Friday, November 14, 2014

ABOUT YOUR PENDING PAYMENT..

Dear Friend,

I must apologize that this letter is quite lengthy; please treat without prejudice. The ministry of finance could not endorse the payment of your inheritance fund because the channel in which you presented your claim to the Fund clearing Department was suspected as a "Ghost Claim". The word "Ghost claim" was coined in West Africa and in its simplest meaning, it refers to as any claim presented by an applicant without making a live appearance. The inheritance ghost claim channel was adopted by corrupt administrators in the early 70s; It is commonly used by politicians of today to loot and warehouse embezzled funds in offshore accounts with the help of foreign collaborators.

Any fund suspected to be "Ghost Claim" undergoes proper scrutiny since it was reported that politicians is this 4th republic and their foreign cohorts have stolen and concealed millions of US Dollars in foreign accounts through inheritance channels. According to crime scientists, internet miscreants did expose the existence of ghost claims by using the same channel to perpetrate what is widely known as Advance Fee Fraud; thereby making it difficult to distinguish between genuine inheritance claims and the laundering of looted funds by government functionaries. I must bring to your notice that over a half dozen applicants had so far attempted to claim this fund over the years, which is also the reason I was mandated to verify the rightful beneficiary from all the applicants observed.

Find you trustworthy and as someone i can confine in; it's a sign of reference that I have chosen to work with you amongst other applicants. Though, i am aware that you are equally not the ORIGINAL next of-Kin of the fund in question, but as the lead investigator, I will use my umpire immunity to bestow the fund on you without a hitch, and my employers will not hesitate to present you to the Fund Clearing Department as the sole-beneficiary of the fund. If you would agree to split the fund 50%-50% with me, I will nominate you as the bonafide beneficiary and guide you accordingly to enable you receive the fund in less than two working weeks. If you're interested, please indicate your interest by providing your phone number for further details.

Thanks in anticipation; I hope to read from you at your earliest convenience.

Yours Faithfully,
ADEBOLAJI COLE.
Chief Investigator, Foreign Payment Division..
Federal Code Of Conduct Bureau.
adebolajicole@yahoo.com

Email analysis :

NOTE : X-Remote : 162.254.163.243 ()
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : X-Get-Message-Sender-Via : neradovi.arvixevps.com: authenticated_id: test@ANGEBOTECHECK.COM
NOTE : Content-Type : text/plain
NOTE : Received : from unknown (HELO neradovi.arvixevps.com) (162.254.163.243)
NOTE : Received : from [41.138.187.222] (port=55180 helo=IKEMEFUNA-PC) by neradovi.arvixevps.com

Virus from Essex...

Virus relayed from essex.org.uk :


Voice Message #0168935504
====================================
NOTE : X-Remote : 208.118.175.61 ()
NOTE : X-Sender : martin.smith@essex.org.uk
NOTE : Content-Type : text/plain; charset=US-ASCII; format=flowed
NOTE : Received : from unknown (HELO essex.org.uk) (208.118.175.61)
NOTE : Received : from domain.local (domain.local [192.168.0.25]) by essex.org.uk (Postfix)
NOTE : User-Agent : Roundcube Webmail/1.0.1
NOTE : Return-Path : < martin.smith@essex.org.uk >
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Voice Message #0168935504
====================================
Voice redirected message

http://zorcorp.com/bankline/message.php
Sent: Thu, 13 Nov 2014 12:18:30 +0000
====================================


Voice Message #0461019860
====================================
NOTE : X-Remote : 50.246.114.145 (mail.nbaccorp.com)
NOTE : X-Sender : martin.smith@essex.org.uk
NOTE : Content-Type : text/plain; charset=US-ASCII; format=flowed
NOTE : Received : from mail.nbaccorp.com (HELO essex.org.uk) (50.246.114.145)
NOTE : Received : from domain.local (domain.local [192.168.0.25]) by essex.org.uk (Postfix)
NOTE : User-Agent : Roundcube Webmail/1.0.1
NOTE : Return-Path :
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Voice Message #0461019860
====================================
Voice redirected message

http://vsrwhitefish.com/bankline/message.php
Sent: Thu, 13 Nov 2014 12:16:02 +0000
====================================


Voice Message #0479943726
====================================
NOTE : X-Remote : 82.79.67.81 (impress.ro)
NOTE : X-Sender : martin.smith@essex.org.uk
NOTE : Content-Type : text/plain; charset=US-ASCII; format=flowed
NOTE : Received : from impress.ro (HELO essex.org.uk) (82.79.67.81)
NOTE : Received : from domain.local (domain.local [192.168.0.25]) by essex.org.uk (Postfix)
NOTE : User-Agent : Roundcube Webmail/1.0.1
NOTE : Return-Path : < martin.smith@essex.org.uk >
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Voice Message #0479943726
====================================
Voice redirected message

http://vietnamflight.vn/bankline/message.php
Sent: Thu, 13 Nov 2014 12:38:01 +0000
====================================


Voice Message #0830285419
====================================
NOTE : X-Remote : 209.76.245.60 ()
NOTE : X-Sender : martin.smith@essex.org.uk
NOTE : Content-Type : text/plain; charset=US-ASCII; format=flowed
NOTE : Received : from unknown (HELO essex.org.uk) (209.76.245.60)
NOTE : Received : from domain.local (domain.local [192.168.0.25]) by essex.org.uk (Postfix)
NOTE : User-Agent : Roundcube Webmail/1.0.1
NOTE : Return-Path : < martin.smith@essex.org.uk >
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Voice Message #0830285419
====================================
Voice redirected message

http://karich.com.my/bankline/message.php
Sent: Thu, 13 Nov 2014 11:59:55 +0000
====================================


Voice Message #1032155137
====================================
NOTE : X-Remote : 173.10.48.121 (173-10-48-121-michigan.hfc.comcastbusiness.net)
NOTE : X-Sender : martin.smith@essex.org.uk
NOTE : Content-Type : text/plain; charset=US-ASCII; format=flowed
NOTE : Received : from 173-10-48-121-michigan.hfc.comcastbusiness.net (HELO essex.org.uk) (173.10.48.121)
NOTE : Received : from domain.local (domain.local [192.168.0.25]) by essex.org.uk (Postfix)
NOTE : User-Agent : Roundcube Webmail/1.0.1
NOTE : Return-Path : < martin.smith@essex.org.uk >
NOTE : Mime-Version : 1.0
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Voice Message #1032155137
====================================
Voice redirected message

http://zorcorp.com/bankline/message.php
Sent: Thu, 13 Nov 2014 12:41:17 +0000
====================================


Domains related to scams :


====================================
http://karich.com.my/bankline/message.php
====================================
Registrant Name: Joanne Chin Karich
Registrant Street: Sdn Bhd No.1, Jalan 27 A, Kawasan 16, Sungai Rasa
Registrant City: 41300 Kuala Lumpur Wilayah Persekutuan
Registrant Country : Malaysia
Registrant Phone : (Tel) 03-33928488 (Fax) 03-33929069
Registrant Email : joanne@karich.com.my
====================================

====================================
http://zorcorp.com/bankline/message.php
====================================
Registrant Name : john zorbas
Registrant Street : 80 collard st. suite 200
Registrant City : toronto
Registrant State/Province : ON
Registrant Postal Code : m5r1g2
Registrant Country : CA
Registrant Phone : +1.4165646882
Registrant Email : zorcorp@rojers.blackberry.net
====================================

====================================
http://vietnamflight.vn/bankline/message.php
====================================
Registrant Name : Công ty NetNam
Registrant Owner Name : Công Ty TNHH Du Lịch Châu Á Thái Bình Dương
DNS : ns1.sapatours.com , ns2.sapatours.com
====================================

====================================
http://vsrwhitefish.com/bankline/message.php
====================================
Registrant Name : Betty Luderman
Registrant Organization : Village Square Realty
Registrant Street : 411 Spokane Ave
Registrant City : Whitefish
Registrant State/Province : MT
Registrant Postal Code : 59937
Registrant Country : US
Registrant Phone : +1.4068623541
Registrant Email : bettylud@bresnan.net
====================================


Scam.cz action :


====================================
- Clicking one of the link.
- Download : Secure-messageBankline_pdf.zip
- Open : Secure-messageBankline_pdf.zip
- Redirect to http://www.rbs.co.uk/corporate/electronic-services/g2/datalink.ashx
- Analysis : Secure-messageBankline_pdf.zip
====================================


Secure-messageBankline_pdf.zip is a trojan :


====================================
AVG : Luhe.Fiha.A
AVware : Win32.Malware!Drop
Ad-Aware : Trojan.GenericKD.1973036
Avira : TR/Crypt.ZPACK.94167
Baidu-International : Trojan.Win32.Battdil.bI
BitDefender : Trojan.GenericKD.1973036
Cyren : W32/Trojan.YDSE-4442
DrWeb : Trojan.Upatre.115
ESET-NOD32 : Win32/Battdil.I
Emsisoft : Trojan.GenericKD.1973036 (B)
F-Prot : W32/Trojan3.MDD
F-Secure : Trojan-Downloader:W32/Upatre.I
Fortinet : W32/Upatre.BTC!tr
GData : Trojan.GenericKD.1973036
Ikarus : Trojan-Spy.Zbot
Kaspersky : Trojan.Win32.Staser.aqlf
Malwarebytes : Trojan.Upatre
McAfee : Artemis!C852DFF3E4DE
MicroWorld-eScan : Trojan.GenericKD.1973036
Microsoft : TrojanDownloader:Win32/Upatre
Norman : Upatre.FH
Qihoo-360 : HEUR/QVM20.1.Malware.Gen
Sophos : Troj/Zbot-JFC
Symantec : Downloader.Upatre
TrendMicro : TROJ_INJECT.WJSP
====================================

Thursday, November 13, 2014

BUSINESS PARTNERSHIP

Hello, dear!

My name is Dr. Paul Mirza , Operations / Regional Manager with a Bank here in United Kingdom. During the annual audit of our bank, I discovered abandoned / unclaimed funds, the sum total of which is (15 million British pounds) in an account belonging to one of our foreign customer’s .I found that he had no particular family or designated beneficiary on the account, after going through his writings in our bank. I am sincerely and consciously seeking to present you as the trustee to the deceased so that the sum of 15 million pounds sterling will be converted to your custody and we shall invest the fund in your country into a profitable business venture that will yield profit and create employment to better the life of people because i have no ideal of growing business in your country and we shall share in a percentage ratio of 50% for me and 40% for you ,while 10% will be for all costs of the transaction After examination and acceptance of this offer, please forward this information to me immediately on my private e-mail address for more discussion: drpaulmirza@yahoo.com

-Your full name:
-Your full contact address:
-Your mobile phone direct number:

Sincerely,
Dr.Paul Mirza
Email: drpaulmirza@yahoo.com

CHAIRMAN UNITED STATES FEDERAL RESERVE

FROM THE DESK OF DR. BEN SHALOM BERNANKE
CHAIRMAN UNITED STATES FEDERAL RESERVE/
FUND MANAGEMENT & REFORM COMMITTEE
(SUB SECTION WEST AFRICAN MONITORING UNIT)
Our Ref: PHC/WAMU/BJN/ZZ057

NOTIFICATION OF CREDIT FROM UNITED STATES FEDERAL RESERVE.

Attn: Beneficiary,

We have this day received a payment credit instruction from the Federal Government of Benin to credit your account with your full Inheritance fund of US$9.8Million from the Benin reserve account with our UNITED STATES FEDERAL RESERVE. However, you are required to provide the followings data below:

{1}.Your Full Name and Address.
{2}.Your Confidential Tel, Cell and Fax
{3).Your Bank name and address.
{4).Your A/c Name and A/c Numbers.:
(5).Your Swift Code / Routing Numbers.

Please do provide the above information accurately, because this office cannot afford to be held liable for any wrong transfer of funds or liability of funds credited into a ghost account. Secondly,the only money you pay is for the transfer to take place is just $320usd only being the approval payment certification from the government of Benin, and you are giving a limited time to send the payment and please be advise that you are to send the payment to American Embassy office in Benin and you are to use this information to send the $320and please be informed that you are not going to pay any other payment to any body and do not be deceived by any body to send any other payment. Here is the information you will use to send the payment through our money gram transfer office.

Name: Anozie Eze Ezeaso
Country: Benin Republic
City: Cotonou
Question: When
Answer: Now
Amount: $320usd

Send to me the following info once you send the payment.
Senders Name:
Location:
MTCN / Reference #:
+229-68163258

Upon confirmation of the payment, note that your funds will be credited into your provided account within 24hours. Thanks for transacting with the federal Reserve Bank while we looking forward to serving you with the best of our service. Accept my congratulations in advance.

GOD BLESS AMERICA.

Thanks and God bless you.

Regards,
Yours in Service,
Mr. Ben S. Bernanke

Chairman United States Federal Reserve
Email: ( bmrbenshalon@yahoo.com.hk)
Tell:+229-68163258

Dear E-mail Owner

Dear Sir,

Are you the owner of this e-mail address? If yes, then congratulations! Your email has won US$2,500,000.00 from the Human Development Foundation draws of 11/09/14 held in Bangkok, Thailand with Free Ticket Lucky Numbers #: 76432948900. Human Foundation grant award is conducted online annually and geared towards global humanitarian development and poverty eradication. Participants emails were choose worldwide from different categories based on their personal and business development of their respective environments. To collect your prize money of US$2,500,000.00 (Two million, Five hundred thousand US dollars), kindly contact your Appointed Payment Manger, Mrs. Julian Thatcher on Email: (marythather392@yahoo.co.uk OR psriatcher@yahoo.com.hk) Mrs. Julian will give you guidelines on how to claim your lottery prize of US$2,500,000,00 via our available payment methods. Ensure that you enclose your following winnings and personal claims information in your contact email message to Mrs. Julian Thatcher.

Name:
Telephone & mobile numbers:
Resident country:
City:
Address:
Age:
Sex
Winnings Lucky number:
Month of draw:
Occupation:
Job title:

Contact Name: Mrs. Julian Thatcher
Email: marythather392@yahoo.co.uk OR psriatcher@yahoo.com.hk

Once again Congratulations!

Yours sincerely,

Margarita Bravo
Online Notification Officer

SCAM VICTIMS COMPENSATION PAYMENT 2014.

FINANCE DEPARTMENT
SCAM VICTIMS COMPENSATIONS 2014.

Attention: Prospective Beneficiary,

REF/PAYMENTS CODE: FJN/sterl/03478/01 ($ 750,000 THOUSAND USD)

This is to bring to your notice that we are ambassadors and delegatees of the UNITED NATIONS through the INTERNATIONAL MONETARY FUND (IMF) and the WORLD BANK to the UNITED KINGDOM to grant you solace in the sum of $750,000 USD (Seven Hundred and Fifty Thousand Dollars). Your name was listed and approved for this payment as one of the victims of fraud owing to a dealth in finance securities on our part to be paid the above stated amount, Please get back to this office as soon as you get this email for immediate payments and transfer of your $750,000 USD. To be sure that you are the bonafide listed person of locus standi. Send to us the following details only in upper case lettering

1) Full Name:
2) Residential address:
3) Mobile phone number:
4) Occupation:

Get back to us to claim the emolument of your monies.

Yours Faithfully,
Barrister Alex G. Osborne