Saturday, October 31, 2015


Good morning

I come by this e-mail to send my best greetings in first and then you have my excuses for this unexpected contact. But imagine with me that it is being given the urgency and the importance of this agreement. Indeed, I work with a group of miners of Ghana, which currently has a gold quantity which they want to sell immediately. It is approximately 89 kilos from a bar from gold, 22 carats+ in 28 000 dollars on a kilo. Moreover, I must say that we do not have yet the official documents with the gold export. Therefore, I come by this e-mail to contact you and to see whether you are interested in this product.

Hoping to have your news soon, please accept my best greetings.



Je viens par ce mail pour envoyer mes salutations les meilleures en premier et ensuite vous avez mes excuses pour ce contact inattendu. Mais imaginez avec moi qu'il est étant donné l'urgence et l'importance de cet accord. En effet, je travaille avec un groupe de mineurs du Ghana, qui actuellement dispose d'une quantité d'or qu'ils veulent vendre immédiatement. C'est environ 89 kilos de Lingot d'or, 22 carats+ à 28 000 dollars par kilogramme. En outre, je dois dire que nous n'avons pas encore les documents officiels à l'exportation d'or. Donc, je viens par ce mail pour vous contacter et de voir si vous êtes intéressé à ce produit.

Espérant avoir de vos nouvelles bientôt, s'il vous plaît acceptez mes salutations les meilleures.


Email analysis :

NOTE : Return-Path : < >
NOTE : X-Originating-Ip : []
NOTE : X-Virus-Scanned : amavisd-new at
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : X-Mailer : Zimbra 8.0.6_GA_5922 (zclient/8.0.6_GA_5922)
NOTE : Message-Id : < *.*.* >
NOTE : Content-Type : text/plain; charset=utf-8
NOTE : Received : from unknown (HELO (
NOTE : Received : from localhost (localhost [])
NOTE : by (Postfix)
NOTE : Received : from ([])
NOTE : by localhost ( [])
NOTE : Received : from localhost (localhost [])
NOTE : by (Postfix)
NOTE : Received : from ([])
NOTE : by localhost ( [])
NOTE : Received : from ( [])
NOTE : by (Postfix)

Analysis of the scam :

The server from Vietnamese Ministry of Health seems compromised. The server from the Vietnamese Ministry of Health relays the scam from The user cuongtq.qld is the compromised account.

RE: enquiry price


Nice day, Glad to hear you are in telecommunication infrastructure projects/transmission line projects, we are steel tower engineering,manufacturing and solution provider worldwide.

1,High quality: ISO 9001/14001 qualified.
2,Major Design software: PLS
3,Advantage: World first class professional design, Competitive price and Best solution provider
4,Accept initial order.
5,Big product range. More than 60000 MT annual capability of steel towers products.
6,Fast delivery: Normally around 4 weeks and always punching the agreed scheduled.

For more information, please feel free contact with me.

Looking for your kind reply.
Best Regards.

Tony Pan Managing Director | GTE Group Ningbo China

M: +86 13857402582
T: +86 574 87590313

Email analysis :

NOTE : X-Remote : ()
NOTE : Received : from cloudvm-1e7a8fc ([])
NOTE : Received : from unknown (HELO (

Acqusition of Landed Properties in your Country

Dear Sir/Madam,

Sorry to disturb your privacy with my sudden email, I got your contact from your country web directory and decided to contact you urgently.

However, I write to inform you of my desire to acquire Business Investment Projects/Landed properties or rather going into Joint venture Partnership with you in your Country as I have interest and decided to relocate to your Country due to this endless war and killings in my country Syria.

Please i need your quick reply and advise suggestion regarding my desire and intention plans with you in your Country.

Your quick response will be highly appreciated.
Thanking you in anticipation of your cooperation.

Yours faithfully,
Mrs. Jbeily Rajwa

Email analysis :

NOTE : Received : from (HELO User)
NOTE : ([])
NOTE : by

Contact western union department


After several investigations and research at internet database we find you amongst those that have been defrauded and this proves that you have truly been swindled by scammers in the hope of getting one fund or the other that is not real.We are working together with National Security agencies to track every fraudsters down,do not respond to their e-mails,letters and phone calls any longer as they are scams and you should be very careful to avoid being a victim to fraudsters any longer because they have nothing to offer you but to rip-off what you have worked earnestly hard to earn.

The sum of Two Million Seven Hundred Thousand US Dollars (US$2.7M USD) should be transferred to you as compensation for been defrauded.
Be warned!Stop all communication with them.

We have deposited your fund at Western Union agent location where the investigation started. Reconfirm your information to them so they can be sure of the person they are paying. Contact the Western Union agent office through this email address stated below;

Contact person: Mr.Roy Moore
Email:( )

Yours sincerely,

Mrs.Lucia Brooks
Investigation Officer.

Email analysis :

NOTE : X-Remote : ()

NOTE : Received : from User (

NOTE : by (
NOTE : with Microsoft SMTP Server id 8.1.436.0;


Date: 30/10/2015



We hereby bring to your notice that your outstanding payment with the Federal Government of Nigeria has reached this office for verification and clarifications before the release. Anyway, without wasting much time,I have personally investigated this payment down to the Ministry were this contract was executed and from my findings it is clear that you did not execute this contract in question, from all available information, it looks like some officials in the Ministry were trying to use you to claim this particular value which they over invoiced for their own selfish interest. I know it might interest you to know how I managed to find out this truth, yes. I investigated this payment up to the ministry were this contract was executed and after some checks I was surprise to see that the most vital/important documents regarding to this contract bears a different name and beneficiary.

Based on this I decide to contact the supervisor that signed the attestation report, on getting to the contract award and supervisory commission I collected the contract attestation report and found out that this document steel bears the name: B& B PETROLEUM ENG.PTY as the company that executed this contract. I keep this to my self and came down to my base. As a matter of fact I have been thinking whether to report my findings to the appropriate body for cancellation of this payment, but I have this second thought of contacting you since I am not a saint and in a position to approve this payment for the president to give go ahead order to the release, I feel this might be a Gods given opportunity. So it is based on this I am writing you, if you will accept with my understated conditions I can normalize all the relevant papers of this payment and the funds will be release within 14 working days. Contract attestation report is not in your name, the fund owner ship certificate is also not in your name. Actually your partners as I should say did a very great work in manipulating almost all the documents to your favor. Now, I want you to know that, with my position, I can amend this problems and this money will be paid to your nominated bank account which both of us will share on a 50/50 %if only you will accept with my conditions. So, if you see it wise to get this perfected with me feel free to contact me. I shall let you know my conditions as soon as I here from you.

Tony Ebere.

Email analysis :

NOTE : X-User-Agent : Mozilla/5.0 (Windows NT 5.1; rv:34.0) Gecko/20100101 Firefox/34.0
NOTE : X-Remote :
NOTE : Received : from ([])
NOTe : by
NOTE : for;