NOTE: Oh look! A yahoo sending a bulk spam email from a free yahoo account!!! The entire content of this missive is fake and will not benefit the reader in any way, shape or form. However, if you do respond, it will benefit the author and harm you considerably.
From: Deborah Corde <corde.deborah1@yahoo.com> To:09:30:33 CDT, Monday 28 October 2019
Attachments: None
Message ID: <1606311304.1287393.1572273028939@mail.yahoo.com>
Return Path: <corde.deborah1@yahoo.com>
Reply To: cordedeborah90@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us1.ppe-hosted.com (unknown [10.7.66.32]) by pure.maildistiller.com with ESMTPS id A11A91A005C for < >; Mon, 28 Oct 2019 14:30:32 +0000 (UTC)
from sonic308-1.consmr.mail.bf2.yahoo.com (sonic308-1.consmr.mail.bf2.yahoo.com [74.6.130.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us1.ppe-hosted.com with ESMTPS id 6F290B4009B for < >; Mon, 28 Oct 2019 14:30:32 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic308.consmr.mail.bf2.yahoo.com with HTTP; Mon, 28 Oct 2019 14:30:31 +0000
From:Mrs. Deborah Corde Attn: Dearest One, I am the above Named person from Kuwait. I am married to Mr. Robert Adams. who worked with Kuwait embassy in Benin Republic for Nine years before he died in the year 2010. We were married for eleven years without a child. He died after a brief illness that lasted for only four days. Before his death we were both born again Christian. Since his death I decided not to remarry or get a child outside my matrimonial home which the Bible is against. When my late husband was alive he deposited the sum of $3.8 Three Million Eight hundred Thousand Dollars (3.8 ) Million U.S. Dollars) in the bank here in a fixed suspence account and he declare the fund where made for our family intending business, Presently,the fund is still with the bank, my Doctor told me that I have serious sickness which is cancer problem.The one that disturbs me most is for orphanages, widows,propagating the word of God and to endeavor that the my stroke sickness Having known my condition I decided to donate this fund to a church or individual that will utilize this money the way I am going to instruct herein I want a church or an individual that will use this fund house of God is always maintained. The Bible made us to understand that Blessed is the hand that giveth. I took this decision because I don’t have any child that will inherit this money. I don’t want a situation where this money will be used in an ungodly way. This is why I am taking this decision. I am not afraid of death hence I know where I am going. I know that I am going to be in the bosom of the Lord. Exodus 14 VS 14 says that the lord will fight my battle and I shall hold my peace. I don’t need any telephone communication in this regard because of my health hence the presence of my husband’ s relatives around me always I don't want them to know about this development. With God all things are possible. As soon as I receive your reply I shall give you the contact of the bank here in Benin Republic where my husband deposited the money. I want you and the church to always pray for me because the lord is my shephard, My happiness is that I lived a life of a worthy of emulations. Whosoever that Wants to serve the Lord must serve him in spirit and Truth. Please always be prayerful all through your life. Any delay in your reply will give me room in sourcing another church or individual for the same purpose. Please assure me that you will act accordingly as I Stated herein. Remain blessed in the Lord. Yours in Christ, Mrs. Deborah Corde
Envelope Sender: <corde.deborah1@yahoo.com>
'From' Header: Deborah Corde <corde.deborah1@yahoo.com>
Subject: From:Mrs. Deborah Corde
Timestamp: 09:30:33 CDT, Monday 28 October 2019
Message-ID: <1606311304.1287393.1572273028939@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Very High
Client IP Address: 74.6.130.40
Client GeoIP Lookup: United States
Email Size: 5.7 kB
Encrypted? No
Monday, October 28, 2019
Please help me for my life, (geez, really?!?!?!)
NOTE: Nothing like bulk spam emails to start ones day off. Don't be the nice person that responds to this criminal. Nothing in this message has any truth whatsoever to it. This was sent by a criminal who bought your email address and many others to send these criminal missives to as many people as possible all over the world. This crook is hoping someone will buy their fake story, provide the information they ask for and then profit from it while leaving the poor reader that fell for it broke and ruined.
From: Marina Robert <marinarobert73@gmail.com> To:12:48:44 CDT, Sunday 27 October 2019
Attachments: None
Message ID: <459613963.1083442.1572198519867@mail.yahoo.com>
Return Path: <marinarobert73@gmail.com>
Reply To: marinarobert110@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.37]) by pure.maildistiller.com with ESMTPS id 1867E1A004D for < >; Sun, 27 Oct 2019 17:48:44 +0000 (UTC)
from sonic313-14.consmr.mail.bf2.yahoo.com (sonic313-14.consmr.mail.bf2.yahoo.com [74.6.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id DAC35B4005B for < >; Sun, 27 Oct 2019 17:48:43 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic313.consmr.mail.bf2.yahoo.com with HTTP; Sun, 27 Oct 2019 17:48:42 +0000
Re:My Letter, I know that this message might meet you In utmost surprise. However, it's just my urgent need for foreign partner that made me to contact you for this way for a transaction. I'm Miss Marina Robert 19 years the only child of late Mr. and Mrs. Mrs.Jackson Robert. My father was a very wealthy cocoa merchant and politician in Cote d'Ivoire, who was shot to death by on known people. Before the death of my father in a private hospital here, he secretly called me on his bed side and told me he has the sum of nine million,five hundred thousand United State Dollars. USD($9.500,000) in an account of fixed/suspend in one of the prime bank here in Abidjan that he used my name as his only child for the next of Kin in depositing of the funds. He also explained that it was because of this wealth that he was kill and warmed me about his brother. I want you to help me with the following: (1) To provide a bank account that money will be transferred. (2) To serve as guardian. (3) To arrange for me to come to your country to continue my studies to obtain a residence permit in your country. I will offer you 30% of the total sum as compensation for your effort after the successful transfer of this money into your nominated account. Waiting to hear from you, please reply me if you can help me sincerely.please reply me back with this email Address: mr4help1@gmail.com Thanks and God bless you I await your urgent reply. Regards, Miss Marina Robert Mail: mr4help1@gmail.com
Envelope Sender: <marinarobert73@gmail.com>
'From' Header: Marina Robert <marinarobert73@gmail.com>
Subject: Please help me for my life,
Timestamp: 12:48:44 CDT, Sunday 27 October 2019
Message-ID: <459613963.1083442.1572198519867@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk High
Client IP Address: 74.6.133.124
Client GeoIP Lookup: United States
Email Size: 4.5 kB
Encrypted? No
From: Marina Robert <marinarobert73@gmail.com> To:12:48:44 CDT, Sunday 27 October 2019
Attachments: None
Message ID: <459613963.1083442.1572198519867@mail.yahoo.com>
Return Path: <marinarobert73@gmail.com>
Reply To: marinarobert110@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.37]) by pure.maildistiller.com with ESMTPS id 1867E1A004D for < >; Sun, 27 Oct 2019 17:48:44 +0000 (UTC)
from sonic313-14.consmr.mail.bf2.yahoo.com (sonic313-14.consmr.mail.bf2.yahoo.com [74.6.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id DAC35B4005B for < >; Sun, 27 Oct 2019 17:48:43 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic313.consmr.mail.bf2.yahoo.com with HTTP; Sun, 27 Oct 2019 17:48:42 +0000
Re:My Letter, I know that this message might meet you In utmost surprise. However, it's just my urgent need for foreign partner that made me to contact you for this way for a transaction. I'm Miss Marina Robert 19 years the only child of late Mr. and Mrs. Mrs.Jackson Robert. My father was a very wealthy cocoa merchant and politician in Cote d'Ivoire, who was shot to death by on known people. Before the death of my father in a private hospital here, he secretly called me on his bed side and told me he has the sum of nine million,five hundred thousand United State Dollars. USD($9.500,000) in an account of fixed/suspend in one of the prime bank here in Abidjan that he used my name as his only child for the next of Kin in depositing of the funds. He also explained that it was because of this wealth that he was kill and warmed me about his brother. I want you to help me with the following: (1) To provide a bank account that money will be transferred. (2) To serve as guardian. (3) To arrange for me to come to your country to continue my studies to obtain a residence permit in your country. I will offer you 30% of the total sum as compensation for your effort after the successful transfer of this money into your nominated account. Waiting to hear from you, please reply me if you can help me sincerely.please reply me back with this email Address: mr4help1@gmail.com Thanks and God bless you I await your urgent reply. Regards, Miss Marina Robert Mail: mr4help1@gmail.com
Envelope Sender: <marinarobert73@gmail.com>
'From' Header: Marina Robert <marinarobert73@gmail.com>
Subject: Please help me for my life,
Timestamp: 12:48:44 CDT, Sunday 27 October 2019
Message-ID: <459613963.1083442.1572198519867@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk High
Client IP Address: 74.6.133.124
Client GeoIP Lookup: United States
Email Size: 4.5 kB
Encrypted? No
my dear in the lord,
NOTE: Wow, based "on your good profile" (which doesn't exist) and apparently plenty of others!!! This genius didn't even try to hide all the CC's this is being sent to in this run. Guaranteed there's hundreds more like this being blasted all over the world to thousands of email addresses purchased cheap. This entire email is lies and a scam. I feel bad for nice people who fall for this and then have to endure identity theft, monetary theft and all the headaches. Trash these.
BTW: Note the bad English, no signature, free email address from sender. What is "inhesitate"???? New word scramble?
From: 이름을 등록해주세요 <infoyv1012@daum.net> To: MMUHLENB@eiknes.se, Maddoc34@me.com, Manuel.Guerrero@cdcr.ca.gov, Maria@bakeiteasy.ie, Marieharding_mh@yahoo.co.uk, Marihughes@rocketmail.com, Marijke.Kaat@surfnet.nl, Marshmalo2@aol.com, Martin.Ward@durham.ac.uk, Martin_E_Evans@compuserve.com, Mary.Vaughan@clona.ie, Maryanne.kennan@gmail.com, Marybeth@butcherfamily.com, MauryU@aol.com, McCulloughMAI@cpa.com, Meg.Phillips@NARA.Gov, Megankylie92@gmail.com, Melbard@UWPlatt.edu, MelfromWBL@aol.com, Michael.markiw@asu.edu, MichaelMangieri@xcalrockets.net, Michaelann@frontporchpantry.com, Michele.woods@wipo.int, MidwestBBQ@comcast.net, Missilemanmark@aol.com, Mlk044@yahoo.com, Morton.beebe@gmail.com, MtnPks@comcast.net, N9602219@hud.ac.uk, NKURAN@neu.edu, NSAMARA@BIRZEIT.EDU, NSpriggs@sandiego.gov, Nancy.Murere@mme.gov.na, Navcad9945@aol.com, NavyPhoto22@gmail.com, Ngian_Lek_Choh@nlb.gov.sg, Nickgeorge616@comcast.net, Nkelson@cox.net, Nora.gruenberg@gmail.com, OXMan03@aol.com, Odean_Cole@pioj.gov.jm, Orr_KChu@CompuServe.com, Oswaldo.Quiros@kerry.ie, P.D.Cook@damtp.cam.ac.uk, PASSAGLIA@AOL.COM, PAcevedo@jlgarchitects.com, PHY5MJ3H@leeds.ac.uk, PMartin235@aol.com, PMzensoryreflexology@gmail.com, PPJ1@fs2.ee.umist.ac.uk, Patrick@thefirehouse.ie, Patty.Beamsley@gmail.com, Paulcraughan@gmail.com, Pauline@kookee.ie, Peter@EMBL-Hamburg.de, Petercroke19@gmail.com, PollyannaNotes@centuryinter.net, Popper2000@aol.com, Prestonsl1944@gmail.com, Primoz.Juznic@ff.uni-lj.si, R.Brow@Verizon.net, RBRoll13@aol.com, RCOLBURN@CPWRCPA.COM, RChristianb@yahoo.com, RGASPARD@WORKSBUREAU.COM, RICKY@IACFARES.COM, RJMACK4264@aol.com, RKaarsberg@Worksoft.com, ROBIN@THEPLAYERGROUP.COM, Ralphellenmoreno@msn.com, Rambo117@verizon.net, Raneetha_Rajaratnam@nlb.gov.sg, Rebecca@FPcpafirm.com, Rebelnet@aol.com, RetNavyLDO@gmail.com, Ria.Botha@ekurhuleni.gov.za, Rich@RichPotter.net, Rick@Meridiangroup.com, RickHawk@ExecPC.Com, RickSchlueterTaylor@gmail.com, Rob@stonecot.demon.co.uk, RobDye@WriteMe.com, Robert@ButterflyMan.com, Robert@StrongEntertainment.com, RocketJones@gmail.com, Rocketking@outlook.com, Rod.Ward@Sheffield.ac.uk, Rodirick@aol.com, Ronbk143@bellsouth.net, Roseanne-Fabina@gnc-hq.com, Ross.Richardson@utas.edu.au, Rubylofton@aol.com, Rupert.Ward@umds.ac.uk, SGRGOLF1@aol.com, , Sales@lacadabrewery.com, Sandy@sportchutes.com, Sarah.ODonnell@aiavt.org, Satwinder.Setia@adecco.com06:07:13 CDT, Monday 28 October 2019
Attachments: None
Message ID: <20191028200352.Hlbi5NrARUq9O8N7fYkZJQ@infoyv1012.hanmail.net>
Return Path: <infoyv1012@daum.net>
Reply To:
MIME Version: 1.0
Content Type: text/html; charset=utf-8
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.12]) by pure.maildistiller.com with ESMTPS id 212F4E0064 for < >; Mon, 28 Oct 2019 11:07:13 +0000 (UTC)
from mail-smail-vm53.hanmail.net (mail-smail-vm53.daum.net [203.133.181.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id AB4554005C for < >; Mon, 28 Oct 2019 11:07:12 +0000 (UTC)
from mail-hmail-was10 ([10.197.10.52]) by mail-smail-vm53.hanmail.net (8.13.8/8.9.1) with SMTP id x9SB6Qbu026581 for < >; Mon, 28 Oct 2019 20:06:26 +0900
from mail-hammer-was7.s2.krane.9rum.cc ([10.197.10.40]) by hermes of mail-hmail-was10 (10.197.10.52) with ESMTP id n9SK3smX21700551088 for < >; Mon, 28 Oct 2019 20:03:54 +0900 (KST)
my dear in the lord,
Based on your good profile I want to solicit for your help in fulfilling my wish, I am Mrs.yvonne yesyi, 58yrs old widow from France, my husband and I worked with Tullow oil Cote d’Ivoire before he died, I am writing you this message via a computer lap top on my sick bed at the hospital were I am undergoing medical treatment I have been diagnosed of Endometrial cancer unfortunately for me my doctor said I don't have any chance to survive except by a miracle I have spent a lot of money on medical treatment yet no improvement.
The reason why I am writing you this letter is because I want you to stand as beneficiary to the sum of my $ 2.5 Million which i inherited from my late husband I don’t have any biological child of my own who will inherit this money neither do I have any adopted child My relatives and friends have plundered so much of my wealth since my illness and I cannot live with the agony of entrusting this huge responsibility to any of them anymore.
I want to donate this money to support children and orphanages charity in your country help me to fulfil this goal before I die and please always remember to pray for me when I die my soul will rest in peace. so if you are willing to help me receive this money in your account for the charity do not be inhesitate to get back to me immediately for further explanation and conversation on how we will proceed:
Hoping to receive your urgent reply.with this email Address/ ( inf0.1n@yandex.com )
Your's sincerely.
Envelope Sender: <infoyv1012@daum.net>
'From' Header: 이름을 등록해주세요 <infoyv1012@daum.net>
Subject: my dear in the lord,
Timestamp: 06:07:13 CDT, Monday 28 October 2019
Message-ID: <20191028200352.Hlbi5NrARUq9O8N7fYkZJQ@infoyv1012.hanmail.net>
Attachments: None
Client IP Address: 203.133.181.11
Client GeoIP Lookup: Korea, Republic of
Email Size: 7.3 kB
Encrypted? No
BTW: Note the bad English, no signature, free email address from sender. What is "inhesitate"???? New word scramble?
From: 이름을 등록해주세요 <infoyv1012@daum.net> To: MMUHLENB@eiknes.se, Maddoc34@me.com, Manuel.Guerrero@cdcr.ca.gov, Maria@bakeiteasy.ie, Marieharding_mh@yahoo.co.uk, Marihughes@rocketmail.com, Marijke.Kaat@surfnet.nl, Marshmalo2@aol.com, Martin.Ward@durham.ac.uk, Martin_E_Evans@compuserve.com, Mary.Vaughan@clona.ie, Maryanne.kennan@gmail.com, Marybeth@butcherfamily.com, MauryU@aol.com, McCulloughMAI@cpa.com, Meg.Phillips@NARA.Gov, Megankylie92@gmail.com, Melbard@UWPlatt.edu, MelfromWBL@aol.com, Michael.markiw@asu.edu, MichaelMangieri@xcalrockets.net, Michaelann@frontporchpantry.com, Michele.woods@wipo.int, MidwestBBQ@comcast.net, Missilemanmark@aol.com, Mlk044@yahoo.com, Morton.beebe@gmail.com, MtnPks@comcast.net, N9602219@hud.ac.uk, NKURAN@neu.edu, NSAMARA@BIRZEIT.EDU, NSpriggs@sandiego.gov, Nancy.Murere@mme.gov.na, Navcad9945@aol.com, NavyPhoto22@gmail.com, Ngian_Lek_Choh@nlb.gov.sg, Nickgeorge616@comcast.net, Nkelson@cox.net, Nora.gruenberg@gmail.com, OXMan03@aol.com, Odean_Cole@pioj.gov.jm, Orr_KChu@CompuServe.com, Oswaldo.Quiros@kerry.ie, P.D.Cook@damtp.cam.ac.uk, PASSAGLIA@AOL.COM, PAcevedo@jlgarchitects.com, PHY5MJ3H@leeds.ac.uk, PMartin235@aol.com, PMzensoryreflexology@gmail.com, PPJ1@fs2.ee.umist.ac.uk, Patrick@thefirehouse.ie, Patty.Beamsley@gmail.com, Paulcraughan@gmail.com, Pauline@kookee.ie, Peter@EMBL-Hamburg.de, Petercroke19@gmail.com, PollyannaNotes@centuryinter.net, Popper2000@aol.com, Prestonsl1944@gmail.com, Primoz.Juznic@ff.uni-lj.si, R.Brow@Verizon.net, RBRoll13@aol.com, RCOLBURN@CPWRCPA.COM, RChristianb@yahoo.com, RGASPARD@WORKSBUREAU.COM, RICKY@IACFARES.COM, RJMACK4264@aol.com, RKaarsberg@Worksoft.com, ROBIN@THEPLAYERGROUP.COM, Ralphellenmoreno@msn.com, Rambo117@verizon.net, Raneetha_Rajaratnam@nlb.gov.sg, Rebecca@FPcpafirm.com, Rebelnet@aol.com, RetNavyLDO@gmail.com, Ria.Botha@ekurhuleni.gov.za, Rich@RichPotter.net, Rick@Meridiangroup.com, RickHawk@ExecPC.Com, RickSchlueterTaylor@gmail.com, Rob@stonecot.demon.co.uk, RobDye@WriteMe.com, Robert@ButterflyMan.com, Robert@StrongEntertainment.com, RocketJones@gmail.com, Rocketking@outlook.com, Rod.Ward@Sheffield.ac.uk, Rodirick@aol.com, Ronbk143@bellsouth.net, Roseanne-Fabina@gnc-hq.com, Ross.Richardson@utas.edu.au, Rubylofton@aol.com, Rupert.Ward@umds.ac.uk, SGRGOLF1@aol.com, , Sales@lacadabrewery.com, Sandy@sportchutes.com, Sarah.ODonnell@aiavt.org, Satwinder.Setia@adecco.com06:07:13 CDT, Monday 28 October 2019
Attachments: None
Message ID: <20191028200352.Hlbi5NrARUq9O8N7fYkZJQ@infoyv1012.hanmail.net>
Return Path: <infoyv1012@daum.net>
Reply To:
MIME Version: 1.0
Content Type: text/html; charset=utf-8
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.12]) by pure.maildistiller.com with ESMTPS id 212F4E0064 for < >; Mon, 28 Oct 2019 11:07:13 +0000 (UTC)
from mail-smail-vm53.hanmail.net (mail-smail-vm53.daum.net [203.133.181.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id AB4554005C for < >; Mon, 28 Oct 2019 11:07:12 +0000 (UTC)
from mail-hmail-was10 ([10.197.10.52]) by mail-smail-vm53.hanmail.net (8.13.8/8.9.1) with SMTP id x9SB6Qbu026581 for < >; Mon, 28 Oct 2019 20:06:26 +0900
from mail-hammer-was7.s2.krane.9rum.cc ([10.197.10.40]) by hermes of mail-hmail-was10 (10.197.10.52) with ESMTP id n9SK3smX21700551088 for < >; Mon, 28 Oct 2019 20:03:54 +0900 (KST)
my dear in the lord,
Based on your good profile I want to solicit for your help in fulfilling my wish, I am Mrs.yvonne yesyi, 58yrs old widow from France, my husband and I worked with Tullow oil Cote d’Ivoire before he died, I am writing you this message via a computer lap top on my sick bed at the hospital were I am undergoing medical treatment I have been diagnosed of Endometrial cancer unfortunately for me my doctor said I don't have any chance to survive except by a miracle I have spent a lot of money on medical treatment yet no improvement.
The reason why I am writing you this letter is because I want you to stand as beneficiary to the sum of my $ 2.5 Million which i inherited from my late husband I don’t have any biological child of my own who will inherit this money neither do I have any adopted child My relatives and friends have plundered so much of my wealth since my illness and I cannot live with the agony of entrusting this huge responsibility to any of them anymore.
I want to donate this money to support children and orphanages charity in your country help me to fulfil this goal before I die and please always remember to pray for me when I die my soul will rest in peace. so if you are willing to help me receive this money in your account for the charity do not be inhesitate to get back to me immediately for further explanation and conversation on how we will proceed:
Hoping to receive your urgent reply.with this email Address/ ( inf0.1n@yandex.com )
Your's sincerely.
Envelope Sender: <infoyv1012@daum.net>
'From' Header: 이름을 등록해주세요 <infoyv1012@daum.net>
Subject: my dear in the lord,
Timestamp: 06:07:13 CDT, Monday 28 October 2019
Message-ID: <20191028200352.Hlbi5NrARUq9O8N7fYkZJQ@infoyv1012.hanmail.net>
Attachments: None
Client IP Address: 203.133.181.11
Client GeoIP Lookup: Korea, Republic of
Email Size: 7.3 kB
Encrypted? No
USD $6000 PAYMENT WE SENT TODAY TO PICK UP
NOTE: So if you give this scammer the information they are asking for, you'll find new accounts opened in your name, stolen tax return refunds, and even potentially money missing from your bank account. Delete these pieces of trash and don't think for a second there's any free money coming from a crook hiding behind free anonymous email addresses and VPNs. What's an estimate customer anyway? Are they estimating who may or may not reply to these bogus claims?
From: "Mr. Alex Freeman" <officeoffice826@gmail.com> To:06:09:27 CDT, Monday 28 October 2019
Attachments: None
Message ID: <382941501.3107167.1572260963502@mail.yahoo.com>
Return Path: <officeoffice826@gmail.com>
Reply To: officemoneygram010@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.49.30]) by pure.maildistiller.com with ESMTPS id 7DF81E005F for < >; Mon, 28 Oct 2019 11:09:26 +0000 (UTC)
from sonic304-21.consmr.mail.ne1.yahoo.com (sonic304-21.consmr.mail.ne1.yahoo.com [66.163.191.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us1.ppe-hosted.com with ESMTPS id 5E97914006C for < >; Mon, 28 Oct 2019 11:09:26 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic304.consmr.mail.ne1.yahoo.com with HTTP; Mon, 28 Oct 2019 11:09:25 +0000
Estimate Customer. You have been awarded $3.700, 000.00 through money gram Money Transfer for compensation to retain the good image of this country. Send your receiving information at ((( officemoneygram010@gmail.com ))) you have to be receiving a maximum of $6000 USD each day until the whole of $3.7M USD transfer complete. Contact the money gram office immediately and also send your receivers information to start receiving your payment such as, Your Full Name:......................... Your Home Address:...................... Your Country/ City: .................... Your Age:............................... Your Sex:............................... Your Direct Phone Number:............... Your ID copy:........................... Director, Mr.Paul Flink: Contacting money gram email..((( officemoneygram010@gmail.com ))) (+229 677-06-500) Yours sincerely, Mr. Alex Freeman
Envelope Sender: <officeoffice826@gmail.com>
'From' Header: "Mr. Alex Freeman" <officeoffice826@gmail.com>
Subject: USD $6000 PAYMENT WE SENT TODAY TO PICK UP.
Timestamp: 06:09:27 CDT, Monday 28 October 2019
Message-ID: <382941501.3107167.1572260963502@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
SPF (SoftFail) Medium
Client IP Address: 66.163.191.147
Client GeoIP Lookup: United States
Email Size: 4.0 kB
Encrypted? No
From: "Mr. Alex Freeman" <officeoffice826@gmail.com> To:06:09:27 CDT, Monday 28 October 2019
Attachments: None
Message ID: <382941501.3107167.1572260963502@mail.yahoo.com>
Return Path: <officeoffice826@gmail.com>
Reply To: officemoneygram010@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.49.30]) by pure.maildistiller.com with ESMTPS id 7DF81E005F for < >; Mon, 28 Oct 2019 11:09:26 +0000 (UTC)
from sonic304-21.consmr.mail.ne1.yahoo.com (sonic304-21.consmr.mail.ne1.yahoo.com [66.163.191.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us1.ppe-hosted.com with ESMTPS id 5E97914006C for < >; Mon, 28 Oct 2019 11:09:26 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic304.consmr.mail.ne1.yahoo.com with HTTP; Mon, 28 Oct 2019 11:09:25 +0000
Estimate Customer. You have been awarded $3.700, 000.00 through money gram Money Transfer for compensation to retain the good image of this country. Send your receiving information at ((( officemoneygram010@gmail.com ))) you have to be receiving a maximum of $6000 USD each day until the whole of $3.7M USD transfer complete. Contact the money gram office immediately and also send your receivers information to start receiving your payment such as, Your Full Name:......................... Your Home Address:...................... Your Country/ City: .................... Your Age:............................... Your Sex:............................... Your Direct Phone Number:............... Your ID copy:........................... Director, Mr.Paul Flink: Contacting money gram email..((( officemoneygram010@gmail.com ))) (+229 677-06-500) Yours sincerely, Mr. Alex Freeman
Envelope Sender: <officeoffice826@gmail.com>
'From' Header: "Mr. Alex Freeman" <officeoffice826@gmail.com>
Subject: USD $6000 PAYMENT WE SENT TODAY TO PICK UP.
Timestamp: 06:09:27 CDT, Monday 28 October 2019
Message-ID: <382941501.3107167.1572260963502@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
SPF (SoftFail) Medium
Client IP Address: 66.163.191.147
Client GeoIP Lookup: United States
Email Size: 4.0 kB
Encrypted? No
Sunday, October 27, 2019
HELLO
NOTE: This fool couldn't help but send two of these in a row. Does he/she/it not know how email works? Was it desperation? Either way this criminal is a true idiot. There's no donation from some stranger in a foreign land for you. There is only a schmuck using a free and anonymous email program to phish for live bait. Don't be the bait or you'll lose more than you could ever bargain for. Delete these emails like the pure trash they are.
From: Francois Pinault <thomasjford71@gmail.com> To: undisclosed-recipients:;07:39:04 CDT, Sunday 27 October 2019.
Attachments: None
Message ID: <CAFHvQpzzOsY3NTEetB1tvQaf-8Y5C1nTCvd4eeyMFCzGRHE4CA@mail.gmail.com>
Return Path: <thomasjford71@gmail.com>
Reply To: francoispinault2015@outlook.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.49.30]) by pure.maildistiller.com with ESMTPS id 08E058005B for <>; Sun, 27 Oct 2019 12:39:04 +0000 (UTC)
from mail-wm1-f66.google.com (mail-wm1-f66.google.com [209.85.128.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us1.ppe-hosted.com with ESMTPS id C5925140053 for <>; Sun, 27 Oct 2019 12:39:03 +0000 (UTC)
by mail-wm1-f66.google.com with SMTP id r141so6382220wme.4 for <>; Sun, 27 Oct 2019 05:39:03 -0700 (PDT)
by 2002:a05:6000:120b:0:0:0:0 with HTTP; Sun, 27 Oct 2019 05:39:02 -0700 (PDT)
-- Hello! A donation of $1,000,000.00 USD has been made to you by Mr Francois Pinault, kindly send him an email for more details: francoispinault2015@outlook.com Grazie.
Envelope Sender: <thomasjford71@gmail.com>
'From' Header: Francois Pinault <thomasjford71@gmail.com>
Subject: HELLO
Timestamp: 07:39:04 CDT, Sunday 27 October 2019
Message-ID: <CAFHvQpzzOsY3NTEetB1tvQaf-8Y5C1nTCvd4eeyMFCzGRHE4CA@mail.gmail.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Very High
Client IP Address: 209.85.128.66
Client GeoIP Lookup: United States
Email Size: 3.0 kB
Encrypted? No
From: Francois Pinault <thomasjford71@gmail.com> To: undisclosed-recipients:;07:39:04 CDT, Sunday 27 October 2019.
Attachments: None
Message ID: <CAFHvQpzzOsY3NTEetB1tvQaf-8Y5C1nTCvd4eeyMFCzGRHE4CA@mail.gmail.com>
Return Path: <thomasjford71@gmail.com>
Reply To: francoispinault2015@outlook.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.49.30]) by pure.maildistiller.com with ESMTPS id 08E058005B for <>; Sun, 27 Oct 2019 12:39:04 +0000 (UTC)
from mail-wm1-f66.google.com (mail-wm1-f66.google.com [209.85.128.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us1.ppe-hosted.com with ESMTPS id C5925140053 for <>; Sun, 27 Oct 2019 12:39:03 +0000 (UTC)
by mail-wm1-f66.google.com with SMTP id r141so6382220wme.4 for <>; Sun, 27 Oct 2019 05:39:03 -0700 (PDT)
by 2002:a05:6000:120b:0:0:0:0 with HTTP; Sun, 27 Oct 2019 05:39:02 -0700 (PDT)
-- Hello! A donation of $1,000,000.00 USD has been made to you by Mr Francois Pinault, kindly send him an email for more details: francoispinault2015@outlook.com Grazie.
Envelope Sender: <thomasjford71@gmail.com>
'From' Header: Francois Pinault <thomasjford71@gmail.com>
Subject: HELLO
Timestamp: 07:39:04 CDT, Sunday 27 October 2019
Message-ID: <CAFHvQpzzOsY3NTEetB1tvQaf-8Y5C1nTCvd4eeyMFCzGRHE4CA@mail.gmail.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Very High
Client IP Address: 209.85.128.66
Client GeoIP Lookup: United States
Email Size: 3.0 kB
Encrypted? No
Saturday, October 26, 2019
;;;;;;;;32E;;;;;;7UYHGTRFDEW ''''',,,,,
NOTE: Did this lying criminal engage a small child to construe the subject line? Looks like typing totally gone wrong! Apart from this mishap heshe/it screws up further by using multiple free anonymous email accounts. Somehow this follows a South African bank and a US IP address to add to the confusion. Guaranteed there's NO money at the other end of this correspondence for you but rather a pain in the arse who will sweetly attempt to extract more information to damn you with and will damn you immediately if you try to call him/her/it out on this thievery. Delete these from your inbox, save yourself the trouble of having to repair your personal and financial reputation. These jokers aren't worth the trouble.
From: STEVENSON STEVENSON <gom847@outlook.com> To:08:28:04 CDT, Saturday 26 October 2019
Attachments: None
Message ID: <AM0PR02MB5490D26B4126491B5B2B5B5D82640@AM0PR02MB5490.eurprd02.prod.outlook.com>
Return Path: <gom847@outlook.com>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="_000_AM0PR02MB5490D26B4126491B5B2B5B5D82640AM0PR02MB5490eurp_"
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.8]) by pure.maildistiller.com with ESMTPS id 1584D40052 for <>; Sat, 26 Oct 2019 13:28:04 +0000 (UTC)
from EUR02-AM5-obe.outbound.protection.outlook.com (mail-oln040092067053.outbound.protection.outlook.com [40.92.67.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id B3B6D4C0061 for <>; Sat, 26 Oct 2019 13:28:03 +0000 (UTC)
from AM5EUR02FT045.eop-EUR02.prod.protection.outlook.com (10.152.8.59) by AM5EUR02HT038.eop-EUR02.prod.protection.outlook.com (10.152.8.217) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2387.20; Sat, 26 Oct 2019 13:27:57 +0000
from AM0PR02MB5490.eurprd02.prod.outlook.com (10.152.8.56) by AM5EUR02FT045.mail.protection.outlook.com (10.152.9.159) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2387.20 via Frontend Transport; Sat, 26 Oct 2019 13:27:57 +0000
from AM0PR02MB5490.eurprd02.prod.outlook.com ([fe80::f0ca:efe3:5d83:4a72]) by AM0PR02MB5490.eurprd02.prod.outlook.com ([fe80::f0ca:efe3:5d83:4a72%3]) with mapi id 15.20.2367.031; Sat, 26 Oct 2019 13:27:57 +0000
From Mark Stevenson
Dear Good Friend.
I am happy to inform you about my success in getting those funds transferred under the cooperation of a new partner from Indonesia. Presently I am in Indonesia for investment projects with my own share of the total sum. Meanwhile, I didnt forget youre past efforts and attempts to assist me in transferring those funds despite that it failed us some how. Now contact my secretary in South Africa his name is Paul Edward
Email: pauledwardz4gv@gmail.com or pauledwardz4gv@gmail.com
Phone +27 832494469 , Contact him and ask him to send you the total of $920.000.00.{Nine Hundred And Twenty Thousand United States Dollars} which I kept for your past efforts and attempts to assist me in this matter. I appreciated your efforts at that time very much. So feel free and get in touched with my Secretary Paul Edward and instruct him where to send the amount to you. Please do let me know immediately you receive it so that we can share the joy after all the suffer ness at that time. Do send to Paul Edward, your contact details.
Your Full Names...........................................
Youre Address..............................................
Cell Phone Number........................................
Your occupation................................................
Your Age.....................................................
To enable him submit your details to my paying bank the Ned Bank South Africa to wire your compensation money to your nominated bank account/Bank Check or they can send to you an authorized bank atm master card to your address for you to withdraw the money from any bank atm machine in your country.
In the moment, I am very busy here because of the investment projects which me and the new partner are having at hand, finally, remember that I had forwarded instruction to my secretary on your behalf to receive that money, so feel free to get in touch with Paul Edward he will send the amount to you with out any delay.
Thanks and God bless you.
Mark Stevenson.
Envelope Sender: <gom847@outlook.com>
'From' Header: STEVENSON STEVENSON <gom847@outlook.com>
Subject: ;;;;;;;;32E;;;;;;7UYHGTRFDEW ''''',,,,,
Timestamp: 08:28:04 CDT, Saturday 26 October 2019
Message-ID: <AM0PR02MB5490D26B4126491B5B2B5B5D82640@AM0PR02MB5490.eurprd02.prod.outlook.com>
Attachments: None
Scan Information
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Very High
Client IP Address: 40.92.67.53
Client GeoIP Lookup: United States
Email Size: 12.3 kB
Encrypted? No
From: STEVENSON STEVENSON <gom847@outlook.com> To:08:28:04 CDT, Saturday 26 October 2019
Attachments: None
Message ID: <AM0PR02MB5490D26B4126491B5B2B5B5D82640@AM0PR02MB5490.eurprd02.prod.outlook.com>
Return Path: <gom847@outlook.com>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="_000_AM0PR02MB5490D26B4126491B5B2B5B5D82640AM0PR02MB5490eurp_"
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.8]) by pure.maildistiller.com with ESMTPS id 1584D40052 for <>; Sat, 26 Oct 2019 13:28:04 +0000 (UTC)
from EUR02-AM5-obe.outbound.protection.outlook.com (mail-oln040092067053.outbound.protection.outlook.com [40.92.67.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id B3B6D4C0061 for <>; Sat, 26 Oct 2019 13:28:03 +0000 (UTC)
from AM5EUR02FT045.eop-EUR02.prod.protection.outlook.com (10.152.8.59) by AM5EUR02HT038.eop-EUR02.prod.protection.outlook.com (10.152.8.217) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2387.20; Sat, 26 Oct 2019 13:27:57 +0000
from AM0PR02MB5490.eurprd02.prod.outlook.com (10.152.8.56) by AM5EUR02FT045.mail.protection.outlook.com (10.152.9.159) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2387.20 via Frontend Transport; Sat, 26 Oct 2019 13:27:57 +0000
from AM0PR02MB5490.eurprd02.prod.outlook.com ([fe80::f0ca:efe3:5d83:4a72]) by AM0PR02MB5490.eurprd02.prod.outlook.com ([fe80::f0ca:efe3:5d83:4a72%3]) with mapi id 15.20.2367.031; Sat, 26 Oct 2019 13:27:57 +0000
From Mark Stevenson
Dear Good Friend.
I am happy to inform you about my success in getting those funds transferred under the cooperation of a new partner from Indonesia. Presently I am in Indonesia for investment projects with my own share of the total sum. Meanwhile, I didnt forget youre past efforts and attempts to assist me in transferring those funds despite that it failed us some how. Now contact my secretary in South Africa his name is Paul Edward
Email: pauledwardz4gv@gmail.com or pauledwardz4gv@gmail.com
Phone +27 832494469 , Contact him and ask him to send you the total of $920.000.00.{Nine Hundred And Twenty Thousand United States Dollars} which I kept for your past efforts and attempts to assist me in this matter. I appreciated your efforts at that time very much. So feel free and get in touched with my Secretary Paul Edward and instruct him where to send the amount to you. Please do let me know immediately you receive it so that we can share the joy after all the suffer ness at that time. Do send to Paul Edward, your contact details.
Your Full Names...........................................
Youre Address..............................................
Cell Phone Number........................................
Your occupation................................................
Your Age.....................................................
To enable him submit your details to my paying bank the Ned Bank South Africa to wire your compensation money to your nominated bank account/Bank Check or they can send to you an authorized bank atm master card to your address for you to withdraw the money from any bank atm machine in your country.
In the moment, I am very busy here because of the investment projects which me and the new partner are having at hand, finally, remember that I had forwarded instruction to my secretary on your behalf to receive that money, so feel free to get in touch with Paul Edward he will send the amount to you with out any delay.
Thanks and God bless you.
Mark Stevenson.
Envelope Sender: <gom847@outlook.com>
'From' Header: STEVENSON STEVENSON <gom847@outlook.com>
Subject: ;;;;;;;;32E;;;;;;7UYHGTRFDEW ''''',,,,,
Timestamp: 08:28:04 CDT, Saturday 26 October 2019
Message-ID: <AM0PR02MB5490D26B4126491B5B2B5B5D82640@AM0PR02MB5490.eurprd02.prod.outlook.com>
Attachments: None
Scan Information
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Very High
Client IP Address: 40.92.67.53
Client GeoIP Lookup: United States
Email Size: 12.3 kB
Encrypted? No
Security Update
NOTE: How exciting ... a classic phishing email. This joker is trying to pose as Chase Bank but falls short with the sendgrid.net email address and further with the bogus links that were stripped from this copy. This crook is hoping you'll fall for the scam and as soon as you login to your Chase account you just gave this criminal access to your account. Watch out, this one will wipe you out before you can blink an eye. If you doubt the authenticity of an "official" email your best defense it to NOT CLICK ANY LINKS in the email but go directly to the web page in question via your browser.
From: "chase.com" <update@chase.com> To: user <update@chase.com>17:18:56 CDT, Saturday 26 October 2019
Attachments: None
Message ID: <sQLA-9rgTwagDcTcP-gnPQ@ismtpd0038p1las1.sendgrid.net>
Return Path: <bounces+11514390-416f-=@sendgrid.net>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="===============0293878941=="
Attachments:
None
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.48.234]) by pure.maildistiller.com with ESMTPS id DFAB180064 for <>; Sat, 26 Oct 2019 22:18:55 +0000 (UTC)
from wrqvxcnz.outbound-mail.sendgrid.net (wrqvxcnz.outbound-mail.sendgrid.net [149.72.172.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us1.ppe-hosted.com with ESMTPS id 7FE15780064 for <>; Sat, 26 Oct 2019 22:18:55 +0000 (UTC)
by filter0215p1iad2.sendgrid.net with SMTP id filter0215p1iad2-15920-5DB4C3D8-21 2019-10-26 22:08:25.395622148 +0000 UTC m=+101340.003634335
from [23.94.245.115] (host.colocrossing.com [23.94.245.115]) by ismtpd0038p1las1.sendgrid.net (SG) with ESMTP id sQLA-9rgTwagDcTcP-gnPQ Sat, 26 Oct 2019 22:08:24.767 +0000 (UTC)
Image removed - click Show Images to View
Your Chase Banking has been disabled
Your password has been disabled due to multiple use of incorrect login details. For your security, we have disabled your Online banking.
To restore your account and continue the use of online banking and stop further disabling of your bank account,
click here to restore and protect your account online.
If you have any questions, we are available 24 hours a day, 7 days a week.
Thank you for choosing Chase.
If you're concerned about the authentιcity of this messαge, please visit our fraud information page or cαll us using the phοne number on the back of your cαrd or accοunt stαtement.
If you reply to this messαge, we will not be able to read or respond to it.
You will find a confirmation of this message in your Messages & Alerts inbox.
Chase Online Customer Service
© 2019 JPMorgan Chase & Co.
Envelope Sender: <bounces+11514390-416f-=@sendgrid.net>
'From' Header: "chase.com" <update@chase.com>
Subject: Security Update
Timestamp: 17:18:56 CDT, Saturday 26 October 2019
Message-ID: <sQLA-9rgTwagDcTcP-gnPQ@ismtpd0038p1las1.sendgrid.net>
Attachments: None
Scan Information
Classification: Malicious
Threat Level: High
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Phishing Very High
Spam Very High
Client IP Address: 149.72.172.46
Client GeoIP Lookup: United States
Email Size: 23.9 kB
Encrypted? No
From: "chase.com" <update@chase.com> To: user <update@chase.com>17:18:56 CDT, Saturday 26 October 2019
Attachments: None
Message ID: <sQLA-9rgTwagDcTcP-gnPQ@ismtpd0038p1las1.sendgrid.net>
Return Path: <bounces+11514390-416f-=@sendgrid.net>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="===============0293878941=="
Attachments:
None
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.48.234]) by pure.maildistiller.com with ESMTPS id DFAB180064 for <>; Sat, 26 Oct 2019 22:18:55 +0000 (UTC)
from wrqvxcnz.outbound-mail.sendgrid.net (wrqvxcnz.outbound-mail.sendgrid.net [149.72.172.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us1.ppe-hosted.com with ESMTPS id 7FE15780064 for <>; Sat, 26 Oct 2019 22:18:55 +0000 (UTC)
by filter0215p1iad2.sendgrid.net with SMTP id filter0215p1iad2-15920-5DB4C3D8-21 2019-10-26 22:08:25.395622148 +0000 UTC m=+101340.003634335
from [23.94.245.115] (host.colocrossing.com [23.94.245.115]) by ismtpd0038p1las1.sendgrid.net (SG) with ESMTP id sQLA-9rgTwagDcTcP-gnPQ Sat, 26 Oct 2019 22:08:24.767 +0000 (UTC)
Image removed - click Show Images to View
Your Chase Banking has been disabled
Your password has been disabled due to multiple use of incorrect login details. For your security, we have disabled your Online banking.
To restore your account and continue the use of online banking and stop further disabling of your bank account,
click here to restore and protect your account online.
If you have any questions, we are available 24 hours a day, 7 days a week.
Thank you for choosing Chase.
If you're concerned about the authentιcity of this messαge, please visit our fraud information page or cαll us using the phοne number on the back of your cαrd or accοunt stαtement.
If you reply to this messαge, we will not be able to read or respond to it.
You will find a confirmation of this message in your Messages & Alerts inbox.
Chase Online Customer Service
© 2019 JPMorgan Chase & Co.
Envelope Sender: <bounces+11514390-416f-=@sendgrid.net>
'From' Header: "chase.com" <update@chase.com>
Subject: Security Update
Timestamp: 17:18:56 CDT, Saturday 26 October 2019
Message-ID: <sQLA-9rgTwagDcTcP-gnPQ@ismtpd0038p1las1.sendgrid.net>
Attachments: None
Scan Information
Classification: Malicious
Threat Level: High
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Phishing Very High
Spam Very High
Client IP Address: 149.72.172.46
Client GeoIP Lookup: United States
Email Size: 23.9 kB
Encrypted? No
Subscribe to:
Posts (Atom)