé une vidéo de votre écran et de la caméra de l'appareil et j’avais édité une vidéo dans laquelle dans une partie de l'écran on peut voir comme vous *** , et l'autre partie de l'écran montre le film *** que vous avez redardé à ce moment-là. Je vois la liste complète de vos contacts de téléphone et de tous les réseaux sociaux. Je peux envoyer cette vidéo à tous vos contacts de téléphone, de messagerie et de réseaux sociaux en un seul clic. De plus, je peux envoyer les données de votre courrier électronique et de vos messagers a tout le monde.

Cela détruira votre réputation pour toujours. Si vous souhaitez éviter un tel développement d'événements, procédez comme suit-Transférez 1400 USD (dollars américains) sur mon portefeuille Bitcoin.

(si vous ne savez pas comment le faire, écrivez dans le champ de recherche sur Google: "Acheter des bitcoins").

Mon portefeuille Bitcoin-(BTC Wallet): bc1qp8d9l34fagmveplt2pru2sjt2pqwj3gyw83nkt

Dès que le paiement arrivera, je détruirai immédiatement votre vidéo et je vous garantie que je ne vous dérangerai jamais plus.

Vous avez 50 heures (un peu plus de 2 jours) pour effectuer ce paiement. Je reçois une notification automatique de lecture de cette lettre. Le minuteur démarre également automatiquement immédiatement après vous avez lu cette E-Mail. N'essayez pas de vous plaindre nulle part, car mon portefeuille ne peut pas être suivi. Mon courrier électronique n'est pas être suivi non plus et se généré automatiquement, donc toute réponse n'aurait pas aucun sens.

Si vous essayerez de partager cette lettre avec quelqu'un, le système enverra automatiquement une demande aux serveurs et ils commenceront à envoyer toutes les données aux réseaux sociaux. Le changement des mots de passe sur les réseaux sociaux, sur votre messagerie ou sur votre appareil ne vous aidera pas, puisque toutes les données ont déjà été téléchargées sur le cluster de mes serveurs.

Je vous souhaite bonne chance et ne faites pas des bêtises. Considerez votre réputation.

mail.kerry.co.id made the following annotations
---------------------------------------------------------------------
NOTICE: This email message is for the sole use of the intended recipient(s)
and may contain confidential and privileged information. Any unauthorized
review, use, disclosure or distribution is prohibited. If you are not the
intended recipient, please contact the sender by reply email and destroy all
copies of the original message.

This message has been content scanned by the Axway MailGate.
MailGate uses policy enforcement to scan for known viruses, spam, undesirable content and malicious code. For more information on Axway products please visit www.axway.com.
---------------------------------------------------------------------

Email analysis :

NOTE : bc1qp8d9l34fagmveplt2pru2sjt2pqwj3gyw83nkt analysis
NOTE : www.blockchain.com/btc/address/bc1qp8d9l34fagmveplt2pru2sjt2pqwj3gyw83nkt
NOTE : This address has transacted 0 times on the Bitcoin blockchain.
NOTE : It has received a total of 0.00000000 BTC ($0.00)
NOTE : and has sent a total of 0.00000000 BTC ($0.00).
NOTE : The current value of this address is 0.00000000 BTC ($0.00).
NOTE : Received : ⁨from webmail.kerry.co.id (unknown [10.2.2.8]) by mail.kerry.co.id (Postfix) NOTE : Received-Spf : ⁨Permerror (mailfrom) identity=mailfrom;
NOTE : client-ip=202.147.202.226; helo=mail.kerry.co.id;
NOTE : envelope-from=linda_m@kerry.co.id;
NOTE : linda_m@kerry.co.id
NOTE : Form-Sub : ⁨v=1; ip=89.66.58.165⁩

Tuesday, August 10, 2021

Objet : Demande de vérification d'identité. (Phishing OVH)

Monsieur/ Madame, Monsieur,

Ce mail vous est envoyé dans le cadre de la dernière commande que vous avez passée auprès de nos services.

Cette vérification, mise en place afin de garantir la sécurité de nos services, est nécessaire à la validation de cette commande.

Afin de mener à bien ce contrôle, nous vous remercions donc de bien vouloir nous envoyer une photographie de vous-même et de votre pièce d'identité sur la même photographie.
Ceci permettra la validation de votre compte.

Afin de prendre ce type de photo, nous vous invitons à :

- Prendre la photo dans une pièce identité ( recto-verso ) où la lumière est suffisante avec votre téléphone mobile ou appareil photo.
- Tenir la pièce d'identité dans une main proche de votre visage et Tenir la photo de l'autre main.

Vous pouvez envoyer la photo de votre visage avec votre carte d'identité nationale par courrier électronique : support@validation-ovh.net

Après réception et vérification téléphonique positive de vos pièces justificatives, nous vous enverrons un mail de confirmation.

Dans le cadre d'une validation de commande, ces pièces doivent être reçues dans un délai de 3 jours maximum à compter de la date de votre achat.

IMPORTANT: La pièce d'identité doit être au même nom que le titulaire du compte sur lequel la vérification est faite Sans quoi la demande sera AUTOMATIQUEMENT REFUSÉE.

Phishing analysis :

SCREENSHOT :


WHOIS :

Domain Name: validation-ovh.net
Registry Domain ID: 2632594716_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.ascio.com
Registrar URL: http://www.ascio.com
Updated Date: 2021-08-09T14:25:44Z
Creation Date: 2021-08-09T00:00:00Z
Registrar Registration Expiration Date: 2022-08-09T14:25:41Z
Registrar: Ascio Technologies, Inc
Registrar IANA ID: 106
Registrar Abuse Contact Email: abuse@ascio.com
Registrar Abuse Contact Phone: +44 (20) 81583881
Reseller: Loopia
Domain Status: OK https://icann.org/epp#ok

EMAIL : dzfp@szmc.goldentec.com
NOTE : Received : ⁨from out21-216.dm.aliyun.com
NOTE : (out21-216.dm.aliyun.com [115.124.21.216])

Tuesday, July 20, 2021

Votre certificat SSL a expiré (Phishing OVH)

S​​AS O​​V​​H - https://ww​​w.ov​​h.co​​m
2 r​​ue ‫Ke​​lle​​rman
BP 80157
591​​00 Ro​​ubaix

Le 18.07.2021 05:16

Madame, Monsieur,

A notre connaissance, nous n'avons toujours pas reçu le p​​​​​​​​​​​​​​aiem​​​​​​​​​​​​​​ent
d'un montant de 12,68€ pour votre r​​​en​​​​​​​​​​​​​​​ouv​​​​​ellem​​​ent du certificat SSL .

Nous attirons votre attention sur le fait que, si votre r​​​en​​​​​​​​​​​​​​​ouv​​​​​ellem​​​ent n'est pas réglée sous 2 jours,
Votre site web sera s​​​usp​​​endu
jusqu'a la reception de votre r​​​en​​​​​​​​​​​​​​​ouv​​​​​ellem​​​ent.

Vous pouvez procéder directement au r​​​en​​​​​​​​​​​​​​​ouv​​​​​ellem​​​ent par c​​​ar​​​te ban​​​caire à l'adresse suivante:

https://ww​​w.ov​​h.co​​m/fr/c​​gi-b​​in/order/r​​ene​​w.cgi?id=31IDL16nKT31sdOd89tjJtPBhu31HUYUhuhuyUIUt
(Cliquez directement sur le lien ou faites un copier/coller
directement dans votre navigateur Internet)

Cordialement,

L'équipe OVHcloud

[ref=1.31M16s3ih]

Email analysis :

NOTE : postmaster@fr.ovhservices.net
NOTE : client@mail.ovh
NOTE : Received : ⁨from bsmtp4.bon.at (bsmtp4.bon.at [195.3.86.186])
NOTE : Received : ⁨from bsmtp3.bon.at (unknown [192.168.182.108])

Phishing analysis :

SCREENSHOT :
CLICK : https://ww​​w.ov​​h.co​​m/fr/c​​gi-b​​in/order/r​​ene​​w.cgi?id=31IDL16nKT31sdOd89tjJtPBhu31HUYUhuhuyUIUt
OPEN : http://ar4.fre-pic.net/05:16/18.07.2021/?CVGYHJ90SW=78WSHKKL09
REDIRECT : PHISHING CLOSED.
REDIRECT : https://href.li/?https://www.ivrose.com
REDIRECT : https://www.ivrose.com

Friday, July 16, 2021

Partnership/ Greetings (Scam)

Dear Friend

My names are Mr Omar Ibrahim .G, I am from Syria, due to the brutal war in my country, i seek for your help in business investment in your country.

Please kindly get back to me for more details

Best Regards

Mr Omar Ibrahim .G

Email analysis :

NOTE : bb6706090@gmail.com
NOTE : X-Feas-Auth-User : ⁨testmail@mvd.kz⁩
NOTE : client-ip=84.240.207.29
NOTE : Received : ⁨from User ([27.109.115.141])
NOTE : (user=testmail@mvd.kz mech=LOGIN bits=0)
NOTE : by fortimail.mvd.kz
NOTE : Mr Omar Ibrahim .G

Important Updates (BTC Scam)

I am sorry to inform you that your device was compromised.

I'll explain what led to all of this. I have used a Zero Day vulnerability with a special code to infect your device through a website.
This is a complicated software that requires precise skills that I have. It works as a chain with specially crafted and unique code and that’s why this type of an attack can go undetected.
You only need one not patched vulnerability to be infected, and unfortunately for you – it works that simple.

You were not targeted specifically, but just became one of the quite a few unlucky people who got hacked that day.
All of this happened a few month ago. So I’ve had time to collect information on you.

I think you already know what is going to happen next.
During that time, my software was quietly collecting information about your habits, websites that you visit, searches you do, texts you send.
There is more to it, but I have listed a few reasons for you to understand how serious this is.

For you to clearly understand, my software controlled your camera and microphone as well and it was impossible for you to know about it.
It was just about right timing for me to get you privacy violated.

I’ve been waiting enough and have decided that it’s time to put an end to this.
So here is my offer. I need a consulting fee to delete the media content I have been collecting.
Your privacy stays untouched, if I get paid.
Otherwise, I will leak the most damaging content to your contacts and post it to a public tube for perverts to explore.

I understand how damaging this will be for you, and amount is not that big for you to keep your privacy.
Please dont blame me – we all have different ways of making a living.

I have no intention of destroying your reputation or life, but only if I get paid.
I don’t care about you personally, that's why you can be sure that all files I have and software on your device will be deleted immediately after I receive the transfer.
I only care about getting paid.

My modest consulting fee is 1650 US Dollars transferred in Bitcoin. Exchange rate at the time of the transfer.
You need to send that amount to this wallet: 17U1BaXwyuxeX2sZyMjC25G8skrZ8mtTdz

The fee is non negotiable, to be transferred within 2 business days.
We use Bitcoin to protect my identity.

Obviously do not try to ask for any help from anybody unless you want your privacy to be violated.
I will monitor your every move until I get paid. If you keep your end of the agreement, you wont hear from me ever again.

Take care.

Email analysis :

NOTE : client-ip=179.215.29.139
NOTE : virtua.com.br

Wednesday, July 14, 2021

Do you need a loan ? (Scam)

Dear Interested Applicant,

Are you looking for a loan or investment loan? We are a well reputable and registered company located in Greece. We can grant you the loan with an interest rate of 2.5%. We give loans to qualified applicants from 10.000 to 100.000.000,00 Euro/Dollars with a loan duration of 15 years.

If you are interested, kindly contact us via email.

MRS. KATIRA ANXHELA | LOAN ADVERT MANAGER

o: +30 699-665-5761 | f: 631-883-8536
HL.katira.hellenicloans@gmail.com
www.hellenicloans.webs.com

We provide much more than financing, work with our very own Shark @hellenicloans.webs.com

Notice to Recipient: This email is meant for only the intended recipient of the transmission, and maybe a communication privileged by law. If you received this email in error; you are hereby notified that any review, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please notify us immediately of the error by return e-mail and please delete this message, all copies, and backups from your system.

This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

Email analysis :

NOTE : loan@imixsolutions.com
NOTE : HL.katira.hellenicloans@gmail.com
NOTE : vps.vps.tonershop.com.mx NOTE : client-ip=44.227.17.73

Tuesday, July 13, 2021

Arnaque Sinexa

Mal au dos ?
Vous travaillez des heures au bureau ?
Des solutions existent !

> DÉCOUVRIR MAINTENANT

Les douleurs dorsales et lombaires, les sciatiques, peuvent être extrêmement gênantes au travail. Ce sur-siège lombaire s’adapte à n’importe quel siège, en voiture, au travail ou à la maison.

Ces deux supports (assise et dossier) peuvent vous suivre partout grâce à leur facilité de transport.

SATISFACTION
GARANTIE
EXPEDITION DE
FRANCE
TELEPHONE POUR NOUS JOINDRE
LIVRAISON
GRATUITE
SATISFAIT OU REMOURSÉ

Email analysis :

NOTE : PrevDos@dsd.coceare.icu
NOTE : http://dsd.coceare.icu/asumxytjghubxxnvkv-72014993-bbnditmk1o-16137-24359-0.php NOTE : https://sinexa.net/product/coussin-lombaire-chaise-de-bureau/

Phishing Crédit Agricole

Cher(e) Client(e),

Suite au changement de la réglementation concernant la fiabilité pour les achats avec votre carte bancaire sur internet, nous vous prions d'accepter les conditions de cette nouvelle réglementation et activer le service SecuriPass afin de garantir la sécurité de votre compte de toutes les actions frauduleuses .

Au lien suivant : https://www.credit-agricole.fr

Or si nous recevons pas de confirmation d'adhésion de votre part nous serons dans l'obligation de suspendre toute les achats avec votre carte bancaire et débloquer toute l'utilistation de votre carte sur internet.

Merci de la confiance que vous nous témoignez.

Cordialement,

© Crédіt AgricօIe 2021

Phishing analysis :

CLICK : https://www.credit-agricole.fr
OPEN : https://secure.ndcollege.in/img/credit/Agricole/Authentification/regionale.php
SCREENSHOT :



Email analysis :

NOTE : Younespedro2019@gmail.com
NOTE : SécuriPass- CERT°3208059248092
NOTE : Crédit Agricole: mise à jour obligatoir
NOTE : X-Mailer : ⁨PHPMailer logger for Apix Log 12.7.5
NOTE : (https://github.com/PHPMailer/apix-log-phpmailer)⁩
NOTE : client-ip=165.232.182.183

Monday, March 29, 2021

We are the best supplier of pet toys (Scam)

Hello, friends!

We are a professional pet toy manufacturer, we
are handling a variety of products including online and more products.We
can produce products according to your requirements. If you would like to
see more items, please visit our website. If these products are of interest
to you, please let us know and hope to hear from you
Looking forward
to your reply

Email analysis :

NOTE : 1173902882@qq.com
NOTE : gloves@wm.cjkyt.com
NOTE : client-ip=185.10.202.218
DOMAIN : qq.com
DOMAIN : cjkyt.com
DOMAIN : wm.cjkyt.com

Thursday, March 4, 2021

NOTIFICATION OF FUNDS RECOVERY

Inspector Frederick Tyler
Metropolitan Police Authority
London United Kingdom.
London UK.

The Metropolitan Police Authority in London UK writes to inform
you of the theft that is going on in Barclay Bank London UK.
Where one Mr. Ronald Duncan from melburn Australia and his
colleague Mr. Peter f. Tseng in attempting to change the
ownership of your funds valued £8.5 Million Pounds to his friend
Mr. Peter f. Tseng from USA. This electronic message is to notify
you of the change and to confirm if you authorized Mr. Ronald
Duncan to effect the change of the ownership of your funds with
the Barclay Bank London. You are instructed to visit the bank in
London or send an email message to me and copy to Ms. Christina
Anstead of the telex department, Barclays Bank London email
(barclay.b20@yahoo.com) to confirm the change
with the management of the Barclay Bank, so that immediate
transfer can be effected to the nominated Bank
account of Mr. Peter f. Tseng with the Citi Bank New York USA.

With Citi bank account number 3450 018200 and routing number
1100001.You are hereby advised to respond within seven bank
working days to my office failure which i will give clearance to
Barclay Bank, to effect the electronic wire transfer in favor of
Mr. Peter f. Tseng.

Best Regards,

Inspector Frederick Tyler
Metroplitant Police Authority
London United Kingdom.

Email analysis :

NOTE : no-reply@policeauthority.com
NOTE : policeauthoritymetropolitan8@gmail.com
NOTE : barclay.b20@yahoo.com
NOTE : client-ip=187.32.87.49;
NOTE : -19.0151,-49.5504