18-06-2016 -- Mise a jour important (Phishing Crédit Agricole)

La Banque Postale

Votre situation

Bonjour,
Lors de votre dernier achat , vous avez été averti par un message vous informant de l'obligation d'adhérer à la nouvelle réglementation concernant la fiabilité pour les achats par C.B. sur internet et de la mise en place d'un arrêt pour vos futurs achats. Or, nous n'avons pas, ce jour, d'adhésion de votre part et nous sommes au regret de vous informer que vous pouvez plus utiliser votre carte sur internet.
.
Adhésion : Cliquez-ici

Nous vous remercions de la confiance que vous nous témoignez.
Cordialement,

CREDIT AGRICOLE

© CREDIT AGRICOLE 2016

Email screenshot :

Email analysis :

NOTE : creditagricoleinfo@ovh.com
NOTE : Mime-Version : 1.0
NOTE : X-Sid-Pra : creditagricoleinfo@ovh.com
NOTE : Content-Type : text/html; charset=utf-8
NOTE : Received : from lilyoude ([40.115.42.121])

NOTE : by mrelayeu.kundenserver.de
NOTE : 18-06-2016 -- Mise a jour important

Phishing analysis :

CLICK : Cliquez-ici
OPEN : http://www.iab.una.py/images/imagenes/r11/r13.html
REDIRECT : http://important.mise.a.jour.credit.agricole.identification-panel.com/login/*/particulier.html?agricole=_banque-run&secure=*
SCREENSHOT :

CLICK : Confirmer
REDIRECT : http://important.mise.a.jour.credit.agricole.identification-panel.com/login/*/information.php
SCREENSHOT :

CLICK : Valider / Confirmer
REDIRECT : http://important.mise.a.jour.credit.agricole.identification-panel.com/login/*/email.php
SCREENSHOT :

CLICK : Valider / Confirmer
REDIRECT : https://www.credit-agricole.fr/

Greetings to you from the DHL COURIER SERVICES WORLD WIDE

DHL OF NIGERIA Ltd
c913/3North Ridge Crescent Road
North Ridge, P.O Box 207 NIGERIA
E-Mail: revyoungmike@gmail.com

Dear

Greetings to you from the DHL COURIER SERVICES WORLD WIDE, we are writing to inform you that your ATM CARD was brought to our office in NIGERIA his Evening from the Bank Of US at about 3:37pm our time to be delivered to you this mouth 2016 my name, is Rev Mike Young, You are inspected to send your delivery address to us for delivery to commence. I was told by the director of Bank of US that this ATM card is given to you as a compensation to you due to the delayed of your Unclaimed Fund / Inheritance, also we discovered that your Parcel has been unnecessarily Delayed by corrupt officials in NIGERIA. The ATM Card are two each of them is Value is $5.500,000 USD Only . You are advised that a maximum withdrawal value of US$1,500.00 is permitted daily from any ATM machine that has the VISA Card Logo on it and the card have to be renewed in 4 years time which is 2019. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account. Please note that the ATM card is well packaged and cannot be opened because it is protected with a hard cover an insurance policy which makes it impossible for it to be used by any individual except by you the rightful beneficiary. All verifications has been made and you are the sole beneficiary of the funds, you are advice to pay the delivery charges of $85.usd to get your parcel deliver to you within 24 hours.

24 hours Delivery

Mailing……………….. $30.00
Insurance…………. $35.00
Vat (5%)……………..$20.00
Total…………………..$85.00

Payment of $85,usd should be sent to the DHL account officer from any Western Union Money Transfer or Money Gram Money Transfer location nearest to you, As soon as payment is confirm, you will be sent the tracking number to ascertain status of your card shipment..

DESCRIPTION OF PARCEL:

ATM card/original certificate of weight :—–0.20kg
Bonded draft of weight :——————0.17kg
Total weight of parcel :——————–0.37kg
Color of Parcel :—————————-Dark Brown
Length of days :——————————24hours
Delivery Type:——————————-Premium Service
Delivery Status:——————————Virtual Pending
Customer Number:————————–FRAl45771001

Your parcel contains the following documents:

1.Two Visa CARD VALUED THE SUM OF $5.500,000 USD Only
2.CLEAR SOURCE OF FUNDS CERTIFICATES(C.S.F.C…)
3.CERTIFICATES OF ORIGIN OF FUNDS(C.O.F.)

These documents have been securely sealed and packed for security reasons which makes it impossible for anyone to view it until its been delivered to you. Immediately you make the payment delivery is set to take place. please you are advice to send your delivery address to us in time so use the below information to make the payment of the $85.usd so that your package will be deliver to you ASAP. Below is the delivery details needed from you

Your full Name..
Your Delivery Address:..............
Home/Cell Phone:..............

Upon receipt of payment the delivery officer will ensure that your package is sent within 24 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next 24hrs after you have made the payment for shipping.

Receive's Name..........................OGWU VICTOR
Country........................................Nigeria
Test Question..............................In God
Answer.........................................We Trust
Amount...........................................$85.Dollars

I am waiting to hear from you as soon as your make the payment.
With best regards from the DHL COURIER SERVICE

REV. YOUNG MIKE

Dispatch Manager

DHL delivery service

we shall be communicating through email until you received the cards.

Email analysis :

NOTE : revmikeyoung@qq.com
NOTE : audrey@speedy.com.ar

From Dr.Isabella Jefferson

Hello dear friend,

I'M Dr.Isabella Jefferson I am a UNITED STATE MILITARY NURSE From united state of America. Am supportive and caring, looking forward to get a nice friend. I read your profile from professional link network and pick interest on you. I will like to establish mutual friendship with you. Please let continue our conversation through my private email box.Here is my email address ( drisabellajeffersonus@gmail.com ) I will introduce myself better and tell you the reason why i contact you also send you my picture as soon as i receive your mail.Thanks and regards.

Dr.Isabella Jefferson

Email analysis :

NOTE : aminadukson750@asia.com
NOTE : drisabellajeffersonus@gmail.com
NOTE : Received : from 41.82.51.166 ([41.83.30.153])

Congratulation you are one of BMW Lucky Winner Contact: bmw.automobile2016@gmail.com

Congratulation You are one of the ten(10) lucky 2016 end of the year promo
winner, please contact Game Manager to claim your price:
bmw.automobile2016@gmail.com

NOTE; delivery charges are winner responsibility

Email analysis :

NOTE : 203.86.24.211@lhr.comsats.net.pk
NOTE : bmw.automobile2016@gmail.com
NOTE : Received : from 197.211.53.45 (proxying for unknown)
NOTE : (SquirrelMail authenticated user oracle) by 210.56.16.10

Secure Message From Eric

g
G

Hello, I tried to upload and send earlier but got an error message, So i had to send it using Dropbox because it is safe and secure to share important document/files.

View|Download files

scan011.pdf
scan012.pdf

© 2016 Drop Box

Avast logo
This email has been checked for viruses by Avast antivirus software.
www.avast.com

File analysis :

CLICK : View|Download files
OPEN : http://goo.gl/OgPeo3
REDIRECT : http://timeinformatica.com.br/down.js/
RESULT : Unresponsive...

Email analysis :

NOTE : info@g-dss.com
NOTE : iluvtoteach56@aol.com
NOTE : Received : from LOBO (unknown [185.60.147.98])

NOTE : Colocore Gmbh
NOTE : client-ip=204.29.186.159;

Cordelia Adams

Dearest One,I am Mrs Cordelia person from Kuwait. I am married to Mr. Robert Adams. who worked with Kuwait embassy in Ivory Coast for Nine years before he died in the year 2010. We were married for eleven years without a child. He died after a brief illness that lasted for only four days.Before his death we were both born again Christian. Since his death I decided not to remarry or get a child outside my matrimonial home which the Bible is against. When my late husband was alive he deposited the sum of $6 Million (Six ) Million U.S. Dollars) in the bank here in a fixed suspence account and he declare me as the next of kin to the said fund.I would like to hear from you as soon as possible so that i can give you more details about the money Remain blessed in the Lord.Yours in Christ,Cordelia. Adams

Email analysis :

NOTE : cordelia.adams400@gmail.com
NOTE : cordeliaadams.1@gmail.com
NOTE : X-Rocketymmf : adamssjrit2012
NOTE : Received : from [41.207.14.165]

Your Outstanding Payment

Dear Sir,

INSTRUCTIONS TO CREDIT YOUR ACCOUNT THROUGH ONLINE/SWIFT SERVICES

We write to inform you that we have been authorized by the office of the President of European Central Bank and Federal Ministry of Finance to investigate the reasons associated with the unnecessary delay to the release of your outstanding Inheritance payment and effect your transfer from Federal Government reserve account immediately.

Your fund has been transferred to your Bank account.Kindly find attached your TRANSFER RECEIPT.Please download our TRANSFER RECEIPT attached and give us a feed back if the transfer is made to the right account.

The appointment of this Bank to correct all the anomalies surrounding your payment was further authenticated and endorsed by the World Bank delegates that visited this country recently.

With Much Love Have a wonderful day ahead.

Best regards
Javier Marín
CEO Santander Group.

CONFIDENTIALITY NOTICE: This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please contact the sender and delete this message immediately

Email analysis :

NOTE : santander.group@inretex.com
NOTE : User-Agent : Roundcube Webmail/1.1.4
NOTE : X-Antiabuse : Primary Hostname - midland.website.haus
NOTE : Received : from [::1] (port=33098 helo=inretex.com) by midland.website.haus
NOTE : Received : from dee-24.com ([68.171.209.105])

GOOD DAY MY BELOVED FRIEND YOUR PAYMENT IS READY.

YOUR ATM CARD NUMBER: 4278763100030014

HOPEFULLY YOU ARE DOING GREAT IN HEALTH MATTERS WITH YOUR BELOVED FAMILY. HOWEVER I HAVE REGISTERED THE ATM CARD WITH DHL COMPANY THIS MORNING AS WE AGREED AND THE DELIVERY WILL TAKE OFF TOMORROW MORNING BASED ON MY AGREEMENT WITH THE DHL DIRECTOR REV. COLIN THOMPSON, MOST IMPORTANTLY RECONFIRM YOUR CURRENT DELIVERY ADDRESS TO HIM CONTACT HIM VIA HIS PRIVATE EMAIL:(rev.colin.thompson@deliveryman.com) THE ONLY MONEY YOU ARE REQUIRED TO PAY IS $173 AS PACKAGE DELIVERY FEES TO YOUR HOME DOOR STEP. I WILL NOT BE REACHED TILL AUGUST 25TH 2016, BECAUSE I AM ON MATERNITY LEAVE. THE AMOUNT IN YOUR ATM CARD IS 1.2 MILLION USD, AND THE PIN-CODE OF YOUR ATM CARD IS (0609)

THANKS MRS. SHELLY ANNA EDRIS.

Email analysis :

NOTE : infos465@gmail.com
NOTE : Received : from jws106156.mail.bf1.yahoo.com
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-3
NOTE : Content-Length : 2298
NOTE : 98.139.215.251

Account Alert: Personal Safe Key (PSK) (American Express Phishing)

American Express Personal Safe Key (PSK)

Please create your Personal Security Key. Personal Safe Key (PSK) is one of several authentication measures we utilize to ensure we are conducting business with you, and only you, when you contact us for assistance.

American Express uses 128-bit Secure Sockets Layer (SSL) technology. This means that when you are on our secured website the data transferred between American Express and you is encrypted and cannot be viewed by any other party. to create your PSK (Personal Safe Key).
The contained message may be privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. Sincerely, American Express Customer Service.

Create your PSK

Kind regards,
Dave Barry

American Express. All rights reserved.

Email screenshot :

Email analysis :

NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0)
NOTE : Gecko/20100101 Thunderbird/24.2.0
NOTE : Return-Path : < americanexpress@welcome.aexp.com >
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Content-Type : text/html; charset=ISO-8859-1
NOTE : Received : from localhost (HELO queue) (127.0.0.1)
NOTE : Received : from unknown (HELO AGSKISAJ) (175.157.252.110)

NOTE : Account Alert: Personal Safe Key (PSK)

Phishing analysis :

CLICK : Create your PSK
OPEN : http://amexpersonalsafetykey.com/create
SCREENSHOT :

CLICK : Log In
REDIRECT : http://amexpersonalsafetykey.com/create/step2.html
SCREENSHOT :

CLICK : Continue
REDIRECT : http://amexpersonalsafetykey.com/create/step3.html
SCREENSHOT :

CLICK : Continue
REDIRECT : http://*.*.id.opendns.com/s/phish.opendns.com/index.php?X-OpenDNS-Session=*_*_*_url=amexpersonalsafetykey.com%2Fcreate%2Fstep3.html&server=ams16&prefs=&tagging=&nref

Whois amexpersonalsafetykey.com :

Domain name: amexpersonalsafetykey.com
Registry Domain ID: 77428276_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.todaynic.com
Registrar URL: http://www.now.cn/
Update Date: 2016-06-16T16:00:00Z
Creation Date: 2016-06-16T17:27:11Z
Registrar Registration Expiration Date: 2017-06-16T16:00:00Z
Registrar: Todaynic.com, Inc.
Registrar IANA ID: 697
Registrar Abuse Contact Email: cs@now.cn
Registrar Abuse Contact Phone: +86.7563810552
Registrant Name: Ping Lun
Registrant Organization: na
Registrant Street: 5\\A Xiamen road park
Registrant City: Xiamen
Registrant Province/state: FJ
Registrant Postal Code: 350344
Registrant Country: CN
Registrant Phone: +86.7543376325
Registrant Phone EXT:
Registrant Fax: +86.7543376325
Registrant Fax EXT:
Registrant Email: cs@now.cn
Registry Admin ID:
Admin Name: Ping Lun
Admin Organization: na
Admin Street: 5\\A Xiamen road park
Admin City: Xiamen
Admin Province/state: FJ
Admin Postal Code: 350344
Admin Country: CN
Admin Phone: +86.7543376325
Admin Phone EXT:
Admin Fax: +86.7543376325
Admin Fax EXT:
Admin Email: cs@now.cn
Registry Tech ID:
Tech Name: Ping Lun
Tech Organization: na
Tech Street: 5\\A Xiamen road park
Tech City: Xiamen
Tech Province/state: FJ
Tech Postal Code: 350344
Tech Country: CN
Tech Phone: +86.7543376325
Tech Phone EXT:
Tech Fax: +86.7543376325
Tech Fax EXT:
Tech Email: cs@now.cn
Name Server: a.dnspod.com
Name Server: b.dnspod.com
Billing Name: Ping Lun
Billing Organization: na
Billing Street: 5\\A Xiamen road park
Billing City: Xiamen
Billing Province/state: FJ
Billing Postal Code: 350344
Billing Country: CN
Billing Phone: +86.7543376325
Billing Phone EXT:
Billing Fax: +86.7543376325
Billing Fax EXT:
Billing Email: cs@now.cn

hello dear

hello dear my name is Zalfa i live in London. I have something to discus with you.so please write me to my email, zalfa4faruk@gmail.com

Email analysis :

NOTE : zalfa4faruk@gmail.com
NOTE : Mime-Version : 1.0
NOTE : client-ip=212.82.97.161;

IMF Welcomes Nigeria's Decision on Exchange Rate [Information]

WASHINGTON—

The International Monetary Fund said Thursday that it welcomed the decision by Nigeria's central bank to abandon its currency peg and adopt a flexible exchange rate policy, saying this was important to reduce fiscal and external imbalances.

IMF spokesman Gerry Rice told a weekly news briefing that the fund wanted to see how effectively the naira exchange market functions once the new float system is put into effect on Monday.

Nigeria's central bank governor said in a letter to President Muhammadu Buhari that the bank expects the naira to settle at around 250 to the dollar after it abandons the peg of 197 to the dollar it has supported for 16 months.

"I think the announcement yesterday to revise the guidelines for the operation of the Nigerian interbank foreign exchange market is an important and welcome step," Rice told reporters. "It will provide greater flexibility in that market, the foreign exchange market."

Senior IMF officials, including Managing Director Christine Lagarde, have urged Nigerian officials to allow the naira to fall to absorb some of the shock to the economy from a plunge in oil prices and revenues. OPEC member Nigeria is a major oil producer.

IMF officials have said that Nigeria has not requested IMF financial assistance, but has been in consultation with the fund on dealing with budget shortfalls.

"As we have said before, a significant macroeconomic adjustment that Nigeria urgently needs to eliminate existing imbalances and support the competitiveness of the economy is best achieved through a credible package of policies involving fiscal discipline, monetary tightening, a flexible exchange rate regime and structural reform," Rice said. "Allowing the exchange rate to better reflect market forces is an integral part of that."

My Greetings To You,

My Greetings To You,

I am barrister Jean Agbekoko.I know this would come as a great surprise to you but I urge you to evaluate this opportunity carefully and then get back to me with an answer. I am contacting you to assist me with repatriating funds, US$ 15.5Million belonging to my late client, who happens to share the same family name with you. The fund in question is currently in a dormant account in the holding bank where it was deposited. The reason I am contacting you is because you share the same family name with the deceased. I am also aware that you might not be directly related to him but having the same family name gives us an advantage and opportunity. If you are interested, get back to me and I will give you all other neccessary information regarding this on condition of complete discretion on your part. Please get back to me for more informations on my private email (jeanagbekoko@gmail.com.com)

Best Regards.

Jean Agbekoko

Email analysis :

NOTE : jeanagbekoko@gmail.com.com
NOTE : brr.jeanagbekokolawfirm@gmail.com
NOTE : NOTE : My Greetings To You,

IMMEDIATE RELEASE OF YOUR OVERDUE PAYMENT WITH THE EUROPEAN/AFRICAN BANKS!!!!!!

Attention: Beneficiary,

The International Monetary Fund compensation center has been mandated by world leaders latest resolution of 2nd June 2016 to complete the payment of all outstanding compensation of $12 Million USD each to all beneficiaries that has been unable to access or receive original payment in respect of the following uncompleted financial transactions in the USA,Africa,Asia,Europe & Oceania.

1.Unpaid Contract Fund
2.Undelivered Next of Kin Fund
3.Undelivered consignment
4.Undelivered Lottery Fund
5.Undelivered Investment Fund

The information received so far confirm that there has been a failure of leadership in respect of promises made by the various officials in Africa and overseas.The intervention of the International Monetary Union compensation Center is to restore sanity, accountability and fairness in making these compensation Payments to the beneficiaries whose payment has been hijacked,delayed or blocked by remittance Officials & accredited delivery agents .

Send your ID number,current address, present business/occupation and a direct contact Phone number to enable me take action that will assist you in receiving the compensation payment. I look forward to your reply after that I will send you the payment advice/remittance processing form to facilitate the compensation payment.

I will send you further details after your reply via our official domain email address which has been reserved for payment processing only because of the heavy online traffic at the moment.

Mr.Andrew Francis
Paymaster General
Bail –Out/Compensation Center
International Monetary Fund
Reply To: andrewffrancis40@live.com

Email analysis :

NOTE : IMMEDIATE RELEASE OF YOUR OVERDUE PAYMENT WITH THE EUROPEAN/AFRICAN BANKS!!!!!!
NOTE : sample@wisdom-advance.com
NOTE : andrewffrancis40@live.com
NOTE : Received : from [10.0.0.95] (78-10-201-168.static.ip.netia.com.pl
NOTE : [78.10.201.168])

Automated Tax Refund Notification

If you can't see this message, view it in your browser.

HM Revenue & Customs
After the last calculations of your fiscal activity , we determined that you are aligible to receive a tax refund of
380.01 £.

To access your tax refund, please follow this link

NOTE: A refund can be delayed a variety of reasons , for exemple submitting invalid records or applying after deadline.
Revenue and Tax Administrator

HM Revenue & Customs Tax Credit Office
PO Box 1970
L75 1WX.

Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered.

Email screenshot :

Email analysis :

NOTE : support@gov.uk
NOTE : Received : from User ([173.12.155.133]) by win11.nswebhost.com

Phishing analysis :

CLICK : this link
OPEN : http://educacaoadistancia.blog.br/wp-admin/hmrc/
RESULT : Phishing was unresponsive

DIVINE DONATION FROM ME, PLEASE DO REPLY ME ASAP!

Dearest in Christ,

Calvary Greetings in the name of our lord Jesus Christ our savoir.

My name is Mrs. Lucy Cart, wife to the late Gerald Cart from Europe, i am old i have no family no kids, i lost my husband and my only two kids in a motor accident five years ago it's so sad for me right now, i am very ill with cancer, doctors says i have short time to live, i have decided to give my wealth to an honest person that can use it to glorify the name of the lord. After i received instruction from my God to use this fund to do GODS work and to give to charity, i prayed to God for direction and he has been directing me. I told God that i want a ministry, or an honest person who will spend the fund for things that will glorify His name. This revelation came after my conversion from sinner to a Born Again Christian. I received Christ and i found out that a sinner has no place in the kingdom of God. I never had rest of mind, I seek God for forgiveness and he revealed to me that i will only have rest of mind if i serve him with all my wealth and he will bless me mightily. It was when i received Christ that i realized the meaning of going to heaven need to make heaven; i don't want to perish in hell fire. As my level of Christianity was increasing, i understood that the wealth of sinners is acquired for the just. God opened my eyes to the book of Ecclesiastes 6, verses 1 & 2. Read this scripture and you will understand that there are people in this world that God gave the grace to acquire wealth yet God did not give them the grace to enjoy the wealth. I happened to fall into the same category now it is the wish of God. When God revealed to me to use my wealth to do his work, I understood that God was testing me like He tested Abraham and other men of God. Abraham needed a child and God asked him to use his only son for sacrifice, Abraham was faithful. He obeyed and God made him father of many nations. After the death of my late husband and when i was told about my illness i have to sell all our properties which amounted to about $22 million which i deposited with Bank for safety purpose if anything happen to me this funds will be impounded, can you use this funds for charity purpose.

Please reply me on my private below Email: lucyct01@yahoo.com

AWAIT YOUR PROMPT REPLY.

In His Service,
Mrs. Lucy Cart

Email analysis :

NOTE : office2324@angelsbaseball.com
NOTE : X-Originating-Ip : [197.210.173.25]

NOTE : X-Massmail : 1.0
NOTE : X-Massmail : precedence.bulk

From Mr. Philip (Reply Back Urgently).

I have lucrative contract business that will favor you, kindly reply if you are interested for further explanation. Regards, Mr. Philip

Email analysis :

NOTE : From Mr. Philip (Reply Back Urgently).
NOTE : eamanpeter@gmail.com
NOTE : ika.dps@novenacargo.co.id
NOTE : Received : from cpanel.novenacargo.co.id
NOTE : (ip114-247.cbn.net.id. [202.158.114.247])

Service client

Bonjour,

Un nouveau Message est disponible sur votre Messagerieo Pour le consulter, Veuiller Cliquez sur le lien ce-dessous :

Accèdez à votre boite

Nous vous remercions de votre confiance.
Hello Bank : Banque et Assurance

Ce courriel vous a été envoyé par un système automatique d'émission de messages. L'adresse d'émission n'est pas une adresse de courriel classique. Si vous écrivez à cette adresse, votre message ne sera pas pris en compte

Email screenshot :

Email analysis :

NOTE : ____Hello____Bank___@tix.nl
NOTE : pts@tix.nl
NOTE : X-Php-Originating-Script : 0:bing.php
NOTE : Received : from tix.nl ([212.114.110.224])

Phishing analysis :

CLICK : Accèdez à votre boite
OPEN : http://www.swisspharmaceutical.com/admin/image
RESULT : Phishing is unresponsive.

CAN YOU HANDLE INVESTMENT?

My name is Mrs. Sabeen Gharam Aram widow of late Mohamed Assad Aram from idlib in syria arab republic, am in an urgent need of an individual or organization abroad that is willing to help to secure, move and invest my late husband's fund which he has offshore; the investment will depend on the agreement with me.

Mrs.Sabeen Gharam Aram

Email analysis :

NOTE : SabeenGharam1@outlook.com
NOTE : mrssabeengharamaram@outlook.com
NOTE : X-Yahoo-Newman-Property : ymail-4
NOTE : Received : from [98.139.212.197]

call him now(646) 531-9234

good day the agent janny king is now arrive with your package up to $4.8 million so you have to contact him now with your address,and call him all so and email him the address (646) 531-9234(jannyking21@gmail.com)

Sylvia England

Email analysis :

NOTE : jannyking21@gmail.com
NOTE : cristianonovelli@tin.it
NOTE : Received : from (41.138.89.219)

NOTE : by wmlighttin.pc.tim.it

Contact DHL Courier Company for Your CORPORATE VISA CARD (US$2.7Million)

Dear: Beneficiary,

Having reviewed all the obstacles and problems surrounding the transfer of your (US$2.7Million) and your inability to meet up with some charges levied against you due to the past transfer options, We the Board of Directors, Bank Of Africa (BOA) has ordered our Foreign Payment Remittance Unit to issue you a CORPORATE VISA CARD where your payment will be uploaded and today, we got notice that your Payment has been uploaded into this CORPORATE VISA CARD and also have registered it with DHL for delivery.

For your information the delivery charges has been paid and they were supposed to have shipped your packaged ATM CARD but they insisted that you must re-confirm to them your current delivery address to ensure accurate Delivery. MOST IMPORTANT:
Therefore e-mail them with the details below:

1. Full Name:……….
2. Address:…………
3. Telephone Number :…….
4. Country:…………..
5. Occupation:……………
5. Age:…………….
6. Sex:……………..
7. A scan copy of your passport:…..

Dr. lionel zinsou.
DHL Courier Company Benin Republic,
Plot No. 23 Patte D’Oie
03 BP 2147 Cotonou
+229-6225-8909
E-mail (lionelzinsou17@mail.com)

Contact DHL Courier Company for Your CORPORATE VISA CARD (US$2.7Million)

Email analysis :

NOTE : lionelzinsou17@mail.com
NOTE : DHL.@leaf.ocn.ne.jp
NOTE : X-Originating-Ip : [41.138.89.222]

NOTE : lionelzinsou17@mail.com

PAYMENT INSTRUCTION AS NEXT OF KIN

Dear:Sir/Madam,

Compliments of the day to you.

I am Dr. (Mrs.) Dame Patience Jonathan GCFR), wife to the Ex- President of Nigeria who hand over government to an Opposition Government on the 29th of May, 2015. I am contacting you in confidence, and as a means of developing a cordial and fruitful business relationship. I currently have within my reach, the sum of twenty Five million United States Dollars, which I and my children intends to use for investment purposes specifically in your country. This money came as a result of a payback contract deal between my husband and a Russian firm in our country’s multi-Billion Dollar Ajaokuta Steel Plant. The Russian’s returned my husband’s share of US$25,000,000.00 after his hand over to the Opposition Government, and i lodged it in Citibank of London, United Kingdom. Right now, the New government of Muhammadu Buhari has intensified their probe on MY family’s financial resources; frozen all our known local accounts, revoked our oil licenses, pending the outcome of their investigations. In view of these facts, I acted fast to deposited the US$25,000,000.00 in a private security account of which I alone know of it’s existence. I have since declared the security account bankrupt. No record whatsoever exists concerning this money traceable by the new government of Nigeria, because there is no documentation showing that we received the money from Russians. Therefore the current situation in my country concerning government’s attitude towards my family, it has become quite impossible for us to make use of this money within. I thus wish to discretely transfer this money out of London with your help, to be invested in your country (under your professional guidance), and to help start operation in an Oil Refinery which my Husband built in Brazil before 2011 Presidential General election. I shall expect you to contact me urgently to enable us discuss this transaction in details. Perhaps 40% to you and 55% to my family, while 5% goes to any expenses during the transaction, I want you to contact my Personal Attorney Mr.Bello Ali through his below information to direct you on how the Citibank Group of London will release the fund to you.

Moreover,i also want you to fill the appropriate form immediately.

[1] Full Names:_____________
[2] Contact address_________
[3] Direct Telephone No: ____
|4| Occupation : _______

Finally, you are here by advised to call Barrister Bello Ali on his private phone number +2349039563882, to enable him forward your contact information to the Bank for immediate release of the funds as the Next of Kin to my family. PLEASE REPLY TO HIS PRIVATE EMAIL ADDRESS: belloali2001@gmail.com, or bello_ali2016@yahoo.com,to enable him forward to the Citibank of London for the release of the fund.

Best regards,

DR. Mrs. Dame Patience Jonathan.
Wife of Former Nigeria President.
You may call My-Direct No:+2348094254064.

Email analysis :

NOTE : belloali2001@gmail.com
NOTE : dpp@sdfghjiokjhds.onmicrosoft.com
NOTE : PAYMENT INSTRUCTION AS NEXT OF KIN

Vous avez (1) nouveau message (Blockchain Phishing)

Bonjour,

Vous avez (1) nouveaux messages Sur Votre Messagerie.

Consulter Votre Messagerie,

en cliquant Sur Le lien ci-dessous :

Votre Messagerie

Nous vous remercions de votre confiance.

Service BNP PARIBAS Messagerie.

Having technical difficulties or have a comment about the survey? E-mail us

This survey is available for a Iimited time. We apologise if you are unable to participate.

As explained in Apple's privacy policy, we may use your personal information to contact you to participate in market research surveys. Participation in this or any Apple survey is optional. Unsubscribe from surveyshere.

Other Apple links:

Get help Update your info Leave product feedback

TM and copyright © 2015 Apple Inc. 1 Infinite Loop, MS 303-4CA, Cupertino, CA 95014.
All Rights Reserved / Privacy Policy

Email analysis :

NOTE : info@asos.fr
NOTE : oyuioi@asos.fr
NOTE : X-Mailer : PHPMailer [version 1.73]
NOTE : Received : from asos.fr ([166.63.123.197])

Phishing analysis :

CLICK : Votre Messagerie
OPEN : http://vetclinic-24h-mada.com/yguy
RESULT : Phishing was unresponsive...
TRY : http://vetclinic-24h-mada.com/
SCREENSHOT :

RESULT : IS THIS A PHISHING ? YES, THIS IS A BLOCKCHAIN PHISHING !
CLICK : Se Connecter
REDIRECT : https://blockchain.info/

DocuSign Document (Dropbox Phishing)

You have a new file shared with you via Dropbox secure file transfer

Click here to view

Dropbox Pro also comes with
powerful sharing and security features:
scan.28373.pdfPièce jointe.png

Sign in to access shared file

If you prefer not to receive Dropbox newsletters, please go here.
Dropbox, Inc., PO Box 77767, San Francisco, CA 94107 © 2016 Dropbox

Email screenshot :

Email analysis :

NOTE : Temitjcob@mrapesinol.com
NOTE : X-Organization : ykyrhqaxljfo129498
NOTE : staymoola09@maymostfavour.com
NOTE : X-Originating-Ip : [75.148.115.97]

Phishing analysis :

CLICK : Click here to view
OPEN : http://bit.do/b69KJ
RESULT : Phishing was removed...

INVESTNENT BUSINES PLANE

G-Ideas
75, Washington Avenue
Victoria Island Lagos

Dear Sir/madam,

G-Ideas is a financial management company managing the wealth of some persons both in government and outside government. A serving minister who is one of my clients wants to invest and buy some properties overseas has asked me to find someone who would help him to buy properties in choice areas either in Europe, America or Asia.

Details of this business will be given to you if you are interested to serve as our oversea agent.

Yours faithfully,
Gilbert Onwubiko
CEO G-Ideas.

Email analysis :

NOTE : brtbed0211@bol.com.br
NOTE : g-ideas@outlook.com
NOTE : Received : from static-190-24-156-78.static.etb.net.co
NOTE : 190.24.156.78

Atm Visa Card ($20Million).

Please contact Mr. George Bush Email: speedtrust21@outlook.com Phone
Number: +229-9836-4438 with your full address.

Email analysis :

NOTE : Atm Visa Card ($20Million).
NOTE : speedtrust21@outlook.com
NOTE : ginmacc@tin.it
NOTE : Received : from (197.234.219.18)

NOTE : by wmlighttin.pc.tim.it;
NOTE : Content-Type : text/plain;charset="UTF-8"

PLEASE PERMIT ME

Mr. Jimmy Chien
Vice President/Branch Manager
Industrial and Commercial Bank of China (USA) NA
South San Francisco Branch
235 Grand Avenue, Suite No. 101
South San Francisco, CA 94080, USA

Greetings,

I am Mr. Jimmy Chien, Vice President /Branch Manager ICBC South San Francisco Branch here in California. I am contacting you base on my facts finding about your reputationand someone I can trust for this purpose. The content of my email is a bit detailed that is why I first seek your permission, to let you know before emailing my proposal so won't trash it when I do. Please grant me your permission to email you my proposal of which I know will be acceptable to you if you are willing to be honest with me.

Waiting for your response.

Mr. Jimmy Chien,
Vice President/Branch Manager
Industrial and Commercial Bank of China (USA) NA
South San Francisco Branch.

Email analysis :

NOTE : cjimmy160@gmail.com
NOTE : 2055@charter.net
NOTE : Received : from User (localhost.localdomain [127.0.0.1])
NOTE : by gain-nc.amdswireless.com
NOTE : 24.216.88.183 ()

Automated Tax Refund Notification (HMRC Phishing)

If you can't see this message, view it in your browser.

HM Revenue & Customs

After the last calculations of your fiscal activity , we determined that you are aligible to receive a tax refund of 380.01 £.

To access your tax refund, please follow this link

NOTE: A refund can be delayed a variety of reasons , for exemple submitting invalid records or applying after deadline. Revenue and Tax Administrator

HM Revenue & Customs Tax Credit Office
PO Box 1970
L75 1WX.

Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered.

Email screenshot :

Email analysis :

NOTE : bruce.stewart.agent@gov.uk
NOTE : X-Barracuda-Url : http://10.10.100.232:8000/cgi-mod/mark.cgi
NOTE : X-Barracuda-Connect : 173-12-155-133-northgulf.hfc.comcastbusiness.net
NOTE : [173.12.155.133]
NOTE : mailhost.towne.com
NOTE : X-Barracuda-Auth-User : besadmin
NOTE : X-Barracuda-Apparent-Source-Ip : 173.12.155.133

NOTE : client-ip=12.200.104.232;

Phishing anaylsis :

CLICK : this link
OPEN : http://educacaoadistancia.blog.br/wp-includes/hmrc/
REDIRECT : http://educacaoadistancia.blog.br/wp-includes/hmrc/startapplication/?*
SCREENSHOT :

CLICK : Let Start
REDIRECT : http://educacaoadistancia.blog.br/wp-includes/hmrc/startapplication/indentify.php?ip=*
SCREENSHOT :

FILL : FORM
CLICK : Next
SCREENSHOT :

NOTE : LOADING A FAKE REFUND...
CLICK : Start Refund
SCREENSHOT :

SELECT : A bank...
CLICK : Next
SCREENSHOT :

FILL : FORM
CLICK : Continue
SCREENSHOT :

CLICK : Confirm Tax Refund
SCREENSHOT :

REDIRECT : https://www.gov.uk/government/organisations/hm-revenue-customs

I thought you might be interested in this link

Hello!

Hello,

We offer Loan to serious individual or an Organization with low interest rate of 3% PA and maximum with no credit check, Loan period of 10yrs with Option of Rollover up to 2yrs. Loan Amount ranges from $1,000 Minimum up to a maximum of $20 Million with World Class standard facilities to make sure the funds gets to you at ease. all our loans & procedures are approved and qualified by our fully experienced compliance team. Equity Zen financial service has become one of the largest independent loan companies. We have an excellent reputation for the provision of first class financial loan products with exceptional customer service. any interested applicant should contact us to this Email: equityzenfinancialservice@gmail.com

Application Form To Fill Below..

Name:.............
Surname:...................
Gender:.......................
Country:...................
Date of Birth:.........................
Occupation:......................
Purpose for the loan:...................
Phone Number:...................
Loan amount needed:...........................
Duration:.................
Monthly income / annual income:....................

Thank You.

David Rosen

Click here to read the article.

If you have trouble viewing the link, copy and paste the following link into your browser:

http://www.***.com/_layouts/protiviti/emailtofriend.aspx

For more information on Protiviti, visit www.***.com.

Email leak :

calebshmidt13@gmail.com, neilrochford@mail.com, joncolbert62@yahoo.com, fracisb99@gmail.com, red3ds@hotmail.co.uk, abankwater@gmail.com, Ivorstiffun40@gmail.com, peter.larinzsky@mail.com, sanfran_4one9ersfan@yahoo.com, gregory138@outlook.com, elliotcaddy@yahoo.com, barb@excelquest.com, james.sullivan.sykes@gmail.com, craig.dole75@gmail.com, Williamjames@gmx.co.uk, john.smith431221@gmail.com, kevin.pesci.business@gmail.com, scottstorch1@gmail.com, christunstall113@yahoo.com, rngmusick@gmail.com, azzkikkr9000@gmail.com, adz2000sg@gmail.com, jonathanwalker121@gmail.com, martinmcpherson1980@gmail.com, johanna@dollsdancers.fi, jbankwater@gmail.com, andreym56@rothga.com, barrykrunt@gmail.com, cathymullernyc@gmail.com, obrawkins.nathan@gmail.com, christian.lemon@gmx.com, smatz97@gmail.com, Bradymartha55@gmail.com, laja602@outlook.com, booptittybopbop2@gmail.com, ted.sergeant@outlook.com, danielandersonprivate@gmail.com, justcallmeminty@gmail.com, chansenchristine@openmailbox.org, jessie_1186@outlook.com, everyrosehasitsthorn56@gmail.com, kohlmansean@gmail.com, oliverjohnson1979@gmail.com, gabrieler.wall@mail.com, fiets@lunitje.nl, calvinghaggerty@gmail.com, jpistmobank@gmail.com, noradam1@gmx.com, oli.dugmore@gmail.com, clalande1754@gmail.com, trip.jensen@gmail.com, hotsoolahx@yahoo.com, lewis.wake@hotmail.com, Capricehaywood@yahoo.con, thehumanfundfoundation@gmail.com, phyllisf2@comcast.net, benhess777@gmail.com, tellytubbins@gmail.com, michaelkoxlong@hotmail.com, info@waterfrontbarton.co.uk, hydrolichotdog@gmail.com, WilkesHenry@mail.com, josh.lyman432@gmail.com, info@regalcredit.org.uk, stan.bowers@techmarketproviders.com, danyelthefallen@yahoo.com, wilfred.martinson@yahoo.com, chuckaspeer2@gmail.com, melissastuder91@outlook.com, Dumaseura@gmail.com, alexhendrik00@hotmail.com, bgrompton@gmail.com, carlosmalaga2014@gmail.com, Ledbetter.antonio@yahoo.com, aaronthreepwood@gmail.com, david.mirren@gmail.com, sebastianhsh@live.com, rwdawson75@gmail.com, dionspencer230@gmail.com, iainjones2015@gmail.com, Ravensblackrevenge@gmail.com, ferdinand.gash@gmail.com, galtaureus3@gmail.com, bob.grimley1968@gmx.com, marek.folkos@seznam.cz, jonthorton1@gmail.com, rainman9292@gmail.com, vladeemervladimirovich@outlook.com, oliver.queen@dutchmail.com, dos.perros@gmail.com, timmywest88@gmail.com, drjack.johnson@yahoo.com, ericforman67@gmail.com, Amiller12@mail.com, bf.kurtons@gmail.com, jlinker29@outlook.com, lize.daily@gmail.com, mzeegen@outlook.com, gussyginny@gmail.com

Email analysis :

NOTE : equityzenfinancialservice@gmail.com
NOTE : client-ip=157.56.111.247;

DEAR BENEFICIARY

I,m Jeh Charles. Johnson. The secretary of the U.S Department of Homeland security Washington DC. Office Address: 3801 Nebraska Ave NW, Washington, DC 20016, United States. We received a report from ECOWAS that you have an abandoned fund worth $4.5 Million in West Africa. I have instructed ECOWAS and the concerned authorities to bring the consignment box to our Head office in Washington DC. the fund will arrive my office today. I want you to kindly Reconfirm Your Full Name, Current Home Address, Nearest Airport and your Direct Cell Phone # So that arrangement can be made for the delivery of the consignment to your home address. I can be reached at (213)295-1439

I wait to hear from you.

Honorable Jeh C. Johnson
The secretary of
the U.S Department of
Homeland security
Washington DC
Office Address:
3801 Nebraska Ave NW,
Washington, DC 20016,
United States.

Email analysis :

NOTE : www.@grace.ocn.ne.jp
NOTE : jehcharles007@gmail.com
NOTE : X-Originating-Ip : [43.231.232.17]

NOTE : Received : from mf-smf-ucb003.ocn.ad.jp
NOTE : Received : from mzcstore422.ocn.ad.jp
NOTE : client-ip=153.149.230.9;

NOTE : Content-Transfer-Encoding : 7bit

United Nations ATM Card Settlement This Season.

Attention: Beneficiary,

We have been having series of meetings for the passed 1 month now which ended 2 days ago with the Nigeria Government, and the former Secretary-General (Hon. Kofi Annan) to the UNITED NATIONS. Federal Reserve Bank of New York, HSBC Bank of United Kingdom (UK) with the World Bank Officials. This email is for all the people that have not been paid, for their contract/inheritance in any part of the world, the United Nations, Federal Reserve Bank of New York HSBC Bank of United Kingdom (UK) Reserve Bank of Nigeria, with the World Bank officials have agreed to compensate them with the sum of Four Million, Nine Hundred Thousand US Dollars each victim. This includes every foreign contractor that may have not received his or her contract sum and people that have had an unfinished transaction, people who have inheritance to claim or international businesses that failed due to instability of government in some part of World. We found your email address in our list and that is why we are contacting you, these have been agreed upon and have been duly signed.Therefore, we are happy to inform you that your ATM Card Number: 4120 5350 0015 has been approved and upgraded, via ZENITH BANK INT'L in your favor.Meanwhile, your Secret Pin Number will be available as soon as you confirm to us the receipt of your ATM CARD. The ATM Card Value is $6,300,000.00 USD Only. You are advised that a maximum withdrawal value of US$20,000.00 is permitted daily.And its is duly inter-switched and you can make withdrawal in any location of the ATM Center of your choice/nearest to you any where in the world. We have also concluded delivery arrangement with our accredited courier service Company DHL or Fedex to deliver your package to your door step. Be informed that your response would be by telephone or through email Only.Any further delay will be the pleasure of the UNRC to use your fund to help the people who have been displaced in Darfur, Sudan Africa which you can see it in this site http://www.savedarfur.org/ and the Tsunami's victims in Asia. So you are hereby advice to forward to this office Director ATM SWIFT CARD Department Therefore, you should send him your full Name and telephone number/your correct mailing address where you want him to send the ATM to you. Contact Person Apostle Robert Gate immediately for yourATM SWIFT CARD:

Person to Contact Apostle Rolland Eze E-mail: { fundscompenssation@qq.com } We are working according to the constitution binding this committee as well as helping the less privilege through this means. You will be required to contact the above mentioned institution via telephone or email. Hoping to hear from you as soon as you receive your ATM card.

1.YOUR FULL NAME ................
2.PHONE AND FAX NUMBER...............
3.ADDRESS WERE YOU WANT US TO SEND THE ATM CARD...............
4.A Copy Of Your Identity Attached To e-mail

Best Regards,

Mr. Ban-Ki Moon

Email analysis :

NOTE : United Nations ATM Card Settlement This Season.
NOTE : appostles-rolland@mail.com
NOTE : fundscompenssation@qq.com
NOTE : 5.200.37.74 ()
NOTE : Received : from unknown (HELO ps-1c.ru) (5.200.37.74)

no reply (Phishing Crédit Agricole)

Cher(e) abonné(e),

Cet email a été envoyé par l'équipe Crédit Agricole pour vous informer que nous n'avons pas pu traiter votre paiement de facture.

Ceci pourrait être du a l'une ou l'autre des raisons suivantes:

1.Un changement récent de vos informations personnelles. (par exemple : adresse de facturation, téléphone..)

2. Soumission d'informations incorrecte pendant le processus de paiement de facture.

Pour s'assurer que votre service ne soit pas interrompu, nous avons invitons à confirmer et à mettre à jour toutes vos informations de facturation en cliquant ici:

ACCÈS

Votre Service Clients reste à votre écoute 24h/24h, 7J/7.

Cordialement,

Email analysis :

NOTE : no-reply@rdp.fr
NOTE : webmaster@web.pharmalink.cz
NOTE : X-Php-Originating-Script : 33:admin.php
NOTE : Received : by ispc03.suptech.cz (Postfix, from userid 33)

Phishing analysis :

CLICK : ACCÈS
OPEN : http://www.lacurvadeibaci.it/a/Agricole
RESULT : Phishing is unresponsive

Lt Selina Nitra

Hi dear,

you are very nice

I wish i could get to know you for it is my pleasure to have you as my friend for a friend is all about Respect,,,Admiration,contentious and affectionante also friendship is consist of sharing of ideas and showing true affection without cheats,,,lies and betray so can you welcome me, lets get to the ocean of love ?????????????

I am Lt Selina Nitra by name

Email analysis :

NOTE : Hi
NOTE : ltseliinarespect@hotmail.com
NOTE : client-ip=212.82.97.77;

NOTE : Mime-Version : 1.0
NOTE : Received : from jws11193.mail.ir2.yahoo.com
NOTE : by sendmailws168.mail.ir2.yahoo.com

Découvrez le pack PASS. (Phishing Société Générale)

Cliquez-ici pour activer ce service

Si vous ne voulez plus recevoir ce message automatique, connectez-vous à votre espace employeur et modifiez l'option de rappel de déclaration dans la rubrique

Email screenshot :

Email analysis :

NOTE : "SOCIETER GENERALE"@urbanpoint.com
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < infox@urbanpoint.com >
NOTE : Received : from urbanpoint.com ([84.39.46.102])
NOTE : Received : by urbanpoint.com
NOTE : X-Php-Originating-Script : 0:xroot.php
NOTE : Message-Id : < *.*@urbanpoint.com >
NOTE : Découvrez le pack PASS.

Phishing analysis :

CLICK : Cliquez-ici pour activer ce service
OPEN : http://www.sanjarfurniture.in/.Signet
RESULT : Phishing was unresponsive. Phishing attempt.

Attention Beneficiary (Moneygram Scam)

MONEY GRAM MONEY TRANSFER OFFICE
ADDRESS: 2225 Osborne Rd, St Marys, GA 31558,, United States.
Hours: OFFICE TEL: (409)3312943) for Call and Text SMS..

Attention Beneficiary !!!!!

The International Monetary Fund Annual Compensation from USA . The International Monetary Fund (IMF) is compensating some 2015 scam victims and your email address was found in the scam victims list. This MoneyGram®office has been mandated by the IMF to transfer your compensation to you via MoneyGram® Money Transfer in USA. However, we have concluded to effect your own payment through MoneyGram® Money Transfer, $2,999USD pay Day until the total sum of $1.5Million is completely transferred to you the receiver. We can't be able to wait or to send the payment with your email address alone instead, we hereby need your information to where we will be sending the funds. You Can Text us and fill below Information Or contact us via email.

(Receivers name)............
(Country)...................... .
( Address)...................... ..........
(Direct Mobile Phone Number).....................
(Your Age........................... .......
(ID copy)............. ..................

Note that your payment files will be returned to the IMF within 2hours if we did not hear from you because this was the instruction given to us by the IMF office here in Georgia, USA. We will start the transfer as soon as we receive your information. You are hereby warned not to communicate or duplicate this message for any reason what so ever because the US FBI is already on trace of the criminals from Africa.

THANKS,

Mr.david johnson.
Money Gram Money Transfer Office.
Address: 2225 Osborne Rd, St Marys, GA 31558,, United States.
Hours: Open today · 8:00 am – 8:00 pm
OFFICE TEL: (409)3312943) for Call and Text SMS.

Email analysis :

NOTE : www.@eos.ocn.ne.jp
NOTE : ubamoneygram48@yahoo.com
NOTE : X-Originating-Ip : [45.55.36.65]

NOTE : X-Remote : 153.149.236.39 (mbkd0338.ocn.ad.jp)