< no subject >

2016111105002973550858.zip

File analysis :

Download : 2016111105002973550858.zip
Result : 2016111105002973550858.zip is a virus.

Virus analysis :

ALYac Trojan.JS.Downloader.GYQ
AVG JS/Downloader.Agent.62_I
AVware Trojan-Downloader.JS.Nemucod.bbp (v)
Ad-Aware Trojan.JS.Downloader.GYQ
AegisLab Troj.Downloader.Js.Cryptoload!c
AhnLab-V3 JS/Obfus
Antiy-AVL Trojan/Generic.ASVCS3S.3F7
Arcabit Trojan.JS.Downloader.GYQ
Avast JS:Downloader-DSB [Trj]
Avira (no cloud) HEUR/Suspar.Gen
Baidu JS.Trojan-Downloader.Nemucod.od
BitDefender Trojan.JS.Downloader.GYQ
CAT-QuickHeal JS.Locky.JE
Cyren JS/Nemucod.CA2
DrWeb JS.DownLoader.1225
ESET-NOD32 JS/TrojanDownloader.Nemucod.BMK
Emsisoft Trojan.JS.Downloader.GYQ (B)
F-Prot JS/Nemucod.CA2
F-Secure Trojan.JS.Downloader.GYQ
Fortinet JS/Nemucod.BDA!tr
GData Trojan.JS.Downloader.GYQ
Ikarus Trojan-Downloader.JS.Nemucod
K7AntiVirus Trojan ( 004dfe6d1 )
K7GW Trojan ( 004dfe6d1 )
Kaspersky Trojan-Downloader.JS.Agent.nbi
McAfee JS/Nemucod.jg
McAfee-GW-Edition JS/Nemucod.jg
eScan Trojan.JS.Downloader.GYQ
Microsoft TrojanDownloader:JS/Nemucod!rfn
NANO-Antivirus Trojan.Script.Heuristic-js.iacgm
Rising Downloader.Cryptoload!8.7DA (topis)
Sophos Mal/DrodZp-A
Symantec Trojan.Gen.NPE
Tencent Js.Trojan.Raas.Auto
TrendMicro JS_NEMUCOD.SMK14
VIPRE Trojan-Downloader.JS.Nemucod.bbp (v)

Final result :

I opened the virus, and the raw version of this virus is here : http://pastebin.com/raw/FVM8wh4v

This virus sounds like a ransomware...

Email analysis :

NOTE : diann.laughton99@winterbrew.com
NOTE : User-Agent : Microsoft-MacOutlook/14.0.0.100825
NOTE : Received : from customer-SLRC-130-213.megared.net.mx
NOTE : (unknown [201.164.130.213])

!!!World Bank Notification!!!

Attention: Beneficiary

The office of the European Union, the President Federal Republic of Nigerian (Mohammed Buhari), the CIA, FBI, EFCC, British Government, American Government and United Nations Organization in Benin Republic, Ghana, Burkina Faso, Malaysia, South Africa, Togo, Senegal in collaboration with UK (London) Anti-Crime Squad received a report of fund transaction/scam against you and other British, US and Asian citizens including other countries whom the aforementioned countries vital offices/authorities have recompensed you due to meeting held with the International Financial Agency, the IMF, four countries Government and the World High Commission against fraud and other international fund transaction activities by the four country Citizens during the recent G20 and ACSP meeting. Your name was among those approved listed beneficiary to be paid by the International Financial Intelligent Unit (NFIU) through the United Nations account holder bank.

You are to contact the UN appointed officer immediately for the release/transfer of your approved compensation fund valued $750,000.00 United States Dollars only. With matter of urgency, you are to reconfirm to the UN appointed officer your full data as follows:

A)Your Full Name, B) Present Address, C) Home and Mobile Telephone Numbers, D) Occupation, E) Company Name and Position.

As soon as you send this information to the officer he will direct you accordingly on the release of your Fund. You are to contact Mr.Mensha Baah Head supervisor with the information below, for the release of your fund now.

Contact Person: Mr.Mensha Baah.
C/8815 off Ring Road, P.O.Box 2515
Cadastral, Zone A, Central Business District
Accra-Ghana.
Email: officeunited@yahoo.com.hk
smtp.office365.com:587
Yours in Service,

Maria Colgate (Secretary Foreign Affair)
World Bank Payment Monitoring Unit.
1818 H Street, N.W.Washington, DC 20433

Email analysis :

NOTE : officeunited@yahoo.com.hk
NOTE : prova@thsbo.com
NOTE : Ms.Maria Colgate
NOTE : Received : from User (unknown [154.118.65.101])

NOTE : by mail.thsbo.com (Postfix)

Website Design/Development and Google Ranking Proposal

Hi,

Greetings,

Hope you are doing well.

I am Kelly Bell working as a Website Consultant of IT Company. I can share more details and portfolio of my company in next email if you are interested.

We deliver following services:-
- Website Design and Development
- Website Online Marketing: SEO, SMO, SEM
- Mobile Application Development – iOS, Android

We have an in-house design and development team who can assist you in above services on reasonable cost with high-quality deliverables.

Please contact us, if you are interested.

Warm Regards,
Kelly Bell
Website Consultant
www.***.com

Disclaimer: Thank you for reading this. In the event that you do not wish me to contact you again, simply send an email with Unsubscribe as a subject line.

Email analysis :

NOTE : kelly@saleguru.biz
NOTE : X-Mailer : Microsoft Outlook 16.0
NOTE : Mime-Version : 1.0
NOTE : 98.138.207.10

Article N° 1606281234CZF9E (Phishing Cdiscount)

Cdiscount

Bonjour,

Félicitation vous etes GAGNANT du: 3eme Prix: iPad Air 2.
Pour plus d'informations, veuillez acceder a notre page :

Http://cdiscount.com/espace.client.securise%90PANNE20%CASSE_Projet%20%Fiche20%

A bientôt,
Votre Service Client
Cdiscount

Cdiscount, C aussi...

... la fourmilière, un espace d’échange entièrement dédié à la Relation Clients de Cdiscount.
Retrouvez sur la Fourmilière, un forum pour vous exprimer et partager votre expérience avec les autres clients Cdiscount. Mais aussi des guides pratiques, des actus, des tutoriaux et un médiateur pour vous informer et vous guider tout au long de vos commandes !

🏈 Offre exceptionnelle pour France/Australie Si vous ne visualisez pas bien cet e-mail, cliquez ici OFFRE EXCEPTIONNELLE Bénéficiez dès aujourd'hui d'une réduction de - 40 %* sur les derniers billets mis en vente pour le match France / Australie FRANCE / AUSTRALIE Samedi 19 novembre 2016 à 21h00 au Stade de France *Offre valable uniquement sur les catégories 6 et 9 dans la limite des places disponibles Pour vous désabonner, cliquez ici

Phishing screenshot :

Email analysis :

NOTE : Cadeau_iPad_Air_2-Cdiscount@mail.live.fr

Phishing analysis :

CLICK : Http://cdiscount.com/espace.client.securise%90PANNE20%CASSE_Projet%20%Fiche20%
OPEN : https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&ved=0ahUKEwi0xLz3naPQAhVCuRQKHVx3AiwQFgglMAI&url=http%3A%2F%2Fcarambolabykids.com.br%2Fcategoria-produto%2Fbebe-menina%2Fconjunto-verao%2F&usg=AFQjCNHlFFJAM-e7Ef16rEjcZMCdBNewPA&sig2=rLcfO8_NS1EXdCvy21UNVA&bvm=bv.138493631,d.d2s&cad=rja
SPLIT : http%3A%2F%2Fcarambolabykids.com.br%2Fcategoria-produto%2Fbebe-menina%2Fconjunto-verao%2F
DECODE : http://carambolabykids.com.br/categoria-produto/bebe-menina/conjunto-verao/
OPEN URL : REDIRECT
REDIRECT : http://archicad.kark.fi/js/Cdiscount/Cadeau_iPad_Air_2/
NOTE : Phishing was removed.

Ugly Spam

A Spam old as the Internet.

An ugly Spam.

Email analysis :

NOTE : owesly@rem.rem217.com
NOTE : authenticated_id: owesly/primary_hostname/system user
NOTE : Cheap-Day: 79% off, Coach Bags, Moncler and More!

VERY IMPORTANT !!!

Greetings,

I am Mr.Ly Tay Seng and a personal Accountant Director with Foreign Trade Bank of Cambodia (FTB).
it is with good spirit of heart i opened up this great opportunity to you A deceased client of mine that shares almost the same name as yours died as a result of heart-related condition on march 2005.His heart condition was duo to the death of the members of his family in the tsunami disaster on the 26 December 2004 in Sumatra Indonesia where they all lost their lives..{More info: http://en.wikipedia.org/wiki/2004_Indian_Ocean_earthquake_and_tsunami}

There is a draft account opened in my bank in 1999 by a long-time client our bank,a national of your country.he was a CEO/a textile company owner,business man,a miner at kruger mining company here in Cambodia. he was a geologist and consultant to several other mining conglomerates operating in Cambodia,China,Taiwan,Japan,Indonesia,Pakistan,Vietnam all in Asia,before he passed away on 12th march 2005 leaving nobody as the next of kin of his account after his death.

The amount in this account is currently $19,340,000 (Nineteen Million Three Hundred and Forty Thousand United States Dollars) I want to present you as a beneficiary,I will use my position and influence in our bank to make they release this money to you for us to share.If i wait for days and i do not hear from you,I shall look for another person.

Kindly get back to me for more details,

Yours sincerely
Mr. Ly Tay Seng
Board of Director
Foreign Trade Bank of Cambodia

Phnom Penh

Email analysis :

NOTE : scanner@sportmalta.org.mt
NOTE : mr.lyseng444@gmail.com
NOTE : Received : from User (175.100.60.188)

NOTE : by win2012.sportmalta.org.mt (192.168.0.10)

Fron Western Union

Attention Dear,

We have deposited the check of your fund ($4.800`000`00USD) through Western Union department after our finally meeting regarding your funds, All you will do is to contact Western Union director Rev.Kevin Anthony via E-mail:(western_uniondepartment12@hotmail.com ) He will give you direction on how you will be receiving the funds daily, remember to send him your Full information to avoid wrong transfer such as,

Receiver's Name_____
Address: ___
Country: _____
Phone Number: ___

Though, Rev .Anthony Kevin has sent $4500 in your name today so contact Rev.Kevin Anthony or you call him +229-98848820 as soon as you receive this email and tell him to give you Western Union Ref. pin number, sender name to pick the $4500 only per day, and the only fee you are to send is $79 usd.

Best Regards.
Barisster .Ahmed Ibrahim.
Western Union Agent

Email analysis :

NOTE : western_uniondepartment12@hotmail.com
NOTE : ngehouselimited@gmail.com
NOTE : goodnews33@cantv.net
NOTE : X-Originating-Ip : [41.85.189.162]

Escroqueries par carte bancaire

Escroqueries par carte bancaire sur le réseau internet

De plus en plus, des personnes se voient prélever des sommes sur leurs comptes bancaires concernant des achats sur Internet ou des abonnements à des sites Web alors qu’elles ne possèdent ni ordinateur, ni connexion internet, ou qu’elles ne soient jamais allées sur ces sites. Si vous êtes concernés, il vous faut déposer plainte auprès de la brigade de gendarmerie ou du service de police de votre lieu de domicile en fournissant le relevé bancaire indiquant les prélèvements incriminés.

Allez voir votre banquier et dites lui que vous vous opposez formellement au paiement de l’opération en question.

S’il ne veut rien savoir et vous dit que vous êtes entièrement responsable des achats faits avec votre carte, rappelez-lui la recommandation de la Commission des Clauses Abusives numéro 94-02 du 17 décembre 1991 qui vous dégage de cette responsabilité pour des demandes de paiement faites sans votre signature ni votre code secret.

Les précautions à prendre

• Ne pas laisser traîner votre carte bancaire à la vue d’autres personnes, ni la laisser dans votre voiture ou tout autre lieu sans protection.
• Après chaque achat, penser à reprendre votre carte bancaire.
• Ne jeter pas vos tickets de caisse sans les détruire totalement, votre numéro de carte bancaire y figure.
• Ne jamais communiquer votre numéro de carte bancaire à une tierce personne.
• Ne pas laisser le numéro de code secret avec votre carte bancaire.
• Votre carte bancaire doit porter votre signature au dos.

NDLR : http://www.clauses-abusives.fr/recommandation/contrats-porteurs-des-cartes-de-paiement-assorties-ou-non-dun-credit/

Le Vishing

Compte tenu de la méfiance des internautes face au phishing, les cyberfraudeurs s'attaquent maintenant à des victimes par l'entremise du vishing appelé aussi hameçonnage vocal. Le vishing est l'utilisation de la technologie VoIP (voix sur IP) dans le but de duper quelqu'un en lui faisant divulguer de l'information personnelle et/ou financière.

Manière d'opérer des fraudeurs

Première méthode:

Un automate téléphonique est utilisé pour contacter les victimes potentielles en composant au hasard des numéros de téléphone fixe dans une région géographique déterminée. Lorsque la victime potentielle décroche, un message préenregistré supposé provenir de sa banque la prévient que des opérations inhabituelles ont été récemment effectuées sur son compte bancaire. Elle est par la suite invitée à composer un numéro de téléphone généralement surtaxé pour vérifier la situation de ce dernier. Ce numéro correspond à une boîte vocale, un message demande alors à la victime de fournir ses identifiants bancaires (les 16 chiffres et la date de validité de sa carte bancaire). Ces informations pourront ensuite être utilisées pour effectuer des achats frauduleux sur Internet.

Seconde méthode:

Une personne appelle une victime potentielle en se faisant passer pour quelqu'un du département de sécurité Visa, Master Card ou simplement de son établissement bancaire. Elle lui signale que sa carte de crédit a été utilisée pour un achat plus que douteux et lui demande si elle est à l'origine de cette opération. Sa réponse étant négative, elle lui attribue un numéro de contrat de fraude, donnant ainsi à l'appel un aspect réaliste, puis lui demande de communiquer les coordonnées de sa carte bancaire afin de vérifier qu'elle est toujours en sa possession. Une fois la conversation terminée, la personne ajoute n'hésitez pas à nous rappeler si vous avez d'autres questions et raccroche.

Comment s'en protéger

Les fraudeurs jouent sur une vulnérabilité psychologique du consommateur en créant en lui un stress et un faux sentiment d'urgence lié à la possibilité d'avoir été fraudé. Si un message vous demande de rappeler tel numéro, ne le composez pas. Prenez le temps de retrouver le véritable numéro de téléphone qui vous a été donné par l'émetteur de votre carte de crédit et utilisez-le. Par ailleurs, il faut savoir qu'aucune banque ne vous demandera par courrier électronique, télécopie ou téléphone ce genre de renseignements. Dans le doute, contactez votre établissement bancaire dans les plus brefs délais. Si, victime de ce type de fraude, vous l'avez déjouée, il convient également de prévenir votre établissement bancaire.

Details:

Hello,

My name is Mrs. Reem Al-Hashimi, the Minister of State for International Cooperation United Arab Emirates. I have a business proposal that wart $27M USD for you. I want you to receive and invest this money on behalf of my only Daughter. I will give you more detail about this fund and myself, as soon as I receive a positive response from you.

Regards,
Ms. Reem Al-Hashimy

Email analysis :

NOTE : reemhashimy3@gmail.com
NOTE : D0904001@wooriservice.co.kr
NOTE : Received : from User (176.61.142.171)
NOTE : by dc01.wooriservice.co.kr (125.129.116.43)

Financial Loan Offer World Wide

Are you interested in a Loan? we offer all kinds of financial assistance to all individuals "Business Personal Loan , investment Loan,home consolidation Loan, debt Loan and company loan worldwide. Our interest rate is 3% per year. we also render financial advice to our clients.if you have any good project or you want to start up a business and you need loan to finance it, just contact us immediately so that we can discuss, sign agreement and then finance your project or business for you. Kindly contact us today for all your financial needs. contact us via E-mail: creditcenter.hksh@gmail.com

with below details

Name:
Loan Amount:
Loan Duration:
Country:
Phone:

Thanks
Excelsior Investors Network.

Email analysis :

NOTE : amy@trimaran.com.hk
NOTE : creditcenter.hksh@gmail.com

Thank you for your PAYMENT (Ref #QCL44188)!

Dear Client,

Your account has just been credited with USD 15,331.80 by Snap Cash LTD.

Reference: Affiliate Commission

Amount: USD 14,331.80
Skrill Transaction ID: 1864928454
Your Transaction ID: 1864928457

To view your balance, sign in to your account.

Best Regards,

Divina - Support
Snap Cash Binary
http://migre.me/vrVcJ

Global Millionaires Trader LLC,3788 Oakwood Avenue, NY, 10011

Email analysis :

NOTE : bounce@mktggroups.com
NOTE : Received : from mktggroups.com (199.101.185.145)

Scam analysis :

CLICK : account
OPEN : http://gtradersoftw.com/fQD2uN?email=*@*.*
REDIRECT : http://yourlegacy.online/?offerID=*
SCREENSHOT :

==Your Overture=

Hello,

I know this letter might come as a surprise to you especially since we have never met or discuss before, basically the message might sound strange but it is factual in reality if only you care to know, The truth is that I should have notified you first through a more confidential means, (even if it's at least to respect your integrity) please accept my humble apologies if I Had caught you unawares, I frankly do not mean any harm in passing my message. We are members of the Special Committee for Budget and Planning of the British Petroleum and Mineral Resources, This committee is principally concerned with contract appraisal and the approval of contract in order of priorities as regards capital projects of the British Inland Revenue, with our positions we have successfully secured for ourselves the sum of Twenty Million Five Hundred Thousand British Pounds (20.5 Million Pounds) the amount was accumulated from the over invoice. Hence together with some of the top officials of the British Petroleum and Mineral Resources, We plan to transfer this amount of money Twenty million five hundred thousand Pounds (20.5Million Pounds ) into an overseas account by awarding a non existing contract from my ministry (BP). To this effect I decided to contact you and ask for your assistance, what we need from you sir, is to provide a very vital account in which the fund will be transferred. My Colleagues and I have agreed to compensate the owner of the account used for this transaction with 25% of the total amount remitted; we shall keep 73% and remaining 2% reserved for taxes and other miscellaneous expenses. Finally the confidence and trust reposed on you cannot be over emphasized, Therefore you are to keep this Deal to yourself confidentially because Caliber of personnel's involved are men in government and cannot effort to loose our respective reputation to our dear country if jeopardized by you. Please Contact me urgently through this my private email address:( 122205@post.com ) for our easier communication.

Yours Faithfully

Tufan Erginbilgic-Chief executive, Downstream-British Petoleum-London-United Kingdom

Email analysis :

NOTE : 122702@post.com
NOTE : contact@onivo-cosmetics.com
NOTE : Received : from User (unknown [69.166.186.10])

NOTE : Corrupted IP (69.166.186.10) sending scam, spam, phishing

NOTE : by jn633.jn-hebergement.com

Mandatory Upgrade is Required (Lloyd Banking Scam)

Security Alert

Your Lloyds Online access need to be upgraded to match the details we hold on record for you. Failure to upgrade means you will encounter problem logging on to your online profile next time. Thanks for your co-operation..

Please update and verify your information

Get Started ?

Please note: Failure to restore full access can lead to permanent suspension of access to our online banking service.

Best regards,
Lloyds Online Banking Team
Legal Privacy Security www.lloydsbankinggroup.com Rates and Charges

Email screenshot :

Email analysis :

NOTE : Content-Type : multipart/alternative;
NOTE : Mime-Version : 1.0
NOTE : id-@hltv.org
NOTE : Received : from WIN-LER4ISVBPKO.home (bahar.tehranhost.com. [79.175.163.50])

NOTE : Received : from Admin-PC ([41.207.9.193])

NOTE : client-ip=79.175.163.50;
NOTE : Mandatory Upgrade is Required

Phishing analysis :

CLICK : Get Started ?
OPEN : http://www.xerussurgical.co.za/wp-includes/images/media/Lloyds(1)/
REDIRECT : http://www.xerussurgical.co.za/wp-includes/images/media/Lloyds(1)/Login.php?sslchannel=true&sessionid=*
SCREENSHOT :

CLICK : CONTINUE
SCREENSHOT :

CLICK : CONTINUE
REDIRECT : https://www.lloydsbank.com/

Your Payment From UNITED NATIONS

UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT SERVICES
Internal Audit,Monitoring,Consulting And Investigations Division.

Attention:

My name is Ms. Carman L. Lapointe, from the United Nations. It is a distinct pleasure to write you again. As you are well aware many foreigners have invested thousands of United States Dollars into Nigeria transactions in Hopeless Dreams to have none of them become a reality. Right now, as directed by our secretary general Mr.Ban Ki-Moon, We have agreed with the Nigeria Government that US$1,000,000.00 (One Million United States Dollars Only) would be paid to you through the Bank Transfer Via special arrangement as first installment. This is to enable you have enough funds to pay for the Tax Clearance and Bank Charges before you will receive the balance of US$14.1M (Fourteen Million One Hundred Thousand United States Dollars Only). Lastly,i will like you to reconfirm your information to me such as your full name, address, telephone number and banking information so that I will process with your Bank Transfer within the next 24 hrs and the transaction information will be released to you.

I await your response for further proceedings.

Sincerely yours,
Ms. Carman L. Lapointe
E-mail: mscarman_lapointe121@mail.com
{Under-Secretary-General}

Email analysis :

NOTE : Your Payment From UNITED NATIONS
NOTE : escaner@qazul.com
NOTE : mscarman_lapointe121@mail.com
NOTE : Received : from SERVER3.automatedsys.com
NOTE : (50-196-232-182-static.hfc.comcastbusiness.net [50.196.232.182])

NOTE : by smtp.propage.cz (Postfix)

Let's Talk

Dear Sir,

I am Paul Smith and work with Smith and Associates Real Estate, Tampa Florida United States of America. We have a deceased client who died and left a huge estate, he bears the same surname with you. Since his death I have received several letters from the Bank where he deposited the fund before his death, to provide his next of kin or any of his relatives who can make claim to the funds before the end of the year or the Bank will be left with no option than to confiscate the fund and turn the money back to the state as it has been marked unclaimed. I have conducted my personal search to see if I can make contact with any of his relatives but without success, it is in the course of my effort that I have to contact you. I have closely checked and since you bear the same surname with my deceased client it will be better to present you as the next of kin and the right beneficiary of the funds in the account. I will provide you with all the necessary legal backing that is required until this money is paid out to you, and then we shall share it based on our agreement. Do respond quick if you are interested or should you need further clarification because we have no much time left.

Regards,

Paul Smith
Principal Partner
Smith & Associates Real Estate
Tampa Florida, U.S.A

Email analysis :

NOTE : paul.smith4806@gmail.com
NOTE : paul.smith4809@gmail.com
NOTE : Received : from [198.101.15.249]

NOTE : (de-2.serverip.co [89.163.255.197])

NOTE : by mail.3wdesign.ca
NOTE : Mime-Version : 1.0
NOTE : X-Watchguard-Mail-Client-Ip : 89.163.255.197

NOTE : X-Watchguard-Mail-Client-Ip : 192.168.75.20
NOTE : moneygram.onlinetransfar2001@yahoo.com
NOTE : www@abelia.ocn.ne.jp
NOTE : mrsrosemarieb@hotmail.com
NOTE : davidcarolm@yahoo.com.hk
NOTE : stellaokosunloanfirm@gmail.com
NOTE : podpora@agentura-najisto.cz
NOTE : agentura@agentura-najisto.cz
NOTE : obchod@resit.cz;m6f9dvf1@gmail.com
NOTE : aboriginal.adjoin@gmail.com
NOTE : trjygrdghj@gmail.com

RE: CASH AWAITING TRANSFER!!!

This is to notify you of the £1,000,000.00(POUNDS) That was deposited at Western Union Money Transfer© is available for transfer. For your fund transfer. Contact Person: Mrs. Hillary Florence/Mr. Greg Steve. Email: hilary.florence01@accountant.com.

Email analysis :

NOTE : hilary.florence01@accountant.com
NOTE : rdept101@gmail.com
NOTE : dtorero@sutran.gob.pe
NOTE : X-Originating-Ip : [198.7.58.81]

NOTE : Received : from mail.sutran.gob.pe
NOTE : (mail.sutran.gob.pe [192.168.248.3])

NOTE : Account : dtorero
NOTE : ©2016 HERITAGE LOTTERY

UN Office of Legal Affairs!!!.

This is in regard to outstanding payment,I am Barr. Sam Chukwurah Jr. {SAN.} the newly appointed Operations Director United Nations, Legal Affairs, Security and Investigation (UNLASIN) here in New York City, New York, United States; The Executive Arms of the United Nations directed me to come down to London to Investigate your fund and to make sure that we approve all outstanding debts. This decision was taken based on the abnormality and inability of the Banks in Africa, Asia and United Kingdom to Release your fund into your bank account; whereby it was discovered that some officials of the bank were diverting foreign beneficiaries payment to another account of their choice overseas. In view of this, during our investigation I found out that; an account was submitted to divert your fund to a USA account. Below is the account submitted and I want you to confirm if you are aware of the new development because we are about effecting payment to the account stated bellow today. Beneficiary Name: Jerry Bloodworth Bank Name: Hometown of Alabama Account No: 1727992 Routing No: 062206444 Finally, be informed that a payment instruction has been issued and forwarded to the Treasury Department of our Financier in South Africa in favor of the account above without any further prejudice. But there is no way we can approve the fund to your account without you confirming if you have changed your account for your fund to be transfer to the beneficiary Jerry Bloodworth bank account in USA. Contact me on my security email barrsamchukwurahjr@diplomats.com immediately for further clarification to know if you have giving instruction to transfer your fund to the above account today. On behalf of the entire management of United Nations, we are congratulating you in advance and if you fail to contact this office on or before 72hrs from now then we will now wire the fund to the USA account. Waiting for your urgent response Yours faithfully, Barr. Sam Chukwurah Jr. {SAN.} UN Office of Legal Affairs (Security and Investigation)

Email analysis :

NOTE : barrsamchukwurahjr@diplomats.com
NOTE : araccts@createries.com
NOTE : X-Originating-Ip : 119.75.11.70

Dianita Kambo

my name is dianita am really interested to be ur friend if you feel so contact me to my email address for my picture and further communication

kambodianita@hotmail.com

Email analysis :

NOTE : kambodianita@hotmail.com
NOTE : client-ip=65.55.111.167;

Vera Kone

Hello, I am Vera!

How are you? hope you are fine and in perfect condition of health. Please I went through your profile at (a site.com) and i read it and took interest in it, please if you don't mind i will like you to write me on this ID (verakone99@gmail.com) hope to hear from you soon, and I will be waiting for your mail because i have something VERY important to tell you.

Lots of love

Vera!.

Email analysis :

NOTE : verakone99@gmail.com
NOTE : Received : from localhost ([97.74.135.155])

NOTE : by p3plwbeout10-06.prod.phx3.secureserver.net

Happy New Month!!!

This is to inform you that we have been working towards the eradication of fraudsters and scam Artists in Africa with the help of the Organization of African Unity (OAU) United Nations (UN), European Union (EU) and FBI. We have been able to track down some scam artist in various parts of African countries which includes (Nigeria, Republic of Benin, Ghana and Senegal with cote d'ivoire ) and they are all in Government custody now, they will appear at International Criminal Court (ICC) soon for Justice. During the course of investigation, they were able to recovered some funds from these scam artists and IMF organization have ordered the funds recovered to be shared among the 10 Lucky people listed around the World as a compensation. This notice is been directed to you because your email address was found in one of the scam Artists file and computer hard-disk while the investigation, maybe you have been scammed. You are therefore being compensated with sum of ($6.9 Million) US Dollars valid into an (ATM Card Number 2354 3456 0952 4204). Since your email address is among the lucky beneficiaries who will receive a compensation funds, we have arranged your payment to be paid to you through ATM VISA CARD and deliver to your postal address with the Pin Numbers as to enable you withdrawal maximum of $5,000 on each withdrawal from any Bank ATM Machine of your choice, until all the funds are exhausted. The ATM Card with Security Pin Numbers shall be delivered to you via courier Service, depending your choice. In order to proceed with this transaction, you will be required to contact the agent in-charge ( Mr. Emeke E. Iweriebor ) via e-mail. Kindly look below to find appropriate contact information:

CONTACT AGENT NAME: Mr. Emeke E. Iweriebor
Phone Number: +229-6897-0405

You will be required to e-mail him with the following information:

FULL NAME:
ADDRESS:
CITY:
STATE:
ZIP CODE:
DIRECT CONTACT NUMBER:
OCCUPATION:

We advice you to stop all the communications with everyone regarding your payment as we have short listed to deliver to you and now urge you to comply and receive your ATM Card funds.

Thanks for your understanding as you follow instructions while I wait to hear from you today.

Yours in Services
Mr. David Fisher

Email analysis :

NOTE : atm.card11@hotmail.com
NOTE : www.info.gov@gmail.com
NOTE : Received : from [41.86.234.171] by web32105.mail.ssk.yahoo.co.jp

VERY IMPORTANT !!!

Greetings,

I am Mr.Ly Tay Seng and a personal Accountant Director with Foreign Trade Bank of Cambodia (FTB). it is with good spirit of heart i opened up this great opportunity to you A deceased client of mine that shares almost the same name as yours died as a result of heart-related condition on march 2005.His heart condition was duo to the death of the members of his family in the tsunami disaster on the 26 December 2004 in Sumatra Indonesia where they all lost their lives..{More info: http://en.wikipedia.org/wiki/2004_Indian_Ocean_earthquake_and_tsunami} There is a draft account opened in my bank in 1999 by a long-time client our bank,a national of your country.he was a CEO/a textile company owner,business man,a miner at kruger mining company here in Cambodia. he was a geologist and consultant to several other mining conglomerates operating in Cambodia,China,Taiwan,Japan,Indonesia,Pakistan,Vietnam all in Asia,before he passed away on 12th march 2005 leaving nobody as the next of kin of his account after his death. The amount in this account is currently $19,340,000 (Nineteen Million Three Hundred and Forty Thousand United States Dollars) I want to present you as a beneficiary,I will use my position and influence in our bank to make they release this money to you for us to share.If i wait for days and i do not hear from you,I shall look for another person.

Kindly get back to me for more details,

Yours sincerely
Mr. Ly Tay Seng
Board of Director
Foreign Trade Bank of Cambodia

Phnom Penh

Email analysis :

NOTE : mr.lytag.seng1954@gmail.com
NOTE : postmaster@draphic.com
NOTE : Received : from unknown (HELO User)
NOTE : (postmaster@draphic.com@175.100.60.181) by s69.coreserver.jp
NOTE : client-ip=202.172.28.70;

Attention good day;

Attention good day;

We have registered your master ATM card of ($8.5millionUSD) through DHL Delivering department after our finally meeting regarding your fund, All you will do is to contact DHL Delivering Service director Mr. Ruben Lord call +229 98781927 He will give you direction on how you will receiver your ($8.5millionUSD) Remember to send him your Full information to avoid wrong Delivering such as,

Your Name:_______________
Address: ________________
Country: _____________
Phone Number: _____________

Contact Agent Mr. Ruben Lord,
Email:: officefill890@gmail.com
Give him a call on Phone:: +229 98781927
Ask Mr. Ruben Lord what you need to do for them to deliver your Package
fund to you immediately.

Regards
John Mark

Email analysis :

NOTE : www.@peace.ocn.ne.jp
NOTE : officefill890@gmail.com
NOTE : Received : from mzkstore626.ocn.ad.jp
NOTE : (mz-ukg626p.ocn.ad.jp [153.149.212.195])
NOTE : by vcwebmail.ocn.ad.jp (Postfix)
NOTE : X-Originating-Ip : [41.74.9.27]

Revenue - Irish Tax & Customs Online Confirmation. (Irish Tax Phishing)

Revenue - Irish Tax & Customs Online Confirmation

Dear Applicant

After the last annual calaculations of your fiscal activity we have determined that you are eligible to receive tax refund 376.51 Euro To access your tax refund, please download and fill the Tax Refund Form by clicking the link below. Please submit the tax refund request and allow us 2-5 days in order to process it.

Click here to apply the form

A refund can be delayed for a variety of reasons. As example, for submitting invalid records or applying over the deadline.

Sincerely
Anthony Poole.
Irish Revenue Credit Office

Email analysis :

NOTE : usernt@skynet.be
NOTE : Received-Spf : pass
NOTE : Content-Type : text/html; charset=us-ascii
NOTE : Received : from mailrelay112.isp.belgacom.be
NOTE : (mailrelay112.isp.belgacom.be. [195.238.20.139])
NOTE : client-ip=195.238.20.139;

Phishing analysis :

CLICK : Click here to apply the form
OPEN : http://ra-glagol.ru/modules/mod_search/tmpl/nHjKiNhKo.html
REDIRECT : http://nooplobye.com/SeRyIkBxRgW/YhUpOiErtYij/KjUyHnBhJkLpKj/NhYtRkPmKgF/refund/
REDIRECT : http://www.nooplobye.com/SeRyIkBxRgW/YhUpOiErtYij/KjUyHnBhJkLpKj/NhYtRkPmKgF/refund/start.php?ip=*.*.*.*
SCREENSHOT :

Apply now and get your christmas loan urgently!

Hello !!!

Need legitimate and fast credit service?

Apply now and get your christmas loan urgently!

* Position between 5000-50000000
* Select from 1 to 30 years to cancel.
* Flexible credit terms.

All this and more, please contact us.

Full name: ..........
Phone number: .......
Monthly income: .............
Country ...............................
Loan purpose ...........
The needed amount .................
Loan Status / Duration: ...........................

Please contact us by e-mail: larrygray12@outlook.com
Best regards
Management.
Contact now the credit Speedy !!!

Email analysis :

NOTE : inter_ussh@hcm.fpt.vn
NOTE : Received : from ISP-MAILEX.HCM.FPT.VN
NOTE : (isp-mail.hcm.fpt.vn [210.245.31.131])

COMPLIMENT OF THE DAY:

PLEASE READ CAREFUL TO KNOW ABOUT YOUR COMPENSATION FUND IMMEDIATE TRANSFER APPROVED TO THE SCAM VICTIMS’

This urgent notification is coming to you from the Anti-Fraud Committee Team in collaboration with the United Nations authorities’ (UNA) in regards to the extensive raid (arrests) of Internet scammers. Due to the high rate of complain were receiving from the foreign monitoring tem on the level of Scam artists/fraudsters in Africa nation, All the Internet Service Providers had noticed the increase of E-mail traffic originating from African to other continents. Many financial institutions’ staffs were arrested so far on this note and the raid is still going on. Which we believe there are corrupt staffs plotting people’s fund with the banks / other financial institutions’ in Africa, they are using illegal processes to delete important information’s of fund beneficiary with the bank and replace it with their personal bank information in other to divert bank client fund into there own account also demanding money from the fund beneficiary which there are using to obtain the fund backup documents illegally, WITH THE HELP OF THE UNITED NATIONS AUTHORITIES: Our official investigates arrested [75] of financial staffs from different roan here in Africa which we believed that their has hand in the scam activities going on in Africa nations and some amount of money were recovered from their different bank accounts, we also found thousands of peoples E-mail addresses in the scammers victims’ mail Address-Books Which your E-mails address was found in the scammers victims’ Address book and you are to be inform that based on our recommendation/instructions by the united nations authorities [UNA] An irrevocable payment guarantee has been issued by the international monetary fund [IMF] to re-fund $700,000.00 US Dollars to each of the victims whom his / her E-mail address was found in the scammer’s contact address books which your E-mail was found in the scammers victim list to receive the approved re-funded $700,000.00 US Dollars as directed us, However, you are warned to stop any further communication with anybody concerning your unfinished transaction as from now until you swiftly confirms the approved $700,000.00 your compensation total transferred to you,

QUIRKILY GET BACK TO US WITH THE NEEDED INFORMATION’S BELOW FOR YOUR COMPENSATION FUND IMMEDIATE TRANSFER:

Your full name: ______________
Delivery address: ______
Country: _______
Occupation: _____
Phone number: ______
Age: ______
Mal or female________

A copy of your identity card or international passport / driving lenience,

Thanks
Yours
Mr. Gabriel Williams,

Email analysis :

NOTE : mr.alainnkontchou@outlook.fr

JOB OPENS

JX Holdings, Inc.

We are searching for Business Partners who can help us establish a medium of getting to our customers in America/Canada, as well as making payments through you to our head office here in chana. We are glad to offer you a job position in our Oil and Natural Gas Production Company. interested applicant should send details to our consultant office via e-mail.Further information's on this job will be sent to you in our next mail.

E-mail: jxholdingsconsultant@consultant.com

Email analysis :

NOTE : jxholdingsconsultant@consultant.com
NOTE : User-Agent : Roundcube Webmail/1.0.5
NOTE : Received : from [74.82.4.64] by wm.crrs.net with HTTP (HTTP/1.1 POST);

NOTE : Received : from wm.crrs.net (www.crrs.net [173.224.240.4])

NOTE : wm.crrs.net

NIGERIA NATIONAL PETROLEUM CORPORATION (NNPC)

ATTN

I am Dr.Maikanti Baru, Menber/Head of the contract Award committee (NNPC) in Conjuction with the office of The Group Managing Director, Nigerian National Petroleum Corporation NNPC. I am in charge of Contract Award /payments in Nigeria National Petroleum Cooperation (NNPC). My official responsibility relates to contract review and payments. Fortunately, I'm privileged to know about pending contract payments unclaimed over the years. Such pending payments are subject to further review and re-assignment, as the need arises. If I have a reliable group or company or person for such re-assignment exercise, we can proceed with the necessary machinery that can warrant payment to this new reliable party/ beneficiary. We need your understanding, interest and cooperation to realize this objective.

This reassignment will entail you making available to me the following:

1, Your company name, office and home address.
2, Your confidential phone line.
3, Your bank details, where you enjoy the confidentiality of your bankers.

Please be informed that we have pending unclaimed contract sums, ranging from US$10 Million to over a $100 Million Dollars. Please inform me in honesty the amount or volume of cash that your given account can absorb without any query or questions. Looking forward to your sincere and urgent reply through my personal e-mail, or call my direct telephone number below

Best Regard,

Dr.Maikanti Baru
Menber/Head Contract Award committee/payment
Private Email: m.baru@nnpc-nigeria-petroleum.org

Email analysis :

NOTE : m.baru@nnpc-nigeria-petroleum.org
NOTE : ghanem.f@yandex.com
NOTE : 62.210.248.53 (rdp01.snthostings.com)

NOTE : Received : from User ([127.0.0.1])
NOTE : by 62.210.248.53 with MailEnable ESMTP;

DO YOU WANT TO SELL YOUR KIDNEY? (SCAM)

Do you want to sell your kidney? Are you seeking for an opportunity to sell your kidney for money due to financial break down and you don’t know what to do, then contact us today and we shall offer you good amount for your Kidney.My name is (Dr dominiek ) am a Phrenologist in UBTH hospital . Our hospital is specialized in Kidney Surgery and we also deal with buying and transplantation of kidneys with a living an corresponding donor. If you are interested in selling or buying kidney’s please don’t hesitate to contact us via:doctor.robinson01@gmail.com

Thanks,
MANAGEMENT.

Email analysis :

NOTE : dr.dominiek02@gmail.com
NOTE : doctor.robinson01@gmail.com
NOTE : Content-Type : text/plain; charset=UTF-8
NOTE : mx.google.com

CHANGES OF BENEFICIARY

Zenith Bank Plc.
84 Ajose Street
Victoria Island
Lagos, Nigeria.
Tel: +234-80121581764

CHANGES OF BENEFICIARY

This is the second time we are notifying you about this said fund. We hereby send to you the information submitted by Mr. John T. Kehoe U.S.A of California, with an application to receive your Award Payment of $10,000.000.00.on your behalf from this bank. Please as a matter of urgency, you are required to verify the following information and inform us if you are aware or know anything about this. This morning Mr. John T. Kehoe came to the office claiming that you have instructed him to come and receive the payment on your behalf with some representatives. I have ask them to come back tomorrow as they did not provide any power of an attorney from you which will proof that you thoroughly send them, This was to enable me contact you to verify how genuine this people are to you. Firstly. Did you instruct one Mr. John T. Kehoe of 122 Fitch Way, Sacramento, Ca. 95864. whose information's is below, to claim and receive the payment on your behalf?
Secondly. Did you sign any 'Deed of Assignment' in his favor thereby making him the current beneficiary with the following account details:

Account Name: Mr. John T. Kehoe Group Ltd,
A/C #USD114-25567-8,
Bank Name: Bank Of America
Swift Code: SCBL 11K111.

Finally, you are hereby advised to indicate to this honorable Bank with immediate effect, if you are the person that instructed Mr. John T. Kehoe to come for the claim of your fund worth of $10,000.000.00. NOTE: your full name and telephone number is needed for communications. We wait for your call on +234-80121581764 and urgent respond to this bank so that you will be giving an immediate Response.

Yours sincerely,
Dr. Donald Steve Uba
Head of Operations.
Zenith Bank Plc

Email analysis :

NOTE : zenith_bankng@accountant.com
NOTE : zenithban22@gmail.com
NOTE : X-Source-Args : /usr/bin/php /home/thesgs/public_html/horta.php
NOTE : Received : from rx7808.rapidns.com ([180.149.242.133])
NOTE : X-Mailer : Leaf PHPMailer 2.7 (leafmailer.pw)
NOTE : X-Php-Script : www.thesgstore.com/horta.php for 207.244.89.108

NOTE : client-ip=180.149.242.133;

ARE YOU AWARE OF THIS CHANGE ON YOUR ACCOUNT?.

Attention Dear,

How is your health today?

We have been contacted by MR JAMES MACK in which he has informed us about your illness and the instruction you gave to him to act on your behalf as regards to the claims of your fund, it is in this respect that we decided to contact you first to find out if you are actually in the hospital and to verify if his claims that you have authorized him to receive the fund on your behalf is true as we don’t want to conclude on hearing from him alone, in this respect, if you are out of hospital, it is very important that you should contact us to confirm that you have authorized him to claim the fund on your behalf.

Below are the Bank information(s) that he has sent to us for the purpose of wiring the fund to him, thus:-

BANK NAME: CITIZENS STATE BANK
BANK ADDRESS: CEDAR AVENUE, SOUTH PITTSBURG TENNESSEEE 37380 USA
A/C NO: 57011457
A/C NAME: JAMES MACK
ROUTING NO: 064101660

NOTE: If we don’t hear from you within the next 48 hours, we will not have any other option than to proceed with his payment request as he is not aware that we have already contacted you now for this confirmation, therefore, we shall be looking forward to your prompt reply to this mail

Thanks for your understanding

Dr. Mrs. Stella Timothy

United Nations Congress on Crime
Prevention and Criminal Justice.

Email analysis :

NOTE : dr.mrs.stellatimothy@hotmail.com
NOTE : datobureau@hotmail.com
NOTE : Received : from [192.168.22.102]
NOTE : (41.85.189.162)

NOTE : by EX2010.bpo.bg (172.16.1.28)
NOTE : Received : from EX2010.bpo.bg (server.bpo.bg. [212.122.185.66])

NOTE : bpo.bg

LAWRENCE SAMS & ASSOCIATES

LAWRENCE SAMS & ASSOCIATES
SOLICITORS AND ADVOCATES
214/ GRE APPAPA LAGOS NIGERIA.
POST CODE 23401
PRIVATE EMAIL: ( lawrencesams.assoc010@gmail.com)

Complements!!. firstly, I must apologize for barging into your mailbox without a formal introduction of myself to you.

Actually, I got your contact information from a reputable business/professional directory of your country which gives me assurance of your legibility as a person while trying to get a good and capable business person in your country for both business and investment purposes. Let me start by introducing myself; I am Barrister LAWRENCE SAMS (Esq.) I was the Personal Attorney to late Mr. Morris Thompson an American who was a private businessman in my country unfortunately lost his life in the plane crash of Alaska Airlines Flight 261 which crashed on January 31st 2000, including his wife and only daughter. Before the plane crash, Mr. Morris Thompson made a deposit value of US$ 20,000,000.00 (TWENTY MILLION UNITED STATE DOLLARS) in the STANDARD TRUST BANK OF NIGERIA Upon maturity several notice was sent to him, another notification was sent and still no response came from him. I later found out that Mr. Morris Thompson and his family had been killed in that plane crash. After further investigation it was also discovered that Mr. Morris Thompson’s next of kin was his daughter who died with him in the crash. What borders me most is that according to the laws of my country at the expiration of 8 years the funds will revert to the ownership of the NIGERIA GOVERNMENT, if nobody applies to claim the funds. Against this backdrop, my suggestion to you is that I will like you as a foreigner to stand as the next of kin to Mr. Morris Thompson so that you will be able to receive these funds for both of us. WHAT IS TO BE DONE? I want you to know that I have had everything planned out so that we shall come out successfully. As a barrister, I will prepare the necessary document that will back you up as the next of kin to Mr. Morris Thompson. PLEASE YOU HAVE TO PROVIDE YOUR FULL INFORMATION SUCH AS STATED BELOW,

[1] NAME:
[2] ADDRESS:
[3] AGE:
[4] SEX:
[5] TELEPHONE:
[6] FAX:
[7] OCCUPATION STATUS:

Also be informed that this Transaction will take us just 15 working days to accomplish beginning from when I receive your Data’s. After you have been made the next of kin, I will also file an application to the bank on your behalf as soon as I secure the necessary approval and letter of probate in your favor for the movement of the funds to an account that will be provided by you. This process is 100% risk free as I have set out all the modalities to see that a legalized method is used because then I will prepare all the necessary documents. Please note that utmost secrecy and confidentiality is required at all times during this transaction. Once the funds have been transferred into your nominated bank account we shall share in the ratio of 55% for me, 45% for you. I will prefer that you reach me via this email address: ( lawrencesams.assoc010@gmail.com)

Your earliest response to this offer will be appreciated

Best Regards
Barr. LAWRENCE SAMS

Email analysis :

NOTE : lawrencesams.assoc010@gmail.com
NOTE : postmaster@babadeal.com
NOTE : Received : from User ([96.32.240.218])

NOTE : by home with MailEnable ESMTP;

For Humanitarian work

Hi,

It is good writing you today although we haven't known nor met each other before. My name is Mrs. Anna Blanchard. I was married to late Mr. William Blanchard who Based in Ivory Coast as an Investor for a period of 19 years. He left some amount of $4,500,000.00 with a financial institution in Cote D'ivoire. Recently, my Doctor told me that I might not live for more than Eight months from now due to my cancer illness.

Having known my condition I decided to donate this fund to an organisation or good person that will utilise it for the benefit of the less previledged. Using part of it to establish businesses that will create job opportunities for the jobless population is also a good idea. Any delay in your reply may give me room to search for another good person for this same purpose. May GOD bless you.
Yours sincerely,
Mrs. Anna Blanchard

Email analysis :

NOTE : annabl.banchard@yahoo.com
NOTE : theatredeprivas@theatredeprivas.com
NOTE : Received : from rvl-mail01.rhoval.fr (rvl-mail01.rhoval.fr [193.37.150.15])
NOTE : by ipg-rotate-mail001.ipgarde.net (Postfix)
NOTE : Received : from User (63.55.235.37.in-addr.arpa [37.235.55.63])

NOTE : by rvl-mail01.rhoval.fr

1st Page Ranking On Google

Hello,

Hope you are well.

We have a SEO Discount Offer going for the following package: -

Monthly Task and responsibilities: -

1. 10 Directory submissions
2. 10 Social Book marking Submissions on High PR bookmarking sites
3. 1 Article Submission on High PR Article Site (1 article of 450 words)
4. Article Promotion on 10 High PR Sites
5. 1 Press Release Submission (1 press release of 500 words)
6. 10 Search Engine Submissionsper month
7. 1 Blog creation of High PR blogging site
8. 1 Blog Submission (1 blog of 300 words)
9. Blog Promotion on 10 high PR sites
10. 10 Classified Submissions on high PR Classified sites (From 2nd month onwards)
11. 5 Video Submissions and Video Promotion (if provided by client)
12. 1 PDF Creation and Submission to high PR PDF site.
13. PDF Promotion on 10 High PR Sites
14. 1 Business PPT Creation
15. PPT Submission on high PR PPT Sharing Sites
16. PPT Promotion on 10 High PR Sites
17. Image Sharing on high PR Image Sharing Sites (From 2nd month onwards)
18. Google Local Listing
19. Business Listing
20. Website Analysis Report
21. Keywords Analysis Report
22. Competitor Analysis Report
23. Heading Tag Optimization (H1 and H2 etc)
24. Remove Canonical Issue
25. Keyword Density Check
26. Title Tag Optimization
27. Meta Tag Optimization
28. Keywords Tag Optimization
29. Image Alt Tag Optimization
30. Anchor Tag Optimization
31. Content Optimization
32. Robots.txt Optimization
33. XML site map and Submission in webmaster tool
34. HTML Site Map
35. Urllist.txt for Yahoo and Bing also
36. Set up Google Webmaster Tool
37. Set up Google Analytics Tool
38. Yahoo Webmaster Tool and Bing webmaster.
39. Facebook Profile Creation
40. Facebook Profile Promotion
41. Twitter Profile Creation
42. Twitter Profile Promotion
43. PInterest Profile Creation
44. PInterest Profile Promotion
45. Google Plus Profile Creation
46. Google Plus Profile Promotion
47. SEO Recommendations Report

Thanks
Mukti Bharti

Please let us know in case you are really interested. If possible please share your website and keywords

Email analysis :

NOTE : salesmuktibharti@hotmail.com

Dear Customer:

Dear Customer:

The WoodForest National Bank Ohio controlling department controlling of the security transfer CODE which is (WF/200/105/09), the Authentication section code of this bank concludes the verification of your file. After going through all the documents of claim received by this department with justification and verification from the global strategy United States we are completely satisfied and you have been confirmed. The WoodForest National Bank concerning wire transfers of your funds. Your letter has been referred to the (JMCB) Legal Division for Funds (US$17.5 Million Dollars) Transferred code. (WF/200/105/09). We are satisfied using Electronic Wire Transfer or Swift Wire Transfer and the rights and liabilities of using of electronic and Swift fund transfer systems are defined by the Electronic Fund Transfer Act. The regulation, however, which implements this statute, 12 C.F.R. Part 205, Regulation E. specifically states that its provisions are inapplicable to a situation such we must ensure your Funds Transferred to your destination Bank Account between 10 hours. Considering the volume of your payment, it is right for us to seek for the approval of some money regulatory Boards here in United States before we can carry out the Transfer of an amount of such magnitude to anybody, otherwise any such transfer will be stopped by the Authorities of WoodForest National Bank, and the International Monetary Fund (IMF), since your Transfer is Electronic Transfer or Swift Wire transfer is almost activated with our bank and the only thing holding the final activation of your Account are some certain Approval Documents from the concerned Authorities here in United States, and for that reason, you are required to pay the Sum of $159 as this money will be used by our Bank Attorney to Obtain all the necessary documents that will enable the final activation of your Funds. WoodForest National Bank hereby state officially that the required payment will remain the only and final monetary obligation required from You prior to the final transfer of your funds, hence any further charges will be our bank's full responsibility till final transfer of your payment is made to your bank account. We awaits your urgent response to obtain the remaining documents through our bank Attorney, kindly send the funds directly to our attorney in ( Park Drive Dobson, NC) with information below through western union money transfer or money gram money transfer:

Receivers Name : Jerry C Pratt.
Address: Windsor Park Drive Dobson, NC,USA
Text Question: Good
Answer: Good
Amount to send $359
Sender's name...
Mtcn

After sent the money kindly fill the below details for pick up"

Mtcn Number. . .
Sender's name. . .
Sender's address. . .

In respect you are inquiring to pay Wire Transfer Electronic Transfer charges ($359) or Swift transfer ($359) [BANK B], under section 47- 4A302 of US law WoodForest National Bank, a depository institution which wire transfers funds may not deduct any fees for handling the wire transfer from the amount of money which is to be transferred to your provided Bank Account The fastest Wire Transfer is Electronic Transfer which only takes just 3 hours to reflect in Account, and Swift Wire transfer takes 5 hours to remit. You are require to get back to me if you are pleased with the Banking rules for more information on how to make any of your choice Wire Transfer for your Funds ($17.5 Million) Wire Transfer processing to commence as soon as possible. This law is stated according to section 35 and 36 of the banking sector interaction realm of our constitution and the outside world. Based on article of association and memorandum of association, the Chase controlling agency of United States and your happiness suits our stand and we will make sure that your fund is fully endorsed to your bank account as soon as you have comprehended with our instructions.

NB: THIS TRANSACTION IS BEING MONITORED BY THE UNITED STATES GOVERNMENT IN ORDER TO GUARDS US FOR INTERNET IMPOSTORS.

(Designated bank account details for Electronic Transfer to avoid mistake or should in case you created a new account)

Bank Name and Address. .
Account Number:
Account Name:
Routing Number:

If at any time you have questions, concerns or comments, please contact us as we strive to ensure that you will always receive a prompt and courteous attention.

Thank you for giving us the opportunity to serve your banking needs.

Yours sincerely,
Robert E. Marling Jr.
mg.onlinepayment@gmail.com
Chairman, Chief Executive Officer,
Chief Executive Officer of Woodforest National Bank
And Director of Woodforest National Bank

Email analysis :

NOTE : mdrazale@gmail.com
NOTE : mg.onlinepayment@gmail.com

NOTIFICATION OF CREDIT FROM Federal Reserve Board New York

Federal Reserve Board New York
33 Liberty St, New York, NY 10045, United States
Email: ( dr.janetyellen@zoho.com)

NOTIFICATION OF CREDIT FROM Federal Reserve Board New York

Attn: Beneficiary,

Based on our finding in this investigations department we wish to warn you against some Miscreants, Hoodlums and Touts who go about scamming innocent people by claiming to be who they are not and thereby tarnishing the image of this wonderful country.

Instruction was given to us by the Office of the Presidency ,United Nations (UN) and (IMF) to transfer your overdue fund through International ATM Debit/Master Card which you can use it in any cash point, shopping mall or banking.

You can withdrawal money from your International ATM Debit/Master Card from any ATM MACHINE location or center of your choice/nearest to you, in any part of the world. You are advise to reconfirm your address where Diplomatic Courier service will dispatch your ATM Card to you within 48hrs.We Have Been Mandated By The ECOWAS Parliament To Issue Out $10.5 Million As Part Payment For This year 2016. Also For Your Information, You Have To Stop Any Further Communication With Any Other Person (S) Or Office(S) To Avoid Any Hitches In Receiving Your Payment.

1. Your full Name:
2. Delivery Address:
3. Your direct Tel, Cell:
4. A copy of your ID or ID numbers for Identification:
5. Nearest Airport:

Finally, this is very urgent and important the bank are waiting to hear from you right away today, Bear in mind that the tracking number of your parcel will be given to you immediately the Processing charge and Stamp fee is received to avoid any immediate STOP ORDER from the United Nation office.

Note That Because Of Impostors, We Hereby Issued You Our Code Of Conduct, Which Is (ATM-110) So You Have To Indicate This Code When Contacting The Card Center By Using It As Your Subject.

The Bank Wait For Your Expedite Response.

Thanks and God bless you.,

Dr. Janet Yellen
Chairman Federal Reserve Board New York
Federal Reserve Board New York
Email: ( dr.janetyellen@zoho.com)

Email analysis :

NOTE : dr.janetyellen@zoho.com
NOTE : sureshjain@iprimus.com.au
NOTE : X-Originating-Ip : [41.58.192.184]

NOTE : User-Agent : Roundcube Webmail/1.2.1

Antwort Sehr Wichtig

Liebste Freundin (Spende)

Ich schreibe Ihnen in gutem Glauben und in der Hoffnung, dass Sie die Bedeutung meiner E-Mail verstehen werden. Meine Entscheidung, mit Ihnen in Verbindung zu treten, ist, weil ich vor kurzem mit Krebs diagnostiziert worden bin und der Doktor sagte, dass ich weniger als 6 Wochen zu leben habe. Da diese plötzliche Nachricht mir bekannt gegeben wurde, habe ich über mein Leben in der Vergangenheit nachgedacht. Es ist schmerzhaft, dass wir nach über 24 Jahren friedlicher Ehe mit meinem verstorbenen Ehemann kein eigenes Kind hatten, das unsere zahlreichen Reichtümer erben wird.

In der Vergangenheit habe ich für die Opfer des Erdbebens in Haiti und vor kurzem für die gleichen Opfer in den Philippinen, Japan und Thailand vernünftige Spenden gemacht. Jetzt, da sich meine Gesundheit allmählich verschlechtert, kann ich das nicht mehr alleine durchführen. Ich wünsche mir, die Armen und Bedürftigen zu erreichen, aber ich würde es vorziehen, dies mit der Hilfe einer freundlichen Person fortzusetzen.

Ich möchte, dass Sie die folgenden Fragen beantworten: (1) Sind Sie ein Gott fürchtender Mensch? (2) Wenn ich spende (12,5 US-Dollar) Zwölf Millionen fünfhunderttausend US-Dollar an Sie, können Sie in der Lage, es klug nutzen, um mein Herz begehren zu unterstützen arme Menschen um Sie herum zu erreichen? (3) Werden Sie eine Wohltätigkeitsstiftung im Namen meines Mannes öffnen und 1? Bitte antworten Sie mir so bald wie möglich.Private E-Mail: (gloriajoh1@gmail.com)

Hochachtungsvoll.

Frau Gloria Johnson

Email analysis :

NOTE : gloriajoh1@gmail.com
NOTE : Received : from [41.71.190.218] ([41.71.190.218])

NOTE : (authenticated bits=0) by mail.nges.chc.edu.tw (8.15.2/8.15.2)

abandoned shipment

ATTENTION:

I am David Wilson Head of Inspection Unit United Nations Inspection Agency in Harts field-Jackson International Airport Atlanta, Georgia. During our investigation, I discovered An abandoned shipment through a Diplomat from United Kingdom which was transferred from JF Kennedy Airport. To our facility here in Atlanta, and when scanned it revealed an undisclosed sum of money in 2 Metal Trunk Boxes weighing approximately 110kg each. The consignment was abandoned because the Content was not properly declared by the consignee as money rather it was declared as personal Effect/classified document to either avoid diversion by the Shipping Agent or confiscation by the relevant authorities.

The diplomat's inability to pay for Non Inspection fees among other things are the reason why the consignment is delayed and abandoned. By my assessment, each of the boxes contains about $4M or more. They are still left in the airport storage facility till today. The Consignments like I said are two metal trunk boxes weighing about 110kg each (Internal dimension: W61 x H156 x D73 (cm) effective Capacity: 680 L) Approximately. The details of the consignment including your name and email on the official document from United Nations' office in London where the shipment was tagged as personal effects/classified document is still available with us. As it stands now, you have to reconfirm your Full name, Phone Number, full address so I can cross-check and see if it corresponds with the one on the official documents.

It is now left to you to decide if you still need the consignment or allow us repatriate it back to UK (place of origin) as we were instructed. Like I did say again, the shipper abandoned it and ran away most importantly because he gave a false declaration, he could not pay for the yellow tag, he could not secure a valid non inspection document(s), etc. I am ready to assist you in any way I can for you to get back this packages provided you will also give me something out of it (financial gratification). You can either come in person, or you engage the services of a secure shipping/delivery Company/agent that will provide the necessary security. That is required to deliver the package to your doorstep or the destination of your choice. I need all the guarantee that I can get from you before I can get involved in this project.

Sincerely,

David Wilson,

Head Officer-in-Charge,

Email analysis :

NOTE : mrdavidwilson39@gmail.com
NOTE : mrdavidwilson011@info.com
NOTE : User-Agent : RoundCube Webmail/0.9.2
NOTE : Message-id < *@ial.sp.gov.br >