Search

Scam.cz

Analyzing 419 threat and scams

Richard Gross’s invitation is waiting for your response (LinkedIn Phishing)

LinkedIn
Richard Gross invited you to connect 3 days ago.

Accept

View Invitation

Richard Gross
CEO at HOC Trading LLC
More people who want to connect with you

Frank White
CONTRACTOR

View Message Here

Unsubscribe | Help
You are receiving LinkedIn notification emails.
This email was intended for User. Learn why we included this.
LinkedIn
© LinkedIn. Mailing address: Room 817, 18F, Building 18, #1 DiSheng Bei Road, Bejing Yizhuang Development Area, China. LinkedIn and the LinkedIn logo are registered trademarks of LinkedIn.

Email analysis :

NOTE : chair-curricula@meu.edu.jo
NOTE : X-Originating-Ip : [105.112.23.133]

Phishing screenshot :

Phishing analysis :

CLICK : ACCEPT
OPEN : http://ift.tt/2yhZaHp
REDIRECT : http://ift.tt/2xAmg8k
SCREENSHOT :

VALIDATE : FORM
REDIRECT : http://ift.tt/2yi9kYA
SCREENSHOT :

VALIDATE : FORM
REDIRECT : http://ift.tt/2hdevyY
SCREENSHOT :

http://ift.tt/2yhxIJE

Advertisements

MICROSOFT® REWARD!!! (Microsoft Scam)

MICROSOFT® CORPORATION
Cardinal Place
80-100 Victoria Street
London,SW1E 5JL
United Kingdom

Dear Winner

This message is from the Office of the MICROSOFT® Co-Operation. We are pleased to inform you of the result for the just concluded annual draws of the MICROSOFT® Online Lotto for regular users of Msn,Hotmail and Bing search engine for the year 2017.Your email address in the 1st category and therefore attracted a cash award of ?845,000.00 GBP (Eight Hundred and Forty Five Thousand Great British Pounds Sterling) in cheque credited to Email Bonus Numbers: MSLP-54399. Please proceed with your claims by writing to our Foreign Co-coordinator (Derrick McCourt) Public/Online Sector U.K So he can assist you in redeeming your price with the following details

Name:

Occupation:

Valid Mobile no :

Age :

Country:

Derrick McCourt

General Manager, Public/Online Sector U.K

E-mail: (derrickmccourt1@dr.com)
MICROSOFT® CORPORATION

Email analysis :

NOTE : shien@npo-wahaha.net
NOTE : derrick.mccourt@yandex.com
NOTE : Received : from unknown (HELO User) (shien@npo-wahaha.net@104.193.10.122)

NOTE : by aser.buddha.co.jp

http://ift.tt/2kCJcTs

Lors votre dernier achats (Phishing Société Générale)

Adhésion : Faite votre demande en ligne en cliquant-ici

Email analysis :

NOTE : Received : from 5.62.57.67 (IP may be forged by CGI script)
NOTE : by infong73.kundenserver.de
NOTE : Return-Path :
NOTE : noreply@nrj.fr
NOTE : X-Mailer : PHPMailer [version 1.73]

Phishing screenshot :

Phishing analysis :

CLICK : Faite votre demande en ligne en cliquant-ici
OPEN : http://ift.tt/2yBziHD
REDIRECT : http://ift.tt/2g625fW
SCREENSHOT :

SPOOFED EMAIL : noreply@nrj.fr

http://ift.tt/2yCgJmJ

Hi User, I sent you message on your LinkedIn network (LinkedIn Phishing)

Information from scam.cz :

– The linkedIn phishing has other formulas.
– Same phishing link as in this phishing.

Email analysis :

NOTE : dir-finance@meu.edu.jo
NOTE : X-Originating-Ip : [105.112.16.77]

http://ift.tt/2g624bS

Hi User, Ahmed Kinawy invitation is awaiting your response. (LinkedIn Phishing)

LinkedIn
Ahmed Kinawy wants to add you to their network

mahmoud ahmed
Ahmed Kinawy
CEO at RIOTRADE BUSINESS GROUP
Dubai:· 5,640 connections
Accept Ahmed’s invitation

LinkedIn is a social network and online platform for professionals. Learn More
Unsubscribe | Help

You are receiving Invitation emails. LinkedIn will use your email address to make suggestions to our members in features like People You May Know.
This email was sent to you.
LinkedIn

© 2017 LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2. LinkedIn is a registered business name of LinkedIn Ireland Unlimited Company. LinkedIn and the LinkedIn logo are registered trademarks of LinkedIn.

Email analysis :

NOTE : hsmuisem@meu.edu.jo
NOTE : Received : from [172.20.10.3] (105.112.24.147)

Phishing screenshot :

Phishing analysis :

CLICK :
OPEN : http://ift.tt/2yBVp0M
REDIRECT : http://ift.tt/2g8t76x
SCREENSHOT :

FILL : FORM
REDIRECT : http://ift.tt/2yBTYzA
SCREENSHOT :

http://ift.tt/2g622AM

PAYMENT DETAILS (Western Union Scam)

Attn:

Western Union money transfer center has completed the trace of the money transfer directed to you. We are redirecting a fund transfer to you. Your lump sum payment is ready since 14th September. You have to claim it now or it will expire soon. There a PIN Code on your western union account so no agent can claim your points. Because you have not used your WU Points since you started to use western union services, your points have doubled and accumulated. This has earned you over $17,000 overtime.

Please note; Each time you receive or send money from western union, you earn points for the service. This points can be converted to money after a period of time. Some western union agent will not tell you this and they will use up your western union points and convert them to free cash payment from western union. This is the reason why western union withdraws the licenses from many of our agents. If your agents refused to give you information about your western union points, don’t argue, just write to western union and your points will be revealed to you. Make sure to keep your western union card safe if you don’t have a western union card you can also demand the card from any of our western union agents.

Western Union After claiming you lump sum. It will start again from zero. Please, reply and include on this email your:

Full Names:
Date of Birth:
Address:
Telephone:

Western Union will send your mtcn number to pickup cash daily from any of our western union agent location near you.

Signed:

Dr. Karlina Herman,
Western union money transfer (WUMT)
http://www.westernunion.com

� 2017 Western Union Holdings, Inc., All Rights Reserved.

Virus-free. http://www.avg.com

Email analysis :

NOTE : westernunion@englandmail.com
NOTE : ecashport@post.com
NOTE : Received : from User (e2.starplexx.com [92.51.240.121])

NOTE : (Authenticated sender: test@chlazeni.cz)

http://ift.tt/2yCquBg

COMPENSATION FOR SCAMMED VICTIMS.

CENTRAL BANK OF NIGERIA
Plot 33, Abubakar Tafawa Balewa Way
Central Business District,
Cadastral Zone,
Abuja, Federal Capital Territory,
Nigeria
P.M.B. 0187,
Garki Abuja.
Nigeria.

ATTN: BENEFICIARY,

COMPENSATION FOR SCAMMED VICTIMS.

You are been officially contacted today because your funds werer e-deposited into the “Federal Suspense Account” of CBN last Month,because you did not Claim your funds as the rightful beneficiary from our corresponding bank, this payment serves as a compensation to scammed victimS to recover part of the money that they were defrauded by the trick stars.

Well known to all, the Central Bank of Nigeria is the mother Bank of all commercial Banks here in Nigeria as well as Nigeria beign the ECOWAS Chieftain country in Africa ,due to the amount of scamming systems used by the fraudlent officers and staffs working in the bank who manipulated and forged government information and also hacked and manipulated the beneficiaries details to their fraudulent use and dupe them of their money, in this respect international monetry fund IMF and CBN put a restriction that no fund will be deducted or withdrawn by any staff or officer for any reason so it has to be putting under a high insurance bond that makes it impossible for the impostors to divert or withdraw any money,be it staff or officer.

This morning at about (10:00am Standard Pacific Time) i was alerted by my Secretary that three men and a Lady were at my Office reception Waiting to see me,to my surprise they were two Canadians and a Nigerian attorney, they introduced themselves as (Mr. Tim Parker, Mr. Roland Gulf, Both from Canada), accompanied with them is a Nigerian attorney With the name (Barriester Lambart Nnamdi), and Miss Hellene Rose.

Really these men were unexpected by me because their visit was impromptu and unusual, i had to ask them why they came to see me,they said that they were here to collect the overdue funds which rightfully belongs to you, on your behalf, these foreigners actually claimed this beyond reasonable doubts, that you are no more alive.

I asked them who authorized them to come down to Nigeria for the Collection of this Payment, they told me that your relatives asked them to come and collect these funds on your Behalf, infarct it was the biggest shock that this Bank have ever received so far because you’r overdue funds is still in the”Federal Suspense account” of CBN, yet you sent these men to come and Collect the Funds on your behalf without notifying us.

We in this Bank do not understand why you sent these men to come and Collect your funds on your behalf, if actually you wanted them to help you collect your overdue bill Sum, at least you Should have informed me as the Executive Governor of this Bank.they tendered some vital documents which proved that you actually sent them for the collection of these funds, honestly, it really baffled me that you took such decision Without my consent.

Here are the documents which they tendered to this Bank today:
1. LETTER OF ADMINISTRATION.
2. HIGH COURT INJUCTION.
3. RELEASE ORDER.
(4) DEATH CERTIFICATE.

These documents which they tendered to this noble Bank is a clear Proof that you sent them to Collect this funds for you, finally, i told them to come back by Monday morning and they promised to come back,kindly clarify us on this issue before we make this Payment to these foreigners who came on your behalf, you are also required to send your full information to me as Stated below:Due to diversion and manipulating acts by some staffs,there is a restrictions placed on the funds to avoid fraudulent acts by the impostors again, that is what we are trying to wipe out from our foreign beneficiaries, if you want your funds contact the assigned office.

You’re full Names…
Home Address…
Active Telephone Number…
A scan copy of your international passport

Awaiting your urgent reply through this email

Email analysis :

NOTE : cbnpaymentnotifica@yahoo.co.nz
NOTE : 66.163.186.204

http://ift.tt/2goI29x

Your Apple ID: Access from new web or mobile device (Apple ID Phishing)

Dear Apple Customer,

This email was generated because of a login attempt from a web or mobile device located at 88.190.229.170 (FR). The login attempt included your correct Apple ID and password. The Apple ID Guard is required to complete the login. No one can access your account without also accessing this email. You are unable to access your account. Please use this account specific recovery link for assistance recovering your account.

Recovering my account

Thanks,
The Apple Team
http://ift.tt/1KRQ7OT

TM and copyright © 2017 Apple Inc. 1 Infinite Loop, MS 96-DM, Cupertino, CA 95014.
All Rights Reserved / Keep Informed / Privacy Policy / My Apple ID

Email analysis :

NOTE : Return-Path :
NOTE : Return-Path : f@node02.facesharedasia1.com
NOTE : Mime-Version : 1.0
NOTE : Content-Type : multipart/alternative; boundary=”===============1462413996==”
NOTE : Received-Spf : client-ip=216.127.151.37;
NOTE : Received : from WIN-6Q15KS5IKGJ ([216.127.151.37])

NOTE : Received : from [38.121.232.25]

NOTE : Your Apple ID: Access from new web or mobile device

Phishing analysis :

CLICK : Recovering my account
OPEN : http://ift.tt/2xi047D
REDIRECT : http://ift.tt/2xTnakH
SCREENSHOT :

VALIDATE : FORM
REDIRECT : http://ift.tt/2xhZuqC
SCREENSHOT :

CLICK : Confirm My Account
REDIRECT : http://ift.tt/2gdvzVY

http://ift.tt/2hRtzqk

IMF REPS BENIN

Attention

We have concluded to transfer your payment- through-western union $3,000 daily until the$1,7million US is completely transferred to you accordingly. Though,Director John Basil has sent $3,000 in your name today so contact Agent:below with your full Name,phone contact and address

Name:Raymond Ejide
TEL: +22999613677
Email:unionwestern235@gmail.com

So hasten up and give the agent a call to process your payment at once.Ask him for the MTCN sender name and test Question/Answer to pick up your first payment of $3,000, and also ask him how much it will cost you for the transfer.

ThanksFrom Hon Mr.Wayne Power
IMF REPS BENIN

Email analysis :

NOTE : unionwestern235@gmail.com
NOTE : “WWW.”@ninus.ocn.ne.jp
NOTE : X-Originating-Ip : [41.74.9.27]

http://ift.tt/2gdKtvw

Create a free website or blog at WordPress.com.

Up ↑

%d bloggers like this: