Payment Notification, (Western Union Scam)

Dear Western Union Customer,

You have been awarded with the sum of $360,000.00 USD. in the western
union money transfer program s one of our customers who use Western
Union in their daily business transaction,Please provide Mr.Dennis Woods
with the following details below so that your fund will be remitted to
you through Western Union Transfer.

(1)Names:
(2)Address:
(3)Phone Number:
(4)Sex:
(5)Age:
(6)Country:
(7)Occupation:

Mr.Dennis Woods
(Western Union Online coordinator)
E-mail: wu.moneytransfer_online1117@live.com
(Help Line: +254-7801-02173)

As soon as these details are received and verified, your
fund will be transferred to you. Thank you, for using
western union.

Email analysis :

NOTE : ECOLE MATERNELLE PUBLIQUE ROBERT DEBRE - SAINT-LOUIS
NOTE : ce.9740750X@ac-reunion.fr
NOTE : wu.moneytransfer_online11@msn.com
NOTE : Received : from [172.31.186.125] (Forwarded-For: 154.123.121.136)

NOTE : by store1.in.ac-reunion.fr (mshttpd);
NOTE : Received : from ac-reunion.fr (store1.ac-reunion.fr [172.31.186.61])

NOTE : by smtpout2.ac-reunion.fr (Postfix)
NOTE : client-ip=195.98.231.113;
NOTE : @educationfrance : Western Union Scam relayed from ce.9740750X / ac-reunion

FWD:RE (Phishing Société Générale)

En ce qui concerne les informations relatives à votre compte bancaire:
Cher client:

Notre systeme a detecte que vous n'avez pas active Pass securite (Societe Generale):

Decouvrez Le Pass Securite

Afin de prevenir l'utilisation frauduleuse des cartes bancaire sur Internet, Societe Generale est dotee d'un dispositif de controle des paiements. Ce service est entierement gratuit.

Cliquez ici Pour activez ce service

Merci pour choisire SOCIETE GENERALE!

Copyright ©2017 Societe Generale. Tous droits réservés.
Numéro d'immatriculation FSASociete Generale: 226056.

Mon compte
Téléphone
Facebook
Instagram
Twitter
Pinterest
Youtube
Magazine

MENTIONS LÉGALES
PROTECTION DES DONNÉES
CGV

SE DÉSINSCRIRE DE LA NEWSLETTER

Phishing screenshot :

Email analysis :

NOTE : kaizenqm@telus.net
NOTE : Cmm-Sender-Ip : 209.171.16.90

NOTE : X-Mailer : Zimbra 8.6.0_GA_1211 (zclient/8.6.0_GA_1211)
NOTE : Received : from mtlp000003.email.telus.net ([172.20.100.250])

Phishing analysis :

CLICK : Cliquez ici Pour activez ce service
OPEN : http://kombiringen.se/wp-content/theme/
REDIRECT : http://www.goingesten.se/wp-content/theme/
REDIRECT : http://www.goingesten.se/wp-content/theme/*/service.php?*

RESULT : Phishing Société Générale

Votre-Paiement-En ligne (Phishing attempt)

Bonjour,

Afin de prévenir l'utilisation frauduleuse des cartes bancaires Internet,

Votre Service Générale, est dotée d'un dispositif de controle des paiements.

Ce service est entierement gratuit Notre Systeme a detecte que vous n'avez pas active -Pass-Service-sécurite

Service sécurite

Banque-Générale

Nous vous remercions de votre Confiance.

Cordielement

Email analysis :

NOTE : INFO@news.promovacances.com
NOTE : Received : by footcenter.fr (Postfix, from userid 33)
NOTE : Received : from footcenter.fr ([165.227.79.193])
NOTE : X-Php-Originating-Script : 0:nel.php
NOTE : Message-Id : < *.*@footcenter.fr >
NOTE : Votre-Paiement-En ligne

Phishing screenshot :

Phishing analysis :

CLICK : Service sécurite
OPEN : http://sirlwad.gear.host/s52.html
SCREENSHOT :

RESULT : Phishing attempt.

Information about this phishing

SCRIPT : nel.php
HACKED RELAY : footcenter.fr
OPEN REDIRECT : sirlwad.gear.host
SPOOFED EMAIL : INFO@news.promovacances.com
PHISHING : Société Générale

Camelot

You have Won $680,000

Email analysis :

NOTE : camelot.group@gmx.co.uk
NOTE : Received : from [192.168.0.100] (unknown [43.240.7.1])

NOTE : by spamwall.quilmes.gov.ar (Postfix)
NOTE : Received : from spamwall.quilmes.gov.ar
NOTE : (spamwall.quilmes.gov.ar. [190.120.191.6])

NOTE : The quilmes.gov.ar server was hacked to relay this scam.
NOTE : @QuilmesMuni was contacted

Urgent sunTrust Confirmation

We have updated your contact information

For details about what changed, sign on to Messages and Alerts. To view the updates, or make additional updates, sign on to update your contact information.

1. If you did not make this request online, by phone, or at a Suntrust store, please sign on immediately . We are available 24 hours a day, 7 days a week.

Please update and verify your information by clicking the link below:

To view the updates

If your account information is not updated within 72 hours then your ability to access your account will become restricted.

Fraud Prevention Unit
Legal Advisor
Suntrust Bank

Email analysis :

NOTE : spam@petofisopron.hu
NOTE : Received : from [205.209.150.138] (205.209.150.138)

NOTE : by psrv01.petofisopron.hu (192.168.0.3)

Phishing analysis :

CLICK : To view the updates
OPEN : http://deliaujica.com/css/images/sunTrust/sun/validation/
RESULT : Phishing was removed.

Agence ClientèIe SBE : RappeI (Phishing Bred)

Cher(e) Client(e),

Votre conseiller vous informe que vousiavezireçuiunimessageoimportant

conçernantivotreiE-Code.

tVotre accès en ligne

Cordialement
Votre Banque

ic

Email analysis :NOTE :

NOTE : laempresadelexito.com@emails.afm-telethon.fr
NOTE : laempresadelexito.com
NOTE : X-Php-Originating-Script : 0:tmsir.php
NOTE : Received : by emails.afm-telethon.fr (Postfix, from userid 33)
NOTE : Received : from emails.afm-telethon.fr ([165.227.14.87])
NOTE : emails.afm-telethon.fr@emails.afm-telethon.fr

Phishing screenshot :

Phishing analysis :

CLICK : tVotre accès en ligne
OPEN : http://laempresadelexito.com/BredEcode
REDIRECT : http://www.metaltripshop.com/metaltripshop/app/code/community/Mage/Sales/Model/Convert/Model/brlogin/brlogin/*/
SCREENSHOT :

VALIDATE : FORM
REDIRECT : http://www.metaltripshop.com/metaltripshop/app/code/community/Mage/Sales/Model/Convert/Model/brlogin/brlogin/*/phone.php?tok=*
VALIDATE : FORM
REDIRECT : http://www.metaltripshop.com/metaltripshop/app/code/community/Mage/Sales/Model/Convert/Model/brlogin/brlogin/*/sms.php?tok=*
VALIDATE : FORM
REDIRECT : http://www.metaltripshop.com/metaltripshop/app/code/community/Mage/Sales/Model/Convert/Model/brlogin/brlogin/*/done.php?tok=*
REDIRECT : https://www.bred.fr/index.html

Conclusion :

Victim : BRED
Spoofed service : emails.afm-telethon.fr
Location of the Open redirect : laempresadelexito.com
Location of the Phishing : metaltripshop.com

Cancelled: Hello Dear (Email leak)

This event invitation was sent from Yahoo Calendar

Email leak :

jo.robinson@vbase.co.nz hayley.mckay@vbase.co.nz janelle.frost@vbase.co.nz valerie.sisson@vbase.co.nz daniel.chee@vbase.co.nz jane.crampton@vbase.co.nz peter.maddock@vbase.co.nz caroline.whittaker@vbase.co.nz laurie.frankcom@vbase.co.nz mark.meyer@vbase.co.nz christian.barbier@vbase.co.nz christian.barbier@nccnz.co.nz amanda.fairbairn@nccnz.co.nz williambabcock@bnj.com cameron@glengarry.net campbellh@sensato.com glengarry@scot89.freeserve.co.uk loglinecontest@gmail.com howardbusservice@ripnet.com jnlarocque@hmnet.net jim.devlin@coachcanada.com claude@sleep.winthrop.org owner-bcr-l@bcr.org lucy-fryish@hotmail.com jillaroo@hotmail.co.yk gemmelldr@btinternet.com acw26@st-andrews.ac.uk cjw11@st-andrews.ac.uk gracemcbride@virgin.net bruce.macnab1@btinternet.com lynnkidd@glenaray.f2s.com derry.barton@blueyonder.co.uk ajohnston@shinty.com allanmacleod@shinty.com s0347230@sms.ed.ac.uk ti66c@p6isti6a.dyo sales@glengarry.co.nz celticpublicity@gmail.com 4zeke@wrteme.com ryan@eroi.com macsnest@mnsi.net simonwillans@hotmail.com pegstew@ibm.com mirandamulholland@gmail.com info@nviro.com rjf@radiks.net fbjjnunn@netscape.net christinametrose@yahoo.com asawyer@cwfcof.org mumford@cadvision.com gca1@cornell.edu thebigape2000@hotmail.com kee_empire@hotmail.com election@electionprediction.org selwynmac@telus.net ken.steffenson@telus.net shannajones@charter.net linguaphile@wordsmith.org drumfest06@masamba.com andy@andyfilius.com information@tartangift.co.uk kdkopple@bellatlantic.net potters54@comcast.net vmconnell@vonrollwti.com heaven@funcow.com hw15@juno.com comcat@woosh.co.nz sales@nzcleanskinwines.co.nz martinc@planetwine.co.nz wineonjervois@xtra.co.nz info@roadworks.co.nz bpedaci@tickets.com aalbers1@sbcglobal.net ggarim@yahoo.com bronwyn.dodson@tianz.org.nz nicki.vanasch@tianz.org.nz fiona.morris@tianz.org.nz angela.h@peek.co.nz info@tianz.org.nz soonerfann@cox.net ohiostate521979@yahoo.com info@australindtravel.com greenleaves@bigpond.com sales@jetset-belmont.co bredmond@gmail.com margaret.harvey@btinternet.com jessmcleod@nzhouseofwine.com contact@vinsdumonde.com theglengarrybhoys@yahoogroups.com reservations@bwglengarry.com shop@sandygroup.com torino@nt.net susie_thomson@prinz.org.nz fluidfx@wi.rr.com webmaster@brigadeaustralia.org peter.wiseman@intecbilling.com carsonchisholm@hotmail.com under@2world.com info@aussiemoot.com rrc.regactivities@sydneynorthscouts.com rovers@sydneynorthscouts.com imacmill@interlog.com ncimino@hotmail.com info@edfilmfest.org.uk contact@kosb-berwick-branch.co.uk contact@kosb-edinburgh-branch.co.uk kathleenweetman@hotmail.co.uk shuggie1999@hotmail.com jmichaelhamilton@hotmail.com bjls@heaneyb.fsnet.co.uk crap@sydneynorthscouts.com pearcey_sico@msn.com blokes@razorbackrovers.com apriledwards39@hotmail.com boagies@branchball.nswrovers.com info@streamwave.com wgustafson@adwilliams.com ralston@macdonnellgroup.com ejmartin@mgcl.net lutkevich@pbworld.com p.burden@stonyplain.com orite@bobcat.ent.ohiou.edu stayabji@ctlgroup.com simeonsamba@gmail.com 0535583@student.ul.ie katharine.hoskyn@xxx.xx.xx diannashipman@xxxxxxxx.xxx.xxx sales@henhousedesigns.com glengarry@glengarrybooks.co.nz oqp-subscribe@yahoogroups.com tim@timdawsn.demon.co.uk enquiries@obersvatorypitlochry.com sales@guideposthotel.net sales@dubrovnik.co.uk info@midland-hotel-bradford.com enquiries@parkgrovehotel.co.uk newbeehiveinn@talk21.com raymogood@yahoo.co.uk info@thewhitcliffehotel.co.uk enquiries@glengarryhouse.com admin@umiversal-arts.com admin@universal-arts.com cmhanat@interlog.com cmhasim@bconnex.net dmeurkes@cmhakent.com cmhaelgn@elgin.net cmha@jam21.net cmhagb@bmts.com cmha@kwic.com cmhahalton@interhop.net cmha@cyg.net cmhstaff@adan.kingston.net general@cmha.sarnia.net londoncmha@golden.net cmhanip@onlink.net cmhaottawa@globalserve.net cmhaoxf@execulink.com cmhanpar@interlog.com cmha@accel.net cmhsdgpr@cnwl.igs.net mqcmha@cyberbeach.net cmhatb@norlink.net cmhatmsk@nt.net cmhavcb@nexicom.net megan_willmann@wayne.edu hiltonps@world.net qtrmileprincess@yahoo.com starry1ca@hotmail.com greenbrier@thegreyhavens.zzn.com tripleplay204@hotmail.com

NOTE : toshibazenmate6789@yahoo.com
NOTE : Received : from [127.0.0.1] by ec05.unp.bf1.yahoo.com

RE: ATM

You can hack and break into any bank's security ATM Machine without carrying guns or any weapon. How is this possible? First of all we have to learn about the manual hacking of ATM MACHINES and BANKING ACCOUNTS HOW THE ATM MACHINE WORKS. If you have been to the bank you find out that the money in the ATM MACHINE is being filled right inside the house where the machine is built with enough security. To hack this machine, We have develop the special blank ATM Card which you can use in any ATM Machine around the world. this card is been programmed and can withdraw 8,000 within 24 hours in any currency your country make use of there is no ATM MACHINES this BLANK ATM CARD CANNOT penetrate into it because it have been programmed with various tools and software before it will be send to you. The card will make the security camera malfunction at that particular time until you are done with the transaction you can never be trace. it also has a technique that makes it impossible for the CCTVs to detect you, there are so many other hacker out there whom claim to be real you have to be very careful they can never create this card all they want is your money. no ATM card can be able to withdraw 50,000USD each day that is impossible, getting the card you will forward the company your address details so we can proceed to send the card to you once you agree to the terms and conditions. you can contact us on email now at: ATM.smartcardcenter2017@hotmail.com

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Email analysis :

NOTE : ATM.smartcardcenter2017@hotmail.com
NOTE : 049unaj@tjpa.jus.br
NOTE : Unaj da Comarca de Santa Izabel
NOTE : X-Originating-Ip : [177.125.100.114]

Finance loan 3%.

Attn:

We offer variety of finance including: Personal loan, Home loan, Debt Consolidation loans, Car loans, agricultural loan, business loans and company loans at 3.00% interest rate per annual and it is fixed. Please contact us via email: cfunding988@gmail.com for more info

(1)Full Names:
(2)Country:
(3)Loan Amount):
(4)Loan duration:
(5)Phone number:
Sign
Management.

Email analysis :

NOTE : cfunding988@gmail.com
NOTE : 57019800@mylife.unisa.ac.za
NOTE : X-Originating-Ip : [41.247.195.72]

TREAT AS UTMOST IMPORTANCE.

From the office of the Branch manager
Hawaii National Bank
Main branch
45 north king street Honolulu, HI 96817
United States of America.
Email: hnbnk.mb@gmail.com
Monday -Thursday 8am-4pm
Friday 8am-5pm

We received instruction from ECOWAS financial authorities in charge of debt reconciliation/compensation to remit the sum of $1.9m to you. Kindly confirm your photo ID and reconfirm your personal details as stated below to enable us start the processing immediately.

1 Your full name:
2 Your present contact address:
3 Your telephone & Fax numbers:
4 Your Occupations/age/sex:
5 Your Private/alternative Email Address:

Your prompt response will enable us effect a quick release .

CONGRATULATIONS.

Joe Yit
Branch Manager
Hawaii National Bank

Email analysis :

NOTE : hnbnk.mb@gmail.com
NOTE : Received : from [127.0.0.1]
NOTE : (helo=User) by ct.stormnet.co.za with smtp (Exim 4.76)
NOTE : client-ip=209.203.29.154;

Personal loan (Email leak)

Hello ,

Do you need a personal loan or a business loan to start up a business of your own? We offer loans to all in need at very low interest rate 5% we would be able to give you any amount you want, contact us now for more information (financial1group@gmail.com )

http://www.amcp.org/AboutUs.aspx?id=8821

Screenshot of the scam :

Email leak (391 emails) :

Cia_takim@gmx.de, Ciaranc666@Gmail.Com, Cijayhd@gmail.com, Cimmern@hotmail.com, Cinderellasoulmates@gmail.com, Clarencewistock@yahoo.com, Clashnlash@gmail.com, Clivecornwall83@gmail.com, ClockFaceContact@gmail.com, CoRvali_2024@guildzmail.com, Code.Monkey78@gmail.com, Codenlilly@hotmail.co.uk, Cody@techcodesupport.com, Coka.In@gmx.net, Coline0404@icloud.com, Colviniphone@gmail.com, Communitywebtech@gmail.com, Conformityntomorte@gmail.com, Connie.Lane489@yahoo.com, Connor.henderson@gmail.com, Consigliereco@gmail.com, Contact@WEBSITEHOSTINGOVERVIEW.COM, Cool.smiley@me.com, Cooldline@gmx.de, Corazan00@hotmail.com, Coreyjreed@msn.com, Cornelius.Munson@gmail.com, CorneliusHarder@gmail.com, Cory0401@stcloudstate.edu, CouldBeJesus@yahoo.com, Courtneyalexanderdds@yahoo.com, CptDylanHuntSystemsCommonwealth@yahoo.com, Craig.Jones2006@blueyonder.co.uk, CraigFWhite@armyspy.com, Cramzta@hotmail.com, Crashppm@gmail.com, CrazyMenConnected@gmail.com, Crazyman323@hotmail.com, Crazyyahoohead@gmail.com, CreationLeader@yahoo.co.uk, Creed_Bratton@email.com, CronoOB@gmail.com, Cuervo2998@gmail.com, Cujo20001us@yahoo.com, Cukr01@gmail.com, Cullen.1996@mail.ru, Curchofblessedtrinity@gmail.com, Curphpistachio@yahoo.com, Cwilson16856@gmail.com, CypherBotX@yahoo.com, Cypherhawk@live.com, Cyril.rosewood@gmail.com, D.BarnesMordant@googlemail.com, D.DuJaque@gmail.com, D.sumadija@gmail.com, D3xterity@live.nl, D6D6D5@gmail.com, DARKTITANK@YAHOO.COM, DBaggs@bagnoli.co.uk, DDY9121@YAHOO.COM, DGQuattro@gmail.com, DGTalSoul@gmail.com, DILLON.CAMPBELL25@GMAIL.COM, DILPAK11@AYHOO.COM, DIRECTR@GMAIL.COM, DJ.BUTLER@xtra.co.nz, DJJOSH@HOTMAIL.ES, DJT@Trumporg.com, DJonesLamont45@gmail.com, DOBRACHI@OUTLOOK.COM, DONIAALI85@YAHOO.COM, DONNAKEYBONKER@GMAIL.COM, DORINU76@LIVE.COM, DRSTEVEPD@GMAIL.COM, DTechtnzl@gmail.com, DTvampire@live.com, DUpedAL@hotmail.com, DWHampshire@gmail.com, DaHunter@sogetthis.com, DaNyiTaLiAnU@gmail.com, Daan5481@hotmail.com, Dagamand@gmail.com, Dagoldman123@gmail.com, Dahg.Hieyyt@gmail.com, Daian_Style@web.de, Daily0023@gmail.com, Dalepatrick1@outlook.com, Dallas.DeMarr.310@gmail.com, Dallowlucran@gmail.com, Dalton_Michaels@hotmail.com, Damian07PT@gmail.com, Dammiga_tofflan@hotmail.com, Damnjoshawadamn@aim.com, Damon@open.by, Dan.Sk3lton@googlemail.com, Dan.the.smelly.man@gmail.com, Dan_McEntaffer@yahoo.com, Daniel.Fox73@hotmail.com, DanielNicklasson@hotmail.com, DanielTYoung62@gmail.com, Danielsdavid028@gmail.com, Danieltubb@live.co.uk, Danls92_iPTF@yahoo.com, Danny_Lee2000@yahoo.com, Dannyvaeskalkman@gmail.com, Dano_the_boy@yahoo.com, Danso11.ed@gmail.com, Daria919@mail.ru, DariusLGrant@protonmail.com, DarkAlchemist@hushmail.me, DarkMaster.ScL@gmail.com, DarkRyder3018@gmail.com, Dark_knigth20009@hotmail.com, Darkmaus20032003@gmail.com, DarknessX@windowslive.com, Darksyder1@gmail.com, Darrensateen@gmail.con, Darrensateen@hotmail.com, DarrinJMoret@mail.com, Darrinm@aol.com, Daryan.snake@hotmail.com, Dasitya@hotmail.com, Datch@tempmail.it, Datcubanboiberto@aol.com, Dav49@live.com, DaveMcDave@spidey.me.uk, Davetaylor696969@gmail.com, David-beer@hotmail.com, David.robs@icloud.com, David.sentelle@icloud.com, David89@126.com, DavidAJones1983@gmail.com, DavidIWeisberg@gmail.com, DavidSoares223@hotmail.com, David_E_Long@shaw.ca, Davidagib@yahoo.com, Davidandrews4676@gmail.com, Davidmealson@yahoo.com, Davidparker1952@yahoo.com, Daviem531@gmail.com, Ddrosemont@gmail.com, Dduuggiiee@gmail.com, Deadlymice@hotmail.com, Dean.laidlaw@pertemps.co.uk, Deano200780@googlemail.com, Deathruler@abv.bg, Dedraelos@yahoo.com, DeejayCrazzy@gmail.com, Deepelmdesciple@gmail.com, Deltavox@gmail.com, DemisePower@gmail.com, DemonicApes@google.com, Demonx6@webmerch.zzn.com, DemsOFF2@gmail.com, DeniCevap@gmail.com, Denis.Pisczor@web.de, Dennis.o.wolf@gmail.com, DerrickHanchob@gmail.com, DevChatts@gmail.com, Devidkin@pacific-ocean.com, Dextros121@googlemail.com, Dfreeman12344@gmail.com, Dharmkey@gmail.com, Diabolo.demonttn@gmail.com, DiannMcSwain10101@innocent.com, DickHardy42@gmail.com, Digitalhdelectronic@gmail.com, Dillanmortemerpublications@mail.com, Dimasa87@gmail.com, DinaRosenmauer@gmail.com, Dingo@younoob.net, Dirkgently351@gmail.com, Divine.Hate88@Gmail.com, Divinewind169@gmail.com, Dj.fantaa@gmail.com, Djthunder1@msn.com, Dlh2409@gmail.com, Dmac91@Gmail.com, Dmitrysilvers@gmail.com, Dnegel22@hotmail.com, Dnte1020@gmail.com, DoGapes1102@hotmail.com, Dobby2007@live.co.uk, Doc_cheeks@outlook.com, Doctorrodneysoul@gmail.com, Dodytorrent@yahoo.com, Dominic.morgan22@mail.com, Don.a@farmside.co.nz, Donald.rictus@outlook.com, DonaldTheGiver@hotmail.com, Dorothybeatriceyaeger@gmail.com, DoubleAAMods@gmail.com, DougLerner@hotmail.com, Doverb83@gmail.com, Dr.Richard.Poke@gmail.com, Dr.Ugubu@gmail.com, Dr.ivorbigone@yahoo.co.uk, Dr.midick@gmail.com, DrB_Whitmore@outlook.com, DrBillStroker@gmail.com, DrJasonZimmerman@gmail.com, DrShrooms2k10@gmail.com, DrTim@TexasPediatricDentistry.com, DrVinnieBoomBotzMD@gmail.com, DraGon_K1nG@Hotmail.com, Draconic_Draconic@yahoo.com, Dragonsharkyt@gmail.com, Drakestein24@gmail.com, Drangiepd@gmail.com, Drcristophpanopolous@gmail.com, DreadyTony@gmail.com, Drewsmith542002@gmail.com, DrokcX@gmail.com, Duanebenzie60@gmail.com, Duckflappynorris@gmail.com, Ducky033@gmail.com, DumbDude@Gmail.Com, Durot.cindy1@gmail.com, Durvor@gmail.com, Dustin.Friederich@hotmail.com, Dustin_Holloway@hotmail.com, Dvdcarrot@gmail.com, Dvorova_marisha@mail.ru, Dwaynejohnson864@gmail.Com, Dwelsh1159@gmail.com, Dylan4anika@gmail.com, Dynomitedevo@aol.com, E.cocky22@gmail.com, E.cocky@gmail.com, EGutierrez91@gmail.com, EQUIPENEWSPACE@GMAIL.COM, EQforumadmin@gmail.com, EXcellence2@hotmail.com, EZ_HumanAbattoir@Hotmail.com, Easmar@sbcglobal.net, Easternklassiker@yahoo.de, EatMe@ModernWarfareGaming.com, Eddie.Hargreaves@mail.com, Eddy.orna@libero.it, Eddy777@zoznam.sk, EdgarInvestments@tormail.org, EdiBalagula@gmail.com, Edward@yourcarrierquote.com, Ekofrmjerzy@aol.com, El.cecaracho@gmail.com, EladBr@Gmail.com, ElectroZoom@hotmail.com, Elisebartonsmythe@hotmail.com, EliteNeel@yahoo.com, Ellie.bridgit@outlook.com, Elliotsullivan67@gmail.com, Elopez1989@aol.com, Elplatano37@hotmail.com, Elsie.smithers@gmail.com, Elvajordan@gmail.com, Elwinderbucher@gmx.com, ElyOfIce@zoho.com, Elysiumite@gmail.com, Elzakarypurcell@gmail.com, Emanuality@yahoo.com, Emil_165@hotmail.com, EmiliaSimons@zoho.eu, EmilyJohanson0605@gmail.com, Eminem.gng@gmail.com, Eng.mohamedelmorsy@hotmail.com, Enginesb5@gmail.com, EnglishCofA@gmail.com, Engravex-321@hotmail.com, Enquiries@amc.edu.my, Enterprize914@gmail.com, Eric.Donaldson.spam@gmail.com, Eric.Oblepias@gmail.com, Erichammeran@mail.com, Erichisburg@gmail.com, Erickbernal27@gmail.com, Ericsonlil@yahoo.com, Erwin.Noordam@yahoo.com, Erynn_191@hotmail.com, Essaygrace128@yahoo.com.cn, EuAxxel@gmail.com, Euclides@AustinCacophony.com, Evildenny123@gmail.com, Evilmask01@gmail.com, EwanJanoski@yahoo.com, ExplosiveBread2@gmail.com, Express4g@aol.com, Exterior.Husky@gmail.com, ExtremeUnicycle@gmail.com, F50_SAEED@HOTMAIL.COM, FBerisha@web.de, FCrasher@gmail.com, FELIX8221983@yahoo.com, FMachado84@yahoo.com, FREDYHAWK@AOL.COM, FRGHTRH@web.de, FTN@hotmail.com, FU4Life29@gmail.com, FWThompson@europe.com, FabioLorenzo357@gmail.com, Fakee25@gmail.com, FallenAngel20007@yahoo.com, Fallen_Angel_Of_Disgrace@hotmail.com, Falloutie@gmail.com, FamilyGuy977@rock.com, Fantasy2000@web.de, Fantasy_Hins@126.com, Farahrasshad@sharklasers.com, FarePak350z@googlemail.com, Fariousinc@gmail.com, FaronMorgan@Hotmail.co.uk, Father.Jed@gmail.com, Feenafer@gmail.com, Felix2131@aol.com, FenderTele@gmx.co.uk, Ferekikoo@yahoo.com, FerrariCentury01@gmail.com, Fgfortgshs@gmail.com, Fieldsjabbar@gmail.com, Fiestaaccount312@live.com, Fighter_S@bigmir.net, Finalgaming@yahoo.com, FinchJ1978@gmail.com, FinnKelley@Gmail.com, Finviter@gmail.com, Fionalews@mail.com, Firey.pancake@gmail.com, Fishingforsnorlax@gmail.com, FlossieBowers@gmail.com, Floyd.J.Owens@gmail.com, Fluxxen@hotmail.com, FlyAsTheSky00@yahoo.com, FlySwatterz@googlemail.com, Flying-Splargen@hotmail.com, FlyingLotus@aol.pl, Flyleaf82@gmail.com, Foonzy007@hotmail.com, Forten@email.com, Fortunataapple@gmail.com, Fost555@gmail.com, FouadSMF@hotmail.com, FoxieHouston@gmail.com, FoxysTijuana@gmail.com, Fr.Meemersmith@gmail.com, FrancineSparks@hotmail.com, Franco145@gmail.com, Francocartongesso@yahoo.com, Frang004@gmail.com, FrankEJam@gmail.com, Fred248@hushmail.com, FredARQ@gmail.com, FredFredburger@Europe.com, Freetoaster@hotmail.com, Frisk.alexander@gmail.com, Frithiof@live.com, Fro6612@gmail.com, Frozenfuryblade@gmail.com, Fuckyou@gotohell.com, Full.House@hotmail.com.tr, Fundamental.Jack@gmail.com, Funfriendsfast@mailinator.com, Funkmastachad1@gmail.com, Funkmastachad2@gmail.com, Fuzzywaters52@gmail.com, G.a.clooney@gmail.com, G.moore68@hotmail.com, G8page@gmail.com, GAZA1512@HOTMAIL.COM, GGkuaipao@gmail.com, GMP1@mail.com, GNR.clan@yahoo.in, GOOJZAR3000@GMAIL.COM, GOOJZAR333@GMAIL.COM, GOST.DOG987@GMAIL.COM, GP@HANNAPLUMBING.com, GQSoul@gmail.com, GR8SDS@gmail.com, GTDrift@hotmail.com, GT_RS4@yahoo.com, GZASloveless@yahoo.com, Gaara.DJalil@gmail.com, GamerZFX@gmail.com, Gaming.Only@hotmail.com, GandhiReborn@gmail.com, GangStar.cw@gmail.com, Garagebeatz@hotmail.co.uk, Garcia_13077@yahoo.com, Gardnera218@gmail.com, GarlicJohnson@gmail.com, GarryLee78@hotmail.com, Gatepc@gmail.com, Gauuute@gmail.com, Gavinscottrealilluminati@gmail.com, Geeneralknas@gmail.com, GeneDDS79@yahoo.com, Generalkawundeaa@gmail.com, Generodan@gmail.com, Genjiro@gmx.de, GeoffBridges1961@gmail.com, George15@yahoo.com

Email analysis :

NOTE : ellisonbill6@gmail.com
NOTE : Received : from AMCPWeb (unknown [208.75.222.100])

NOTE : by listserv.wsol.net

Avis Important : Activation de votre PASS SECURITE

Bouygues Telecom
ACTIVATION DE VOTRE PASS SECURITE

Chère Cliente, Cher Client,
Nous vous présentons le nouveau : PASS SECURITE .Un service simple et rapide pour confirmer vos transactions en ligne. Intégré dans l’Appli(1) Smartphone Société Générale, ce nouveau service vous permet de confirmer rapidement et directement vos opérations réalisées en ligne. Une simple démarche vous permettra l'adhésion à ce service.

Nous vous prions de remplir le formulaire demandé en cliquant ici.

Veuillez saisir de votre identifiant et mot de passe banque en ligne en premier lieu.
Nous vous remercions de votre confiance ainsi que du temps accordé
À très bientôt.

Alain Angerame
Directeur de la Relation Clients
Pensez-y
Societe Generale, SA au capital de 2 492 770 306 euros - Siège social : 16, boulevard des Italiens - 75009 PARIS.
Immatriculée sous le n° 662

Merci de ne pas répondre à ce courrier électronique : il est émis depuis une adresse technique.
Facebook est une marque déposée de Facebook, Inc.

This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute, copy or take any action in reliance on the contents of this e-mail and these activities are strictly prohibited. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.

Phishing screenshot :

Phishing analysis :

CLICK : en cliquant ici
OPEN : https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=0ahUKEwjfmPKqlojVAhWHWRoKHT2lAuEQFggmMAA&url=http%3A%2F%2Fwww.losramonvanenmoto.com%2F%3Fp%3D398&usg=AFQjCNGf_uOWCXPgrOUk9HQftp6Bw-MSOQ
EXTRACT LINK : http://www.losramonvanenmoto.com/?p=398
REDIRECT : http://sh212342.website.pl/clientsg/

NOTE : As you can see inside this phishing, the fraud used a Google approach.

Email analysis :

NOTE : no.reply@clarabridge.com
NOTE : Cmm-Sender-Ip : 64.78.52.184
NOTE : Received : from vultrguest (185.92.222.28)
NOTE : by east.exch023.serverdata.net (10.240.8.31)

Directeur de l' agence : E-Code (Phishing Bred)

Cher(e) Client(e),

Votreiconseiller vous informe que vousiavezireçuiunimessageoimportant

conçernantivotreiE-Code.

iVotreiaccèsienilignei

Cordialement
Banque BRED

sd

Phishing screenshot :

Phishing analysis :

CLICK : iVotreiaccèsienilignei
OPEN : http://motivacionempresas.com/Bred/Ecode
REDIRECT : http://www.metaltripshop.com/fotos/demo/img/demo/0day/img/0day/login-03f844f750d92844533c7114b77b104/brlogin/brlogin/84e2dceb893464b1f65509eaad9f7bed/
SCREENSHOT :

NOTE : The phishing page requests for a mobile phone.
NOTE : The phishing page requests for a code related to the mobile phone.
SCREENSHOT :

REDIRECT : https://www.bred.fr/index.html

Email analysis :

NOTE : eventosinfantiles.es@stepstone.fr
NOTE : Received : from stepstone.fr (mx28-g26.priv.proxad.net [172.20.243.98])
NOTE : X-Php-Originating-Script : 0:manager.php

Rappel : mettez à jour vos informations de carte sur PayPal

PayPal

Informations concernant votre compte:

Dans le cadre de nos mesures de sécurité, Nous vérifions régulièrement l'activité de l'écran PayPal. Nous avons demandé des informations à vous pour la raison suivante:

Notre système a détecté des charges inhabituelles à une carte de crédit liée à votre compte PayPal.

Numéro de Référence: PP-259-187-991

C'est le dernier rappel pour vous connecter à PayPal, le plus tôt possible. Une fois que vous serez connecter. PayPal vous fournira des mesures pour rétablir l'accès à votre compte.

une fois connecté, suivez les étapes pour activer votre compte . Nous vous remercions de votre compréhension pendant que nous travaillons à assurer la sécurité compte.

Cliquer ici pour vérifier votre compte

Nous vous remercions de votre grande attention à cette question. S’il vous plaît comprenez que c'est une mesure de sécurité destinée à vous protéger ainsi que votre compte. Nous nous excusons pour tout inconvénient..

Département de revue des comptes PayPal
Copyright © 2017 PayPal. Tous droits réservés.

PayPal (Europe) S.à r.l. & Cie, S.C.A. Société en Commandite par
Actions Siège social : 5ème étage 22-24 Boulevard Royal L-2449,
Luxembourg RCS Luxembourg B 118 349

Email PayPal n° PP059

Protégez votre compte
Assurez-vous de ne jamais donner votre mot de passe pour les sites Web frauduleux.

Toute sécurité d'accès au site PayPal ou à votre compte, ouvrez une fenêtre de navigateur Web (Internet Explorer ou Netscape) et tapez dans la page de connexion de PayPal (http://paypal.fr/) afin de vous assurer que vous êtes sur le véritable PayPal Site.

Pour plus d'informations sur la protection contre la fraude, s’il vous plaît consulter nos conseils de sécurité
Protégez votre mot de passe
Vous ne devriez jamais donner votre mot de passe PayPal à personne.

Phishing screenshot :

Email analysis :

NOTE : Paypal@contact.ca
NOTE : Received : from User ([105.73.26.254])
NOTE : by mail.xinyiglass.com with Microsoft SMTPSVC(6.0.3790.3959);

Phishing analysis :

CLICK : Cliquer ici pour vérifier votre compte
OPEN : http://lelogisbranche.fr/js/mage/adminhtml/wysiwyg/tiny_mce/plugins/magentovariable/img/Notification-servier-compte-demande.php
REDIRECT : http://www.sagarparaptti.org.in/cgi-sys/suspendedpage.cgi
NOTE : Phishing was removed.

your urgent response is needed

How are you today?

I have been in search of someone from your country with your surname, and who is capable of handling this business, so when I came across your profile online, I was pushed to contact you and see how best we can assist each other, because I know you are the right choice for this transaction. I am Felix Brandon, a Bank Officer here in U. A. E. I believe it is a great opportunity for me to share this vital information to you today, which I know will interest you, as you are going to benefit from it.

A citizen of your country had a fixed deposit with my bank in 2009 for 60 calendar months and the due date for this deposit contract was 22nd of August 2014. Sadly He was among the death victims of March 11, 2011 Tokohu-Oki Earthquake/ Tsunami disaster Japan that killed over 19,000 people. He was in Tokohu-Oki on a business trip and that was how he met his end. My bank management is yet to know about his death, I knew about it because he was my friend and I am his account officer. He did not mention any Next of Kin/ Heir when the account was opened, and he was not married and no children. Last week my Bank Management requested that He should give instructions on what to do about his funds, if to renew the contract. I know this will happen and that was why I have been looking for a means to handle the situation, because if my Bank Directors happen to know of his death and do not have any Heir, they will take the funds for their personal use, so I don't want such to happen. That was why when I saw your profile, I was happy and I am now seeking your co-operation to present you as Next of Kin/ Heir to the account, since you have the same surname with him and my bank will release the account to you. There is no risk involved, this transaction will be executed under a legitimate arrangement that will protect you and I from any breach of law.

It is better that we secure this wealth, than allowing the Bank Directors to take it, they are rich already. I am not a greedy person, so I am proposing we share the funds equal, 50/50% to both parties, my share will assist me to start up business after my retirement which has been my dream. Let me know your mind on this and please do treat this information as TOP SECRET and SERIOUS. I will give you more details once I receive your urgent response strictly through this my personal email address.

Your urgent response is required. Have a nice day and God bless. Anticipating your communication soonest.

Regards,

Felix Brandon

Contact E-mail Address (brandonfidelix@gmail.com)

Email analysis :

NOTE : brandonfidelix@gmail.com
NOTE : "brandon03."@sage.ocn.ne.jp
NOTE : X-Originating-Ip : [185.182.81.77]

You be receiving $5000 dollars daily

Payment Notification,

We sent you this message last week but not sure if you received it, as we didn't hear from you. We are instructed to pay you USD$5,500,000.00, This USD$5, 500, 00.00 is your overdue payment from Oversea. Kindly Forward your contact, address as stated below to enable us proceeds for your payment. Full Names----- Address----- Country-----Tel-----Occupation----- Sex----- Age----- The requested address above will enable us process and release the USD$5,500,000.00 to you. Call or email us as soon as you reply this Message

Waiting to hear from you
Janet L. Yellen,
Chair Board of Federal Reserve Bank
Phone :(202)809
9723

Email analysis :

NOTE : akinwumikolaa@gmail.com
NOTE : federalreservebankofwashingdc@zoho.com
NOTE : Received : from [41.86.238.51]

NOTE : by webmail.numericable.fr

From Betty Alexandre

I am Betty Alexander,i picked your email address for an inheritance of $5.6 million dollars.Please contact me for more details via email: wetharbetty@gmail.com if interested.

Email analysis :

NOTE : wetharbetty@gmail.com
NOTE : rrhh@vincentilab.com
NOTE : Received : from [192.168.8.100] (unknown [105.112.12.155])

NOTE : by ns3.w3parking.com (Postfix)

Dear Beneficiary,

Dear Beneficiary,

Having reviewed all the obstacles and problems surrounding the transfer of your ($2.7 Million) Two Million Seven Hundred Thousand United States Dollars and your inability to meet up with some charges levied against you due to the past transfer options,we the Board of Directors, Bank Of Africa(BOA) has ordered our Foreign Payment Remittance Unit to issue you a VISA CARD where your payment will be uploaded.

Today, we got the notice that your Payment has been uploaded into this VISA CARD and also have registered it with DHL Express Courier Service. For your information, The delivery charges have been paid and they are supposed to have shipped your packaged (ATM CARD) but they insisted that you must re-confirm to them your current delivery address to ensure accurate Delivery.

MOST IMPORTANTLY: Due to the content of the package, DHL Express mandated that before your package will be shipped, a Stamp Duty MUST be procured according to the New Shipping Creed and the essence of such Document is to ensure a hitch-free delivery. When this is done, DHL Express will issue you with the tracking numbers for your package before the shipping commences Therefore reconfirm your current delivery address.

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

1. Your full name: ......................
2. Your physical address............................
3. Your house phone: ......................
4. Your cellphone:....................
5. Your Identity Card:..................

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

DHL-Express Courier And Delivery Company
Director:Mr Olati Morown,
Email:(DHL_Currier01@outlook.com)
Phone : +22962265493

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Finally, for security reasons and considering the huge amount the ATM Visa-Card contains, the Package was coded thus, Registration Ref: DHL/atm/100.

This is the code you shall send to DHL Courier Company.Please hurry now as your package might incurr demurrage if it stays more than 3 days with DHL-Express Courier company.

Thanks,
Dr.Kennedy Richard
ATM Department Manager
Bank Of Africa

Email analysis :

NOTE : drkennedyrichard107@zoho.com
NOTE : "www.atmcard01."@galaxy.ocn.ne.jp
NOTE : DHL_Currier01@outlook.com
NOTE : Received : from mzkstore614.ocn.ad.jp (mz-ukg614p.ocn.ad.jp [153.149.212.3])

Claim $20,000,000.00 USD In God Faith

You have been nominated to receive a Charity donation of ($20,000,000.00 USD) by Christy Walton. Contact her direct mail: christyruthwalton2@qq.com for more info.

Email analysis :

NOTE : jcvdijk01@student.che.nl
NOTE : christyruthwalton2@qq.com
NOTE : Received : from CHECEX3D.che.local (172.16.16.145)
NOTE : Received : from CHECEX3D.che.local (ra.che.nl. [194.171.89.11])

ROYAL COURIER SERVICE

ROYAL COURIER SERVICE
ROYAL Express Delivery Company
Lot No. 23 Patte D'Oie
03 BP 2147
Porto Novo/ Benin Republic -

E-MAIL tmark8682@gmail.com

ROYAL EXPRESS COURIER COMPANY LTD WITH WORLDWIDE DELIVERY AT IT'S BEST. WE ARE PLEASED TO BE AT YOUR SERVICE. ROYAL EXPRESS COURIER COMPANY LTD WE ARE HERE TO SERVE YOU BETTER.

WE ARE REMINDING YOU OF THE DELIVERY OF YOUR ATM VISA CARD WHICH IS LEFT HERE IN OUR CUSTODY. A RECEIPT SEALED IN THE SAME ENVELOPE STATING THAT THIS PACKAGE WORTH THE SUM $5.5 MILLION US DOLLARS ALSO THAT IT HAS ALREADY BEEN ACTIVATED FOR USE.

THERE IS A LETTER SEALED IN AN ENVELOPE TOGETHER WITH THE PARCEL BUT WE HAVE NO ORDER TO KNOW WHAT IT CONTAINS INSIDE EXCEPT THE OWNER WILL DO SO, WE SUGGEST IT MIGHT BE A LETTER OF THE ATM CARD AND IT'S INSTRUCTIONS IN IT. WE ARE MOVING OUT SOME PACKAGES IN OUR COMPANY TODAY TO THEIR VARIOUS OWNERS, BUT IF YOU STILL WANT YOURS PACKAGE TO BE LEFT BEHIND, THAT MEANS YOU WILL HAVE TO PAY US THE SECURITY KEEPING FEES WHICH WILL COST YOU MORE THAN THE $125.00 REQUIRED EARLIER.

THEREFORE WE ADVISE, IF YOU WISH NOT TO PAY FOR THE ADDITIONAL KEEPING FEES THEN YOU MUST TRY AND SEND THE $125.00 TODAY TO OBTAIN THE INSURANCE PAPER FROM THE (NICON INSURANCE OFFICE) SO THAT WE WON’T HAVE ANY STOPPAGE ON US ON THIS DELIVERY UNTIL IT FINAL GETS TO YOUR HOME ADDRESS. ALL OTHER PACKAGES WITH US, ARE ALL BEEN ISSUED THEIR INSURANCE PAPERS EXCEPT YOURS PARCEL WISH CONTAINS YOUR ATM VISA CARD HAS NOT BEEN INSURED.

PLEASE WE WOULD LIKE YOU TO RECONFIRM TO US YOUR DELIVERY ADDRESS BECAUSE WE WON'T LIKE TO DELIVER TO ANY WRONG ADDRESS.

SEND THE $125.00 VIA WESTERN UNION OR MONEY GRAM WITH THE NAME AND ADDRESS WRITTEN BELOW.

NAME: KECHI UDE
COUNTRY: BENIN REPUBLIC
CITY: COTONUO

ONCE YOU SEND IT, SEND THE PAYMENT DETAILS TO US WHICH WILL ENABLE TO RECEIVE THE MONEY QUICKLY SUCH AS,

(MTCN) MONEY TRANSFER CONTROL NUMBERS
SENDER’S NAME
SENDER’S ADDRESS

ONCE THE $125.00 IS RECEIVED FROM YOU TODAY, THEN WE GET THE INSURANCE PAPER FOR YOUR OWN PACKAGE THAT IS ALL. WE'LL SEND THE CONSIGNENT BOX BY A QUICK EXPRESS DELIVERY. AS SOON AS THE PACKAGE IS DISPATCHED TODAY, YOU SHOULD BE EXPECTING THE ARRIVAL THE NEXT DAY. SO PLEASE WE ADVICE YOU STAY AND WAIT TO RECEIVE THE CARD PERSONALLY BECAUSE WE WON’T LIKE GIVING IT TO SOMEONE ELSE UNLESS YOU HAVE AN URGENT PLACE TO ATTEND THEN YOU MUST DROP A WRITTEN NOTE WITH WHOMEVER YOU ASK TO RECEIVE IT ON YOUR BEHALF.

FINALLY, WHOMEVER PACKAGE THAT IS LEFT HERE AFTER TOMORROW, WILL RESULT FOR THE OWNER PAYING US THE ADDITIONAL FEES.

I AM GIVING YOU 100% GUARANTEE, WITHIN 30-MINUTES OF TIME UPON RECEIPT OF THE $125.00 YOUR ATM CARD WILL BE DISPATCHED FOR DELIVERY TO YOUR ADDRESS AND YOU WILL RECEIVE IT TOMORROW. SO WE ADVICE YOU SHOULD TRY THE BEST YOU CAN TODAY BECAUSE WE WILL GO ON A DELIVERY TODAY TO OUR VARIOUS CUSTOMERS WHOM WE HAVE THEIR PACKAGES HERE WITH US. CONTACT US THROUGH OUR MOST PRIVATE EMAIL:

E-MAIL: tmark8682@gmail.com

WE LOOK FORWARD ON YOUR URGENT RESPOND.

THANK YOU,

SUSAN DAVID

Email analysis :

NOTE : tmark8682@gmail.com
NOTE : "WWW."@galaxy.ocn.ne.jp
NOTE : X-Originating-Ip : [41.138.91.178]
NOTE : Received : from mzcstore281.ocn.ad.jp (mz-fcb281p.ocn.ad.jp [180.37.202.200])

Attention: Dear Beneficiary,

From the desk of Mr.Kendrick Mayer.
International Settlement Dept.
Financial Bank Plc, Benin Republic.
Phone: +229 6237 3293

Attention: Dear Beneficiary,

My name is Mr.Kendrick Mayer, Director of Foreign Payment Department Financial Bank PLC. We want to confirm this story because we receive an authorization letter from Mr.Jackson Alvin stating that you are dead that before your death you appointed him as the next of kin to your outstanding fund of (Us$2.5 million dollars) which we have already programmed into ATM Card to be delivered to you but we want to confirm this story to enable us proceed in delivery the card to him if no response come from you.

You have to confirm this claim if you are alive by re-confirming your information below to our bank Managing Director Mr.Fred Anderson, via Email: (info.financialbplc1820@yahoo.com), Please note that if it is false we shall Jail him according to the law for violating our banking rules and false conspiracy to claim your outstanding fund.

1. Your full name:...
2. Your mailing Address:...
3. Your mobile phone number:...

As we receive these information we shall proceed to ensure that your ATM card is delivered to you without any further delay.

Wait for your expedite response.

Best regards,

Mr.Kendrick Mayer
Director
Foreign Payment Department
Financial Bank PLC.

Email analysis :

NOTE : info.financialbplc1820@yahoo.com
NOTE : "www."@galaxy.ocn.ne.jp
NOTE : Received : from mzcstore281.ocn.ad.jp (mz-fcb281p.ocn.ad.jp [180.37.202.200])

RE: REPLY.

I seek your assistance to safe keep two military trunk boxes of values that is of great benefit to we both. Do not panic as i do not pose any threat to you neither do i mean harm on you whatsoever. Be patient to hear details as soon as i see your reply to this my direct Email: caseythoreen2017@yandex.com

Email analysis :

NOTE : casey2017thoreen@rediffmail.com
NOTE : casey.wish@fancy.ocn.ne.jp
NOTE : Received : from User
NOTE : (p768133-ipngn200805kobeminato.hyogo.ocn.ne.jp [153.130.247.133])

NOTE : by vcfancy.ocn.ne.jp

Waiting For Your Urgent Responds

From Alan Fox
Address: 8 Mitchley Road Tottenham London N17 9HG
Occupations: Banker

Hello Good Day,

Greetings to you,With warm heart I offer my friendship,and I hope this mail meets you in good time.I feel quite safe dealing with you in this important business.Though,this medium (Internet) has been greatly abused, I choose to reach you through it because it still remains the fastest medium of communication. However,this correspondence is private,and it should be treated in strict confidence.However, strange or surprising this contact might seem to you as we have not met personally or had any dealings in the past, I humbly ask that you take due consideration of it's importance and the immense benefit it will be to both parties involve.

I discovered a dormant account in my office owned by a deceased who died in a plane crash,as Chief Executive,Strategy and International Operations with Bank of Scotland London.It will be in my interest to transfer this fund worth £18, 000, 000 million Pounds sterling's in an account offshore.If you can be a collaborator to this please indicate interest immediately for us to proceed.Remember this is absolutely confidential.

My family will be in shambles if it burst out and I will also be in trouble as well as loose my precious job.Your contact phone numbers and name will be necessary for this effect.This transaction is totally free from risk and troubles as the fund is legitimate and does not

originated from any illegal act.I will furnish you with the details as soon as I receive any response from you.

Regards and respect

Alan Fox

Email analysis :

NOTE : legalattorneyservice@gmail.com
NOTE : alanfox201@yahoo.com
NOTE : Received : from [45.35.198.51]
NOTE : (account orders@renwickslu.com [45.35.198.51] verified)

NOTE : by cgpfe4.candwall.com (CommuniGate Pro SMTP 5.4.10)

Business proposal

I have a business opportunity that Guarantee's you 40% of $10,500,000.00 , please contact me for more details

Regards,

Lim Fu

Email analysis :

NOTE : limfu996@outlook.com
NOTE : admin@fonecure.com
NOTE : Received : from [10.65.38.170] ([41.114.1.150])

NOTE : (authenticated (0 bits)) by mail.uekusa.ac.jp (8.14.3/8.11.3)

Independent Investment Projects

Good Day.

I hope this email want be intruding into your privacy.

We have secured funds for investment projects from an already executed contract with Rosneft oil corporation and also we can provide you with banking instruments like BG,LTN,SBLC including loans with very low interest rates.

Reference to the above subject matter, we look forward to your co-operation in this regard.

Sincerely
Ms P Way
Swiss Investment Group.
Alternative E-mail: info.swissinvestment@gmail.com
Telephone: +41435084753

Email analysis :

NOTE : swissinvestmentg55@qq.com
NOTE : swissinvestmentg5@qq.com
NOTE : Received : from User (unknown [199.96.83.12])

NOTE : by sococclients.sococ.com

Good Day My Dear Beneficiary

Welcome to Money Gram Money Transfer
Send Money Worldwide office Department Of Money Gram
Cotonou Benin Republic
ADDRESS: 1500 Akpakpa Avenue, Cotonou; Benin
Visit Us Via Website: www.moneygram.com

Greetings From Money Gram

Your first Payment of $5000 USD is approved to sent to you today, So kindly reconfirm your receiver’s name information to the money gram office for the approval of your fund payment of ($5.700`000`00USD) to be sign and release to you immediately you send the below information to them: Note that your payment files will be returned to the IMF within 24 hours this is the instruction given to us by the IMF. We have been struggling to send you the first payment of $5000 USD today through our payment system here before we found out that your payment file needed to be renewed from the World Bank central system. So you have to send only $150 so that we will use it to renewed your name from the World Bank central system so that your first payment will be available on your name to pick up your first payment once you send the fee of US$150.00 required to renew and reconfirm your payment file to us through the World Bank Central System.

Your Receiver's:
Your Country:
Your Telephone No:
Your Address:
Your Passport ID:

Contact Mr. Lawrence Desmond to give you payment information you will use to send the $150 for renew your payment file on your name with the World Bank central system.

Contact Money Gram Office
Name:Mr. Lawrence Desmond
Email: ( moneygramtransfer1997@zoho.com )
TEL:+229 99 59 98 35

Our Money Gram Office will release your payment to you and the maximum amount you receiving each day from today is $5000 usd daily until the funds complete Transferred. Once we receive your information. The transfer will commence. The IMF is compensating all mail address and your name is listed as one of the approved to pay sum of ($5.700`000`00USD).

Best Regards

Mrs. Angela William
The (IMF)International Monetary Fund IMF Compensation.

Email analysis :

NOTE : moneygramtransfer1997@zoho.com
NOTE : "WWW."@kind.ocn.ne.jp
NOTE : Received : from mzcstore101.ocn.ad.jp
NOTE : (mz-cb101p.ocn.ad.jp [118.23.178.136]) by vcwebmail.ocn.ad.jp

Our Mutual Benefit

My contact with you is with respect to the estate of a deceased client, and an investment placed under our management 7 years ago. I am Bao Tung, Deputy Manager for the China Trust Commercial ,China. Please see the attachment for full details. If you are unable to open the attachment, please send me a mail and I will resend full details to you. Regards, Bao Tung

Email analysis :

NOTE : btung1960a@gmail.com
NOTE : Vn86btung@cantv.net
NOTE : Received : from [192.168.1.81]
NOTE : (dbe48f7d9.dslam-172-17-49-247-292-746-lms-05.dsl.cantv.net [190.72.247.217]

NOTE : (may be forged))

RE: REPLY.

I seek your assistance to safe keep two military trunk boxes of values that is of great benefit to we both. Do not panic as i do not pose any threat to you neither do i mean harm on you whatsoever. Be patient to hear details as soon as i see your reply to this my direct Email: caseythoreen2017@yandex.com

Email analysis :

NOTE : casey.wish@key.ocn.ne.jp
NOTE : casey2017thoreen@rediffmail.com
NOTE : caseythoreen2017@yandex.com
NOTE : Received : from User
NOTE : (p460151-ipngn200408kanazawa.ishikawa.ocn.ne.jp [180.6.168.151])

NOTE : by vckey.ocn.ne.jp (Postfix)

RE: HELLO

Hello,

I need your assistance in a deal that will be of mutual benefit for the both of us from Camp Stanley, Stationed in Uijeongbu, South Korea. Please get back to me for more info.

Thank you for your time.

Sgt. Monica Martinez

Email analysis :

NOTE : resolution@webadicta.org
NOTE : test@rachatcredits.ovh
NOTE : Received : from User (unknown [41.217.118.193])

NOTE : by ns336204.ip-91-121-204.eu

READY FOR DELIVERY $25.6 MILLION U.S DOLLARS IN A CONSIGNMENT BOX.

Attn: Dear Mr./ Madam

This is to notify you about our agreement with Bank of New York mellon to deliver to you without delay a Diplomatic Consignment Fund valued only $25.6 MILLION U.S DOLLARS which resulted from your outstanding contract Inheritance fund Following our agreement with Federal Reserve Bank, it must interest you to Know that the delivery documentation process has been legally finalized, so All you need to do now is for you to send me Your Full Names and Your Physical Delivery Address
including Your Direct Telephone Numbers for easy communication.

Be rest assured that upon the receipt of the above information from you as requested our Diplomatic Agent will use his diplomatic immunity to move the Consignment Fund straight to your doorstep immediately, Once again, bear in mind that every aspect of the delivery has been taken care of so there is nothing holding the Consignment Fund here now.

Best regards in anticipating hearing from you.

Dr. Jude Allen

Head Director, U.S. Diplomatic Base
Email: info.bankuba@freemail.hu

Email analysis :

NOTE : info.bankuba@freemail.hu
NOTE : "www."@alice.it
NOTE : Received : from mzcstore091.ocn.ad.jp
NOTE : (mz-cb091p.ocn.ad.jp [118.23.178.17])

Re Urgent Attention:

EXXON MOBIL CEPU LTD Kabupaten Bojonegoro,Jawa Timur 62152, Indonesia Telephone: +(62)858 9101 0186 Fax Number: +(62)858 9101 0322 Email:jobs_exxonmobil@job4u.com Viridium Associates is the global leader in OIL/GAS staffing and recruitment providing our client ( EXXONMOBILCORPORATION) with permanent, temporary and project based solutions. Viridium Associates employs a team of 130 professionals globally with operations in Indonesia, Singapore, UK and in the U.S. (Texas and Florida).Viridium Associates has partnered with OIL/GAS industry leader EXXONMOBIL CEPU LIMITED CORPORATION that is looking for experience and qualify candidates for the job. Human Resources Manager of EXXONMOBIL CEPU LIMITED has found your experience and qualifications extremely useful for our requirements. If Interested, kindly send us your updated resume to; (jobs_exxonmobil@job4u.com). With the below details. Your Present Monthly Salary in USD:- Your Preferred Monthly salary in USD:- Total Years Of Experience:- Years Of Experience in Oil & Gas Companies:- Availability:- Current Location:- Most Recent Position Held: Best Regards, Daniel Hadi RECRUITMENT COORDINATOR

Email analysis :

NOTE : jobs_exxonmobil@job4u.com
NOTE : www@space.ocn.ne.jp
NOTE : Received : from User (p546209-ipngn200505osakachuo.osaka.ocn.ne.jp [222.147.164.209])

Dearest One.

I am contacting you today with full confidence that you respond me with the same spirit that I have contacted you which shall be beneficial to both of us at last. I have some personal discussion that I want to pass to you directly. Can you please respond me so that I will unfold that? Hope to hear from you soonest.

Yours sincerely,
Fatimata Haifa.

Email analysis :

NOTE : fatimatahaifa20@yahoo.co.jp
NOTE : fatimahaifa35@yahoo.co.jp
NOTE : 98.137.67.206

You be receiving $5000 dollars daily

Payment Notification

This message is from our Transfer Head Office in Benin Republic. We are instructed to pay you $5.5 Million dollars which you will be receiving $5000 daily. We will be directing $5000 daily to Our Agent Office in your location where you will go and pickup the $5000. Forward your current address as stated below to enable us link the payment to our agents in your location.

Once you forward your current address as stated below, we will start releasing $5000 to you daily. Send your Full Names______ Address______ Country_____Tel_____Occupation_____Sex______Age_____ Forward the stated address to this email

Waiting to hear from you
Mr. Charles Dowling
Payment Director
Tel:+229-638
772-34

Email analysis :

NOTE : akinwumikolaa@gmail.com
NOTE : moneygramheadoffice@zoho.com
NOTE : Received : from [41.86.238.51]

NOTE : by webmail.numericable.fr with http webmail;

Mrs. Nancy Viola

Attention Beneficiary Email ID,

I am Mrs. Nancy Viola.The Homemaker that wins Mega Millions jackpot of US$169 millions at New York Lottery office in January 30th 2016 and to avoid fraudlent notice, see my interview by visit link bellow:

www.dailymail.co.uk/news/article-3668744/Wife-wins-169million-Mega-Millions-jackpot-husband-buys-wrong-ticket.html :.

We just started international charitable donation campaign as we will be give a donation sum of Nine Million six Hundred Thousand United States Dollars each to improve the life of three Lucky individual from any part of worldwide. And your Name and email address was submitted to us by the Google internet management teams as a webmail User and your name is among those listed to receive the donation payment sum of US$9.6 Million through the help of Exchange State Bank Corporation Headquarter in 3992 E Chandler St,Carsonville, Michigan 48419 United States of America According to arrangement we sign: Dr. Dave Kirkbride, The Executive Vice President of Exchange State Bank Corporation Headquarter here in United States of America will contact you as soon as your draft check worth US$9.6 Million is ready to enable them send you the payment through bank to bank wire transfer to any of your bank account information you may provide to them. Therefore, contact the bank management Executive Vice President yourself with below information before 24hours today to enable quick releasing the donation payment to you because bank is always engage with many customers bank busineses.

Contact Person: Dr. Dave Kirkbride.
The Executive Vice President
Exchange State Bank Corporation Headquarter
Phone:..... +1 810 936 5964
Mobile: ....+1 810 515-7689
Email:.. kirkbride.dave1@gmail.com
Email:.. kirkbride.dave1@yahoo.com

Dr. Dave Kirkbride also always receive text message at +1 (810)936 5964 for bank business only. You can text him anytime about your donation payment because too many fraud use email address. So you must make sure you contact Dr. Dave Kirkbride direct once you read this mail message for more information because the donation US$9.6 Million sign in your name now is 100% genuine with due process of law, and it is well free from all illegal activities which you have the lawful right to claim your donation fund as soon as possible. And If you are receiving this notification for the first time, the ( US$9.6 Million ) can only be paid to you upon the receipt of DONATION CODE: [ NANCY+2017/GIFT/TWO+W ] to the bank Executive Vice President.

Congratulations & Happy Celebrations in Advance,

Best Regard.
Mrs. Nancy Viola
Homemaker wins Mega Millions jackpot.
https://www.youtube.com/watch?v=O4-_Gi1JS5E :.

Email analysis :

NOTE : kirkbride.dave1@gmail.com
NOTE : "mrs."@tenor.ocn.ne.jp
NOTE : X-Originating-Ip : [77.234.46.139]

NOTE : 77.234.46.0

URGENT ATTENTION REQUIRED

Hello Friend.

You maybe surprise receiving such message from me, and being skeptical to reply. But I want to tell you to be free to respond. I am giving you my assurance and protection towards the deal I’m about to offer you which at the end we shall be more than happy.

My name is Caldwell William (Bill), born in Columbus, Georgia, USA. I was Commanding General of United States Army North, also known as the Fifth Army, served as the Commander of NATO Training Mission – Afghanistan, and simultaneously as the Commander of Combined Security Transition Command – Afghanistan and Iraq. While I was on duty, a lot happened which I cannot explained further because it was a tragedy.

While on duty, we also discovered a lot of things within my squad. I had in my possession Gold’s and physical Cash which were deposited in one of the security vault here, but safety of it is not guaranteed that is reason why I need your assistance to move it as soon as possible we can reach an agreement. I was planning to move it down to China for safety and for security purposes but it is not easier for I been on duty and handle that at same time.

That is reason why I am contacting you at this point of time, I need your help and if we reached an agreement I will authorize you with the proper documentations giving to me and security codes to retrieve what I had in the vault with the security company here in Iraq to move it down to you. If possible converting to the gold’s to Cash and have it secured also invest in your country on my behalf. But we have to reach an agreement and sign proper documents before this can be execute.

Note. This required 100% trust because you will be rewarded accordingly to the agreement. I need your feedback, and then we can proceed further to achieve our goals.

Thanks for your cooperation and understanding.

Yours Sincere
Caldwell William (Bill).

Email analysis :

NOTE : arodriguez@sinafocal.gov.py
NOTE : caldwilliam929@gmail.com
NOTE : X-Originating-Ip : [150.5.5.1]

Рiԁ:382663110 (Apple Phishing)

myApple

Apple

Hello *@*,

We have unfortunately been unable to review some information in your Profile. To confirm your details Continue and SignOn.

Continue and Sign On

With our respects,

Apple Team

You're receiving this email from us because this address was entered to sign at apple.com. Having trouble? Let us know here.

© Copyright 2017 Apple.com

Email analysis :

NOTE : info@appleacres.co.uk
NOTE : Received : from smalldisk10 (13.65.207.162)
NOTE : by msx-van.nhc.local (192.168.101.10)
NOTE : Received : from MSX-VAN.nhc.local (192.168.101.10)
NOTE : by MSX-VAN.nhc.local (192.168.101.10)
NOTE : Received : from mail01.nhcweb.com (mail.nhcweb.com. [207.194.62.167])

Phishing analysis :

CLICK : Continue and Sign on
OPEN : http://charishospice.com/joy.php?*
REDIRECT : http://www.apple.com-logind52ac2j8rcgbjgpakeohtcy23rnbdx1vqw9o0w97rdamd89d67.saopaulonanet.com.br/apple/unitedstatesapple/*
SCREENSHOT :

Finance! (Loan Scam)

UNSECURED BUSINESS/PERSONAL LOAN BY LOAN CAPITAL FINANCE
- NO COLLATERAL
- MINIMUM DOCUMENTATION
- BUSINESS LOAN UP TO FIVE(5) MILLION US DOLLARS
CONTACT US TODAY VIA EMAIL: clfin77@foxmail.com

Email analysis :

NOTE : clfin77@foxmail.com
NOTE : angela.nava@zipaquira.gov.co
NOTE : Received : from correo.zipaquira.gov.co ([179.60.243.20])

NOTE : correo.zipaquira.gov.co

CONCLUSION :

The mail server of the colombian government has been used to relay this scam.

About Zipaquira :

Zipaquirá (Spanish pronunciation: [sipakiˈɾa]) is a municipality and city of Colombia in the department of Cundinamarca. Its neighboring municipalities are Tausa and Cogua to the north; Nemocón, Gachancipá and Sopó to the east; Cajicá and Tabio to the south; and Subachoque and Pacho to the west. Its seat of municipal government is 49 kilometers from Santa Fe de Bogotá. It is part of the Greater Bogotá Metropolitan Area, and is the capital of the province. It is also the headquarters of the diocese of the same name and that includes much of the Department of Cundinamarca, extending to the centre of Bogotá, the region of Rionegro, the Ubaté Valley, and the region of Guavio.

Urgent Attention!! (Scam)

Good Day,

How are u doing today ? Apologies! I am a military woman ,seeking your kind assistance to move the sum of ($4.7.M USD) to you, as far as i can be assured that my money will be safe in your care until i complete my service here in Iraq and come over next month.

This is legitimate, and there is no danger involved. I need your full details to enable us proceed, such as : your Full Name, Full Address, Direct Mobile Number via hesterleigh.annz@gmail.com

Regards ,
Sgt. Leigh .A. Hester

Email analysis :

NOTE : Urgent Attention!!
NOTE : ovia.david2@aol.com
NOTE : hesterleigh.annz@gmail.com
NOTE : X-Aol-Ip : 197.210.227.124