Friday, September 5, 2014

HELLO, ARE YOU (DEAD) OR (ALIVE)

HELLO, ARE YOU (DEAD) OR (ALIVE)

NOTE THAT AFTER (TODAY) YOU DID NOT MAKE THE PAYMENT THEN WE WILL DIVERT YOUR FUND TO MR. JUDE BETSY BECAUSE WE DON'T HAVE ANY MORE TIME WAIT BELLOW IS THE INFORMATION WHERE YOU WILL SEND THE FEE VIA WESTERN UNION.

RECEIVERS NAME--- FRANK OBOJI
COUNTRY---BENIN REPUBLIC
CITY---COTONOU
TEXT QUESTION.....WHEN?
TEXT ANSWERS........ TODAY
AMOUNT---$78
MTCN...............

YOU MUST SEND US THE DETAILS PROVIDED BY WESTERN UNION IMMEDIATELY YOU MADE THE PAYMENT OF $78USD. BESIDE IF YOU FAIL TO COMPLY WITH THE NEEDED $78 DOLLARS REQUIRED THERE'S NO WAY WE CAN DELIVER THE (ATM CARD) TO YOUR COUNTRY. LOOKING FORWARD TO HEAR FROM YOU IF YOU ARE STILL ALIVE, REPLY BACK FOR FAST ACTION SO THAT YOUR DELIVERY WILL COMMENCE UPON RECEIPT OF YOUR

PAYMENT.

BEST REGARDS,
MR.JOHN GREEN.UNITED NATIONS SECRETARY IN WEST
AFRICA.MAKING THE WORLD A BETTER PLACE.
COMPANY BENIN REPUBLIC. E-MAIL ADDRESSES unitednatiion@usa.com

NOTE : unitednatiion@usa.com
NOTE : Return-Path : < info11111@yeah.net >
NOTE : Received : from webhosting.vipnet.ci (197.159.192.36)
NOTE : Received : from localhost ([::1]:51495 helo=webmail.vipnet.ci)
NOTE : by webhosting.vipnet.ci with esmtpa (Exim 4.82) (envelope-from < info11111@yeah.net >)
NOTE : Mail-Reply-To : unitednatiion@usa.com
NOTE : Message-Id : < ***@vipnet.ci >
NOTE : X-Sender : info11111@yeah.net
NOTE : User-Agent : Roundcube Webmail/1.0.1


X-Antiabuse : This header was added to track abuse, please include it with any abuse report
X-Antiabuse : Primary Hostname - webhosting.vipnet.ci
X-Antiabuse : Originator/Caller UID/GID - [47 12] / [47 12]
X-Antiabuse : Sender Address Domain - yeah.net
X-Get-Message-Sender-Via : webhosting.vipnet.ci: authenticated_id: zoenadaud737@vipnet.ci

NO AWB7704567114

Attention Beneficiary,

We wish to inform you that the diplomatic agent conveying your two consignment box with (Shipment No AWB7704567114), is presently stranded in your Airport. The diplomat arrived your State with your consignment boxes worth of $1.7Millions(One Million, Seven Hundred United States Dollars Only) few hours ago. You recall he was cleared for the delivery and he left for your destination immediately. But unfortunately He misplaced your address as He could not locate you. He is currently stranded at your airport, So you are advised to reconfirm your information again to the Diplomat immediately to enable him deliver your consignment box to your door step without any further delay.

You are to reconfirm this information to him immediately as follows:

(1)Your Full Name:_______________
(2)Current Home Address:___________
(3)Your Home phone:______________
(4)Your Cell Phone:__________________________
(5)Name of your Nearest Airport :_______________________

Please send the contact information to him through his e-mail address, You should contact the diplomatic agent with the email below and with the required information requested above.

Here are the diplomat contact:

Diplomat Name : Diplomat Nasir Boniface
EMAIL: dipnasirb@barid.com

So contact him Immediately to deliver your consignment box first thing tomorrow morning and get back to us immediately you contact him to make sure that your fund has been delivered to you. He is waiting to hear from you today with the information.

NOTE: The Diplomatic agent does not know that the content of the consignment box is $1.7 Millions United States Dollars and under no circumstances should you let him know the content. The consignment was moved from here as family treasures, so never disclose to anyone the content to make sure it got to you safely.

Yours in service,
AMMA James
Foreign Dispatch Unit

NOTE : Return-Path : < cazzaniga-22309@hsgerardo.org >
NOTE : Received : from mx3.hsgerardo.org (HELO mx2.hsgerardo.org) (89.96.208.233)


NOTE : Received : from unknown (HELO zimbra.hsg.local) ([10.38.90.111]) by ironport2.hsg.local
NOTE : Received : from zimbra.hsg.local (zimbra.hsg.local [10.38.90.110]) by zimbra.hsg.local
NOTE : X-Ironport-Av : E=Sophos;i="5.04,470,1406584800"; d="scan'208";a="4475866"
NOTE : Message-Id : < 1330591487.342083.1409891080301.JavaMail.root@zcs0.hsg.local >
NOTE : X-Originating-Ip : [41.79.217.155]


NOTE : X-Mailer : Zimbra 6.0.15_GA_2995 (ZimbraWebClient - FF3.0 (Win)/6.0.15_GA_2995)
YOUR SHIPMENT NO AWB7704567114

Sergeant AI

Hello

How is your day going, hope you are having a wonderful day, I apologies for contacting you in this manner but i need your urgent assistance with a simple but delicate issue. Please take a minute and read through this mail.

I am Sergeant Alfred a Sergeant with the United States Army Stationed here in Afghanistan, I am a one of the American Soldiers still here in Afghanistan. I am contacting you to plea with you to help me get some items and cash which i discovered here. I know this might be unethical but i am doing this to help make my future better when i do leave this awful place.

If you are willing and prepared to help you will be compensated but for the mean time please contact me immediately so i can give you further details.
I will be praying and waiting for your urgent response.

Waiting to hear from you.
Warmest Regards

NOTE : Return-Path : < jack_001@gmx.us >
NOTE : Received : from mail.hfs-sports.de (HELO hfs-sports.de) (87.139.42.29)


NOTE : Received : from 41.71.211.67 ([41.71.211.67]) by hfs-sports.de


NOTE : Message-Id : < @RandyBrown-VAIO >
NOTE : Organization : sac
NOTE : Mime-Version : 1.0
NOTE : X-Priority : 3
NOTE : X-Msmail-Priority : Normal
NOTE : X-Mailer : Microsoft Windows Mail 6.0.6001.18000
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.0.6001.18000
NOTE : X-Antivirus : avast! (VPS 140318-0, 03/18/2014), Outbound message
NOTE : X-Antivirus-Status : Clean
NOTE : Serge

Thursday, September 4, 2014

Cartasi Phishing



Gentile cliente,

Grazie ai recenti trasferimenti illegali di conti elettronici, il tuo conto CartaSl č stato bloccato per la tua sicurezza. Questo č stato fatto per assicurare il tuo conto e le tue informazioni private. Come misura di sicurezza, vi consigliamo di collegarti al vostro Conto CartaSl e cambiare il tuo codice di accesso
Il nostro sistema ti aiuterŕ rapidamente a cambiare il tuo codice di accesso. Il tuo conto non sarŕ sospeso in questo caso, perň, se invece, 48 ore dopo aver ricevuto questo messaggio, il tuo conto non verrŕ confermato, ci riserviamo il diritto di sospendere la tua registrazione CartaSl. CartaSl č autorizzato a fare qualsiasi tipo di operazione affinche anticipi le fraude.

Vi preghiamo di confermare e aggiornare i vostri dati oggi

Cordiali saluti,
CartaSl S.p.A

Conferma

Copyright 2014 CartaSi S.p.A. All rights reserved.

NOTE : info@cartasl.com
NOTE : Gentile ***
NOTE : Click "Conferma"
NOTE : "Conferma" open http://j.mp/wget-clientes
NOTE : Redirect to http://carta-si-it-gtwpage.www1.biz/cas/




NOTE : "Prosegui" redirect to http://carta-si-it-gtwpage.www1.biz/cas/confirm.php?cmd=login-submit&dispatch=b4bf53c0db18fd85h0a134
NOTE : Redirect to http://www.cartasi.it/gtwpages/index.jsp

WWW1.BIZ WHOIS :
=========================================================
Domain Name: WWW1.BIZ
Domain ID: D1145943-BIZ
Sponsoring Registrar: NETWORK SOLUTIONS INC.
Sponsoring Registrar IANA ID: 2
Registrar URL (registration services): whois.biz
Domain Status: clientTransferProhibited
Registrant ID: 52605919
Registrant Name: ChangeIP Network OperationsZZZ
Registrant Address1: 1200 Brickell Avenue
Registrant Address2: Suite 1950
Registrant City: Miami
Registrant State/Province: FL
Registrant Postal Code: 33131
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.8007913367
Registrant Facsimile Number: +1.7862246593
Registrant Email: noc@changeip.com
Administrative Contact ID: 52605919
Administrative Contact Name: ChangeIP Network OperationsZZZ
Administrative Contact Address1: 1200 Brickell Avenue
Administrative Contact Address2: Suite 1950
Administrative Contact City: Miami
Administrative Contact State/Province: FL
Administrative Contact Postal Code: 33131
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.8007913367
Administrative Contact Facsimile Number: +1.7862246593
Administrative Contact Email: noc@changeip.com
Billing Contact ID: 16819660
Billing Contact Name: ChangeIP.com
Billing Contact Organization: ChangeIP.com
Billing Contact Address1: 1200 Brickell Avenue
Billing Contact Address2: Suite 1950
Billing Contact City: Miami
Billing Contact State/Province: FL
Billing Contact Postal Code: 33131
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.8007913367
Billing Contact Email: billing@changeip.com
Technical Contact ID: 52605919
Technical Contact Name: ChangeIP Network OperationsZZZ
Technical Contact Address1: 1200 Brickell Avenue
Technical Contact Address2: Suite 1950
Technical Contact City: Miami
Technical Contact State/Province: FL
Technical Contact Postal Code: 33131
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.8007913367
Technical Contact Facsimile Number: +1.7862246593
Technical Contact Email: noc@changeip.com
Name Server: NS1.CHANGEIP.ORG
Name Server: NS2.CHANGEIP.ORG
Name Server: NS3.CHANGEIP.ORG
Created by Registrar: BULKREGISTER.COM, INC.
Last Updated by Registrar: NETWORK SOLUTIONS INC.

WHOIS CARTASL.COM :
=========================================================
Domain Name: CartAsl.com
Registry Domain ID: 1862943261_DOMAIN_COM-VRSN
Registrar WHOIS server: whois.NameBright.com
Registrar URL: http://www.NameBright.com
Updated Date: 2014-06-15T00:00:00.000Z
Creation Date: 2014-06-15T00:00:00.000Z
Registrar Registration Expiration Date: 2015-06-15T00:00:00.000Z
Registrar: BlastDomains LLC
Registrar IANA ID: 1678
Registrar Abuse Contact Email: abuse@NameBright.com
Registrar Abuse Contact Phone: +1.303.893.0547
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Domain Admin
Registrant Organization: HugeDomains.com
Registrant Street: 2635 Walnut Street
Registrant City: Denver
Registrant State/Province: CO
Registrant Postal Code: 80205
Registrant Country: US
Registrant Phone: +1.303.893.0552
Registrant Email: domains@hugedomains.com
Registry Admin ID:
Admin Name: Domain Admin
Admin Organization: HugeDomains.com
Admin Street: 2635 Walnut Street
Admin City: Denver
Admin State/Province: CO
Admin Postal Code: 80205
Admin Country: US
Admin Phone: +1.303.893.0552
Admin Email: domains@hugedomains.com
Registry Tech ID:
Tech Name: Domain Admin
Tech Organization: HugeDomains.com
Tech Street: 2635 Walnut Street
Tech City: Denver
Tech State/Province: CO
Tech Postal Code: 80205
Tech Country: US
Tech Phone: +1.303.893.0552
Tech Email: domains@hugedomains.com
Name Server: nsg1.namebrightdns.com
Name Server: nsg2.namebrightdns.com
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System:
http://wdprs.internic.net
--- Last update of WHOIS database: 2014-09-04T09:15:24.390Z ---
=========================================================

MAIL :
=========================================================
NOTE : Received : from sum8686.hostlife.net ([195.16.88.107])
NOTE : Received : from cartasl.com (unknown [37.59.149.228])
NOTE : info@cartasl.com does not designate 195.16.88.107 as permitted sender)
=========================================================

eFax message from "15085195849" - 1 page(s), Caller-ID: 1-229-524-2811

eFax

Fax Message [Caller-ID: 1-229-524-2811] You have received a 1 page fax at 2014-09-03 10:42:17 EDT. * The reference number for this fax is atl_did1-1406318502-19175917910-54. View this fax using your PDF reader. Please visit www.efax.com/en/online_fax_FAQ if you have any questions regarding this message or your service.

Thank you for using the eFax service!

Powered by j2 © 2012 j2 Global Communications, Inc. All rights reserved. eFax® is a registered trademark of j2 Global Communications, Inc. This account is subject to the terms listed in the eFax® Customer Agreement.

< FAX_20140903_1409680198_144.pdf >

My Dear Beneficiary

Good Morning Once Again My Dear Beneficiary, This Is Barrister Mathew Alfred the Only Accredited Attorney from Head Quarter Office Western Union Money Transfer Service Benin Republic Chapter, Please I Have A Question To Ask You Right Now In Regard To Your Fund Transfer, What Is Your Suggestion Concerning Your Fund Which Has Been Deposited Here For Long Time Now? Do You Want To Abandon Your Fund Here Simple Because Of The Western Union Transfer Cost Rate Which Is Not Up To The Two Percent Of What Is Coming On Your Way Please What Are Your Reasons? I am Asking You These Questions Because Of the Love I Have For You Otherwise I Can Not Even Bother To Ask You Because It Is Your Fund Not Mine And I Can’t Not Sit Down Washing You, Losing Your Fund Because Of The Little Fee You Suppose To Pay To Receive Your Fund. Please I Need Your Reply As Soon As You Read This Message Thanks And I Pray That This Message Will Merit Your Understanding.

Best Regard
Barrister Mathew Alfred Esq
from Western Union Head Office Benin Republic

Email extracted :

web@audiosolutions.net.au, web@justinmichie.com, webdesign@webstop.com.au, webdeveloper@eldorrado.com, webmaster@4crazy.ch, webmaster@achristianlink.com, webmaster@becomeone.com, webmaster@beltonen-freaks.com, webmaster@bestpricedentistry.com, webmaster@boaze.com, webmaster@borinquentours.net, webmaster@bybloshotel.com, webmaster@camreo.com, webmaster@carolinayh.com, webmaster@cash-back-deals.com, webmaster@crystalcoastag.org, webmaster@detectordog.com, webmaster@distributeurs-automatiques.be, webmaster@dr-belair.com, webmaster@easytravelgroup.co.uk, webmaster@eroticasmansion.com, webmaster@francinedee.com, webmaster@freshslice.com, webmaster@globalshopsearch.com, webmaster@humpsoftware.com, webmaster@internetquepos.com, webmaster@irondragonsoftware.com, webmaster@juicedpro.com, webmaster@kellyscrossstitch.com, webmaster@keywordon.com, webmaster@lasting-expressions.com, webmaster@leylandcooper.com, webmaster@linkspider.co.uk, webmaster@maw2000.net, webmaster@moviestatus.com, webmaster@nanas-boutique.com, webmaster@netprofitsite.com, webmaster@oregoncitylink.com, webmaster@parceljunction.com, webmaster@peacockgallery.org.uk, webmaster@pedalifyouwant.com, webmaster@perfectme.co.za, webmaster@petpal.info, webmaster@plr8.com, webmaster@pocketgamepark.com, webmaster@progressivegardening.com, webmaster@rosevillebareskinperfected.com, webmaster@saxoncourt.com, webmaster@scrapwithshelby.com, webmaster@service-raider.co.uk, webmaster@sexy-x-rated.com, webmaster@sgpropertydeals.com, webmaster@sharese.com, webmaster@slidewizards.com, webmaster@spacemodz.com, webmaster@swish-db.com, webmaster@swr-enterprises.org, webmaster@sydneystore.net, webmaster@tecnouser.com, webmaster@teenbisex.net, webmaster@tekhz.com, webmaster@telecommtraining.info, webmaster@thealtontowersguide.com, webmaster@thedisciplinarian.com, webmaster@theeroticanetwork.info, webmaster@toservehim.com, webmaster@vortexwebdesign.com, webmaster@wayofgun.com, webmaster@win2k3.info, weddingvows@on.aibn.com, wendy@barcelonaprelude.com, wendy@perfectfitweb.com, werbeagentur@red-baron.de, wermagic.garry@aol.co.uk, werwin2@nc.rr.com, westgate@west.net, wfleonard@saxonenterprises.net, wfowler1@excite.com, wgrindstaff@ec.rr.com, whitework@hotmail.ca, wholenike168@yahoo.com.cn, wholesale@tradur.com, wickerman@neo.rr.com, wightlightsupplies@fsmail.net, wilbake@fastmail.fm, wilg@coralwave.com, will@worshamvaughan.com, william.craig@wcci.biz, william@gordonengraving.co.uk, william@mortonvisuals.com, william@snuder.com, william@williammarshallrealtor.com, williamhoedt@tx.rr.com, wilson@accreditservices.co.uk, wilson@surfbest.net, windsurface@centurylink.net, wiwewa@bluewin.ch, wizerhealth@yahoo.ie, wlancaster@kc.rr.com