Thursday, March 3, 2016

THE DIPLOMAT HAS ARRIVED IN YOUR COUNTRY.

THE DIPLOMAT HAS ARRIVED IN YOUR COUNTRY.

Attention to you the beneficiary of this consignment box with registration code number :( CAF/XX/05 ) Please Your Urgent Attention Is Needed. We wish to inform you that the diplomatic agent conveying the consignment box valued the sum of $3.7 Million United States Dollars misplaced your address and he is stranded at your International airport now. We requests you to reconfirm the following information (below so that he can deliver your consignment box to you today.

NAME____________________________________________
ADDRESS:________________________________________
MOBILE NO_______________________________________
NAME OF YOUR NEAREST AIRPORT__________________
A COPY OF YOUR IDENTIFICATION___________________

Please do contact the diplomatic agent with the email below with the information required. Contact Person: Mr.chris patrick. EMAIL;(chrispatrick088@gmail.com) He is waiting to hear from you today with the abve information .

NOTE: That The Diplomatic agent does not know the content of the consignment box is $3.7 Millions United States Dollars because nwe registered it as family valuables and on no Circumstances should you let him know the content, for security reasons.

The consignment was moved from here as family treasures,

Regards
Mr,Amani Brown.
Central bank Pay Master,
Benin Republic

Email analysis :

NOTE : chrispatrick088@gmail.com
NOTE : d6b3n3d@yahoo.fr
NOTE : Received : from [197.234.219.33]


NOTE : (helo=User) by amd.vw.dp.ua

RE: FROM USA BANK

U.S. Bank
1025 Connecticut Ave. NW, Ste. 510. Washington, DC 20036
SWIFT (US): USBKUS44XXX
Founded: United States of America
Hours: Open 24 Hours

FOR YOUR INFORMATION: BENEFICIARY.

After today's board meeting of the management of this bank, Ministry of Finance,Internal Revenue Service of the United States (IRS), The Reserve Bank and the World Bank Directorate it was gathered that your overdue compensation fund worth US$5.5 Million has been deposited with this bank for onward payment/ transfer to your designated/choose bank account. the reason for this is because your name was among the scam victims that lost a lot of money to African and European Fraudsters, you are hereby advised without delay to stop all contact going on between you and anybody on internet because you will end up at nothing.

RE-CONFIRM YOUR BELOW DETAILS.

Your Full Name__________________________
Your Residential Address________________
Your Sex/ Age___________________________
Occupation______________________________
Telephone/Fax___________________________
Next of Kin_____________________________

The US bank will immediately remit your account once I reconfirm your banking details. Your utmost response is needed to enable us proceed with your payment. We are looking forward to hear from you.

Thank you for choosing US Bank.

Yours Faithfully,

Mr. Rick Ruzzi
Executive Region Manager

Email analysis :

NOTE : janet.yellen@qualityservice.com
NOTE : paulo@apqships.com

MESSAGE FROM WANG

Good Day;

I need a Business partner for transferring a large sum of money to a foreign Account legally ,If interested, Reply me through my private email Address for more information Email(wangzhiqiang45@yahoo.com.hk)

Friendly Greeting,
Executive Investment and Credit
Mr.Wang Zhiqiang

Email analysis :

NOTE : wangzhiqiang57@yahoo.com.hk
NOTE : User-Agent : Webmail/1.1.4

US AMBASSADOR NOTIFICATION FUND

U.S AMBASSADOR TO NIGERIA
PLOT 1075 DIPLOMATIC DRIVE
CENTRAL DISTRICT AREA, ABUJA

ATTN: BENEFICIARY.

012/16 SCAM VICTIMS COMPENSATIONS PAYMENTS. YOUR REF/PAYMENTS CODE:

FMF/06654 FOR US($10.5M) USD ONLY.

This is to bring to your notice that we the Federal Ministry of Finance, Nigeria is delegated by the ECOWAS/UNITED NATIONS and Central Bank to pay victims of scam US($10.5M) which your name is among the names listed for this payment,I WAS VERY MUCH CONCERNED WHEN I DISCOVERED THAT YOU HAVE PAID MUCH MONEY AND YET HAVE NOT RECEIVE YOUR FUNDS.THIS IS WHY I DECIDED TO HELP. PROVEN YOU THE TRUTH, TRACK THE BELOW TRACKING NUMBERS AND CONFIRM IT:

1.)WWW.FEDEX.COM TRACKING NO: 395659915113418
2.)WWW.FEDEX.COM TRACKING NO: 797524131428

ACCESS MY WEBSITE AND READ BIOGRAPHY:

http://nigeria.usembassy.gov/biography.html

EMAIL: { jamesentwestus200@gmail.com }

You are to send the following information for remittance.

Your Name.___________________________
Address.___________________________
Phone .___________________________
Country.________________________.

SCAMMED VICTIM/REF/PAYMENTS CODE:
FMF/06654 US($10.5M).

AMBASSADOR JAMES F. ENTWISTLE.
U.S AMBASSADOR TO NIGERIA.

Email analysis :

NOTE : jamesentwestus200@gmail.com
NOTE : patrickgarry417@gmail.com

Hello Dear

Hello My name is Miracle, write me on ( zqueenet@yahoo.com)

I am a pretty girl not married, I will like to have a good friendship with you,please writ me back, so that i can tel you more about me,and send you some copes of my pictures.
Please write me on zqueenet@yahoo.com

Yours in love Miracle

Email analysis :

NOTE : zqueenet@yahoo.com
NOTE : jovita.gomeze@onet.pl
NOTE : Received : from ruhgjviuhgd.home
NOTE : (unknown [41.83.22.146])

Vous avez reçu (1) un nouveau message. (Phishing LCL)

Bonjour,

Un conseiller LCL vous a adressé un message.

Pour le consulter et accéder à votre messagerie sécurisée, merci de vous connecter à votre espace en ligne LCL , rubrique ,
<< Accédez à vos comptes >>.

A très bientôt .

LCL

Attention, il est inutile de répondre à ce message, votre mail ne fera l'objet d'aucun traitement.

----------------------------
Crédit Lyonnais - SA au capital de 1 847 860 375 € - SIREN 954 509 741 - RCS Lyon.
Société de courtage d'assurance inscrite sous le numéro d'immatriculation d'intermédiaire en assurance ORIAS : 07001878 . Siège social : 18 rue de la République, 69002 Lyon . Pour tout courrier : LCL, 20 avenue de Paris, 94811 Villejuif Cedex.

Phishing analysis :

CLICK : Accédez à vos comptes >>
OPEN : http://bit.ly/1VMqAYK

SCREENSHOT :

CLICK : http://www.jewelglintz.com/errors/LCL/particulier/connexion.nouveau.messages/log/lcl/index.html

SCREENSHOT :


VALIDATE : FORM
REDIRECT : https://particuliers.secure.lcl.fr/outil/UAUT/Accueil/preRoutageLogin


Email analysis :

NOTE : fr-messagerie.lcl.info@cavg.ifsul.edu.br
NOTE : X-Remote : 187.86.133.67 (dns1.cavg.ifsul.edu.br)


NOTE : Mime-Version : 1.0
NOTE : Received : from ns3005535 (ns3005535.ip-188-165-223.eu [188.165.223.131])


NOTE : by dns1.cavg.ifsul.edu.br
NOTE : Vous avez reçu (1) un nouveau message.


JEWELGLINTZ.COM WHOIS :

Domain Name: JEWELGLINTZ.COM
Registry Domain ID: 1751630867_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: www.publicdomainregistry.com
Updated Date: 24-Oct-2013
Creation Date: 12-Oct-2012
Registrar Registration Expiration Date: 12-Oct-2014
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303
Registrar Abuse Contact Email: abuse-contact@publicdomainregistry.com
Registrar Abuse Contact Phone: +1-2013775952
Domain Status: clientTransferProhibited
Registry Registrant ID: DI_23989872
Registrant Name: Rohin Digani
Registrant Organization: Shyam Nanda Jewels
Registrant Street: 952/7, main Market Mehrauli, New Delhi
Registrant City: New Delhi
Registrant State/Province: New Delhi
Registrant Postal Code: 110030
Registrant Country: IN
Registrant Phone: +91.9911110007
Registrant Email: rohin.0007@yahoo.com
Registry Admin ID: DI_23989872
Admin Name: Rohin Digani
Admin Organization: Shyam Nanda Jewels
Admin Street: 952/7, main Market Mehrauli, New Delhi
Admin City: New Delhi
Admin State/Province: New Delhi
Admin Postal Code: 110030
Admin Country: IN
Admin Phone: +91.9911110007
Admin Email: Email Masking Image@yahoo.com
Registry Tech ID: DI_23989872
Tech Name: Rohin Digani
Tech Organization: Shyam Nanda Jewels
Tech Street: 952/7, main Market Mehrauli, New Delhi
Tech City: New Delhi
Tech State/Province: New Delhi
Tech Postal Code: 110030
Tech Country: IN
Tech Phone: +91.9911110007
Tech Email: rohin.0007@yahoo.com
Name Server: ns1.asiawebnet.org
Name Server: ns2.asiawebnet.org
DNSSEC:Unsigned
URL of the ICANN WHOIS Data Problem Reporting System:
http://wdprs.internic.net/


Scam.cz conclusion :

- LCL Phishing
- Instituto Federal de educaçao used to relay scam.


- Phishing was received 02/29/2016.
- Bitly link wasn't deleted.
- jewelglintz.com page wasn't deleted.