е931017364 (Apple Phishing attempt)

Our commitment to protecting your privacy comes from a deep respect for our customers.

Related image
iApple

Hello *@*,

We would like to inform you that we have experienced some technical difficulties last night which might have prevented you from accessing your account. We'd like you to review your information to ensure you get an up-to-date level:

Continue and review

Thank you!
Staff iApple!

We apologize for the inconvenience caused and thank you for your patience and understanding. 112 3 We know that your trust doesn’t come easy. That’s why we have and always will work as hard as we can to earn and keep it. This notification was sent to scamcz@gmail.com. Don't want occasional updates about Google+ activity and friend suggestions? Unsubscribe from these emails. iApple Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043 USA

Phishing analysis :

CLICK : Continue and review
OPEN : http://nfloridahook.com/pan.php?847DE55546747A5D6543F2C54A9C44F1FB69801DBE9482D48F2B9716F52BC6D3AB7FFB657FCF72475864E87B59FEC2D2B93E8C9F565936199A330E7ED5994

REDIRECT : https://box1117.bluehost.com/suspended.page/disabled.cgi/nfloridahook.com?847DE55546747A5D6543F2C54A9C44F1FB69801DBE9482D48F2B9716F52BC6D3AB7FFB657FCF72475864E87B59FEC2D2B93E8C9F565936199A330E7ED5994

NOTE : Phishing attempt...

Email analysis :

NOTE : 41.222.211.140
NOTE : replyonline@cs.iapple.com
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/html; charset=utf-8
NOTE : Return-Path : < replyonline@cs.iapple.com >
NOTE : Received : from mailgateway01.galaxybackbone.com
NOTE : (mx1.nmodepic.gov.ng. [41.222.211.140])
NOTE : Received : from unknown (HELO asgard5) ([104.215.249.224])
NOTE : by mailgateway01.galaxybackbone.com with ESMTP;
NOTE : client-ip=41.222.211.140;
NOTE : Content-Transfer-Encoding : base64
NOTE : е931017364

Info

Dear friend,

I Mr. Paul Tawiah Quaye, Inspector General of Ghana Police (IGP). I am writing you in respect of two trunk boxes here in your name in our custody which has been mandated for your straight and direct delivery.

And the only thing we are waiting for now is your current delivery location for the trunks delivery to be executed. For the government of the republic has mandated the immediate delivery completion of your trunks to commence, and also all documentations backing the delivery to you has been made already by the presidency.

So I look forward to hearing from you soon.

Sincerely,

Mr. Paul Tawiah Quaye, Inspector General of Ghana Police (IGP).

Email leak :

thomas.s.narron@gmail.com, john.smith431221@gmail.com, harrylura123@gmail.com, francekut@gmail.com, Toofgiblittle@gmail.com, lordidomaspellcaster@gmail.com, lordidomaspelllcaster@gmail.com, wizhackers10@gmail.com, D.schreuder98@gmail.com, Ivorstiffun40@gmail.com, Bradymartha55@gmail.com, kevin.pesci.business@gmail.com, neseseal@gmail.com, xxredwingsincxx@gmail.com, Elitemobhackers@yahoo.com, drogboduherbalcurepalace@gmail.com, eugeniebouchard49@gmail.com, drkosipowerfulltemple@gmail.com, lino321@gmail.com, Mastercodes10@gmail.com, endofpainspelltemple@outlook.com, endofpainspelltemple@gmail.com, drlugardendofpainspelltemple@yahoo.com, gustorresbig@gmail.com, gurushackers@outlook.com, hacklord20@gmail.com, joseph.l.meeker@gmail.com, sharonysmithy@gmail.com, amarice51@gmail.com, ch.goldschmidt@ollech-immobilien.ch, claire.george35@gmail.com, dorismorgan08@gmail.com, xxhypodermiaxx@gmail.com, edutwtw@gmail.com, okusisiokusisi2040@gmail.com, disgaifuchs@tutanota.com, newyorkrichlife@gmail.com, rebeccacourtney08@gmail.com, greatsukusolutiontemple@gmail.com, maryrobin08@yahoo.com, lizincedric76@gamail.com, herbalhealeracademy1@gmail.com, rosariothomas17@gmail.com, ricksimpsoncannabis@gmail.com, jeffjohn2653@gmail.com, joetheplumber529@gmail.com, jonathanwalker121@gmail.com, martinmcpherson1980@gmail.com, johanna@dollsdancers.fi, samplejanice0@gmail.com, zeusethicalhacker@gmail.com, zeusethical@gmail.com, klaus.apfelstrudel.von@gmail.com, Carloscafe@mail.com, jbankwater@gmail.com, juicer112@gmail.com, jebacarkecompany@wp.pl, jebacarkecompaty@wp.pl, Carloscafe@mailinator.com, jennifertull1@gmail.com, christheawesome46@gmail.com, davidhartman48@outlook.com, dschrute391@gmail.com, obasolutionhome@gmail.com, dannysauron1@gmail.com, burtmacklin9000@hotmail.com, Ehicarespellhelp@gmail.COM, katierose08888@gmail.com, danielandersonprivate@gmail.com, barrykrunt@gmail.com, stanleyphillips623@gmail.com, CANDOVALOVESPELL@GMAIL.COM, lauralbert24@gmail.com, obrawkins.nathan@gmail.com, monicaspiritualtemple@gmail.com, ogunspiritualspelltemple@gmail.com, supersolutionhome1@gmail.com, supersolutionhom@yahoo.com, alexiskimberly2010@gmail.com, osesespelltemple@gmail.com, out..drofemospelltemple@gmail.com, franknelson079@gmail.com, randywilsonCEO@gmail.com, azuumaspelltemple@gmail.com, Azuumaspelltemple@mail.com, osesespelltemple@gmaill.com, doeaf01@yahoo.com, neways103@hushmail.com, tomkelvin40@gmail.com, jessybrown223@gmail.com, richiejack@gmail.com, dr.eveherbeshome@gmail.com, sandra4@yahoo.com, adodalovespelltemple@gmail.com, turokmeceno12345@gmail.com, Ologbotemple@gmail.com, emilylukeman@gmail.com, andyjohnsonz10@gmail.com, dr.okijaspellshrine@hotmail.com, annabelpeterson73@gmail.com, jjroger74@hotmail.com, diannafaber52@gmail.com, sharrongreg81@gmail.com, ehigraceherbalcurecenter@gmail.com, ehigraceherpescure@gmail.com, justcallmeminty@gmail.com, fastatmcardmachine@gmail.com, startechblankatmhackers@outlook.com, beniyhachris19@gmail.com, papapowerfultemple10@gmail.com, sandramark799@gmail.com, comments@your-views.co.uk, helenaadamsp@gmail.com, babaagbasolutiontemple@gmail.com, salobaspiritualtemple@gmail.com, sadikcardhackers.us@gmail.com, dincrediblehackers@gmail.com, cybercrack227@gmail.com, ultimatespellcaster0@gmail.com, glotfeltylisa@gmail.com, drofemospelltempl@gmail.com, stephenmorgan887@gmail.com, ogboduherbalhivcure@gmail.com, ogboduspellhome@gmail.com, ogboduherbalhome@hotmail.com, carolanderson121@gmail.com, ogumenspelltemple@gmail.com, lindapaul500@gmail.com, lucyjackson@yahoo.com, dr.wakinalovetemple@gmail.com, minedan500@gmail.com, ewanherbalmagic@gmail.com, krisj@yahoo.com, droluleospiritualtemple@gmail.com, everyrosehasitsthorn56@gmail.com, gary.atmcardcashmachine@gmail.com, blankedatmcardmachine@outlook.com, mauriciorganisation@gmail.com, nelsonwilliams1991@gmail.com, aruby789@gmail.com, Candovalovespell@yahoo.com, alicechapman34@gmail.com, obasispelltemple@gmail.com, BLESSEDSPELLHOME@HOTMAIL.COM, wendydustin9@gmail.com

Email analysis :

NOTE : gh.police231@gmail.com

Hello From Sweden

Hi Good day,

I'm Karin Bengt From Sweden. I know you’ll be puzzled at the receipt of my E-mail. I also know you have all the right reasons to not respond, or be inquisitive and even be offended for intruding your privacy, but allow me to call you Friend. My reason for writing you is solely for us to be friends.

Some people talk about the risks and dangers of knowing someone through the Internet, to the point of becoming suspicious of their own shadows. But I must confess that our contact, even at a distance, will be harmless and must only focus on Friendship.

This note is only to confirm my intention of knowing you and maintaining a daily contact with each other, Only if my request seats well with you. I will look forward to your response.

Thank You.

Karin.

Email analysis :

NOTE : jcastro@hospitalchosica.gob.pe
NOTE : karin_bengt@yahoo.com
NOTE : Return-Path : < jcastro@hospitalchosica.gob.pe >
NOTE : X-Originating-Ip : [197.210.172.17]
NOTE : Mime-Version : 1.0
NOTE : X-Mailer : Zimbra 7.2.0_GA_2681 (ZimbraWebClient - FF3.0 (Win)/7.2.0_GA_2681)
NOTE : jcastro@hospitalchosica.gob.pe designates 190.41.88.12 as permitted sender)
NOTE : client-ip=190.41.88.12;

NOTE : Received : from mail.hospitalchosica.gob.pe
NOTE : (mail.hospitalchosica.gob.pe [192.168.0.8])
NOTE : by mail.hospitalchosica.gob.pe (Postfix)
NOTE : Hello From Sweden

Notes from Scam.cz :

- hospitalchosica.gob.pe servers were used to relay this scam.
- Compromised account is jcastro.

Request.

I am Ms.Golan I am getting in touch with you regarding an extremely important and urgent matter.If you would oblige me the opportunity, shall provide you with details upon your response.

Faithfully,
Ms. Golan

Email analysis :

NOTE : rte2378@outlook.com
NOTE : meraso@idsn.gov.co
NOTE : X-Originating-Ip : [45.58.37.104]

NOTE : Received : from mail.idsn.gov.co (mail.idsn.gov.co [190.66.23.131])

NOTE : X-Mailer : Zimbra 8.0.4_GA_5737 (zclient/8.0.4_GA_5737)
NOTE : Thread-Topic : Request.

Notes from scam.cz :

- Instituto Departamental de Salud de Nariño was used to relay this scam.
- Account was "meraso"

Hello My love

Hello My love

My name is lina williams I am a single girl, never no married. i will like to be your good friend and i am interested in knowing you, Write back to me in my E-mail I D at (lina48williams@gmail.com )so that i will give you full explanation of myself. and my picture, also ihave something to tell you about me

.Am Waiting for your quick reply

Thanks from me,l
lina williams

Email analysis :

NOTE : lina48williams@gmail.com
NOTE : lina12williams@outlook.com
NOTE : client-ip=65.55.34.15;

Angelina Belinda Beverly

It is well real that I do not know you but I ask God is to fit your saint heart to help me in my projects of donation with me. Then for more of details, so please contact me for more information on the donation project and myself. If his might that be you my vision and that you be in good faith please you want to contact me by mail private: beverly.angelinabel@gmail.com

May the peace and mercy of God be with you.

Ms. ANGLINA BELINDA BEVERLY

Pleased to read,

Email analysis :

NOTE : beverly.angelinabel@gmail.com
NOTE : User-Agent : izi webmail
NOTE : phil.autarddebragard@izi.re
NOTE : Mime-Version : 1.0
NOTE : amavisd-new at mail1.mobius.fr
NOTE : 80.69.208.48 as permitted sender

NOTE : smtp.mailfrom=phil.autarddebragard@izi.re
NOTE : X-Sender : phil.autarddebragard@izi.re
NOTE : Received : from smtp.izi.re ([127.0.0.1])
NOTE : Received : from iziport4 (pub13-134.mobius.fr [80.69.213.134])

NOTE : by smtp.izi.re
NOTE : HELLO