Hello Dear

Dear Friend,

Your contact came to me through a friend who does international business between countries.

I am Ms Ashley William, of the Ministry of Health in Mauritius proposing a beneficial transaction to you.I am relying on your genuineness and sincerity,in all aspects of this proposal.

The transaction in question of which I am about to reveal to you,emanated from over-invoicing(COMMISSION) of contract awarded in my ministry for the supplies of medical equipment and quality health programs.The Contract payment were completed on the directives of Nicholas west: knowing fully that my commission will be paid out as agreed to a receiving vault as deposited valuables.

please kindly respond to my email addresses below for full details:
ashleywilliamz2000@hotmail.com

Thanks,
Ms Ashley Williams

Email analysis :

NOTE : ashleywilliamz2000@hotmail.com
NOTE : Shashi@studentmail.siit.tu.ac.th
NOTE : X-Mailer : Zimbra 8.6.0_GA_1194 (zclient/8.6.0_GA_1194)
NOTE : X-Originating-Ip : [166.88.123.62]

NOTE : Received : from mail.studentmail.siit.tu.ac.th
NOTE : (mail.studentmail.siit.tu.ac.th [103.253.75.124])
NOTE : by mail.studentmail.siit.tu.ac.th

NOTE : account Shashi
NOTE : siit.tu.ac.th

NOTE : mail.studentmail.siit.tu.ac.th server was used to relay this scam.

Happy to write you.

Attn:

Congratulation!!!

Your name and your e-mail address has won £2,050,000GBP in the VW Motors Email Lottery. Your winning No. is (VJETTA-UK-VP990003-M4GA). Contact (Mr. Elvis Bowie) elvis.bowie@yahoo.com.hk. Tel.: +44-703-590-5301 immediately; and forward your winning No. (VJETTA-UK-VP990003-M4GA) to him to claim your prize.
Congratulation once again.

Thank you.

Patricia Wesley.

Email analysis :

NOTE : elvis.bowie@yahoo.com.hk
NOTE : patwesl@vw.motor.co.uk
NOTE : Received : from [10.9.106.66] (35.6d.5177.ip4.static.sl-reverse.com [119.81.109.53])

NOTE : (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
NOTE : (No client certificate requested) by smtp1.ac-poitiers.fr (Postfix)
NOTE : Received : from smtp1.ac-poitiers.fr (smtp1.ac-poitiers.fr. [195.83.12.242])

NOTE : A server smtp1.ac-poitiers.fr was compromised and relay scams.

Wang Lei

PLEASE CAN WE DISCUSS A PROFITABLE DEAL?
IF YOU WISH TO HEAR MORE LET ME KNOW.
THANK YOU.

--------------------------------------------------------------------------------------------------------
Evite el Spam: Nunca responda correos que soliciten su nombre de
usuario y Password. Administracion de red. Universidad de La Habana.

Email analysis :

NOTE : rjbeltran@lex.uh.cu
NOTE : wl7702@qq.com
NOTE : Authentication-Results : rjbeltran@lex.uh.cu
NOTE : Mime-Version : 1.0
NOTE : Content-Type : text/plain; charset=ISO-8859-1; DelSp="Yes"; format="flowed"
NOTE : Content-Disposition : inline
NOTE : User-Agent : Internet Messaging Program (IMP) H3 (4.3.10)
NOTE : Return-Path : < rjbeltran@lex.uh.cu >
NOTE : Received : from smtp.uh.cu (proxy2.uh.cu. [200.55.139.213])

NOTE : Received : from lex.uh.cu (lex.uh.cu [10.6.54.30])

NOTE : by smtp.uh.cu
NOTE : Received : by lex.uh.cu
NOTE : Received : from 197.211.53.11 (197.211.53.11 [197.211.53.11])

NOTE : by mail.lex.uh.cu (Horde Framework)
NOTE : client-ip=200.55.139.213;
NOTE : Content-Transfer-Encoding : 7bit
NOTE : Hi

Informations from Scam.cz :

- uh.cu is the University of Havana.
- rjbeltran@lex.uh.cu email was used to authenticate with mail.lex.uh.cu
- uh.cu was compromised.

RE:PROFITABLE BUSINESS PROPOSAL

COMPANY NAME: Hilton Sanitaryware(Zhengzhou) Co., Ltd.
CONTACT NAME: Kitty Song
LOCATION: Zhengzhou city, Henan province,
EMAIL ADDRESS: hiltonsanitary094@outlook.com
BUSINESS TYPE: Manufacturer
PRODUCTS OFFERED: Construction material
SEEKING AGENT IN TERRITORY: UNITED STATE OF AMERICA,CANADA AND SOUTH AMERICA.

OPPORTUNITY:

We are a manufacturer of sanitary wares in China, we have 17 factories to produce different product lines. Our main products are faucets, ceramic sanitary wares, glass wash basins, cast iron bathtubs, steel bathtubs, acrylic bathtubs, shower enclosures, steam shower room, etc. We are searching for representatives who can help us establish a medium of getting our funds from our costumers as well as making payments through you to us.Please if interested in transacting business with us,so our clients could make payment to you being a representative,we will be very glad and compensations will be given and as well as other benefits. Should you have any questions and if you are interested in this project, please contact me with this E-mail: ( hiltonsanitary094@outlook.com ), wish we can be good partner too.

PLEASE ALSO PROVIDE TO US YOUR FULL VALID DATAS AS STATED:

COMPLETE NAMES------------------
COMPLETE POSTAL ADDRESS---------
TEL. NUMBER---------------------
FAX NUMBER----------------------
EMAIL ADDRESS-------------------
OCCUPATION----------------------
MARITAL STATUS------------------
ZIP/POSTAL CODE-----------------

Please accept my
Best regards
Kitty Song
Email: hiltonsanitary011111@hotmail.com

Copyright (c) 2003-2016 Hilton Asia Co.,Ltd
hiltonsanitary094@outlook.com
Chinese Factory Address£ºHenan Export Processing zone. Zhengzhou. Henan Province. China

Email analysis :

NOTE : hiltonsanitary094@outlook.com
NOTE : hiltonsanitary011111@hotmail.com
NOTE : X-Sender : info@hilton.com
NOTE : Organization : Hilton Sanitaryware(Zhengzhou) Co., Ltd.
NOTE : Received : from webmail.corumba.ms.gov.br (localhost [127.0.0.1])
NOTE : by ns2.corumba.ms.gov.br (Postfix)
NOTE : Organization : Hilton Sanitaryware(Zhengzhou) Co., Ltd.
NOTE : client-ip=187.4.64.51;
NOTE : User-Agent : Roundcube Webmail/0.9.3

Informations from Scam.cz :

- corumba.ms.gov.br server was compromised.

Notice!!! From Australia Post Promo

Dear Beneficiary,

Australia Holiday Post Promo held on 14TH March,2016. Your e-mail address attached to ticket number: H1280P05 with Serial number QQD83/512, You have been selected to receive $350,000.00AUD as charity donation/aid from the Australia Holiday Post Promo.

To file for your claim, please contact our agent and provide the information below:

(i).Your name(s),
(ii) Your telephone and fax numbers
(iii) Your contact address
(iv) Your winning information (including amount won).

Contact: Ms. Kayna Hooky
E-mail: claimscarecenter2015@outlook.com

Email analysis :

NOTE : collectionscenter2016@outlook.com
NOTE : info@dpt.org
NOTE : Received : from mail.defensoria.gob.pe (mail.defensoria.gob.pe [172.30.1.26])
NOTE : by relay.defensoria.gob.pe (Postfix)
NOTE : Received : from [10.171.207.3] (unknown [197.210.227.121])
NOTE : by mail.defensoria.gob.pe
NOTE : *@mail.defensoria.gob.pe

Informations from Scam.cz :

- defensoria.gob.pe was compromised.