Friday, January 18, 2013

Sendspace Phishing from fake Habbo Hotel

Sendspace File Delivery Notification:
You've got a file called Webmaster_N****.pdf, (581.8 KB) waiting to be downloaded at sendspace.(It was sent by Adalia ).

You can use the following link to retrieve your file:
Download

Thank you,
Sendspace, the best free file sharing service.


Fetching links :

=======================================================
http://brlifecs.paradisegamers.com.br/wlc.htm
=======================================================

Extracting datas :

paradisegamers.com.br is hosted on 108.163.190.2 by :
=======================================================
aut-num: AS32613
as-name: IWEB-AS
descr: iWeb Technologies Inc.
http://www.iweb.com/
=======================================================
import: from AS174 accept ANY
import: from AS5769 accept ANY
import: from AS6453 accept ANY
import: from AS13768 accept ANY
import: from AS18875 accept ANY
import: from AS30176 accept ANY
import: from AS3320 accept ANY
import: from AS26198 accept ANY
import: from AS54110 accept ANY
=======================================================
export: to AS174 announce AS-IWEB
export: to AS5769 announce AS-IWEB
export: to AS6453 announce AS-IWEB
export: to AS13768 announce AS-IWEB
export: to AS18875 announce AS-IWEB
export: to AS30176 announce AS-IWEB
export: to AS3320 announce AS-IWEB
export: to AS26198 announce AS-IWEB
=======================================================
admin-c: CM-IWEB
tech-c: CM-IWEB
notify: net-admin(at)iweb.ca
mnt-by: MAINT-AS32613
changed: tstpierre(at)iweb.com 20120822 #19:20:54Z
source: RADB
=======================================================
person: Cyrille Mertes
address: Le Groupe iWeb Technologies Inc.
3185, rue Hochelaga
Montreal, Quebec
H1W 1G4
phone: 514-2836-4242
fax-no: 514-286-1292
e-mail: cmertes(at)iweb.com
nic-hdl: CM-IWEB
remarks: SysAdmin
mnt-by: MAINT-AS32613
=======================================================
changed: cyrille(at)iwebgroup.com 20040710 #17:47:14(UTC)
changed: cyrille(at)iwebgroup.com 20040710 #18:07:08(UTC)
changed: cyrille(at)iwebgroup.com 20050505 #20:39:40(UTC)
changed: cmertes(at)iweb.com 20080408 #22:21:18Z
=======================================================
source: RADB
=======================================================
paradisegamers.com.br whois :
=======================================================
domain: paradisegamers.com.br
owner: Nuno Henriques Previato Branco
ownerid: 425.816.418-60
country: BR
owner-c: NHPBR
admin-c: NHPBR
tech-c: CHOAS
billing-c: NHPBR
nserver: ns1.comdatacenter.com
nsstat: 20130116 AA
nslastaa: 20130116
nserver: ns2.comdatacenter.com
nsstat: 20130116 AA
nslastaa: 20130116
saci: yes
created: 20110703 #8525082
expires: 20130703
changed: 20121228
status: published
=======================================================
nic-hdl-br: CHOAS
person: Cássio Henrique Oliveira de Assis
e-mail: cassiohenrique@globomail.com
created: 20110405
changed: 20110418
=======================================================
nic-hdl-br: NHPBR
person: Nuno Henriques Previato Branco
e-mail: nunopb2@yahoo.com.br
created: 20110702
changed: 20110830
=======================================================

EXTRACTING MAIL INFORMATIONS :

=======================================================
Email : sheasingo@sunydutchess.edu,auto-contact@habbo.com
IP : 62.50.39.209,66.132.225.103,89.120.49.5
Using : ecelerity 3.1.3.39918 r(39919)
Title : You have been sent a file (Filename: Webmaster_N******.pdf)
=======================================================

Social engineering is a long path...

Request for a foreign financial trustee/Guidian

My name is Davidson Garang son of one of the biggest cocoa merchants in Cote D' Ivoire who was killed in the last electoral crisis between the deposed former president Laurent Gbagbo and the current president Alassane Ouattara.

My father gave me an instruction to leave Cote D' Ivoire at the wake of the unrest and he gave me a note and some documents to meet with his lawyer in Accra, Ghana over his deposit of a 3 trunk boxes which contained the sum of US$12,000,000.00 deposited with a security company in Ghana as family valuable.

My father who is now dead, told me that any thing can happen to him when I was leaving Cote D' Ivoire because he was seen as the former president ally. He said I should use the proceed of the box through a trusted foreign trustee that can take good care of me and my future by investing the fund into a very profitable business where those that are concerned will benefit while I continue my education.

I met with the lawyer on my arrival in Ghana who assisted me to work out the modalities toward the claiming of the deposit from the security company.What is left is for me presenting a foreign manager as my trustee before the security company in accordance with the bond my late father signed with the security company that I must introduce a trustee before the release of the deposit.

This is why I wrote you this email to be my foreign trustee who will assist to manage this fund in terms that we have to agree upon.Please get back to me as soon as possible for us to proceed if you are prepare to be my trustee.

Wait to hear from you as soon as possible.

Regards,
Davidson Garang

========================================================
Email : davegerag@yahoo.com,davegarang1@yahoo.com
IP : 100.42.219.12,217.160.107.108
Mailer : Microsoft Outlook Express 6.00.2600.0000
========================================================

Thursday, January 17, 2013

Partnership & Investment Message (Mrs. Amina Younis Jaber.)

Hello Dear,

Please do not be embarrassed for this sudden business proposal, In a briefintroduction, I am Mrs. Amina Andrea Younis Jaber a wife to late Major General Abu Bakr Younis Jaber From Libya who was Libyan Minister of Defense under the regime of Colonel Muammar Gaddafi. I myself was a financial consultant in Libya, because of Libyan war I am right now in Republic of Benin with my last child due to the war in my country; my husband was murdered along with my two kids by the National Transitional Council, Libya's interim government fighter...

http://en.wikipedia.org/wiki/Abu-Bakr_Yunis_Jabr
http://www.bbc.co.uk/news/world-africa-12915894

In summary of my business proposal, before my husband's death he deposited in my name (US$18,000,000.00) Eighteen Million United State Dollars in a consignment with a private security company outside my country (Libya) for safe keeping only. We lost everything we had in Libya and I cannot boast of one cent with me as a living person accept this funds, I wish to invest the above mentioned amount in a stable economy outside Africa. My interest is in Land properties or companies with potentials for rapid growth in long terms. I am interested in placing part of the investment plans in your care for better ideas and successful management, so please if your country's by laws allow foreign investment kindly update me. You can contact me for more details via my e-mail: with your reference, note that the fund is drug free and has no money laundering related matter.

PLEASE REPLY TO MY PRIVATE EMAIL: (mrs.younisjaber@rediffmail.com)

I await your kind response.

Yours Sincerely,
Mrs. Amina Younis Jaber.

========================================================
Email : mrs.younisjaber@rediffmail.com,mellisalewis71@yahoo.com
IP : 202.147.200.177,184.82.53.123
Mailer : Microsoft Outlook Express 6.00.2600.0000
========================================================

BANK OF AMERICA ---

ATTENTION;

good day to you and your family, I hope all is well with them in good faith. The management of this bank have receive an mail from Benin republic and the content is well noted. we have good news to inform you in regard of the payment on your own benefit and quick to get your total fund transfer to your account without delays, well we wish to let you know that the amount you needed to send to enable us wire transfer your fund is sum $250. 00 united state dollars to enable us proceed to imternational monetary fund Benin to obtain the needed fund certificate before your fund will hit on your bank account.and you will send it to united state here, so that we can horry them up to proceed getting the fund certificate needed okay. Therefore.your advise to follow the instruction immediately and go to western union Office and send the requested fee immediately because the president of bank of America instructed us to let you know that we should inform you to come up with the remaining balance very urgent $250. 00 dollar only and your total fund $2.5M ( Two Hundred Five Thousand United State Dollars ) will be directly been transfer to your account within 1hours as soon as you send the half of the fee which is $250. 00. You are expected to reconfirm your bank account where you want the fund to been transferred to. I want you to send us an email through (bankofamerica902@ymail.com) Now we are waiting for you to make the payment through western union money transfer with the name of Mr.onuorah johnbosco

RECEIVER NAME............OKOYE EMMANUEL
LOCATION.............WINSLOW MAINE
AMOUNT...............$250
TEXT QUESTION: HOW LONG?
ANSWER: 1HOURS
SENDER'S NAME:
MTCN NO:

Note that your fund will hit to your bank account immediately we receive the payment information because this is your last chance to get your fund without spending anymore money again.Therefore you advise to kindly send the fee immediately and get back to us with the Mtcn Number immediately you receive this message.

Thanks for your kind understanding
BEST REGARDS

DR.AINSWORTH SMITH
INTERNATIONAL MANAGER
BANK OF AMERICA ---

========================================================
Email : fileoffice804@yahoo.cn,bankofamerica902@ymail.com
IP : 41.216.50.180,119.42.242.52,203.188.200.80,203.188.200.226
Mailer : YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
========================================================

Attention: Beneficiary (John Billy)

BARCLAYS BANK PLC.
CLAPHAM JUNCTION BRANCH,
7 ST JOHNS HILL,
SW 11 1 TN, LONDON,
UNITED KINGDOM.
+447405089697

INSTRUCTION TO CREDIT YOUR BANK ACCOUNT WITH US$12,500,000.00

Attention: Beneficiary,

After due vetting and evaluation of your Inheritance file which The Nigerian National Petroleum Corporation (NNPC) in conjunction with the Ministry Of Finance Of the Federal Republic of Nigeria contacted and forwarded to us to see to your immediate payment of the sum of US$12,500,000.00 from their Offshore account with us. We were meant to understand from our findings that you have been going through hard ways to see to the release of your fund (US$12,500,000.00) which has been delayed.

The only thing required from you is to obtain Non-Residence Tax Clearance Certificate which we are not asking you to pay the fee to us here in United Kingdom as the Government of Nigeria have paid us for handling of your payment with other customers. We will help you to see that you obtain the certificate so that we will effect immediate transfer of your over-due inheritance/contract payment (US$12,500,000.00 ) into your designated bank account.

If you follow up our directives, your fund will reflect in your account within five Bank working days from the day you obtain this Certificate. Do not go through anybody again but through this Bank if you really want your fund.

Kindly get in touch with me by (email(b.fundmonitor@london.com) or phone (+447405089697) for further clarification.

Finally, you are advised to forward to this bank a copy of your international passport or your driver's license, your direct telephone number and your receiving account.

Your's faithfully,
Dr. John Billy,
Head, Private Banking Section,
Barclays Bank Plc, London,
United Kingdom.

========================================================
Email : fund.monitor@accountant.com,b.fundmonitor@london.com
IP : 46.29.255.154,65.39.167.178
Mailer : Microsoft Outlook Express 6.00.2600.0000
========================================================

VERY IMPORTANT NOTIFICATION. (Mary Paul)

VERY IMPORTANT NOTIFICATION.

Greetings to you, How are you today? Hope all is well with you and your family? I hope this Notification mail meets you in a perfect condition.
I am Dr. Mary PAUL, This is to Notify you that I have written a Cheque of EIGHT HUNDRED AND FIFTY THOUSAND UNITED STATE DOLLARS on your behalf. Just last month, I had a business contract of about THIRTY FIVE MILLION USD, which has successfully been completed by the Grace of God, Why am doing this is because, before this transaction I said to myself that if this transaction should work out successfully like it has, That I will give to at least 10 Individuals that the Lord will lead me to 850,000.00USD Each. My Dear Friend, you are very lucky and should be Grateful to God that I was directed by his grace to include yourself in my given out of Funds to fulfill and to keep to my Word. I have authorized PASTOR DAVID CHRISTOPHER where I deposited my money to issue you an International certified bank draft cashable at your bank. My dear friend I will like you to contact the PASTOR DAVID CHRISTOPHER for the collection of this international certificated bank draft. The name and contact address of the Person with your Cheque is PASTOR DAVID CHRISTOPHER.

CONTACT:PASTOR DAVID CHRISTOPHER PHONE NUMBER:[+229 9829 2998] EMAIL:pastor_davidch@yahoo.fr

At the moment, I am very busy here because of the investment projects which I And my new partner is having at hand in the United Kingdom. Below is my contact information and details in case you want to Verify or get any confirmation from me but I want you to be rest assured that Your bank draft will be cashed at you nominated Bank. Name: Mary PAUL. Address: 1914 26th ST CT NW. Finally, remember that I have forwarded instruction to the Pastor DAVID CHRISTOPHER on your behalf to send the bank draft to you as soon as you contact him without founder Delay. Please I will like you to accept this token with good faith as this is from the bottom of my heart. Thanks and God bless you and your family. Hope to hear from you soon.
Yours Faithfully,

Dr Mary PAUL.

========================================================
Email : pastor_davidch@yahoo.fr,mail.ylxw.com.cn,paulo_figueiredo2001@yahoo.com
IP : 41.211.205.154,218.84.248.237
Mailer : Microsoft Outlook Express 6.00.2600.0000
========================================================