Sunday, December 21, 2014

Dear Esteemed Funds

Ref: Transfer Payment Update
Approved Amount Valued: US$1,450,000.00

First, please accept our apologies for the Long Overdue Payment which should have been paid to you for the Past 6 months but was not issued due to some bad and corrupt officials. However, it is my delight to inform you that every modalities has been finalized to make funds available to you via Bank to Bank Transfer.

You are to contact Mr. Jean Philip, Chief Financial Officer for Business Operations and Support, Regions Bank- Birmingham, Alabama USA. Mr. Jean Philip is in custody of your payment file in order to insure a hitch free transfer to your choice bank account.

Contact Information’s' Stated Below.

Managers Name: MR. JEAN PHILIP
Contact E-mail Address:mr.jeanphilip@yahoo.fr

We are all aware of the Internet Scams going on around the globe, but be rest assured that this is %100 legitimate and risk-free, therefore no need to be skeptical over this because all necessary modalities has been concluded and all legal endorsement has been done and in place.

You are advised to contact Mr. Jean Philip of Regions Bank as soon as possible via the above contact details.

Yours Sincerely,

Mr. Tim Howard.
For: Senior Controller
Treasure Fund Administration
British Government Springwell Offshore Clearing House

ATM Visa card with vital documents valued at $2.5 million in Memphis TN USA.

Dear Unpaid Beneficiary,

This email is coming to you as a reminder concerning your pending parcel that has been with FedEx for a very long time. Due to the petitions received by the UNCC regarding unfinished transfers going on worldwide involving Governments of foreign lands, custom officials and security agents who have been delaying people's funds, consignments,parcels and other valuables in their custody, a consensus has been reached that all the beneficiaries who have not received their fund be attended to irrespective of the part of their world. The United Nation Anti-crime commission and the United State Government have ordered the money recovered sent to you immediately. I am pleased to to inform you that the said fund has been successfully transferred into an ATM Visa card for convenient access to your fund and for security reasons. In this light, FedEx courier company had carried out delivery to your residential address. The package left United Kingdom on January 3rd 2013 and since on the 5th of January 2013 it has been at Memphis, USA awaiting clearance. To track your package, go to www.fedex.com/tracking and insert the tracking number below to view your parcel status.

www.fedex.com/tracking
Tracking Number: 800277347645

To effect the clearance of your parcel containing an ATM Visa card with vital documents valued at $2.5 million in Memphis TN USA, you are advised to contact the director of payment via his email address now!

Agent: Marion Mclean
Email: marionmclean_fedex@aol.com
Phone Number: +44 703 191 6706

You are hereby advised to provide him with the information below so he can immediately have it sent out to FedEx in Memphis for parcel clearance to you.

1. Your full name:
2. Your physical address
3. Your house phone:
4. Your cell phone:

This is important and as such your immediate response will do you Good.

From the desk Jonathan Howkins,
For Ambassador Susan Rice,
Fmr. United States Ambassador to the United Nations.

YOUR PACKAGE WITH (Tracking Number: 800277347645) IS IN MEMPHIS.

SUSAN RICE.

Consignment box worth’s of $5.2 million

Our New diplomatic agent is currently stranded at your International airport now,

Kindly contact him via his private email address,(diplomantamos@yahoo.com ) Contact person, Name Agent diplomant Mr Amos Martins phone number (646) 657-3273. So contact him with all your information to deliver your consignment box worth’s of $5.2 million. out of (BRD)Benin Republic department.And from the managing director of Eco Bank Mrs Esther Philip

(diplomantamos@yahoo.com)
Telephone +22965506036

Beneficiary to the total sum of £28,000,000.00GBP

Attention Beneficiary,

We wish to notify you again that you were listed as a beneficiary to the total sum of £28,000,000.00GBP (Twenty Eight million British Pounds) since this is our second letter to you).

We contacted you once again because you bear the surname identity, the notice once more has just been brought to our attention for the last time.

Upon our mutual agreement, our Legal firm here will present you to the Probate as the new beneficiary to the inheritance since there is no written will. Note that we can do this because of the surname identity. I will provide you with all the necessary documents/legal services as part of our role, as our services include the preparation of Letters of administration and powers of attorney to our clients. So we could provide the necessary services so to secure the release of the money in your name as the next of kin.

All the papers will be processed In your acceptance of this deal, we request that you kindly forward to us your letter of acceptance,

1) Your full Name:===============
2) Residential:==================
3) Direct Cell-Phone/Mobile:=====
4) Age and Marital Status:=======
5) Company Name and Position:====
6) Occupation:===================
7) Copy of valid ID==============

Get back to me on my private email address;( barr.smith2015@gmail.com )for security reasons.

Waiting for your prompt reply.

Yours faithfully,
Barr G Smith
London UK
Phone:

+447031996257
+447031931338
+447045718064
+44 7024057388

Fax:

+448447741719

My Private E-mail:barr.smith2015@gmail.com

ALERT FROM JPMORGAN CHASE BANK

Greetings to you .

How are you doing today i hope all is well with you and your family, My name is Ruice Smith, I work as an accountant with the Chase Bank here in the UNITED STATE OF AMERICA, I want to bring to your notice in respect of your compensation worth $2.5m United State Dollars funds coming from Africa in conjunction with the Uk Board of Trustees, This is to inform you that you are kindly advice not to send any money to anyone over there in UK or Africa because your funds is presently here in our bank here in the UNITED STATE OF AMERICA.

I will kindly want you to please re-confirm this information and get back to me before i can make a remittance regarding your funds to you.

Note: I will kindly advice you to keep this letter a very confidential one and never let out to anyone until this transfer is been completed because we don't know who is next to you.Less i forget, will want you to kindly get back to my boss head of department with his below information , name of your next of Kin and also a scan copy of your driver License and your phone number.

Head Of Department Details to send the information requested to:

Name: BARRISTER ELLIOT
E-Mail Address: barristereliott@gmail.com
Phone Number: (732) 535-7915

I hope to hear from you soonest.

Thanks and Remain Blessed
Ruice Smith
Representing Chase Bank.

Saturday, December 20, 2014

Inquiry From TradeKey (Tradekey Phishing)

TradeKey Logo

Dear Tradekey Customer,

You have received a new business inquiry from Rashid al-Maktum on Tradekey.com unfortunately, we are unable to deliver further inquiries to your email address. Please visit the Tradekey.com member services centre to verify your email account information.

*Please Sign in here with your email-address and e-mail password to verify your account.

Wishing you the very best of business,

Thank you for using our services.

http://int2.tkcdn.com/lang/images/iso_horizontal.gif

Privacy Policy - Terms of Use - Intellectual Property Policy
Copyright © 2014 TradeKey.com

Phishing analysis :

CLICK : *Please Sign in here with your email-address and e-mail password to verify your account.
OPEN : http://staging.sojournmusic.com/tradekey.com/index.html
SCREENSHOT :


ACTION : FILL FORM
CLICK : Sign In
REDIRECT : http://www.tradekey.com/
ANALYSIS : http://staging.sojournmusic.com/ RELAY TRADEKEY PHISHING
ANALYSIS : CODE SOURCE OF THE PHISHING PAGE : http://pastebin.com/raw.php?i=Rjp0N096

Email analysis :

NOTE : Received-Spf : client-ip=95.215.227.59;
NOTE : X-Source-Args : /usr/sbin/proxyexec -q -d -s /var/run/proxyexec/cagefs.sock/socket /bin/cagefs.server
NOTE : Return-Path : < wwwiliad@dedicated1.i-spy360.com >
NOTE : Mime-Version : 1.0
NOTE : X-Source-Dir : iliad.mu:/public_html/wp-includes/Text/Diff/Renderer
NOTE : X-Php-Script : www.iliad.mu/wp-includes/Text/Diff/Renderer/jamb.php for 41.151.173.119


NOTE : Content-Transfer-Encoding : 8bit
NOTE : X-Get-Message-Sender-Via : dedicated1.i-spy360.com
NOTE : :authenticated_id: wwwiliad/only user confirmed/virtual account not confirmed
NOTE : Content-Type : text/html
NOTE : Received : from blackmartini.mu (vps.i-spy360.com. [95.215.227.59])
NOTE : Received : from wwwiliad by dedicated1.i-spy360.com with local (Exim 4.84)
NOTE : (envelope-from < wwwiliad@dedicated1.i-spy360.com >)
NOTE : Inquiry From TradeKey

FINAL NOTE :

NOTE : illiad.mu was used to send the phishing. (Leaked wordpress installation)
NOTE : The phishing is hosted by sojournmusic.com (Leaked wordpress installation)
NOTE : The phishing mail was sent by 41.151.173.119