Tuesday, December 13, 2016

How are you today?

Attention My Dear

I have registered your winning Price of $4.5USD with DHL Express Company with registration code of ( DCJKT00617G). please Contact with your delivery information such as, Your Name, Your Address ID CARD COPY and Your Telephone Number:

DHL Express Company Office:
Contact Person: Mr. David Candy
E-mail: dhlcourircompany@gmail.com
PHONE: NO+229-636 90 566

I have paid for the Security fee.The only fee you have to pay is their Insurance & Delivery fee only.Please indicate the registration Number and ask Him how much is their Insurance & Delivery fee so that you can pay it.

Best Regards,
Mrs. Jolie Davis

Email analysis :

NOTE : dhlcourircompany@gmail.com
NOTE : micaela@speedy.com.ar
NOTE : X-Origin : 41.79.217.134

Monday, December 12, 2016

Attention Winner,

World Lottery Association (WLA)
Basel CH-4002,
Switzerland

Attention Winner,

This is to inform you that your One Million Five Thousand United States Dollar ($1.5M) Lottery Win will be send to you via ATM MASTER CARD or Certified bank draft Cheque so that there will not be any delay or much tax's as this lottery organizer want you to receive your winning prize within 30 days before the expiring date of the bank draft. The total amount mentioned above was awarded to your Facebook email address for winning a first category in the 2016 draw; your payment is available at one of the PRIME Bank here in Benin Republic where your payment file was allocated (NAME OF THE BANK WITH HOLD FOR SECURITY REASON).

It was decided to use ATM VISA CARD or Certified Bank Draft payment to pay our winners which you are one of them to avoid difficulties in receiving winning funds; this award came to you Curtsy of FACEBOOK and GOOGLE. Note that your ATM VISA CARD was powered by Gold MasterCard which is accepted at over 900,000 Automated Teller Machines payment centers in over 210 countries worldwide and the CARD withdrawal daily limit is $10,000USD until you withdraw all your total winner amount of $1,500,000.00USD, And note that the only and last money you are going to pay to receive your payment is $99USD courier shipment charges. To receive your winning payment,you are advised to contact the Fiduciary with your following information

Your Receiving Name..: Your Receiving Address..: Your Country..: Your Tel..: Your Sex..: Your Age..: Your Occupation..:

Note: the Ninety nine dollars is the last and only fee associated to this delivery of your package,(IMPORTANT) Winners are mandated to keep this notification private to avoid fraudulent claim pending the transfer.

Contact your payment fiduciary at: (info70857@gmail.com )

Yours Faithfully; WLA ANNOUNCING TEAM, SWITZERLAND

Email analysis :

NOTE : info70857@gmail.com
NOTE : "www."@beetle.ocn.ne.jp
NOTE : X-Originating-Ip : [84.53.238.158]

Thursday, December 8, 2016

Message notification *@gmail.com (Link to virus)


Google

Nddcole Watddson (Google Support) just sent you a message:

06/12/2016

Undeliverable messages (*@gmail.com).

Get more information

Don't want occasional updates about Gmail activity? Change what email Google Team sends you.

Email analysis :

NOTE : Received : from server.oeirasdigital.pt
NOTE : (server.oeirasdigital.pt. [213.229.111.207])
NOTE : client-ip=213.229.111.207;


NOTE : X-Php-Originating-Script : 10000:bisend.php

Link analysis :

CLICK : Get more information
OPEN : http://projetomac.org/wp/Undeliverable_messages.html
DOWNLOAD A FILE : Undeliverable_messages.zip
INFORMATION : Undeliverable_messages.zip is a virus
SHA256 : be0908fbf059517f8ea204d1636e00a7810146fb9c920fc01bb4315b8e8e0067

Virus analysis :

AegisLab Troj.Downloader.Script!c
Arcabit HEUR.JS.Trojan.ba
Cyren JS/Nemucod.EY!Eldorado
F-Prot JS/Nemucod.EY!Eldorado
Fortinet Malware_Generic.P0
K7AntiVirus Trojan ( 004dfe6d1 )
K7GW Trojan ( 004dfe6d1 ) 20161208
Kaspersky HEUR:Trojan-Downloader.Script.Generic
Sophos Mal/DrodZp-A

Exposing virus :

PASTEBIN : http://pastebin.com/20PLKDCB
RAW : http://pastebin.com/raw/20PLKDCB



Hello/Urgent

Dear Friend,

I am Barrister Obinna Jude, a Solicitor and the Personal attorney to Mr. Hoel Paul Edouard, a national of France, who died in a Plane crash on Monday 2nd September 1998 GMT 14:22 UK while they were flying from New York to Geneva. You can see the news or report on the below site.

http://www.cnn.com/WORLD/9809/swissair.victims.list/index.html

My client his wife and three children lost their lives on that plane crash.Since then,i have made several enquiries to the embassy to locate anyof my clients extended relatives, this has proved unsuccessful. After several unsuccessful attempts, I decided to trace his relatives over the internet, so as to locate any member of his family but to no avail.

I have contacted you to assist in repatriating the money that belonged to my late client before they get confiscated or declared as unserviceable by the bank where this huge deposit were lodged. Particularly, the Bank where the deceased had an account valued at about US$15 Million Dollars, has issued me a notice to provide the next of kin or have the account confiscated within the next ten official working days.

Since i have been unsuccessful in locating the relatives for over 3 years now therefore, I have decided to seek your consent to present you as the next of kin of the deceased, so that the proceeds of this account valued at US$15 Million Dollars, can be paid to you and then you and me can share the money 50% to me and 45% to you, while 5% will be mapped out for any expenses during the process or tax as your government may require. I have the certificate of deposit that can be used to back up any claim we may make.All I require is your honest cooperation to enable us see the deal
through.

I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law. Please get in touch with me strictly via this email (obinna.jude@yandex.com) to enable us discuss further.

Best regards.
Obinna Jude
Principal Attorney.

Email analysis :

NOTE : obinna.jude@yandex.com
NOTE : ludo@fcvnet.net
NOTE : Received : from [104.247.196.21]
NOTE : (unknown [104.247.196.21])


NOTE : by mail.fcvnet.net (Postfix)

FW: FTC subpoena (Phishing attempt)

You've been subpoenaed by the FTC.
FTC Subpoena

Please get back to me about this.
Thank you
Richard Kent
Senior Accountant
richard@*.*
Phone: 441-216-2849
Fax: 441-216-5880

Email analysis :

NOTE : richard@*.*
NOTE : Received : from unknown (HELO IEOSOZAX) (117.247.121.182)




NOTE : User-Agent : Mozilla/5.0 (Windows NT 6.1; rv:24.0)
NOTE : Gecko/20100101 Thunderbird/24.2.0
NOTE : BSNL was used to relay this phishing.

Phishing analysis :

CLICK : FTC Subpoena
OPEN : http://benxethainguyen.vn/api/get.php?id=dGVzdEB0ZXN0LmNvbQ==
RESULT : 404, removed...
WHOIS : benxethainguyen.vn

benxethainguyen.vn whois :

TÊN MIỀN benxethainguyen.vn
Ngày đăng ký: 16-03-2012
Ngày hết hạn : 16-03-2017
Tên chủ thể đăng ký sử dụng :Ông Nguyễn Sự
Trạng thái : clientTransferProhibited
Quản lý tại Nhà đăng ký: Công ty TNHH Một thành viên Viễn thông Quốc tế FPT
Máy chủ DNS chuyển giao: + ns2008.nhanhoa.com.vn + ns2009.nhanhoa.com.vn
Registration date : 16-03-2012
Expiration date : 16-03-2017
Registrant : Ông Nguyễn Sự
Status : clientTransferProhibited
Current Registrar : Công ty TNHH Một thành viên Viễn thông Quốc tế FPT
DNS Server : + ns2008.nhanhoa.com.vn + ns2009.nhanhoa.com.vn

Your FedEx International Cheque Of $4.180,000.00USD

FedEx Courier Service,
Address : Sheikh Zayed Road 26th Floor
Dubai Media City 9239 UAE Dubai
Tel: +971521079311
Fax: +971 4-331-0718
Fax: +971 4-332-2304
Email: fed.ex.ae@yandex.com
Website: http://www.fedex.com/ae/

Customers Service Days –Monday to Sunday

Attention: Valuable Customer,

We have a parcel for you containing a winning Cheque worth the sum of Four Million One Hundred And Eighty Thousand United State Dollars ($4.180,000.00USD) and also an Apple MacBook Pro and the new Apple iPhone (7) 120GB mobile phone added to your package which will be delivered to you after you provide all the required information to the FedEx Delivery Company before the parcel can be shipped to your own residential address in your country. Furthermore, you might be asking yourself how comes this email or your cheque. Your winning cheque was brought to our office by the Coca-Cola Bottling Company via a Lottery Fiduciary Claim Agent, signifying that you are a rightful winner to their Lottery Award Promo selected randomly which is powered by the Coca-Cola Bottling Company and also the Apple Company of United Arab Emirates. The main aim of this promo is to advertise the Coca-Cola Bottling Company product and the Apple Company product worldwide. Your e-mail address was amongst the (5) lucky email addresses that makes your email address as one of the lucky email address and they have decided to send your winning package to you through Federal Express Delivery Service. What you have to do now is to contact our Delivery Department for immediate dispatch of your winning package to your residential address.

For your information, the Lottery Fiduciary Company has paid the Delivery fee and Security keeping fee & Shipping charges as well as the Vat fees; you will have to pay a sum of $280.00 USD to the FedEx Delivery Department being payment for the Insuring of your package. All you have to do is to insure your winning parcel with the Insurance Company, which is registered with FedEx United Arab Emirates Dubai. The reason why you are been ask to pay for the Insurance fee is because of the fact that all items & packages that is not Insured by the insurance company of United Arab Emirates Dubai are not allowed to be delivered to their delivery address. So you are to pay the FedEx Courier Service the Insurance Fee to enable the insurance company insured your winnings for delivery.

As soon as you effect the payment our delivery team will take your Insurance fee, they will proceed to the insurance company to Insure your winning funds, as soon as it is been Insured by the insurance company of United Arab Emirates Dubai we shall commence with your delivery without any delay and also we shall provide you with the Insurance receipt that was given to us by the insurance company as a proof that you have Insured your package for delivery. The main reason why you are been ask to Insure your winning package is to certify that the package is not a Drug Affiliated Fund (DAF) neither is the funds to sponsor Terrorism in your country this will help you to avoid any form of query from the Monetary Authority of your country. And also we cannot take the risk to carry out the delivery of your winning package in-case of any possible demurrage. You have to contact our delivery team and ask them how you are going to make the payment of the Insurance fee of your package. We hope that you will respond to us as soon as possible because if you fail to respond until the expiry date of this package, we may refer the package to United Arab Emirates Dubai Commission of Welfare or better still to Coca-Cola Bottling Company or Apple Company. Kindly contact the delivery department (FedEx Delivery Post) with the details given below:

Delivery Manager.
Name: Mr. Kelvin Green.
Tel: +971521079311
Email: fed.ex.post@qq.com

You have to fill the form below and send back to us, and it's mandatory to reconfirm your postal address and telephone numbers to enable us commence with your delivery and mostly to enable us insure your Winning package and also do provide us with any scanned copy of any proof of your identification.

=========================================
Do Provide Us With The Information Below
=========================================
Your Full Names -------------
Your Home Address ----------------
Date of Birth ----------------------
Your Contact Phone or Mobile Number ------------------------
Occupation -------------------------
Marital Status ---------------------
Country ----------------
Your State ------------------
========================================

Kindly complete the above form and summit it to the delivery manager on fed.ex.post@qq.com) As soon as your details are received, our delivery team will give you the necessary payment procedure so that you can effect the payment for the Insurance fee. As soon as they confirm your payment of $280.00 USD, they will not hesitate to work straight to the insurance company and insure your winning for delivery. It usually takes 24 hours being an overnight delivery service to deliver your winning funds to you after it has been insured by the insurance company. Ensure to contact our delivery department with the email address given above and ensure to fill the form as well to enable a successful reconfirmation and a safe delivery of your winning package.

Yours Faithfully,
Mrs. Aisha Philips
FedEx Online Team Management®
© Copy Right Reserved 1994-2016.

Email analysis :

NOTE : post.fed.ex@qq.com
NOTE : mirta.morinigo@senac.gov.py
NOTE : Received : from [192.168.1.250] (96-88-46-89-static.hfc.comcastbusiness.net [96.88.46.89])


NOTE : by mail.presidencia.gov.py
NOTE : mail.presidencia.gov.py ?


NOTE : presidencia.gov.py ?


NOTE : mail.presidencia.gov.py server was used to relay a scam.