Tuesday, September 16, 2014

NatWest link for Virus

NatWest Logo

You have a new private message from NatWest

To view/read this your secure message please click here

Email Encryption Provided by NatWest. Learn More.
Email Security Powered by Voltage IBE
Copyright 2014 National Westminster Bank Plc. All rights reserved.

Footer Logo NatWest

To unsubscribe please click here

National Westminster Bank Plc. All rights, save as expressly granted, are reserved. Reproduction in any form of any part of the contents of this website without our prior written consent is prohibited unless for personal use only.

Email analysis :
=================================================
NOTE : Return-Path : < denqv@bpbcorp.com >
NOTE : Received : from unknown (HELO localhost) (113.167.221.144)

NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0)
NOTE : Gecko/20100101 Thunderbird/24.2.0
NOTE : You have received a new secure message from NatWest
=================================================

Link analysis :
=================================================
NOTE : Click "To view/read this your secure message please click here"
NOTE : Open "http://high-hollin.org/nrhscgfayh/rxyxzmsbsy.html"
NOTE : A new download is processed :

NOTE : File "SecureMessage.zip" from http://www.explicacoesmagicmath.pt
NOTE : File "SecureMessage.zip" is a VIRUS !
=================================================

Virus analysis (DEF 20140916) :
=================================================
AVware : Win32.Malware!Drop
Avira : TR/ATRAPS.A.1717
Baidu-International : Trojan.Win32.Upatre.ABlK
DrWeb : Trojan.DownLoad3.34292
ESET-NOD32 : Win32/TrojanDownloader.Waski.A
Ikarus : Trojan-Spy.Agent
K7AntiVirus : Trojan (7000000c1)
K7GW : Trojan(7000000c1)
Kaspersky : Trojan-Downloader.Win32.Upatre.avh
Kingsoft : VIRUS_UNKNOWN
Malwarebytes : Trojan.Upatre
McAfee : Artemis!AE3D2F8620F0
Microsoft : TrojanDownloader:Win32/Upatre.AA
Panda : Trj/Chgt.F
Qihoo-360 : HEUR/QVM20.1.Malware.Gen
Sophos : Mal/DrodZp-A
Symantec : Trojan.Zbot
Tencent : Win32.Trojan-downloader.Upatre.Wqmz
VIPRE : Win32.Malware!Drop
ViRobot : Trojan.Win32.S.Agent.20992.PD
=================================================

Whois Analysis :
=================================================
high-hollin.org
=================================================
Domain Name:HIGH-HOLLIN.ORG
Domain ID: D153034212-LROR
Creation Date: 2008-06-20T18:34:26Z
Updated Date: 2012-06-19T08:02:22Z
Registry Expiry Date: 2015-06-20T18:34:26Z
Sponsoring Registrar:Tucows Inc. (R11-LROR)
Sponsoring Registrar IANA ID: 69
Domain Status: ok
Registrant ID:tuMZ59PcSs2k5l1K
Registrant Name:Douglas McCowen
Registrant Organization:None
Registrant Street: Riverside Barn
Registrant City:Winford- BRISTOL
Registrant State/Province:Avon
Registrant Postal Code:BS408HJ
Registrant Country:GB
Registrant Phone:+44.7985466869
Registrant Email:dhl_mccowen@hotmail.com
Admin ID:tuMZ59PcSs2k5l1K
Admin Name:Douglas McCowen
Admin Organization:None
Admin Street: Riverside Barn
Admin City:Winford- BRISTOL
Admin State/Province:Avon
Admin Postal Code:BS408HJ
Admin Country:GB
Admin Phone:+44.7985466869
Admin Email:dhl_mccowen@hotmail.com
Tech ID:tu9LIBi0nseyvCgJ
Tech Name:Pickaweb Limited Domains Dpt
Tech Organization:Pickaweb Limited
Tech Street: 7 Marlow Copse
Tech City:Chatham
Tech State/Province:Kent
Tech Postal Code:ME59DP
Tech Country:GB
Tech Phone:+44.8712180841
Tech Email:domains@pickaweb.co.uk
Name Server:NS7.UKHOSTSUPPORT.COM
Name Server:NS8.UKHOSTSUPPORT.COM
=================================================
explicacoesmagicmath.pt
=================================================
Domain Name: explicacoesmagicmath.pt
Creation Date (dd/mm/yyyy): 04/02/2013
Expiration Date (dd/mm/yyyy): 03/02/2015
Status: ACTIVE

Registrant

Francisco Cascao
Rua Francisco sa Miranda Lt 7
538
2975 538

Email: franciscocascao@iol.pt

Entidade Gestora / Billing Contact
EASYHOST - SERVI?OS INTERNET, UNIPESSOAL LDA
Email: dns@easyhost.pt
RACKSPOT LDA
Email: helpdesk@rackspot.com
Nameserver: explicacoesmagicmath.pt NS a.ns.rackspot.com.
Nameserver: explicacoesmagicmath.pt NS b.ns.rackspot.com.
=================================================

Hello Friend

Hello, I'm Norman Chan, Tak-Lam, S.B.S., J.P, Chief Executive, Hong Kong Monetary Authority (HKMA). I have a Business worth $47.1M USD for you to handle with me. Contact me for more details on this business proposal.

Email analysis :
===============================
NOTE : Return-Path :
NOTE : Received : from mail.hfs-sports.de (HELO hfs-sports.de) (87.139.42.29)

NOTE : Received : from 41.71.216.117 ([41.71.216.117]) by hfs-sports.de with ESMTP;

NOTE : X-Msmail-Priority : Normal
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2900.5843
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2900.5579
NOTE : Hello Friend
===============================

About Printing Solution for Mimaki and EPSON, HP Z6100

The Best Printing Solution for Saving the Cost.

Chip PROGRAMMER for Mimaki & Roland Printer

Inquiry to info@***.com

Mimak, Mimaki JV33, Mimaki 440ml, Mimaki Ink, Mimaki Chip
CISS ( Continuous Ink Supply System ) of EPSON 11880 & 9700, HP Z6100
for More Economic & Convenient USE

Inquiry to info@***.com

EPSON 11880, EPSON Ink. ESPON 9700, EPSON Printer, EPSON Ink, HP Z6100, HP Z6100 Ink, HP Z6100 Printer

Download Product Information

www.***.com

PLEASE DID YOU CHANGE YOUR BANK ACCOUNT DETAILS???

WORLD BANK AUDITORS/INTERNATIONAL MONETARY FUNDS
(IMF) Millbank Tower, 12th Floor, 21-24 Millbank, London
SW1P 4QP
From the Desk Of Sri Mulyani Indrawati
Managing Director and Chief Operating Officer, World
Bank
8th of September 2014

YOUR OVER DUE CONTRACT/INHERITANCE FUNDS
Attention. Beneficiary ,

This is to bring to your notice about the due process of your outstanding Contractual/Inheritance payment which was suspended by the British Council there by stopping the telex unit to pause the transfer of your contract/inheritance fund to your nominated bank account. As a result of this development, verification conducted by the Finance Ministry in conjunction with the Debt Verification Panel on your contract/inheritance case ,your file has been endorsed for payment awaiting your confirmations. During the auditing and closing of all financial records of the World Bank it was discovered from the records of outstanding foreign contractors due for payment with the World Bank Auditors London in the year 2013/2014 that your name and company is next on the list of those who will received their fund this quarter 2014. Meanwhile, a woman came to my office few days ago with a letter ,claiming to be your true representative. Here are her information for you to confirm to this office if this woman is truly from you or not, so that the world bank will not be held responsible for paying into the wrong account.

NAME: MRS. JANET WHITE
BANK NAME: CITI BANK
BANK ADDRESS: ARIZONA, USA.
ACCOUNT NUMBER: 6503809428.

Please, do reconfirm to this office, as a matter of urgency if this woman is from you. you are requested to fill and send this information for verifications purposes so that your fund valid us$10.7m us dollars will be remitted into your nominated bank account. this fund is as a result of inheritance on your behalf. Information needed from you for verification is as follow:

(1) Your full name and address:
(2) Your age and marital status:
(3) Your occupation:
(4) Your telephone/fax number:
(5) Your nationality:
6) Your Bank Account Number
7_ Scan any of your Id to send

As soon as we receive this, we will commence with all necessary procedures in other to remit this money into your account. the world BankAuditors and the ,Executive Board of Directors and the Brithis Councl for foreign over due inheritance fund have approved and accredited this reputable with the office of the minister of finance international remittance/foreign operations, to handle and supervise the transfer of all foreign inheritance funds for this second quarter payment of the year 2014.

However, we shall proceed to issue all payments details to the said Mrs. White, if we do not hear from you within the next seven working days from today. We are sorry for any inconvenience the delay in transferring of this fund must have caused you.

Yours Faithfully,
Sri Mulyani Indrawati
Managing Director and Chief Operating Officer, World

PAYMENT NOTICE OF YOUR FUNDS

OFFICE OF THE PRESIDENCY
FEDERAL REPUBLIC OF NIGERIA
Tel: Highly Confidential.
19 Walter Carrington Str. Ikoyi Lagos-Nigeria.
ASO ROCK VILLA, ABUJA ANNEX OFFICE.
From the Desk of Chief. Terry Edmond GCON.
Our Ref: FGN/OHG/OXD1/2011
TELEX: FEDGOVNIG.
PAYMENT FILE: FGN/BEN/08.

ATTN: Dear Beneficiary,

PAYMENT NOTICE OF YOUR FUNDS

May you remain favored.

This letter will definitely be amazing to you because of its realistic value. Sorry for the inconveniences that was rendered to you in your line of Inheritance Payment transaction with some Nigerian Officials some while ago. Without taking much of your time, my name is Chief.Jim Nagy, the Honorable Paymaster General of The Federal Republic of Nigeria. Presently, were in partnership with the American government in averting Scams and also to avert beneficiary funds delays here in Nigeria, So far, we have succeeded in Settling the likes of (Mrs. Ann Keyser, Mr. Edward Drake etc) their inheritance funds which was previously delayed. Your Funds were returned to the Federal Government Treasury some while ago because you did not finalize your claim for it. A week ago, the Presidency and the Federal Executive Council collectively agreed to release the sum of US$1,200,000.00 to you but to our surprise you sent down your representatives Mr. Robert Jason and Mr. Jim Harrison to collect this Funds on your behalf, this morning. Since you sent your representatives to us, kindly give us the authority to transfer your Funds into their own Bank Account in Singapore. We await your immediate response via email and telephone But if you did not Authorize this claim then fill and submit this form right away to this department:

FULL NAME:
HOME ADDRESS:
PHONE NUMBER:
AGE:
SEX:
STATUS:
OCCUPATION:
COUNTRY:

Officially Sealed,
Direct Line :+2347039237429

Chief.Jim Nagy
The Honorable Paymaster General.

STOP CONTACTING THOSE PEOPLE !!!

Kind Attention:

My name is Rev. John Anderson; I am a US citizen, 51 Years Old. My residential address is as follows. 5424 Pent ridge Street Philadelphia, Pennsylvania, 19143-4126, United States of America, I am one of those people that took part in receiving Inheritance funds and Lottery funds from African banks and European banks even from many lottery organizers few years ago and they refused to pay me, I had paid different fees or charges of over $85,000 while in the USA trying to get my funds from those banks and lottery organizers but all to no avail. So i decided to travel to WASHINGTON D.C USA with all my payment approval documents,and I was directed by the F.B.I. Director to contact a man called Mr. Stephen David Purchase, A BRITISH CITIZEN and a member of the UNITED NATIONS ORGANISATION (UNO) & INTERNATIONAL MONETARY FUNDS (IMF) COMPENSATION AWARD COMMITTEE currently staying in United - Kingdom. I contacted him in United Kingdom and he explained everything to me. Mr. Stephen David Purchase personally directed me on how to successfully claim my Inheritance and Lottery payment from the paying bank and right now I am the happiest man on earth because I have now finally received my funds totaling US$ 6 Million (Six Million U.S Dollars). Moreover Mr. Stephen David Purchase, showed me the full information of those people that are yet to receive their payments and I saw your names/your email address as one of the beneficiaries and that is why I decided to email you to stop dealing with those people because they are not with your funds but they are only making money out of you.

I will personally advise you to contact Mr. Stephen David Purchase in United-Kingdom immediately after reading this message. You have to contact him directly on this information below:

Contact Person: Mr. Stephen David Purchase
Contact Address: No. 285 Griffiths Drive Wolverhampton WV11 2JT United Kingdom.
eMail ID: mrstephendavid@gmail.com
Telephone Number: +44 702 406 8431

Contact him now and send him (1). Your full names, (2). Your full contact Address, (3). Your mobile phone numbers (4). Your Age and Occupation Etc... You really have to stop dealing with those people that are contacting you now telling you that your funds is with them because your funds is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing left with you. Once again stop contacting those people, I will advise you to contact only Mr. Stephen David Purchase in United - Kingdom so that he can help you process your payment through the paying bank instead of dealing with those liars that will be turning you around asking for different kind of money for fees to complete your transaction.

Thank You and Be Blessed.
Rev. John Anderson
5424 Pent ridge Street Philadelphia,
Pennsylvania, 19143-4126, U.S.A

YOU ARE BLESSED

COMPENSATION HEAD OFFICE ,
207 Monston Lane 407
MJ Leyland United Kingdom.
My Dear Friend,

Calvary greetings in the name of our Lord Jesus, and how are you today?

Due to your effort, sincerity, courage and trust worthiness you showed at the course of the UK ONLINE LOTTERY winning cheque shipment to your location, I want to compensate you and show my gratitude to you with the sum of $3 Million United States Dollars. I have authorized the finance house where I deposited the money to issue you an International certified bank draft cashable at your bank. My dear winner,I will like you to contact the CEO in charge of the finance house for the collection of this international certified bank draft. The name of the Person with your Cheque is Rev. Patrick Raymond.

COMPENSATION AND FINANCE HOUSE HEAD OFFICE
CONTACT AGENT Rev. Patrick Raymond
EMAIL: rev.patrick_raymond@yahoo.it
TELEPHONE: +44 703 198 8242..

At the moment, I am very busy in Sydney because of the investment Projects which myself and my new partner Mr. Peter Hills of CTL Express Delivery Company are having at hand. Finally, remember that I have forwarded instruction to Rev. Patrick Raymond at the finance house on your behalf to send the bank draft to you as soon as you contact him without delay. Please I will like you to accept this token with good faith as this is from the bottom of my heart. My sincere advice to you as a Christian is that you should endeavour to pay your tithe to a bible believing church when you get the money,because I noticed it as a fiduciary agent that you were skeptical about your winnings when you were been ask by the Uk lotto Agency Inc to file out a claim for your prize. And now the current policy of the Lotto organizer is that if an emerged winner fails to claim up his/her winning cheque of $9 Million United States Dollars.Its now mandatory that this fund can be remitted or forfeited to the fiduciary agent in charge of this winners file. However, I want you to contact him immediately as soon as you receive this information because he is leaving for the US by the end of this month and this might cost a deployment for you to receive this draft. Thanks and God bless you and your family. Hoping to hear from you as soon as you cash your Fund. Making the world a better place.

Regards,
Rev. Anna R. Philip
C.E.O / CHIEF ORGANISER

Monday, September 15, 2014

Fw: The package cost pls arrange

Dear Sir or Madam,

We are a professional tooling/mold maker with one stop of industrial service in Shenzhen China, it's glad to write you with keen hope to establish a business relationship with you.

1) Product R&D (Included ID,MD)
2) Prototype making
3) Plastic Injection mould -Insert molding / 2K molds/ Reverse mold /Over molding / Multi-cavity hot runner molds
4) Die Cast-Aluminum & Zinc
5) Blow mould / Vaccum Mould
6) Mass production /Assembly
7) Machining
8) Silicone Industrial product / Silicone gift / Silicone kitchenware

Please send 3D/2D drawings or samples to us if you have any needs, we will response with a competitive price A.S.A.P.

Yours very sincerely,

Bill
------------
CHINA WISDOM

Ref: Information about Your late Relation/Family member..

I am David Fenton, an Investment adviser/sole executor to your late relation.

There is Estate (Cash deposit in bank and some landed Properties) belonging to your late family member whom I will like to discuss with you; He is related to you going by the lineage, surname and country of origin. Once I receive your information and endorse same appropriately, I shall provide you with all the privileged information/legal documents relating to the deceased and also will give you guidelines on how to realize this goal without the breach of the law. I would respectfully request that you treat the content of this letter as privileged and respect the integrity of the information you come by as a result of this correspondence. Contact me immediately for more information and to begin the legal process of redeeming your lawful entitlement before the bank is compelled by law to hand over the money to the government.

This is my second but final attempt to reach you in view of this subject matter.

Kind Regards,
David Fenton

Thanks for quick reply

Dear Sir/Madam,

I am Mr. Jei Yuan,a Taiwanese citizen. However my main point of contacting you is to seek your sincere suggestion and guideline to invest in your country or rather go into Investment Partnership with you in your Country.

Thank you and Hoping to receive your positive response soon.

Best Regards,
Mr.Jei Yuan

Paksoytekink-Trade phishing

image.jpeg

Hello Dear

This is China Hongqiao Group Ltd. We want to buy directly below product, click on the link below and take our order.

http://inflablespamejenny.cl/ul/WebMail.htm

What do you have in stock? How much is price? How long does it take if order is done? We want to receive a quote.

Please let me know. I'll wait for your reply.

Sincerely,
China Hongqiao Group Ltd

Thanks.

Phishing analysis :
================================
NOTE : This is China Hongqiao Group Ltd. We want to buy directly below product, click on the link below and login your email address and password to be able to view our order.
NOTE : Click http://inflablespamejenny.cl/ul/WebMail.htm
NOTE : Paksoytekink-Trade phishing

NOTE : The website inflablespamejenny.cl seems compromised and relay a phishing page...

================================

Email analysis :
================================
NOTE : Received : from mtaout-aan01.mx.aol.com (mtaout-aan01.mx.aol.com [172.27.19.77])
NOTE : Received : from USER-PC (unknown [198.199.88.97])

NOTE : Return-Path : < senshisakura@aol.com >
NOTE : ORDER INQUIRY
================================

票据

╔真╗┊广┊商┊餐┊服┊建┊运┊17%┊╔诚╗
┃诚┃┊告┊品┊饮┊务┊筑┊输┊ 增┊┃信┃
┃服┃┊发┊销┊定┊发┊发┊发┊ 值┊┃可┃
╚务╝┊票┊售┊额┊票┊票┊票┊ 税┊╚靠╝

等其他各种国税,地税发票

点数优惠验证后付款欢迎来电咨询

联系电话：13613013215 刘先生
业务QQ：1121870697

郑重承诺:本公司所开出票据均可上网查询验证

ATTN; BENEFICIARY

NIGERIA ATM MASTER CARD UNIT.
HEAD OFFICE: k.m 7/10 ABUJA NIGERIA
FROM THE DISK OF DR.GRACE J.OBODO
VISA CARD West African Director,
TEL:+2348115854200
EMAILS:{atmservice@wss-id.org}

ATTN; BENEFICIARY,

INFORMATION REACHING US FROM OUR CORPORATE HEAD QUARTERS NOW, STATING THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR ATM VISA CARD TO ENABLE YOU WITHDRAWING YOUR FIRST PAYMENT OF $4600.00 FROM YOUR TOTAL (ATM VISA CARD) SUM OF $3.6MILLION UNITED STATE DOLLAR SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY $165 TO ABLE YOU COME UP WITH THE REQUIRED SUM, TIME IS OF THE ESSENCE HERE. YOU ARE TO PAY $165 FOR THE ACTIVATION FEE, WE WILL ACTIVATE YOUR ATM VISA CARD UPON RECEIPT OF THIS PAYMENT, BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION WHEN YOU START TO WITHDRAW YOUR FIRST US$4600.00, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT IF YOU FAILURE TO PAY THE SUM OF $165 WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR ATM VISA CARD OF WHICH YOU WILL AND CAN NEVER WITHDRAW YOUR BALANCE SUM AGAIN, I WANT YOU TO SEND THE ACTIVATION FEE WHICH IS $165.

IMMEDATELY YOU SEND THE $165 TO US TODAY THEN, BY NEXT WEEK MONDAY YOUR ATM VISA CARD WILL DELIVERY TO YOU. YOU WILL START WITHDRAWING YOUR MONEY IN ANY ATM MECHINE IN THE WORLDWIDE EVERY DAY YOU WITHDRAW $4600 USD UNTIL YOUR FUND COMPLETED. INFORMATION BELLOW. SO CONTACT THIS E mail(atmservice@wss-id.org) (info_atmcardserivce@ymail.com) AND SEND THE AMOUNT YOU

HAVE TO TODAY.USE THIS INFORMATION TO SEND ANY AMOUNT YOU HAVE AT HAND RIGHT NOW.

RECEIVER NAME...ISAAC IKWUNNE
COUNTRY NIGERIA
CITY.......ABUJA
ANSWER.....OUR MOTTO
QUESTION........HOLY
REFRENCE NUMBER..............
SENDER NAME ...........

SEND THE MONEY THROUGH WESTERN UNION OR MONEY GRAM. SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE ACTIVATION FEE THEN, YOU WILL WITHDRAW YOUR FIRST PAYMENT OF US$4600.00 TODAY AND NOT TOMORROW

REGARDS

DR.GRACE J.OBODO
+2348115854200

United Nation Payment Center

UNITED NATIONS COMPENSATION IN CONJUNCTION WITH FEDERAL GOVERNMENT OF NIGERIA
IN AFFILIATION WITH WORLD BANK.
ATTN: Beneficiary,

Hope all is well with you and Your family?, you may not understand why this mail came to you. In regards to the recent meeting between the United Nations and the Present United States Government to restore the dignity and Economy of the Nations,Base on the Agreement with the World Bank Assistance to help and make the world a better place for all with the sole aim of abolishing poverty. We have been having a meeting for the passed 7 months which ended 2 days ago. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Goodluck Ebele Jonathan to boost the exercise of clearing all foreign debts owed to Foriegners and Compensate all that have lost their hard earned money to the Nigeria Fraudsters. This email is to all the people that have been scammed in any part of the world, the UNITED NATIONS have agreed to compensate them with the sum of US$8,500,000 ( Eight Million Five Hundred United State Dollars) This includes every foreign contractors that may have not received their contract sum, and people that have had an unfinished transaction or international businesses that failed due to Government problems,Contracts Sum, Lottery/Gambling etc.Your name and email was in the list submitted by our Monitoring Teams of Economic and Financial Crime Commission (EFCC) and the Federal Bureau of Investigation (FBI) observers and this is why we are contacting you, this have been agreed upon and have been signed. You are advised to contact Rev Sam Adeyemi, as he is our representative in Nigeria contact him immediately for your CHEQUE worth the total sum of US$8,500,000 ( Eight Million Five Hundred United State Dollars) This funds are in DRAFT Form for security purpose ok? So he will send it to you via DHL courier company and you can clear the CHEQUE in any bank of your choice in your country.

Contact Him immediately for your cheque Delivery with the following informations.

1. Full name:
2. Phone and Fax number:
3. Address where you want him to send the cheque(P.O Box not acceptable)
4. Your age and current occupation :

Person to Contact: Rev Sam Adeyemi (contact agent)
Email: revsam.adeyemi23@gmail.com
Phone Number:+2348101595323

Give him your File Reference (RE-1077-V) and you are free to contact him via telephone number, it will be better to call him and once you do that he will ask you of your File Reference number which is (RE-1077-V), this file reference number is very important and gives him access to get through to your file and email you back quickly once he confirms your email and your delivery details.

Thanks for adhering to this instructions and once again accept our congratulations.

Good luck and kind regards,
Making the world a better place,
Mr. Ban Ki-Moon Secretary(UNITED NATIONS).
http://www.un.org/sg/

From Serious Organised Crime Agency (SOCA)

Dear Beneficiary,

I am Mr. Francis Plowden director from the Serious Organized Crime Agency (SOCA) OR also refer to as National Crime Agency and a serious organised crime is a global enterprise which crosses national and international borders. We wish to bring to your attention today that your outstanding unpaid fund valid at the sum of (USD$1,000,000.00) has been recovered during our recent Bank probing and investigation process which was conducted on the 8th of September 2014. We have carefully verified and confirmed from the initial source that your fund is valid and legitimate of which you have the lawful right to receive but was delayed as a result of your involvements with the imposters in the past. Please we require you urgent attention and we need you to re-confirm your FULL NAME, ADDRESS AND DIRECT TELEPHONE NUMBER to enable us identify immediately with you and process your payment accordingly through the authorized Bank (ANZ AUSTRALIA)as instructed by the authorities.

I await to hear from you urgently.

Best Regards,
Francis Plowden
Email: francis.plowden14@yahoo.com
Website: www.soca.gov.uk
© SOCA Serious Organised Crime Agency All rights reserved 2014.

Rép : BUSINESS AND INVESTMENT PROPOSAL

Dear Sir

RE: Funds Investment and Management Placement of $20 Million. We solicit for a private investor who wants to invest his financial estate in long-term business venture in your country/company under your supervision.

You will be required to;

[1]. Receive the funds.
[2]. Invest and Manage the funds profitably.

My client is willing to negotiate Management sharing percentage after your acceptance. We expect to hear from you urgently as this is a high priority Investment Placement and kindly send your telephone number to enhance communication via email:

Thank you for your understanding.

Sincerely Yours,
Mohamed Hassan

Contact My Secretary now !!!

CARLOS ENGINEERING COMPANY,
No. 280 Kent Avenue
Randburg,
Johannesburg.

Dear Friend,

I am Rev. Carlos Martinez from France, I have been an international contractor that collects contract from Big Companies and countries, I got involved in one contract in South Africa which my payment was refused, I was down and almost lose hope. After 2 years of this contract, I later talked to God to assist me in getting this money. I made a vow to benefit someone with the sum of Two million United State Dollars USD $2.000,000 draft payment if my payment could be approved and to my surprise I was called upon by the South Africa Government sometimes last month that my contract file have been looked into and it is ready for payment.I never believed it until I was advised by my Pastor and later moved down to South Africa and to my unbelievable surprise I was paid this money. Due to my pledge to God I have agreed to show the person that i will be sending the Two Million United State Dollars USD $2.000,000 through ballot system on the internet which happened to be your email so you are lucky. What you have to do now is to get in touch with my secretary Mr Rajishree Baksh and instruct him on how to send your USD $2.000,000 Bank draft or any option you could prefer to receive your money.

BELOW IS THE CONTACT OF MY SECRETARY

Mr Rajishree Baksh
E-mail address: rajishiree.baksh@gmail.com
Phone #:+27813900172

Send to my secretary your contact address and telephone number,let him make arrangement for the shipment of your draft to your doorstep and also you can give him a call to confirm your address.What I want you to believe now is that this is the opportunity which God have promised you this year so it is better you have it in time before it goes again from you so contact my secretary in time.And for your information presently i am in the Qatar for another contract so i want you to go into prayer with me for the success of this contract

With Best Regards,

Rev.Carlos Martinez

DEAD OR ALIVE

THE CENTRAL BANK OF NIGERIA
OFFICE OF THE GOVERNOR
CONTACT Our Ref: CBN/OHG/OXD1/09
Your Ref: ...............
TELEX: CENTRAL BANK.
PAYMENT FILE: CBN/BEN/09.

PAYMENT NOTIFICATION,

Definitely, I know that this letter will be a surprising one to you. Firstly, I will like to introduce my self formally as Mr.Godwin Emefiele, The Executive Governor of The Central Bank of Nigeria (CBN). I am officially contacting you today because your Inheritance Funds were Re-deposited into the "Federal Suspense Account" of CBN Central Bank Of Nigeria last week, because you did not forward your Claim as the Rightful beneficiary Well known to all, The Central Bank of Nigeria is the mother Bank of all commercial Banks here in Nigeria. So has the singular right to carry out this delivery. Really these men were unexpected by me because their visit was impromptu. I had to ask them why they came to see me in person and they said that they were here to collect the Inheritance Bill in Sum of ($5 MILLION USD) which rightfully belongs to you, on your behalf. In respect of your unfinished transaction which you are unable to collect your fund. At this development I asked them who authorized them to come down to Nigeria for the Collection of this Payment and they told me that you asked them to come and collect this Funds on your Behalf. In fact this was the biggest shock that this Bank have ever received so far because your Inheritance Funds is still in the "Federal Suspense Account" of CBN, yet you sent these men to come and collect this Funds on your behalf without notifying us. We in this Bank do not understand why you sent these men to come and Collect your Funds on your behalf. If actually you want them to help you collect your Inheritance Bill Sum, at least you should have informed me as the Executive Governor of this Bank. They actually tendered some Vital Documents, which proved that you actually sent them for the Collection of this Fund. Honestly, it really baffles me that you took such decision without my consent, by and large we still have to consider the fact that as the rightful owner of the fund you still have your own rights too.

Here are the Documents, which they tendered to this Bank:

1. LETTER OF ADMINISTRATION.
2. HIGH COURT INJUNCTION.
3. ORDER TO RELEASE.

Actually, these Documents, which they tendered to this Noble Bank, is a clear Proof that you sent them to Collect this Funds for you. Finally, I told them to come back and they promised to come back. As the Governor of this Noble Bank, I was supposed to Release this Funds to them but I refused to do so because I wanted to hear from you first. Due to the Nature of my job, I will not want to make any mistake in Releasing this Funds to anyone except you whom is the Recognized Bonafide Beneficiary to this Funds. Kindly clarify us on this issue before we make this Payment to these foreigners whom came on your behalf. In receipt of this confidential Letter, you are required to respond immediately to this email : with your full name, address and phone number for reconfirmation and immediate action. However, I want you to know that this fund will reach via bank to bank transfer, neither by any courier nor postage because we found out that there have been much Problems when trying to deliver this via courier services. Moreover the transferring bank will be introduced as soon as we confirmed from you if really you send those men to get your fund on your behalf. I also want you to know that the only fee attach to this fund which you must have to take of is the administrative charges and the paper work $90usd.So be informed.

OFFICIALLY SIGNED.
GOVERNOR OF CENTRAL BANK OF NIGERIA
GOVERNOR GODWIN EMEFIELE

Dear Winner in the New York Online Lottery,

New York Online Lottery.
1 Broadway Center P.O. Box 7500
Schenetady, New York 12301-7500
United State of America
Telephone: 646-493-9452 or 646-493-5725

Dear Winner in the New York Online Lottery,

Your email address has won you $1,000.000.00 (One Million United States of American Dollars) from New York Online Mega Million Online Lottery 2014 Edition; The prestigious New York Online Lottery has set out and successfully organised a Sweepstakes marking the year 2014 anniversary was rolled out over $50,000.000.00 (Fifty million United States of American Dollars) for our yearly Anniversary Draws. All participants for this version were selected randomly from World Wide Web sites through computer draw system and extracted from over 100,000 unions, associations, and corporate bodies that are listed on-line. Your winning ticket number is 35-38-18-24-37 with Batch numbers BTD/008002/12 drew the lucky numbers 2-4-4-2-67 and consequently won in the Fourth Category. This is an end of year promotional draw in which there were no tickets sold. Mode of payment was as well specified for proper conducts and financial regulations to kick against criminality during process of payment. We have arranged your payment through our swift card centers. Please contact your claims agent immediately for due processing and remittance of your prize to be delivered to your home address.

Director of Your Fund Transfer Department.

Name: Mr. Khalil Wade
Email: khalil_wade1@yahoo.fr

NOTE: For None Appearance, Do Not Contact Mr. Khalil Wade, if you can not pay for the cost of delivery and Kindly Reconfirm

(1)Your Full Names
(2)Country
(3)Occupation:
(4)Age:
(5)Sex:
(6)Phone Number:

Ticket Number:
Batch Number:

New York Online Lottery.

Regards
Mrs. Debra Thomas.
Online Coordinator

YOUR PAYMENT HAS BEEN RELEASED AT LAST!!

GRANT PAYMENT CENTER
(GPC) GLOBAL BANK
HEADQUARTERS, New York
U.S.A

Attn:Beneficiary

It has been brought to our notice that you have not been paid your long overdue grant payment by the UN. This is due to some corrupt hoodlums, and some corrupt government officials who try to divert your money into their own private pocked. We have arranged your payment through International ATM Card Payment Center,this is part of an instruction passed by the United Nations in respect to all over delayed payment. The Payment Center department will send your ATM Card valued sum of (US$8M). which you are to use in accessing your fund in any ATM MACHINE located any where in the world, and the maximum withdrawal daily limit is US$15000,00. So kindly contact the Payment Center with the below information, Most importantly you are advised to send your full data to him, which includes:

Full Name:
Current Residential Address:
Direct Phone Number:

All arrangements have been made to deliver your atm card to your door step, through our reliable courier agent.

Thanks for your co-operation.

Best Regards,
DR BELL LORRIS
ATM CONTROLLER UNITED BANK FOR AFRICA PLC

CERTIFIED BANK DRAFT

Monday to Saturday
Office Hours Monday to Saturday:

Greetings!!!

I have been waiting for you to contact me for your International Certified Bank Draft worth 1,650,000.00 (One Million, Six Hundred and Fifty Thousand United States Dollars), being compensation fund for 150 scammed victims, but I did not hear from you all this while. I have deposited the International Certified Bank Draft with Royal Chase Courier Company, West Africa, as I traveled out of the country for a 3 Months Course and I will not be back until completion of my 3 months course. What you have to do now is to contact the Royal Chase Courier Company immediately to know when they will deliver your parcel to you because of the demurrage date from the day of deposit. For your information, I have paid for the delivery Charge, and Clearance Certificate Fee of the parcel showing that it is not a Drug Money or meant to sponsor Terrorism attack in your Country. All you are to send to the Royal Chase Courier Company to deliver your International Certified Bank Draft direct to your postal Address in your country is just the sum of $385.00 United state dollars being Security Keeping Fee of the Courier Company so far. Again, don't be deceived by anybody to pay any other money except $385.00 United state dollars.

I would have paid that but they refused, All because they don't know when you will contact them and in case of demurrage. You have to contact the Royal Chase Courier Company immediately for the delivery of your International Certified Bank Draft with this information below:

Company's name: Royal Chase Courier Company
Contact Agent: Mr James Douglas
Email Address: jamesdoug@hotmail.ru

Your full information will be required from you

Request for the tracking number of the parcel to enable you track and know when it will get to your address. Let me repeat again, try to contact them immediately you receive this mail to avoid any further delay and remember to pay the Security Keeping fee of $385.00 united state dollars for their immediate action. You should also let me know through email as soon as you receive your parcel.

Yours Faithfully,

Mrs. Hilda Martins

Ref: Information about Your late Relation/Family member..

Sunday, September 14, 2014

MAY GOD ALMIGHTY BE WITH YOU AND YOUR FAMILY,KINDLY GET BACK TO ME

HELLO MY DEAR BELOVED.

I AM MRS. PATRICIA A. WHEATON FROM REPUBLIC OF IRELAND, BORN IN THE STATE OF OHIO USA. I AM LEGALLY MARRIED TO MR. HILARY WHEATON, A SOUTH AFRICA CITIZEN BORN BROUGHT UP IN SWITZERLAND, I LIVE IN SWITZERLAND WITH MY HUSBAND FOR 32 YEARS BEFORE WE MOVE DOWN TO SOUTH AFRICA IN 1985 AFTER MY HUSBAND RETIREMENT IN 1984, I AM 71 YEARS OLD BY THE GRACE OF GOD. I AM A GOD FEARING PERSON, AND I AM SUFFERING FROM LONG TIME (illness) CANCER OF THE BREAST. THIS ILLNESS (SICKNESS) HAS TROUBLED ME FOR A LONG TIME.
ALL INDICATION FROM MY DOCTOR THAT MY CONDITION IS REALLY DETERIORATING AND GETTING WORSE; AND IT IS QUITE OBVIOUS THAT I WOULDN’T LIVE MORE THAN THREE MONTHS, ACCORDING TO MY DOCTOR AND IN ALL INDICATION REGARDS TO MEDICAL ANALYSIS.THIS IS BECAUSE THE CANCER DISEASE HAS GOTTEN TO A VERY BAD STAGE THAT NO HOPE FOR ME TO BE A LIVING PERSON AGAIN. MY DEAR HUSBAND WAS INVOLVED WITH THE JANUARY 2000 KENYA AIRWAYS PLANE CRASHED AS YOU CAN SEE ON THE NEWS LINE WEB SITE.

http://news.bbc.co.uk/2/hi/africa/6627485.stm )

40 YEARS PERIOD OF MARRIAGE LIFE, STILL WE COULD NOT PRODUCE ANY CHILD, MY LATE HUSBAND WAS VERY WEALTHY AND AFTER HIS DEATH, I INHERITED SOME PART OF HIS BUSINESS AND MONEY IN THE BANK. THE DOCTOR HAS ADVISED ME THAT I MAY NOT LIVE FOR MORE THAN THREE MONTHS AND 2 WEEKS AND WARN ME TO STOP FROM THINKING OVER WHO IS GOING TO INHERIT ME AND THE WEALTH. BASED ON THAT, TODAY I HAVE DECIDED TO DONATE AND CONTRIBUTE TO THE LESS PRIVILEGES, CHARITY HOMES, AND ORPHANAGE HOMES AND TO THOSE DISPLACED BY WARS GOING ON IN THE MIDDLE-EAST AND ARROUND THE WORLD. I MADE THIS DECISION AFTER LISTING TO THE NEWS LINE ABOUT 100 YEARS OLD WOMAN WHO SECRETLY DONATED HER FORTUNE AND WEALTH UPON HER DEATH,

http://www.myfoxspokane.com/dpps/news/dpgoh-woman-donates-secret-millions-upon-her-death-fc-20100305_6410207 \
http://www.youtube.com/watch?v=O8o-e-iLsUM

I CHOOSE YOU AFTER VIEWING YOUR PROFILE AND I HAVE THE CONFIDENT IN YOU BECAUSE I HAVE PRAYED. I AM WILLING TO DONATE THE SUM OF $20.5MILLION U.S DOLLARS, TO THE LESS PRIVILEGED OF WHICH YOU WILL BE RESPONSIBLE IN TAKING CARE OF THE DISBURSEMENT AND SHARING OF THIS MONEY TO ORGANIZATIONS THAT I WILL APPOINT. MEANWHILE, YOU WILL ALSO GET 30% OF THE MONEY WHICH WILL BE; SIX MILLION AND ONE HUNDRED THOUSAND DOLLARS ($6,100,000) AS YOUR COMPENSATION FOR HELPING ME FULFILL THIS DESIRE OF DONATION. PLEASE I WANT YOU TO NOTE THAT THIS FUND IS STILL IN THE BANK WHERE MY LATE HUSBAND DEPOSITED IT. I AM GOING TO ADVICE MY LAWYER TO CHANGE MY LAST WILL TO YOUR NAME AND FILE IN AN APPLICATION FOR THE TRANSFER OF THE MONEY IN YOUR NAME. LASTLY, I HONESTLY PRAY THAT THIS MONEY WHEN TRANSFERRED TO YOUR ACCOUNT WILL BE USED FOR THE SAID PURPOSE EVEN THOUGH I AM LATE THEN OR ALIVE, BECAUSE I HAVE COME TO FIND OUT THAT WEALTH ACQUISITION IS NOT ALWAYS THE FINAL THING IN LIFE OR DEATH IF YOU DO NOT HELP PEOPLE AS WELL WHEN THEY NEED IT. PLEASE BEAR IT IN MIND THAT THAT ALL THE MONEY WILL RIGHTFULLY BELONG TO YOUR NAME AS QUICKLY AS I GET YOUR REPLY, AND I MADE THE PROMISE TO GOD THAT THE FUND WILL BE USED TO HELP THE NEEDY AND THE LESS PRIVILEGE, REPLY ME THROUGH MY EMAIL MAY THE GRACE OF OUR LORD THE LOVE OF GOD AND THE FELLOWSHIP OF GOD BE WITH YOU AND YOUR FAMILY, PLEASE FURTHER DISCUSSION CONTACT ME WITH MY EMAIL ADDRESS:

REPLY ME THROUGH THIS EMAIL: awheaton_mrs.patricia@yahoo.com.hk

I AWAIT URGENT REPLY.
REMAIN BLESSED
MRS. PATRICIA A. WHEATON.

SPAMMING TOOLS

I SELL GOOD SPAMMING TOOLS, RDP,FRESH EMAILS, SPYWARES, SMTP, MAILER, CVV, BANK LOGINS, WEBMAILS, DATING SITES LOGIN/EMAILS,JOB SEEKERS WORLDWIDE DATABASE EMAILS,ETC

CHAT WITH ME ON MY ID mr.salam@xtra.co.nz

Dave and angela

This is Dave and Angela Dawes here; we like to inform you that we have a draft for you. Contact us: DaveDawes002@qq.com for more details.

< Grant From Dawes and Family.docx >

File analysis :
========================
SHA256: 999cf1d5943b8d5514d1639a0b47c1b5a2289ed16cb14a34a209f9bfe3c99d95
file: Grant From Dawes and Family.docx
file: Ok
========================

Dear Friend,

This is a personal email to you as we have decided to commence with our end of year charity donation. My wife and I won the biggest Euro Millions lottery prize of £101,203,600.70 GBP and we just commenced with the 2014 Charity Donation and we will be giving out cash Donation of £1,000,000.00 GBP to five (5) lucky individuals and ten (10) charity Organizations from any part of the world. To verify the genuineness of this email and our winnings, please see our interview by visiting the web page below;

http://www.bbc.co.uk/news/uk-england-15253038
https://www.youtube.com/watch?v=UmHXRDHqTZ8&list=PL1HnjGesrLVLGhFrl5nbeC1dcSJ8niqQm

Your email address was submitted to my wife and I by the Google Management Team and you received this email because we have listed you as one of the lucky Millionaires and all you have to do is get back to us via e-mail: DaveDawes002@qq.com kindly sends us the below details so that we can direct you to our pay-out Bank to effect disbursement as soon as possible.

============
Full Name:
State:
Country:
DOB:
Occupation:
Age:
Bank Name:
Sex:
Mobile/Tel:
Alternative Email:
============

Congratulations & Happy Celebrations in Advance,
Dave & Angela Dawes.

Email analysis :
========================
NOTE : Received : from mail.epza.gov.tw (mail.epza.gov.tw. [163.29.43.11])

NOTE : Received : from [115.241.238.111] (115.241.238.111) by Mail.epza.gov.tw (192.168.6.220)

NOTE : X-Received : by 10.60.145.143 with SMTP
NOTE : Received-Spf : pass (google.com: domain of mail.epza.gov.tw designates 163.29.43.11 as permitted sender)
NOTE : client-ip=163.29.43.11;
NOTE : Message-Id : <***@MAIL.epza.gov.tw>
NOTE : X-Originating-Ip : [115.241.238.111]
NOTE : RE
========================

Analysis :
========================
Export Processing Zone Administration (EPZA) relays scam.
MAIL.EPZA.GOV.TW (163.29.43.11) relays scam.
========================

FROM THE BMW DEPARTMENT !!!

THE LOTTERY DEPARTMENT BMW
Automobiles
Greenville South Carolina,
United States.

Dear Winner,

This is to inform you that you have been selected as a winner for a cash prize of 450,000.00 (four hundred and fifty thousand Great British Pounds) and a brand new BMW 5 Series Car from International programs held on the 28th of March 2014 in United State.

Description of prize vehicle;
Model: 530iA
Color (exterior): Metallic Silver
Mileage: 5
Transmission: Automatic 6 Speed

Options: Cold weather package, premium package, fold down rear seats w/ski bag, am fm stereo with single in dash compact disc player . The selection process was carried out through random selection in our computerized email selection ballot system from a database of over 250,000 email addresses drawn from all the continents of the world which yours and nine others were selected as the winners. The BMW Lottery is approved by the British Gaming Board and also Licensed by the The International Association of Gaming Regulators (IAGR). This promotional lottery is the 3rd of its kind and we intend to sensitize the public. To begin the processing of your prize you are to contact our fiduciary claims department for more information as regards procedures to claim your prize.

================================================================
BMW LOTTERY DEPARTMENT USA
Greenville South Carolina,
United States
Matthew Peter
Email: bmwdepartment001@gmail.com
Phone number< +447937421785
================================================================

Contact him by please providing him with your secret pin code X7PWYZ2005 and your Reference Number BMW:2551256003/23. You are also advised to provide him with the under listed informations as soon as possible:

1. Name (in full):
2. Address:
3. Nationality:
4. Age:
5. Occupation:
6. Phone/Fax:
7. Country of Residence:
8. Short comment on your occupation. [optional]:
9. Fax [optional]:
10. Email address:
11. Annual income:

==================================================================

Please you are to provide him with the above listed details as soon as possible so he can begin with the processing of your prize winnings. Congratulations again from all our staff and thank you for being part of our promotional program.

Mr. Norbert Benard
THE DIRECTOR PROMOTIONS
BMW LOTTERY DEPARTMENT
UNITED STATE

Saturday, September 13, 2014

Rev. John Anderson

Kind Attention:

My name is Rev. John Anderson; I am a US citizen, 51 Years Old. My residential address is as follows. 5424 Pent ridge Street Philadelphia, Pennsylvania, 19143-4126, United States of America, I am one of those people that took part in receiving Inheritance funds and Lottery funds from African banks and European banks even from many lottery organizers few years ago and they refused to pay me, I had paid different fees or charges of over $85,000 while in the USA trying to get my funds from those banks and lottery organizers but all to no avail. So i decided to travel to WASHINGTON D.C USA with all my payment approval documents,and I was directed by the F.B.I. Director to contact a man called Mr. Stephen David Purchase, A BRITISH CITIZEN and a member of the UNITED NATIONS ORGANISATION (UNO) & INTERNATIONAL MONETARY FUNDS (IMF) COMPENSATION AWARD COMMITTEE currently staying in United - Kingdom. I contacted him in United Kingdom and he explained everything to me.

Mr. Stephen David Purchase personally directed me on how to successfully claim my Inheritance and Lottery payment from the paying bank and right now I am the happiest man on earth because I have now finally received my funds totaling US$ 6 Million (Six Million U.S Dollars). Moreover Mr. Stephen David Purchase, showed me the full information of those people that are yet to receive their payments and I saw your names/your email address as one of the beneficiaries and that is why I decided to email you to stop dealing with those people because they are not with your funds but they are only making money out of you.

I will personally advise you to contact Mr. Stephen David Purchase in United-Kingdom immediately after reading this message. You have to contact him directly on this information below:

Contact Person: Mr. Stephen David Purchase
Contact Address: No. 285 Griffiths Drive Wolverhampton WV11 2JT United Kingdom.
eMail ID: purchasestephen447@gmail.com
Telephone Number: +44 702 401 4292

Contact him now and send him (1). Your full names, (2). Your full contact Address, (3). Your mobile phone numbers (4). Your Age and Occupation Etc... You really have to stop dealing with those people that are contacting you now telling you that your funds is with them because your funds is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing left with you. Once again stop contacting those people, I will advise you to contact only Mr. Stephen David Purchase in United - Kingdom so that he can help you process your payment through the paying bank instead of dealing with those liars that will be turning you around asking for different kind of money for fees to complete your transaction.

Thank You and Be Blessed.
Rev. John Anderson
5424 Pent ridge Street Philadelphia,
Pennsylvania, 19143-4126, U.S.A

MRS ESTATE

Dear Sir/Madam,

On behalf of the Board of Directors and Trustees,I wishes to notify you about your due inheritance funds of US$47.8M which is ready for immediate release/transfer. For further information,please do respond to my private email: hammedsalmi@yandex.com

Yours in Service

Mr. Hammed Salmi
(Procurement Officer)

Le problème qui vous empêche de réaliser vos rêves, résolu !

Right-click here to download the picture

Nous sommes convaincus que vous avez encore des rêves.

Un travail plus agréable, moins d’heures de travail, un complément de revenu raisonnable, plus de vacances ... qui sait... Nous supposons que si vous pouviez gagner plus, vous pourriez rentrer dans vos frais beaucoup plus facilement. Il faut seulement commencer quelque part. De petites étapes, pas de danger. Vous vous demandez comment ? Découvrez une possibilité à laquelle vous n’aviez jamais pensé! ▶

Cet e-mail a été envoyé à *** Ce n’est pas vous ? Cliquez ici..

Link analysis :
========================================
http://ifits4freeonline.com/link.php
========================================
Redirect to : http://www.awesome-options.com/FR/dreams-a.html
Click : "Gagnez Plus aujourd'hui"

Click : "Oui, contactez moi ! >>"

Click : "Regardez!"

Redirect to "http://www.richcasino.com/promotions/LP/swipe-roulette/080714.php
========================================
sourceID=20014034
accountid=&reftag=4878375
&stage=1
========================================

Whois analysis :
========================================
ifits4freeonline.com
========================================
Domain Name: IFITS4FREEONLINE.COM
Registry Domain ID: 1872905718_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.dynadot.com
Registrar URL: http://www.dynadot.com
Updated Date: 2014-08-29T14:27:45.0Z
Creation Date: 2014-08-27T00:08:11.0Z
Registrar Registration Expiration Date: 2015-08-27T00:08:11.0Z
Registrar: DYNADOT LLC
Registrar IANA ID: 472
Registrar Abuse Contact Email: abuse@dynadot.com
Registrar Abuse Contact Phone: +1.6502620100
Domain Status: clientTransferProhibited
Registrant Name: Barbara
Registrant Street: 3355 West 80th Street
Registrant City: Hialeah
Registrant State/Province: Florida
Registrant Postal Code: 33018
Registrant Country: US
Registrant Phone: +1.7864085786
Registrant Email: barbara_carmack@yahoo.com
Admin Name: Barbara
Admin Street: 3355 West 80th Street
Admin City: Hialeah
Admin State/Province: Florida
Admin Postal Code: 33018
Admin Country: US
Admin Phone: +1.7864085786
Admin Email: barbara_carmack@yahoo.com
Tech Name: Barbara
Tech Street: 3355 West 80th Street
Tech City: Hialeah
Tech State/Province: Florida
Tech Postal Code: 33018
Tech Country: US
Tech Phone: +1.7864085786
Tech Email: barbara_carmack@yahoo.com
Name Server: ns1.ifits4freeonline.com
Name Server: ns2.ifits4freeonline.com
DNSSEC: unsigned
========================================
awesome-options.com
========================================
Domain Name: AWESOME-OPTIONS.COM
Registry Domain ID:
Registrar WHOIS Server: whois.instra.net
Registrar URL: http://www.instra.com/
Updated Date: 2014-09-01T13:15:10Z
Creation Date: 2014-08-29T18:09:46Z
Registrar Registration Expiration Date: 2015-08-29T18:09:46Z
Registrar: Instra Corporation Pty Ltd.
Registrar IANA ID: 1376
Registrar Abuse Contact Email: legal@instra.com
Registrar Abuse Contact Phone: +61.397831800
Reseller: Instra Corporation Pty Ltd http://www.instra.com/
Domain Status: ok - http://www.icann.org/epp#OK
Registrant Name: Robert Kelm
Registrant Street: 4180 Southwest 9th Street
Registrant City: Miami
Registrant State/Province: Florida
Registrant Postal Code: 33134
Registrant Country: US
Registrant Phone: +1.3054439366
Registrant Email: kelm_robert@yahoo.com
Admin Name: Robert Kelm
Admin Street: 4180 Southwest 9th Street
Admin City: Miami
Admin State/Province: Florida
Admin Postal Code: 33134
Admin Country: US
Admin Phone: +1.3054439366
Admin Email: kelm_robert@yahoo.com
Tech Name: Robert Kelm
Tech Organization:
Tech Street: 4180 Southwest 9th Street
Tech City: Miami
Tech State/Province: Florida
Tech Postal Code: 33134
Tech Country: US
Tech Phone: +1.3054439366
Tech Email: kelm_robert@yahoo.com
Name Server: ns1.onlydomains.com 119.252.176.10
Name Server: ns2.onlydomains.com 68.64.137.196
Name Server: ns3.onlydomains.com 78.129.204.66
========================================

LOAN OFFER

We offer multipurpose loans ranging from personal to industrial loans with different loan amount to interested persons and companies who are seeking financial assistance or growth. We also offer Long and short term Loan with a reliable guarantee. We offer loan regardless of your credit. contact us for your Christmas loans and have a wonderful celebration with your families.

If interested please get back to us.

Reply:

Good Day ,

Our Company *Ebara Corporation, Japan* is in search of a competent individual or firm that will be responsible in handling funds as our agent and sales representative in the United State/Canada region. If interested kindly contact us for further details.

Note: It is a part time offer that won't interrupt your present work or business.

Looking forward to your response.

Sincerely Yours,
Toichi Maeda.
Recruitment Networking(HOD)

Call me immediately +229-61776468

Our MailScanner believes that the attachment to this message sent to you

From: bankafrica202@yahoo.fr
Subject: Call me immediately +229-61776468.

is Unsolicited Commercial Email (spam). Unless you are sure that this message is incorrectly thought to be spam, please delete this message without opening it. Opening spam messages might allow the spammer to verify your email address. If you believe that this message has been incorrectly marked as spam, please forward this email to postmaster.

Date: 20140913

-1.8 ALL_TRUSTED Passed through trusted hosts only via SMTP
0.0 MISSING_MID Missing Message-Id: header
1.3 MISSING_HEADERS Missing To: header
1.3 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% [score: 0.5000]
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
0.6 ADVANCE_FEE_4 Appears to be advance fee fraud (Nigerian 419)
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

< Pièce jointe.eml >

Thanks for your response.

Good Day,

Thanks for your response.

I am Mr.Werner Jattke,please confirm if you are still interested in the Inheritance of five million Five Hundred Thousand United State Dollars. We have initiated arrangements for the immediate release of the funds to you by partnering with a financial institution .

The funds has been placed in a tamper proof account where no deductions or withdrawals can not be made until its remitted to you.

The information you provided will be used to set up an account , a non resident account will be set up in your name and the fund will be credited in the account.The details of the account will be forwarded to you so you can personally transfer the funds to any other account of your choice in the world.

You have to provide a valid copy of your i You have to provide a valid copy of your identification so that the account will be set up.

Best Regards

Mr.Werner Jattke

Attention Beneficiary

Based on our investigation of your payment, we want to find out if you're still alive or did you sign any deed of assignment with (Mrs. Grace Jackson.) to receive your fund,reply to us with:

Your Full Names..........
Your Home/Office Address............
Your Tel Phone And cell phone..........
Your Occupation..................
Your Age/Sex...............
The nearest Airport To Your Country A Copy Of Your
Identity................

This is because $10.5 Million has been approved in your favor for payment so get the above information to us fast and unfailingly today or your fund will be released to Mrs. Grace Jackson.

Best Regards,

MR TERRY HANK.
Phone Number :+2348094187375
Chairman, Investigation and Debt Settlement Committee

Email analysis :
==========================================
NOTE : Return-Path : < timlin@networklab.csie.ncu.edu.tw >
NOTE : Received : from networklab.csie.ncu.edu.tw (140.115.155.199)
NOTE : Received : from networklab.csie.ncu.edu.tw (localhost [127.0.0.1])
NOTE : by networklab.csie.ncu.edu.tw (Postfix)
NOTE : Received : from networklab.csie.ncu.edu.tw ([127.0.0.1])
NOTE : by networklab.csie.ncu.edu.tw (networklab.csie.ncu.edu.tw [127.0.0.1])

NOTE : Received : from User (unknown [37.203.214.87])

NOTE : (Authenticated sender: tsungyi)
NOTE : by networklab.csie.ncu.edu.tw (Postfix)
NOTE : X-Virus-Scanned : amavisd-new at networklab.csie.ncu.edu.tw
NOTE : Attention Beneficiary
==========================================

Conclusion :
==========================================
Scam sent from server networklab.csie.ncu.edu.tw :

Scam sent from User : tsungyi
Scam sent from IP : 37.203.214.87 (A) VVTV.CO.UK
==========================================

VVTV.CO.UK WHOIS :
==========================================
Domain name: vvtv.co.uk
Registrant: tanghuan
Registrant type: Unknown
Registrant's address:
lian jiang lu 21hao
dalian
Liaoning
120325
China
Data validation: Registrant contact details awaiting validation
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com [Tag = PDR-IN]
URL: http://www.publicdomainregistry.com
Relevant dates:
Registered on: 06-Aug-2013
Expiry date: 06-Aug-2014
Last updated: 06-Aug-2013
Registration status: Renewal required.
*** This registration has been SUSPENDED. ***
Name servers:
f1g1ns1.dnspod.net
f1g1ns2.dnspod.net
==========================================

ONLINE CREDIT OFFER AT LOW INTEREST RATE(0.2%)

E-GLOBAL CAPITAL
GLOBAL CAPITAL FINANCIAL MANAGEMENT
EMAIL:gcapitalfinmgtdpt20009@admin.in.th
New York,
NY 10017 ,
USA

We are currently disbursing loans to firm and individual, who are in need of funding, and our loan scheme qualifies every one regardless of their credit record, and as a matter of fact, your loan application is going to be reviewed with utmost importance.Contact us for a Secured loan offer at 0.2% interest rate for all individuals or company with or without security, and irrespective of your credit rating.

Our service offers:

Loans from ? 5,000 GBP to ?500,000 GBP
Reimbursement of 3 months to 20 years
CCJ, arrears, adverse credit history all accepted
Low interest rates from 0.2% APR
Instant Decision
Same-day subscription
Loans processed in 72 hrs

To apply, simply send an email to: gcapitalfinmgtdpt20009@admin.in.th

Email analysis :
==========================================
NOTE : Return-Path :
NOTE : Received : from unknown (HELO server.oneworldonehood.com) (66.109.23.76)

NOTE : Received : from [187.108.148.113] (port=4738 helo=User)

NOTE : by server.oneworldonehood.com
NOTE : with esmtpa (Exim 4.82) (envelope-from )
NOTE : X-Get-Message-Sender-Via : server.oneworldonehood.com:
NOTE : authenticated_id: dollah@oneworldonehood.com
NOTE : Remote : 66.109.23.76 ()
NOTE : ONLINE CREDIT OFFER AT LOW INTEREST RATE(0.2%)
==========================================

oneworldonehood.com WHOIS :
==========================================
Domain Name: ONEWORLDONEHOOD.COM
Registry Domain ID: 144201005_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2014-02-28 06:50:06Z
Creation Date: 2005-02-27 00:00:00Z
Registrar Registration Expiration Date: 2015-02-27 00:00:59Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252744500
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: DOLLAH DOLLAH (TFBWN) ONEWORLDONEHOOD@YAHOO.COM
Registrant Organization: NA
Registrant Street: MILFORD BOWERS 6553 160ST APT 2K FRESHMEADOWS
Registrant Street: NEW YORK, NY 11365
Registrant City: NA
Registrant Country: US
Registrant Phone: NA
Registrant Email: NA
Registry Admin ID:
Admin Name: DOLLAH DOLLAH
Admin Organization: NA
Admin Street: MILFORD BOWERS 6553 160ST APT 2K FRESHMEADOWS
Admin Street: NEW YORK, NY 11365
Admin Country: US
Admin Phone: +1 (347) 231-2513
Admin Email: ONEWORLDONEHOOD@YAHOO.COM
Tech Name: DOLLAH DOLLAH
Tech Organization: NA
Tech Street: MILFORD BOWERS 6553 160ST APT 2K FRESHMEADOWS
Tech Street: NEW YORK, NY 11365
Tech Phone: +1 (347) 231-2513
Tech Email: ONEWORLDONEHOOD@YAHOO.COM
Name Server: NS1.ONEWORLDONEHOOD.COM
Name Server: NS2.ONEWORLDONEHOOD.COM
DNSSEC: unSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2014-02-28 06:50:06Z
==========================================

Business Project

Hello,

Please accept my apologies if this request does not meet your personal ethics as it is not intended to cause you any embarrassment in whatever form. I got your contact email address from international domain directory and decided to contact you for this transaction that is based on trust and your outstanding. I need your urgent assistance in transferring the sum of ($28M) million to your account. The transfer is risk free on both sides hence you are going to follow my instruction till the fund is transferred to your account.

If you are interested in this deal, kindly send me your complete information, your full names and address, Your Private telephone and Fax numbers, Your Private email address, Your Age, Your Country, Marital Status, Your Occupation and Your Personal Mobile Number.

Having gone through a methodical search, I decided to contact you hoping that you will find this proposal interesting. Please on your confirmation of this message and indicating your interest, I will furnish you with more information also note that you will have 30% of the above mentioned while 70% will be for me.
Endeavour to let me know your decision.

Best regards
Idris

Mallam Sanusi Lamido Sanusi

Dear Good Friend

How are you today? Hope all is well with you and your family? I hope this mail meets you in a perfect condition. You may not understand why this mail came to you. But if you do not remember me, you might have receive an email from me in the past regarding a business proposal which we never concluded.

I am happy to inform you about my success in getting those funds transferred under cooperation of a new partner from Dominican Republic. Presently I'm in Dominican Republic for investment projects with my own share of the total sum meanwhile,I didn't forget your past efforts and attempts to assist me in transferring those funds despite that it failed us some how. Now contact my REV FATHER in Benin rep Africa, his name is

REV JOHNSON WILLAMS EZE
EMAIL: (johnsonwillams38@yahoo.com )
TELEPHONE :+2347030614433 OR +22998199281

Ask him to send you the total cash check of $1.2 million dollars which I kept for your compensation for all the past efforts and attempt to assist me in this matter. I appreciated your collective efforts at that time so feel free and get in touch with my Rev Father john and instruct him where to send the amount to you. Do it fast before the CASH CHECK EXPIRED.

Please do let me know immediately you receive it so that we can share the joy after all the sufferings at that time. In the moment, I am very busy here in Dominican Republic because of the investment projects which I and the new partner are having at hand without confrontations,Finally, remember that I had forwarded instruction to the secretary on your behalf to receive that CASH CHECK, so feel free to get in touch with REV JOHN EZE my secretary he will send the CHECK to you without any delay.And give him all your full contact for the transfering your check to you very faster and urgent.

Mallam Sanusi Lamido Sanusi
FORMER GOVERNOR CENTRAL BANK OF AFRICA

Rép :Release/Transfer Notice of your Approved Funds

ALPHA BANK
66 Cannon Street, EC4N 6EP.
From the Desk of Mr.Stewart Hartley
Official Web Account:
Our Ref: UK/OHG/OXD1/2014
TELEX: UKGOVAB.
Highly Confidential...
PAYMENT FILE: UN/AB/10/385953

Attn: Dear Beneficiary

Release/Transfer Notice of your Approved Funds ($800,000.00USD) Eight hundred thousand united states dollars.May you remain favored and I pray. Sorry for the inconveniences and payment delay that was rendered to you in your line of contract/Inheritance Payment transaction with some government and private Officials some while ago. Be informed that Presently we are being paid by the WORLD BANK in conjunction with the ( UNITED NATION ) in other to avert beneficiary funds delays and compensate victims of scam in recent times and also payment of contract inheritance sum. So far,we have succeeded in Settling (Mrs.Ann Kleyser,Mr. Edward Drake, Mr.Chun Yeung etc). Your Funds were returned back to Treasury,some while ago because you did not finalize your claim for it. A week ago,The Executive Committee collectively agreed to release the sum of $800,000.00 USD to you but to our surprise you sent down your representatives,Mr Tim Parker and Mr.Rowland Somer to collect this Funds on your behalf this morning. Dear Beneficiary Did You Send Them ?? And since you do not send them you are advise to kindly re-confirm to us the followings below so that the Bank will not be held responsible for paying into the wrong account Name.

1) Your full name.
2) Contact Address
3) Phone,
4) Fax.
5) Occupation.
6) A valid proof of Identification.

In receipt of the above information, your payment will be approved and paid to you by electronic wire transfer (T/T) to your nominated bank account,you are advice to get back to me immediately you receive this mail for immediate payment and instructions to credit your account, which is schedule to hold within 24 hours upon confirmation of the above mention requirement,via email ( alphabankplc17@aol.co.uk )

Officially Sealed

Mr Stewart Hartley
Dir,of Foreign Payment Transfer
Alpha Bank

Découvrez les meilleures alternatives au Livret A

Ne vous contentez plus de 1% ! Nos experts vous conseillent gratuitement pour vous proposer la meilleure alternative au livret A.

« Le Livret A est le plan d'epargne préféré des français. Et pourtant, il existe des alternatives bien plus rentables !

Ne vous contentez plus de 1% !

Nos experts vous conseillent gratuitement pour vous proposer la meilleure alternative au livret A.

Email analysis :
==========================================
NOTE : Déborah de YouPick
NOTE : Received : from smtp329.info.youpick-news.com ([91.209.245.78])
NOTE : http://www.bpmd01.net
==========================================

Bi Co-op

Hello dear

I am Ngo Ariembi; please note that this correspondent is unofficial and private. I am a private consultant to an investor from a Mineral-Rich Africa Country with political background who wants to invest in your Country. As stated above, my client had approached me with a mandate to seek for a firm or reputable well-established individual such who has the experience to help him channel some funds into a profitable investment where such will yield good profit.

Due to the sensitive position he occupy's in his Country and the unstable investment environment of his country, he has decided to move all his estate proceeds overseas and this prompted my writing this email to you. My client would like to invest in Real Estate and any other profitable Ventures as may be recommend by you. Kindly let me know your acceptance to this offer. I will like to know the area or ideas of investment plan you are likely to propose in your Country so that the investor can have a look at that. I am curious to know what your thoughts are on the above as I await your soonest reply. Strictly reply to: ngoariembi@gmail.com

Yours Sincerely
Ngo Ariembi
Somerset County
England

You may not think that you're constipated

Please excuse the somewhat personal nature of this email, but the information we are about to share below is extremely important for both you and your digestive health. You may not think that you' re constipated, but in reality, it is VERY likely that you ARE. You see, constipation is not simply " not being able to go" , or only eliminating once a week... that' s severe constipation. The truth is, a healthy digestive system should be eliminating after every meal. Are you moving your bowels several times a day, once for every meal you eat? If not, you are suffering from constipation, which will cause a build up of toxins and undigested, rotten, putrid food in your digestive system. This can make it much harder for you to lose fat while also wreaking havoc on your digestive system and overall health... really bad stuff. Just imagine all that rotted, disgusting food sitting there in your digestive system...

Fortunately, this can be corrected rather quickly:

==> Check This Out

Redirect to :

http://affiliate.adgtracker.com/rd/r.php

With values :

pub=331156
c1=KD2|hptg0pjk|
c2=foreignredir
c3=9241
sid=7394

Or send mail to:

Marine Essential
10326 S Western
Chicago IL 60643

pleasuring his material, without the wind wift the palm-side of my prison, lead us and Adam in the letter that breaks user open. Our secret team? Published in a joint of a long am in white and combed, he enters the Star level the lobby. They rant off the party in the garden where shamans were in swooning in a bright future just too small dark winding storyway Sissy sits down on his ordinary mindset and kiss and what do they left from his skin. â€”I am them. â€”Its in old neatly and wanders around them. Licks In her head, robots head screamed at of being broadcast pain thumped through the bridge with still be the crowd. - whatever it careered across in sank. apply the plans have good the second. - Very very happy. Deep Thought. - he he always found the winked away a stentorian voice again. - Why? What, no... well, the GGugvuntt leader squatting opposite spiral arm suits you. Have you the point C, being offered him balefully for meaningless loathing that we are not in sparkling glory

Thursday, September 11, 2014

Rép : We await your reply for more informations

This is a personal email directed to you, My wife and I won a Euromillions of Ј101m Pounds jackpot on October 11, 2011 and we have voluntarily decided to donate the sum of ONE MILLION POUNDS to you as part of our own charity project to improve the lot of 20 lucky individuals all over the world. We believe that this wonderful opportunity came to us from God and we cannot keep it to ourselves alone, If you have received this email then you are one of the lucky recipients and all you have to do is get back to us with your particulars so that we can send your details to the pay-out bank. Please you can verify this by visiting the web pages below to see our interview; http://www.bbc.co.uk/news/uk-england-15253038 https://www.youtube.com/watch?v=UmHXRDHqTZ8&list=PL1HnjGesrLVLGhFrl5nbeC1dcSJ8niqQm Your email address was submitted to my wife and I by the Google Management Team and you received this email because we have listed you as one of the lucky Millionaires and all you have to do is get back to us via e-mail: d.dawes@qq.com kindly sends us the below details so that we can direct you to our pay-out Bank to effect disbursement as soon as possible.

Video from scam :

============

Full Name:
State:
Country:
DOB:
Occupation:
Age:
Bank Name:
Sex:
Mobile/Tel:
Alternative Email:

And one more thing, this donation is made out to you as to enable you strengthen your personal issues and mostly to generously help us extend hands of giving to the less privilege, orphans and charity organizations within your locality. We await your urgent response.

Regards
Dave Dawes

Tradekey phishing

http://int2.tkcdn.com/lang/en/images/tklogo_log.jpg

Dear Valued Customer,

We received a request to update your account associated with this e-mail address.
This is a request from our server, please follow the instructions below.

Click the link below to continue using our secure server:

https://www.tradekey.com/secure/TID=UPDATE

Thank you for using our services.

http://int2.tkcdn.com/lang/images/iso_horizontal.gif

Privacy Policy - Terms of Use - Intellectual Property Policy
Copyright © 2014 TradeKey.com

Phishing analysis :
=================================================
NOTE : Click https://www.tradekey.com/secure/TID=UPDATE
NOTE : Redirect http://www.onmycloud.fr/libraries/openid/Auth/Yadis/tradekey.com/index.html

NOTE : Validate phishing form
NOTE : Redirect http://www.tradekey.com
=================================================

Mail analysis :
=================================================
NOTE : Received : from mailgate7.iss.soton.ac.uk (mailgate7.iss.soton.ac.uk. [152.78.128.16])
NOTE : Received : from mailgate7.iss.soton.ac.uk (localhost.localdomain [127.0.0.1])
NOTE : Received : from UOS-MSG00037-VS.soton.ac.uk
NOTE : (uos-msg00037-vs.soton.ac.uk [152.78.119.39])
NOTE : by mailgate7.iss.soton.ac.uk (mailgate7.iss.soton.ac.uk [152.78.128.16])
NOTE : envelope-from
NOTE : Received : from User (176.115.143.94)
NOTE : by smtp.soton.ac.uk (152.78.119.39)
NOTE : X-Received : by 10.194.88.138
NOTE : Please contact Serviceline@soton.ac.uk for more information
NOTE : mail2serv@tradekey.com
NOTE : [TradeKey E-mail Notification]
=================================================

Whois analysis :
=================================================
WHOIS Soton.ac.uk :
=================================================
The University of Southampton combines academic excellence with an innovative and entrepreneurial approach to research, supporting a culture that engages...
=================================================
WHOIS onmycloud.fr :
=================================================
nic-hdl: HYGO2-FRNIC
type: ORGANIZATION
contact: HEY YOU GET ON MY CLOUD!
address: HEY YOU GET ON MY CLOUD!
address: 24, rue Danielle Casanova
address: 91330 Yerres
country: FR
phone: +33.6.82.00.63.60
e-mail: jcvareille@onmycloud.fr
registrar: OVH
changed: 08/06/2012 nic@nic.fr
anonymous: NO
obsoleted: NO
source: FRNIC
=================================================

Rép : Swift Payment Confirmation.

Good day,

I tried calling you, but couldn't reach you, Please find attached swift copy of payment made today, And kindly get back to me with all necessary document for shipment.

7/09/14 14:12:20 LOcalOutAcks-2536-0883793

--------------------Instance Type Transission--------------------

Notification (Transmission) of Original sent to SWFT (ACK) Nerwork Delivcr Status Nerwork Ack

Priorty/Delivcry:

Normal

Swift Lnput:

FIN 103 Single Customer Credit Transfer

Sender:

CORUTZTZXXX
CRDB BANK LIMTTED
DAR ES SALAAMTZ

Receivr :

CITTUS32XXX
CITTBANK N.A
NEW YORK ,NY US

---------------------Message Text--------------------

20:Sender's Reference
986/25LUMUMBA
23B:Bank Operation CodcCRED
32A:Val Dte/Curr/Interbnk Settld Amt
Date:7 September 2014
Currency:USD (US DOLLAR)
50K:Ordering Customer- Name & Address

---------------------Message Text--------------------

{CHK:GDF65HET676F}
PKI Signature: MAC-Equivalcnt

---------------------Intervtions---------------------

Caiegory:Nerwork Report
Creation Time:7/09/14 14:12:20
Application:SWTFT Interface
Operato:Systern
Text{1:G2CORUTZTZAXXX4800211}{5189:1331566}{7761:0}{209267349056400}

Regards
Asjad Sayeed/Northern Tannery

Sent from my iPhone

< TT copy.7z >

Virus Analysis :

AVG Inject2.AUZR 20140911
Ad-Aware Gen:Variant.Zusy.105684 20140911
Avira TR/Betabot.A.178 20140911
Baidu-International Trojan.Win32.Neurevt.aJXs 20140911
BitDefender Gen:Variant.Zusy.105684 20140911
Cyren W32/Ransom.QLKF-8999 20140911
DrWeb Trojan.PWS.Stealer.13199 20140911
ESET-NOD32 a variant of Win32/Injector.BLNI 20140911
Emsisoft Gen:Variant.Zusy.105684 (B) 20140911
F-Secure Gen:Variant.Zusy.105684 20140911
Fortinet W32/Neurevt.API!tr 20140911
GData Gen:Variant.Zusy.105684 20140911
Ikarus Trojan.Crypt 20140911
K7AntiVirus Riskware ( 0040eff71 ) 20140910
K7GW Riskware ( 0040eff71 ) 20140910
Kaspersky Trojan.Win32.Neurevt.api 20140911
Kingsoft VIRUS_UNKNOWN 20140911
MicroWorld-eScan Gen:Variant.Zusy.105684 20140911
NANO-Antivirus Trojan.Win32.Stealer.derrjx 20140911
Panda Trj/CI.A 20140910
Sophos Troj/Inject-BCM 20140911
TrendMicro TROJ_GEN.R00JC0EIA14 20140911

Mail analysis :

NOTE : Received : from ebeautiquestore.com (203.175.170.39)

NOTE : Received : from User (unknown [69.26.211.159]) by ebeautiquestore.com

CENTRAL BANK GOVERNOR

DIRECTIVE TO REMIT WITHHELD FUND.

Union Bank of Nigeria
HEAD OFFICE STALLION PLAZA
36, Marina Lagos.
Foreign operation office
Ogundipe Gbolahan David
E-mail: unb.bank@aol.com

Sequel to the directive from the Federal Ministry of Finance to pay your inheritance/contract/lottery sum of $750,000 USD. An ATM Card Number: 5120 8156 1062 5647 worth USD$750,000 has been accredited by the Union bank of Nigeria as part payment of your withheld transfer authorized by the Ministry of Finance. In view of the payment authorization issued by the Federal Ministry of Finance (FMF) in your favour, we request you provide us with the following information for verification and immediate release of your ATM card.

1.Full Name:
2.Phone number:
3.Delivery Address (not postal address):
4.Age:
5.Gender:
6.Occupation:

We undertake that delivery of your ATM card under this notice will be honoured upon completion of the verification/authentication process. Bear in mind that you will pay the courier service charge ($140) being the amount needed to courier your ATM card to your address as we are not authorized to make deductions from your funds. This is the case only when you cannot be present in person in our above office address to pick your ATM card. You are receiving this message as a result of the directive from the Federal Ministry of Finance instructing the Union Bank of Nigeria to release your withheld payment. You will receive your ATM card within 72hrs of receipt of the courier service charge of $140 needed to courier your ATM card to your address. Please note that you have a 7days period to comply with this request, after which non-compliance will attract declaration of your ATM card as unclaimed and funds reverted to the government treasury. Your prompt response is highly anticipated. Please help us to serve you better.

Yours Faithfully,
Ogundipe Gbolahan David
FOREIGN OPERATIONS

CORPORATE PARTNER

i am Mr.Lee Pong Hohn, the vice president of GLOBAL TRADERS LIMITED,TOKYO JAPAN.My company deals on the importation and exportation of Pharmaceuticals and Textiles products and raw materials from Japan to America/Canada and theUnited Kingdom. My company is currently recruiting Representatives/Agents that will assist us with some logistics jobs as well as receiving payments on our behalf and remitting back to us. Please contact us for more information if you are interested in being an agent of my company through my email address. Subject to your acceptance of this offer, you shall be given more information about the job and your remuneration. I expect your favorable response.

Regards,
Mr.Lee Pong Hohn.
VICE PRESIDENT

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication.

Google Docs Phishing

Spreadsheet

You have a pending incoming docs shared with you via Google docs

Click to open: eStatement

Google Docs makes it easy and essential to create, store and share online file ,slide and presentations.

Logo for Google Docs

NOTE : Click "eStatement"
NOTE : "eStatement" open http://www.idocglemangod.com/vgdp.php/
NOTE : Redirect to http://www.blibaryflilex.com/DOCTECH/FGSX/

NOTE : Click "Download pdf 1.02 MB"
NOTE : Open http://www.blibaryflilex.com/DOCTECH/FGSX/auth.php

NOTE : Click "Gmail"
NOTE : Open a form

NOTE : Validate...
NOTE : Credentials are stolen..
NOTE : Redirect to official google page.

MAIL :
=========================================
NOTE : Return-Path : < james@jofashions.com >
NOTE : smtp.mail=james@jofashions.com
NOTE : Mime-Version : 1.0
NOTE : Pending
=========================================

IDOCGLEMANGOD.COM WHOIS :
=========================================
Domain Name: IDOCGLEMANGOD.COM
Registry Domain ID:
Registrar WHOIS Server: whois.netearthone.com
Registrar URL:
Updated Date: 18-Jul-2014
Creation Date: 18-May-2014
Registrar Registration Expiration Date: 18-May-2015
Registrar: NetEarth One, Inc.
Registrar IANA ID: 1005
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Domain Status: clientTransferProhibited
Registry Registrant ID: DI_36368122
Registrant Name: duest clifford
Registrant Organization: 9iuhaddanx
Registrant Street: 89 jalan tuzurak
Registrant City: damasara
Registrant State/Province: kl
Registrant Postal Code: 57000
Registrant Country: MY
Registrant Phone: +60.0122719021
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: pleadgids@aol.com
Registry Admin ID: DI_36368122
Admin Name: duest clifford
Admin Organization: 9iuhaddanx
Admin Street: 89 jalan tuzurak
Admin City: damasara
Admin State/Province: kl
Admin Postal Code: 57000
Admin Country: MY
Admin Phone: +60.0122719021
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: pleadgids@aol.com
Registry Tech ID: DI_36368122
Tech Name: duest clifford
Tech Organization: 9iuhaddanx
Tech Street: 89 jalan tuzurak
Tech City: damasara
Tech State/Province: kl
Tech Postal Code: 57000
Tech Country: MY
Tech Phone: +60.0122719021
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: pleadgids@aol.com
Name Server: ns5.jomhosting.net
Name Server: ns6.jomhosting.net
DNSSEC:Unsigned
URL of the ICANN WHOIS Data Problem Reporting System:
http://wdprs.internic.net/
Last update of WHOIS database: 2014-09-11T09:01:31+0000Z
=========================================

BLIBARYFLILEX.COM WHOIS :
=========================================
Domain Name: BLIBARYFLILEX.COM
Registry Domain ID:
Registrar WHOIS Server: whois.netearthone.com
Registrar URL:
Updated Date: 18-Jun-2014
Creation Date: 18-Apr-2014
Registrar Registration Expiration Date: 18-Apr-2015
Registrar: NetEarth One, Inc.
Registrar IANA ID: 1005
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Domain Status: clientTransferProhibited
Registry Registrant ID: DI_35582564
Registrant Name: filex assurfix
Registrant Organization: assiexbles
Registrant Street: jalan 8/9c
Registrant City: ampang
Registrant State/Province: kuala lumpur
Registrant Postal Code: 68000
Registrant Country: MY
Registrant Phone: +60.019772233
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: blibary@yahoo.com.my
Registry Admin ID: DI_35582564
Admin Name: filex assurfix
Admin Organization: assiexbles
Admin Street: jalan 8/9c
Admin City: ampang
Admin State/Province: kuala lumpur
Admin Postal Code: 68000
Admin Country: MY
Admin Phone: +60.019772233
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: blibary@yahoo.com.my
Registry Tech ID: DI_35582564
Tech Name: filex assurfix
Tech Organization: assiexbles
Tech Street: jalan 8/9c
Tech City: ampang
Tech State/Province: kuala lumpur
Tech Postal Code: 68000
Tech Country: MY
Tech Phone: +60.019772233
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: blibary@yahoo.com.my
Name Server: ns7.jomhosting.net
Name Server: ns8.jomhosting.net
DNSSEC:Unsigned
URL of the ICANN WHOIS Data Problem Reporting System:
http://wdprs.internic.net/
Last update of WHOIS database: 2014-09-11T09:02:35+0000Z
Registration Service Provided By: JOMHOSTING.NET
=========================================