Tuesday, January 31, 2017

Ms.Ella Golan

I am Ms.Ella Golan, I am the Executive Vice President Banking Division with FIRST INTERNATIONAL BANK OF ISRAEL LTD (FIBI). I am getting in touch with you regarding an extremely important and urgent matter. If you would oblige me the opportunity, I shall provide you with details upon your response.

Faithfully,
Ms.Ella Golan

Email analysis :

NOTE : jgonzalez@conacyt.gov.py
NOTE : egolan001@gmail.com
NOTE : Received : from [192.168.0.107] (unknown [103.226.201.126])
NOTE : by correo.conacyt.gov.py (Postfix)
NOTE : conacyt.gov.py


NOTE : A government website was used to relay this scam.

Blocked Transaction. Case No 482168537 (Virus)

The Automated Clearing House transaction (ID: 765241823), recently initiated
from your online banking account, was rejected by the other financial
institution.

Canceled ACH transaction
ACH file Case ID 207878605
Transaction Amount 1220.03 USD
Sender e-mail cyogmu18381025@southwoodchurch.org
Reason of Termination See attached statement

Email analysis :

NOTE : cyogmu18381025@southwoodchurch.org
NOTE : client-ip=83.174.220.43;
NOTE : Received : from southwoodchurch.org
NOTE : (h83-174-220-43.static.bashtel.ru [83.174.220.43])


Open file :

OPEN : document_1.zip
EXTRACT : Empty file...
NOTE : Weird...

[Alibaba Inquiry Notification] Andrew Krivenko has sent you an inquiry (Alibaba Phishing)

www.Alibaba.com Trade Center IP:182.***.***.40 温馨提示:该买家设置了隐私保护,我们提供了代理邮箱帮助您与买家取得联系,现在您可以直接回复该邮件,但注意请不要删除本邮件任何内容否则会无法联系上买家。Andrew Krivenko from UKRAINE has sent you an inquiry View Details Manage Your Orders Jacky Lui Andrew Krivenko

Hi

Dear. Sir

We are Ukraine company. Please i want to know if you have the attached sample in stock and how long it takes to ship to Ukraine we want to place order immediately. Please reply to our email.

Best Regards
Mr. Krivenko

Company Name. U.E.E.S.I.
President. Krivenko
Mobile. 380-10-9118-3105
Company Phone. 380-32-819-3318
Company Fax. 380-32-819-3317
e-mail. import@ueesi.com
WeChat ID : kriven010911383105
attach.png It contains an attachment. Please sign into Trade Center to check it.

FAQ:

1. Tips for International Trading on Alibaba.com
2. Some top tips for safe trading on Alibaba.com

Recent Activity on Alibaba.com:

1. Pipelines for ordering on Alibaba.com
2. Recent new functions and promotions on Alibaba.com

Email Setting | Customer Services |
Help center | My Alibaba
You received this email because you are registered on Alibaba.com
Read our Privacy Policy and Terms of Use
Alibaba.com Hong Kong Limited.
26/F Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong
Tel: (+852) 2215-5100

阿里巴巴香港有限公司
香港銅鑼灣勿地臣街1號時代廣場1座26樓
電話:(+852) 2215-5100

Screenshot of the phishing :


Email analysis :

NOTE : feedback@service.alibaba.com
NOTE : client-ip=210.3.234.46;


Phishing analysis :

CLICK : VIEW Details
OPEN : http://sanantoniodenia.es/94582
REDIRECT : http://iluni-psiui.org/*
NOTE : This Account has been suspended.
NOTE : @AlibabaGroup phishing attempt. | #Alibaba #Phishing

Reply (Phishing)


Dear *@*

We noticed that you are running very low on storage volume.

Kindly verify email with the server to ensure smooth mailing experience.

click here to increase more free data

When data get's to 100% used it will lead to certain mail malfunctions and lost of files in the near future.

Sincerely
Storage Mail Help Desk.
This email can't receive replies.

Email analysis :

NOTE : williamnicole.co.za
NOTE : info@williamnicole.co.za
NOTE : Received : from 199-255-214-84.anchorfree.com
NOTE : ([199.255.214.84]


Phishing analysis :

CLICK : click here to increase more free data
OPEN : https://www.wefirstbranding.com/newsletters/issue55/shl/boxMrenewal.php?Email=*@*&.rand=*&lc=*&id=*&mkt=en-us&cbcxt=mai&snsc=1
NOTE : ERROR
NOTE : Phishing was removed.

Friday, January 27, 2017

Local representation

Dear *,

We are looking for employees working remotely.

My name is Kitty, I am the personnel manager of a large International company.
Most of the work you can do from home, that is, at a distance.
Salary is $2400-$5100.

If you are interested in this offer, please visit Our Site

Good day!

Email analysis :

NOTE : helga.wunder@chemie.uni-beispielstadt.de


NOTE : Received : from dsl-201-110-49-107-dyn.prod-infinitum.com.mx
NOTE : (unknown [201.110.49.107])


NOTE : http://201.110.49.107/html/index.asp

Your Sincere expectation from Rose

Greetings my dear.

How are you doing today, i hope everything is OK with you. I know that this mail will not come to you as a surprise, please bear with me. i will really like to have a good relationship with you, and i have a special reason why i decided to contact you.

I decided to contact you because of the urgency of my situation here, and after reading your profile i believe that your the person i want to spend my live and love together with. I am Miss Rosemary Duma 21 years old girl from Sudan, the only daughter of Late Dr. Duma Duma. my late father was the former deputy minister of national security who is now in Custody at ICC after many innocent soul were killed in my country Sudan, My father was killed by government troops, they accused my father of coup attempt.

I am constrained to contact you because of the maltreatment i am receiving from my step mother. She planned to take away all my late father's treasury and properties from me since the unexpected death of my beloved Father. Meanwhile I wanted to escape to the Europe but she hide away my international passport and other valuable traveling documents. Luckily she did not discover where I kept my late fathers File which contains important documents.

So I decided to ran away to the refugee camp where I am presently seeking asylum under the United Nations High Commission for the Refugees here in Dakar Republic of Senegal, I wish to contact you personally for a long term business relationship and investment assistance in your Country.

My late father of blessed memory deposited the sum of (US$4.6 Milion) in one of the leading bank with my names as the next of kin. But meanwhile you should not allow any other person to know about this money since my late father did not disclose it with any body rather do they know about the valuable documents .

I have informed the bank about my plans of transferring the money to me here in Senegal to start a new life but i don't know that my late father have an agreement with the bank, that i should be up to 30 years of age before i will have direct access to the money, if not then i should provide my partner to stand for me as my trustee and partner to the bank so the bank will make the transfer into my partners account.

However, I shall forward you with the necessary documents on confirmation of your acceptance to assist me for the transfer of the money to your account, and I will like you to help me invest the money in your country, and i will also like to complete my studies, as i was in my 1st year in the university when the crisis started,It is my intention to compensate you with 20% of the total money for your assistance and the balance shall be my investment capital. This is the reason why I decided to contact you. Please all communications should be through this email address only for save and confidential purposes.

As soon as I receive your positive response showing your interest I will put things into action immediately. In the light of the above, I shall appreciate an urgent message indicating your ability and willingness to handle this transaction sincerely.

so that i will nominate you to the bank so that you stand as my trustee and partner to receive my inheritance funds for our both benefits

Please do keep this only to yourself, please i beg you not to disclose it to anyone until i come over to join you immediately the fund is transferred into your account.

Please send your names__________ and telephone number________________

Thanks hoping to hear from you soon,

Yours faithfully

Miss Rosemary Duma

---------------------------------------------------------------------------
NOTE: If you received this message in your SPAM/BULK folder that is because of the restrictions implemented by your Internet Service Provider.

Email analysis :

NOTE : rosemary.3as@yahoo.com
NOTE : r_rose2@meta.ua
NOTE : X-Original-Senderip : 41.219.52.19