Friday, July 5, 2019

IF YOU ARE INTERESTED REPLY BACK.

GREETINGS TO YOU FRIEND,

I AM MR. DIOUF MOUKA FROM BURKINA FASO I HAVE A GENIUE
BUSINESS TRANSACTION OF 30MILLION U.S DOLLARS TO DO WITH YOU
IF YOU ARE INTERESTED SEND TO ME THE FOLLOWING INFORMATION
IMMEDIATELY.

YOUR FULL NAME......

YOUR OCCUPATION.....

YOUR AGE........

YOUR MARITAL STATUS.....

YOUR PHONE NUMBER.....

YOUR COUNTRY/NATIONALITY.....

BEST REGARD,

DIOUF MOUKA.

Email analysis :

NOTE : diouf.mouka500@gmail.com
NOTE : 209.85.220.65 (Google)

Friday, June 28, 2019

Ms.Donna Gwen (FBI Scam)

U.S Department Of Justice.
FEDERAL BUREAU of INVESTIGATION
Open - Closes : 10:00 PM (GMT-4).

Greetings,
We bring you good tidings.

[1]. This confidential letter is in respect to a Conference Meeting in Washington D.C, on June 14, 2019. With the provision act of decree 114 of the 1999 U.S constitution. Held by the United Nations (UN) Secretary General / FBI President of Directors / the Attorney General, and Federal Ministry of Finance. Their primary objective is to empower Sufficient Indemnify Financial sum to few individuals, thereby empowering and assisting them to be able to contribute to their National Development Goals, Revenue Collection, Tax Payment and Community Protection etc. During this meeting, it was DECLARED that the 2017-2018-2019 wealth's recovered from crack down on Corruptions, Crimes and Cyber Theft. Should be shared as Indemnification payment to some individuals.

[2]. Thus, you will be interested to know that your E-mail Address have won you the total sum of Nine Hundred and Fifty Thousand United States Dollar ($950,000.00 USD) due to your E-mail Address was gotten, from an investigated Arrest mission of the FBI on some fraudsters that was caught in Ghana, Cotonou Benin Republic and Nigeria. They were sending fake ATM cards, fake cashier check and consignment box to their victims, during the arrest group of Email Addresses of defrauded victims was found. Thereof, the Secretary General of the United Nations, FBI Director and the Federal Ministry of Finance, decided to compensate the owners of the emails, fortunately your email address is among the payees.

[3]. After the Indemnification Agreement, the Donors/Benefactors discussed on the possible means of payment, and time availability to pay you the (950,000.00 USD). They finally concluded that all Compensated Indemnification shall be paid through HSBC Bank Draft. Hence, we’re delighted to inform you that arrangements have been concluded to effect your payment as soon as possible, in our bid to transparency. So your HSBC Certified Bank Draft is ready.

[4]. Therefore, you’re to contact FBI Special Agent Mr. MARK RUBEN, with his official contact details below, to guide and walk you through the process of receiving your (i) AFFIDAVIT for CLAIM certificate and your (ii) HSBC CERTIFIED BANK DRAFT worth sum of (950,000.00 USD). Those are the two particulars you must take to your bank, in order to get paid. The Certified Bank Draft is signed for an instant payment to you, at any of your Financial Institute (Bank). Hence, Special Agent Mr. Mark, will guide you to get your Bank Draft and Affidavit for Claim from our Associate Justice at U.S Supreme Court of Justice.

Mark Ruben, FBI Special Agent.
FBI - Department of Justice.
————————————————
specialagent_fbi@inbox.lv
unitedstates_fbi@foxmail.com
fbi_agent.mark@fbi.gov
Fax : (412) 346-6675

The below required datas should be provided to the SPECIAL AGENT for procuring your AFFIDAVIT and the HSBC Certified Bank Draft, which is already set to be issued to you;

(i). FULL NAMES:
(ii). HOME ADDRESS:
(iii). FAX & PHONE NUMBER:
(iv). AGE/GENDER/NATIONALITY:
(v). ATTACH ANY GOVERNMENT ID CARD:

[5]. Upon provision of the data required to the above email, you should expect to hear from the corresponding fiduciary FBI Special Agent Mr MARK RUBEN, within few working hours. With all due respect, hope you understand the content of this letter, and how you've benefit from the Sufficient Indemnification payment, paid & awarded by the he United Nations (UN) Secretary General Mr. António Guterres / FBI President Dr. Christopher A. Wray / Attorney General, and the Federal Ministry of Finance.

[6]. Adhere with the instructions herein, and collect your HSBC Certified Bank Draft to get it cash out or paid into your account. This an International Financial Transaction with NO risk involve, and this transaction is 100% executed on a legitimate platform that protect you from any breach of Domestic or Intergovernmental law. Your mature response is expected, in order to facilitate and speed up release of your Certified Bank Draft which has been Signed/Approved for your payment within (7) working days.

Sincerely In Your Service;

FBI - SUPERIOR Ms. Donna Gwen.
Office: 1500 PENNSYLVANIA AVENUE, NW
WASHINGTON, DC UNITED STATES.
www.FBI.gov

IMPORTANT NOTICE: Any unauthorised use, publishing, editing, treatment, reproduction, displaying, transmitting, photocopying, dissemination, or any other type of unauthorised use of this confidential Email is illegal, and such shall be subject to criminal offence (infringement, violation) responsibility, as well as civil legal protection, because it contains the INA D.D. copyright protected by provisions of the Copyright Law and related rights. This message and its attachments are believed to be without any virus or any other defect (fault) that may cause damage to the computer system in which they have been received and opened. The recipient waives any responsibility for any type of damage or data loss that may occur due to using this Email.

Email analysis :

NOTE : indemnify_department@foxmail.com
NOTE : info@sends.com
NOTE : 72.252.201.121

Thursday, June 13, 2019

HOW I RECOVER MY STOLEN FUNDS

Attention: Compensation Beneficiary,

I am Mrs. Jessica Edwards, I am a US citizen, 48 years Old. I reside here in Tucson, Arizona, My residential Address is as follows, 5237 W Canyon Towhee St, Tucson, AZ, USA, I am thinking of relocating since I am now rich. I am one of those that took part in the Compensation in Nigeria many years ago and they refused to pay me, I had paid over $35,000 while in United States Of America, to get my payment all to no avail. So I decided to travel to Nigeria with all my compensation documents, And I was directed to contact Barrister Donald Williams, who is a member of COMPENSATION AWARD COMMITTEE, I contacted him and he explained everything to me. He said whoever is contacting us through email are fake.

He took me to the paying bank for the claim of my Compensation payment. Right now I am the most happiest woman on earth because I have received my compensation funds of $4,500,000.00 (Four Million Five Hundred Thousand United States Dollars), Moreover Barrister Donald Williams showed me the full information and list of those that are yet to receive their payments and I saw your Name and E-mail Address as one of the beneficiaries, this is the reason why I decided to E-mail you to stop dealing with those Bad people, they are not with your fund, they are only making money out of you. I will advise you to contact Barrister Donald Williams. You have to contact him directly through his private Email address.

Information below.

Name : Barrister Donald Williams
Email: donaldwilliams768@yahoo.com
Telephone: +2349067735895.

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in any means with them, they are only taking advantage of you and they will continue to steal from you until you have nothing to show off.

The only money I paid after I met Barrister Donald Williams was just $350 USD which is for the paper works, take note of that. Once again stop contacting those people, I will advise you to contact Barrister. Donald Williams so that he can help you to Transfer your Fund into your account, instead of dealing with those liars all they do is to ask for more and more money to complete your transaction which are all lies and trick use by Fraudsters.

Thank You and Be Blessed.
Mrs. Jessica Edwards
Address: 5237 W Canyon Towhee St, Tucson, AZ, USA.

Email analysis :

NOTE : donaldwilliams768@yahoo.com
NOTE : jennianddrew@yahoo.com
NOTE : 66.163.185.146

Saturday, April 27, 2019

COLLECTE NATIONALE POUR LA RECONSTRUCTION DE LA CATHÉDRALE NOTRE-DAME DE PARIS (SCAM)

Cher(e)s frères, soeurs et ami(e)s français, d'ici et d'ailleurs,

Face à la tragédie qui touche la Cathédrale Notre-Dame de Paris la Fondation du patrimoine, qui agit depuis 20 ans pour restaurer le patrimoine français, lance une collecte pour financer la restauration de Notre-Dame. Il exhorte le Peuple français et le monde entier à participer à cette action de soutien pour la reconstruction du Symbole d'unité pour tous.
A ceux qui désirent adhérer à cette coopération, rendez-vous sur le site Officiel de la Fondation du Patrimoine ci dessous:

Accédez-ici au site de la Fondation du Patrimoine

Les dons sur le site débutent à partir de 50€, 100€, 200€ et se limitent à 500€. Pour tout autre don au delà de cette limite, il faut contacter la fondation pour un envoi par chèque ou par virement bancaire. C'est grâce à la générosité de nos donateurs que les équipes de La Fondation du patrimoine peuvent continuer leurs actions.
Un grand merci d'avance !

Très sincèrement,
FONDATION DU PATRIMOINE
Organisme privé indépendant à but non lucratif Logo

FONDATION DU PATRIMOINE
153 bis avenue Charles De Gaulle 92200 Neuilly sur Seine
t: 01 70 48 48 00

Banner

Les opinions exprimées dans cet e-mail appartiennent à leur auteur et ne reflètent pas nécessairement les vues et opinions de la société. Nos employés sont tenus de ne faire aucune clause diffamatoire, d'enfreindre ou d'autoriser la violation d'un droit légal. Par conséquent, la société décline toute responsabilité pour de telles déclarations incluses dans des courriels. En cas de dommages ou d'autres responsabilités, les employés sont entièrement responsables du contenu de leurs courriels.

Email Screenshot :


Email analysis :

NOTE : silvia.rivilli@uniud.it
NOTE : spagnul.matteo@spes.uniud.it
NOTE : 52.101.133.13


NOTE : 40.107.13.57


NOTE : https://donfondation-patrimoine-sauvonsnotredame.weebly.com/


NOTE : https://donfondationpatrimoineorg-collecte.weebly.com


NOTE : Links were hosted by Weebly.

Tuesday, April 16, 2019

Claims

You have received a special package from Panasonic electronics.
Kindly reply for more details about claims.

Regards,
Panasonic Pro(Client Executive)
Panasonic (UK) Ltd.
+44 134 457 6277(ext 244)

Email analysis :

NOTE : ewa.pociecha@urk.edu.pl
NOTE : pnsncpro@gmail.com
NOTE : Received : ⁨from [192.168.8.100] (unknown [41.203.72.213]) by matrix.ar.krakow.pl

AW.

Sie haben eine Mail von Sigrid Rausing Trust. Bitte bestätigen Sie den Besitz dieser E-Mail für bessere Gespräche

Mit freundlichen Grüßen,
Frau Sigrid Rausing
CEO Sigrid Rausing Trust
=====================================================

You have a mail from Sigrid Rausing Trust. kindly confirm ownership of this email for better conversations

Kind Regards,
Mrs Sigrid Rausing
CEO Sigrid Rausing Trust

Email analysis :

NOTE : mrssigridrrausing@gmail.com
NOTE : plp@picl.com.np
NOTE : 203.78.160.38
NOTE : 28,84

Monday, March 11, 2019

Rep: VOTRE REPONSE!

HONORABLE INTERNAUTE

NOUS VENONS PAR CETTE CORRESPONDANCE VOUS ADRESSER TOUTES NOS FELICITATIONS ET VOUS INFORMER PAR LA SUITE QUE VOUS ETES L'HEUREUX GAGNANT DE LA PROMOTION HEINEKEN LOTERIE PRIZE. SUITE AU TIRAGE
EFFECTUE LA SEMAINE DERNIERE D'UN LOT DE 100.000 ADRESSES E-MAILS MISEN TIRAGE PAR LE ROBOT DE SELECTION AUTOMATISE, VOTRE ADRESSE E-MAIL A ETE TIRE AU SORT PARMI TANT ET VOUS ETES L'HEUREUX(SE) GAGNANT(E) DE 80.000 EUROS PRIX DE LA PROMOTION HEINEKEN LOTERIE PRIZE.

VOTRE N° GAGNANT EST LE " HESAS0082147PUYHK " VOUS DEVEZ GARDER JALOUSEMENT CE CODE PARCE QU’ON AURA BESOIN DE VOTRE CODE APRES VOTRE CONFIRMATION.

LA RECLAMATION DE VOTRE PRIX SE FERA AUPRES DU MAITRE MARTINET DECHAVANNES, L'HUISSIER QUI A SUPERVISE LA LOTERIE HEINEKEN PRIZE. VOUS DEVEZ COMPLETEZ LE FORMULAIRE CI-DESSOUS ET L'ADRESSE A L'HUISSIER QUI A SUPERVISE LA LOTERIE (ME MARTINET DECHAVANNES) A L’EMAIL : martinetcabinet@gmail.com

NOM :................................................
PRENOM :.............................................
PAYS :...............................................
AGE :................................................
PROFESSION :.........................................
SEXE :...............................................
N° DE TELEPHONE :....................................

MERCI DE NOUS CONTACTER LE PLUS VITE POSSIBLE POUR LA RECLAMATION DE VOTRE GAIN
2019 COPYRIGHT HEINEKEN HESAS N.V. ALL RIGHTS RESERVED | LEGAL DISCLAIMER | COOKIE AND PRIVACY POLICY

Email analysis :

NOTE : martinetcabinet@gmail.com
NOTE : mecabinet@yahoo.fr
NOTE : a-ji@sky.plala.or.jp
NOTE : 60.36.166.12

Sunday, February 24, 2019

now

THIS IS LIU SHIYU, I HAVE A BENEFICIAL BUSINESS PROPOSAL FOR YOU DO EMAIL US BACK
-----------------------------------------------------------------------
DIT IS LIU SHIYU, IK HEB EEN VOORLOPIG BEDRIJFSVOORSTEL VOOR U E-MAIL TERUG

Email analysis :

NOTE : test@gnsgroup.com.au
NOTE : liushiyu688@gmail.com
NOTE : client-ip=43.247.127.116

I AM SORRY TO ENCROACH IN TO YOUR PRIVACY!!

Dear: ,

I am sorry to encroach into your privacy in this manner, I found you listed in the Trade Center Chambers of Commerce directory here in Iraq, I find it pleasurable to offer you my partnership in business.I only pray at this time that your address is still valid.

I want to solicit your attention to receive the two trunks on my behalf. I am Capt Earl Huffman, an officer in the US Army, and also a West Point Graduate presently serving in the Military keeping force in Baghdad, Iraq.

I am on the move to Afghanistan from Iraq as the last batch just left, and I really need your help in assisting me with the safe keeping of two military trunk boxes which has just arrived the Netherland from the Iraq. I believe you can be trusted and handle it? Kindly view this news blog below for some info

http://news.bbc.co.uk/2/hi/7444083.stm

I will explain further when I get a response from you. Nevertheless, if you are interested reconfirm the following to me as follows.

(a) Your full Names
(b) Your physical mailing address
(c) Your direct telephone numbers
(d) Your occupation

Please ensure to reply via my private e-mail

God bless you and thanks for cooperation in advance.

Best Regards,

Capt Earl Huffman.
US ARMY

Email analysis :

NOTE : test@chazvalve.com
NOTE : earlhuffman01@gmail.com
NOTE : X-Originating-Ip : ⁨[102.165.35.60]⁩

Monday, January 14, 2019

Direct wire transfer.

Attn The Beneficiary,

This is to notify you that your over due inheritance/contract funds has been gazetted to be released, via key telex transfer (K.T.T)--direct wire transfer to you or through any of our correspondent nominated bank, by the senate committee for foreign over due fund transfer. Meanwhile, a woman came to my office few days ago with a letter, claiming to be your true representative. Here are her information's for you to confirm to this office if this woman is truly from you or not so that the federal government will not be held responsible for paying into any wrong accounts, Claim's name: Mrs. Janet White, bank name: PNC BANK FL USA. Account number: 1222463988. Please, do re-confirm to this office as a matter of urgency if this woman is from you. You are requested to fill and send this information's for verification's Purposes so that your fund valued US$10.5M (Ten Million, Five Hundred Thousand United States Dollars) will be remitted into your nominated bank account with any Bank in the World. This fund is as a result of inheritance/contract fund on your behalf. Information needed from you for verification is as follows:

1. Your full names:..............................
2. Your contact address :......................
3. Your direct telephone number:.........................
4. Your fax numbers if available:........................
5. Age...................................
6. Sex:....................................
7. Your occupation:...........................
8. Your banking details:......................
9. Any copy of your ID:................

As soon as we receive this information's, we will commence with all necessary procedures in other to remit this money into your account with your Nominated BANK. the central bank governor, in conjunction with the federal ministry of finance (FMF) executive board of directors and the senate committee for foreign over due inheritance/contract fund have approved and accredited this reputable bank with the office of the director, international remittance/foreign operations, to handle and transfer all foreign inheritance/contract funds this first quarter payment of the year 2019. However, we shall proceed to issue all payments details to the said Mrs. White, if we do not hear from you within the next three working days from today, We are sorry for any inconvenience the delay in transferring of this fund must have caused you treat as a matter of urgent.

SINCERELY

Mr. Peter Obi.
CC: EXECUTIVE GOVERNOR, CENTRAL BANK OF NIGERIA (CBN).
CC: SENATE PRESIDENT
CC: BOARD OF DIRECTORS [FPD]
CC: ACCOUNTANT GENERAL OF THE FEDERATION- NIGERIA

Email analysis :

NOTE : peterobi768@gmail.com
NOTE : client-ip=202.149.85.38;⁩

Your Package Delivery!!

Hello Beneficiary,

You have a new package from Apple that comprises of an (iPhone XS, Apple MacBook Pro and a Cheque of $6,480,000.00 USD), prepared for delivery to your house address, kindly reply back as soon as possible for more information via: fedex.express.del@gmail.com

Yours Faithfully,
Mrs. Rita McCarthy.

Email analysis :

NOTE : fedex.express.del@gmail.com
NOTE : tabea.wafler@unil.ch
NOTE : Received : ⁨from [40.70.27.3]

Comment Spam Vol 21


Unknown

I have friend she deposit some money to my name but i dont know how i get it money

Anonymous

EX NEWMAN Jan 7, 2019, 12:25 PM (21 hours ago) to me Greetings once again, I sincerely appreciate your prompt response to my Email,I want to thank you for granting me the opportunity to present to you this once in a life time opportunity.However, this correspondence is un-official and private just like I stated in my first email to you, and it should be treated as such. I also guarantee you that this transaction is hitch free from all illegality you may think of. I am contacting you based on trust that should be attached to these , kindly keep this confidential even if you decide not to get involved with this. The Management and the Legal department ,in a recent meeting recommended that the deposit of LATE ROMAN BLUM, who was one of my Branch major depositors, should be declared Dormant, confiscated and the depositor's Fund sent to the Treasury according to financial law. He died in January 2012 at the age of 97 years leaving no Heir to this Deposit . We made series of efforts

Anonymous

Thu, Dec 27, 2018 at 6:40 AM REX NEWMAN wrote: Head Officer-in-Charge Administrative Service Inspection Unit Address: 157 Trade port Drive.Atlanta, GA 30354 Hello Friend, I am writing you on a personal note and I will want this communication to remain between you and me, due to my position. I do not want my sincerity and concern to turn against me and this is why i am writing through my personal email instead of my official email, to guide against being monitored. Please permit me to send you my proposals. Sincerely, Mr.Rex Newman

Unknown

Genuine sale BG/SBLC for lease or purchase We can deliver financial service/instrument(BG/SBLC/MTN/DLC/LC) at affordable price to our customers in other to derive maximum utility. We understand that finding the right company to provide financial instrument is not easy. We are certified financial company that delivers banking instrument for lease which we adhere to our terms and condition. Over 96% of our clients are satisfied with our work whether it is business or financial service. Once transaction is in progress, we ensure we keep you posted on the progress of your paper. We also get you connected to the provider for personalized service. Instead of stressing yourself out looking for financial instrument or company why not let professional like us deliver financial instrument to you within the time frame required by you. For further details contact us with the below information.... Thank you. ivan john Contact Email : psafinanceplc@gmail.com

Thursday, January 10, 2019

Hello Dear,

Hello Dear

I am Barrister. Barr Johnson Mark a lawyer in Cotonou Benin Republic. Mr.Jorge. , a gold merchant, who was my client died as a result of lung cancer. Now I want to present you as the next of kin, to Mr. Jorge Bank so that the money left behind by Mr. Jorge can be transfer to your account through my help. The money value of $ 10.5Million (Ten million five hundred thousand united states dollars) was deposited in a bank here by Mr. Jorge before his Death on 23 November 2010.

Further explanation, try get back to me soon
Email-(barristerjohnsonma4@gmail.com)
Best regards,
Barr Johnson Mark

Email analysis :

NOTE : barristerjohnsonma4@gmail.com
NOTE : www.@mail.goo.ne.jp
NOTE : X-Originating-Ip : ⁨[41.86.246.66]⁩

Wednesday, January 9, 2019

Relative FamilyTree

Hi, I was wondering if you have had a chance to look at the initial email or if my initial email ever gets to you. I regard to the late David I told you about that I'm in search to trace a family tree in your's family. I will explain to you more about the message in regard to the deceased. If you are the actual owner of this email address.

Yours Sincerely,
John Burton

Email analysis :

NOTE : ju.cv101@yahoo.com
NOTE : 74.6.135.123

Sunday, November 18, 2018

JOINT PARTNERSHIP investment

17, Seventh Avenue
Manor Park
London
United Kingdom
Zip Code: E12 5JL

Dear Sir/Madam,

I am looking for a profitable Real Estate or Medical Investment business in your country and I would be glad if you assist me. We can both go into

JOINT PARTNERSHIP investment and once we are agreed with the Terms and Condition, we can go ahead.I would like to invest part of my family finances (Inherited), in your Country under your care and full management alongside with me, since I have never been opportune to visit your Country before. I believe investing through you as a citizen will make it a lot easier for me. If you are interested, please get back to me and I will introduce you to our fund managers and bankers.We will provide the finances required for the investment and our first choice of investment is Real Estate business which I believe never depreciates in value. Agriculture or any fast movable product that is profitable business will also be regarded as a good offer. The amount what we have can provide us with any sizable business depending on how it is managed after you receive it.I cannot send you more details until I hear from you.I would like to know what other types of investment is more lucrative knowing fully well your economic trend and that which will yield high returns.

Best Regards,
S.K. ADAMS

Email analysis :

NOTE : adams_s2300@yahoo.com
NOTE : Received : ⁨from sonic.gate.mail.ne1.yahoo.com
NOTE : by sonic302.consmr.mail.bf2.yahoo.com
NOTE : client-ip=74.6.135.42 (yahoo); ⁩

Deposit

Good day ,

Please find attach receipt of deposit made for the attach purchase order.
Do advice on date of delivery.

Download to view.

Regards.

Deposit.zip

Email analysis :

NOTE : Bokamoso Peggy
NOTE : peggybokamoso@gmail.com
NOTE : client-ip=209.85.220.65;⁩


File analysis :

NOTE : Open Deposit.zip
NOTE : This file is a virus
NOTE : Bkav : JS.eIframeHlNMe.
NOTE : Cyren : Trojan.DHVJ-8
NOTE : Sophos AV : Troj/Phish-DZN
NOTE : TrendMicro : TROJ_FRS.VSN16J18
NOTE : TrendMicro-HouseCall : TROJ_FRS.VSN16J18
NOTE : Zoner : Probably HTMLUnescape

Welcome To Bank Of America Headquarters.

Welcome To Bank Of America Headquarters.

You total SCAM VICTIMS COMPENSATION FUNDS is waiting to be credited to you account for online
banking transfer as soon as we hear back from you with you contact
details, You cell phone is needed, funds amount: $486.8Million.

Thanks,
E-mail:bankoffamerica21@gmail.com
Contact:+1(202) 844-0779
Brian T. Moynihan
CHAIRMAN BANK OF AMERICA HEADQUARTERS

Email analysis :

NOTE : FBI.@topaz.ocn.ne.jp
NOTE : bankoffamerica21@gmail.com
NOTE : X-Originating-Ip : ⁨[197.210.47.224]⁩


NOTE : Received : ⁨from mzcstore251.ocn.ad.jp
NOTE : (mz-fcb251p.ocn.ad.jp [180.8.112.228])

WITH GOD YOUR SUCCESS IS GUARANTEED

PAYMENT DISBURSEMENT SECTION, QUARTIER, ACCRA GHANA Address: Liberia Road, Heritage Tower, Ambassadorial, Ridge, Accra Ghana Tel: 00233 547 493 588 E-mail: tafikdada@accountant.com This is to inform you that your name appeared among twenty five foreign depositors listed for part payment of their long overdue funds in (UBA BANK). The governor of UBA BANK released the payment order of (US$950,000.00). only after a debt reconciliation meeting with the President of Republic of Ghana which was held in Accra on 28th of October 2018. The governor signed the payment to be made through two prime banks(UBA and ECO BANK) in Ghana. The payment starts from today and will end on the 30th NNovember 2018. Note, if you are not able to receive the payment on or before the date given above, your payment will be cancelled. UBA BANK will effect the payment through ATM Master/Visa Card. Please take note, the payment takes effect from today and you are advised to send the following information for your payment: Name:……………………………………… Address:………………………………………… Phone Number:……………………………………….. You are given maximum of 24hours to respond to this message. Failure to respond on or before the given date, this office will assume you are not the supposed recipient and will cancel your name from the list. I am looking forward to receive your reply. Regards, Mr. Tafik Dada Section Head

Email analysis :

NOTE : tafikdada@outlook.com
NOTE : tafik@wit.ocn.ne.jp
NOTE : Received : ⁨from User (p180087-ipngn200304yosemiya.okinawa.ocn.ne.jp [180.25.1.87])


NOTE : by vcwit.ocn.ne.jp

Your life is in your hands

Hi

Dо nоt mind оn my illitеrасy, I аm from China.

This is your last chance to save your life.

I uрlоаdеd thе maliсiоus рrоgram оn yоur systеm.
Sinсе thаt mоment I рilfеrеd аll рrivy baсkgrоund frоm yоur systеm. Аdditiоnally I havе somе morе соmрrоmising evidеnсе. Thе mоst intеrеsting evidenсе thаt I stоlе- its a vidеоtаре with yоur *. I аdjustеd virus оn а * wеb sitе аnd аftеr yоu loadеd it. Whеn yоu dесidеd with thе video аnd tарреd оn a рlаy buttоn, my dеlеtеriоus sоft аt оnсе sеt uр on your systеm. Аfter adjusting, yоur саmera shооt thе vidеоtаре with yоu *, in аddition it savеd рreсisеly the * videо you * оn. In nеxt fеw dаys my mаlwаre cоllесtеd аll your sосiаl and wоrk соntacts.

If you wаnt tо delеtе the rесords- pay me 888 еuro in BTC(сryptоcurrеncy).
I providе you my Btс numbеr - 1DQqZVUFopQ6v1rMC8GeCZNKnrEQt2guha
Yоu havе 24 hours after rеаding. When I get trаnsfеr I will dеstroy thе vidеotаpе еvermоrе.
If you need 50h just Open the calculator on your desktop and press +++
Other way I will sеnd thе tаpe to аll yоur сollеаguеs and friends.

Email analysis :

NOTE : Viktoria@wellnesselfie.com
NOTE : Received : ⁨from treyleraksesuar.com (treyleraksesuar.com [193.124.44.32])

Reply

Your ATM Card of $5.5 Million is ready for shipment. Urgently reconfirm your Delivery address and your direct
phone number immediately

Reynolds Garrison
Group Managing Director
First Bank

Email analysis :

NOTE : raynoldsdarrison51@gmail.com
NOTE : text@extra.ocn.ne.jp
NOTE : Received : ⁨from User (p722031-ipngnfx01aobadori.miyagi.ocn.ne.jp [153.156.220.31])


NOTE : by vcextra.ocn.ne.jp

Monday, October 29, 2018

Attention Dear Beneficially !!

Attention Dear Beneficially !!

Your over due compensation fund from UBA Bank Of Africa which we agreed to deliver to you in fiscal cash payment, the fund is already sealed and package with a security proof box sum of $2.5 Million, his currently at your Airport in United State of America, by diplomatic agent, and he is waiting for you to forward your current information.

Quickly contact him with your full information,

your full name:................,
resident address:...............,
mobile phone number:..........,
name of your nearest airport:..........,

For him to locate your home with your package, and to avoid delivery to wrong person,
contact him on his current phone number:+1 (661) 339-8536 ,
forward it today for him to locate you immediately and delivering your package to you .

Make sure you forward your full information to him and his name is Mr. Robert Umar, E-mail: (dip.robertumar@gmail.com )

Compliment of the Year ,

Kind regards,
Mrs Jacinta Hilary.

UN Foreign Payment Officer.

Email analysis :

NOTE : dip.robertumar@gmail.com
NOTE : dip.robertumar.@crest.ocn.ne.jp
NOTE : X-Originating-Ip : ⁨[156.0.214.61]⁩

Saturday, October 6, 2018

Email spoofing



Email spoofing is the creation of email messages with a forged sender address. Because the core email protocols do not have any mechanism for authentication, it is common for spam and phishing emails to use such spoofing to mislead the recipient about the origin of the message.

Technical detail

When an SMTP email is sent, the initial connection provides two pieces of address information: MAIL FROM: - generally presented to the recipient as the Return-path: header but not normally visible to the end user, and by default no checks are done that the sending system is authorized to send on behalf of that address.RCPT TO: - specifies which email address the email is delivered to, is not normally visible to the end user but may be present in the headers as part of the "Received:" header. Together these are sometimes referred to as the "envelope" addressing, by analogy with a traditional paper envelope, and unless the receiving mail server signals that it has problems with either of these items, the sending system sends the "DATA" command, and typically sends several header items, including:


From: Joe Q Doe < joeqdoe@example.com > - the address visible to the recipient;

but again, by default no checks are done that the sending system is authorized to send on behalf of that address.

Reply-to: Jane Roe < Jane.Roe@example.mil > - similarly not checked

and sometimes:

Sender: Jin Jo < jin.jo@example.jp > - also not checked.

The result is that the email recipient sees the email as having come from the address in the From: header; they may sometimes be able to find the MAIL FROM address; and if they reply to the email it will go to either the address presented in the From: or Reply-to: header - but none of these addresses are typically reliable, so automated bounce messages may generate backscatter.


Use by spam and worms

Malware such as Klez and Sober and many more modern examples often search for email addresses within the computer they have infected, and use those addresses both as targets for email, but also to create credible forged From fields in the emails that they send, so that these emails are more likely to be opened.

For example:

Alice is sent an infected email which she opens, running the worm code.

The worm code searches Alice's email address book and finds the addresses of Bob and Charlie.

From Alice's computer, the worm sends an infected email to Bob, but forged to appear to have been sent by Charlie.

In this case, even if Bob's system detects the incoming mail as containing malware, he sees the source as being Charlie, even though it really came from Alice's computer; meanwhile Alice may remain unaware that her computer has been infected.


Fooling media

It has happened that the media printed false stories based on spoofed e-mails.

In October 2013, an e-mail which looked like it was from the Swedish company Fingerprint Cards was sent to a news agency, saying that Samsung offered to purchase the company. The news spread and the stock exchange rate surged by 50%. It was later discovered the e-mail was a fake.

Legitimate use

In the early Internet, "legitimately spoofed" email was common. For example, a visiting user might use the local organization's SMTP server to send email from the user's foreign address. Since most servers were configured as "open relays", this was a common practice. As spam email became an annoying problem, these sorts of "legitimate" uses fell out of favor.

When multiple software systems communicate with each other via email, spoofing may be required in order to facilitate such communication. In any scenario where an email address is set up to automatically forward incoming emails to a system which only accepts emails from the email forwarder, spoofing is required in order to facilitate this behavior. This is common between ticketing systems which communicate with other ticketing systems.

The effect on mailservers

Traditionally, mail servers could accept a mail item, then later send a Non-Delivery Report or "bounce" message if it couldn't be delivered or had been quarantined for any reason. These would be sent to the "MAIL FROM:" aka "Return Path" address. With the massive rise in forged addresses, Best Practice is now to not generate NDRs for detected spam, viruses etc. but to reject the email during the SMTP transaction. When mail administrators fail to take this approach, their systems are guilty of sending "backscatter" emails to innocent parties - in itself a form of spam - or being used to perform "Joe job" attacks.

Identifying the source of the email

Although email spoofing is effective in forging the email address, the IP address of the computer sending the mail can generally be identified from the "Received:" lines in the email header. In many cases this is likely to be an innocent third party infected by malware that is sending the email without the owner's knowledge.

Countermeasures

The SSL/TLS system used to encrypt server-to-server email traffic can also be used to enforce authentication, but in practice it is seldom used, and a range of other potential solutions have also failed to gain traction.

However a number of effective systems are now widely used, including:

  • SPF
  • Sender ID
  • DKIM
  • DMARC

Although their use is increasing, estimates vary widely as to what percentage of emails have no form of domain authentication: from 8.6% to "almost half". To effectively stop forged email being delivered, the sending domains, their mail servers, and the receiving system all need to be configured correctly for these higher standards of authentication.

As modern countermeasures prevent spammers from spoofing the envelope-from address, many have moved to utilising the header-from address as seen by the recipient user rather than processed by the recipient MTA. Proprietary implementation beyond the scope of the SPF schema is required to protect against certain header-from spoofing implementations.

© From Wikipedia, the free encyclopedia

Security Warning

Hello!

I'm a member of an international hacker group.

As you could probably have guessed, your account *@* was hacked, because I sent message you from your account.

Now I have access to all your accounts!
For example, your password for *@* : dod419419xk

Within a period from July 31, 2018 to October 3, 2018, you were infected by the virus we've created, through an adult website you've visited. So far, we have access to your messages, social media accounts, and messengers. Moreover, we've gotten full damps of these data. We are aware of your little and big secrets...yeah, you do have them. We saw and recorded your doings on porn websites. Your tastes are so weird, you know.. But the key thing is that sometimes we recorded you with your webcam, syncing the recordings with what you watched! I think you are not interested show this video to your friends, relatives, and your intimate one...

Transfer $800 to our Bitcoin wallet: 1PwENLsmQ2Z6b4EJfXDeeXKBj9v878uHRf

If you don't know about Bitcoin please input in Google "buy BTC". It's really easy.

I guarantee that after that, we'll erase all your "data" :)

A timer will start once you read this message. You have 48 hours to pay the above-mentioned amount.

Your data will be erased once the money are transferred.
If they are not, all your messages and videos recorded will be automatically sent to all your contacts found on your devices at the moment of infection.

You should always think about your security.
We hope this case will teach you to keep secrets.
Take care of yourself.

Email analysis :

NOTE : BTC : 1PwENLsmQ2Z6b4EJfXDeeXKBj9v878uHRf
NOTE : Received-Spf : ⁨Softfail (mailfrom) identity=mailfrom;
NOTE : client-ip=87.196.189.84; helo=87-196-189-84.net.novis.pt;


INFOS : It's just an "Email spoofing".
INFOS : (Email spoofing is the creation of email messages with a forged sender address.)
INFOS : The password was already used in other scams.
INFOS : (http://www.scam.cz/search?q=dod419419xk)

Tuesday, October 2, 2018

REDBULL AWARD 2018

Red Bull Company Limited Jalan Gasing, 46000 Petaling Jaya, Selangor. Malaysia Tell: +601123437039 E-mail: redbulldlivery844@gmail.com United Kingdom Tel: +44 182 723 0264 Announcement!!! This is to inform you that red bull 2018 Customer's, year promotion held here in Malaysia and United Kingdom. You have been selected as a lucky winner of £1,000.000.00 GBPS,(great British pounds sterling) as our lucky winners. Contact--E-mail- redbulldlivery844@gmail.com Dear Lucky Winner. Your EMAIL was drew from the world wide database as a result of our customer's online promo draws held in Malaysia and United Kingdom, the Red Bull Lottery organization has been doing this promo for the past 3 decades and you are a lucky winner of £1,000.000.00 GBPS, on this Customer's year Red Bull promo all you have to do is to fill this verification form and submit back. Once again we congratulate you as our CUSTOMER'S RED BULL LOTTERY OF THE YEAR PROMOTION winner. For further step of your claims, you are advice to fill the claims form below and get back to us for claim instructions within 72 Hours of receipt of this email. FULL NAME:________ SEX:_______________ COMPANY: IF ANY ____________ FULL CONTACT ADDRESS:_________ PHONE:_________ AGE:____ CELL:____ FAX:____ CITY:_____ STATE:________ ZIP CODE:______ COUNTRY: ______ OCCUPATION: _____ E-MAIL ADDRESS:_______ Have You Won Before: Yes Or No?______________ CONGRATULATIONS!!! Yours sincerely, James Brown Email: redbulldlivery844@gmail.com United Kingdom Tel: +44 182 723 0264 Accept my hearty congratulations once again

Email analysis :

NOTE : Received : ⁨from mail.nemiya.com (mail.nemiya.com. [46.151.8.4])


NOTE : cyrus@kaicarmail.net
NOTE : redbulldlivery844@gmail.com

Your life can be ruined,concentrate.

Hi, victim.
This is my lаst wаrning .
I writе yоu beсausе I put a mаlwаre оn thе wеb раge with pоrn whiсh you havе visitеd.
My virus grаbbеd аll your persоnal infо and turned оn your cаmera whiсh сарtured thе prоcеss оf yоur onanism. Just aftеr that the soft sаvеd yоur contасt list.
I will dеlеtе the сompromising vidеo and infо if you рay mе 250 USD in bitcоin. This is аddress for payment: 1PLbD9emvLALhaoTsocsPkUiQ898ptFGQC

I give you 24 hоurs аfter yоu open my message fоr making the transactiоn.
As sооn аs yоu read thе mеssаge I'll sеe it right аwаy.
It is not nесessаry to tеll me that you havе sent money tо me. This address is cоnnесtеd to yоu, my systеm will dеlеte еvеrything automaticаlly aftеr transfer confirmаtion.
If you nееd 48 h just reрly оn this lettеr with +.
You cаn visit thе рolice station but nobody can helр you.
I dont livе in yоur сountry. So thеy cаn nоt trаck my lосatiоn еven fоr 8 mоnths.
Goodbye. Dont forgеt аbout the shame and to ignоre, Your lifе cаn be ruinеd.

Email analysis :

NOTE : client-ip=193.124.44.91;
NOTE : https://www.shodan.io/host/193.124.44.91


NOTE : Viktoria@allenphan.com
NOTE : BTC : 1PLbD9emvLALhaoTsocsPkUiQ898ptFGQC

Monday, September 17, 2018

Moneygram Scam

We havedeposited the check of your fund (7.500,000,00USD) through Money Gram after our finally meeting regarding your fund,All you will do is to contact Money Gram director Mr Daniels Mike via E-mail (moneygram351@aol.com) He will give you more direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrongtransfer such as:

Receiver's Name _______________
Address: ________________
Country: ____________
Phone Number: _____________
I.D Card:_____________

Though
Mrs. Susan Kent has sent $7000 in your name today So contact their Director Hilary Samson as soon as you receive this email or call him +229-62628302 and tell him to give you the Mtcn, to pick the $7000 Please let us know as soon as you received all your fund,

Best regard Susan Kent.

Money Gram AGENT

Email analysis :

NOTE : moneygram351@aol.com
NOTE : Kent.@alpha.ocn.ne.jp
NOTE : 153.149.230.37

Johnson (Scam)

United States Unpaid Payment Center New York, NY 10017, United States Attention Beneficiary, This letter is from United Nations Unpaid Payment Center newly invented by the World Financial Service Authority United States Of America/United Kingdom. This body was set up to discover all outstanding unpaid fund being owed by Governments, Companies or Individuals all over the world through Contract Payment, Inheritance Payment, Consignment Payment and Lottery Winning Prize Payment, your name appeared among the beneficiaries who will receive a part-payment of USD$750,000.00 (Seven Hundred And Fifty Thousand United State Dollars Only) which has been approved today. It will interest you to know that we have discovered an outstanding unpaid/unclaimed sum of money in favor of your name and a mandate has been given to this body, United States Unpaid Payment Center to ensure that this fund gets to you without any delay. Note that a special payment arrangement has been made with our paying bank to transfer the said fund directly to your Bank account or alternatively you can come in person to our office to receive the fund. You are hereby advised to urgently furnish this office with your detailed information to enable us open up communication with you regarding the release of your fund immediately. The information required from you to enable us process your payment is as follows. (1) Your Full Name: (2) Residential Address: (3) Phone Number: (4) Profession (5) Age You are advised to contact us immediately with the above requested information for further details. Thanks. Yours Truly Dr. woods robert

Email analysis :

NOTE : infor_unitednation_unpaidcenter@yahoo.com
NOTE : admin@globiz.hu
NOTE : Received : ⁨from [10.8.7.10] (unknown [45.32.181.159]) by gamma.globiz.hu (Postfix)

Urgent Reply Needed Please (Scam)

Dear beloved, My name is Mrs Habibah Fenyang i am from London, I am a sick widow suffering from cancer for so many years and From all indication i will die soon because my condition is deteriorating and its quite obvious that i might not live long, because the cancer stage is now very severe. as the doctor said. I am all alone in this situation as My husband Mr Mohamed Hanadi Fenyang died in a air crash on the 31st October 1999 in an Egyptian airline Boeing 990 and my only daughter died in the London BOMB ATTACK. I have suffered allot of pains in this sickness and so much loneliness here, so funny world that after all i inherited from my husband, i still cannot buy a good health. and i wish and pray that you will never suffer or experience this situation In Jesus name. as i am about to die all i want now is that my inherited money be used in charity work for humanitarian service to help cancer patient and the poor and needy all over the world.. My late husband was a very wealthy oil merchant and after his death, i inherited the sum of $18,000,000.00 (Eighteen Million United State Of American Dollars) which i have managed all these while before i became sick and diagnose to die soon. This $18,000,000.00 is deposit with a security bank in London. I am contacting you with regard to my last wish on charity work for humanitarian service, i want 40% of the fund used to open a foundation for cancer in my name, 35% for motherless babies less privilege and homeless in EUROPE,AMERICA, ASIA AND AFRICA and 25% will be for you because of your help and any other process you might undergo in caring out my wish. Please i seek your utmost trust to help me accomplish this wish on charity work for humanitarian service, please if you know that you will no do as i have wished and stated above, do not reply me for God sake and remember GOD is watching us. and he will judge all men. every thing on earth is vanity upon vanity, what matters is how much people we can help while on earth. i need your help on this project. I will wait to read from you as this is urgent, Please contact me on my email mrshabibahfenyang3@gmail.com Your Beloved in God, Habibah Fenyang mrshabibahfenyang3@gmail.com

Email analysis :

NOTE : mrshabibahfenyang1@gmail.com
NOTE : donotreply@juno.ocn.ne.jp
NOTE : Received : ⁨from User (p182032-ipngnfx01fukuhanazo.fukushima.ocn.ne.jp [153.142.125.32])

Friday, September 7, 2018

Guaranteed 1st Page On Google

Hi,

We are an Indian Digital Marketing Company, offering the below-mentioned services at a modest rate.

We have a dedicated team of professionals with over 10+ years of experience.

Our services at a glance: -

1. Search Engine Optimization.
2. Google AdWords.
3. Bing Ads.
4. Facebook Advertisement.

Do let me know if you are willing to discuss a possible marketing solution for your website. I can send you more details on the packages/plan of action.

Kinds Regards,
Shreya
Marketing Consultant

Email analysis :

NOTE : shreya.webtech665@outlook.com
NOTE : 104.47.124.209

Thursday, August 30, 2018

You will be ashamed __ * *

You can visit the police station but nobody can help you.
I dont live in your country. So they can not trace me even for 7 months.

Your device was controlled by my malware.
We turned on your webcam, during your porn-site visit.
Now I have the video material with you, caressing yourself.
We copied all your contacts and if you want us to keep this secret we need to win 420 $ in bitcoin.

Use this bitcoin address to pay 1Fpc9bHDoaXcNZUXp4jSCs7yBs2yoxTipK
(use it like your credit card number)

I give you 30 h after clicking on my message for making the payment.
You can get 48 h only write back +.

If you want me to show proofs I will show it to seven your friends after that I will give you their contacts. If you want you will ask them if they have received something or not.

Goodbye. Dont forget about the ignominy.

Email analysis :

NOTE : support@kd00.com
NOTE : 1Fpc9bHDoaXcNZUXp4jSCs7yBs2yoxTipK
NOTE : 185.17.123.224 (kd00.com)⁩

Dear E-mail owner,

Publishers Clearing House 101 Winners Circle Port Washington, NY 11050 Dear E-mail owner, You Have Won A Life-Changing Prize! of $100,000.00 This weeks give away from our Bulletin Gwy No. 2224. On behalf of Andy Goldberg (CEO) and the Publishers Clearing House Team, It is my honor to announce to you the result about our special Customer Appreciation Prize that our famous Prize Patrol guarantees to award. All participants were selected randomly from World Wide Web site through computer draws system and extracted from over 100,000.00 companies and personal e-mail addresses. Your e-mail address attached to Ticket number: B9564 7560 with serial number 046560 drew the winning numbers 6 7 14 16 17 27 Bonus 32. You have therefore been approved of our weekly forever prize to claim a total sum of $100,000.00 (One Hundred Thousand U.S Dollars Only) in check credited to file EAAL/9080118308/15 personally given along with balloons, bouquet of roses and a big check in hand ! To file for your claim, please send your Ticket number (B95647560), Full Name, Residential address, State, City, Country, Date Of Birth, and your personal Mobile# to our corresponding Fiduciary Prize Patrol Ambassador in West Virginia immediately you get this message for quick give away and delivery of your winners check. Contact information is as follows: Randolph Maupin Jr E-mail: pch.redemption.center@gmail.com Phone: 718-521-2546 Hours of Operation: M-F 8:00am-4:59pm MARTINSBURG, WV 25401 Please note: Considering too many winners, before visiting our payment centre, Contact our prize agent with the above details as soon as possible. ***Due to possible mix up of some numbers and email contacts, we ask that you keep this award strictly away from Friends, Family and public notice until your claim has been processed and your prize remitted. This is part of our security protocol to avoid double claiming or unscrupulous acts by some participants of this program. *** Congratulations!!! Sincerely Yours, Deborah Holland Executive Vice President, Publishers Clearing House

Email analysis :

NOTE : pch.redemption.center@gmail.com
NOTE : client-ip=213.186.33.56
NOTE : helo=cabernet.venus.it; envelope-from=apache@mstudios.it;

Monday, August 27, 2018

FWD (Phishing Société Générale)

Validez votre Pass Sécurité

Bonjour,

-Nous vous invitons à consulter votre compte pour mettre à jour vos coordonnées personnelles.

Pour le consulter,vous devez vous connecter a votre espace securise de Banque en Ligne.

Valider mon Pass Sécurité

Ce message est genere automatiquement, ne repondez pas a l'expediteur.
Si vous n'etes pas destinataire(s) de ce message, merci de le detruire.

Directoire et Conseil de Surveillance au capital de 4 046 407 595 euros - Siege social et adresse postale : 115, rue de Sevres - 75 275 Paris Cedex 06 - RCS Paris 421 100 645 - Code APE 6419Z, intermediaire d'assurance, immatricule A l'ORIAS sous le n° 07 023 424

Jedsetde

Votre N° Client : E19081690

© dfoRi.

Phishing screenshot :


Email analysis :

NOTE : societegeneraleclientreplyservices1@movistar.es
NOTE : X-Sender-Ip : ⁨86.109.101.142⁩

Phishing analysis :

CLICK : Valider mon Pass Sécurité
OPEN : http://mowallet.co.za/img/common/
REDIRECT : http://mowallet.co.za/img/common/4b5fe/login.php?*
SCREENSHOT :


NOTE : TEST CODE
REDIRECT : http://mowallet.co.za/img/common/4b5fe/dcr-web/

loan calculation. (Scam)

HELLO,

I want you to know that we have the loan offer with an interest 3% and that the packages start after 7 months of the loan transferred to the account of the borrowers. If this is correct,
complete the following information to move to the next step of the loan calculation.

Application for a loan

* Name and surname .........................
* Sex ..............................
* Required borrower number ...............
* Duration of the loan .....................
* Country ..........................
* Residential address
* Phone number ......................
* Fax machine
* Profession ......................
* Purpose of the loan ........
* Monthly income ....................

* Thanks for your time.larrykingsley508@gmail.com

Email analysis :

NOTE : isabella.melin@skola.ljungby.se
NOTE : client-ip=195.84.108.137;⁩


Email leak :

"aaronreid@windowslive.com" , "bofasaur@gmail.com" , "sergeikurkov@yahoo.co.uk" , "dionnex18@hotmail.co.uk" , "harrold.fiducious@gmail.com" , "johnnyjones101@mail.com" , "ChuckNorris1940official@outlook.com" , "realfakedocs@live.fr" , "taylorhelen66@gmail.com" , "cj96050@gmail.com" , "fransi@fransimalin.co.uk" , "drachenlords1510@live.de" , "engr.hanks@yahoo.co.za" , "Webinis123@gmail.com" , "jessicapierce318@gmail.com" , "marjac1997@gmail.com" , "meandcecilia@gmail.com" , "jw508328@gmail.com" , "whiter958@gmail.com" , "reverendtomjones@gmail.com" , "Jerry.fring@yahoo.com" , "Salamallikki@hotmail.com" , "cartoonherodude@gmail.com" , "richiecool84@hotmail.com" , "laurenmachan@hotmail.com" , "garywelburn@hotmail.com" , "realtopdocument@outlook.com" , "whiter958@msn.com" , "rob.karhu@gmail.com" , "keithspr3@hotmail.com" , "bill.martins@hotmail.com" , "rich.dude.swag@gmail.com" , "sperks548@gmail.com" , "mimsy_wimsy@hotmail.co.uk" , "Dr.Richard.Poke@gmail.com" , "rosettareiter@gmx.ch" , "matthew.g10025@yahoo.com" , "parkhurstrobert112@yahoo.com" , "aamirarais@yahoo.com" , "gbreezy820@gmail.com" , "jennatulls27@gmail.com" , "mikeandrewsma@yahoo.com" , "pschlacter400@gmail.com" , "GloriafromEngland@guerrillamail.org" , "drwoodland@mail.com" , "miakriskoff@gmail.com" , "franckarnaud834@outlook.com" , "mjrmoney@gmx.com" , "marjac1995@gmail.com" , "marj.ac1993@gmail.com" , "marja.c1993@gmail.com" , "acaster247@gmail.com" , "Hughjarce333@gmail.com" , "edelmirahoewaed@outlook.com" , "joe2320022002@yahoo.ca" , "oldmichaelhunt@gmail.com" , "marjac.1995@gmail.com" , "marjac.1993@gmail.com" , "m.litoris224@gmail.com" , "shitefu@tapme.33mail.com" , "VCorningstone78@gmail.com" , "RiversMontana1@gmail.com" , "clodcuillon@gmail.com" , "stadlpaura@monumentmail.com" , "t_burak_t@hotmail.co.uk" , "johnchre@hotmail.com" , "mikelitoris224@gmail.com" , "EnglishCofA@gmail.com" , "nie@niepodam.pl" , "dotmatrixanon@gmail.com" , "anita01@gmx.com" , "iamjackenoff@gmail.com" , "Rockstaradams69@gmail.com" , "reneroussimoff@gmail.com" , "drp.hussy@yahoo.com" , "marjac1993@gmail.com" , "chudd.buckworth444@gmail.com" , "the1freak@gmx.de" , "paulwillian489@gmail.com" , "CharlesPersehouse@yahoo.com" , "taracherry@outlook.com" , "jknauff@gmx.co.uk" , "topicload@gmail.com" , "Margleech58@hotmail.com" , "karin@hsm.co.za" , "fred.piece@yahoo.com.my" , "marthamcjones@aol.com" , "natbark@alumni.com" , "honeypotrestaurant@gmail.com" , "sheepsquadtv@gmail.com" , "BeverliMcAdoo@gmail.com" , "alexythu145@gmail.com" , "cheryllduncan65@yahoo.com" , "business890@outlook.com" , "ahururidd-9485@yopmail.com" , "jsmith@xlmail.net" , "taylorandansley@windstream.net" , "geoffreybennett47@gmail.com" , "buttermymuffins25@gmail.com" , "anywhere156@yahoo.co.uk" , "joe_barbro@doctor.com" , "davesheppy28@gmail.com" , "jseagal@gmail.com" , "taylorlandscaping@me.com" , "Martainroach@hotmail.com" , "FWThompson@europe.com" , "SamuelSmith19611@gmail.com" , "francovikovic69@yahoo.pt" , "Ronny.Dobs123@gmail.com" , "Ronnie.Dobbs123@gmail.com" , "jasonhall0896@myway.com" , "liam_ryan@yahoo.com" , "bui@cock.li" , "collinsphil32@gmail.com" , "lewis.ranja@yahoo.com" , "thomas.leer.q@gmail.com" , "jsmithzq@yahoo.com" , "fatherbfinger298@gmail.com" , "patchypirate186@aol.com" , "heroinking@brazzers.com" , "lightningfastvcrrepair@gmail.com" , "vbonjovi2@gmail.com" , "justin@bladewax.com" , "kazzar123@mail.com" , "milan.jamrich@fcpk.cz" , "drthomasdequincey@gmail.com" , "Greta.Jones12@outlook.com" , "justincase9937@gmail.com" , "robertbenjaminshaw@mail.com" , "mrobiiwuala@yahoo.com" , "cssmith017@gmail.com" , "aprilatchurch@gmail.com" , "harpuun1337@gmail.com" , "tatyanalaguna29@gmail.com" , "mingliangsteve@gmail.com" , "martin.maybach-muller@yandex.com" , "lemongrass.expounder@gmail.com" , "clients324@gmail.com" , "jon.targaryen420@gmail.com" , "Martin.Kelly87@usa.com" , "info@grovechurch.com" , "positionedmissionary@disciples.com" , "thebarbiemuseum@aim.com" , "grumpygamer@gmx.us" , "jamiebednall@outlook.com" , "jens.ultrecht@gmail.com" , "jhendrix1432@gmail.com" , "crapcatcher123@gmail.com" , "joe_pallett@hotmail.co.uk" , "rmquekis@gmail.com" , "hatchetluvvb@gmail.com" , "robertperez258@yahoo.com" , "pierre.be@outlook.fr" , "johnsmith3212@mail.com" , "thebenwright@live.com" , "cwaterstreet@gmail.com" , "lizhenderson@eclipso.ch" , "tclayhanger@gmail.com" , "Moneymoney2075@gmail.com" , "majourmrmeaner@yahoo.co.uk" , "sarinageorgette@googlemail.com" , "barristerfaith16@gmail.com" , "htakayla@rocketmail.com" , "markqbell@gmail.com" , "Jon39deck@yahoo.com" , "jstrap987@yahoo.com" , "amandahugandkiss1964@gmail.com" , "esmupimpis@gmail.com" , "drnorway303@gmail.com" , "Johnsirus@gmail.com" , "sidneycrosby208@yahoo.com" , "sarah20135@live.com" , "derpaul1956@gmail.com" , "garrick.wong5@gmail.com" , "anitabrian56@yahoo.com" , "mcu1930@aol.com" , "sidneycrosby207@yahoo.ca" , "ceo.brain.researchincorporate@gmail.com" , "bobforcash@gmail.com" , "erwin.drongo@mail.com" , "Lucyhales13@yahoo.com" , "nmakuza@hotmail.com" , "similiev@gmail.com" , "nathaniel.smith@randstad.co.uk" , "acooper@mercyhurst.edu" , "standardbantransfer@hotmail.com" , "wmbhickok@gmail.com" , "whenmense@yahoo.com" , "cassio0molder@gmail.com" , "rlelepvrier@setca-fgtb.be" , "edwardldever@gmail.com" , "m.fahrenheit@hotmail.com" , "sunshineamcal@outlook.com" , "WillBeefs@gmail.com" , "info@DasErste.de" , "jvanschroeder@gmail.com" , "arc.collective200@gmail.com" , "piscina_de_la_muerte@hotmail.com" , "donfrank500@yahoo.com"

contact pastor Patricia Adams

MR.WILLIAMS James.

How are you today? I hope all is well with you and your family? I am using this opportunity to inform you that the transaction has been concluded with the assistance of another partner from Chile who financed the transaction to a logical conclusion.

Due to your effort, sincerity, courage and trust You showed during the course of the transaction. I didn't forget the promise I made, after all I wrote a Bank cheque valued at US$500,000.00 in your favor to compensate you for your effort, at least you should contact pastor Patricia Adams E-mail: {{ offcccd@gmail.com }}, and forward your contact information to her so that she can send it to you immediately.

Do let me know immediately you receive it so that we can share the joy together.At the moment, I'm very busy here because of the investment projects which I and the new partner are having at hand,Thanks and God bless you and your family.

Regards,
MR.WILLIAMS James.

Email analysis :

NOTE : client-ip=92.61.41.40;⁩
NOTE : offcccd@gmail.com
NOTE : azootas@one.lt


NOTE : azootas@one.lt

Email leak :

offcccd@gmail.com, azootas@one.lt, G.moore68@hotmail.com, G47PICK@HOTMAIL.COM, G8RIV@YAHOO.COM, G8page@gmail.com, GAHNSMITH@SYMPATICO.CA, GAIL.GORDON@ANDERSONDDB.COM, GAILALLARIE@YAHOO.CA, GAILBERRYGRAHAM@YAHOO.CA, GAILDAWSON55@HOTMAIL.COM, GAILDGRANT@HOTMAIL.COM, GAILP788@GMAIL.COM, GALA.COM@SYMPATICO.CA, GAMICHENER@COGECO.CA, GAMMER@COGECO.CA, GANDC.WEDDING@YAHOO.COM, GATORFAN2296@YAHOO.COM, GAWALKER@SYMPATICO.CA, GAY.SPONG@SYMPATICO.CA, GBAGBY@BELLSOUTH.NET, GBARTLETT@MOUNTAINCABLE.NET, GBELFRY@SYMPATICO.CA, GBIGGIN@SYMPATICO.CA, GBIRCH1@COGECO.CA, GBRAIL@CFL.RR.COM, GBROBINS49@GMAIL.COM, GBURNHAM@COGECO.CA, GCM_442@HOTMAIL.COM, GCORREIA2@COGECO.CA, GCOURT@ROGERS.COM, GDAYMAN@COGECO.CA, GDINSMORE2@COGECO.CA, GEEMORT@HOTMAIL.COM, GEJAMIESON@NS.SYMPATICO.CA, GENGAR@PERSONAINTERNET.COM, GEOGIEBEL@GMAIL.COM, GEORGE.TAKATA@SYMPATICO.CA, GEORGINABERNACHE1540@YAHOO.CA, GEORGINAMCCALLUM@YAHOO.CA, "GER DIENGOUD"@YAHOO.COM, GERLIN@ROGERS.COM, GERMARE4@HOTMAIL.COM, GET_OVR_IT16122121@HOTMAIL.COM, GFISHER@HOTMAIL.CA, GFORREST@TALKWIRELESS.COM, GGOFF1@COGECO.CA, GGPALMER@VAXXINE.COM, GGRIBBLE@LIVE.COM

Your life can be ruined,concentrate.

Hi, victim.

This is my last warning.
I write you beсausе I put a malwаrе on the wеb pаge with pоrn which you havе visitеd.
My virus grаbbed all yоur рersоnal info and turned on your cаmera whiсh cарturеd thе рrоcess оf yоur оnanism. Just after that the soft sаved your cоntact list.
I will dеlеtе thе compromising video аnd infо if you pay mе 400 EURO in bitсoin. This is аddress fоr раyment : 18LhvTGJJueu2kQWVtoNFyoJwDS8S6Sqmo

I give yоu 30 hours аfter you орen my messаge for making the transасtiоn.
Аs sооn аs you rеad the messagе I'll see it right awаy.
It is not nеcessary to tell mе that you hаvе sent money tо me. This аddress is connесtеd to yоu, my system will dеletе еverything аutоmаticаlly аfter trаnsfer сonfirmаtiоn.
If you nеed 48 h just reрly оn this lеtter with +.
Yоu саn visit the роlice station but nobоdy сan helр yоu.
If yоu try to deсеivе mе , I'll sее it right awаy !
I dont livе in yоur сountry. Sо they can not track my lосatiоn еvеn fоr 9 mоnths.
Goodbyе. Dоnt forget аbоut thе shamе and to ignоre, Your lifе сan be ruined.

Email analysis :

NOTE : 18LhvTGJJueu2kQWVtoNFyoJwDS8S6Sqmo
NOTE : help@infinitiofstuart.com
NOTE : Received : ⁨from xvhang.com (xvhang.com [194.58.46.164])

YOU HAVE A PACKAGE WITH FEDEX!

Attention: Beneficiary,

You have a Package from FedEx containing; (iPhone 8, Apple MackBook Pro and a Check worth $6.480,000.00USD) for delivery to your house address, you are to get back to us as soon as possible for more information and how to claim.

Yours Faithfully,
Mrs.Rose Michael

Email analysis :

NOTE : fedex_shipping8877@qq.com
NOTE : epenaloza@senamhi.gob.pe
NOTE : client-ip=200.10.71.235;⁩