Bonsoir très cher (e)

Bonsoir très cher (e)

Je suis Mr André ROY, ancien militaire en retraite. Durant ma carrière de militaire, je reconnais devant le seigneur créateur du Ciel et de la terre d'avoir effectué des trafics illégaux dans le domaine du trafic de drogue et des armes. En ce moment-là, tous mes virements bancaires se faisaient sur mon compte bancaire dans un Pays de l'Afrique de l'Ouest. Je suis maintenant frère Archevêque Métropolitain et Primat de France de l'Église catholique.

Mais suite à mon état critique dû au cancer du poumon et dont je serai en phase terminale, il m'a été conseillé par l'un des frères de mon église après confession de faire une charité avec une grande partie de ce fonds dont je dispose dans cette banque à de différentes personnes dans presque tous les pays du monde afin que le seigneur pardonne mes péchés, puisque je ne saurai pas dépenser toute cette fortune en moins d'un an. J’ai obtenu votre mail par le logiciel contact Express 2016 le moteur de recherche des adresses mail pour que vous puissiez bénéficier gratuitement d'un montant de 800.000 € (Huit Cent mille euros). Au nom du seigneur créateur du ciel et de la terre, cette somme vous aidera à régler une bonne partie de vos problèmes financiers. Dites-vous que vous ne courrez aucun risque en acceptant cette donation de ma part, car mes fonds déposés dans cette banque sont en toute sécurité et sont enregistrés entend que fonds légaux avec tous les documents à l'appui grâce à mon Avocat de ce Pays. Alors si vous pensez rentrer en possession de ces fonds, veuillez bien contacter mon notaire pour faire la réclamation de ce don afin qu'il vous fasse suivre les procédures afin que le chèque de Banque soit établi à votre nom.

Nom du notaire : VIGNON ROBERT

E-mail du notaire : cabinetvignon@hotmail.com

Site Web : cabinetvignon.onlc.fr

Merci d'avance de votre compréhension

Mr André ROY

Email analysis :

NOTE : kaselionel28@hotmail.com
NOTE : Received : from blu004-omc4s13.hotmail.com (65.55.111.152)
NOTE : Received : from BLU179-W28 ([65.55.111.137]) by BLU004-OMC4S13.hotmail.com

Norply

Your Account Will Be Closed !

Dear Customer,

We have noticed that some data from your account information seems inaccurate or unverified. You have to check your information in order to continue using our service smoothly. We need a little bit more information about you to help confirm your identity. Now check the account informations that belongs to you !

Update My Informations

Email screenshot :

Email analysis :

NOTE : Norply@cp2.tarhely.pw
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : X-Get-Message-Sender-Via : cp2.tarhely.pw:
NOTE : authenticated_id: bunmegelozesbeke/primary_hostname/system user
NOTE : Return-Path : < bunmegelozesbeke@cp2.tarhely.pw >
NOTE : X-Authenticated-Sender : cp2.tarhely.pw: bunmegelozesbeke
NOTE : X-Php-Script : www.bunmegelozesbekesmegye.hu/mangusta/upload/img/php.php
NOTE : for 105.105.26.151

NOTE : Received : from tomtech.hu (tomtech.hu. [185.112.156.244])
NOTE : Received : from bunmegelozesbeke
NOTE : by cp2.tarhely.pw with local (Exim 4.87)
NOTE : (envelope-from < bunmegelozesbeke@cp2.tarhely.pw >)
NOTE : Norply

Phishing analysis :

CLICK : Update My Informations
OPEN : http://www.handicraftdesignbank.in/upload/products/He/service/manage
RESULT : Phishing is unresponsive.

INVITATION TO ATTEND WORLD PEACE FOUNDATION (I.W.P.F) 2016

Dear Sir/Madam,

The International World Peace Foundation Conference (I.W.P.F) is pleased to invite you to participate in the forth-coming International Conference on Human Trafficking, Child Abuse, HIV/AIDS. Racism and Human Right.This event will commence from August 1st- 5th 2016 in California, United State of America and August 8th-12th to 2016 in Republic of Senegal. I am honored to invite you to attend these events as my guest.

For more details and requirements for your registration,

kindly contact the secretary Mrs Miret Johnson via E-mail:(secretary.info91@gmail.com)

Also feel free to contact me if you need any further details related to these events. Endeavor to inform the secretary that you were invited to participate by me (Ms.Isabella William)a staff member of the World Peace Foundation Conference. Note that the Organizing Committee and Our donor sponsors will take the full responsibility of all registered participants visa processing for the United States & Republic of Senegal respectively. That will include your Round trip air tickets to both events. While delegates will only be responsible for confirming their Hotel accommodation in Republic of Senegal where the second phase of the event will take place. I do hope you can make time in your busy schedule to attend these conferences and share your ideas on the listed topic above. Kindly keep me informed via (isabellawilliam91@outlook.com) if you will be able to make it to attend the events.


Thanks
Ms.Isabella William
The International World Peace Foundation Conference (I.W.P.F)
Los Angles, California
United State of America

Email analysis :

NOTE : rpriyanka@bajajcapital.com
NOTE : isabellawilliam91@outlook.com
NOTE : X-Originating-Ip : [41.82.33.17]

NOTE : X-Mailer : Zimbra 8.6.0_GA_1153 (ZimbraWebClient - FF46 (Win)/8.6.0_GA_1153)
NOTE : Received : from zimbra.bajajcapital.com (zimbra.bajajcapital.com [132.0.0.3])

NOTE : by zimbra.bajajcapital.com

Very Urgent (Chevrolet Scam)

900,000 usd award to you by chevrolet company. send name, address, mobile and nationality via:

Email analysis :

NOTE : chevrolet@zcs-mta01.apf.asso.fr
NOTE : company@zcs-mta01.apf.asso.fr
NOTE : chevroletcompany34@gmail.com
NOTE : X-Antivirus-Status : Clean
NOTE : Return-Path : < prvs=*=chevrolet@zcs-mta01.apf.asso.fr >
NOTE : Mime-Version : 1.0
NOTE : X-Virus-Scanned : amavisd-new at zimbra.apf.asso.fr
NOTE : Authentication-Results : 46.228.131.242 is neither permitted nor denied
NOTE : Content-Description : Mail message body
NOTE : Message-Id : < *.*@zcs-mta01.apf.asso.fr >
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : X-Antivirus : avast! (VPS 160603-1, 06/03/2016), Outbound message
NOTE : Content-Type : text/plain; charset="iso-8859-1"
NOTE : client-ip=46.228.131.242;
NOTE : Received : from FSMSG0548.sp.f-secure.com
NOTE : (fsmsg0548.sp.f-secure.com. [46.228.131.242])

NOTE : Received : from mx-out.apf.asso.fr (mx-out.apf.asso.fr [213.152.3.213])
NOTE : Received : from zcs-mta01.apf.asso.fr (zcs-mta01.apf.asso.fr [192.168.101.125])
NOTE : by mx-out.apf.asso.fr (Postfix)

NOTE : Received : from USER-PC.zuku.co.ke (unknown [196.207.187.23])

NOTE : by zcs-mta01.apf.asso.fr (Postfix)
NOTE : Very Urgent

FROM C.B.P {TREAT AS URGENT}!!

U.S. Customs and Border Protection
1300 Pennsylvania Ave NW, Washington, DC 20229,
United States.

Urgent Attention: Beneficiary,

I am Assistant Commissioner Kevin K. McAleenan head of Field Operations (OFO) of the U.S. Customs and Border Protection (CBP). We have just intercepted and confiscated two trunks at John F Kennedy International Airport in New York, NY 11430 coming from a foreign country. We crosschecked the content of the boxes and found it contained a total sum of $4.1 million dollars. Also with one of the trunks were documents with your name as the receiver of the money. As we progressed in our investigations of the Diplomat which accompanied the trunks into the United States we learned that he was to deliver these funds to your residence as payment of an inheritance/winning, which was due to you. Further checks on the consignment, we found out that the consignment paperwork lacked the PROOF OF OWNERSHIP CERTIFICATE AND LEGAL DELIVERY PERMIT CLEARANCE CERTIFICATE forms. We then confiscated both trunks and released the Diplomat.

The trunks According to section 229 subsection 31 of the International, Commerce Regulators Code Enforcement Guidelines, your consignment lacks PROOF OF OWNERSHIP CERTIFICATE AND LEGAL DELIVERY PERMIT CLEARANCE CERTIFICATE from the joint team of Homeland Security and therefore you must contact us for direction on how to procure the two certificates, so that you can be relieved of the charges of evading tax which is a jail offense under section 12 subsection 441 of the Tax Code. We will also be asking the IRS to launch an investigation of money laundering if you do not follow our instructions.

You are therefore required to contact me within 72 hours, at that point I will walk you through the process of clearing and claiming the money.

Failure to comply may lead to your arrest, interrogation and/or you being prosecuted in the Court of Law for tax evasion and or money laundering. You are also advised not to contact any bank in Africa, Europe or banking institution.

Yours in service,
Kevin K. McAleenan
Head of Field Operations (OFO),
U.S. Customs and Border Protection (CBP)

Email analysis :

NOTE : kevin@uscbp.com
NOTE : postmaster@gmx.net
NOTE : Received : from [222.124.18.76] (helo=fm1.smtp.telkom.net)

NOTE : by smtp-out091-sv3.telkom.net with esmtps
NOTE : Received : from User (74.subnet222-124-201.astinet.telkom.net.id [222.124.201.74]

NOTE : (may be forged)) by fm1.smtp.telkom.net

RE: TELEX/COMPUTER DEPARTMENT OF THE AFRI BANK, ACCRA- GHANA

MY NAME IS MR.FRANK .E RYAN OF TELEX/COMPUTER DEPARTMENT OF THE AFRI BANK, ACCRA- GHANA. I AM SENDING THIS PRIVATE EMAIL BASED ON THE CONFIDENTIALITY OF THE TRANSACTION. PLEASE, I WILL LIKE TO ADVISE; IF AFTER GOING THROUGH MY PROPOSAL AND YOU DO NOT ACCEPT IT, KINDLY KEEP IT TO YOURSELF.

AS OF THIS MOMENT, I AM STILL IN SERVICE WITH THE AB GHANA. AND I WILL NOT BY ANY MEANS LIKE TO LOSE MY JOB, SO IF YOU ARE NOT INTERESTED, KEEP THIS TO YOURSELF. I HAVE PUT IN OVER 23 YEARS IN THIS BANK BUT I DO NOT HAVE ANYTHING TO SHOW FOR IT. THIS IS JUST MY OPPORTUNITY TO MAKE SURE THAT I GIVE MY CHILDREN A DECENT TRAINING SINCE MY GOVT WHICH IS CORRUPT HAS REFUSED TO TAKE CARE OF ITS RESPONSIBILITY. INFANT I AM SICK AND TIRED OF EVERYTHING HERE AND I NEED TO GET OUT. I FOUND OUT THAT YOU ALMOST MET ALL THE STATUTORY REQUIREMENTS IN RESPECT OF YOUR PAYMENT. PLEASE BE EQUALLY ADVISED THAT NO SECURITY COMPANY IN AFRICA CAN HANDLE YOUR CONTRACT PAYMENT/INHERITANCE FUND WITH ANY BANK WITHOUT THE INSTRUCTIONS OF THE AFI BANK, YOUR PROBLEM IS THAT OF INTEREST GROUP IN THE FEDERAL MINISTRY OF FINANCE THAT IS SUPPOSED TO ORDER TRANSFER OF YOUR FUND WITH THE APPROVAL OF THE AB. A LOT OF PEOPLE ARE INTERESTED IN YOUR PAYMENT AND THAT EXPLAINS WHY YOU RECEIVE EMAILS AND PHONE CALLS FROM DIFFERENT PEOPLE EVERYDAY, THEIR WHOLE GAME PLAN IS TO FRUSTRATE YOU; IN-ORDER FOR YOU TO ABANDON THE PAYMENT AND THEN, THEY WILL BE COMFORTABLE AND BE FREE ENOUGH TO TRANSFER THE FUNDS INTO THEIR OVERSEAS ACCOUNT. THEIR AIM AND TARGET IS NOT THE MONEY YOU ARE GIVING THEM BUT TO FRUSTRATE YOU, HENCE, YOU HAVE LOST TRUST ON WHOM TO BELIEVE TO BE GENUINE. I CAN ASSURE YOU THAT THIS MAY LAST FOR YEARS, YET NOTHING HAPPENS,TO SUM IT UP, I WISH TO ASSURE YOU THAT WITH MY POSITION HERE IN THE TELEX DEPARTMENT, I CAN PUNCH THE COMPUTER AND CREDIT YOUR ACCOUNT STRAIGHT, I CAN ACCOMPLISH THIS UNDER FIVE WORKING DAYS, BUT WE HAVE TO REACH AN AGREEMENT. FIRST OF ALL, YOU HAVE TO LET ME KNOW HOW MUCH YOU WILL GIVE ME AT THE CONSUMMATION OF THIS DEAL. FINALLY, YOU WILL HAVE TO ACCEPT TO KEEP THIS TRANSACTION STRICTLY CONFIDENTIAL IF YOU ACCEPT MY PROPOSAL, KINDLY GET BACK TO ME IMMEDIATELY ON MY PRIVATE MAIL ADDRESS (frankryanbb@outlook.com) AND CONFIRM YOUR PARTICULARS ON REPLY.

REGARDS,

MR.FRANK RYAN
+233-541863101

Email analysis :

NOTE : frankryanbb@outlook.com
NOTE : FRANKMORGAN@AFRIBANK.COM.GH
NOTE : Received : from User (76-8-85-59.dbshosting.com [76.8.85.59])
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Mime-Version : 1.0
NOTE : X-Virus-Scanned : by bsmtpd at dbshosting.com
NOTE : Authentication-Results : 76.8.85.230
NOTE : X-Priority : 3
NOTE : Content-Transfer-Encoding : 7bit
NOTE : X-Barracuda-Connect : 76-8-85-59.dbshosting.com[76.8.85.59]

NOTE : Content-Type : text/plain; charset="Windows-1251"

Kindly respond for more detail

Am Gen John W Nicholson Jr. i am with the us army in Camp Abu Naji / FOB Garry Owen (Al Amarah)I need your assistant to move some funds out of Iraq.Kindly respond for more detail

Email analysis :

NOTE : Return-Path :
NOTE : X-Originatingip : 105.225.245.50 (printing)
NOTE : Mime-Version : 1.0
NOTE : smtp.mailfrom=Gen_John@us.army.mil
NOTE : Message-Id : < *.*@mgip.com >
NOTE : X-Mailer : OpenWebMail 2.53
NOTE : X-Col-Mta : smtp.colbd.com
NOTE : X-Col-Mta : dhs01.colbd.net
NOTE : Content-Type : text/plain; charset=utf-8
NOTE : Received-Spf : client-ip=202.65.168.39;
NOTE : Received : from mta.colbd.net (mta.colbd.net. [202.65.168.39])
NOTE : Received : from dhs01.colbd.net (mailx.regentfashion.com [202.65.168.44])
NOTE : Received : from mail.superknittingbd.com (mail.superknittingbd.com [202.65.169.46])
NOTE : Received : from superknittingbd.com (localhost [127.0.0.1] (may be forged))
NOTE : by mail.superknittingbd.com (8.14.4/8.14.4)
NOTE : Kindly respond for more detail

Please Act Accordingly

Dear Beneficiary,

I am Jacob J. Lew, Secretary of the Treasury under the U.S. Department of the Treasury. You can get more details about me here;

https://en.wikipedia.org/wiki/Jack_Lew

At the recently concluded meeting with the World Bank and the United Nations, an agreement was reached between both parties for us to settle all outstanding payments accrued to individuals/corporations with respect to local and overseas contract payment, debt re-scheduling and outstanding compensation payment. Fortunately, you have been selected alongside a few other beneficiaries to receive your own payment of $1.5million (One Million five hundred thousand United States Dollars only). We have been notified that you are yet to receive your fund valued at $1.5million This money will now be transferred to your nominated bank account. You are advised to kindly reply this email with the below details enclosed to help us process your payment;

(1) Full Names:
(2) Residential Address:
(3) Country of Residence:
(4) Age:
(5) Phone/Cell Number:
(6) Occupation:

Yours faithfully,

Jacob J. Lew
Secretary of the Treasury
(U.S. Department of the Treasury)

Note: The information contained in this e-mail is private & confidential and may also be legally privileged. If you are not the intended recipient, please notify us, preferably by e-mail, and do not read, copy or disclose the contents of this message to anyone.

Email analysis :

NOTE : info@usa.gov
NOTE : mrjacklew74@gmail.com
NOTE : X-Authenticated-Sender : vps.massautocomponents.com: info@massautocomponents.com
NOTE : X-Get-Message-Sender-Via : vps.massautocomponents.com:
NOTE : authenticated_id: info@massautocomponents.com
NOTE : Received : from [167.88.9.70] (port=54680 helo=User) by vps.massautocomponents.com

Notification (Phishing Crédit Agricole)

Cher(e) Client(e) :
Nous tenons de vous informer que vous avez un nouveau message.
Pour consulter votre boite de messagerie cliquez sur le lien ci-dessous :

Cliquez ici

Nous vous remercions de votre confiance.

Cordialement
Directeur de la relation clients

Reproduction dûment autorisée depuis www.pcmag.com. © 2016 Ziff Davis, LLC. All rights reserved.

Pour être sûr de recevoir nos e‑mails, ajoutez l’adresse mail@info.adobesystems.com à votre carnet d’adresses, vos contacts ou votre liste d’expéditeurs approuvés.

Email screenshot :

Phishing analysis :

CLICK : Cliquez ici
OPEN : http://hemval.se/media
REDIRECT : http://103.200.5.135/c/0x0/
SCREENSHOT :

FILL : Postal code
CLICK : Arrow
REDIRECT : http://103.200.5.135/c/0x0/auth.php
SCREENSHOT :

CLICK : Confirmer
REDIRECT : https://www.credit-agricole.fr/

Email analysis :

NOTE : "CREDIT AGRlCOLE"@kiabi.com
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < kjhsSjd@kiabi.com >
NOTE : Received : from kiabi.com ([84.39.40.155])
NOTE : Received : by kiabi.com (Postfix, from userid 33)
NOTE : X-Php-Originating-Script : 0:Yasodm.php
NOTE : Message-Id : < *.*@kiabi.com >
NOTE : Notification
NOTE : Kiabi.com servers were used to relay this scam.

Update Your Information Account !! (eBay Phishing attempt)

eBay

Account ID: 0073621101

We have reason to believe that your eBay account has been used fraudulently without your permission. In addition, any unauthorized activity, such as buying or selling, has been canceled and any associated fees have been credited to your account. Any listings that we removed are included toward the end of this email. We assure you that your financial information is securely stored on a server and cannot be seen by anyone.

To secure your eBay account, you need to:

1 - Login to your account.
2 - Verify the contact information.
3 - Update your payment informations and other stored information on your eBay account is correct.

For detailed instructions, please visit: www.ebɑy.com/help/account/securing-account-ID-0073621101.html

We appreciate your understanding and thank you for being part of our community.

Regards, eBay

Please don't reply to this message. It was sent from an address that doesn't accept incoming email.

Copyright © 2016.

Phishing analysis :

CLICK : www.ebɑy.com/help/account/securing-account-ID-0073621101.html
OPEN : https://www.secure-account-update-online.aloobein.ga/
REDIRECT : Phishing was removed...

Email analysis :

NOTE : Content-Type : text/html
NOTE : Mime-Version : 1.0
NOTE : X-Get-Message-Sender-Via : cpanel.hostnet.ge: authenticated_id: hostnet/only user confirmed/virtual account not confirmed
NOTE : Return-Path :
NOTE : X-Authenticated-Sender : cpanel.hostnet.ge: hostnet
NOTE : Received : from cpanel.hostnet.ge (cpanel.hostnet.ge. [212.72.155.189])
NOTE : Received : from hostnet by cpanel.hostnet.ge with local (Exim 4.87) (envelope-from < hostnet@cpanel.hostnet.ge >)
NOTE : Message-Id : < *@cpanel.hostnet.ge >
NOTE : smtp.mailfrom=hostnet@cpanel.hostnet.ge
NOTE : Update Your Information Account !!

Phishing attempt on bitcointalk email addresses

Greetings,

We know that some of you have accounts on bitcointalk.org and we wanted to let you know that a phishing attempt was made on bitcointalk email addresses earlier today.
If you received an email with the subject Mtgox.Claim assessment process, delete it and do not click on the link it contains! This email did not come from Kraken, but was spoofed to look as though it came from our support email (support@kraken.com).

We do not know how the bitcointalk email addresses were obtained, however the bitcointalk database has been compromised in the past. You can be assured that this incident was not the result of any breach in Kraken’s database and your personal information with Kraken is safe.

Even if you did receive the email, you are safe so long as you do not click on the link (just delete the email and you will be fine). If you did click on the link and are concerned about it, please contact us at: support@kraken.com.

Stay safe,

The Kraken Team

no-reply (Hameçonnage Hellobank)

Bonjour,

Un nouveau Message est disponible sur votre Messagerieo
Pour le consulter, Veuiller Cliquez sur le lien ce-dessous :

Accèdez à votre boite

Nous vous remercions de votre confiance.
Hello bank : Banque et assurance

Ce courriel vous a été envoyé par un système automatique d'émission de messages.
L'adresse d'émission n'est pas une adresse de courriel classique.
Si vous écrivez à cette adresse, votre message ne sera pas pris en compte

Phishing analysis :

CLICK : Accèdez à votre boite
OPEN : http://comercialvans.com.mx/30
REDIRECT : http://puncofed.in/wp-includes/ok/HelloBank/
SCREENSHOT :

CLICK : Accéder aux comptes

Screenshot :

CLICK : Vérifier
REDIRECT : http://puncofed.in/wp-includes/ok/HelloBank/checked.html

REDIRECT : https://www.hellobank.fr/fr/espace-client

Email analysis :

NOTE : __Hellobank__@swd.nl
NOTE : binc@swd.nl
NOTE : X-Php-Originating-Script : 0:send.php
NOTE : Received : from swd.nl ([185.48.33.90])

Lisez votre messagew (Phishing Crédit Agricole) (Attempt)

Cher(e)dClient(e)dd

Lors de votre dérnier achats,vous avez été averti par un message vous informant de l'obligation d'adhérer à la
nouvelledréglementation conçernant la flabilité pour les achats pardC.Bdsur internet et de la mise en place d'un
arrêt pour vos futursdachats.
Or,nousfn'avons pas, cefjour,d'adhésionfdefvotrefpart et nousfsommes aufregret de vousdinformer que vous
pouvez plus utiliser votredcarte surfinternet

Adhésion;fFaitesfvotrefdemandefd'adhésionfenflignefenfcliquantfici

Cordialementggg

Copyright © 2016 Crédit Agricole

Copyright © 2016 A2 Hosting, All rights reserved.
You are receiving this email because you are an A2 Hosting Customer. If you don't wish to be on the Newsletter you can easily unsubscribe here or by controlling your contact options at My A2 Hosting.

Our mailing address is:
A2 Hosting
PO Box 2998
Ann Arbor, MI 48106

Add us to your address book
Quick Links

We're Hiring
My A2 Hosting
Open a Support Ticket
Affiliate Program - Earn $85!
Refer a Friend - Earn $50!
Review A2 Hosting!
Unsubscribe from this List Update Subscription and Notification Settings

Phishing analysis :

CLICK : Adhésion;fFaitesfvotrefdemandefd'adhésionfenflignefenfcliquantfici
OPEN : http://www.dong3.com.au/acces/
RESULT : Phishing is unresponsive

Email analysis :

NOTE : Content-Type : text/html
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < www-data@nice.fr >
NOTE : Received : from nice.fr ([139.59.132.93])
NOTE : Received : by nice.fr (Postfix, from userid 33)
NOTE : NOTE : X-Php-Originating-Script : 0:map.php
NOTE : Message-Id : < *.*@nice.fr >
NOTE : Lisez votre messagew

Lisez votre message! (Phishing Hellobank)

Bonjour,

Un nouveau Message est disponible sur votre Messagerieo
Pour le consulter, Veuiller Cliquez sur le lien ce-dessous :

Accèdez à votre boite

Nous vous remercions de votre confiance.

Ce courriel vous a été envoyé par un système automatique d'émission de messages.
L'adresse d'émission n'est pas une adresse de courriel classique.
Si vous écrivez à cette adresse, votre message ne sera pas pris en compte

Phishing analysis :

CLICK : Accèdez à votre boite
OPEN : http://supportsinformation.com/hellobnk/
THE URL CHANGED TO :

data:text/html;base64,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

SCREENSHOT :

CLICK : Accéder aux comptes

Email analysis :

NOTE : Content-Type : text/html
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < www-data@nice.fr >
NOTE : Received : from nice.fr ([139.59.143.49])

NOTE : X-Php-Originating-Script : 0:map.php
NOTE : Lisez votre message!

2016 International Conference Program

Dear Sir/Madam,

On behalf of the International Economic Development on Human Security and Terrorism Organization, I am pleased to invite you to our conference that will be held from August 15th to 19th, 2016 @ the conference place in Dallas Texas USA and August 22th-26th 2016 @ in Republic of Senegal. The conference meeting will contain various talks and mini workshops related to the issues of Challenges to Economic Development & Human Security in our society.

The topic of the conference is "The Effect of Terrorism on Global Economy and Human Security " the sponsors of this event shall cover your round-trip air tickets from your country to the USA and from USA to Republic of Senegal back to your country and we shall also provide visa assistance with the U.S Embassy in your country of residence and your ground transportation from the airport to the conference venue. The hotel accommodation booking cost will be your own responsibility. Please contact the conference secretariat for more information and registration for participation: [iedhsto.officedesk@gmail.com].

We look forward to your confirmed presence at the conference.

Respectfully Yours,
Dr. Happy Wisdom,
Program Assistant.

Email analysis :

NOTE : iedhsto.officedesk@gmail.com
NOTE : nitu@bajajcapital.com
NOTE : Return-Path : < nitu@bajajcapital.com >
NOTE : X-Originating-Ip : [41.83.40.40]

NOTE : Mime-Version : 1.0
NOTE : X-Mailer : Zimbra 8.6.0_GA_1153 (zclient/8.6.0_GA_1153)
NOTE : Thread-Topic : 2016 International Conference Program
NOTE : client-ip=220.227.158.213;
NOTE : Received : from zimbra.bajajcapital.com (mail.bajajcapital.com. [220.227.158.213])

NOTE : 2016 International Conference Program

[Mail (1)] Vous avez reçu un message : (Phishing Banque Populaire)

Bonjour,

Le département technique procéde à une mise à jour importante de logiciel programmée de facon à améliorer la qualité de nos services .

Nos vous demandons avec bienveillance de cliquer sur le lien ci-dessous et de confirmer votre PassCyberPlus :

Confirmer votre PassCyberPlus

Nous vous remercions pour la confiance que vous acordez à nous et restons à votre disposition .

Cordialement,

Ceci est un troisiéme et dernier rappel nous vous invitant a accéder a votre formulaire dés que possible,

dans le cas contraire nous ne somme pas responsables des debit inhabituels sur votre compte

BANQUEPOPULAIRE

Phishing analysis :

CLICK : Confirmer votre PassCyberPlus
OPEN : http://eurotronic-arts.si/autocomplete
REDIRECT : http://livinggreenlandscaping.com/cli/pop1/index.php?id=25
NOTE : Phishing was removed...

Email analysis :

NOTE : _C_y_b_e_r_P_l_u_s@ovh.fr
NOTE : X-Mailer : PHP/5.3.10-1ubuntu3.23
NOTE : X-Php-Originating-Script : 0:zamailer.php
NOTE : [Mail (1)] Vous avez reçu un message :

sl 特价 代/开或/售：发－票(营改增） 请加QQ:1968415495￥ 包真电13715362114 %

你好！0b
zw老板

价k格绝对优惠！最少比同行优惠。bs可以开国税地税全国机打。如商品增值税 普通销售 材料 办公用品 耗材 广告
咨询费 住宿 餐饮 会务费 运输 等服务费都可以开。我们最低价格与您合作。
q2使用后才付款的。

2016-5-24

祝万事如意！

ok会计

Email analysis :

NOTE : 595657843@qq.com
NOTE : fiiypmiy@rcuobvug.com
NOTE : Return-Path : < wangchenglin@snupg.com >
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2900.5512
NOTE : X-Ovh-Remote : 1.85.42.195 ()

NOTE : Mime-Version : 1.0
NOTE : X-Priority : 3
NOTE : Content-Transfer-Encoding : base64
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2900.5512
NOTE : Content-Type : text/html; charset="gb2312"
NOTE : Received : from unknown (HELO root.domain) (1.85.42.195)

NOTE : Received : by root.domain (CSmail for UNIX, from userid 503)
NOTE : Received : from uxwmlzfs (unknown [116.22.164.213]) by root.domain (CSmail for UNIX)

Email leaks :

fiiypmiy@rcuobvug.com, mhunsucker@rcvroofing.com, rtotfvmxr@rcvvpsys.com, wpyimjrr@rcvgqjrd.com, bob@rcwalker.com, feng@rcwealink.com, jiacongcong@rcw0375.com, msl2010@rcweb.net, rc@rcwiremesh.com, support@rcwhosting.com, yf4s2@rcwv.com, info@ravindrashrivastav.com, sales@rathbonebroadcastbatteries.com, hr@ravicom.com, mail@rayfranklin.com, tech@rayland.cn, tuarvnh@razvp.com, dlciscekde@rbccli.com, ecjbznsc@rbfymwpj.com, ahrb@rbjt.cc, upoleqps@rbmntfdi.com, lauraj@rangeweb.net, dhaulzjg@rawkoejx.com, ray@raydaytona.com, bhelsing@rbanet.com, rb@rbgzsb.com, idqsx@rboouqy.com, rossman@rbrlaw.com, shakitadiedre@rbs.com, etzxiqea@rbuldquv.com, cdgojtjm@rbwypefi.com, honghuanglan@rbyal.com, sales@rc361.com, postmaster@rcastereo.com, roy@rcbuckingbulls.com, master@rccb.com.cn, rcd@rcdtech.com, bamd@rcfuk.com, vhllyrcr@rcfvtnwg.com, rmbqb@rcg4mk.com, karen@rchomecare.com, bluefishd782@rcisound.com, marketing@rcilabscan.com, ilcakqg@rcjqf.com, vdvcoxwn@rckmmida.com, rcltpe@rclgroup.com, jhva@rcmfm.com, dyoungfamily@rcn.co, beefiestqe74@rcook.com, seeworth@rconnect.com, rcbzqt@rcpgzc.com, f4frf@rcrc.net, aggravationsex82@rcsurveyors.com, kholgh@rasool-machine.com, jinjun@raycomchin.com, ywtan@raymax.com, tech@rbcds.com, dyh313@rbkfzx.com, sales@rbrubber.com, lppslraw@rbxeasvo.com, mdcaoper@rcbc.com, edu@rarealtors.com, crumbliesm21@raybernfoods.com, robindong@rayval.com, d.collins@rbaimaging.com, admin@rbfiber.com, mlsgqs@rbmwoxp.cc, mike@rbsnj.com, qob@rbxhug.com, info@rcbidnswap.com, mqbhymf@rcdlo.com, rc@rcfinancing.com, lhoffenberg@ramahwisconsin.com, qjgfl@raxak.com, sales03@raypcb.com, jlmmy@rattan.cn, leonazhang@rayedu.com.cn, bbai@razorsha.com, rbat@rbat.com, wangshan@rbc.cn, afmajy@rbhwqh.com, nxetbdc@rblkcln.cc, qrslfyag@rbosqbay.com, jay@rbscyclery.com, info@rbunitedstates.com, ovmhnjwo@rbxcrlpq.com, jspiezio@rc255.net, phillock@rcalaw.com, rpcarpio@rcbcsavings.com, marketing@rcc.com, wjj@rcda21.com, snsalve@rcfltd.com, 5y8dsqn@rch2z.com, lxworygt@rchsxnxc.com, access@rcisys.net, gesfufsz@rciynxpn.com, rchen@rcintl.com, cjaacks@rcjreps.com, yoklfjlf@ravqcapj.com, raytek-hr@raytekgroup.com, simwi@rbbridge.com, hfiigrk@rbirb.com, info@rbqp.com, sawcfesa@rbvpwakm.com, rajesh@rcaindia.com, cppffuv@rcdif.com, epg@rch.com, xtbjqkxobumgx@rcikzve.coop, wdfzidhroutfp@rcjsfo.cc, uxptfuo@rcklt.com, nlshzfsp@rclltsjo.com, caricaturistcw8125@rcm1.com, info@rashmiexports.com, gohogs@randnet.com, tinalin@ravenel.com, liangqi@raytechinstrument.com, sales@rayizhan.com, info@razerzone.com, amoris@rbce.com, uvlajlsiaggl@rbdyqpmm.com, ea@rbiqb.com, ccwenck@rbmusa.com, sales02@rbpet.com, morganlaughlin@rbs.com.cn, bbx7v36@rbvjxjifsrdkyzmq.com, wxoolhf@rbyoo.com, info@rcarecordslabel.com, vlepdqls@rcbryfvp.com, vinodev@rccorp.com, basudeodas@rcfltd.com, dmqxckmd@rchzqyne.com, joker@rcip.com, gngcbhox@rcjazasu.com, 4spex@rcl8.com, condemnedmb1@rcmultimedia.com, mlapierre@rcmmodulaire.com, 4tgdntzcxb4cotfcrvn-2g@rcn.net, kddcrhw@rcnr.com, admin@rcool.com.cn, irid@rconnect.com, robertp@rconect.com, evcexv@rcp.com, ruicheng@rcpmw.com, vlgylkaj@rcqlrc.com, jvvkwbmr@rcrvmngm.com, wtl@rcrqawz.com, dancbpf@rcsworks.com, iiqj@rcsash.com, kvewth@rcsljy.com, qdsouza@rcsis.com, skip@rcsubs.com, cdvopbjm@rctossrg.com, kzhyqurr@rctbdvbq.com, signsink@rctvonline.net, fhzzhjsh@rcuxtzdw.com, bribpsn@rbiaw.com, hammer@rchcpa.com, jixp@rcuzrt.com, xdsvktv@rcuje.com, lmeng@raysen.com.cn, jemwmdv@rbysrzsd.com, rcgcn@rcgcn.com, dwrcipam@rcipa.com, moparmik@rconnct.com, mirabella@rcuniverse.com, roseland@rcvideo.com, fedexcourierdeliverydesk@rcweb.net, rc@rcwindow.com, 83tkt@rcxgzh.com, dxakixag@rcxdqusj.com, iqxppcym@rcxqsjv.cc, ojnqdifq@rcxkrdpv.com, sales@rcxtech.com.cn, xhcg@rcx.com, bpofofhlgy@rcyacvewcc.com, hn@rcytx.com, mocf@rcykl.com, rffafnat@rcycbzvt.com, wdkakbq@rcyyb.com, atswzx@rczva.co, ficcnfnk@rczlypbg.com, job@rczpw.net, ohztkozx@rczphfij.com, tangjun520@rczz.com, yzyxacde@rcztgf.com, info@rd1.com, rende@rd120.com, clients@rd2inc.com, web@rd369.com, qy5uekf@rd6e.com, 2012@rdamicro.com, burnayev@rdacorp.com, dgood@rdatasys.com, ghyang@rdamicro.com, hxxbcde@rdazavem.com, inwhaqkj@rdaupttd.com, loeqnrw@rdasd.com, ono@rdai.com, rda@rda247.com, scirihq@rda.com, tony@rdatasys.com, withwys@rdaga.com, zuwo@rdaimye.com, info@razacreation.com, info@rcanam.com, owdot7@rcn.net, hospitality@rayaintegration.com, chenwenrong@rbdpower.com, slleigh@rbs.com, sales@rcchiral.com, mwzceilh@rcjkwzgt.com, uyopgvzm@rcryehpz.com, ciwawler@rcuxzyn.com, rdiskin@rdains.com, ffjcfk@rdbsym.com, jaofnptq@rdbnhsie.com, info@raytech.cn, rolandbrown@rblegalservices.com, ccouse@rcabletv.com, wyxfemdc@rarxzorh.com, haoz@rayi.cn, stanwilemon@razimports.com, rena@rapidramp.com, ching@raymondnco.com, ncottrill@rasky.com, j-yeung@raygale.com, techsupport@raysat.com, tfdhljnv@razlqyzv.com, wangjianmin@rbc.cn, hucmwwa@rbgsf.com, umqgyn@rbirhj.com, yusljiq@rblrd.com, lxlzauz@rbomj.com, urxjvei@rbrdd.com, guqgynj@rbtrbqehqqds.com, wocrbzg@rbvmxbicat.com, moulmein@rangoon.com, sundas55@rawdonmyers.com, ukbraid@raymondphoto.com, mvxymatm@rblhydfe.com, business@rbtk.com, gcjenv@rbzgqx.com, admin@rc530.com, pelqaqlt@rcagkrbn.com, krslpmxo@rcboefpp.com, f2r11ck8yza18@rccegez.net, service@rcczc.com, eybummun@rcecxnkh.com, ofqfte@rcfavm.com, rasman@rasman.com, rayliasw@rayliadesigns.com, advisory@rbc.com, pwmqjcob@rbjcnxzl.com, moneytransfer@rbs.com, zydrjthn@rbzflhux.com, mali@rcchina.net, go3fiuq@rcgtqndrl2k.net, bob@rchdmi.com, sqqiytrh@rchhqngf.com, hdfoost@rcijad.com, sriley@rcifpp.com, hhgkgb@rcjdlt.com, jtlindgren@raytheon.com, ontko@rcinet.com, qrsxapnd@rckgymaa.com, imre@rclcameras.com, rclsub@rclgroup.com, blandishments16@rcmv.com, kevinonline@rcmaling.com, brewerdd@rako.net, info@rawspiritfest.com, shikepu@rayxun.com, nznntnxm@rbcroaep.com, paul@ravar.net, xiangfeng@raymondgroups.com, wtwvohva@rbexmgta.com, cvbwqhfvi@rbkqswjt.com, wkemtmza@rbnhvkbb.com, lidongwei@rbs365.com, dysjgbjqzjh@rbvglhsbaer.cc, rcgg@rbzh.com, russell@rcam.com, glund@rccl.com, uff1ainfo@rcdespanyol.com, fwxfeww@rcgt.com, broker@rcirealestate.com, rcj@rcjsz.cn, rcll@rcll.cn, rc@rcmkt.com, cvbstar@rcnchicago.com, pbfjdibfgz@rcngfg.com, 9@rconline.com, gogatsu1955@rcocreative.com, mbotthof@rcolegal.com, vincec@rcoeng.com, fvelez@rcpplaw.com, qmp@rcp.com, exaplazu@rcqvutjkvw.com, carrie@rcrracing.com, michael@rcribbon.com, txfohhsf@rcrnjkon.com, chobbs@rcslaw.com, gdecjys@rcsfl.com, kgaudet@rcslaw.com, priceg@rcschool.net, support@rcsuperstore.com, cvffzaju@rctwakzq.com, pm@rctheatreco.com, webmaster@rctoys4us.com, pyawxaof@rcuvyjbp.co, gmpqyn@rcvvho.com, zw1aa5@rcvqssqcfmijowyskmby.cc, newmhwmzlkde@rcwhtzsh.com, mnmotes@rcom-ne.com, xekoqzv@rcwpe.com, rentals@ratpackohio.com, sales01@raymonds.com.cn, info@rbearing.co, rbold@rbold.com, ldadujya@rbwlljiq.com, chuck@rcbind.com, richard@rcelectronics.com, lrqppu@rchped.com, sta@rckb.com, duhaiyan@rayortech.com, rene@rcelectricalservices.net, cnxdgs@rcmaling.com, info@rcneil.com, raju@rcobserver.com, nfpamszi@rcqiicvh.com, aaponte@rcscom.com, qinghuali@rcsit.cn, syahril@rayspeed.com, rbagay@rcbcsavings.com, hgjiflts@rcrsovrf.com, diku@rcuc.ne, b3msot7y@rcx8qizv.net, bvqwjxvk@rcyuwbck.com, yjcjxeh@rcywk.com, qthkicxn@rczffmah.com, rotorua@rd1.com, aajinwan@rdamicro.com, hxxcd@rdazavem.com, rc6kqxm@rda5dbr.com, xiaoyonggu@rdawireless.com, mail@rdbutton.com, 7123969165info@rbfusol.com, methodwoodworking.com@rcgarage.com, exhvyoeg@rcujpikb.com, ron@rdbgolftips.com, wanglizhe@rdbta.com.cn, 1wl@rdcai.corn, as4@rdcarchitectstx.com, coworkerr92@rdcomputer.com, fiestaszwl0@rdcfinehomes.com, imurphy@rapidnet.net, informes@rayencura.com, bbtoffice@rbc.cn, xlniazjiff@rblrin.com, aapohx@rbwupy.com, alreef@rccceramic.com, sence@rcfns.com, oracle@rcinet.com, zvxtdhcr@rclnbqpq.com, info@rcharter.com, carolynwilliams@rcowen.com, bvqdoxgq@rcqkruqg.com, ijyl@rcsf.com, ronn@rctockmancpa.com, u4zbbxfr@rcwslkuzdtlyktclhyfmrtg.net, creed@rdacivil.com, hr@rdcb.net, jackey@rdctool.com, kristen@rdcompanies.com, mawanzhi@rdc.com.cn, pbarker@rdcommercial.net, rharvey@rdcss.com, rogier@rdc.net, service@rdc.cn, unwrap0@rdcfinehomes.com, ykhtkla@rdcvp.com, bzwncmb@rddefic.cc, gohxeuhs@rddkhsmw.com, jdpots@rddsum.com, pmussied@rddcuzmh.com, root@rddnike.com, voqnlyw@rddty.com, af@rdegdf.com, zqnzmlml@rdbspf.com, fbbaepapfly@rdeaxn.com, jmvdtekk@rdeaurur.com, mistee@rdelect.com, ralph@rdequipmentco.com, sdbsandr@rdepntdq.com, ysmsmx@rde.com, urajgqtf@ravgfqfd.com, rbateman@rbateman.com, rig@rbnet.com, tgzgpfuj@rbyviiqx.com

Urgent Letter From Hospital

Hello My Beloved, this is Ms Vivian Brown from Estonia writing from hospital here in Ivory Coast; therefore this email is very urgent to attend. I want you to know that I’m dying here in this hospital right now which i don't know if i will see some few days to come.

My Beloved, i was informed by my doctor that i got poisoned and it affected my liver and i can only live for some days. The reason why i contacted you today is because i know that my step mother wanted to kill me and take my inheritance from my late Father. I have a little adopted child named Andrew C. Brown that i adopted in this Country when my late Father was alive and $3.5 million Dollars i inherited from my late father. My step mother and her children they are after Andrew right now because they found out that Andrew was aware of the poison, and because i handed the documents of the fund over to him the day my step Mother poisoned my food, for that reason they do not want Andrew to expose them, so they are doing everything possible to kill him.

My Beloved, please i want you to help him out of this country with the money, he is the only one taking good care of me here in this hospital right now and even this email you are reading now he is the one helping me out. I want you to get back to me so that he will give you the documents of the fund and he will direct you to a well known lawyer that i have appointed, the lawyer will assist you to change the documents of the fund to your name to enable the bank transfer the money to you..
This is the favor i need when you have gotten the fund:

(1) Keep 20% of the money for Andrew until he finish his studies to become a man as he has been there for me as my lovely Son and i promised to support him in life to become a medical Doctor because he always desire for it with the scholarship he had won so far. I want you to take him along with you to your country and establish him as your son. (2) Give 20% of the money to handicap people and charity organization. The remaining 60% should be yours for your help to Andrew. Note; This should be a code between you and my son Andrew in this transaction "Hospital" any mail from him, the Lawyer he will direct you to, without this code "Hospital" is not from the Andrew, the Lawyer or myself as i don't know what will happen to me in the next few hours.

Finally, write me back so that Andrew will send you his pictures to be sure of whom you are dealing with. Andrew is 14years now, therefore guide him. And if i don't hear from you i will look for another person or any organization.

May Almighty God bless you and use you to accomplish my wish. Pray for me always.
Ms Vivian Brown

Email analysis :

NOTE : sistervivianbrown1@gmail.com
NOTE : X-Rocketymmf : senanation
NOTE : Return-Path : < sistervivianbrown1@gmail.com >
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-5
NOTE : Sender : senanation@yahoo.co.jp
NOTE : X-Mailer : YahooMailWebService/0.8.111_69
NOTE : client-ip=182.22.91.115;

NOTE : Received : from [199.58.86.247]

NOTE : by web101409.mail.kks.yahoo.co.jp via HTTP;
NOTE : Urgent Letter From Hospital

Rép : Emirates NBD Bank.,

Emirates NBD Bank
Baniyas Road, Deira Centre
Dubai, United Arab Emirates
TELEPHONE+971528206883

Attention: Beneficiary

We wish to congratulate and inform you that after thorough review of your Inheritance/Contract funds transfer release documents in conjunction with the World Bank and the International Monetary Fund assessment report, your payment file was forwarded to us for immediate transfer of a part-payment of US$3,800,000.00(Three Million Eight Hundred Thousand United States Dollars) to your designated bank account from their offshore account with us.

The audit reports given to us, shows that you have been going through hard times to see to the release of your funds, which has been delayed by some dubious officials.

We therefore advice that you stop further communication with any correspondence outside this office.

Kindly reconfirm your details to enable us credit your account directly by te legraphic transfer or through any of our corresponding banks and send copies of the funds transfer release documents to you and your bankers for confirmation.

Should you follow our directives, your funds will be credited and reflect in your bank account within five (5) bank working days.

For further details and assistance on this Remittance Notification, kindly provide us with the below details:

FULL NAME AND AGE:
BANKING DETAILS
TELEPHONE AND FAX NUMBERS:
FULL CONTACT ADDRESS

Best Regards

Surya Subramanian
Chief Financial Officer
Emirates NBD Bank, Dubai
United Arab Emirates.
TELEPHONE+971528206883

Email analysis :

NOTE : emiratesnbd@financier.com
NOTE : emiratesnbdbank@emirates.net.ae
NOTE : X-Msmail-Priority : Normal
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Mime-Version : 1.0
NOTE : domain of emiratesnbd@financier.com does not designate
NOTE : 41.249.255.100 as permitted sender

NOTE : X-Mimetrack : Itemize by SMTP Server on srvlotus/RMO
NOTE : (Release 9.0.1|October 14, 2013)
NOTE : Serialize by Router on srvlotus/RMO
NOTE : X-Priority : 3 (Normal)
NOTE : Message-Id : < *.*-*.*@email.rmo-maroc.com >
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Content-Type : text/plain; charset="Windows-1251"
NOTE : client-ip=41.249.255.100;
NOTE : Received : from email.rmo-maroc.com (email.rmo-maroc.com. [41.249.255.100])

NOTE : Received : from User ([59.37.163.176])

NOTE : by email.rmo-maroc.com (IBM Domino Release 9.0.1)
NOTE : Rép : Emirates NBD Bank.,

Re.. (Phishing BNP Paribas)

PαrticuliersPriοritéPrοfessiοnnelsEntreprises

ΒNΡ Ρaribas Βαnqυe

Cher(e) client(e),

Vérificatiοn de cοmpte en ligne

Οn vous cοntacte pοur vοus nοtifier qu'un tier suspect a essayé d'avoir l'accès a vοtre cοmpte pοur cela οn a limité l'accès afin de prévenir toute activité illégale. veuillez cοnfirmer que vοus êtes le titulaire du cοmpte en vérifiant vοs infοrmatiοns afin de régler le prοblème. une fοis cοnfirmé vοus allez recevοir un cοde secret cοmme sécurité renfοrcé pour le valider sur vοtre cοmpte

NΟTIFICATIΟN!

Vοus avez 48 heures pοur vérifier vοs infοrmatiοns, sinοn le cοmpte sera clοturé pοur tοujοurs!

1 Accéder a vοtre cοmpte
2 vérificαtiοn de vοs infοrmαtions
3 se cοnnecter à vοtre webmαil zimbrα

Accéder au cοmpte

Cοrdiαlement,
Le Servíce Clíenτs BNΡ Ραribas.

Phishing analysis :

CLICK : Accéder au compte
OPEN : https://www.e-prev.com.br/t
REDIRECT : http://dog.cyberactiv.com/notre-offre/devenirrr/
RESULT : Phishing was removed...
SCREENSHOT :

Email analysis :

NOTE : webmaster@pll.net.frz
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < www-data@webgride074.emsecure.net >
NOTE : Received : from webgride074.emsecure.net ([139.59.152.33])
NOTE : Received : by webgride074.emsecure.net (Postfix, from userid 33)
NOTE : X-Php-Originating-Script : 0:index.php
NOTE : Re..

After the last Apple phishing attempt...

Apple Phishing seems now active :

rrpharma.in/bb/Apple/6aad7060decde21c5f44a0d0958eefa4/Apple/

CLICK : Login
SCREENSHOT :



CLICK : Valider mes informations

REDIRECT : https://appleid.apple.com/

modifications de votre convention de compte (Phishing Apple) (PHISHER FOUND)

free-france-Apple

Cher(e) client(e),

Nous vous prions de trouver, dans le document ci-joint, les informations relatives aux modifications de votre convention de compte, de votre annexe Conditions de fonctionnement des cartes, ainsi que du guide des Conditions et Tarifs 2016.

Consultez le détail des modifications

Ces modifications entreront en vigueur dans un délai de 2 mois à compter de la mise à disposition du présent message.

Phishing analysis :

CLICK : Consultez le détail des modifications
OPEN : http://vittor.ca/
REDIRECT : http://rrpharma.in/bb/Apple/
RESULT : Phishing is unresponsive... But...
PHISHER IS : chuucky24@gmail.com

Email analysis :

NOTE : web@rdp.fr
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < streetbuzz@streetbuzz.fr >
NOTE : Received : from s18422701.onlinehome-server.info ([82.165.194.68])

NOTE : X-Php-Originating-Script : 10009:admin.php
NOTE : modifications de votre convention de compte

F‪‪‪o‪‪‪‪‪rtune‪‪‪o - Vous avez un message (Phishing Fortuneo)

Fortuneo | Banque | l'équipe Fortuneo | Inscription

Bonjour

Un nouveauaMessageoestodisponibleosurovotreoMessagerie Fortuneo .

Pourale consulter,aVeuiller Cliquez sur le lien ce-dessous:

Accéder boite

Cordialement,

Nous vous remercions de votre confiance.

l'équipe fortuneo

France SAS – 417 627 940 RCS Paris Siège Social : 78ter rue Laugier, 75 017 PARIS

Job Agent ID: 314­6088, 2013-10-03 12:02:14

Phishing analysis :

CLICK : Accéder boite
OPEN : http://www.fortaneobnqo.biz/not
REDIRECT : http://46.101.208.245/zab/

SCREENSHOT :

CLICK : Valider
REDIRECT : http://46.101.208.245/zab/config.db1.php
FINAL : https://mabanque.fortuneo.fr/fortuneosmartphone/FortuneoSmartPhone.html#/auth

Email analysis :

NOTE : ds@btb.fr
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html; charset="iso-8859-1"
NOTE : X-Mailer : PHPMailer [version 1.73]
NOTE : Return-Path : < khrabo@btb.fr >
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Received : from btb.fr ([46.101.104.120])

NOTE : F‪‪‪o‪‪‪‪‪rtune‪‪‪o - Vous avez un message

Attn: Package Beneficiary (Email Leaks)

Attn: Package Beneficiary

I want to acknowledged you that we have finally succeeded in getting your package worth of $9.2million out of (ECOWAS) Economic Community of West African States department with the help of Mr. James George Attorney General of Federal High Court of Justice Benin Republic which act as your foreigners Attorney representative here in Benin Republic.

Therefore every necessary arrangement has been made successfully with the Agent Kelvin Martinz for the delivery of your Consignment Box and every Documents guiding your delivery is well updated hence you are advised to reconfirm your full delivery information to the Agent right now as he is currently at JOhn F. Kennedy International Airport with your Consignment Box, As he called me this morning to inform me that he misplaced your delivery address which he has due to CUSTOMS /FBI/ CIA and POLICE searching and scanning on the Box as if he is a terrorist there in your country but finally I thank God that they have confirmed that his movement is clear and legit with out any suspicious intentions to your country only to deliver this Consignment Box to you and the documents are updated as I earlier told you.

So you are advice to reconfirm your full delivery information to the diplomat and ask him to send you your DHL Airway Bill so as to prove to you that he is currently in your country also here is his mobile number (+1 920 876 7591) so as to have easy conversation with him and to enable you give him full direction to get your Consignment Box delivered to you and hand you over your Consignment Box safe and sound, Furthermore you are advice to be very fast as the Agent Kelvin martinz has no time to waste due to his flight ticket,

So the Information you are required to reconfirm to the Agent is as Follow

(1)Your Full Name
(2)Mobile Phone Number
(3)Current Home Address
(4)Fax Number
(5)Country
(6)City
(7)Nearest Airport
(8)E-mailKelvinmartinz497@yahoo.com

He is at John F. Kennedy international Airport right now because of the Searching and Scanning of the Consignment which made him to misplace your address (8)A Copy of Your ID For Identification and don't forget to put your convenient calling hours.

Kindly contact him via his email address, Contact person, Name Agent Kelvin Martinz So contact him to deliver your consignment box first thing tomorrow morning possibly today, so get back to us immediately you contact the Agent to make sure that your fund has gotten to you without any hitch, Furthermore remember the Agent delivering the Consignment Box does not know the content of that consignment box is money, because the Attorney which represented you at (ECOWAS) registered it as a family value to avoid hitch during the delivery, hence on no circumstances should you let him know the content of that consignment box which is $9.2million to avoid lost of your fund as your Consignment was Sign and Stamp by Federal Ministry of Justice to make sure that it is protected until it gets to you.

Shipment code GJK72DWQ
PACKAGE code OVX950
Security code EYTU/3055WEZ/263
Transaction code 7126/JLFS/7138/17305
Certificate Deposit code MCBS/PQLE/2-6/41

SINCERELY
Dr. DAVID KINGSLEY
CALL ME AFTER GOING THROUGH THE EMAIL +229 98117316
The Director of DHL Courier Company Benin Republic

Email Leaks

yanyanwong2005@gmail.com, irvinggoldstein5@gmail.com, zuckuss1212@gmail.com, sessavivi@gmail.com, mr04248@gmail.com, ahdrianmallari14@gmail.com, stvesmthson33@gmail.com, bigmann768@gmail.com, kenneth.turse@gmail.com, robinsavage447@gmail.com, madgekz3bonner@gmail.com, np.eccomiqua@gmail.com, buraktorun7@gmail.com, saveourunionflag@gmail.com, nick.bobsmith123@gmail.com, jennyblack7272@gmail.com, gary.roaster@gmail.com, hugo35mm@gmail.com, mizra9062@gmail.com, hugoferreiracamargo@gmail.com, hector.rowles@gmail.com, jasminedelancey@gmail.com, chelleanderson12@gmail.com, cherrybree289@gmail.com, cruise19allyson@gmail.com, rhejean16@gmail.com, lucy04anderson@gmail.com, bofasaur@gmail.com, harrold.fiducious@gmail.com, taylorhelen66@gmail.com, cj96050@gmail.com, webinis123@gmail.com, jessicapierce318@gmail.com, marjac1997@gmail.com, meandcecilia@gmail.com, jw508328@gmail.com, whiter958@gmail.com, reverendtomjones@gmail.com, cartoonherodude@gmail.com, rob.karhu@gmail.com, rich.dude.swag@gmail.com, sperks548@gmail.com, dr.richard.poke@gmail.com, gbreezy820@gmail.com, jennatulls27@gmail.com, pschlacter400@gmail.com, miakriskoff@gmail.com, marjac1995@gmail.com, marj.ac1993@gmail.com, marja.c1993@gmail.com, acaster247@gmail.com, hughjarce333@gmail.com, oldmichaelhunt@gmail.com, marjac.1995@gmail.com, marjac.1993@gmail.com, m.litoris224@gmail.com, vcorningstone78@gmail.com, riversmontana1@gmail.com, clodcuillon@gmail.com, mikelitoris224@gmail.com, englishcofa@gmail.com, dotmatrixanon@gmail.com, iamjackenoff@gmail.com, rockstaradams69@gmail.com, reneroussimoff@gmail.com, marjac1993@gmail.com, chudd.buckworth444@gmail.com, paulwillian489@gmail.com, topicload@gmail.com, honeypotrestaurant@gmail.com, sheepsquadtv@gmail.com, beverlimcadoo@gmail.com, alexythu145@gmail.com, geoffreybennett47@gmail.com, buttermymuffins25@gmail.com, davesheppy28@gmail.com, jseagal@gmail.com, samuelsmith19611@gmail.com, ronny.dobs123@gmail.com, ronnie.dobbs123@gmail.com, collinsphil32@gmail.com, thomas.leer.q@gmail.com, fatherbfinger298@gmail.com, lightningfastvcrrepair@gmail.com, vbonjovi2@gmail.com, drthomasdequincey@gmail.com, justincase9937@gmail.com, cssmith017@gmail.com, aprilatchurch@gmail.com, harpuun1337@gmail.com, tatyanalaguna29@gmail.com, mingliangsteve@gmail.com, lemongrass.expounder@gmail.com, clients324@gmail.com, jon.targaryen420@gmail.com, jens.ultrecht@gmail.com, jhendrix1432@gmail.com, crapcatcher123@gmail.com, rmquekis@gmail.com

Email analysis :

NOTE : goodluck.@herb.ocn.ne.jp
NOTE : Kelvinmartinz921@yahoo.com
NOTE : X-Originating-Ip : [41.86.234.171]

Masonic regalia (Scam)

IMC Regalia

Quality Manufacturers and Exporters of Masonic Regalia Items, Please Visit website, we can Provide Catalogue as requirement We also made custom design on customer demand, the work force is skilled, devoted and performs diligently to manufacture the products of highest quality, which reflects their mastery over craftsmanship. IMC Regalia believes that its customers are its assets, so the customer satisfaction is its prime objective and the reason for its existence.Regalia is a family owned business which has been in business for over 100 years. We stand behind the quality of our products and appreciate your business whether it is large or small. We guarantee to make your ordering experience as simple and pleasant as possible. We look forward to offering you quality service and products at reasonable prices. Feel free to call us at 03378633816 or visit the how to order section to contact your sales representatives with any questions you might have.

“Please contact us If wanna know more information”

Director/CEO
Mughees Ahmed
Email: info@imcregalia.com
Website: www.imcregalia.com
Skype: idealmugheescompany

Email analysis :

NOTE : alhafezesta@gmail.com
NOTE : info@imcregalia.com
NOTE : Received : from [39.45.171.181] (port=51005 helo=WINREU0KNCV6AD)

NOTE : by server.rphostpk.com

The Honorable Office of the President

FEDERAL REPUBLIC OF NIGERIA
From:” The Honorable Office of the President"
And Debt Reconciliation Payment Report and Immediate Fund Remittance.
Address: Aso-Rock Villa "Presidential Guest House, Wuza Zone II Abuja- Nigeria.
Our Ref: FGN/PRE/VP/XNX/2016

ATTENTION BENEFICIARY,

I WAS SURPRISED THAT YOU HAVE NOT RECEIVED YOUR BENEFICIARY FUND PAYMENT TO FROM THIS COUNTRY UP TO DATE, I MUHAMMADU BUHARI THE PRESIDENT OF FEDERAL REPUBLIC OF NIGERIA, PROMISE THAT EVERY BENEFICIARY'S PAYMENT WILL BE RELEASED TO HIM OR HER IMMEDIATELY I HEAR FROM YOU AND YOU ARE ADVISE TO CALL ME ON THIS TELEPHONE NUMBER +234-817-145-8671 IMMEDIATELY YOU RECEIVE THIS IMPORTANT EMAIL. BASED ON MY INVESTIGATION, I NOTICED THAT YOU HAVE WASTED A LOT OF YOUR HARD EARN MONEY IN THE HANDS OF FRAUDSTERS IN RESPECT OF RECEIVING YOUR BENEFICIARY FUND PAYMENT FROM THIS COUNTRY. NOW I AM ADVISING YOU TO STOP ANY FURTHER COMMUNICATION WITH ANYBODY OR BANK UNTIL YOU RECEIVE YOUR FUND FROM THE BANK WHICH I WILL DIRECT YOU. MEANWHILE TRY AND RECONFIRM TO ME ALL YOUR PERSONAL INFORMATION'S AND YOUR ID CARD BY EMAIL AND CALL ME ON THIS NUMBER+234-817-145-8671 IMMEDIATELY YOU RECEIVE THIS EMAIL. CONGRATULATION IN ADVANCE, ONCE MORE REMEMBER THIS YOUR TRANSACTION WITH ME IS CONFIDENTIAL, DUE TO A LOT OF IMPERSONATORS, IF YOU WANT TO READ MORE ABOUT ME YOU CAN READ THROUGH THIS LINK BELOW:

https://en.wikipedia.org/wiki/ Muhammadu_Buhari

REMEMBER THIS CODE:AVOID WHAT?ANSWER:CORRUPTION.

I WAIT TO HEAR FROM YOU AS SOON AS POSSIBLE

REGARDS

PRESIDENT MUHAMMADU BUHARI(GCFR)
PRESIDENT FEDERAL REPUBLIC OF NIGERIA

Email analysis :

NOTE : presidencyin@outlook.com
NOTE : presidencyin@presidency.org
NOTE : 94.18.229.50 ()

Sale Representative needed in united state/canada region

Our Company * Japan Machinery Company. Japan* is in search of a competent individual or firm that will be responsible in handling funds as our agent and sales representative in the united state/canada region. If interested kindly email us on : japanmachinerycompany@yahoo.com for further details.

Note: It is a part time offer that won't interrupt your present work or business.

Looking forward to your response.

Best Regards,

Yon Mark Liu (Mr)
Nakajima Shoji Bldg.,
7th Floor 8-5-6 Ginza Chuo-Ku,
Tokyo, 104-0061, JAPAN.

Email analysis :

NOTE : japanmachinerycompany@yahoo.com
NOTE : mespinosa@bomberosperu.gob.pe
NOTE : X-Originating-Ip : [124.82.21.162]

Telfax: +971 2413 0001

Fund available for investment please get in touch for more details.

Regional Representative
Sheikh Naseefa Investment Group Company

Telfax: +971 2413 0001

Email analysis :

NOTE : sheikhnaseefa2@yahoo.com
NOTE : e.ahartman2@aol.com

Investment Matter.

Greetings,

My name is Mr Naguib Sawiris. I represent a group of company based in Egypt and we are currently seeking means of expanding and relocating our business interest in the following sectors : banking, real estate, stock speculation and mining, transportation and tobacco.

If you think you have a solid background and idea of making good profit in any of the mentioned business sectors in your country; please write me for possible business co-operation. More so, we are ready to facilitate and fund any business that is capable of generating 10% annual return on investment(AROI).JV partnership and loan financing can also be considered.

Regards,
Mr. Naguib Sawiris,
Residence: Cairo, Egypt
C.E.O: Naguib Group of Companies.
Contact: ngbswrs1150@rediffmail.com
Website: www.orascom.com

Email analysis :

NOTE : wcix01@hotmail.com
NOTE : agbada01@gmail.com

ᴀᴄᴄᴏʀᴅ ʙᴀɴǫᴜᴇ : ᴠᴇᴜɪʟʟᴇᴢ ʟɪʀᴇ ᴄᴇ ᴍᴇssᴀɢᴇ (Phishing Banque Accord)

Bonjour

Lorsadeavotre dernier achat ,vous avez été averti par un message vous informant de l'obligation d'adhérer à la nouvelle réglementation concernant la fiabilité pour les achatsapar C.Basur internetaet de laamise en placead'unaarrêt pouravos futurs achats. Or, nous n'avons pas à ce jour d'adhésionade votre part et nous sommes au regret de vous informera que vous pouvez plusautiliser votre carteasur internet.

Adhésion : Faitesavotreademandead'ahésionaenaligne enacliquantaicia

Nous vous remercions de la confiance que vous nous temoignez.

Cordialement ,
Banque Accord

Référence de la signature électronique :

Banque Accord est un organisme financier spécialisé dans les solutions de paiement et le crédit à la consommation.
Fort d'un réseau d'enseignes partenaires leaders dans leur secteur (Auchan, Leroy Merlin, Boulanger, Norauto...),
Banque Accord peut proposer aux particuliers des cartes de paiement qui répondent à leurs habitudes de consommation,
pour payer au comptant, à crédit, et de profiter des facilités de paiement.

Être détenteur d'une carte du Réseau Banque Accord permet également d'accéder
à une large gamme de produits financiers et services : prêt personnel, crédit renouvelable, rachat de crédits,
assurance, compte épargne et assurance vie, cartes cadeaux... Découvrez les cartes bancaires et tous les produits Banque Accord,
pour profiter de leurs nombreux avantages !

Modifier votre Alerte | Créer un CV | Inscription Newsletter | Désactiver cette alerte

Nous vous informons que l’Alerte Emploi et les liens qu’elle intègr

e contiennent des données concernant vos recherches d’emploi. Afin d’éviter qu’une tiers personne n’accède à ces données, nous vous déconseillons fortement de faire suivre cet email.

minjeducation France SAS – 417 627 940 RCS Paris Siège Social : 78ter rue Laugier, 75 017 PARIS

Job Agent ID: 314­6088, 2013-10-03 12:02:14

Phishing analysis :

CLICK : Faitesavotreademandead'ahésionaenaligne enacliquantaicia
OPEN : http://www.minjeducation.com/minjeducation/StudentImages
REDIRECT : http://eizo.co.nz/not/xxx/
SCREENSHOT :

CLICK : Se connecter à L'ESPACE CLIENT
REDIRECT : http://eizo.co.nz/not/xxx/compte.php
SCREENSHOT :

CLICK : VALIDER
REDIRECT : http://eizo.co.nz/not/xxx/send.php
REDIRECT : https://www.banque-accord.fr/

Email analysis :

NOTE : oksi@tv.fr
NOTE : Received : from tv.fr ([166.63.122.189])

NOTE : X-Php-Originating-Script : 0:b.php

Download your pending document via Dropbox 13-53-09 (Dropbox Phishing)

Hello *@*

You have a pending incoming document shared with you via Dropbox

Dropbox makes it easy to create, store and share online documents, spreadsheets and presentations.

lClick here to view shared docs.

Thanks!
- The Dropbox Team
© 2016 Dropbox

Phishing analysis :

CLICK : lClick here to view shared docs.
OPEN : http://bit.ly/1Y7zmlo
REDIRECT http://www.wmh11.conticom.pl/media/mailto/load_content.php
ADRESS BAR : Change to base64 (data:text/html;charset=utf-8;base64)
SCREENSHOT :

FORM (HTML) : http://homedecoration.pw/mickyrosay/finish.php
CLICK : Sign In
SCREENSHOT :

CLICK : Validate
REDIRECT : https://www.dropbox.com/business?_camp=email_basic&oref=e&_tk=email&_ad=39078

Email analysis :

NOTE : dm3@customerserviceprovider.onmicrosoft.com
NOTE : antcear960@gmail.com
NOTE : X-Organization : yksvextavevak21954
NOTE : X-Author : yksvextavevak21955
NOTE : X-Originating-Ip : [88.51.212.130]