Good day,
Pls find attached the Inquiry specification list, kindly send us quotation.
Thanks & Best Regards,
Sashi Ranjan Rath
osco Excellence
Tel 1 (i250) : 870 773210230
Tel 2 (FB250) : 870 773208568
Tel 3 (F-77) : 870 765 091 412
Tel 4 (F-77) : 870 765 091 411
Fax: 870 765091413
Sat C 1 (Tlx): 447703830
Sat C 2 (Tlx): 447703831
Email: ismaelcarrillo_zf@yahoo.com
Order 4223.zip
File analysis :
OPEN : Order 4223.zip
RESULT : File is a virus.
Virus analysis :
SHA256: 387b4893e924421f9e91f1ee2a938b9017fe30f3bfae07abbfbf0d1b121d98fa
Baidu-International : Adware.MSIL.iBryte.DFE
ESET-NOD32 : a variant of MSIL/Kryptik.DFE
Malwarebytes : Trojan.ZBAgent.RNDGen
Qihoo-360 : HEUR/QVM03.0.Malware.Gen
Rising : PE:Malware.Generic/QRS!1.9E2D[F1]
Sophos : Mal/Generic-S
Tencent : Win32.Trojan.Inject.Auto
Email analysis :
NOTE : stefano.sambucci@transpacific.com
NOTE : ismaelcarrillo_zf@yahoo.com
NOTE : Received : from so199-177.asiawhere.com (219.84.199.177)
NOTE : Received : from 41.190.2.39 ([41.190.2.39])
NOTE : by webmail.mimifund.com (Horde Framework)
NOTE : User-Agent : Internet Messaging Program (IMP) H3 (4.3.9)
NOTE : Return-Path : < stefano.sambucci@transpacific.com >
NOTE : X-No-Auth : unauthenticated sender
Tuesday, September 1, 2015
Monday, August 31, 2015
Spam: Unusual Aсtіνitу : ***
Dear *** ,
Recently, there's been activity in your BankOfAmerica account that seems unusual compared to your normal account activities.
Please log in to your BankOfAmerica account to confirm your identity and update your information.
What's going on?
We're concerned that someone is using your BankOfAmerica account without your knowledge. Recent activity from your account seems to have occurred from a suspicious location or under circumstances that may be different than usual.
What to do:
Log in to your BankOfAmerica account as soon as possible.
We may ask you to confirm information you provided when you created your account to make sure you're the account holder.
Phishing analysis :
CLICK : Log in
OPEN : http://www.securityalertbofamofausa.com/page/boa/
SCREENSHOT :

Email analysis :
NOTE : admin@kyokuyo-ind.co.th
NOTE : Received : from mail.kyokuyo-ind.co.th ([202.57.154.98])
NOTE : Received : from BEABC ([122.128.109.50]) by mail.kyokuyo-ind.co.th
Recently, there's been activity in your BankOfAmerica account that seems unusual compared to your normal account activities.
Please log in to your BankOfAmerica account to confirm your identity and update your information.
What's going on?
We're concerned that someone is using your BankOfAmerica account without your knowledge. Recent activity from your account seems to have occurred from a suspicious location or under circumstances that may be different than usual.
What to do:
Log in to your BankOfAmerica account as soon as possible.
We may ask you to confirm information you provided when you created your account to make sure you're the account holder.
Phishing analysis :
CLICK : Log in
OPEN : http://www.securityalertbofamofausa.com/page/boa/
SCREENSHOT :

Email analysis :
NOTE : admin@kyokuyo-ind.co.th
NOTE : Received : from mail.kyokuyo-ind.co.th ([202.57.154.98])
NOTE : Received : from BEABC ([122.128.109.50]) by mail.kyokuyo-ind.co.th
Que la paix de dieu soit avec vous !
Bonjour Monsieur/Madame
Je n'ai pas un autre moyen de communiquer avec vous que de vous faire parvenir ce mail. Je suis dans le désespoir et mon cœur saigne au moment ou je vous fais ce message qui j'espère retiendra votre attention. Je vous contacte aujourd'hui car bien vrai que l'on ne se connaisse pas cela n'empêche ce geste de ma part. Je me nomme Monsieur DYMOCK KEITH né le 22 JUIN 1947 à Brisbane en Australie, mais pour une raison particulière, j'ai du être un aventurier à la recherche de je ne sais quoi. La raison qui me pousse à vous, est la suivante: Je voudrais passer par votre canal pour faire une œuvre de charité dans votre département.
C'est une donation en quelque sorte et elle s'élève à la somme de 650.000 Euro. Ma situation matrimoniale est telle que je n'ai ni femme et encore moins d'enfants à qui je pourrais léguer cet héritage, et je souffre présentement d'une tumeur à la gorge je suis donc condamné à une mort certaine. C’est pour cela que, je voudrais de manière gracieuse et dans le souci d'aider les enfants démunis vous donner ce dit héritage pour réaliser cette œuvre de charité.
Si vous êtes d'accord, je voudrais avoir les informations suivantes:
•Votre nom complet
•Vos contacts
•Votre pays
•Votre ville
Je vous prie d'accorder une oreille attentive à ma proposition car je compte sur votre bonne volonté et aussi le bon usage de ces fonds pour cette œuvre.
N.B: La prochaine fois, écris moi dans ma boite personnelle: dymockkeith@gmail.com
Fraternellement
Mr DYMOCK KEITH
Email analysis :
NOTE : X-Origin : 41.216.50.54
NOTE : dymockkeith@gmail.com
NOTE : estacionpetrofesrl@speedy.com.ar
NOTE : Received : from localhost (28v.terra.com [208.84.242.166])
NOTE : (authenticated user estacionpetrofesrl!speedylm)
NOTE : by mail-smtp07-mia.tpn.terra.com
NOTE : (Postfix)
Je n'ai pas un autre moyen de communiquer avec vous que de vous faire parvenir ce mail. Je suis dans le désespoir et mon cœur saigne au moment ou je vous fais ce message qui j'espère retiendra votre attention. Je vous contacte aujourd'hui car bien vrai que l'on ne se connaisse pas cela n'empêche ce geste de ma part. Je me nomme Monsieur DYMOCK KEITH né le 22 JUIN 1947 à Brisbane en Australie, mais pour une raison particulière, j'ai du être un aventurier à la recherche de je ne sais quoi. La raison qui me pousse à vous, est la suivante: Je voudrais passer par votre canal pour faire une œuvre de charité dans votre département.
C'est une donation en quelque sorte et elle s'élève à la somme de 650.000 Euro. Ma situation matrimoniale est telle que je n'ai ni femme et encore moins d'enfants à qui je pourrais léguer cet héritage, et je souffre présentement d'une tumeur à la gorge je suis donc condamné à une mort certaine. C’est pour cela que, je voudrais de manière gracieuse et dans le souci d'aider les enfants démunis vous donner ce dit héritage pour réaliser cette œuvre de charité.
Si vous êtes d'accord, je voudrais avoir les informations suivantes:
•Votre nom complet
•Vos contacts
•Votre pays
•Votre ville
Je vous prie d'accorder une oreille attentive à ma proposition car je compte sur votre bonne volonté et aussi le bon usage de ces fonds pour cette œuvre.
N.B: La prochaine fois, écris moi dans ma boite personnelle: dymockkeith@gmail.com
Fraternellement
Mr DYMOCK KEITH
Email analysis :
NOTE : X-Origin : 41.216.50.54
NOTE : dymockkeith@gmail.com
NOTE : estacionpetrofesrl@speedy.com.ar
NOTE : Received : from localhost (28v.terra.com [208.84.242.166])
NOTE : (authenticated user estacionpetrofesrl!speedylm)
NOTE : by mail-smtp07-mia.tpn.terra.com
NOTE : (Postfix)
Lucas Ashford
PLEASE SEND YOUR REPLY TO { lucasashford001@hotmail.com }
Hi,
My name is Lucas Ashford, I am working With a Veterinary Company based here in Liverpool, UK. I got your contact during my comprehensive search for a reliable and trustworthy individual/company in your country. I decided to contact you for a business with our company. The company I work with is into manufacturingof Veterinary Medicines, animal food dietary and supplement.
The company procures most of their raw materials from India in past 3 years; there is a chemical which the company used to send me to India to buy. Right now I have being promoted to the post of marketing manager. The company cannot send me to India again; they will send a more junior staff,our Director has asked me for the contact details of the supplier in India. I need a person I will present to the company as the supplier in India, our company will pay some amount inadvance to supply the materials upon the verification of the sample of the chemical.
The profit would be share between you and I on 50-50 basis after the supply. I am looking for a reliable Indian business man that understands the India local language who will assist me in contacting the local dealer of these chemical in India.I don't want to contact them directly because they will take advantage on me; this business is 100% risk free and will be another income generating business outside your specialization. If you are interested to do the business with me, kindly contact me for more details with this ID: (lucasashford001@hotmail.com)
Regards,
Lucas Ashford
Email analysis :
NOTE : Ashford@weboffi433.onmicrosoft.com
NOTE : lucasashford001@hotmail.com
NOTE : Received : from SIXPR01MB048.apcprd01.prod.exchangelabs.com ([169.254.16.200])
NOTE : client-ip=104.47.126.245;
Hi,
My name is Lucas Ashford, I am working With a Veterinary Company based here in Liverpool, UK. I got your contact during my comprehensive search for a reliable and trustworthy individual/company in your country. I decided to contact you for a business with our company. The company I work with is into manufacturingof Veterinary Medicines, animal food dietary and supplement.
The company procures most of their raw materials from India in past 3 years; there is a chemical which the company used to send me to India to buy. Right now I have being promoted to the post of marketing manager. The company cannot send me to India again; they will send a more junior staff,our Director has asked me for the contact details of the supplier in India. I need a person I will present to the company as the supplier in India, our company will pay some amount inadvance to supply the materials upon the verification of the sample of the chemical.
The profit would be share between you and I on 50-50 basis after the supply. I am looking for a reliable Indian business man that understands the India local language who will assist me in contacting the local dealer of these chemical in India.I don't want to contact them directly because they will take advantage on me; this business is 100% risk free and will be another income generating business outside your specialization. If you are interested to do the business with me, kindly contact me for more details with this ID: (lucasashford001@hotmail.com)
Regards,
Lucas Ashford
Email analysis :
NOTE : Ashford@weboffi433.onmicrosoft.com
NOTE : lucasashford001@hotmail.com
NOTE : Received : from SIXPR01MB048.apcprd01.prod.exchangelabs.com ([169.254.16.200])
NOTE : client-ip=104.47.126.245;
Greatings
GGCDP has programmed sixteen million five hundred thousand US dollars to legally pay to you I will explain more if you are interested. Reply direct to the stated email address: mrjustinomakweh@hotmail.com
Email analysis :
NOTE : mrjustinomakweh@outlook.com
NOTE : Received : from mail.anati.gob.pa (mail.anati.gob.pa [10.16.151.9])
NOTE : by mail.anati.gob.pa (Postfix)
NOTE : X-Originating-Ip : [197.220.169.14]
NOTE : X-Received : by 10.140.235.129 with SMTP
Email analysis :
NOTE : mrjustinomakweh@outlook.com
NOTE : Received : from mail.anati.gob.pa (mail.anati.gob.pa [10.16.151.9])
NOTE : by mail.anati.gob.pa (Postfix)
NOTE : X-Originating-Ip : [197.220.169.14]
NOTE : X-Received : by 10.140.235.129 with SMTP
Private & Personal.
Private & Confidential Memo.
Top of the day to you as i write to introduce a lucrative & private business proposal to you even though we have not met or had any dealings before. I am Mr. Ryan Lambert, a staff of HM Revenue & Customs of the United Kingdom. During my recent inspections of some of our warehouses within The West Midlands Regions of The United Kingdom, i discovered a Metal Box Consignment that has been deposited since 4 (four) years ago by a SUDANESE BUSINESSMAN. I did carry out a check to find out while the said consignment has remained unclaimed for this long and i discovered that there was no valid corresponding address were we could reach him or a Next of Kin that can claim this Consignment. After much investigation and secret checking of the said Consignment, i discovered it content to be valid cash funds (bank notes)
Due to HM Revenue & Customs Ethics of duties governing all employees, i want to front you now as the Next of Kin to the Depositor of this Consignment through a duly sign and legalized Affidavit of Claim and Letter of Administration Documents that i will secure from a Notary Public here in The United Kingdom so that we can claim the said consignment and share the funds together. I am assuring you here that I will provide every useful information’s and documentations that will enable you claim this Consignment without any problem on our both sides and i also promise to provide you with further and better explanation and the full amount on the consignment box upon my receipt of a positive response from you. All that will be needed from you is just your Full Names, Residential Address (valid address), a valid copy of Identity (either International passport, national identity card or driver's license) that will be use in applying for the letter of Administration and affidavit of C
laim Documents/claiming processes
I await a prompt and positive response from you.
Best Regards,
Mr. Ryan Lambert.
Email: ryalambert@gmail.com
Email analysis :
NOTE : ryalambert@yahoo.com
NOTE : ryalambert@gmail.com
NOTE : Received : from pro1557.server4you.net (188.138.92.94)
NOTE : Received : from User (unknown [77.234.40.183]) by pro1557.server4you.net
Top of the day to you as i write to introduce a lucrative & private business proposal to you even though we have not met or had any dealings before. I am Mr. Ryan Lambert, a staff of HM Revenue & Customs of the United Kingdom. During my recent inspections of some of our warehouses within The West Midlands Regions of The United Kingdom, i discovered a Metal Box Consignment that has been deposited since 4 (four) years ago by a SUDANESE BUSINESSMAN. I did carry out a check to find out while the said consignment has remained unclaimed for this long and i discovered that there was no valid corresponding address were we could reach him or a Next of Kin that can claim this Consignment. After much investigation and secret checking of the said Consignment, i discovered it content to be valid cash funds (bank notes)
Due to HM Revenue & Customs Ethics of duties governing all employees, i want to front you now as the Next of Kin to the Depositor of this Consignment through a duly sign and legalized Affidavit of Claim and Letter of Administration Documents that i will secure from a Notary Public here in The United Kingdom so that we can claim the said consignment and share the funds together. I am assuring you here that I will provide every useful information’s and documentations that will enable you claim this Consignment without any problem on our both sides and i also promise to provide you with further and better explanation and the full amount on the consignment box upon my receipt of a positive response from you. All that will be needed from you is just your Full Names, Residential Address (valid address), a valid copy of Identity (either International passport, national identity card or driver's license) that will be use in applying for the letter of Administration and affidavit of C
laim Documents/claiming processes
I await a prompt and positive response from you.
Best Regards,
Mr. Ryan Lambert.
Email: ryalambert@gmail.com
Email analysis :
NOTE : ryalambert@yahoo.com
NOTE : ryalambert@gmail.com
NOTE : Received : from pro1557.server4you.net (188.138.92.94)
NOTE : Received : from User (unknown [77.234.40.183]) by pro1557.server4you.net
Subscribe to:
Posts (Atom)