Wang Lei

PLEASE CAN WE DISCUSS A PROFITABLE DEAL?
IF YOU WISH TO HEAR MORE LET ME KNOW.
THANK YOU.

--------------------------------------------------------------------------------------------------------
Evite el Spam: Nunca responda correos que soliciten su nombre de
usuario y Password. Administracion de red. Universidad de La Habana.

Email analysis :

NOTE : rjbeltran@lex.uh.cu
NOTE : wl7702@qq.com
NOTE : Authentication-Results : rjbeltran@lex.uh.cu
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain; charset=ISO-8859-1; DelSp="Yes"; format="flowed"
NOTE : Content-Disposition : inline
NOTE : User-Agent : Internet Messaging Program (IMP) H3 (4.3.10)
NOTE : Return-Path : < rjbeltran@lex.uh.cu >
NOTE : Received : from smtp.uh.cu (proxy2.uh.cu. [200.55.139.213])

NOTE : Received : from lex.uh.cu (lex.uh.cu [10.6.54.30])

NOTE : by smtp.uh.cu
NOTE : Received : by lex.uh.cu
NOTE : Received : from 197.211.53.11 (197.211.53.11 [197.211.53.11])

NOTE : by mail.lex.uh.cu (Horde Framework)
NOTE : client-ip=200.55.139.213;
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Hi

Informations from Scam.cz :

- uh.cu is the University of Havana.
- rjbeltran@lex.uh.cu email was used to authenticate with mail.lex.uh.cu
- uh.cu was compromised.

YOUR $800.000.00USD UNITED STATE DOLLARS

From: Postal Service Office
Cotonou, Republic Du Benin
E-mail: postoffice965@gmail.com

Hello My Dear Beneficiary

THIS IS TO INFORM YOU THAT THERE IS ATM MASTER CARD IN THIS OFFICE DEPOSITED BY Ministry of Finance Benin Republic ON THE 11TH OF MARCH 2016. YOUR E-MAIL ADDRESS WAS ATTACHED TO IT AND IS TO BE POST TO YOU.WE HAVE BEEN WAITING FOR YOU TO CONTACT US FOR YOUR THE ATM CARD VALUED THE SUM OF $800.000.00USD UNITED STATE DOLLARS AND SOME VITAL DOCUMENTS BUT WE DO NOT HEAR FROM YOU. SO KINDLY GET BACK TO THIS OFFICE(REGULAR MAIL POST OFFICE BENIN REPUBLIC) TO AVOID FRAUDULENT ISSUES CONCERNING THIS SERVICE. CONTACT MR.TUNDE JOSEPH TEL +22999297865

YOU ARE TO CONFIRM AND PROVIDE TO US YOUR POSTAL ADDRESS BELOW.

YOUR FULL NAME..
YOUR COUNTRY........
YOUR POSTAL
ADDRESS....
YOUR DIRECT PHONE NUMBER...

YOU ARE TO PAY FOR THE STAMP DUTY FEE OF $75 USD AND YOU ARE ADVISE TO SEND THE STAMP DUTY FEE THROUGH WESTERN UNION OR MONEY GRAM TO THE POST OFFICE WITH THE NAME GIVING TO YOU ,BELOW AND FORWARD THE PAYMENT INFORMATION TO THIS POST OFFICE. FOR IMMEDIATE STAMP DUTY OF YOUR ATM CARD. HERE ARE THE WESTERN UNION OR MONEY GRAM PAYMENT INFORMATION YOU WILL USE TO SEND THE MONEY TO THE POST OFFICE.

Receiver Name......Isaac Chucks
Country......Benin Republic
City....Cotonou
Question....God
Answer.....Bless
AMOUNT.....$75 USD

NOTE:THAT EVERY CLAIMS HAS AN EXPIRYING PERIOD OF TEN WORKING DAYS (10 DAYS) SO YOU HAVE TO DO THAT VERY URGENT TO AVOID EXPIRATION.

Have a nice day.

Call us with this line...+22999297865

Mr.Tunde Joseph
S.G, Postal Service
Cotonou, Benin
Republic.

Email analysis :

NOTE : postoffice965@gmail.com
NOTE : fg5@fgb.my.vg
NOTE : X-Originating-Ip : [74.115.1.60]
NOTE : 74-115-1-60.anchorfree.com
NOTE : Areti Internet

150 à 250 EURO /Jour sur internet avec votre pc

150 à 250 EURO /Jour sur internet avec votre pc

Si vous êtes à la recherche d'une opportunité honnête et légitime pour augmenter vos revenus, je vais maintenant mettre fin à vos recherches. Pour la première fois, un jeune de 23 ans dévoile comment il fait 55,000 Euros par mois avec des explications étape par étape pour la mise en place de votre propre affaire en ligne. Vous devez simplement suivez les explications, et d'ici 30 minutes vous pouvez faire des ventes et empocher des commissions. Vous pouvez visiter le site pour commencer maintenant.

Sincèrement,
Read More
best product,
David Enderson
Email: quantvquantv@gmail.com

Our mailing address:

26 rue
paris (20200)
France

Free Email Marketing

Sample Banner
This is how your banner will look like
www.*.com
Advertisement

Scam analysis :

Click : Read More
OPEN : http://tinyurl.com/250dollarjour
REDIRECT : http://www.fortuneacademie.com/?hop=*

Registrant Email: DC7E1C40477A4BF59029F4BA5D873D1F.PROTECT@WHOISGUARD.COM

CLICK : http://1.academie.pay.clickbank.net/

Registrant Name: Domain Admin
Registrant Organization: ClickBank
Registrant Street: 917 Lusk St., Suite 200
Registrant City: Boise
Registrant State/Province: ID
Registrant Postal Code: 83706
Registrant Country: US
Registrant Phone: +1.7205093688
Registrant Email: domains@clickbank.com

Email analysis :

NOTE : quantvquantv@gmail.com
NOTE : X-Me-Engine : default
NOTE : X-Iadb-Ip : 95.142.25.116

NOTE : X-Me-Helo : il.a08.ms16.thmailsvr.net

NOTE : X-Iadb-Ip-Reverse : 116.25.142.95

NOTE : Received : from il.a08.ms16.thmailsvr.net ([95.142.25.116])
NOTE : by thmailsvr.net (thmailsvr.net)
NOTE : 150 à 250 EURO /Jour sur internet avec votre pc

Action Needed: Verify Account Information's (USAA Phishing Attempt)

To ensure the clear view of the message, please click show images and move it to your inbox folder.

USAA Member Home
Verify Account Information's

Dear USAA Customer,

We're currently upgrading our systems to bring enhanced features to your USAA Account experience. As a result, your account is temporarily unavailable.
Please download the file attached and upgrade your USAA Account to our new system.

Note: FAIL TO UPGRADE YOUR ACCOUNT, IT WILL BE AUTOMATICALLY CLOSED.

After this step, you are permitted to access your usaa.com System.

Thank you,
USAA

Please do not reply to this e-mail. To ensure the safety of your account, please update your information in our database.
USAA, 9800 Fredericksburg Road, San Antonio, Texas 78288.

USAA means United Services Automobile Association and its insurance, banking and investment affiliates.
87832-0713

Update_Account_Information's-USAA.html

USAA Phishing attempt analysis :

- The phishing was an html page.
- The page is also available as a raw file : http://pastebin.com/raw/B4DLgJe8

Email analysis :

NOTE : fevima@infonegocio.com
NOTE : Mime-Version : 1.0
NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < fevima@infonegocio.com >
NOTE : X-Priority : 3
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Received : from pop.prtcnet.org (pop.prtcnet.org. [69.176.19.5])
NOTE : Received : from [46.21.150.135] (helo=User) by pop.prtcnet.org

NOTE : client-ip=69.176.19.5;
NOTE : Action Needed: Verify Account Information's

SCAM VICTIM COMPENSATION PAYMENT VIA ATM CARD

SCAM VICTIM COMPENSATION PAYMENT VIA ATM CARD
STANDARD CHARTERED BANK/UNITED NATIONS
COMPENSATIONS PAYMENTS DIRECTIVE

SCAMMED VICTIM/$2.5 MILLION BENEFICIARY.REF/PAYMENTS CODE:06654 $2.5MILLION USD

This is to bring to your notice that I am delegated from the United Nations and Standard Chartered Bank to pay 100 Africa 419 scam victims $2.5 Million each, you are listed and approved for this payments as one of the scammed victims,get back to us as soon as possible for the immediate payments of your $2.5 Million compensations funds.

On this faithful recommendations, I want you to know that during the last UN meetings held at Porto Novo,Capital Of Benin Republic,it was alarmed so much by the rest of the world in the meetings on the lose of funds by various foreigners to the scams artists operating in syndicates all over the world today,in other to retain the good image of Africa,the president of the UNITED NATION is now paying 100 victims of this operators $2.5Million USD each,Due to the corrupt and inefficient banking systems in Africa,the payments are to be paid by Standard Chartered Bank as corresponding paying bank under funding assistance by the National Westminster bank London.

According to the number of applicants at hand,56 beneficiaries has been paid,half of the victims are from the United States and Asia,we still have more 44 left to be paid the compensations of $2.5Million each. Your particulars was mentioned by one of the syndicates who was arrested in Africa as one of their victims of the operations,you are hereby warned not to communicate or duplicate this message to them for any reason what so ever,the US secret service is already on trace of the
criminal,You can receive your compensations payments via ATM CARD PAYMENT.

Furthermore you are advice to reconfirm you billing address include your full name and direct contact telephone number to the Managing Director of Swift Card Consultant Payment Center for the certified ATM Card, the contact information is as follows:

MANAGING DIRECTOR SWIFT CARD
STANDARD CHARTERED BANK
DR Steve Richmond
Email:( Stmond11@gmail.com )
TEL PHONE: +229-.68760182

Email analysis :

NOTE : stmond11@gmail.com

Rép : Official/ Please confirm..

Dear Friend,

Please accept my sincere apologies if my mail does not meet your personal ethics.

This is the second time I'm writting you this message because I have been trying to get in touch with you after our last discussion but could not reach you, please permit me to advice the Bank to wire the sum of £12,780.000.00 Million Pounds (transfer) to your Account for you and I to share. I will like to introduce myself again in case if you have forgotten,Am Mr.Darel Williams; Am From Harlsden, North West London here in England. I work as a Staff in the accounts management Section,monitoring financial network here in the United Kingdom. Please I will be delighted if you can get back to me urgently so that I can advise you further on how we van proceed in getting this fund transfer to your nominated bank account immediately. Hope you remember that our sharing ratio is still the same, 45% you and 55% for me.

Please, provide me the following as we have 7 days to run it through thus:

1. Full Name.
2. Your Direct Mobile Number.
3. Your Contact Address.
4. Your Age.
5. Your Occupation.
6. Fax Number.

Also I want you to reconfirm your current address and telephone number to me to enable us move swiftly.

Best Regards,
Mr. Darel Williams.

Email analysis :

NOTE : dw196952@yandex.com
NOTE : guh5@vvgcc.my.vg
NOTE : Received : from [192.168.1.15] (154.120.100.36)