Sunday, August 24, 2014

EC21 Phishing

Date: 2014.08.20

Dear Valued Customer,

Congratulations! You have received a new inquiry. RidhiSiddhi Agro has sent you an inquiry from [ Trade Leads ] posted on EC21.com. To see the content and reply to this inquiry, please click on the Check Inquiry button below. Please do not reply to this email as it is unmonitored.

Thank you.
EC21 service team
support@ec21.com

Dynamic Marketplace for Global B2B – EC21
Copyright(c) EC21 Inc. All Rights Reserved.

NOTE : [EC21 Inquiry] Urgent Message. RidhiSiddhi Agro
NOTE : Received-Spf : none
NOTE : (google.com: nhhamd.er@ec21.biz does not designate permitted sender hosts)
NOTE : client-ip=78.129.199.67;
NOTE : Received-Spf : none
NOTE : receiver=hola1.gnos1s.com; client-ip=41.150.157.3; envelope-from=nhhamd.er@EC21.biz
NOTE : http://crd.org.np/EC21.com/index.html

Debt Management File

Debt Management File

Our Debt Management File has been developed by our own in-house researchers. It contains 10,014 UK based individuals that have all contacted debt advice resources within the last 2 months. Each record contains the individual’s first name, surname, address, landline number, mobile number, amount of debt and the debt resource they have contacted. The individuals contained within this database are opted in to receive third party communication regarding debt management. The database is supplied in excel format. This database is extremely up to date and accurate. Due to the nature of the database we will only sell this a maximum of five times. The cost of the file is £499 and is sold on a multiple use basis.

Visit us: *** (dot) com

You can contact us on 0113 871 5004, you can reply to this email or we have live chat on our website.

Many thanks

Rockpool Marketing

Tuesday, August 19, 2014

You are about to be credited with the value of $10 million, being part payment of your long overdue monetary entitlement, through a consolidated crude oil account with bank Cyprus

Good Day,

You are about to be credited with the value of $10 million, being part payment of your long overdue monetary entitlement, through a consolidated crude oil account with bank Cyprus This decision was resolved having considered numerous petitions from unpaid contractual/ inheritance fund beneficiaries and, the international communities advise concerning the huge debt Nigerian Government and some third world countries owed to the foreigners In a nutshell, the world powers comprising World bank, International monetary fund and, United Nations, who have single handedly facilitate this move, have advanced further to make it a success by appointing an international financial consultant & Fiduciary agent based in UK, with 100% credibility, in the person of HarrySpencer Consultancy, to scrutinize all eligible beneficiaries and recommend them to Bank Cyprus, to release payment, through the consolidated crude oil account belonging to the countries indebted to the beneficiaries in question, accordingly.

For more information, kindly, make formal contact to HarrySpencer Consultancy as follows:-

Contact Person : Dr. Spencer Hrary
Harry Spencer Consultancy & Fiduciary services,
6 Harrisons Birchanger
Bishop's Stortford
England UK
CM23 5QT
Tel: ++447937456830
info@harryspencerconsultancyuk.co.uk
harryspencerconsultancy@yahoo.co.uk

Do make reference with code pay87217

Keep me posted perhaps I might be of any assistance in between

Yours truly

Solo Olekwai
Tel: +447937468679
(Volunteered off-shore agent and appointed PR)

DRIVE YOUR CAR AND GET PAID ADVERTISING FOR MONSTER ENERGY DRINK.($400 Weekly)

Hello,

We got your email address through a local Business directory on the web. We must apologise for taking some of your valuable time to explain a proposal that will imagine will be of utmost benefit. We are currently seeking individuals Strictly in the United State who would like to make money by simply driving their vehicle advertising for Monster Energy Drink. This is in our view to create more awairness and attract more customers to be willing to patronise us for local and international Enery Drink. This is a basic strategy of the "pay me to drive" concept: Monster Energy Drink seeks people, regular citizens, professional drivers and more to go about their normal routine, only with a small 5x12 size advert for "Monster Energy" plastered on their vehicle. The advert are typically vinyl decals, also known as "auto wraps" that almost seem to be painted on the vehicle, and which will cover any and little portion of the vehicle's exterior surface. This strategy gives Monster Energy Lots of exposure and awareness. The auto wrap tend to be colorful, eye-catching and attract lots of attention. Plus, it's a form of advertising with a captive audience eye catching, people who are stuck in traffic can't avoid seeing the wrapped car alongside them. This program will last for as long as you want it and the minimum you can participate is 2 months and you get paid weekly, also individual with two or more vehicle can only participate once and with one vehicle at a time. You will be compensated with $400 per week which is essentially a rental payment for letting Monster Energy use the space on your vehicle, no fee is required from you. We have experts that would handle the advert placement on your vehicle which will not resort to any damage. You will receive an upfront payment inform of Check via courier service for accepting to carry this advert on your vehicle. You will also be eligible to participate in our monthly draw for various prizes and also get some percentage discount on the Monster Energy Drink can that is purchase in our various store. It is very easy and no application fee is require, contact us through email(info.monsterenergy@consultant.com) along with the following information if you are interested in these offer.

Full Name:
Age:
Sex:
Occupation:
Physical Address:
City:
State:
Zip code:
Make of vehicle and year:
Exterior Color of vehicle:
Telephone numbers:
Email:

We will contact you immediately we receive this information.

Kind Regards!

Monster Energy Company
Address: 1 Monster Way
Corona, CA 92879
Website: www.monsterenergy.com
Email: info.monsterenergy@consultant.com
Phone: Phone: (360)-836-1570 Ext. 585

Unable to process your most recent payment

This e-mail has been sent to you to inform you that we were unable to process your most recent payment. Please check attached file for more detailed information on this transaction.

Pay To Account Number: **********94
Due Date: 20/05/2014
Amount Due: 950.28

IMPORTANT: The actual delivery date may vary from the Delivery by date estimate. Please make sure that there are sufficient available funds in your account to cover your payment beginning a few days before Delivery By date estimate and keep such funds available until the payment is deducted from your account. If we fail to process a payment in accordance with your properly completed instructions, we will reimburse you any late-payment-related fees. Copyright HSBC 2013. All rights reserved. No endorsement or approval of any third parties or their advice, opinions, information, products or services is expressed or implied by any information on this Site or by any hyperlinks to or from any third party websites or pages. Your use of this website is subject to the terms and conditions governing it. Please read these terms and conditions before using the website..

< Payment00052014.zip >

Phishing Apple

Chère Cliente, Cher Client,

Nous vous accusons bonne réception de votre commande effectuée sur notre site Apple et nous vous en remercions. Votre commande est en préparation, vous recevrez un e-mail vous confirmant l'expédition de votre colis. Vous trouverez des informations concernant votre commande et le produit que vous avez commandé ci-dessous.

NUMÉRO DE COMMANDE : U6100484802

Information sur la commande

Date de commande : 08-08-2014 08:18:11 CEST France
Livraison : Transport express

Apple - Macbook - Ordinateur portable 13"(MD760F/A) 1 @ EUR 1366,30 chacun

Descriptif technique :

- Intel Core i5 (4ème génération) 1.3 GHz.
- Rétroéclairage par LED.
- Contrôleur de mémoire intégré, technologie Intel Turbo Boost 2.0.
- Processeur graphique Intel HD Graphics 5000.
- Haut-parleurs stéréo , deux microphones.
- Batterie Technologie Lithium-polymère.
- Caméra Webcam intégrée.
- Mémoire RAM max prise en charge 8 Go.
- Système d'exploitation Apple OS X 10.9 Mavericks.

ASSISTANCE ET SERVICE CLIENTÈLE - http://www.apple.com Service clientèle. Dans l'éventualité d'un probléme concernant votre produit, la facturation ou votre commandes, veuillez contacter notre service de support technique à l'adresse suivante http://www.apple.com. TÉLÉCHARGER VOTRE FACTURE - vous disposez de 7 jours pour télécharger avant l'expiration du lien.

Télécharger Votre facture concernant votre commande U6100484802 du 07 Aout 2014

Veuillez noter que: le nombre d'options disponibles est susceptible de varier en fonction du mode de règlement choisi et de l'état actuel de votre commande.

Total: EUR 1310.40
Frais de Port: EUR 55.90
Total of Order: EUR 1366,30
Copyright © 2014 Apple Inc. Tous droits réservés.

NOTE : contact@apple.com [mailto:contact@apple.com]
NOTE : Accusé de réception de votre commande chez apple.com
NOTE : CLICKED Votre facture concernant votre commande U6100484802 du 07 Aout 2014
NOTE : http://www.factureapple.com/Invoice_U6100484802_Apple.pdf.zip
NOTE : WE HAVE A TROJAN...

Invoice_U6100484802_Apple.pdf.zip DETAIL :
=====================================================
AVG : 71720563AA : 20140819
AVware : Trojan.Zip.Bredozp.b(v) : 20140819
Agnitum : Trojan.DL.Agent!5iZWy0viGN4 : 20140818
AntiVir : HIDDENEXT/Worm.Gen : 20140819
Antiy-AVL : Trojan/Win32.TSGeneric : 20140819
Avast : Win32:Malware-gen : 20140819
ClamAV : Suspect.DoubleExtension-zippwd-15 : 20140819
Comodo : Heur.Dual.Extensions : 20140819
F-Prot : W32/Heuristic-300!Eldorado : 20140819
GData : Archive.Malware.FakeExt.N@susp : 20140819
Jiangmin : Heur:TrojanDropper.WinRar : 20140815
K7AntiVirus : Trojan(7000000c1) : 20140818
K7GW : Trojan(7000000c1) : 20140818
Kaspersky : HEUR:Worm.Script.Generic : 20140819
TrendMicro : HEUR_NAMETRICK.A : 20140819
VIPRE : Trojan.Zip.Bredozp.b (v) : 20140819
=====================================================

factureapple.com HEADER :
=====================================================
Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Date: Thu, 13 Feb 2014 21:19:10 GMT
Server: Apache mod_fcgid/2.3.10-dev
X-Powered-By: PHP/5.4.23
X-Pingback: http://www.factureapple.com/xmlrpc.php
Content-Length: 5439
Content-Type: text/html; charset=UTF-8
=====================================================

factureapple.com DNS :
=====================================================
factureapple.com A 591 IP: 192.186.227.129
factureapple.com NS 3599 Target: pdns04.domaincontrol.com
factureapple.com NS 3599 Target: pdns03.domaincontrol.com
factureapple.com SOA 3599 MNAME: pdns03.domaincontrol.com
RNAME: dns.jomax.net
Serial: 2014020900
Refresh: 28800
Retry: 7200
Expire: 604800
factureapple.com MX 3599 Target: smtp.secureserver.net
factureapple.com MX 3599 Priority: 10
Target: mailstore1.secureserver.net
=====================================================