Hire A Social Catfish Search Specialist. Let's Get To The Bottom Of It Now! Hire A Social Catfish Search Specialist. Let's Get To The Bottom Of It Now!

Password phishing emails originating from West Africa

419 Scams, Lottery scams & Other African Dangers to Beware Of
Post Reply
User avatar
coolbreeze1975
R.I.P.
Posts: 13721
Joined: Thu Nov 10, 2011 4:38 pm
Location: Somewhere over the rainbow with a Martini, stirred, not shaken

Re: Password phishing emails originating from West Africa

Post by coolbreeze1975 »

Password Reset
Request Teamto youshow details
From Request Team

email addy = AlexanderReich82@gmx.de

IP NOT IN RS DB


IP: 212.227.17.22
ISP: 1&1 Internet AG
Services: Likely mail server
Type: Corporate
Country: Germany

header =

Return-Path: <AlexanderReich82@gmx.de>
X-AOL-IP: 212.227.17.22

email sent =



Dear A0L user,

We received a request on 03/27/14 to reset the password for your account. Please confirm this request to complete the password reset:

Yes, I would like to reset my password

No i didn't make this request, cancel password reset

To make additional edits to your account, sign in to myaccount.mail.aol.com

Thank you,
The A0L Team


CB1975 :cool:
:cool: CB1975

“Health is like money, we never have a true idea of its value until we lose it.”
~Josh Billings
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

Dear Customer,

we received a request to terminate your Account and the

process has started by our Mail Team, Please give us 12 working hours to close your Account.

To cancel the termination request click yahoo.com/mailverify/cancel/terminate? => tinyurl.com/qgtz65x
All files on your yahoo mail including (Inbox, Sent, Spam, Trash, Draft) will be deleted and access to your Yahoo Email address will be Denied.

Regards, Account Services

____________________________________________________
Please do not reply to this message. Mail sent to this address cannot be answered.

Return-Path: <johnteddy@hotmail.co.uk>
Received-SPF: softfail (transitioning domain of hotmail.co.uk does not designate 213.171.216.60 as permitted sender)
Received: from Envisage256 (server213-171-219-5.livedns.org.uk [213.171.219.5])
Subject: Email Alert
From: Yahoo Account Service <johnteddy@hotmail.co.uk>
Reply-To:


=> tinyurl.com/qgtz65x

^^this is the real link hidden under that real-looking yahoo link!
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

A few of your incoming mails were placed on pending status due to the recent upgrade to our database. In order to receive your messages, click on the link below to login and wait for response from Facebook.

mail.facebook.com/upgrade => quatral.com/convert/fr/.~/OTY1Mjcx/?i=TXpjNU5qQT0mYkdjOVpRPT0= <= evil link!

We apologise for any inconvenience and appreciate your understanding.

Thank You.
Facebook Team.

Copyright © 2014 Facebook .Inc . All rights reserved.


Received: from ebukavictoryech (77.234.43.187) by smtpout18.bt.lon5.cpcloud.co.uk (8.6.100.99.10223) (authenticated as alisonhawkes@btinternet.com)
From: "Facebook!" <alisonhawkes@btinternet.com>
Disposition-Notification-To: "Facebook!" <alisonhawkes@btinternet.com>
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

a few hours later, the same email tries a dying widow Nigerian 419 scam :lol: : http://www.romancescam.com/forum/viewto ... 80#p378380" onclick="window.open(this.href);return false;

Quite a multitalent in "419 university" ;)
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

Dear valued customer,
We have upgraded our system to serve you better.
You would have to apply for the upgrade on your account on our website:

ibank.zenithbank.com/internetbanking/index.jsp => leads to: tinyurl.com/k7p8ltk !! evil !

or your online account access will be suspended within 24hrs.

Zenith! Bank.
Copyright © 2014 Zenith! Bank. All rights reserved.


Received: from market12 by dal-sd001.hawkhost.com with local (Exim 4.82)
(envelope-from <market12@dal-sd001.hawkhost.com>)
Subject: internet banking-site upgrade
X-PHP-Script: marketingsandgold.com/amu.php for 41.220.69.154 Nigeria
From: zenith bank plc <wasanya@hotmail.co.uk>
X-Report-Abuse-To: spam@se001.arandomserver.com
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
IceFM
Moderator
Posts: 100074
Joined: Fri Nov 16, 2007 10:06 am
Location: .... on the Baltic Beach

IT Admin Service; <feedbackaeraby500000000@yahoo.co.jp>

Post by IceFM »

Dear Customer

Due to a few problems experienced in our service network,you are
expected to undergo an account holders re-validation process in
order to sort out some problems that may be encountered in our
email service to you.

This process is not going to take long and will be characterized
by certain lapses in our email services to you.

The IT Admin Service will require you to complete the
account details below and select a test question and answer (to
serve as security code that will be needed in logging in to your
account service during the duration of this process).

Full Name:
Email Account
Email Account Password:
Test Question:
Answer:


You will be sent a new confirmation alphanumerical password to
that will only be valid during this period and can be changed
after the process.

Thanks for your understanding.

Customer Service

IT Admin Service
------------------------------------------------------------------------------------------------------
+++ Я не воюю с Россией +++
+++ The FAQ / FAQ in deutsch +++
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

Dear valued customer,

Your online account has been successfully migrated to our new server

You are required to synchronize your token
device for effective online transactions

This process is in line with the cbn cashless policy

Failure to synchronize your token device will
lead to blockage of your token device and suspension of your online banking


KINDLY FOLLOW THE BELOW INSTRUCTION

1. Go to 1stbanknigeria-online.com/ .

2.Select your preferred login INDIVIDUAL or CORPORATE

3. Log on to your account

3. Provide the Answer to your secret questions and details

4. Lastly, enter the code generated buy your FBN hardware token device

KINDLY NOTE THAT YOU ARE REQUIRED TO IN PUT YOUR
TOKEN CODE TWICE AND BOTH CODES MOST BE GENERATED DIFFRENTLY

You must Synchronize your token to avoid
locking of your token thereby making it impossible to carry out transactions online.

Thank you for banking with us.

To sign up for your free e-statement, and for enquiries on FirstBank products
and services, please call
0700FIRSTCONTACT (0700-34778-2668228), 01-4485500, 0708-062-5000, SMS Short Code
30012 or email viruses are
present. You should however carry out your own virus checks before
opening this e-mail or its attachments as
First Bank Of Nigeria Ltd cannot accept responsibility
for any loss or damage arising from the use of
this e-mail or its attachments. **************************************
****************************************


Subject: New FirstOnline Banking Credentials
From: FirstOnlineBanking <adf93@hotmail.co.uk>
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

Dear valued customer,
We have upgraded our system to serve you better.
You would have to apply for the upgrade on your account on our website:

ibank.zenithbank.com/internetbanking/index.jsp
or your online account access will be suspended within 24hrs.

Zenith! Bank.
Copyright © 2014 Zenith! Bank. All rights reserved.

Subject: Internet Banking-Site Upgrade
From: ZENITH BANK PLC <recruitment@hotmail.com>
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

Warning!
Yahoo! Tech
Your Account Has Been Blocked!
Your account has been Blocked due to system error CODE: YB261729285.
If you would like to continue using your Email Address,
Verify Your Account Now
YOU WILL COMPLETELY LOSE YOUR EMAIL ADDRESS IF NO ACTION IS TAKEN.
Sincerely,
Yahoo! Inc ©2014 All Rights Reserved

X-Originating-IP: [208.180.40.76]
Received: from 72.30.237.173 (72.30.237.173) by 98.139.210.155(98.139.210.155);
Received: from 127.0.0.1 (EHLO txasav-vm07.suddenlink.net) (208.180.40.76)
Received: from vdesk3 ([168.61.42.190])
From: "Yahoo! Tech"<dannyshiew@suddenlink.net>
To: me
Subject: Warning!
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

Dear Account User,
We require you to verify your YAHOO! account, because we are about to close some email registered under yahoo which are causing our system to malfunction due to none usage of these emails. To avoid YAHOO! closing your email, do verify your email below.

For immediate access to verification, please click on the link below:
Click Here To Upgrade tinyu rl.com/kl7d ppj <= evil linky

This is to improve our service quality. We are sorry for inconveniences
Case number: 894162450
Property: Account Security
Copyright 2014 Yahoo! Inc. All rights reserved.


Received: from vdesk3 ([168.61.42.190])
From: "Yahoo! Dept"<19grimm48@suddenlink.net>
To: me
Subject: Warning!!!
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
spanky
Scam Buster
Posts: 1233
Joined: Sun Jul 21, 2013 5:45 pm
Location: USA

James MacCoy, james.maccoy@outlook.com

Post by spanky »

This email was received to one of my fake email baiting addys. No doubt the attachment sent to me contains a virus :twisted: :

From: james macCoy <james.maccoy@outlook.com>
Date: Thu, 22 May 2014

This mail is to inform you that your payment has been made. See attached file for the payment slip.
We were not foolish to fall in love with them. Our mistake was not knowing that we fell in love with fools.
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

We have upgraded our system to serve you better.
You would have to apply for the upgrade on your account on our website:

ibank.zenithbank.com/internetbanking/index.jsp
or your online account access will be suspended within 24hrs.

Zenith! Bank.
Copyright © 2014 Zenith! Bank. All rights reserved.


Received: from highhost by server213-171-196-191.live-servers.net with local (Exim 4.82)
(envelope-from <highhost@server213-171-196-191.live-servers.net>)
Subject: Internet Banking - Site Upgrade.
From: Zenith Bank Plc <eharmonypartner@hotmail.co.uk> <= :mrgreen:
Reply-To:
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

Dear valued customer,

Your online account has been successfully migrated to our new server

You are required to synchronize your token
device for effective online transactions

This process is in line with the cbn cashless policy

Failure to synchronize your token device will
lead to blockage of your token device and suspension of your online banking


KINDLY FOLLOW THE BELOW INSTRUCTION

1. Go to https:1stbanknigeria-online.com/ . tinyurl.com/mqbybbx < = evil link!!

2.Select your preferred login INDIVIDUAL or CORPORATE

3. Log on to your account

3. Provide the Answer to your secret questions and details

4. Lastly, enter the code generated buy your FBN hardware token device

KINDLY NOTE THAT YOU ARE REQUIRED TO IN PUT YOUR
TOKEN CODE TWICE AND BOTH CODES MOST BE GENERATED DIFFRENTLY

You must Synchronize your token to avoid
locking of your token thereby making it impossible to carry out transactions online.

Thank you for banking with us.

To sign up for your free e-statement, and for enquiries on FirstBank products
and services, please call
0700FIRSTCONTACT (0700-34778-2668228), 01-4485500, 0708-062-5000, SMS Short Code
30012 or email viruses are
present. You should however carry out your own virus checks before
opening this e-mail or its attachments as
First Bank Of Nigeria Ltd cannot accept responsibility
for any loss or damage arising from the use of
this e-mail or its attachments. **************************************
****************************************


Received: from highhost by server213-171-196-191.live-servers.net with local (Exim 4.82)
(envelope-from <highhost@server213-171-196-191.live-servers.net>)
Subject: New FirstOnline Banking Credentials
From: FirstOnlineBanking <ababat@hotmail.co.uk>
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

Your Account Would be Blocked!
Your account would be Temporary Blocked due to system error CODE: YB261729285.
If you would like to continue using your Email Address,
Verify Your Account Now
YOU WILL COMPLETELY LOSE YOUR EMAIL ADDRESS IF NO ACTION IS TAKEN.
Sincerely,
Yahoo! Inc ╘2014 All Rights Reserved

From: "Yahoo!"<eatmyass@suddenlink.com> :mrgreen:
To: me
Subject: Warning!
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
User avatar
FrumpyBB
Site Admin
Posts: 65252
Joined: Sun Apr 06, 2008 7:35 pm
Location: Central Europe

Re: Password phishing emails originating from West Africa

Post by FrumpyBB »

Dear Customer,

we received a request to terminate your Account and the

process has started by our Mail Team, Please give us 12 working hours to close your Account.

To cancel the termination request click yahoo.com/mailverify/cancel/terminate? => tinyurl.com/mxp4w5a evil linky!!
All files on your yahoo mail including (Inbox, Sent, Spam, Trash, Draft) will be deleted and access to your Yahoo Email address will be Denied.

Regards, Account Services



Received: from winweb07 (unknown [88.208.252.134])
Subject: Email Alert
From: Account-Service-Term <mrwilliamsjohn@hotmail.co.uk>
Reply-To:
Please try your best to block ALL your scammer´s still incoming messages and calls!

What is all this? => The FAQ

The scammers vs. Why is "he" still doing it?

Why is alerting the man in the pictures DANGEROUS?

Please click why confronting my scammer is terribly wrong :)
Post Reply