Thursday, February 5, 2015

Hi pretty

Hello pretty,

Hi pretty Angel, i saw your profile picture and i must confess you look so elegantly sexy and beautiful. I am a 54Years businessman who have stayed in New York for years and my business takes me to different countries of the world, am a German by birth currently leaving in Europe. Am divorced since May of last year 2014, i have a daughter kate who is 12years old and now stays with my sister in Liverpool. I very much admire your beauty, i love reading love books, i like swimming, i like surfing on the beach, i like walking along the beach and i like your smile, cause you are so beautiful. Since i lost my first wife to cancer in 2010, i remarried in 2012 but that marriage ended because i discovered my ex wife was cheating on me, my intention was to stay away from relationship because i discovered that most women i have met until now are only interested in my money and not in a relationship, but that has changed since i saw your picture and how beautiful you are as a woman, i also believe you are a very responsible lady that can take care of her man and make him happy, so i decided to email you. I know you will probably be wondering how i got your email, the secret is that i am a Government intelegency contractor for many countries U.S, Europe and Asia, i have access to a lot of personal information.

I know it will all sound strange to you but i will really like to know more about you and will be happy if you email me and tell me a little about yourself.

I await your message, have a beautiful day pretty angel.

From an admirer,

Jack.

Email analysis :

NOTE : poornima.gunasekera@mea.gov.lk
NOTE : X-Originating-Ip : [41.190.2.200]
NOTE : Received : from vije.mea.gov.lk (vije.mea.gov.lk. [203.115.21.154])
NOTE : Received : from localhost (localhost.localdomain [127.0.0.1])
NOTE : by vije.mea.gov.lk (Postfix)
NOTE : Received : from vije.mea.gov.lk ([127.0.0.1])
NOTE : by localhost (vije.mea.gov.lk [127.0.0.1])
NOTE : Received : from vije.mea.gov.lk (vije.mea.gov.lk [203.115.21.154])
NOTE : by vije.mea.gov.lk (Postfix)
NOTE : X-Mailer : Zimbra 6.0.7_GA_2473.F11 (zclient/6.0.7_GA_2473.F11)

Please Read Your Message

My name is Aisha, a 65 years old suffering from a long time cancer of the breast, I have decided to Donate the sum of $8 million(Eight Million United state Dollars) to charity and individual through you for the good work and to help the motherless, less privileged and also for the assistance of the widows.i have been battling with this deadly disease which most specialist doctors have confirmed that i may not survive no matter what,I want you to receive this money and use it to help the less privileges, widows and orphans.
Yours Sincerely, Send me email direct to: aishahalimamohd@yahoo.com

Aisha Mohd

Email analysis :

NOTE : khaterkhan@hotmail.com
NOTE : aishahalimamohd@yahoo.com
NOTE : Content-Type : text/plain
NOTE : Mime-Version : 1.0
NOTE : X-Get-Message-Sender-Via : sekilau.cynethost.com:
NOTE : authenticated_id: dfprinte/only user confirmed/virtual account not confirmed
NOTE : Return-Path : < dfprinte@sekilau.cynethost.com >
NOTE : Received : from sekilau.cynethost.com (sekilau.cynethost.com. [202.75.56.186])
NOTE : Received : from dfprinte by sekilau.cynethost.com with local (Exim 4.84)
NOTE : (envelope-from )
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Please Read Your Message

YOUR ATM CARD IS 90% LIMITED FROM TRANSACTING

YOUR ATM CARD IS 90% LIMITED FROM TRANSACTING

Dear Valued Customer.

Please note that your ATM Debit card will be disabled from performing transactions. Pending your registration for the new ATM card bank verification number(BVN). Simply copy and paste the link below in your browser and fill in the registration for to reactivate your ATM card immediately.

CLICK HERE
http://bit.ly/1F09G0B

Note that you can also get information on atm reactivation by sending us a email at:
roselinemokew@gtbank.com

Move to inbox if found in spam to enable you click on reactivation link.
YOUR ATM HAS BEEN DISABLED!!!

SCAM analysis :

CLICK : http://bit.ly/1F09G0B
REDIRECT : http://pradabada.wc.lt/tunchy/gtb.html
SCREENSHOT :


Email analysis :

NOTE : X-Yahoo-Newman-Property : ymail-4
NOTE : Return-Path : bank@gtbankon.biz
NOTE : YOUR ATM CARD IS 90% LIMITED FROM TRANSACTING
NOTE : roselinemokew@gtbank.com

Votre identifiant Apple a été utilisé ( Phishing Apple )

Chère/Cher Client(e),

Votre identifiant Apple a été utilisé lors d’une connexion à iCloud à partir d’un iPad.
Date et heure : 05 Février 2015 à 00:16

Si les informations ci-dessus vous semblent familières, vous pouvez ignorer cet e-mail.

Si vous ne vous êtes pas récemment connecté(e) sur un iPad en utilisant votre identifiant Apple et si vous pensez qu’une autre personne a eu accès à votre compte, il serait prudent de réinitialiser votre mot de passe vos informations bancaires sur le site Mon identifiant Apple

(mon identifiant).

Cordialement,
L’assistance Apple

Phishing analysis :

CLICK : mon identifiant
OPEN : http://jsstt.com/hd/7/
REDIRECT : http://www.chateau-issan.com/includes/functions/dre/Apple/***/Apple/
SCREENSHOT :



CLICK : LOGIN
REDIRECT : http://www.chateau-issan.com/includes/functions/dre/Apple/***/Apple/inscription/
SCREENSHOT :



CLICK : VALIDER MES INFORMATIONS
REDIRECT : https://appleid.apple.com/

Email analysis :

NOTE : Service-apple@inc.fr
NOTE : bonnet.peinture26@orange.fr
NOTE : Received : from provedmedia ([127.0.0.1])
NOTE : by provedmedia with Microsoft SMTPSVC(8.5.9600.16384);
NOTE : Received : from unknown (HELO provedmedia) (72.251.225.115)
NOTE : X-Library : Indy 8.0.25
NOTE : Votre identifiant Apple a été utilisé

jsstt.com whois :

Domain Name:jsstt.com
Registry Domain ID:
Registrar WHOIS Server: whois.hichina.com
Registrar URL: http://www.net.cn/
Updated Date:2012-11-01T04:54:21Z
Creation Date:2009-12-16T02:10:56Z
Registrar Registration Expiration Date:2015-12-16T02:10:56Z
Registrar: HICHINA ZHICHENG TECHNOLOGY LTD.
Registrar IANA ID: 420
Registrar Abuse Contact Email: abuse@list.alibaba-inc.com
Registrar Abuse Contact Phone: +86.4006008500

Registry Registrant ID:hc736011586-cn

Registrant Name:xiong yang
Registrant Organization:yangxiong
Registrant Street:china jiangsu suzhou ganjiang 888# shuitiantang,,
Registrant City:suzhoushi
Registrant State/Province:jiangsu
Registrant Postal Code:215000
Registrant Country:CN
Registrant Phone:+86.051265307866
Registrant Phone Ext:
Registrant Fax:+86.051265307866
Registrant Fax Ext:
Registrant Email:76384404@qq.com

Registry Admin ID:hc736011586-cn

Admin Name:xiong yang
Admin Organization:yangxiong
Admin Street:china jiangsu suzhou ganjiang 888# shuitiantang,,
Admin City:suzhoushi
Admin State/Province:jiangsu
Admin Postal Code:215000
Admin Country:CN
Admin Phone:+86.051265307866
Admin Phone Ext:
Admin Fax:+86.051265307866
Admin Fax Ext:
Admin Email:76384404@qq.com

Registry Tech ID:hichina001-cn

Tech Name:hichina
Tech Organization:HiChina Web Solutions Limited
Tech Street:3/F., HiChina Mansion,No.27 Gulouwai Avenue,Dongcheng District
Tech City:Beijing
Tech State/Province:Beijing
Tech Postal Code:100011
Tech Country:CN
Tech Phone:+86.01065985888
Tech Phone Ext:
Tech Fax:+86.01065985438
Tech Fax Ext:
Tech Email:support@YinSiBaoHu.AliYun.com
Name Server:dns17.hichina.com
Name Server:dns18.hichina.com

Billing Name:hichina
Billing Organization:HiChina Web Solutions Limited
Billing Street:3/F., HiChina Mansion,No.27 Gulouwai Avenue,Dongcheng District
Billing City:Beijing
Billing State/Province:Beijing
Billing Postal Code:100011
Billing Country:CN
Billing Phone:+86.01065985888
Billing Phone Ext:
Billing Fax:+86.01065985438
Billing Fax Ext:
Billing Email:support@YinSiBaoHu.AliYun.com

chateau-issan.com whois :

Domain Name: chateau-issan.com
Registrant Name: CHATEAU D'ISSAN
Registrant Organization: CHATEAU D'ISSAN
Registrant Street: Cantenac
Registrant City: Margaux Registrant
Registrant Postal Code: 33460
Registrant Country: FR
Registrant Phone: +33.557883591
Registrant Fax: +33.557887424
Registrant Email: e3e51ae617386f0eda1964a7751746b6-cd3032@contact.gandi.net
Registry Admin ID: Admin Name: Carel Versepuy

Admin Organization: HITEO SARL
Admin Street: 38, Rue Ferrere
Admin City: Bordeaux
Admin Postal Code: 33000
Admin Country: FR
Admin Phone: +33.535546050
Admin Email: 0236fbbcbb35a6193139ac38b0a58f09-1574092@contact.gandi.net

Landlord Contact File

Landlord Contact File

Do you want to contact residential landlords regarding your products or services? Over the last twelve months we have been working with landlord associations and organisers of property events, seminars and conferences. We have added to our landlord portfolio month by month and now have a total of 91,537 verified UK located Residential Landlords. All our landlords own one or more residential letting property and many wish to expand on their rental portfolio. Our landlords have given permission for third party contact regarding services or products relating to being a residential landlord. You are able to contact the landlords by email, telephone or direct mail. The landlords welcome contact regarding property, advertising, tenant services, financial services, repairs, trades, accountants, furnishings, legal services, mortgages, investments, insurance and more. The database is cleaned and updated on a monthly basis. There is nothing like this file on the market which contains true and accurate landlord information and it is a real asset to any business wishing to target this valuable market.

You can purchase this file in its entirety or by region.

Details at landlordconnection.co.uk

Tel: 01904375999

Regards

Landlord Connection

Part-Time Job Offer: Positions Are Available Now!

Dear Friend,

There is a job position available which requires no specific qualifications to carry out tasks efficiently, no training required. The job Entails Evaluation process, shopping at any Walmart, RITE AID, CVS Pharmacy Stores in your local area. Your job duties are flexible and entirely legitimate. Secret Shoppers perform specific tasks such as purchasing a product, asking questions, registering complaints or behaving in a certain way, and then provide detailed reports or feedback about their experiences. The purpose of mystery shoppers is to help businesses increase sales by assisting in improving customer service awareness. We need details with an unbiased opinion of how our services are perceived by customers. We search for, hire, train, and compensate the shoppers; prepare, mail out, and receive information; and tabulate and analyze the results.

Anonymity: A good mystery shopper is always anonymous. A mystery shopper should be able to visit the same location a number of times without being detected by the store staff.

Dependability: A mystery shopper must complete their assignments as scheduled and submit the report exactly per the guidelines. We need you to be a Secret Shopper; your job is to conduct Surveys. Work hours : 45 minutes per assignment, Monday-Friday. You will receive $300 per assignment.

To partake in this program and get started. Provide below details :

i) Full Names
ii) Mailing Address
iii) Cell / Home Phone Number
iv) What is your current work schedule ? Available work hours.
v) Shopping Interests for Enjoyable assignments. (Optional)

We appreciate your interest in the job position, await immediate response.

Yours Sincerely,
Benjamin Peterson.
Hiring Manager, Secret Shop
USA.
msshoper@barid.com
msshoper@shopper.com