Sunday, June 12, 2016

Sergeant Ann Hester Leigh

my name is Sergeant Ann Hester Leigh, United States military officer, looking for a reliable trust worthy person for a cordial relationship.

I'll be glad if you write me here for more details.

regard!
Sergeant Ann Hester Leigh

Email analysis :

NOTE : bean.an@outlook.com
NOTE : jameskibler52@gmail.com

Job representative needed,

TimeOne Group Ltd are in search of a competent individual or firm that will be responsible in handling payment on our behalf as a Sales Representative Officer, contact us for further information.

Thanks, and best regard,

Fabien Barbaud
TimeOne Technology Management.

Email analysis :

NOTE : fbarbaud023@gmail.com
NOTE : hrrdnld@gmail.com
NOTE : Received : from webmail.ps5.com.br (unknown [189.50.80.100])


NOTE : (Authenticated sender: elza@bew.net.br)
NOTE : by painel.bew.net.br (Postfix)
NOTE : User-Agent : Roundcube Webmail/1.1.0
NOTe : Organization : TimeOne Group

I AM SORRY TO ENCROACH INTO YOUR PRIVACY IN THIS MANNER REPLY .....

Dear sir/Ma

I am sorry to encroach into your privacy in this manner, I got your contact from the professional data base found in the internet Yahoo tourist search; I was searching for a foreign reliable partner., I find it pleasurable to offer you my partnership in business. I only pray at this time that your address is still valid. I want to solicit your attention to receive money on my behalf.

My name is . Richard Williams US ARMY MAJOR, I am serving in the US military in Afghanistan with the army infantry division, I have some amount of funds that I want to move out of the country for safe keep and investment.

if interested kindly reply via email for further details. ( richardwilliamsu00@gmail.com )

PLEASE, TREAT THIS PROPOSAL AS TOP SECRET.

God bless you and thanks for cooperation in advance.

Best Regards,

MAJOR. Richard Williams

Email analysis :

NOTE : info@lee.org
NOTE : richardwilliamsu00@gmail.com
NOTE : Received : from mail.com (unknown [50.255.40.77])

Monday, June 6, 2016

Urgent ! (Phishing Banque Populaire)

Bonjour,

Le département technique procède à une mise à jour 2016 de logiciel, programmée de façon à améliorer
la qualité de nos services.
Nous vous demandons avec bienveillance de procéder à la mise à jour en cliquant sur le lien ci-dessous et
de sécuriser votre PassCyberPlus:

ACCÉDER À MES COMPTE

Nous vous remercions pour la confiance que vous nous accordez et restons à votre disposition.

Cordialement
Directeur de la relation clients

Si vous ne voulez plus recevoir ce message automatique, connectez-vous à votre espace employeur et modifiez l'option de rappel de déclaration dans la rubrique

Email screenshot :


Email analysis :

NOTE : asadadass@bil.com
NOTE : Content-Type : text/html; charset=iso-8859-1
NOTE : Mime-Version : 1.0
NOTE : Return-Path : < asadadass@bil.com >
NOTE : Received : from bil.com ([84.39.33.123])
NOTE : Received : by bil.com
NOTE : X-Php-Originating-Script : 0:xroot.php
NOTE : Urgent !

Phishing analysis :

CLICK : ACCÉDER À MES COMPTE
OPEN : http://shop.longavita-ug.ru/LICENSE/pop/
REDIRECT : http://personalcolor.co/facebook/pop/*/index.php
SCREENSHOT :


CLICK : OK
REDIRECT http://personalcolor.co/facebook/pop/*/index.html
SCREENSHOT :


CLICK : VALIDER
REDIRECT : http://personalcolor.co/facebook/pop/*/login.php
REDIRECT : http://personalcolor.co/facebook/pop/*/index.php

ATTENTION BENEFICIARY,

WE THE WESTERN UNION REMMITTING OFFICE WERE HEREBY WRITE TO INFORM YOU THAT WE HAVE ALREADY SENT YOUR FULL COMPENSATION PAYMENT OF $6.800,000.00 TO YOU THROUGH WESTERN UNION, YOU WILL BE RECEIVING 10.000.00USD PER DAY, AND WE HAVE SEND THE FIRST PAYMENT TO YOU. SO CONTACT OUR DIRECTOR Dr.Peter Anthony AND ASK HIM TO GIVE YOU THE WESTERN UNION PAYMENT INFORMATION SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH WESTERN UNION WITHOUT ANY PROBLEM.

CONTACT HIM WITH THE BELLOW INFORMATION.
(unionw633@gmail.com)
PHONE NUMBER (+22999165308)
AND CONTACT HIM WITH YOUR FULL INFORMATION.

Your name............
country.... ..........
phone ...........
address...............
city..........
age..................
sex..................

CALL OR EMAIL HIM NOW SO THAT HE CAN PROVIDE THE WESTERN UNION INFORMATION TO YOU AS SOON AS YOU CAN.

Thanks and Remain Blessed John Paul.
From WESTERN UNION.
YOUR FIRST PAYMENT THROUGH WESTERN UNION.

Email analysis :

NOTE : unionw633@gmail.com
NOTE : officefile112016@tochka.net
NOTE : dvmail.tochka.net (imap.tochka.net. [91.207.122.195])
NOTE : client-ip=91.207.122.195;

عاجل جدا

900،000 دولار أمريكي تمنح لك من قبل شركة شيفروليه. إرسال الاسم والعنوان والهاتف المحمول والجنسية عن طريق: chevroletcompany 34@gmail.com

Email analysis :

NOTE : chevroletcompany34@gmail.com
NOTE : botrach.qbh@moj.gov.vn
NOTE : Return-Path : < botrach.qbh@moj.gov.vn >
NOTE : X-Originating-Ip : [10.28.30.60]
NOTE : Mime-Version : 1.0
NOTE : X-Mailer : Zimbra 7 (zclient/7)
NOTE : Message-Id : < *-*@mail.moj.gov.vn >
NOTE : client-ip=203.113.130.106;


NOTE : Received : from Internal Mail-Server by Mail-SeCureOUT
NOTE : (envelope-from botrach.qbh@moj.gov.vn)
NOTE : Received : from mail.moj.gov.vn (mail1.moj.gov.vn [10.28.30.68])
NOTE : by mail.moj.gov.vn (Postfix)


What is moj.gov.vn ?


- MOJ is the Vietnamese Ministry of Justice.
- The server of the Vietnamese Ministry of Justice was used to relay this scam.
- Account : botrach.qbh