Friday, February 6, 2015

Comment Spam Vol 15

Ben khal tarek

bonsoir suite à votre annonce j'ai l'honneur de informer que je suis intéresser de cette offre . si vous acceptez notre collaboration on va passer à la 2ème étape. merci à vous lire

Thanh Lan Nguyễn

Tên : Nguyễn Thị Thanh Lang , số nhà : 40 E Nguyễn Duy , phường 9 , Quận 8 , TPHCM ;ĐTDD ; 0907131654 số : CMND : 022556914 : ngân hàng : vietcombark : số tài khoãn :97043668 .08803587 .015 , Email : ngoclanthanhsg2004@yahoo.com , ngoclabthanhsg2004gmail.com

Nicholas Brush

ICC Mortgage And financial Services,Is a sincere and certified private Loan company approved by the Government,we give out international and local loans to all countries in the world,Amount given out $2,500 to $100,000,000 Dollars, Euro and Pounds.We offer loans with a dependable guarantee to all of our clients. Our loan interest rates are very low and affordable with a negotiable duration. Available now MORTGAGE, PERSONAL, TRAVEL, STUDENT, EXPANSION OF BUSINESS AND NEW UNSECURED, SECURE, CONSOLIDATE AND MORE Available now.. Apply for a loan today with your loan amount and duration, Its Easy and fast to get. 4% interest rates and monthly installment payments. {nicholasbrush.icc@gmail.com} Regards, Nicholas Brush

mark wayne

BE SMART AND BECOME RICH IN LESS THAN 3DAYS....It all depends on how fast you can be to get the new PROGRAMMED blank ATM card that is capable of hacking into any ATM machine,anywhere in the world. I got to know about this BLANK ATM CARD when I was searching for job online about a month ago..It has really changed my life for good and now I can say I'm rich and I can never be poor again. The least money I get in a day with it is about $2,000.(Two thousand USD) Every now and then I keeping pumping money into my account. Though is illegal,there is no risk of being caught ,because it has been programmed in such a way that it is not traceable,it also has a technique that makes it impossible for the CCTVs to detect you..For details on how to get yours today, email the hackers on : Tell your loved once too, and start to live large. That's the simple testimony of how my life changed for good...Love you all ...the email address again is atmmachinehackers@gmail.com

agen taruhan bola liga inggris

This design is incredible! You certainly know how to keep a reader amused. Between your wit and your videos, I was almost moved to start my own blog (well, almost...HaHa!) Wonderful job. I really enjoyed what you had to say, and more than that, how you presented it. Too cool! Check out my website;

Giubbotti Moncler

large change of slipway to betray guests. If they bring residence the bacon this endeavor, you should likewise recollect most signing up for that dish touch on for that writing) can easy encourage to cataclysm when you back up online, don't neglect to comparing seek ethical on their location folio. Doing a hurried web Air Max Chaussure Christian Louboutin Borse Gucci Prezzi Piumini Peuterey Sweat Abercrombie module be attracted to object the honourable property direction and will ne'er go false with your line and tap into their necessities. see out what their transport revenue enhancement ahead you present your regularise within the example much than you rattling equal their products so chintzily. Try Also visit my web blog;

Anonymous

There is a famous scene in the situation comedy Friends where all three women merely dress up in wedding dresses for an evening because it just makes them feel great. As anybody who is worn a wedding dress knows though, there's some thing about the virgin whitened wedding dress that simply makes a girl feel such as the sole bride in the whole globe. Naturally, everyone wants a Vera Wang dress and little angels keeping their train upwards as they sweep down the section. Most girls though, would readily settle to get a discount wedding gown if it saved them a few precious dollars, and if it looked like a Vera Wang gown for all anyone might tell. Let us look just a little closer in the full discount wedding gowns dress market and where you're likely to get the most effective bargains.

Thursday, February 5, 2015

Dear Beneficiary, Your Money-Gram Payment Information.

From The Desk Of Mr. DANIEL DUKE
Direct line: +234 8171543838
Email: mony_gram_nigra@outlook.com
Moneygram office®Payments

MONEYGRAM OFFICE DEPARTMENT BENIN REPUBLIC

Dear Beneficiary,

We have concluded to effect your payment of Ј1.2 Million through money gram, but the maximum amount you will be receiving each day starting from tomorrow is Ј4,500.00 daily until the funds is completely transferred to you Below is the information of your First payment of Ј4,500 from your total amount of Ј1.2 Million which was deposit here by Dr. Jike with registration number of: EB-2237. But unfortunately the Managing Director of this department called us this morning and reported that you have not completed the required fee of Ј65,00 which you are suppose to pay for the purchasing of your inheritance files before the transfer commence on your behalf. we have programmed the entire funds into our system to enable you pick up Ј4,500 also The funds transfer are all in place for you to collect now but we have to purchase your payment inheritance file due to the huge amount of fund involves. However, we have already sent out the funds but not yet been putting on your name as the receiver. Therefore you are advice to send us the required fee of Ј65 so that we can purchase your payment inheritance files and put your name on the receiver of the transfer to enable you pick your first payment of Ј4,500 once you comply to the rules and regulations of our transferring system. You are advised to send this Ј65 for purchasing fee via "MONEY-GRAM to our cashier receiver name mentioned below:

Below is the information to send the money through Money Gram.

Receiver name: _________ Abraham Uzochukwu Ekwonwa
Country: ________________ BENIN REPUBLIC
Test Question: __________ me
Answer: _______________ you
Amount: _________Ј65
Reference Number: _______

We have concluded to effect your payment of Ј1.2 Million through money gram but the maximum amount you will be receiving each day starting from tomorrow is Ј4,500.daily until the funds is completely transferred your fund. Then after you have made the payment you can send the payment information through our email address together with your full receiver's info. And As soon as we have received the payment of Ј65 from you and it's confirmed we will carry out our duties effectively and urgent as we have schedule because all necessary arrangement has been completed in our end within 3hours we will complete the transfer online and put your name on the receiver of the funds, also furnish you with the full info. /details which you will use to pick up your first payment of Ј4,500 at any Money-gram Office branch or store in your city/state. You are advised to comply immediately you receive this E-mail to enable us carry out our duties effectively and urgent as we have schedule because all necessary arrangement has been completed on your behalf. Is rest assured that immediately we receive the activation fee today, we will purchase your file and your entire transfer valued of Ј1.2 Million. within 3hours and commence with the release of your daily payment Ј5,000.00 each morning until your funds is completely transferred to you as we agreed on your service after the meeting held with the Tender Board of Directors.

ENCLOSE YOUR FIRST THE PAYMENT DETAILS THAT WAS SENT TODAY!

Money Transfer Control Number (REF)#486587xx
Sender First Name: Abraham
Sender Last Name: Ekwonwa
MTCN:....#486587xx
TEST What Color
TEST White
AMOUNT:Ј4,500

"Note that within 5 working days if you do not remit the required fee of Ј65 the transfer will be retrieved back and remember that the payment details given to you is not complete as we shall give you the full info once we confirm your Ј65 inheritance file fee. Please try and send the fee within 3 working days.

Have a good day.

Sincerely,

Mr. Abraham Uzochukwu Ekwonwa
Direct line: +234 8171543838
Email: mony_gram_nigra@outlook.com
Moneygram Office®Payments

Hi pretty

Hello pretty,

Hi pretty Angel, i saw your profile picture and i must confess you look so elegantly sexy and beautiful. I am a 54Years businessman who have stayed in New York for years and my business takes me to different countries of the world, am a German by birth currently leaving in Europe. Am divorced since May of last year 2014, i have a daughter kate who is 12years old and now stays with my sister in Liverpool. I very much admire your beauty, i love reading love books, i like swimming, i like surfing on the beach, i like walking along the beach and i like your smile, cause you are so beautiful. Since i lost my first wife to cancer in 2010, i remarried in 2012 but that marriage ended because i discovered my ex wife was cheating on me, my intention was to stay away from relationship because i discovered that most women i have met until now are only interested in my money and not in a relationship, but that has changed since i saw your picture and how beautiful you are as a woman, i also believe you are a very responsible lady that can take care of her man and make him happy, so i decided to email you. I know you will probably be wondering how i got your email, the secret is that i am a Government intelegency contractor for many countries U.S, Europe and Asia, i have access to a lot of personal information.

I know it will all sound strange to you but i will really like to know more about you and will be happy if you email me and tell me a little about yourself.

I await your message, have a beautiful day pretty angel.

From an admirer,

Jack.

Email analysis :

NOTE : poornima.gunasekera@mea.gov.lk
NOTE : X-Originating-Ip : [41.190.2.200]
NOTE : Received : from vije.mea.gov.lk (vije.mea.gov.lk. [203.115.21.154])
NOTE : Received : from localhost (localhost.localdomain [127.0.0.1])
NOTE : by vije.mea.gov.lk (Postfix)
NOTE : Received : from vije.mea.gov.lk ([127.0.0.1])
NOTE : by localhost (vije.mea.gov.lk [127.0.0.1])
NOTE : Received : from vije.mea.gov.lk (vije.mea.gov.lk [203.115.21.154])
NOTE : by vije.mea.gov.lk (Postfix)
NOTE : X-Mailer : Zimbra 6.0.7_GA_2473.F11 (zclient/6.0.7_GA_2473.F11)

Please Read Your Message

My name is Aisha, a 65 years old suffering from a long time cancer of the breast, I have decided to Donate the sum of $8 million(Eight Million United state Dollars) to charity and individual through you for the good work and to help the motherless, less privileged and also for the assistance of the widows.i have been battling with this deadly disease which most specialist doctors have confirmed that i may not survive no matter what,I want you to receive this money and use it to help the less privileges, widows and orphans.
Yours Sincerely, Send me email direct to: aishahalimamohd@yahoo.com

Aisha Mohd

Email analysis :

NOTE : khaterkhan@hotmail.com
NOTE : aishahalimamohd@yahoo.com
NOTE : Content-Type : text/plain
NOTE : Mime-Version : 1.0
NOTE : X-Get-Message-Sender-Via : sekilau.cynethost.com:
NOTE : authenticated_id: dfprinte/only user confirmed/virtual account not confirmed
NOTE : Return-Path : < dfprinte@sekilau.cynethost.com >
NOTE : Received : from sekilau.cynethost.com (sekilau.cynethost.com. [202.75.56.186])
NOTE : Received : from dfprinte by sekilau.cynethost.com with local (Exim 4.84)
NOTE : (envelope-from )
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Please Read Your Message

YOUR ATM CARD IS 90% LIMITED FROM TRANSACTING

YOUR ATM CARD IS 90% LIMITED FROM TRANSACTING

Dear Valued Customer.

Please note that your ATM Debit card will be disabled from performing transactions. Pending your registration for the new ATM card bank verification number(BVN). Simply copy and paste the link below in your browser and fill in the registration for to reactivate your ATM card immediately.

CLICK HERE
http://bit.ly/1F09G0B

Note that you can also get information on atm reactivation by sending us a email at:
roselinemokew@gtbank.com

Move to inbox if found in spam to enable you click on reactivation link.
YOUR ATM HAS BEEN DISABLED!!!

SCAM analysis :

CLICK : http://bit.ly/1F09G0B
REDIRECT : http://pradabada.wc.lt/tunchy/gtb.html
SCREENSHOT :


Email analysis :

NOTE : X-Yahoo-Newman-Property : ymail-4
NOTE : Return-Path : bank@gtbankon.biz
NOTE : YOUR ATM CARD IS 90% LIMITED FROM TRANSACTING
NOTE : roselinemokew@gtbank.com

Votre identifiant Apple a été utilisé ( Phishing Apple )

Chère/Cher Client(e),

Votre identifiant Apple a été utilisé lors d’une connexion à iCloud à partir d’un iPad.
Date et heure : 05 Février 2015 à 00:16

Si les informations ci-dessus vous semblent familières, vous pouvez ignorer cet e-mail.

Si vous ne vous êtes pas récemment connecté(e) sur un iPad en utilisant votre identifiant Apple et si vous pensez qu’une autre personne a eu accès à votre compte, il serait prudent de réinitialiser votre mot de passe vos informations bancaires sur le site Mon identifiant Apple

(mon identifiant).

Cordialement,
L’assistance Apple

Phishing analysis :

CLICK : mon identifiant
OPEN : http://jsstt.com/hd/7/
REDIRECT : http://www.chateau-issan.com/includes/functions/dre/Apple/***/Apple/
SCREENSHOT :



CLICK : LOGIN
REDIRECT : http://www.chateau-issan.com/includes/functions/dre/Apple/***/Apple/inscription/
SCREENSHOT :



CLICK : VALIDER MES INFORMATIONS
REDIRECT : https://appleid.apple.com/

Email analysis :

NOTE : Service-apple@inc.fr
NOTE : bonnet.peinture26@orange.fr
NOTE : Received : from provedmedia ([127.0.0.1])
NOTE : by provedmedia with Microsoft SMTPSVC(8.5.9600.16384);
NOTE : Received : from unknown (HELO provedmedia) (72.251.225.115)
NOTE : X-Library : Indy 8.0.25
NOTE : Votre identifiant Apple a été utilisé

jsstt.com whois :

Domain Name:jsstt.com
Registry Domain ID:
Registrar WHOIS Server: whois.hichina.com
Registrar URL: http://www.net.cn/
Updated Date:2012-11-01T04:54:21Z
Creation Date:2009-12-16T02:10:56Z
Registrar Registration Expiration Date:2015-12-16T02:10:56Z
Registrar: HICHINA ZHICHENG TECHNOLOGY LTD.
Registrar IANA ID: 420
Registrar Abuse Contact Email: abuse@list.alibaba-inc.com
Registrar Abuse Contact Phone: +86.4006008500

Registry Registrant ID:hc736011586-cn

Registrant Name:xiong yang
Registrant Organization:yangxiong
Registrant Street:china jiangsu suzhou ganjiang 888# shuitiantang,,
Registrant City:suzhoushi
Registrant State/Province:jiangsu
Registrant Postal Code:215000
Registrant Country:CN
Registrant Phone:+86.051265307866
Registrant Phone Ext:
Registrant Fax:+86.051265307866
Registrant Fax Ext:
Registrant Email:76384404@qq.com

Registry Admin ID:hc736011586-cn

Admin Name:xiong yang
Admin Organization:yangxiong
Admin Street:china jiangsu suzhou ganjiang 888# shuitiantang,,
Admin City:suzhoushi
Admin State/Province:jiangsu
Admin Postal Code:215000
Admin Country:CN
Admin Phone:+86.051265307866
Admin Phone Ext:
Admin Fax:+86.051265307866
Admin Fax Ext:
Admin Email:76384404@qq.com

Registry Tech ID:hichina001-cn

Tech Name:hichina
Tech Organization:HiChina Web Solutions Limited
Tech Street:3/F., HiChina Mansion,No.27 Gulouwai Avenue,Dongcheng District
Tech City:Beijing
Tech State/Province:Beijing
Tech Postal Code:100011
Tech Country:CN
Tech Phone:+86.01065985888
Tech Phone Ext:
Tech Fax:+86.01065985438
Tech Fax Ext:
Tech Email:support@YinSiBaoHu.AliYun.com
Name Server:dns17.hichina.com
Name Server:dns18.hichina.com

Billing Name:hichina
Billing Organization:HiChina Web Solutions Limited
Billing Street:3/F., HiChina Mansion,No.27 Gulouwai Avenue,Dongcheng District
Billing City:Beijing
Billing State/Province:Beijing
Billing Postal Code:100011
Billing Country:CN
Billing Phone:+86.01065985888
Billing Phone Ext:
Billing Fax:+86.01065985438
Billing Fax Ext:
Billing Email:support@YinSiBaoHu.AliYun.com

chateau-issan.com whois :

Domain Name: chateau-issan.com
Registrant Name: CHATEAU D'ISSAN
Registrant Organization: CHATEAU D'ISSAN
Registrant Street: Cantenac
Registrant City: Margaux Registrant
Registrant Postal Code: 33460
Registrant Country: FR
Registrant Phone: +33.557883591
Registrant Fax: +33.557887424
Registrant Email: e3e51ae617386f0eda1964a7751746b6-cd3032@contact.gandi.net
Registry Admin ID: Admin Name: Carel Versepuy

Admin Organization: HITEO SARL
Admin Street: 38, Rue Ferrere
Admin City: Bordeaux
Admin Postal Code: 33000
Admin Country: FR
Admin Phone: +33.535546050
Admin Email: 0236fbbcbb35a6193139ac38b0a58f09-1574092@contact.gandi.net

Landlord Contact File

Landlord Contact File

Do you want to contact residential landlords regarding your products or services? Over the last twelve months we have been working with landlord associations and organisers of property events, seminars and conferences. We have added to our landlord portfolio month by month and now have a total of 91,537 verified UK located Residential Landlords. All our landlords own one or more residential letting property and many wish to expand on their rental portfolio. Our landlords have given permission for third party contact regarding services or products relating to being a residential landlord. You are able to contact the landlords by email, telephone or direct mail. The landlords welcome contact regarding property, advertising, tenant services, financial services, repairs, trades, accountants, furnishings, legal services, mortgages, investments, insurance and more. The database is cleaned and updated on a monthly basis. There is nothing like this file on the market which contains true and accurate landlord information and it is a real asset to any business wishing to target this valuable market.

You can purchase this file in its entirety or by region.

Details at landlordconnection.co.uk

Tel: 01904375999

Regards

Landlord Connection

Part-Time Job Offer: Positions Are Available Now!

Dear Friend,

There is a job position available which requires no specific qualifications to carry out tasks efficiently, no training required. The job Entails Evaluation process, shopping at any Walmart, RITE AID, CVS Pharmacy Stores in your local area. Your job duties are flexible and entirely legitimate. Secret Shoppers perform specific tasks such as purchasing a product, asking questions, registering complaints or behaving in a certain way, and then provide detailed reports or feedback about their experiences. The purpose of mystery shoppers is to help businesses increase sales by assisting in improving customer service awareness. We need details with an unbiased opinion of how our services are perceived by customers. We search for, hire, train, and compensate the shoppers; prepare, mail out, and receive information; and tabulate and analyze the results.

Anonymity: A good mystery shopper is always anonymous. A mystery shopper should be able to visit the same location a number of times without being detected by the store staff.

Dependability: A mystery shopper must complete their assignments as scheduled and submit the report exactly per the guidelines. We need you to be a Secret Shopper; your job is to conduct Surveys. Work hours : 45 minutes per assignment, Monday-Friday. You will receive $300 per assignment.

To partake in this program and get started. Provide below details :

i) Full Names
ii) Mailing Address
iii) Cell / Home Phone Number
iv) What is your current work schedule ? Available work hours.
v) Shopping Interests for Enjoyable assignments. (Optional)

We appreciate your interest in the job position, await immediate response.

Yours Sincerely,
Benjamin Peterson.
Hiring Manager, Secret Shop
USA.
msshoper@barid.com
msshoper@shopper.com

ocean freight, hope can help you.

Ocean rate for your reference as follow:

Currency: USD

Antwerp 955 1780 1780
Zeebrugge 980 1830 1830
Hamburg 1030 1930 1930
Bremerhaven 980 1830 1880
FrLE HAVRE 955 1780 1830
ROTTERDAM 895 1655 1755
SOUTHAMPTON 955 1780 1830
FELIXSTOWE 980 1830 1830
GOTHENBURG 1055 1980 2030
KOTKA 1530 2830 2830
ST.PETERSBURG 1280 2380 2430
BEIRUT 1680 3200 3300
MERSIN 1255 2250 2300
KUMPORT/HAYDARPASA 1255 2500 2550
ASHDOD 1130 2125 2175
HAIFA 1255 2300 2300
DAMIETTA 1290 2460 2460
ALEXANDRIA 1205 2275 2325
PORT SAID 1580 3000 3050
RIJEKA 1655 3200 3250
LIMASSOL 1780 3400 3450
PIRAEUS 1460 2910 2910
FOS 1230 2050 2100
BARCELONA 1230 2050 2100
VALENCIA 1230 2050 2100
MALTA 1230 2350 2400
NAPLES 1655 3200 3250
TARANTO 1730 3450 3550
ANCONA 1655 3200 3250
LA SPEZIA 1655 3200 3250
Constanza 1130 2125 2175
ILLYICHEVSK 1455 2775 2875
ODESSA 1130 2125 2175
NOVOROSSIYSK 1580 3000 3000
POTI 1855 3400 3450
VARNA 1605 2850 2900
South America East: USD1200/2350/2350
South America West: USD2150/4150/4250
Caribbean: USD3300/4550/4550
Mexico: USD1750/3750/3750

If I bother you, pls let me know, I will remove you from my email list, and not send you email any further. Have a nice day. 1662_14(02-02-10-13-12).gif

B.rgds.
Betty

Oversea Department
ShenZhen Panair Global Logistics Company Limited
ROOM 709-710, I PARK BUILDING (B), #26 DENGLIANG ROAD, NANSHAN DISTRICT, SHENZHEN, CHINA
Tel: 86-755-33986072 Fax: 86-755-33986077
Mob: 18608632890 QQ:2851685784
E-mail:betty@cnpanair.com
oversea@panair-cn.com
Skype: betty.panair
Http://www.***.com
P Save a tree. Don't print this e-mail unless it's really necessary
1662_14(02-02-10-13-12).gif

Friday, January 30, 2015

"GREETINGS"

I am sending you this mail in good faith, My name is Jeffrey M Berman. I have just been informed by my doctor that I only have few months to live due to cancer illness and I am about to end the race like this without a child. I have decided WILL/DONATE 6,000,000.00 Pounds to you to promote charity works. God bless you. Waiting to hear from you

Humbly and sincerely
Mr. Jeffrey M Berman

Email analysis :

NOTE : Received : from mbx1.bardstowncable.net
NOTE : (mbx1.bardstowncable.net [10.1.2.151])
NOTE : by mbx1.bardstowncable.net (Postfix)
NOTE : X-Mailer : Zimbra 8.6.0_GA_1153 (zclient/8.6.0_GA_1153)
NOTE : X-Originating-Ip : [200.219.249.88]
NOTE : wemematt@bardstowncable.net
NOTE : jeffreybman@aol.co.uk

Payment Authentication Code #: MFA/FGN/PDX237NG/15

Hello friend,

Re: PAYMENT AUTHENTICATION

I am Dr. Frank Okafor, Chairman Foreign Contract Review Panel; my office monitors and control all foreign contracts payments. I am the final signatory to any transfer or remittance of foreign contracts settlements. I have before me list of funds, which could not be transferred to some nominated accounts as these accounts have been identified either as ghost accounts, unclaimed deposits and over-invoiced sum etc. I write to present you to the federal government that you are among the contractors expecting their funds to be transferred into their account, on this note; I WISH TO HAVE A DEAL WITH YOU AS REGARDS TO THE UNPAID CERTIFIED CONTRACT FUND WITH VALUE US$18.5 Million. I have every files before me and the data will be change to your name to enable you receive the fund into your bank account as the beneficiary. I have the opportunity to write you based on the instructions I received 2 days ago from the Senate Committee on Contract Payments/Foreign Debts to submit the List of payment reports / expenditures and audited reports of revenues. Among several others, I have decided to remit this sum following my idea that we have a deal/agreement and I am going to do this legally.

MY CONDITIONS.

1. You will give me 50% of the total contract funds as soon as you confirm it in your designated bank account.
2. This deal must be kept secret forever and all correspondence will be strictly by email / telephone for security reasons.
3. There should be no third parties as most problem associated with fund release are caused by agents or representatives.

If you AGREE with my conditions, l advise you on what to do immediately and the transfer will commence without delay as I will proceed to fix your name on the Payment schedule instantly to meet the 3days mandate.

AWaiting for your reply soon.

Yours Sincerely.

Dr. Frank Okafor
CHAIRMAN FOREIGN CONTRACT REVIEW PANEL
Federal Ministry of Foreign Affairs.
Garki-Abuja - Nigeria
Email: frkokafo@yahoo.co.jp

The information in this message and in any attachments, contains confidential information and is intended solely for the attention and use of the addressee.

DONATION

Am Mr. Tom Crist. I am donating a grant of $850,000 USD to you. Contact me(tomcrisdonation@gmail.com ) for further details. Mr Tom Crist

Email analysis :

NOTE : eonardbrown609@yahoo.pt
NOTE : tomcrisdonation@gmail.com
NOTE : X-Yahoo-Newman-Property : ymail-3

Attention Dear Winner.

Facebook Lottery Team
REF: online splash promo.

Attention Dear Winner.

We (Facebook Lottery Team) proudly announce! that your E-MAIL ACCOUNT has been selected as one of the lucky winners and has won the sum $5,000,000.00USD (Five Million United State Dollars ) in the on-going Face-book online award promo. Your Ticket number is 00545 188 564756.

Prize #77801209/N,
WINNING NUMBER: FB/575061725.
Serial number 5368/02
Lucky numbers: 17 98 09 67 46

All participant were selected through a computer random integrated system drawn in 27 million E-mail address address via the Internet and lucky winners do not have to purchase any ticket to participate in this lottery program

Kindly forward below details to:
Contact Person: Mr. David M. Wehner
E-mail: mr.marc.andreessen@gmail.com
E-mail: facebook-company@fastservice.com
Tel+447045764488

===================================
(**) Your Full names:
(**) Your Telephone Number
(**) Your Contact address:
(**) Your Occupation:
(**) Your Country:
(**) Your Age & Sex:
(**) And your lucky number above:
===================================

NOTE: For security reasons and due to the mix-up of some numbers and names, we ask that you keep this notification strictly from public notice until your claim has been processed and your money remitted to you. This is part of our security protocol to avoid double claiming or unscrupulous acts by non-participants of this program.

Yours in service,
Mr.Marc Andreessen
Facebook Lottery Facilitator.
Copyright ©2015 Facebook Lottery Promotions!

Once again stop contacting those people,

Troy Illinois General Board & Compensation Reserve Team

GRANTED APPROVAL FROM INTERNATIONAL MONETARY FUND Plot 1379 Tiamiyu Savage Street, Victoria Island, London

Great News, YOU ARE ADVISED TO STOP CONTACTING THEM!!!

I am Mrs. CYNDY BANKS, I am a US citizen, 42 years Old. I reside here in Spring City, Pennsylvania. My residential address is as follows. 3663 Schuylkill Rd# 1, Spring City, Pennsylvania, United States, am thinking of relocating since I am now rich. I am one of those that took part in the Compensation in Troy Illinois many years ago and they refused to pay me, I had paid over $52,000 while in the United States trying to get my payment all to no avail. I decided to travel down to Troy Illinois with all my compensation documents and i was directed to meet Mr.David Morgan, he is among the member of the COMPENSATION AWARD COMMITTEE, I contacted him and he explained everything to me. He said whoever is contacting us through emails are fake because the Inheritance/Compensation Law clearly states that the beneficiary/recipient is exempt from paying any out of pocket fees or charges to receive said funds. Mr. David Moragntook me to the paying bank for the claim of my Compensation payment. Right now I am the happiest woman on earth because I have received my compensation funds of $9,500,000.00 (nine million five hundred thousand dollars). Moreover, Mr. David Moragnshowed me the full information of those that are yet to receive their payments and I saw your name and email address as one of the beneficiaries that is why I decided to email you to stop dealing with those people, they are not with your funds, they are only making money out of you. I will advise you to contact Mr. David Moragn you have to contact him directly on this information below.

COMPENSATION AWARD HOUSE
Name: Mr. David Moragn
Email: dm9823984@gmail.com

Listed below are the name of mafias and banks behind the non release of your funds that I managed to sneak out for your kind perusal.

1) Prof. Charles soludo
2) Senator David Mark
2) Micheal Edward
3) Chief Joseph Sanusi
3) Sanusi Lamido
4) Dr. R. Rasheed
5) Mr. David Koffi
6) Barrister Awele Ugorji
7) Mr. Roland Ngwa
8) Barrister Ucheuzo Williams
9) Mr. Ernest Chukwudi Obi
10) Dr. Patrick Aziza Deputy Governor - Policy / Board Member
11) Mr. Tunde Lemo Deputy Governor - Financial Sector Surveillance/Board Member
12) Mrs. W. D. A. Mshelia Deputy Governor - Corporate Services / Board Members
13) Mrs. Okonjo Iweala
14) Mrs. Rita Ekwesili
15) Barr Jacob Onyema
16) Dr. Godwin Oboh: Director Union Bank Of Nigeria.
17) Mr. John Collins: Global Diplomat Director.
18) Foreign fund diplomatic courier
19) Barr. Becky Owens
20) Rev. Steven Jones
21) Mr. Alfred james
22) Mrs. Sherry Williams
23) Mr. Scott Larry

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing. The only money I paid after I met Barrister GODWIN ONUH was just $300 for the delivery charges, take note of that. (NOTE: TELLING YOU TO PAY FOR ANY DELIVERY OR COURIER CHARGE IS ALL NOTHING BUT LIES, I REPEAT THE ONLY MONEY YOU WILL HAVE TO PAY AND WHICH I ALSO PAID IS $300 FOR THE DELIVERY CHARGES IMPOSED BY THE GOVERNMENT AND YOUR PACKAGE CONTAINING YOUR CERTIFIED BANK DRAFT CHEQUE WILL BE REACHING YOU THROUGH THE EXPRESS COURIER SERVICE). Once again stop contacting those people, I will advise you to contact Mr. David Moragn so that he can help you to deliver your funds instead of dealing with those liars that will be turning you around asking for different kind of money to complete your transaction.

Mrs. CYNDY BANKS

UPDATE ME

Good Day,

I am Roberto leiro (Esq.) I must solicit your confidence in this transaction; this is by virtue of the nature as being utterly confidential. Though I know that a transaction of this magnitude will make any one apprehensive and overwhelmed, but I am assuring you that all will be well. The project I am presenting to you is a case of my late client, who willed USD$9.4million to his next-of-kin. It was most unfortunate that him and his next-of-kin died on the same day in an auto-crash, am now faced with indecision about who to pass the funds to. This email might come as a surprise to you, since there was no previous correspondence between us. My purpose of contacting you is for you to help secure the funds left behind by my late client, to avoid it being confiscated or declared unclaimed by the financial institution. The financial institution has issued me a notice to contact the existing relative on this first quarter of year 2015, less the account will be declared unclaimed and the funds diverted to the financial institution's treasury. So far, all my efforts to get hold of someone related to my late client have proved abortive. I am actually asking for your Consent to present you to the financial institution as the Next of Kin/beneficiary of my late client's fund, so that the proceeds of this will be released to you. I shall provide all the documents to back up the claim as my client's Next of Kin All I require is your honest co-operation and to enable us achieves this transaction. I wish to point out that I want 10% of this money to be shared among charity Organizations, while the remaining 90% would be shared equally between us. This transaction is entirely risk free. I will use my position as the client’s attorney to guarantee the successful execution of this transaction.

I need your reply.

Thank You
Roberto leiro (Esq.)
Reply at: robertoleirolinux@linuxmail.org

SINCERELY, GOD BLESS YOU AS YOU HELP

My name is Jeniffer, I am happy to know you, but God knows you better and he knows why he has directed me to you at this point in time so do not be afraid. I saw your contact email at ministries of commerce and foreign trade departments. I am writing this mail to you with heavy sorrow in my heart. And am contacting you because I don’t have any other option than to tell you as I was touched to open up to you, I am with Libyan embassy in London for ten years before he died in the year 2005.we were married for eleven years without a child. He died after a brief illness that lasted for only five days. & i have 8.5 million dollars to transfer to you in charity name to help poor in your place, contact me here.(jenniffer.edward@mail.com)

Sincerely.
Jeniffer Mauller Edward.

jenniffer.edward@mail.com

Saudin Farooq fmf

AUTHORIZATION TO REMIT YOUR FUND
FEDERAL MINISTRY OF FINANCE
128, JAKONDE AVENUE V/ISLAND LAGOS
PO BOX 2704 FEDERAL REPUBLIC OF NIGERIA
COMMITTEE ON FOREIGN PAYMENT
AUTHORIZATION TO REMIT YOUR FUND
Our Ref: RTG /SNT/STB

ATTN: Beneficiary,

We, the entire members of the Federal Ministry of Finance, on behalf of the Federal Republic of Nigeria, Under the auspices of the ECOWAS Head of States, comprising 16 countries these includes Nigeria, Ghana, Togo, Benin, Senegal, Mali, Burkina Faso, cote d’ Ivoire and so on, We held a meeting last week concerning payment , both foreign and local contractors/inheritance funds which has been abandon by our banks in all West African countries. Furthermore, On going through files Friday last week, we discovered that your name and email address was dumped untreated, so at this juncture, we apologize for the delay of your payment and please stop communicating with any office now and attention to this office only for you to receive your payment of $5m (Five- Million United States Dollars) accordingly . Now your new Payment Reference No.-35460021, Allocation No: 674632 Password No : 339331 , Pin Code No: 55674 and your Certificate of Merit Payment No : 103, Released Code No: 0763; Immediate Telex confirmation No: -1114433 ; Secret Code No: XXTN013, Having received these vital payment number, therefore You are qualified now to received and confirm Now you are directed to contact this Office immediately so that we will instruct you on what to do , this is to avoid mistake while transferring your overdue payment. Contact us now for immediate release of your fund and forward your Details to our office to avoid transfer mistake.

Reconfirm to us the following information immediately

Full names:
Current Address:
Mobile:
Occupation:
Your Valid ID Card:
Age:
Nationality:
Next of Kin:

NOTE: We have mounted our security network to monitor every in-coming call,if we still find out that you are still dealing with all those fraudsters that have been frustrating our efforts and defrauding beneficiaries, We shall stop and cancel your payment immediately.

Best Regards

MR. Saudin Farooq
Secretary Resolution Panel on Contract / Inheritance fund Payment
Federal Ministry of finance.
CC: Honorable Minister of Finance
Cc: Senate President.
Cc: All Foreign Payment Offices.
Cc: Board of Directors [Fbg].
Cc: Accountant General Of The Federation
fedminoffinplc@gmail.com
farooqfmfs@yahoo.pt

MR JAMES IBE THE DELIVERY MAN I SENT HAS ARRIVED ,CALL HIM NOW(+16465689774)?

FROM THE EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA (CBN)
GOV.SANUSI LAMIDO
E-mail: sanusilamido228@yahoo.com.hk

URGENT NOTICE,
ATTENTION: BENEFICIARY

This is to inform you that your delivery man has arrived with your inheritance cash trunk boxes value $8.3 million dollars in John F. Kennedy International Airport New York as their transit. I want you to know that you have 24 hours to call him now with this line (+16465689774) or email (jamesibe18@yahoo.com.ph ),then ask to speak to the diplomatic deliveryman in person of Mr.James Ibe in the United States.Let us know if you are still interested to get your two trunk boxes delivered to you today? As he has been waiting to hear from you to enable him get to your home address without missing his way. For your information, the deliveryman with your package is not aware of the content of the boxes for security purpose. Please do not tell him to avoid running away with your funds.On no account should you let him know about the content of the consignment to avoid evil intention. Most importantly you are advised to send your full data to him,which include your Full Name,Current Residential Address, Direct Cell Number,and A copy of any identity card to verify that you are the right receiver to avoid mistakes. Note that you must call me as soon as you receive this email for more discussion, Also reconfirm your full current address and valid phone number to the Delivery officer via his above email address once you receive this email to enable him deliver your cash consignment boxes to your house without any further delay or mistake. You are advised not to waste his time at the airport,so that he would not be stranded in any way because he will return if he finds out that you are not doing anything to get him over to your house.

CONGRATULATIONS.
MALLAM SANUSI LAMIDO AMINU,
EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA
Gov.inf1@live.com
governorsanusil@yahoo.com.hk

riichardhii

Hello Friend, I am Richard Hii and i am requesting for your partnership in Re-profiling funds with the bank i work in. Contact me for more details (riichardhii@gmail.com)

Regards
Richard Hii

Email analysis :

NOTE : riichardhii@gmail.com
NOTE : test@ECLECTICSL.COM
NOTE : Received : from [221.207.62.202] (port=53335 helo=User)
NOTE : by server.kirokom.com with esmtpa (Exim 4.84)

Fax = Trojan

Fax message (Fax #0086091)

http://79.96.148.163/.~NEW_RECEIVED_FAX/incoming.html
Sent date: Thu, 22 Jan 2015 15:00:49 +0000

Fax message (Fax #0458849)

http://pristineusa.com/~_RECEIVED~FAX~MESSAGES/incoming.html
Sent date: Thu, 22 Jan 2015 15:13:35 +0000

Fax message (Fax #3457735)

http://hifafarah.com/._RECEIVED.MESSAGES/incoming-fax_letter.html
Sent date: Thu, 22 Jan 2015 15:26:03 +0000

Fax message (Fax #4644306)

http://89.161.234.149/-_NEW_RECEIVED.FAX_MESSAGES/incoming.fax~letter.html
Sent date: Thu, 22 Jan 2015 15:08:31 +0000

Fax message (Fax #6410561)

http://www.get-the-best.com/~_RECEIVED.FAX_MESSAGES/incoming.html
Sent date: Thu, 22 Jan 2015 15:16:23 +0000

Email analysis for 5 emails :

NOTE : Received : from unknown (HELO my-fax.com) (85.133.33.10)
NOTE : Received : from unknown (HELO my-fax.com) (40.131.4.2)
NOTE : Received : from unknown (HELO my-fax.com) (91.183.230.243)
NOTE : Received : from unknown (HELO my-fax.com) (66.203.160.26)
NOTE : Received : from unknown (HELO my-fax.com) (64.20.199.98)

pristineusa.com whois :

Registrant Name: PRISTINE SOFTWARE
Registrant Organization: PRISTINE SOFTWARE
Registrant Street: 1411 W. Covell Blvd Ste 106
Registrant City: Davis
Registrant State/Province: CA
Registrant Postal Code: 95616
Registrant Country: US
Registrant Phone: +1.5307584484
Registrant Phone Ext.:
Registrant Fax:
Registrant Fax Ext.:
Registrant Email: mmadani@pristineusa.com

hifafarah.com whois :

Registrant Name: PERFECT PRIVACY, LLC
Registrant Organization:
Registrant Street: 12808 Gran Bay Pkwy West
Registrant City: Jacksonville
Registrant State/Province: FL
Registrant Postal Code: 32258
Registrant Country: US
Registrant Phone: +1.9027492701
Registrant Phone Ext.:
Registrant Fax:
Registrant Fax Ext.:
Registrant Email: 24ebf0cf0a16123311014b9d998ad564@domaindiscreet.com

get-the-best.com whois :

Registry Admin ID: Admin Name: Lentz, Eduardo
Admin Organization: Get The Best, Inc.
Admin Street: P.O. Box 18630
Admin City: Boulder
Admin State/Province: CO
Admin Postal Code: 80308
Admin Country: US
Admin Phone: (303) 941-2118
Admin Fax: 999 999 9999
Admin Email: gtbusa@IX.NETCOM.COM

Analysis of link

- CLICK LINK
- DOWNLOAD FILE : (fax_message72933.zip)
- EXTRACT FILE : fax_message23055.exe
- PAGE REDIRECTED TO FAX SERVICE WEBSITE.

Analysis of file

ALYac : Trojan.Upatre.J
AVG : Downloader.Generic14.IJZ
AVware : Trojan-Downloader.Win32.Upatre.ao (v)
Ad-Aware : Trojan.Upatre.J
Agnitum : Trojan.Staser!
AhnLab-V3 : Win-Trojan/Downloader.38400.FA
Antiy-AVL : Trojan/Win32.Staser
Avast : Win32:Trojan-gen
Avira : TR/Dldr.Kryptik.pza
BitDefender : Trojan.Upatre.J
ByteHero : Virus.Win32.Heur.c
CAT-QuickHeal : (Suspicious) - DNAScan
Comodo : TrojWare.Win32.TrojanDownloader.Waski.BA
Cyren : W32/Trojan.NMXE-6820
DrWeb : Trojan.Upatre.125
ESET-NOD32 : Win32/TrojanDownloader.Waski.F
Emsisoft : Trojan.Upatre.J (B)
F-Prot : W32/Trojan3.NHH
F-Secure : Trojan-Downloader:W32/Upatre.J
Fortinet : W32/Kryptik.CWCJ!tr
GData : Trojan.Upatre.J
Ikarus : Trojan-Downloader.Waski
Jiangmin : Trojan/Staser.amk
K7AntiVirus : Trojan-Downloader ( 0049d22b1 )
K7GW : Trojan-Downloader ( 0049d22b1 )
Kaspersky : Trojan.Win32.Staser.awvp
Malwarebytes : Trojan.Email.FakeDoc
McAfee : Upatre-FAAJ!3B474BAEAC5F
McAfee-GW-Edition : BehavesLike.Win32.Autorun.nt
MicroWorld-eScan : Trojan.Upatre.J
Microsoft : TrojanDownloader:Win32/Upatre
NANO-Antivirus : Trojan.Win32.Kryptik.dmuguo
Norman : Upatre.FN
Sophos : Troj/Dyreza-AT
Symantec : Downloader.Upatre!gen8
TheHacker : Trojan/Kryptik.cwaa
TotalDefense : Win32/Upatre.IVVGEBC
TrendMicro : TROJ_UPATRE.SMNC
TrendMicro-HouseCall : TROJ_UPATRE.SMNC
VIPRE : Trojan-Downloader.Win32.Upatre.ao (v)
nProtect : Trojan/W32.Agent.38400.XP

Wednesday, January 28, 2015

Scammers

"a_braznell@yahoo.com" , "abigailaryee19@yahoo.com" , alberta okine , "alhassanissaka91@yahoo.com" , "amadaashitey@yahoo.com" , "amanda.mattew@yahoo.com" , "amandaashitey@yahoo.com" , "amartei_joseph@yahoo.com" , ampomah ulla , "amsingle2014amsingle2014@yahoo.com" , angel cooke , "angelayeboah787@yahoo.com" , Anna Bills , "annstillion47@yahoo.com" , "Augustinasmith600@yahoo.com" , "awuah.nancy@yahoo.com" , "badmuslisa@yahoo.com" , "bayebaba71@yahoo.com" , beatrice thomas , becca klean , "berlidaeknaadusei@yahoo.com" , Berton Coxon , Beverly k Clement , "Bonitasmith694@yahoo.com" , "bridgeteyre@yahoo.com" , "camaraduncan1000@hotmail.com" , "ceciliaxidan@ymail.com" , "christiana_love772@yahoo.com" , cindy rockson , "cindyrockson119@yahoo.com" , "cynthiapatrick77@yahoo.com" , "destiny.zainab@yahoo.com" , "diana_hmed@yahoo.com" , "dianahmed@yahoo.com" , "dixcy_k28@yahoo.com" , donald amy , dorothy kwarteng , edwina love , "elizabethwhyte72@yahoo.com" , "Ellenwhite119@yahoo.com" , "Euniceoforiwa448@yahoo.com" , fait love , "fatilove786@yahoo.com" , "fredayfishes@yahoo.com" , "geroselyn7@yahoo.com" , gladys solomon , gladys solomon , "gwesling47@yahoo.com" , Hannah Kitson , "harrietlove500@yahoo.com" , henery lobe , "honestbaby88@yahoo.com" , "Humugirl2012@yahoo.com" , "indomie123@yahoo.com" , "irene.love89@yahoo.com" , "irenemorgan10@yahoo.com" , "jenifaashley@yahoo.com" , jennifer mallon , "jenniferrudson@yahoo.com" , jessica mintah , "Johnmary840@yahoo.com" , joice otu , "joyce_bee@ymail.com" , "joyce.boateng83@yahoo.com" , "joycelove14@yahoo.com" , "jselina16@yahoo.com" , "julie.love60@yahoo.com" , "kaseemfati@yahoo.com" , kelly afun , kelly deemer , kelly rowland , "kellybannks@yahoo.com" , "krystaelmore@yahoo.com" , Lanisha Prigett , "larry_love58@yahoo.com" , "lbrew34@yahoo.com" , "lilio.rose@yahoo.com" , linda brown , linda nartey , "Linda_dufielld@yahoo.com" , "linda.hanson61@yahoo.com" , "lindadanson88@gmail.com" , "lindahuda14@yahoo.com" , "lindalawe@yahoo.com" , Lisa Jones , "loeceleste@yahoo.com" , "looking800@ymail.com" , love wet , Lovely Angel , lovely yak , "lovelystella700@yahoo.com" , "lovensexxxx@yahoo.com" , "loviaboateng2@gmail.com" , "lovnadiza1z@yahoo.com" , "lucyosei01@yahoo.com" , "malimenadazzo@yahoo.com" , "mandy_rose96@yahoo.com" , "mariam4u09@yahoo.com" , "mary.god80@yahoo.com" , "marywashington203@yahoo.com" , "me.2244@yahoo.com" , "michelle_stidham82@yahoo.com" , "minashreal@yahoo.com" , "miss_jenifer42@yahoo.fr" , "miss_kath86@yahoo.com" , "mrsgladis@yahoo.com" , "muareeneric@yahoo.com" , "natasha_belle82@yahoo.com" , "oojult@yahoo.com" , "oseilucy222@yahoo.com" , Peanut Mariya , "philippa_maughan@yahoo.com" , "pink_divaboo@yahoo.com" , "prettyboo90@yahoo.com" , "prettyqueen4real1980@yahoo.com" , "Rahina_baby@yahoo.com" , "reallove.gladys@yahoo.com" , "rose_love_abotchii@yahoo.com" , "Rose.smith674@yahoo.com" , "rosemond116@yahoo.com" , "saidatu.ismail@ymail.com" , "SainuziAbdullah@jkr.gov.my" , "sallycool210@yahoo.com" , "samiratu_umar@yahoo.com" , "sandralou1982@yahoo.com" , "sandramaboubaby1@hotmail.com" , "sandrascott2299@yahoo.com" , Sara Collins , Scam cz , "serwaalinda95@yahoo.com" , "shelbylambert70@yahoo.com" , "sherryjudd@yahoo.com" , Sidney J , "smithsandra776@yahoo.com" , Solomon Ihedioha , sophia linda , "sschneck@yahoo.com" , "sweet.kandy20@yahoo.com" , "sweethumble315613@yahoo.com" , "sweetqueen385@gmail.com" , Terran Snyder , "Theresacolema52@yahoo.com" , "theresahdanso89@yahoo.com" , "tillsunrise4u@yahoo.com" , "v_atakora@yahoo.com" , victoria wood , "vidadonu@yahoo.com" , "winslovemanu60@yahoo.com" , "yemitunde883@yahoo.com" , "your.lizzy@yahoo.com" , Zulfija

FEDERAL BUREAU OF INVESTIGATION(FBI)

NOTE: If you received this message in your SPAM/BULK folder that is because of the restrictions implemented by your Internet Service Provider we the (Federal Bureau of Investigation) urge you to treat it genuinely. Federal Bureau of Investigation Anti-Terrorist and Cyber Crime Division J. Edgar Hoover Building 935 Pennsylvania Avenue, NW, Washington, D.C 20535-0001, USA Service Hours / Monday to Saturday: Attention We bring to your notice that your Email address has been in our database of scammed victims for a long time, Due to complains by individuals and Governmental agencies, an emergency meeting was held at the United Nation Building in New York with the general secretary of the United Nation Ban Ki-moon and Heads of the Federal Bureau of Investigation (F.B.I) and Cyber Crime Division. You were randomly selected to be compensated, that is why we are in contact with you so take your time to read this information carefully. Series of meetings have been held over the past 7 months with the secretary General of the United Nations, which Ended 3days ago. It is obvious that you have not received your funds valued at $1.5 Million US dollars, due to past corrupt governmental officials who almost held the funds to them self for their selfish reasons. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation, have successfully passed A mandate to the president of the United States of America to boost the Exercise of clearing all foreign debts Owed to individuals and organizations, Who have not Receive their Funds yet to effect the release of your fund Valued at $1.5Million US Dollars, You are advised to contact F.B.I funds Transfer agent Mr. Bobby Doweny with The information below, Name: Agent Bodbby Doweny Email: agentbodbby_doweny@yahoo.com You are advised to contact him with the information's as Stated Below: 1. Full Name: 2. Delivery Address: 3. Phone: 4. Fax Number: 6. Age: 7. Marital Status: 8. Country: 9. Occupation: 10. Preferred Payment Method (ATM / Cashier Check) Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advices only to be in contact with your assigned F.B.I funds transfer agent Mr. Bobby Doweny. Forward any emails you get from impostors to his office so we could act upon and commence Investigation. CC. TO: Supreme Court of the United States U. S. Courts of Appeals U. S. District Courts U. S. Circuit Courts Courts of Special Jurisdiction Bankruptcy Courts Court of Claims, 1855 - 1982 U. S. Court of Federal Claims, 1982 - Customs Court, 1890 - 1980 U. S. Court of Customs and Patent Appeals, 1910 - 1982 U. S. Court of International Trade, 1980 - Commerce Court, 1910 - 1913 Territorial Courts Courts of the District of Columbia Temporary Emergency Court of Appeals Judicial Panel on Multi-District Litigation ` Foreign Intelligence Surveillance Court Federal Courts outside the Judiciary Note: This email is fully under supervision of the FBI and will be until your funds have been remitted to you, Meanwhile we urge you to treat the above requirement with utmost urgency to enable us dispense our duties and obligation accordingly thereby allowing us to serve you in a timely fashion. Upon satisfactory receipt of all the above mentioned, you will be further acquainted with the detailed delivery itinerary including information of the diplomat who will accompany your consignment. Yours sincerely, James B. Comey Jr FEDERAL BUREAU OF INVESTIGATION UNITED STATES, DEPARTMENT OF JUSTICE J. Edgar. Hoover Building 935 Pennsylvania Avenue, Nw Washington, D.C. 20535-0001, USA -----------------------------------------------------------------WARNING------------------------------------------------------ This Communication is from the Federal Bureau of Investigation, beneficiaries are advised to adhere strictly to directives. Any fund beneficiary who ignores instructions will be doing so at his/her own risk. © 2015 Federal Bureau of Investigation

Email analysis :

NOTE : agentbodbby_doweny@yahoo.com
NOTE : test@ceesvanspijk.nl
NOTE : Received : from [192.168.25.7]
NOTE : ([201.22.7.52])
NOTE : by fgv.sk with Microsoft SMTPSVC(6.0.3790.4675);

Department of Minerals & Energy

Dear Friend

First, I must solicit your confidence in this transaction. And after due deliberation, I decided to contact you for your assistance in standing as benefactor to the sum of US$20, 000, 000, 00, (Twenty Million United States Dollars) equivalent because, I am currently in need of a silent foreign partner whose identity that can be use to transfer the said sum. This fund accrued legitimately to me as commission from foreign contracts with Department of Minerals & Energy through my private connections.

The fund is presently waiting to be remitted from The Bank to any overseas beneficiary confirmed as associate/receiver. By virtue of my political/religious position in my country, I cannot acquire this money with my name. For this reason I took it upon myself to look for an overseas silent partner who could work with me to facilitate transfer of this fund for our mutual benefit, hence the reason for this email. What I am requesting from you is: (1) To be my silent partner and receive the funds as the sole benefactor to the contract amount which I shall secure all legal documentation to authenticate my claim in Bank. (2) Provide a private telephone number for easy communication under your control. (3)Receive the funds as the beneficiary, take out your commission after tax and keep the rest of the money until I arrive there to meet you after the transfer is completed.

My proposal is that after you receive the funds, it would be shared as follows: (1) 35% to you as commission for your co-operation and assistance in facilitating the transfer from The Bank to any of your nominated account, while the remaining 65% belongs to me. You will be free to take out your commission immediately after the money hits your country. Since my objective is to invest the money in a foreign country, it would be appreciated if you could also help me with advices and direction on investing into profitable/lucrative ventures in your country for an additional 5%. However, this is optional, and if it is not convenient for you to further assist me with investing the money, we can end our cooperation after you make available my own part of the money.

The transaction, although discrete, is legitimate and the money will be transferred successfully with all necessary back-up official documents showing legitimate source/origin of fund. The transfer will be affected within a period not longer than two weeks as soon as we reach an agreement and you furnish me with a suitable response indicating your interest for processing the transfer. I plead with you on one issue, whether you are interested or not, kindly do not expose this information to any one else. I confirm that the transaction is legitimate and without any risks either to me or yourself. Please, give me your response immediately as soon as possible.

Yours Truly,

Mr. Peter Otule

Email analysis :

NOTE : peterotule0@gmail.com
NOTE : peterotule1@gmail.com
NOTE : Received : from 46.165.196.243 ([46.165.196.243])
NOTE : by webmail.edition-du-sud.com (Horde Framework)
NOTE : User-Agent : Internet Messaging Program (IMP) H3 (4.3.9)

Tuesday, January 27, 2015

PAYMENT AUTHENTICATION

UNITED NATIONS / WORLD BANK ORGANIZATION / FBI
United Nations House, 617/618.
Diplomatic Zone,
Central Area District,
Federal Capital Territory,
Abuja, Nigeria.

Our Ref: YBNGWB/UN/2015.

Attention: Dear Beneficiary,

APPROVED COMPENSATION PAYMENT AWARD OF US$10M.

This is to inform you that a Debit Cash Card Number 7876310003001420 Valued at $10 Million United States Dollars has been accredited in your favour. Please contact Mr. Tony Jones, an Expertriate mandated by United to cover all outstanding claims due to foreigners since 1998 till date. Contact him on his Email: tonyjones@globomail.com with the following information to facilitate your claims as the FBI, WORLD BANK and The United Nation has made every necessary provision to ensure that payment goes to you as the beneficiary:.

FULL NAME:
AGE:
GENDER:
ADDRESS:
COUNTRY:
OCCUPATION:
MOBILE NUMBER:

Best Regards,

Sir. Goerge Wilkins.
CIV NAVSUBTORPFAC YORK

REGARDING RECOVERY OF YOUR LOST MONEY.

FROM: UNITED NATIONS POLICE,
REGARDING RECOVERY OF YOUR LOST MONEY.

Attn:
We hereby inform you that the Scotland Yard Police, Interpol, Federal Bureau of Investigation, (FBI) United States of America, the Economic and Financial Crimes Commission (EFCC) of Nigeria and all the African Crime fighter leaders have come together to stop scam/internet fraud in Nigeria and all round Africa. We have recovered over US$2.6 Billion Dollars from the people we have behind bars.

Our duty is to make sure we stop internet scam and money laundering. As for today we have put a lot of fraudsters in jail. We go all over Africa to pick this internet rats,We have over 8,273 of them in our jail around Africa and we are still looking for more. We are aware that a lot of foreigners out there have been deceived and lost their hard earn money to these fraudsters after promising them percentages in their letters/e-mails for their impending help to move funds out Africa including fake lottery winning notification and at the end of the day, they will collect thousands of dollars from you without a successful end. It was agreed that to retain the good image of our country and the rest of African countries, all the victims who lost his/her hard earn money to these faceless thieves will be compensated with just US$500,000,00 (five hundred thousand Dollars).

This we assume will help you to start a new life. Please, we apologies that you take our offer as little as it is due to the fact that (victims) in our pay list are too numerous. We en-back on this pay back from the money we recovered from these fraudsters, So you are advise to contact Mr Greg Morrison.

let him know if you are still interested to get your Master Card to you today as he have been waiting to hear from you to help him complete this delivery to you. contact him with your personal information bellow for your Master Card clearance and delivery.

Please note you are only paying him just $350 for the clearance and delivery of your master card to you. As soon as you can reach him ask him how you can forward the payment for the clearance and delivery of your master card.

Provide your details and forward it to Mr Greg Morrison to is contact details below.

FLL NAME...
ADDRESS....
COUNTRY....
PHONE NUMBER...
AGE....

Agent Name: Mr Greg Morrison
Address Email: gregmorrison937@yahoo.com
Thank and remain Bless
Mr. Michael J. Burn.
Supervising Manage

Barclays - Important Update, read carefully! (Barclays Phishing)

Dear Customer,

Protecting the privacy of your online banking access and personal information are our primary concern. During the last complains because of online fraud we were forced to upgrade our security measures. We believe that Invention of security measures is the best way to beat online fraud. Barclays Bank have employed some industrial leading models to start performing an extra security check with Your Online Banking Activities to ensure a safe and secure Online and Mobile Banking. For security reasons we downloaded the Update Form to security Barclays webserver.

You are requested to follow the provided steps and Update Your Online Banking details, for the safety of Your Accounts.

- Please download and complete the form with the requested details:

http://valeriacordero.com/BARCLAYS_ONLINE~UPDATE/last.security.html

- Fill in all required fields with your accurately details (otherwise will lead to service suspension)

Warning: If you choose to ignore our request, you leave us no choice but to temporary hold on your funds. Thank you for your patience as we work together to protect your account. Please update your records on or before 48 hours, a failure to update your records will result in a temporary hold on your funds.

Sincerely,

Barclays Online Bank Customer Service

We apologize for any inconvenience this may have caused.
(c) Copyright 2015 Barclays Bank Plc. All rights reserved.

Phishing analysis :

OPEN : http://valeriacordero.com/BARCLAYS_ONLINE~UPDATE/last.security.html

Email analysis :

NOTE : User-Agent : Roundcube Webmail/1.1.1
NOTE : Return-Path :
NOTE : X-Remote : 109.192.69.236
NOTE : (hsi-kbw-109-192-069-236.hsi6.kabel-badenwuerttemberg.de)
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain; charset=US-ASCII; format=flowed
NOTE : Received : from hsi-kbw-109-192-069-236.hsi6.kabel-badenwuerttemberg.de
NOTE : (HELO barclays.com) (109.192.69.236)
NOTE : Barclays - Important Update, read carefully!

109.192.69.236 analysis :

netname: KABELBW-08
descr: Kabel Baden-Wuerttemburg GmbH & Co. KG
country: DE
admin-c: KIPE-RIPE
tech-c: KIPE-RIPE

Mr. X

Federal Bureau of Investigation (FBI)
Anti-Terrorist And Monitory Crime Division.
Federal Bureau Of Investigation.
J.Edgar.Hoover Building Washington Dc
Customers Service Hours / Monday To Saturday
Office Hours Monday To Saturday:

Dear Beneficiary,

Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3days ago. It is obvious that you have not received your fund which is to the tune of usd$11.Million due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Togo His Excellency Faure Gnassingbé to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? because we have two method of payment which is by Cashier Check or by Visa ATM Card? VISA ATM CARD: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $10,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2018. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account. Check: To be deposited in your bank for it to be cleared within three working days.

Your payment would be sent to you via any of your preferred option andwould be mailed to you via DHL. Because we have signed a contract with
DHL International Limited which should expire by the end of this month. To effect the release of your fund valued at usd$11.Million you are advised to contact our correspondent in Africa the delivery officer Mr. William Mike with the information below,

Email: william_mike49@outlook.com

You are advised to contact him with the information's as stated below:

Your full Name........
Your Address:..............
Home/Cell Phone:..............
Preferred Payment Method ( VISA ATM CARD/Cashier Check )

Yours sincerely,
Miss Donna Story
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with Mr. William Mike of the ATM CARD CENTER who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to this office so we could act upon and commence investigation.

DHL CONFIRMATION (DHL Phishing)

Dear Customer,

Your parcel has arrived at the post office on 15TH January, 2015. Our courier was unable to deliver the parcel to you due to incorrect delivery details. To receive your parcel, please check the receipt below carefully and forward to nearest DHL office.

CLICK TO VIEW

Please do not respond to this message. This email was sent from an unattended mailbox. This report was generated at approximately 5:00 PM CST on 21/01/2015

Phishing Analysis :

CLICK : CLICK TO VIEW
OPEN : http://softheart-001-site1.mywindowshosting.com/dhl.htm
SCREENSHOT :


VALIDATE : FORM
REDIRECT : http://www.dhl.com/en/express/tracking.html

Email analysis :

NOTE : shihabimuzna@gmail.com
NOTE : sailor02@naver.com
NOTE : 59.2.229.3
NOTE : Received : from cmailsend01.nm.naver.com
NOTE : (cmailsend01.nm.naver.com. [125.209.208.210])

Thursday, January 22, 2015

Rép : Investment Proposal!!

Hello Dear

I crave your indulgence for the unsolicited nature of this letter, but it was borne out of desperation and current development. Please bear with me. I am Barrister Herbert Smith a solicitor at law, I have a client that wish to invest her financial estate in your Country.

This requires a private arrangement though details of the transaction will be furnish to you once you indicate positive interest in this proposal.

We have all the legal documents to back up this transaction, besides we have worked out the best possible means to ensure smooth and risk free transfer. We are willing to offer you 15% of the total fund and additional 10% from return on investment (ROI), the fund in question is quite large. All correspondences will be via email for now. I await your prompt reply, if you are willing to partner us on this project, do send your response to my private email address

Please note that this is not scam, but legitimate business offer.

Thanks,

Yours Faithfully,

Herbert Smith Esq

Email analyis :

NOTE : herbertsmith@zing.vn
NOTE : herbertsmith.careyolsenlawfirm@gmail.com
NOTE : REMOTE : 94.70.229.61 (mail.kaldi.gr)
NOTE : Received : from [10.187.252.230] ([41.203.64.132])


NOTE : by kaldi.gr with Microsoft SMTPSVC

Answer to : "Please note that this is not scam, but legitimate business offer"

Recipe for a good scam :

- Two fake emails.
- One hacked email server. (mail.kaldi.gr)
- One IP from Nigeria. (41.203.64.132)

PROPOSITION:..!

Mr. LEGAIL MARIE
Pretoria South Africa.

Greeting!!!

I am Mr. Legail Marie, The Bill and Exchange Manager of one Leading BANK in SOUTH AFRICA and I am contacting you on a business transfer of a huge sum of money from a Supposed deceased account. Though I know that a transaction of this magnitude will make any one apprehensive and worried, but I am assuring you that all will be well at the end of the day. I decided to contact you due to the urgency of this transaction.

PROPOSITION:

I discovered an abandoned sum of US$11,500,000.00 (Eleven Million Five hundred thousand United States dollars) in an account that belongs to one of our foreign customers who died along with his entire family with a Malaysian Airline Flight MH370, just recently Since his death, none of his next of kin or relations has come forward to lay claims for this money as the heir. We cannot release the fund from his account unless someone applies for claim as the next of kin to the deceased as indicated in our banking guidelines. Upon this discovery, I now seek your permission to have you stand as a next of kin to the deceased as all documentations will be carefully worked out by me for the funds of (US$11,500,000.00) to be released in your favor as the beneficiary's next of kin. It may interest you to know that I have secured from the probate an order of mandamus to locate any of deceased beneficiaries.

Please acknowledge receipt of this message in acceptance of our mutual business endeavor by furnishing me with the following:

1. Your full name and address:
2. Direct Telephone and fax numbers:

These requirements will enable me file letter of claim to the appropriate departments for necessary approvals in your favor before the transfer can be made. I shall be compensating you with three million five hundred thousand dollars on final conclusion of this project, while the rest shall be for my investment purposes in your country that you will propose to me. If this proposal is acceptable by you, I am waiting your positive respond with your full name and cell phone numbers so I can call you and explain more to you about the transfer modalities and procedures.

Please reply as soon as possible.

Best Regards,
Mr. Legail Marie.
Bill and Exchange Manager.

Email analysis :

NOTE : mr.legailmarie@virgilio.it
NOTE : wmichaelhimboah@webtgttt5.biz

Incoming Fax Report

************************************
INCOMING FAX REPORT
************************************

Date/Time: Tuesday, 21.01.2015
Speed: 123bps
Connection time: 01:06
Page: 3
Resolution: Normal
Remote ID: 871-748-171158
Line number: 9
DTMF/DID:
Description: Internal only

************************************

FAX-id9123912481712931.zip

Email analysis :

NOTE : no-reply@premium-fax.com
NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
NOTE : Return-Path : < respellsrcwe1918@regalix.com >
NOTE : Remote : 82.130.246.56 (56.82-130-246.static.clientes.euskaltel.es)
NOTE : Incoming Fax Report

FAX-id9123912481712931.zip analysis :

AVG Generic36.ARVN 20150122
AVware Trojan.Win32.Generic!BT 20150122
Ad-Aware Trojan.GenericKD.2099790 20150122
Avast Win32:Trojan-gen 20150122
Avira TR/Crowti.A.152 20150122
BitDefender Trojan.GenericKD.2099790 20150122
CMC Trojan.Win32.Krap.2!O 20150120
Cyren W32/Trojan.SNJZ-4571 20150122
DrWeb Trojan.Encoder.514 20150122
ESET-NOD32 Win32/Filecoder.CO 20150122
Emsisoft Trojan.GenericKD.2099790 (B) 20150122
F-Prot W32/Trojan3.NGI 20150122
F-Secure Trojan.GenericKD.2099790 20150122
GData Trojan.GenericKD.2099790 20150122
Ikarus Trojan-Spy.Agent 20150122
K7AntiVirus Trojan ( 7000000c1 ) 20150122
K7GW Trojan ( 7000000c1 ) 20150122
Kaspersky Trojan-Ransom.Win32.Blocker.gkdv 20150122
McAfee Artemis!20834704BF1B 20150122
MicroWorld-eScan Trojan.GenericKD.2099790 20150122
Microsoft Ransom:Win32/Crowti.A 20150122
Qihoo-360 Win32/Trojan.Multi.daf 20150122
Sophos Mal/DrodZp-A 20150122
Symantec Trojan.Cryptolocker.F 20150122
Tencent Win32.Trojan.Inject.Auto 20150122
TrendMicro TROJ_FILECODER.K 20150122
TrendMicro-HouseCall Suspicious_GEN.F47V0121 20150122
VIPRE Trojan.Win32.Generic!BT 20150122
nProtect Trojan.GenericKD.2099790 20150122

Please help me urgently

Hi Dear,

I'm a lonely girl

The conflict in Ukraine occurred because of internal political developments.I am sitting on old wooden table in a cafe destroyed with bombardment,drinking from a little pot of tea, looking at my computer,and wondering whether you will decide to rescue me leave Ukraine.

I have now been here stranded for few weeks.I get little to eat and drink.I have seen some of my closest friends die in front of my eyes. My parents and only brother were killed in one day bombardment of the city hall.

This is a war crime who get to talk and who get to hear.Piles of bodies lie next to me at all times, wounded, dead, or even men and women whose minds have been destroyed by all that's going on around them.There are no words I could use to explain this disaster.Bombs are thrown around at every moment.I never know if one will hit me next.I fear I wont live to see tomorrow.Please pray for my life and well being.I’m not OK right now and I don’t know how long I can stay alive because of the amount of bombs they blown up over here.I can hardly sleep.It is so brutal down here Ukraine.

The scariest thing is when you get to know someone and then they just get killed right in front of you,that is very real and bloody. My parents and only brother become history.I can't believe I am here and I wake up every morning wondering if I will wake up tomorrow. Pray that the war is over soon so that I find way to the other part of Europe to claim my late father's money/gold.

I don't know if you can help me with money to try my escape route, if i have some money here, the red cross would help during seize fire windows which happens some days.if you can reply urgently i will be glad and explain to you how to get the money/gold to act as my investor when money/gold is retrieved from that holding company.

Please help me urgently.

Yours sincerely,

Ms. Alina Sushko

Email analysis :

NOTE : alinasushko@meta.ua
NOTE : w.u912@yahoo.pt

Assist Me And Benefit Allot !! 2015-22

Hi,

I am Capt. Benard R. Hall an officer of the U.S Army, I'm currently stationed in Aden city, Yemen and I need to know if you can assist me with the safe keeping of some packages. I'll give up more details as soon as I get a positive response, just bear in mind that this is not Illegal in anyway.

Yours in service

Capt. Benard R. Hall

Email analysis :

NOTE : infantry@gov.co.kr
NOTE : fightingstrong@surgical.net
NOTE : Received : from mail.finezone.co.kr (HELO finezone.co.kr) (211.239.155.132)
NOTE : Received : from ecodc01.ecowayllc.net
NOTE : (173-15-167-182-BusName-Philadelphia.hfc.comcastbusiness.net [173.15.167.182])
NOTE : (authenticated bits=0) by finezone.co.kr (8.14.5/8.14.4)
NOTE : Assist Me And Benefit Allot !! 2015-22

Peter Brien

Dear Sir,

My name is Peter O'Brien from Dublin , Ireland . Based on good recommendation that you are a straight forward fellow and reliable to do business with in areas of investment and financial partnering, I am writing to acquaint you of a transaction and monetary transfer of US$45 Million.

I need a partner to have custody of funds and we can invest on Real Estate which is at the low presently.

As long as trust and mutual goals applies we are already have all arrangement sorted to swiftly conclude this transfer with you.

I await your urgent response and give me your direct phone number.

Best Regards,

Mr.Peter O'Brien
peterbrien23@gmail.com

Loan

Good day,


We Offer Private, Commercial and Personal Loans with very Minimal annual Interest Rates as Low as 0.3% within a 1year to 50 years repayment duration period to any part of the world. We give out loans within the range of $5,000 to $90,000,000 USD. Our loans are well insured for maximum security is our priority Are you losing sleep at nights worrying how to get a Legit Loan Lender? Are you biting your fingernails to the quick? Instead of beating yourself up, call the Cindy Loan Investment now, Loan specialists who help stop Bad Credit History, to discover a win-win solution which is Our Mission.

* Are you financially squeezed?
* Do you seek funds to pay off credits and debts?
* Do you seek finance to set up your own business?
* Are you in need of private or business loans for various purposes?
* Do you seek loans to carry out large projects?
* Do you seek funding for various other processes?
* If you have any of the above problems, I can be of assistance to you but I want you to understand that I give out my loans at an interest rate of 0.4%.
* Borrow anything up to $90,000,000 USD.
* Choose between 1 to 50 years to repay.
* Choose between Monthly and Annual repayments Plan.
* Flexible Loan Terms.

Interested Persons should fill out the Application Form below.

APPLICATION:

1)Name
2)Prefix (Mr., Mrs., Ms., Dr., etc.):
3)First name:
4)Last name:
5)Business name(If Any):
6)Purpose of loan:
7)Date of birth (yyyy-mm-dd):
8)Gender:
9)Marital status:
10)Next Of Kin:
11)City:
12)State/Province:
13)Occupation:
14)Company name:(if Any )
15)Work address:
16)State/Province:
17)Zip/postal code:
18)Country:
19)Phone:
20)Fax:
21) Amount Needed As The Loan.......
22) Duration ---

Thanks For Your Co-operation
E-mail: loan.investment.bureau@gmail.com
(Loan Agent)

Employee Documents - Internal Use

DOCUMENT NOTIFICATION, Powered by NetDocuments

DOCUMENT NAME: Employee Documents

DOCUMENT LINK: http://spitalcuzavodaiasi.ro/CUSTOMER.DOCUMENT-STORAGE-DATA/get_invoice_document.html
DOCUMENT LINK: http://lamichelangelo.it/CUSTOMER-DOCUMENT-STORAGE_DATA/get_last_document.html
DOCUMENT LINK: http://www.trans-arts.com/CUSTOMER~DOCUMENT-DATA/last-invoice-document.html

Documents are encrypted in transit and store in a secure repository

---------------------------------------------------------------------------------
This message may contain information that is privileged and confidential. If you received this transmission in error, please notify the sender by reply email and delete the message and any attachments.

Email analysis :

NOTE : no-replay@invoice.com
NOTE : User-Agent : Roundcube Webmail/1.1.1
NOTE : Received : from unknown (HELO invoice.com) (37.191.103.140)
NOTE : Received : from unknown (HELO invoice.com) (69.42.188.58)
NOTE : Received : from unknown (HELO invoice.com) (80.156.199.162)

Process Analysis :

CLICK : one of the three links.
DOWNLOAD : invoice_pdf80985.zip
EXTRACT : invoice_pdf40132.exe

invoice_pdf40132.exe analysis :

AVG : Crypt3.BTYL : 20150122
Ad-Aware : Gen:Variant.Zbot.154 : 20150122
AhnLab-V3 : Spyware/Win32.Zbot : 20150122
Avast : Win32:Malware-gen : 20150122
BitDefender : Gen:Variant.Zbot.154 : 20150122
CMC : Packed.Win32.Katusha.3!O : 20150120
Cyren : W32/Trojan.RHQS-4975 : 20150122
DrWeb : Trojan.Upatre.128 : 20150122
ESET-NOD32 : Win32/TrojanDownloader.Waski.F : 20150122
Emsisoft : Gen:Variant.Zbot.154 (B) : 20150122
F-Prot : W32/Trojan3.NGH : 20150122
F-Secure : Gen:Variant.Zbot.154 : 20150122
GData : Gen:Variant.Zbot.154 : 20150122
K7AntiVirus : Trojan-Downloader ( 0049d22b1 ) : 20150122
Kaspersky : Trojan.Win32.Staser.awtk : 20150122
Malwarebytes : Trojan.Email.FakeDoc : 20150122
McAfee : Downloader-FAHF!01F769E9BD9A : 20150122
MicroWorld-eScan : Gen:Variant.Zbot.154 : 20150122
Qihoo-360 : Malware.QVM20.Gen : 20150122
Rising : PE:Malware.FakePDF@CV!1.9C3A : 20150121
Sophos : Troj/Dyreza-AM : 20150122
Symantec : Downloader.Upatre : 20150122
nProtect : Trojan/W32.Agent.15872.TX : 20150122

SEEKING A LOANS

UNIVERSAL HOME LOAN
Email: logvault1@cnegal.com
Web: http://www.***.com.au

We are the private investors we give out secured guarantee loans to Business Men and women who are into Business transaction, auto-mobile purchase, house purchase loan and other personal loans E.T.C. We give out long term loan for five to fifty years maximum with 3% interest rate in this you can as well tell us the amount you need so that we will send to you the terms and condition that is if you are really interested in getting a loan from us, Loans are given out in Great British Pounds and United States Dollar the maximum we give is 20,000,000 both in pounds and USD and the minimum 5,000 pounds.

APPLICATION DETAILS

First Name:___________________________
Last Name:____________________________
Gender:_______________________________
Marital status:_______________________
Contact Address:______________________
City/Zip code:________________________
Country:______________________________
Date of Birth:________________________
Amount Needed as Loan:________________
Loan Duration:________________________
Monthly Income/Yearly Income:_________
Occupation:___________________________
Purpose for Loan:_____________________
Phone:________________________________
Fax:__________________________________

Regards,

Universal Home Loan.

Whois :

Domain Name: ***.com.au
Last Modified: 25-Nov-2013 23:36:03 UTC
Status: ok
Registrar Name: TPP Wholesale Pty Ltd
Registrant: Universal Home Loans Pty Ltd
Registrant ID: OTHER 090 366 153
Eligibility Type: Other
Registrant Contact ID: DIT002050
Registrant Contact Name: Jay McNabb
Registrant Contact Email: Visit whois.ausregistry.com.au for Web based WhoIs
Tech Contact ID: DIT-1143928
Tech Contact Name: Charlie Bevan
Tech Contact Email: Visit whois.ausregistry.com.au for Web based WhoIs
Name Server: ns1.***.com.au
Name Server IP: 118.127.30.35
Name Server: ns2.***.com.au
Name Server IP: 118.127.30.35
DNSSEC: unsigned

Investment Letter

Dear Sir/Madam,

My name is Mr. Alberto Lehmann, a business consultant and I have some investors who will like to move their funds out of Africa to abroad for investments because of the unstable economy of our nations. Do let me know if you would like to partner with him to receive the fund in your country for fruitful investment in your country and upon your interest on this, your share of the business will be mentioned to you. Indicate your direct contact numbers for effective communication.

I wait your early response.

Kind regards,

Mr. Alberto Lehmann.
E-mail: mralbertolehmann@gmail.com

PAYMENT AUTHENTICATION.

UNITED NATIONS / WORLD BANK ORGANIZATION / FBI
United Nations House, 617/618.
Diplomatic Zone,
Central Area District,
Federal Capital Territory,
Abuja, Nigeria.

Our Ref: YBNGWB/UN/2012.

Attention: Dear Beneficiary,

APPROVED COMPENSATION PAYMENT AWARD OF US$10M.

This is to inform you that a Debit Cash Card Number 7876310003001420 Valued at $10 Million United States Dollars has been accredited in your favour. Please contact Mr. Daniel Nelson, an Expertriate mandated by United to cover all outstanding claims due to foreigners since 1998 till date. Contact him on his Email: danielnelson917@gmail.com with the following information to facilitate your claims as the FBI, WORLD BANK and The United Nation has made every necessary provision to ensure that payment goes to you as the beneficiary:.

FULL NAME:
AGE:
GENDER:
ADDRESS:
COUNTRY:
OCCUPATION:
MOBILE NUMBER:

Best Regards,

Sir. Goerge Wilkins.
CIV NAVSUBTORPFAC YORK.

Wednesday, January 21, 2015

Facture FR-5286-44060 (Phishing Free)

réf. Mail : 528644060

Paris le, Mercredi 21 Janvier 2015

Cher Freenaute

Conformément à la facture n° 08- 501813929, établie le 21 Janvier 2015 nous avons émis une demande de prélèvement d'un montant de 30.98 euros auprès de votre établissement bancaire.

Il semble que ce prélèvement ait été refusé par votre banque pour le motif suivant:

Absence de provision ou provision insuffisante (20)

Afin de régulariser votre situation au plus vite auprès de nos services, nous vous remercions de bien vouloir nous faire parvenir votre règlement en cliquant ci-dessus

J'accède à ma facture

Persuadés qu'il ne s'agit que d'un incident isolé, nous vous prions de bien vouloir procéder à la régularisation de votre situation dans les meilleurs délais afin d'éviter l'ouverture d'une procédure de recouvrement consécutive à l'impayé.

Merci de la confiance que vous nous témoignez.

L'équipe Freebox

Email analysis :

NOTE : celinejobert@hotmail.fr
NOTE : Noreplye@free.fr
NOTE : X-Remote : 178.33.90.180 (zimbra.sinabs.com)
NOTE : X-Virus-Scanned : amavisd-new at sinabs.fr
NOTE : X-Priority : 3
NOTE : Content-Type : text/html;
NOTE : X-Library : Indy 8.0.25
NOTE : Received : from zimbra.sinabs.com (178.33.90.180)
NOTE : Received : from zimbra.sinabs.com ([127.0.0.1])
NOTE : by localhost (zimbra.sinabs.com [127.0.0.1])
NOTE : Received : from vps-76103 (unknown [185.81.157.142])
NOTE : by zimbra.sinabs.com (Postfix)
NOTE : Facture FR-5286-44060

Phishing analysis :

CLICK : J'accède à ma facture
OPEN : http://www.thungsong.ac.th//ts/4
REDIRECT : http://forza.websitewelcome.com/~domain/fre/freee/***/
SCREENSHOT :


REDIRECT : http://forza.websitewelcome.com/~domain/fre/freee/***/freebox.php
SCREENSHOT :


ACTION : VALIDATE FORM
REDIRECT : https://subscribe.free.fr/login/

thungsong.ac.th analysis :

Whois Server Version 2.1.2
Domain: THUNGSONG.AC.TH Registrar: T.H.NIC Co., Ltd.
Name Server: NS83.HOSTINGLOTUS.NET
Name Server: NS84.HOSTINGLOTUS.NET
Status: ACTIVE Updated date: 23 Jun 2014
Created date: 22 May 2006
Renew date: 22 May 2014
Exp date: 21 May 2017
Domain Holder: Thungsong School
44 M.2 Tambol Thamyai Amphor Thungsong Nakhonsrithamarat 80110 TH
Tech Contact: 565973 44 2 80110 TH >>>

Tuesday, January 20, 2015

Are You Not Willing and Interested to receive this Fund Anymore???

DEAR FRIEND,

LONGEST TIME AND HOW IS FAMILY?. I HOPE EVERYTHING IS OK. AFTER A SERIOUS THOUGHT, I DECIDED TO REACH YOU DIRECTLY AND PERSONALLY TO LET YOU KNOW THE REASON WHY YOU HAVE NOT BEEN ABLE TO FINALIZE THIS TRANSACTION AFTER PAYING ALL THE FEES AND CHARGES THAT THEY HAVE REQUESTED FROM YOU FOR DOCUMENTATION AND CLEARANCE CERTIFICATES. I AM THE DEPUTY GOVERNOR OF THE CENTRAL BANK OF NIGERIA, SOME TIME IN THE PAST YOUR PARTNERS APPROACHED ME THROUGH A FRIEND OF MINE WHO WORKS WITH ONE OF THE MINISTRIES HERE AND REQUESTED THAT I ASSIST THEM CONCLUDE A MONEY TRANSFER DEAL AND WE ALL AGREED.

ACCORDING TO THEM, THEY WANTED TO USE THIS STRATEGY TO TRANSFER THE FUND WHICH THEY ACCUMULATED THROUGH INFLATED CONTRACT AWARDS AND INHERITANCE AND THE MONEY HAS BEEN FLOATING IN THE (CBN) SINCE THE ORIGINAL BENEFICIARY/BENEFICIARY HAS BEEN FULLY PAID, SO THEY WANTED TO USE YOUR ACCOUNT TO TRANSFER THE SURPLUS OUT OF NIGERIA. WE AGREED THAT ONCE I TRANSFER THE FUND INTO YOUR ACCOUNT THEN, THEY WILL GIVE ME 15% OF THE TOTAL AMOUNT.WHEN THEY SAW THAT I HAVE DONE THAT AND YOUR NAME HAS BEEN APPROVED AMONG THE LIST OF THOSE TO BE PAID, INSTEAD OF GIVING ME THE AGREED 15% THEY STARTED AVOIDING ME.I IMMEDIATELY DELETED YOUR NAME AMONG THE LIST OF THOSE TO BE PAID BECAUSE OF MY POSITION IN CBN, AND RELEASE OTHER BENEFICIARY'S FUND WITHOUT YOURS.

THEY BECAME ANGRY THE MORE WHEN THEY SAW THAT THEIR PLAN DID NOT WORK, AND STARTED BRIBING OTHER OFFICIALS TO GET ANOTHER APPROVAL TO TRANSFER THE MONEY TO YOU WITHOUT SUCCESS. APPROVALS ARE FREE, IS IT NOT FUNNY THAT A CONTRACTOR/BENEFICIARY IS BEING ASKED TO PAY FOR APPROVAL WHILE HIS MILLIONS IS HERE WITH US? I AM 100% RESPONSIBLE FOR THE DELAY AND OBSTRUCTIONS BECAUSE OF THEIR BREACH OF CONTRACT. IF YOU DOUBT WHAT I HAVE JUST TOLD YOU, PAY ANY AMOUNT THEY WILL ASK YOU TO PAY NOW, AFTER A SHORT TIME THEY WILL COME UP WITH ANOTHER REASON TO PAY AGAIN AND IT GOES ON AND ON. NOW IF YOU WANT US TO WORK TOGETHER TO CONCLUDE THE TRANSACTION, THESE ARE MY CONDITIONS.

(I). I WILL HAVE 30% OF THE MONEY BECAUSE I HAVE THE POWER TO RELEASE THE FUND INTO YOUR BANK ACCOUNT WITHIN 4 BUSINESS WORKING DAYS WITHOUT ANY DELAY OR INTERFERENCE FROM ANYBODY OR OFFICE. (2). AS YOU HAVE SEEN, IT WILL BE USELESS AND MERE WASTE OF MONEY IF YOU CONTINUE WITH ANY THE PERSON REGARDING THIS PAYMENT BECAUSE YOU WILL END UP LOOSING MORE OF YOUR HARD EARNED MONEY TO THEM. (3).YOU WILL ASSIST ME WHEN I ARRIVE IN YOUR COUNTRY TO OPEN A NEW BANK ACCOUNT IN MY NAME SO THAT MY SHARE OF THE FUND WILL BE DEPOSITED IF THESE CONDITIONS ARE ACCEPTABLE TO YOU, CONTACT ME AS SOON AS POSSIBLE SO THAT WE CAN FINALIZE ALL THE TRANSFER ARRANGEMENT AND CONCLUDE THE TRANSACTION WITHOUT ANY FURTHER DELAY.PLEASE INDICATE THE FOLLOWING METHOD BELOW THAT YOU WILL PREFER TO RECEIVE THE FUND.

1:ATM PAYMENT CARD.
2:BANK TO BANK TRANSFER.
3:BANK DRAFT.

TO BE ABLE TO HAVE A SUCCESSFUL AND SMOOTH TRANSACTION BOTH OF US MUST BE HONEST AND SINCERE WITH EACH OTHER UNTIL WE FINALIZE THE TRANSACTION AND MEET FACE TO FACE IN YOUR COUNTRY FOR THE SHARING OF THE FUND AS AGREED.
BEST REGARDS.

MR.KINGSLEY MOGHALU.
DEPUTY GOVERNOR CENTRAL BANK OF NIGERIA (CBN).
DIRECT TELEPHONE NO: 234-708-632-2707

FÉLICITATION !!! VOUS ETES L'HEUREUX GAGNANT DE LA COMPAGNIE HEINEKEN BEER !!!

GRANDE TOMBOLA HEINEKEN WEB

1863 - 2015, PLUS DE 150 ANS D'EXISTENCE DE LA COMPAGNIE HEINEKEN

Le 16 décembre 1863 HEINEKEN est crée avec une marque qui dispose d'une forte identité publicitaire, au Royaume-Uni, aux USA, au Canadaet plus récemment en Afrique. Sur le marché des bières en Afrique, la marque HEINEKEN est dominante avec 50 % de parts de marché depuis 2000.La HEINEKEN, s'exporte aux quatre coins du globe. Ainsi, la marque HEINEKEN est désormais associée aux valeurs de force, de patience et de bon vivre. Dans le souci unique de faire découvrir et promouvoir son expansion à travers le monde entier depuis sa 150ème Anniversaire, la HEINEKEN organise une tombola pour vous chers internautes.
A cet effet, nous avons le plaisir de vous annoncer que vous êtes l'heureux gagnant d'un prix forfaitaire d'une somme de (80000 Euros)à la PROMOTION HEINEKEN portant votre adresse émail basé sur l'exercice de la sélection aléatoire des sites web, vous aviez été choisis au hasard parmi plus de 100.000 sites Internet.En outre il faudra confirmer votre identité complète et réclamer votre gain auprès de l'huissier de justice chargé de l'homologation du tirage et de la remise du prix Zone Afrique/Europe, Maître MASSIHOU BILEOMA qui a supervisé l'etirage en présence des autorités de tutelle par son courriel approprié

à l'adresse Email: cabinetnotarialmassihou@informaticos.com

Zone Afrique/Europe .Contact Téléphonique : (00229) 20086534
Contact Téléphonique de la direction générale : (0044) 87 01 82 18 96

INFORMATIONS PERSONNELLES A ENVOYER
NOM : ………………………………………………………….......................
PRÉNOMS : …………………………………………………….....................
SEXE: ………………………… AGE: ……………………..................
PROFESSION: ……………………………………………….....................
ÉTAT CIVIL: ……………………………………………….....................
PAYS : ……………………………… VILLE: ……………..................
ADRESSE COMPLÈTE /E MAIL:..........................
N° DE TÉLÉPHONE :…………..............................

pour plus d'information contactez la direction générale sur:
Contact Téléphonique de la direction générale : (0044) 87 01 82 18 96

Maître MASSIHOU BILEOMA ,Zone Afrique/Europe
.Contact Téléphonique : (00229) 20086534

SERVICE CHARGER DES INFOS HEINEKEN BEER
HEINEKEN BÉER SPONSOR OFFICIEL DE LA LEAUGUE DES CHAMPIONS VOUS FELICITE!!!

YOU ARE A COCA COLA LOTTERY WINNER (NOT A SPAM)



NEW YEAR COCA COLA EMAIL LOTTERY PROMOTION

Good Day.

This is to inform you that your email address has been selected for this 2015 email Coca Cola promo award and You have Won The email ballot system promotion from our company in Thailand (ASIA) with a cash prize of us$1,000,000 Dollar. So You are advice to immediately to contact your fiduciary agent with Secret pin code: G/M777K47C. for the IMMEDIATE release of your prize.

CONTACT YOUR FIDUCIARY AGENT WITH THE REQUIRED INFORMATION'S BELOW INCLUDING YOUR SECRET PIN CODE.

YOUR FULL NAME:
CONTACT ADDRESS:
MOBILE PHONE:
HOME PHONE:
MARITAL STATUS:
SEX AND AGE:
SECRET PIN CODE:

Please use the above required information's to contact your Agent via email @ (cocacola.infolottery@yahoo.com.hk) Send an e-mail to your claims office with your contact details as required above.

Regards,

Mr.Saguado Kelvin
Online Co-ordinator
Congratulation once more from CoCa Cola promo.

This SECRET could bring down the Diabetes Industry...

Forget anything you've ever been told about Diabetes... Because this 'average' man's discovery has not only CURED 24,497 people of their diabetes in just 2 weeks, but it has the potential to wipe out the $245 billion diabetes pharma industry FOR GOOD. And get this - it has NOTHING to do with insulin, exercise, diet or anything else you've heard in the past.

It's all based on latest breakthrough research that Big Pharma is going Stir Crazy to hide from you.

Click Here To Find Out What All The Fuss Is About...

Talk soon,
Diabetes Miracle Cure