Tuesday, September 29, 2015

G VENIZELOS

I am George Venizelos an FBI Assistant Director After proper investigations we discovered that your impending payment that have been withheld by imposters claiming to be LAMIDO SANUSI LAMIDO (Governor of the Central bank of Nigeria) Mr. Patrick Aziza, Mr. Frank Nweke, None existing officials of the Oceanic Bank of Nigeria and Zenith Bank, UK winning Lottery, Andy Lear of Hsbc bank, Coca-Cola winning lottery and among a list of others is now under our custody with the help of the Cyber Crimes Commission (CCc) and the Local Police Force. Investigations revealed that you have spent a lot on your personal earned money just to conclude the successful transfer of your funds to your nominated bank account by obtaining transfer documents as requested by the impostors, costing you a lot of money but all to no avail The FBI had to send some financial crime investigators from our head office in NEW YORK Field to Africa and Asia in other to carry out proper investigation The New FBI has giving authority to the International Monetary Funds (IMF) to assist the Federal Ministry of Finance and all the organization involved such as the Central Bank, Zenith Bank, and Legit lottery organizations to immediately commence with the compensation of all the beneficiaries awaiting the successful transfer of their funds With the help of some of the best Internet investigators attached to the FBI, we traced your information from the Internet as one of the beneficiaries awaiting the successful transfer of funds to your nominated account. I am pleased to inform you that a meeting was held as regards the best way to carry out with the compensation exercise for transparency and most especially to avoid reoccurrence of the delay in transferring your funds and the high cost of procuring transfer documents and came to a final conclusion as all head of organizations involved was duly represented. It was approved to be issued to you as a valid international ATM card cash-able at any ATM machine designation in the world. The ATM account has already being credited with four million, eight hundred thousand United States dollars. ($4.8,000, 000.00USD) , with a daily Limit of withdrawal of Ten thousand United States Dollars. ($10.000, 00USD) The ATM card has already being packaged and approved to be delivered to your door step via express courier delivery service. Contact Mr George Venizelos {Our FBI ATM Rep.} at the ATM PAYMENT CENTER and reconfirm your delivery information as stated below and your security code with five digit (15011) number has to be submitted alongside with your delivery information for security reasons

DELIVERY INFORMATION
FULL NAME:
AGE:
DELIVERY ADDRESS:
CELL PHONE NUMBER:
CURRENT OCCUPATION:
SCAN COPY OF YOUR PASSPORT

HAVE IT IN MIND THAT THE DELIVERY FEE OF YOUR PACKAGE DELIVERY TO YOUR DESTINATION HAVE BEEN SETTLED BETWEEN US AND THE COURIER COMPANY IN CHARGE OF YOUR ATM CARD DELIVERY SO YOU ARE MANDATED TO PAY FOR THE SECURITY KEEPING FEE ONLY FOR YOUR ATM CARD TO BE DELIVERED TO YOU. A RELIABLE AND A TRUSTED COURIER COMPANY HAS BEEN CONTACTED TO DELIVER YOUR PACKAGE TO YOUR DESTINATION AS SOON AS YOU CONTACT MR GEORGE VENIZELOS HE WILL UPDATE YOU WITH THE COURIER COMPANY EMAIL CONTACT ADDRESS IN OTHER TO AVOID ANY UNDUE DELAY OF YOUR ATM CARD.

NOTE: Under normal circumstances you are suppose to come and collect your ATM CARD in person and sign some documents as proof of the collection of your ATM CARD but the IMF and the Finance Ministry insisted that you pay for the SECURITY KEEPING FEE ONLY of your ATM CARD via western union money transfer which will cost you only $65.00 USD to cut down travel expenses in other for the western union payment receipt and the receipt of payment of $65.00 USD to the nominated courier company that will carry out with the delivery to your door step to be documented in your file as proof of collection i hope that this is very clear, A receipt to this effect will be sent to you and a copy kept in your file for future documentation. We also advise that you stop further communications with those imposters and forward any correspondence / proposal you receive from them to Me Mr George Venizelos in other for the FBI to bring justice to does still at large.

George Venizelos.
Tel +254 711 331 516

Email analysis :

NOTE : gvenizelos19@gmail.com
NOTE : Received : from [105.167.142.9]
NOTE : by web101906.mail.ssk.yahoo.co.jp via HTTP;
NOTE : hhfjfhhdsd@gmail.com
NOTE : 183.79.56.156 as permitted sender

CHANGE OF BENEFICIARY 24/9/2015

FROM: MR JON STEWART
BARCLAYS BANK PLC.
54 ANTHONY WAY,
LAGOS, NIGERIA.
barclaysbnknng@yahoo.co.jp

Attention: Sir,

URGENT CHANGE OF BENEFICIARY

This is very urgent and an urgent attention is needed.

In our office today, was a present of One Mr. Steve Moore of 1200 Fitch Way, Sacramento, Ca. 95864 along with his attorney filing application contrary to your pending fund transfer. The above mentioned persons visited this Bank with a power of attorney given in his favor by your humble self, granting him the benefit to process and claim your inheritance of $5,000,000.00(Five Million United States Dollars Only) for personal reasons. He further Stated that your online account with us be Terminated while the fund should be wired to his Bank account with Bank Of America, Routing Number 121000358. Our office have ask Mr. Steve Moore to return back to the Bank within 48hours to enable us have a personal confirmation from you being known the beneficiary to this fund. Therefore,

1. Did you instruct one Mr. Steve Moore of 1200 Fitch Way, Sacramento, Ca. 95864, to claim and receive the payment on your behalf? 2. Did you sign any 'Deed of Assignment' in his favor thereby making him the current beneficiary? We are sorry to have delayed your instruction in giving out this fund since we must adhere to the procedures of this honorable bank by making sure this request is verified and confirmed by the beneficiary. Your confirmation to the above will be appreciated. We look forward to hearing from you soon via this email (barclaysbnknng@yahoo.co.jp)

Yours sincerely,

Mr. JON STEWART
Head of Operations.
Barclays Bank Plc
barclaysbnknng@yahoo.co.jp

Email analysis :

NOTE : donotreplyhere@barclays.com
NOTE : unwbrcdepartment@yahoo.co.jp
NOTE : Received : from User ([69.193.135.50])
NOTE : by gwexch2.hanchang.co.kr with Microsoft SMTPSVC

Monday, September 28, 2015

Abonnement Mobile (Phishing Free)

Bonjour,

Nous avons constate qu'il y'a eu un problème lors du prélèvement de votre facture mensuelle. Vous devez régulariser votre situation au plus vite sous peine de fermeture de vos service mobile.

Cliquez-ici

Nous restons à votre disposition pour toute information complémentaire et vous prions de recevoir nos sincères salutations.

Votre
Service Abonnés.

Pour nous contacter:
* Par téléphone au 32 44 (appel inclus
dans le forfait depuis une ligne mobile Free)
* Par courrier adressé à:
Free
Service Courrier
75371 Paris Cedex 08 Francesdsfsdfsdfsdf

Phishing analysis :

CLICK : Cliquez-ici
OPEN : http://www.l601neu.at/ray/
REDIRECT : https://ruscona.sk/app/design/app/public_html/ez/***/


Email analysis :

NOTE : info@free.fr
NOTE : Received : from gnarfi.store ([192.168.41.180])
NOTE : by josoe.store (RZmta 37.12 OK) with ESMTP

Inquiry (EC21 Phishing)

Date: 2015.09.28

Dear User,

Congratulations! You have received a new inquiry sent to you from posted on EC21.com. To see the content and reply to this inquiry, please click on the Check Inquiry button below.

Please do not reply to this email as it is unmonitored.

Dynamic Marketplace for Global B2B � EC21
Copyright (c) EC21 Inc. All Rights Reserved./ipod design (c)

Phishing analysis :

CLICK : button
OPEN : http://tiverious.gr/wp-includes/js/plupload/EC21.com/index.html


VALIDATE : FORM
REDIRECT : http://supplier.ec21.com/
INFOS EXTRACTED : helpmegod.me@gmail.com

helpmegod.me@gmail.com analysis :

Domain Name: BEN-LAWYER.COM
Registrar: NetEarth One, Inc.
Registrar IANA ID: 1005
Registrant Name: Sam Luoi
Registrant Organization: ben-lawyer
Registrant Street: 2nd ave linden street,
Registrant City: johannebsurg
Registrant State/Province: Gauteng
Registrant Postal Code: 0001
Registrant Country: ZA
Registrant Phone: +27.780062257
Registrant Email: helpmegod.me@gmail.com

Domain Name: JASONFOXTRADING.COM
Registrar: NetEarth One, Inc.
Registrar IANA ID: 1005
Registrant Name: Jason Fox
Registrant Organization: Jason Foxtrading
Registrant Street: 2nd ave kent road
Registrant City: Johannesburg
Registrant State/Province: Gauteng
Registrant Postal Code: 2001
Registrant Country: ZA
Registrant Phone: +27.214261956
Registrant Fax: +27.866888831
Registrant Email: helpmegod.me@gmail.com

Email analysis :

NOTE : jrb14n@my.fsu.edu
NOTE : X-Originating-Ip : [197.228.71.63]
NOTE : Mime-Version : 1.0
NOTE : client-ip=157.56.111.247;
NOTE : X-Originatororg : my.fsu.edu
NOTE : Received : from boy1-PC.www.huaweimobilewifi.com (197.228.71.63)


NOTE : Inquiry

Friday, September 25, 2015

Offrez vous un prêt entre particulier en ligne

Mr et Mme ,

Désormais plus de soucis pour vos crédits en ligne, Prêt Mutuel a ramené votre taux à 2% l'an pour les 30 premières personnes à faire leur demande de crédits en ligne sur notre site à compter de ce mois.
Vous êtes à la recherche de prêt pour soit relancer vos activités, soit pour la réalisation d'un projet, soit pour vous acheter un appartement mais vous êtes interdit bancaire ou votre dossier a été rejeté par les banques ou leur conditions ne vous conviennent pas, alors plus de soucis Prêt Mutuel leader le la plate forme européenne est votre solution. Nous octroyons des prêts allant de 5.000 € à plus à toutes personnes capable de respecter nos conditions de crédit.

Notre taux d’intérêt est désormais 2% l'an quelques soit le montant emprunté et quelques soit le domaine dans les quels vous voulez investir.

* Prêt personnel
* Prêt entreprise
* Prêt immobilier
* Prêt automobile
* Prêt à l'investissement
* Dette de consolidation
* Deuxième hypothèque
* Marge de crédit
* Rachat de crédit
* etc. . .

Alors n’hésiter plus à faire votre demande directement sur notre site Web www.***.com

Email analysis :

NOTE : User-Agent : Roundcube Webmail/1.1.3
NOTE : Offrez vous un prêt entre particulier en ligne
NOTE : contact@***.com
NOTE : client-ip=91.216.107.238;

Spammer Whois :

Domain Name: pretmutuel.com
Registry Domain ID: 1940452992_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.rrpproxy.net
Updated Date: 2015-07-06T12:20:14.0Z
Creation Date: 2015-06-20T17:39:37.0Z
Registrar Registration Expiration Date: 2016-06-20T17:39:37.0Z
Registrar: Key-Systems GmbH
Registrar IANA ID: 269
Registrar Abuse Contact Email: abuse@key-systems.net
Registrar Abuse Contact Phone: +49.68949396850
Registrant Name: constantin bonou
Registrant Street: cotonou
Registrant City: cotonou
Registrant Postal Code: 00229
Registrant Country: BJ
Registrant Phone: +229.96473308
Registrant Email: pretmtuel2015@gmail.com
Admin Name: constantin bonou
Admin Street: cotonou
Admin City: cotonou
Admin Postal Code: 00229
Admin Country: BJ
Admin Phone: +229.96473308
Admin Email: pretmtuel2015@gmail.com
Registry Tech ID:
Tech Name: LWS Societe
Tech Street: 4 rue galvani
Tech City: paris
Tech Postal Code: 75017
Tech Country: FR
Tech Phone: +33.826102413
Tech Email: domaine@lws.fr
Name Server: ns1.lws-hosting.net
Name Server: ns2.lws-hosting.net
Name Server: ns3.lwsdns.com
Name Server: ns4.lwsdns.com
DNSSEC: unsigned
Billing Name: LWS Societe
Billing Organization:
Billing Street: 4 rue galvani
Billing City: paris
Billing State/Province:
Billing Postal Code: 75017
Billing Country: FR
Billing Phone: +33.826102413
Billing Email: domaine@lws.fr

nouveau message vocal

SMS :
===========================
nouveau message vocal pour le +234**********
Duree: 29s Pour l'écouter; Cliquez sur ce lien: http://msgvocal.co/202-FG5VTF9
===========================

Open :
===========================
http://msgvocal.co/202-FG5VTF9
===========================

Result :
===========================
Vous avez (1) nouveau message vocal Emetteur: Béatrice Cliquez ci-dessous pour le consulter: (1) Message vocal - Cliquez ici reçu le
===========================

Result :
===========================
tel:+33899785310
===========================

WHOIS : msgvocal.co
======================================================================
Domain Name: MSGVOCAL.CO
Domain ID: D68265206-CO
Sponsoring Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Sponsoring Registrar IANA ID: 303
Registrar URL (registration services): www.PublicDomainRegistry.com
Domain Status: clientTransferProhibited
Registrant ID: PP-SP-001
Registrant Name: Domain Admin
Registrant Organization: PrivacyProtect.org
Registrant Address1: ID#10760, PO Box 16
Registrant Address2: Note - All Postal Mails Rejected, visit Privacyprotect.org
Registrant City: Nobby Beach
Registrant Postal Code: QLD 4218
Registrant Country: Australia
Registrant Country Code: AU
Registrant Phone Number: +45.36946676
Registrant Email: contact@privacyprotect.org
Administrative Contact ID: PP-SP-001
Administrative Contact Name: Domain Admin
Administrative Contact Organization: PrivacyProtect.org
Administrative Contact Address1: ID#10760, PO Box 16
Administrative Contact Address2: Note - All Postal Mails Rejected, visit Privacyprotect.org
Administrative Contact City: Nobby Beach
Administrative Contact Postal Code: QLD 4218
Administrative Contact Country: Australia
Administrative Contact Country Code: AU
Administrative Contact Phone Number: +45.36946676
Administrative Contact Email: contact@privacyprotect.org
Billing Contact ID: PP-SP-001
Billing Contact Name: Domain Admin
Billing Contact Organization: PrivacyProtect.org
Billing Contact Address1: ID#10760, PO Box 16
Billing Contact Address2: Note - All Postal Mails Rejected, visit Privacyprotect.org
Billing Contact City: Nobby Beach
Billing Contact Postal Code: QLD 4218
Billing Contact Country: Australia
Billing Contact Country Code: AU
Billing Contact Phone Number: +45.36946676
Billing Contact Email: contact@privacyprotect.org
Technical Contact ID: PP-SP-001
Technical Contact Name: Domain Admin
Technical Contact Organization: PrivacyProtect.org
Technical Contact Address1: ID#10760, PO Box 16
Technical Contact Address2: Note - All Postal Mails Rejected, visit Privacyprotect.org
Technical Contact City: Nobby Beach
Technical Contact Postal Code: QLD 4218
Technical Contact Country: Australia
Technical Contact Country Code: AU
Technical Contact Phone Number: +45.36946676
Technical Contact Email: contact@privacyprotect.org
Name Server: NS8459.HOSTGATOR.COM
Name Server: NS8460.HOSTGATOR.COM
Created by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Last Updated by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Domain Registration Date: Wed Aug 12 17:55:08 GMT 2015
Domain Expiration Date: Thu Aug 11 23:59:59 GMT 2016
Domain Last Updated Date: Thu Aug 13 11:25:40 GMT 2015
DNSSEC: false
======================================================================