Thursday, April 16, 2015

RE: AN INVESTMENT OPPORTUNITY. (Investment Scam)

Dear Friend,

AN INVESTMENT OPPORTUNITY.

I hope this email finds you in good health. I m Dr. Donald Adams, originally from Fiji Islands, but I am presently in Afghanistan as an expert doctor of medicine. On the 12Th of April 2014 my wife and I were approached by a British Soldier, Warrant Officer Faulkner Spencer, who handed a box full of cash totaling TWENTY-TWO MILLION EIGHT HUNDRED THOUSAND UNITED STATES DOLLARS ONLY {$22,800,000.00} to me and my wife for safe keeping and begged us never to disclose this to anyone. Unfortunately,exactly two weeks later news reached us that he had an accident and died in an Helicopter crash in Takhta Pul District, Afghanistan.

Kindly view the link below for confirmation:

http://www.bbc.com/news/uk-10629358

My wife and I wants to use this opportunity to seek for your assistance to help us repatriate this fund to your country for investment purposes because the fund is not safe here and we can no longer hold on to this fund since Officer Faulkner is no more and we are willing to compensate you with 35% of the total sum for your help.

We will be very grateful if our proposal is considered and given the urgent attention it deserves. This is our private e-mails:

donadams223@gmail.com

Sincerely,

Dr. Donald Adams.

Email analysis :

NOTE : donadams2233@gmail.com
NOTE : no_reply@delta.net.id
NOTE : Received : from mail.shponder.co.il ([81.218.175.83]:21099 helo=User)
NOTE : by webhosting.delta.net.id with esmtpa (Exim 4.85)
NOTE : (envelope-from < no_reply@delta.net.id >)
NOTE : X-Get-Message-Sender-Via : webhosting.delta.net.id:
NOTE : authenticated_id: dedy/only user confirmed/virtual account not confirmed

VIEW THE ATTACHED FILE YOUR DRAFT SCAN COPY. (JP Morgan Chase Bank Scam)

DEAR BENEFICIARY,

I AM REV,DR.JOHN H.WILLIAMS,THE AUDITOR GENERAL OF THE FEDERAL REPUBLIC OF NIGERIA AND I WISH TO KNOW IF YOU HAVE RECEIVED THE SCAN COPY OF YOUR CERTIFIED BANK DRAFT IN THE AMOUNT OF $10,5MUSD WHICH I SENT TO YOUR EMAIL ADDRESS YESTERDAY AND THIS APPROVED DRAFT INCLUDES YOUR FUND INTEREST AMOUNT FOR THIS YEARS AWAITING,SO CALL ME NOW TO CONFIRM IT OKAY:-+234-818-696-1788.

NOTE THAT WE ARE PAYING YOU THROUGH OUR OIL RESERVE BANK ACCOUNT WITH THE JP MORGAN CHASE BANK NEW YORK,USA AND THEY WILL CREDIT YOUR FUND ONCE YOU HAVE THE ORIGINAL CERTIFIED BANK DRAFT HARD COPY AND DEPOSIT IT TO ANY BANK OF YOUR CHOICE IN THE WORLD.

YOU ARE HEREBY ADVICE TO TAKE THE SCAN COPY OF YOUR CERTIFIED BANK DRAFT TO YOUR LOCAL BANK AND CONFIRM IT BEFORE WE CAN SEND YOU THE ORIGINAL HARD COPY OR YOU CAN COME DOWN FOR THE COLLECTION HERE OKAY.

I AWAIT TO HEAR FROM YOU SOONEST.

YOURS,

REV,DR.JOHN H.WILLIAMS.

Email analysis :

NOTE : revdrjohnwilliams@yahoo.com.tw
NOTE : X-Get-Message-Sender-Via : vps.khawndi.com: authenticated_id: sales@quatro-co.com
NOTE : admin@ovh.net
NOTE : Received : from [37.1.31.60] (port=33596 helo=User) by vps.khawndi.com

Tuesday, April 14, 2015

Excess mail storage (Google Phishing)

Your mailbox is almost full.

Dear ***@***

3840MB 4096MB

Current size Maximum size

Please reduce your mailbox size. Delete any items you don't need from your mailbox and empty your Deleted Items folder. Click here to do reduce size automatically.

Thanks,
Mail System Administrator

This notification was sent to *@*.com; Don't want occasional updates about subscription preferences and friendly suggestions? Change what email Google+ sends you. Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043 USA

Avast logo
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Email analysis :

NOTE : nuess@nuess.fr
NOTE : Received : from [77.234.44.138] (port=58659 helo=[100.100.0.67])
NOTE : by ns430178.ip-37-187-150.eu with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.85)
NOTE : Received : from mail.vcomk.fr (HELO ns430178.ip-37-187-150.eu) (37.187.150.185)

Phishing analysis :

CLICK : "Click here"
OPEN : http://theemergentologist.com/zz/ii.php?email=
SCREENSHOT :


theemergentologist.com whois :

Registrant Name: Katrel Kelly
Registrant Organization: Katrel Kelly
Registrant Street: 3647 N 11th Street
Registrant City: Philadelphia
Registrant State/Province: PA
Registrant Postal Code: 19140
Registrant Country: US
Registrant Phone: +1.2159390792
Registrant Email: newdomains@siteground.com

GOOD NEWS (ATM Scam)

Attention Please!!!

We have registered your ATM CARD of $8.8 with FedEx Express Courier Company with registration code of (DCJKT00678G). please Contact them with your delivery information such as, Your Name, Your Address ID CARD

COPY and Your Telephone Number:
FedEx Office:

NOTE:Bank of Africa is the Bank that issuing the ATM Master card once you receive the ATM Master Card Bank Will contact you

Contact Person:MR.PAUL AKANGO.
E-mail:(mr.paul_akango@yahoo.in)
Tel:+229-9920-6897

I have paid for the Delivery and insurance fee the only fee you have to pay is their Security keeping fee only,which is $130 only.

Best Regards.
Hon Ms Mary Samuel
United Bank of Africa

Email analysis :

NOTE : hmrc.refund@agromail.com.br
NOTE : mr.paul_akango@yahoo.in
NOTE : Received : from agromail.com.br
NOTE : (mail.agromail.com.br [186.237.130.139])

MTCN#9067782268 (Scam)

Attention Please!!!

Your First payment has being Sent today MTCN #9067782268 Amount $5000, Reply To Me and I will Email You Senders Name,Text Question and Answer To Pick Up
Your Money Today,

Agent: Mr. Kevin Anthony,western union Director (officedirector@yeah.net) call or
Sms +229-992-06-195
Regard
Mr Peter Godwin.

Email analysis :

NOTE : hmrc.refund@agromail.com.br
NOTE : Received : from agromail.com.br (mail.agromail.com.br [186.237.130.139])
NOTE : by agromail.com.br (Postfix)

A Technical Look (Trade Scam)

C-RGP initiates massive purchases price explodes to 30%.

CALISSIO RESOURCES INC (C-RGP) announces impressive prs Friday and more
impressive updates printing on Monday. I foresee target ppc of $1.60
promptly! You can receive fortune upcoming week if you get it to $0.12.

Acquire C-RGP on Mon, Apr 13, 2015.

Email analysis :

NOTE : j.bailes@syntegra.com
NOTE : Received : from unknown (HELO localhost)
NOTE : X-Originating-Ip : 29.217.36.196
NOTE : (j.bailes@syntegra.com@29.217.36.196) by 178.125.88.247