Helene Bini

Bonjour cher, je suppose que vous ne serez pas surpris de recevoir mon courrier? Mon nom est Helen Bini, seul fils de feu Alfred M. Bini riche fermier. Je vous adresse afin de créer une bonne relation d'amis entre nous, je pense que vous savez ce que les vrais amis et la confiance vaut la peine. Je serai heureux si vous acceptez ma demande parce que je suis prêt à vous en dire plus sur mon projet de transférer mon héritage de 3,5 millions d'euros Euros dans une banque dans votre pays de résidence. S'il vous plaît si vous êtes prêt à accepter ma demande, je vous demande de me répondre le plus rapidement possible afin que nous plus de connaissances et je vous en dire plus. Je suis en attente de votre réponse très rapidement. Helen Bini

Email analysis :

NOTE : helenebini76@gmail.com
NOTE : binihelene854@yahoo.fr
NOTE : Sender : kadycoban2@yahoo.co.jp
NOTE : X-Mailer : YahooMailWebService/0.8.111_68
NOTE : client-ip=183.79.57.43;

NOTE : Received : from [41.207.15.59]

Mrs. Morin Ding

My name is Morin , I live here in Dakar, Senegal currently. I am writing this letter to you because I have been in search of someone who can assist me on this project, so when I saw your name I decided to contact you for this opportunity and hope we can work together.

Get back to me as soon as possible.
Thanks

Email analysis :

NOTE : soumah2016@yandex.com
NOTE : georgedjan233@gmail.com

Ozkan Walker

Hi.

i would like to introduce each an every-one an employment Opportunities at CNRL Oil company Canada, the management company of CNRL Canada is in need of foreign skill workers, you re advise to contact CNRL with your CV and international passport immediately Via email cnrlcanadacompany @gmail .com for the details of the employment and how to process immigrant visas 2016 will send to you immediately / email address is cnrlcanadacompany @gmail. com.

Thanks.

Email analysis :

NOTE : account32@qetour.com
NOTE : X-Originating-Ip : [103.10.197.130]
NOTE : X-Mailer : Zimbra 8.0.9_GA_6191 (ZimbraWebClient - GC48 (Win)/8.0.9_GA_6191)
NOTE : 27.254.142.144;

Greetings,From Dr Mrs Serah Abbas.Private Donation.

Greetings,From Dr Mrs Serah Abbas.Private Donation.

Greetings,

Charity Trust Fund Donated of £6,142,728.00 to You. I am Dr Mrs Serah Abbas, a devoted Christian. I have a foundation/Estate uncompleted and needed somebody to help me finish it due to the nature of my health, the funds for this is available. Please contact me for more details.

Your faithfully,
Dr Mrs Serah Abbas.

Email analysis :

NOTE : serah.abbas20@yahoo.fr
NOTE : serahabbas2008@yeah.net
NOTE : Received : from [98.138.89.160]

Type C charger, Quick Charge charger, Bluetooth earbud, Bluetooth headphone, mobile accessory from Everrich Electronics

Dear sir/madam,

This is Fancy from Everrich Electronics, I am the chief of sales & marketing division for Everrich Electronics. Everrich Electronics is a professional manufacturer for charging cable, type C charger, quick charge, power bank, Bluetooth ear bud, Bluetooth headphone ect., products section. We have been a pioneer for mobile phone accessories field since 2008. Trust our 10 years of manufacturing experience and strong R & D capability, our professional and powerful 8 members in house R & D team will make your OEM/ODM orders happen! Contact us today for more our products information and prices lists, we could offer e-catalogue and free samples to valued clients, Looking forward to hearing from you soon.

Best Regards,
Fancy Hong (Marketing director)

Everrich Electronics (HK) Limited
Tel:86-755-2751 0865
Fax: 86-755-2751 7612

Email analysis :

NOTE : huixinsoft76@foxmail.com
NOTE : ncfyivkgq@pohpe.com
NOTE : Received : from PC-20150903UGRM ([127.0.0.1])
NOTE : by localhost via TCP with ESMTPA;
NOTE : Received : from unknown (HELO pohpe.com) (223.240.81.16)
NOTE : 223.240.81.16

Account Notification (PayPal Phishing)

PayPal Case ID: PP-799-230-585-604

Dear Valued Customer,

Our account review team have currently set a limitation on your account. This may mean someone has used your PayPal account without your knowledge or approval. From time to time, limitations may be placed on accounts when unusual or suspicious activities are detected, to safeguard you from potential losses. We know this can be frustrating, but limitations were set to protect you and your account. To lift the limitations, please download the attached material that we have provided in this email. You may then fill in the form that we have supplied. After PayPal verifies your information, the limitations will be lifted. However, if we request more information, continue to respond promptly to speed up the resolution process. Please do understand that this is a security measure intended to protect your account.

Thank you,
PayPal Security Team

Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, you may download the attachment and follow the steps.

Email analysis :

NOTE : Mime-Version : 1.0
NOTE : Return-Path : < staff2@reports.com >
NOTE : X-Remote : 173.244.162.229

NOTE : (e5.a2.f4.static.xlhost.com)
NOTE : (HELO WIN-38GA3HC4B51.domain.com)
NOTE : Received : from 173.244.162.229 ([140.117.156.191])

NOTE : Account Notification

Phishing analysis :

- The phishing was an html page.
- The page is available here : http://pastebin.com/raw/1BsLNUUu