Antiphishers Anti-Phishers Anti-phishing

The hidden link is reckonovens.com/up/load/

The start of the phishing email:
===================================
myspace

We have recently updated our website to improve our security.

Please follow the instructions to ensure your account is enable and not blocked.

If you need immediate assistance, please contact our support team.

Note: It is important that your personal information is accurate and complete. This information may later be used to help verify the owner of the account. We does not sell or provide your personal information to third party companies.
Thank you for using Myspace!

The Myspace Team
http://www. myspace.com/

Have questions? Visit our help page. Myspace, 8391 Beverly Blvd, #349, Los Angeles, CA 90048.

===================================

this phishing email has link to website 203.157.114.11/cushing.html
=======================================================
From: "order-update@amazon.com"
Sent: Wednesday, May 2, 2012 3:45 AM
Subject: Amazon.com - Your Cancellation (17-469-662)

Dear Customer,

Your order has been successfully canceled. For your reference, here's a summary of your order:

You just canceled order 17-469-662 placed on May 2, 2012.

Status: CANCELED

_____________________________________________________________________

1 "Predefines"; 2002, Deluxe Edition
By: Anthony Ryan

Sold by: Amazon.com LLC

_____________________________________________________________________

Thank you for visiting Amazon.com!

the phishing email has hidden link to website: mks.com.my/quashed.html
============================================
Amazon.com - Your Cancellation (108-338-5272)
FROM: order-update@amazon.com

TO:
Wednesday, May 2, 2012 6:40 AM

Dear Customer,

Your order has been successfully canceled. For your reference, here's a summary of your order:

You just canceled order 108-338-5272 placed on May 2, 2012.

Status: CANCELED

_____________________________________________________________________

1 "Scouring"; 2005, Second Edition
By: Nicholas Connor

Sold by: Amazon.com LLC

_____________________________________________________________________

Thank you for visiting Amazon.com!

---------------------------------------------------------------------
Amazon.com

The sender has a Label_Parcel_USPS.NR_346-5439.zip attachment in the email.
======================================================
Your parcel is expecting of receiving 1
FROM: WALL WILCOX

Thursday, April 26, 2012 1:30 AM
Delivery information,

Courier service couldn’t make the delivery of your parcel.

Status deny: The weight of parcel is exceed the available parameters for free delivery.
LOCATION OF YOUR ITEM:Chicago
STATUS OF YOUR ITEM: not delivered
SERVICE: Express Mail
NUMBER OF YOUR ITEM:U360808444 NU
FEATURES: Yes

Postal label is enclosed to the letter.
Print your label and show it in the nearest post office of USPS

Attention!

Account Cancellation
FROM: Myspace

TO:
Tuesday, April 24, 2012 9:58 AM
myspace

Your request to cancel your Myspace account has been received.

You need to follow this link to complete or cancel your request. (edit: the link direct you to medssaletraining.com )

Thank you for using Myspace!

Myspace Team
http://www.myspace.com

Have questions? Visit our help page. Myspace, 8391 Beverly Blvd, #349, Los Angeles, CA 90048.
© Myspace Inc. All Rights Reserved.

WARNING!!!YOU HAVE 48HOURS TO VERIFY YAHOO ACCOUNT
FROM: **YAHOO**
TO: ifeolaleye@yahoo.com

Message flagged
Wednesday, April 18, 2012 2:56 PM

YAHOO!
Security Precaution,

For optimal viewing of the Yahoo Web site, we recommend that you enable CSS.

For your security, we are currently updating our services. So you are required to log on to your Online Yahoo Account with the provided link below.
For immediate access, please Sign on to verify your identity:

Verify Here (link is removed here, the original link goes to "vivirenrivas.info")

Thank you for helping us serve you better
Copyright © 2012 Yahoo! Inc. All rights reserved.

Comfirm Your Winning Details 1

Saturday, April 14, 2012 5:09 AM
Prize Details,

ATTENTION TO THE OWNER OF THIS EMAIL ADDRESS

We are delighted to inform you of our Post Code Lotto prize award held
in Rotterdam.The Netherlands. This lotto awards is fully based on an
electronic selection, Winners were picked by computerized system, drawn
from over 50,000,00 companies and individuals e-mail addresses worldwide.
This award is officially announced in Rotterdam-Netherlands, Your email
ID has hereby been approved alump sum pay out of ?1,500,000 Euro in cash
credit file Ref: GNP501/731KW, Batch: AM72/PGS27/09FC, Winning No:
DC61/PDN32/01NL

Note: No ticket was sold in this prize award, winners were randomly
selected from electronic online world wide. Simply contact Our Foreign

Compliments! Did you receive my last email
FROM: Susan Holford
Hello,

Compliments and good day to you and your family. I write you this mail as a reminder once more having waited patiently for your response to my initial contact with you through snail mail. However since i assume you did not get it i want to use this medium even though it might not be the best form of communication in matters like this due to the
ever growing disbelief and illicit scams and fraud associated with it, i seem to have no choice than to make use of it, coupled with the fact that it might be just perfect due to the ability to redeem time.

YouTube Service sent you a message: Your video has been approved

FROM: YouTube Service

Tuesday, March 13, 2012 6:26 AM
YouTube help center | e-mail options | report spam

YouTube Service has sent you a message:
Your video has been approved

http://www. youtube.com/watch?v=BIE8WAqM&feature=topvideos_mp

You can reply to this message by visiting your inbox.

Funds transfer
FROM: Chow Wang

Thursday, March 1, 2012 7:23 AM
Good-day,

I sincerely hope this letter finds you in good health and bearing in mind that this is my first letter, I would be very brief. I write to request for your partnership in investing in Real Estate and Property in your country. I am the lawyer, trustee and executor of the Estate to a deceased client.

CONFIRM YOUR INTEREST ON THIS PROJECT
FROM: MR. JOHN ABBEY verydemandreeg@gmail.com

Thursday, February 9, 2012 7:46 PM
Good day My Dear,

I am Mr. John Abbey, From Takoradi Ghana staff of Standard Chartered
Bank Ghana,I have A business proposal of (US$7,650,000.00), for you
from my Bank.Finally if you are interested I shall provide you with
more details.

which I need your co-operation as my partner to transfer this Money to
your bank account within Five (5) working days. This transaction is
legal without any problem and it is bank to bank transfer and 100%
risk free.

As soon as the Seven Million Six Hundred and Fifty Thousand Dollar
[$7,650.000.00]is transferred to your bank account, you shall take

Consignment Delivery.
FROM: USCA cs@sh.vnet.cn

Monday, January 16, 2012 12:14 PM
Good Day

This is to let you know that we discovered two trunk boxes that bears your name and your address so we decided to find out the name of the delivery agent who suppose to deliver it to your final destination. Based on this discovery we decided to contact you to work out modalities of delivery to you.
Make sure you reply without much delay as every arrangement to deliver it to you is in perfect order. If you wish you know any thing about this consignment packages then kindly get back for more directives on how to received it by America Express Home Delivery with low cost.

This one is very convincing, it has yahoo's logo, but it hides the phisher's following link:
http:// wm.lpck.ru/docs/file/Online/webmail/yahoo/yahoomail/yahoomail.html

=========================================================
Pending Messages!

FROM: Yahoo!
TO: xxxx
Saturday, January 7, 2012 2:25 PM

https:// s.yimg.com/lq/i/brand/purplelogo/uh/us/base.gif

Dear Yahoo User,

your two incoming mails were placed on pending status due to the recent upgrade to our database,

In order to recieve the messages Click here.to login and wait for responds from Yahoo.

We apologise for any inconvenience and appreciate your understanding.

Regards, Yahoo.

Bank of America Alert : Account Locked!
FROM: Bank of America Alert
Thursday, January 5, 2012 12:16 AM
Bank of America Higher Standards
Customer using a laptop for Online Banking Online Banking Alert

Remember:
Always look for
your SiteKey before
you enter your
passcode during
Sign In »

Account Locked

Dear Bank of America Customer,

There are a number of invalid login attempts on your account. We had to believe that, there might be some security problems on your account. So we have decided to put an extra verification process to ensure your identity and your account security.

Please click here to continue the verification process and ensure your account security.

Thank you for your cooperation.

this notice of Notice about godady account activation, it really looks like an official godaddy's email, however it does hide the address "t.cn/SfThwr"

=============================
Thursday, December 22, 2011 6:01 AM

Dear Godaddy User:

This notification is generated automatically as a service to you because you subscribe to DomainAlert .

Because of the Comprehensive upgrade of the website system,

please log in and re-activate your account

Click here to login

To view or manage changes:

Go to the GoDaddy.com home page and log in at the top of the screen with your username or customer number and password. Click on the "My Account" tab to launch the product dashboard.

This phisher used hidden link http:// ebizevleniyoruz.com/alert/id/BOFAO817934821/ even though the link appeared to be bankofamerica.com

==============================================
Date: Thu, 15 Dec 2011 08:41:10 -0500
From: "Clifton Pruitt"
To:
Subject: Bank of America: Bill payment canceled

To: Dear Bank of America customer

Account: CHECKING

Date: 12/14/2011

The recent ALERTS for your account are now available to download online.

Please follow the link to read ALERT message here: https ://w ww.bankofamerica.com/secure/KYL0W6UKFK/

Your Chase Account Has Been Compromised
The website link looks like from chase.com, however this phisher did hide the real URL:
i-library.ib2hosting.com/~secure/~/https:/www.chase.com/index.jsp?pg_name=ccpmapp/privacy_security/protection/page/security_home.html

========================================================
Dear Chase OnlineSM Customer,

Our records indicate that your account information has been updated from two different computer internet protocol locations within 10mins intervals which is unusual and has been identified as phishing threats. A Chase account verification is hereby required for your online account banking service not to be suspended. If this update was not performed by you, please click the link below:

BANK OF AMERICA
1680 BROADWAY, NEW YORK,
N.Y 11019, USA
CREDIT CONTROL / TELEX DEPT.
PHONE: +1 716 800 1111
FAX: +1 716 800 3333
www.bankofamerica.com
info@bankofamerica.com
bank_america@yahoo.cn

TELEGRAPHIC TRANSFER NOTICE.

THIS EMAIL IS SENT TO 100 BENEFICIARY OF DECEMBER 2011.

WE ARE HEREBY OFFICIALLY NOTIFY YOU CONCERNING YOUR FUND TELEGRAPHIC TRANSFER THROUGH OUR BANK, BANK OF AMERICA, NEW YORK, TO YOUR BANK ACCOUNT, WHICH HAS BEEN OFFICIALLY APPROVED BY THE MANAGEMENT OF WORLD BANK SWISS (WBS) TO CREDIT THE SUM OF US$18.500,000.00 MILLION DOLLARS INTO YOUR BANK ACCOUNT.