Thursday, July 12, 2018

Yоu're my viсtim

Hi, viсtim.
I write you beсause I рut a malwаrе оn the wеb pаgе with роrn whiсh yоu have visited.
My virus grаbbed all yоur persоnal infо аnd turned оn your сamеra which саpturеd thе рrocеss оf yоur оnanism. Just after thаt the soft sаved your contaсt list.
I will dеlеtе thе comprоmising videо and info if yоu рay mе 999 EURO in bitcоin. This is аddrеss for payment : 16QvCe5fNwK4TXXG7gaxZbtFyJ5sypaba1

I give yоu 30 hоurs аftеr yоu орen my mеssаge fоr mаking thе transаctiоn.
As sооn аs yоu rеаd the messаgе I'll see it right аwаy.
It is not nеcessary tо tеll mе that you hаve sеnt monеy tо me. This аddrеss is соnnеctеd tо you, my system will delete еvеrything аutоmatiсаlly after transfer сonfirmatiоn.
If you nееd 48 h just reрly оn this lettеr with +.
You сan visit thе роlice stаtiоn but nobody саn help you.
If you try to deceivе me , I'll see it right away !
I dоnt livе in yоur country. Sо they can not trаck my loсаtiоn еvеn for 9 months.
Goodbye. Dont fоrget аbоut thе shamе and to ignorе, Your life cаn be ruined.

Email analysis :

NOTE : noreply@portdouglasdaintree.com
NOTE : Received : ⁨from portdouglasdaintree.com (portdouglasdaintree.com [185.144.29.166])
NOTE : Received-Spf : ⁨Pass (sender SPF authorized) identity=mailfrom; client-ip=185.144.29.166;


NOTE : helo=portdouglasdaintree.com; envelope-from=noreply@portdouglasdaintree.com;

Domain analysis :

Domain Name: portdouglasdaintree.com
Registry Domain ID: 547796162_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.synergywholesale.com
Registrar URL: http://whois.synergywholesale.com
Updated Date: 2017-08-15 04:16:29
Creation Date: 2006-08-08 20:14:10
Registrar Registration Expiration Date: 2018-08-08 20:14:10
Registrar: Synergy Wholesale
Registrar IANA ID: 1609
Registrar Abuse Contact Email: noc@synergywholesale.com
Registrar Abuse Contact Phone: +61 3 8399 9483
Reseller: VentraIP Australia
Reseller: http://www.ventraip.com.au
Reseller: noreply@ventraip.com.au
Registrant Name: Stephen Nutt
Registrant Street: P.O.Box 744
Registrant City: Port Douglas
Registrant State/Province: QLD
Registrant Postal Code: 4877
Registrant Country: AU
Registrant Phone: +61.740993356
Registrant Email: stephen@showmedia.com.au
Registry Admin ID: Not Available From Registry
Admin Name: Stephen Nutt
Admin Street: P.O.Box 744
Admin City: Port Douglas
Admin State/Province: QLD
Admin Postal Code: 4877
Admin Country: AU
Admin Phone: +61.740993356
Admin Email: stephen@showmedia.com.au
Registry Tech ID: Not Available From Registry
Tech Name: Stephen Nutt
Tech Street: P.O.Box 744
Tech City: Port Douglas
Tech State/Province: QLD
Tech Postal Code: 4877
Tech Country: AU
Tech Phone: +61.740993356
Tech Email: stephen@showmedia.com.au
Name Server: NS29.DOMAINCONTROL.COM
Name Server: NS30.DOMAINCONTROL.COM

Saturday, July 7, 2018

Security Upgrade Alert. (Wells Fargo Phishing)

Dear Customer Esteemed,

Wells Fargo Technical Department is carrying out a planned Security upgrade.

Access to your online banking is currently Limitted.

To get started, Click on the "Security Upgrade" Below to validate your online services.

"Security Upgrade"

This instruction has been sent to all Wells Fargo Bank customers and is MANDATORY.

Thank you for Banking with us.

© 1999 - 2018 Wells Fargo. All rights reserved. NMLSR ID 399801

Email analysis :NOTE :

NOTE : ar.harati@t-online.de
NOTE : Received : ⁨from mailout08.t-online.de
NOTE : (mailout08.t-online.de. [194.25.134.20])


Phishing analysis :

CLICK : "Security Upgrade"
OPEN : http://lobofer.com.br/wp-admin/includ/online.php
SCREENSHOT :

Tuesday, July 3, 2018

Refer to this following Invoice#******* (Dropbox Phishing)

***@***

View the Document i attached to you via Dropbox. Sent on 21/02/2018.

View document

Kind Regards.
Cindy Whitfield
Rich Rags
Designer Wearable Art
My cell Phone number is 530-520-5540

Email analysis :

NOTE : dirkschulzegronover@t-online.de
NOTE : 81.133.119.148


Phishing analysis :

CLICK : View document
OPEN : http://huzaifamarble.com/redirect/ch.html
REDIRECT : http://www.bashtv.com.au//telekomlomel/drp/page.php?id=*
NOTE : http://www.bashtv.com.au//telekomlomel/drp/page.php
SCREENSHOT :

Important Notice!!! ( American Express Phishing )


This is an automated email, please do not reply

Important Update

We noticed there's a problem associated with your account due to breakdwon in security.
For protection, Require you to update it immediately so as to have your account restored.
Kindly use the link below to sign in and restore your account.
Click Here To Update

Regards,
American Express Company

© All users of our online services subject to Privacy Statement and agree to be bound by Terms of Service. Please review. © 2018 American Express Company. All rights reserved.

Email analysis :

NOTE : safeguards@mt.com
NOTE : client-ip=68.99.120.44;⁩


Phishing analysis :

CLICK : Click Here To Update
OPEN : http://www.getsmartcenter.com/wp-admin/bless.htm


RESULT : Phishing was removed

Thursday, June 28, 2018

Inquiries

Dear Sir/Madam,

It is my profound intention to contact you regarding a Business Relationship i hope will interest you.

Will hope to get a response from you soon.

Regards,

Anoj Singh
+27634814993

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

Email analysis :

NOTE : anoj.singh1942@gmail.com
NOTE : anoj.singh1000@webmail.co.za
NOTE : Received : ⁨from User (8ta-148-42-31.telkomadsl.co.za [41.148.42.31])


NOTE : By mail.nandhanagrandhotels.co.in (Postfix)

Bonjour mon Cher (e)

Bonjour mon Cher (e)

Sil vous plaît, cher, retrouvez-moi sur mon adresse e-mail pour plus de présentations et d'apprendre à mieux connaître pour projet confidentiel.S'il vous plaît, merci de m'écrire par le biais de mon adresse E-mail:davideugenie1@gmail.com Je suis en attente de votre courriel.

Email analysis :

NOTE : Received : ⁨from (41.85.176.153) by wmlighttin.pc.tim.it;


NOTE : finsegr@tin.it
NOTE : davideugenie1@gmail.com