Misc. phishing

Central Scrutinizer

Administrator
Staff member
From: 41.58.119.230,
Nigeria, Lagos, Swift Networks Limited

From "Email"
Return-Path: <info@liquimoly.am>
Subject: Top URGENT.
To: Me <info@liquimoly.am>
From: "Email" <info@liquimoly.am>
Date: Tue, 21 Apr 2015 X-AntiAbuse: Sender Address Domain - liquimoly.am
X-Get-Message-Sender-Via: mesa.servershost.net: authenticated_id: info@liquimoly.am

Your mailbox might be closed, kindly click activate to add more MB to your mailbox.

http://tinyurl.com/ob2558n
 

Nanook

Administrator
Staff member
From "Lenth, Larry E"
Return-Path: ~larry-lenth@uiowa.edu>
Received: from (EHLO ITSNT447.iowa.uiowa.edu) (128.255.67.11)
From: "Lenth, Larry E" ~larry-lenth@uiowa.edu>
To: "Lenth, Larry E" ~larry-lenth@uiowa.edu>
Subject: RE: Your Password
Date: Mon, 6 Jul 2015

You have exceeded your account limit quota of 250MB and Simply Click Here To Expand and fill in the complete information requested to expand your mailbox quota to 4GB.

http://moondesk.moonfruit.com/
 

Jessica

Administrator
Staff member
From Beech David
Return-Path: ~d.beech@salford.ac.uk>
From: Beech David ~d.beech@salford.ac.uk>
To: Beech David ~d.beech@salford.ac.uk>
Subject: RE:
Thread-Index: AdC6mdCCbel357JlTz6PAPnbnSS+QwAAVc+3
Date: Thu, 9 Jul 2015
Return-Path: d.beech@salford.ac.uk

Your password will expire with in the next 24 hours Click on: MAIL UPGRADE to validate your e-mail

http://webaccess99.ezweb123.com/
 

Central Scrutinizer

Administrator
Staff member
From: 202.62.17.97,
Indonesia, Jakarta, Pt Internux

Return Path: info@philips.com
Subject: Request to Terminate your Account has been process.
Date: 6 Sept 2015
From: info@philips.com
Reply to: logx.decky@yandex.com

We received a request to terminate your Account and the process has started by our mail team, Please give us 12 working hours to close down your mail account.

If you did not request for closing of your email,kindly cancel it manually below.

Account Termination http://tinyurl.com/nr8n9nw

All files on your mail account will be deleted and access to your Email address will be Denied.

Regards,
Mail Services
 

Central Scrutinizer

Administrator
Staff member
From: 185.25.51.71, IANA-RESERVED
Return Path: globalsales@inter.com
From: "Sales ltd" <globalsales@inter.com>
Reply-To: globalsales@inter.com
Subject: RE:VERY URGENT INVOICE.
Date: Tue, 22 Sep 2015

O426342-Ba01.pdf (34Kb)

Dear
Sorry for late responds, Please kindly find attached below login your password for security to view the invoice review and reconfirm Asap to proceed.
Regards thanks
 

Central Scrutinizer

Administrator
Staff member
From: 50.206.75.34
Return-Path: jellerbe@seedschoolmd.org
From: Jermaine Ellerbe <jellerbe@seedschoolmd.org>
To: "info@help.com" <info@help.com>
Date: Tue, 8 Mar 2016
Subject: Email Hacked. to receive email

You cannot be able to send email today,
please Click Here ---------> <http://jelle1.jimdo.com/> to update
IT- Desk
 

Sapphire's Strike

Administrator
Staff member
Received from: 41.190.3.159, NIGERIA, EMTS Limited / Etisalat Nigeria
Return-Path: LBushell@mcalester.k12.ok.us
Date: Thu, 17 Mar 2016
rom: "Bushell, Lynda" <LBushell@mcalester.k12.ok.us>
To: "i.daniels@pelicancancer.org" <i.daniels@pelicancancer.org>
Subject: Your e-Mailbox Update

Your e-mailbox password will soon expire. To keep your password active. Click Here<https://www.powr.io/plugins/form-builder/view?id=3796219&mode=page> to update

IT- Desk
 

Central Scrutinizer

Administrator
Staff member
From: 50.206.75.34,
US, Colorado Springs, Comcast Cable Communications Holdings Inc

Return-Path: dartis@seedschoolmd.org
From: "Artis, Diamond" <dartis@seedschoolmd.org>
To: "info@seedschoolmd.org" <info@seedschoolmd.org>
Date: Sun, 20 Mar 2016
Subject: Password Update Help Desk

Click Here <https://www.powr.io/plugins/form-builder/view?id=3835231&mode=page> To keep your e-mail password active.

IT- Desk
Copyright © 1993-2013
 

Sapphire's Strike

Administrator
Staff member
Received from: 50.206.75.34, USA, Texas, Comcast Cable
Return-Path: srobinson@seedschoolmd.org
From: Sharmel Robinson <srobinson@seedschoolmd.org>
To: "info@mm.undat.org" <info@mm.undat.org>
Date: Mon, 28 Mar 2016
Subject: =?windows-1256?Q?Staff_Farewell_Email-S=FE_?=

Would you like to change your password now ? To keep your password active. Click Here<https://www.powr.io/plugins/form-builder/view?id=3946641&mode=page> to update

Sincerely,
IT- Desk Service Desk
 

Central Scrutinizer

Administrator
Staff member
Return-Path: jobget2016@gmail.com
Subject: Waring! double sign in
Date: 2016-03-31
From: jobget2016@gmail.com

Waring! Double sign in

Hi user
account double signing from two different location if noticed again this account will be blocked from using our service..

Review this activity now by following the link below..

http://asoprousme.com/tmp/homm/home/index.php

YOUR ACCOUNT IDENTITY

Why are we sending this? We take security very seriously and we want to keep you in the loop on important actions in your account.

You received this mandatory email service announcement to update you about important changes to your Google product or account.
 

Sapphire's Strike

Administrator
Staff member
Received from: 41.190.3.35, NIGERIA, Lagos, EMTS Limited / Etisalat Nigeria
Return-Path: Carri.Biggle@canyons.edu
From: "Biggle, Carri" <Carri.Biggle@canyons.edu>
To: xxxxx
Subject: >>>> Help Desk Password Update
Date: Thu, 7 Apr 2016

Dear Email User

Password will expire in 3 days Check it out Here<https://www.powr.io/plugins/form-builder/view?id=4063875&mode=page>. to keep your password active

IT- Desk Service Desk
 

Sapphire's Strike

Administrator
Staff member
Received from: 72.43.200.94, USA, New Yrok, Time Warner Cable
Return-Path: agentmurray@aim.com
From: "Expired outlook" <agentmurray@aim.com>
Subject: Replace ur new version
To: xxxx
Date: Sat, 9 Apr 2016

- This mail is in HTML. Some elements may be ommited in plain text. -

Hi user your email needs to be upgraded
verify now for new version of upgrade >>>> http://bit.ly/1N0tB81
 

Sapphire's Strike

Administrator
Staff member
Received from: 103.54.85.156, PAKISTAN, Hostings House (pvt.) Limited
Return-Path: bounce@livenewsfeed365.com
From: Orders <{{from-first-name}}.{{from-last-name}}@livenewsfeed365.com>
Reply-To: {{from-first-name}}.{{from-last-name}}@livenewsfeed365.com
Subject: Order #750272 Has Shipped

Hi

We just wanted to let you know that your order has shipped

ORDER DETAILS:

----------------------------------------
1 LandWalker - $342,104.74
----------------------------------------

Order Date: Tues, 29 Mar 2016 16:41:11 +0000
Payment Method: Visä ending in 2407

Should this not be you, please contact us below:

CONTACT US HERE: http://bit.do/bUinc
 

Sapphire's Strike

Administrator
Staff member
Received from: 154.118.13.9, NIGERIA, Lagos, Spectranet Limited
Return-Path: info@tecnospand.com
To: undisclosed-recipients:;
From: "Mail" <info@tecnospand.com>
Subject: Your mailbox will be close..
Date: Thu, 14 Apr 2016

Your mailbox will be close kindly click activate (http://bit.ly/1qQwpLx) to add more MB to your mailbox
 

Sapphire's Strike

Administrator
Staff member
Received from: 50.206.75.34, USA, Texas, Comcast Cable
Return-Path: scopeland@seedschoolmd.org
From: "Copeland, Seyona" <scopeland@seedschoolmd.org>
To: "info@seedschoolmd.org" <info@seedschoolmd.org>
Date: Thu, 21 Apr 2016
Subject: WARNING

Please contact helpdesk by Click Here<https://www.powr.io/plugins/form-builder/view?id=4273396&mode=page>

IT- Desk
 

Kat

Administrator
Staff member
From: 154.120.82.172,
Nigeria, Lagos, Spectranet LTE

Return-Path: <pramod.rohella@sanyogpharmacy.com>
Subject: Mail.De-activation
To: Me <pramod.rohella@sanyogpharmacy.com>
From: "EMail" <pramod.rohella@sanyogpharmacy.com>
Date: Thu, 06 Apr 2017
Message-Id: <20170406101627.DC0138A2EF9@zimbra081-ind.megavelocity.net>

Hello User,

We acknowledge your request to terminate your account,we will process it shortly.

You will loose all your emails associated with your account

If you have no knowledge about the request process, kindly cancel the request below.

Cancel Request https://goo.gl/htoK71

Thank You
 

Central Scrutinizer

Administrator
Staff member
From: 154.118.59.159,
Nigeria, Lagos, Spectranet LTE

Return-Path: <s.gyebi@xlafricagroup.com>
Subject: Mail Warning..
To: Me <s.gyebi@xlafricagroup.com>
From: "MailWarning" <s.gyebi@xlafricagroup.com>
Date: Wed, 05 Apr 2017

Dear user,

Your Email might be close kindly click activate to add more MB to your Email. http://bit.ly/2nW8wS9
 
Top