Friday, March 18, 2016

Maria Tarrillo

I have a lucrative business proposal for you, kindly contact my email for further details. I hope to hear from you soon.

Thanks
Ms. Maria Chero Tarrillo
E-mail: mariachero.tarrillo@gmail.com

Email analysis :

NOTE : mariachero.tarrillo@gmail.com
NOTE : mariatarrillo@atm.com
NOTE : User-Agent : Roundcube Webmail/0.7.2
NOTE : Received : from webmail.scorchotago.co.nz
NOTE : (unknown [182.54.160.28])

Good Loans

Good bye to financial problems

Is there anyone out there who finds it difficult to get a loan Or is there any one out there who have been humiliated by friends and relatives due to inadequate funds and feel oppressed, Mr. Whyte of Elite financial Homes is offering loans at an affordable rate apply now.

elitefinancialhomes@gmail.com

Email analysis :

NOTE : surefinancialhomes@gmail.com
NOTE : surefinancialservice@gmail.com

Thursday, March 17, 2016

Wang Lei

PLEASE CAN WE DISCUSS A PROFITABLE DEAL?
IF YOU WISH TO HEAR MORE LET ME KNOW.
THANK YOU.

--------------------------------------------------------------------------------------------------------
Evite el Spam: Nunca responda correos que soliciten su nombre de
usuario y Password. Administracion de red. Universidad de La Habana.

Email analysis :

NOTE : rjbeltran@lex.uh.cu
NOTE : wl7702@qq.com
NOTE : Authentication-Results : rjbeltran@lex.uh.cu
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain; charset=ISO-8859-1; DelSp="Yes"; format="flowed"
NOTE : Content-Disposition : inline
NOTE : User-Agent : Internet Messaging Program (IMP) H3 (4.3.10)
NOTE : Return-Path : < rjbeltran@lex.uh.cu >
NOTE : Received : from smtp.uh.cu (proxy2.uh.cu. [200.55.139.213])


NOTE : Received : from lex.uh.cu (lex.uh.cu [10.6.54.30])


NOTE : by smtp.uh.cu
NOTE : Received : by lex.uh.cu
NOTE : Received : from 197.211.53.11 (197.211.53.11 [197.211.53.11])


NOTE : by mail.lex.uh.cu (Horde Framework)
NOTE : client-ip=200.55.139.213;
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Hi

Informations from Scam.cz :


- uh.cu is the University of Havana.
- rjbeltran@lex.uh.cu email was used to authenticate with mail.lex.uh.cu
- uh.cu was compromised.

YOUR $800.000.00USD UNITED STATE DOLLARS

From: Postal Service Office
Cotonou, Republic Du Benin
E-mail: postoffice965@gmail.com

Hello My Dear Beneficiary

THIS IS TO INFORM YOU THAT THERE IS ATM MASTER CARD IN THIS OFFICE DEPOSITED BY Ministry of Finance Benin Republic ON THE 11TH OF MARCH 2016. YOUR E-MAIL ADDRESS WAS ATTACHED TO IT AND IS TO BE POST TO YOU.WE HAVE BEEN WAITING FOR YOU TO CONTACT US FOR YOUR THE ATM CARD VALUED THE SUM OF $800.000.00USD UNITED STATE DOLLARS AND SOME VITAL DOCUMENTS BUT WE DO NOT HEAR FROM YOU. SO KINDLY GET BACK TO THIS OFFICE(REGULAR MAIL POST OFFICE BENIN REPUBLIC) TO AVOID FRAUDULENT ISSUES CONCERNING THIS SERVICE. CONTACT MR.TUNDE JOSEPH TEL +22999297865

YOU ARE TO CONFIRM AND PROVIDE TO US YOUR POSTAL ADDRESS BELOW.

YOUR FULL NAME..
YOUR COUNTRY........
YOUR POSTAL
ADDRESS....
YOUR DIRECT PHONE NUMBER...

YOU ARE TO PAY FOR THE STAMP DUTY FEE OF $75 USD AND YOU ARE ADVISE TO SEND THE STAMP DUTY FEE THROUGH WESTERN UNION OR MONEY GRAM TO THE POST OFFICE WITH THE NAME GIVING TO YOU ,BELOW AND FORWARD THE PAYMENT INFORMATION TO THIS POST OFFICE. FOR IMMEDIATE STAMP DUTY OF YOUR ATM CARD. HERE ARE THE WESTERN UNION OR MONEY GRAM PAYMENT INFORMATION YOU WILL USE TO SEND THE MONEY TO THE POST OFFICE.

Receiver Name......Isaac Chucks
Country......Benin Republic
City....Cotonou
Question....God
Answer.....Bless
AMOUNT.....$75 USD

NOTE:THAT EVERY CLAIMS HAS AN EXPIRYING PERIOD OF TEN WORKING DAYS (10 DAYS) SO YOU HAVE TO DO THAT VERY URGENT TO AVOID EXPIRATION.

Have a nice day.

Call us with this line...+22999297865

Mr.Tunde Joseph
S.G, Postal Service
Cotonou, Benin
Republic.

Email analysis :

NOTE : postoffice965@gmail.com
NOTE : fg5@fgb.my.vg
NOTE : X-Originating-Ip : [74.115.1.60]
NOTE : 74-115-1-60.anchorfree.com
NOTE : Areti Internet

150 à 250 EURO /Jour sur internet avec votre pc

150 à 250 EURO /Jour sur internet avec votre pc

Si vous êtes à la recherche d'une opportunité honnête et légitime pour augmenter vos revenus, je vais maintenant mettre fin à vos recherches. Pour la première fois, un jeune de 23 ans dévoile comment il fait 55,000 Euros par mois avec des explications étape par étape pour la mise en place de votre propre affaire en ligne. Vous devez simplement suivez les explications, et d'ici 30 minutes vous pouvez faire des ventes et empocher des commissions. Vous pouvez visiter le site pour commencer maintenant.

Sincèrement,
Read More
best product,
David Enderson
Email: quantvquantv@gmail.com

Our mailing address:

26 rue
paris (20200)
France

Free Email Marketing

Sample Banner
This is how your banner will look like
www.*.com
Advertisement

Scam analysis :

Click : Read More
OPEN : http://tinyurl.com/250dollarjour
REDIRECT : http://www.fortuneacademie.com/?hop=*


Registrant Email: DC7E1C40477A4BF59029F4BA5D873D1F.PROTECT@WHOISGUARD.COM

CLICK : http://1.academie.pay.clickbank.net/

Registrant Name: Domain Admin
Registrant Organization: ClickBank
Registrant Street: 917 Lusk St., Suite 200
Registrant City: Boise
Registrant State/Province: ID
Registrant Postal Code: 83706
Registrant Country: US
Registrant Phone: +1.7205093688
Registrant Email: domains@clickbank.com

Email analysis :

NOTE : quantvquantv@gmail.com
NOTE : X-Me-Engine : default
NOTE : X-Iadb-Ip : 95.142.25.116


NOTE : X-Me-Helo : il.a08.ms16.thmailsvr.net


NOTE : X-Iadb-Ip-Reverse : 116.25.142.95


NOTE : Received : from il.a08.ms16.thmailsvr.net ([95.142.25.116])
NOTE : by thmailsvr.net (thmailsvr.net)
NOTE : 150 à 250 EURO /Jour sur internet avec votre pc

Wednesday, March 16, 2016

Action Needed: Verify Account Information's (USAA Phishing Attempt)

To ensure the clear view of the message, please click show images and move it to your inbox folder.

USAA Member Home
Verify Account Information's

Dear USAA Customer,

We're currently upgrading our systems to bring enhanced features to your USAA Account experience. As a result, your account is temporarily unavailable.
Please download the file attached and upgrade your USAA Account to our new system.

Note: FAIL TO UPGRADE YOUR ACCOUNT, IT WILL BE AUTOMATICALLY CLOSED.

After this step, you are permitted to access your usaa.com System.

Thank you,
USAA

Please do not reply to this e-mail. To ensure the safety of your account, please update your information in our database.
USAA, 9800 Fredericksburg Road, San Antonio, Texas 78288.

USAA means United Services Automobile Association and its insurance, banking and investment affiliates.
87832-0713

Update_Account_Information's-USAA.html

USAA Phishing attempt analysis :

- The phishing was an html page.
- The page is also available as a raw file : http://pastebin.com/raw/B4DLgJe8

Email analysis :

NOTE : fevima@infonegocio.com
NOTE : Mime-Version : 1.0
NOTE : X-Msmail-Priority : Normal
NOTE : Return-Path : < fevima@infonegocio.com >
NOTE : X-Priority : 3
NOTE : X-Mailer : Microsoft Outlook Express 6.00.2600.0000
NOTE : X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : Received : from pop.prtcnet.org (pop.prtcnet.org. [69.176.19.5])
NOTE : Received : from [46.21.150.135] (helo=User) by pop.prtcnet.org


NOTE : client-ip=69.176.19.5;
NOTE : Action Needed: Verify Account Information's