Saturday, October 31, 2015

COLLABORATION

Good morning

I come by this e-mail to send my best greetings in first and then you have my excuses for this unexpected contact. But imagine with me that it is being given the urgency and the importance of this agreement. Indeed, I work with a group of miners of Ghana, which currently has a gold quantity which they want to sell immediately. It is approximately 89 kilos from a bar from gold, 22 carats+ in 28 000 dollars on a kilo. Moreover, I must say that we do not have yet the official documents with the gold export. Therefore, I come by this e-mail to contact you and to see whether you are interested in this product.

Hoping to have your news soon, please accept my best greetings.

Bidi NAA SARKU.

Bonjour

Je viens par ce mail pour envoyer mes salutations les meilleures en premier et ensuite vous avez mes excuses pour ce contact inattendu. Mais imaginez avec moi qu'il est étant donné l'urgence et l'importance de cet accord. En effet, je travaille avec un groupe de mineurs du Ghana, qui actuellement dispose d'une quantité d'or qu'ils veulent vendre immédiatement. C'est environ 89 kilos de Lingot d'or, 22 carats+ à 28 000 dollars par kilogramme. En outre, je dois dire que nous n'avons pas encore les documents officiels à l'exportation d'or. Donc, je viens par ce mail pour vous contacter et de voir si vous êtes intéressé à ce produit.

Espérant avoir de vos nouvelles bientôt, s'il vous plaît acceptez mes salutations les meilleures.

Bidi NAA SARKU.

Email analysis :

NOTE : bidi.naasarku@gmail.com
NOTE : Return-Path : < cuongtq.qld@moh.gov.vn >
NOTE : X-Originating-Ip : [41.86.234.165]
NOTE : X-Virus-Scanned : amavisd-new at moh.gov.vn
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : X-Mailer : Zimbra 8.0.6_GA_5922 (zclient/8.0.6_GA_5922)
NOTE : Thread-Topic : COLLABORATION
NOTE : Message-Id : < *.*.*.JavaMail.zimbra@moh.gov.vn >
NOTE : Content-Type : text/plain; charset=utf-8
NOTE : Received : from unknown (HELO mail.moh.gov.vn) (103.1.210.45)
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by mail.moh.gov.vn (Postfix)
NOTE : Received : from mail.moh.gov.vn ([127.0.0.1])
NOTE : by localhost (mail.moh.gov.vn [127.0.0.1])
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by mail.moh.gov.vn (Postfix)
NOTE : Received : from mail.moh.gov.vn ([127.0.0.1])
NOTE : by localhost (mail.moh.gov.vn [127.0.0.1])
NOTE : Received : from mail.moh.gov.vn (mail.moh.gov.vn [103.1.210.45])
NOTE : by mail.moh.gov.vn (Postfix)

Analysis of the scam :

The server from Vietnamese Ministry of Health seems compromised. The server from the Vietnamese Ministry of Health relays the scam from 41.86.234.165. The user cuongtq.qld is the compromised account.

Tuesday, October 21, 2014

re:gold offer and investement proposal

Hello

We currently have gold ingots.

offer of sale.

We are looking for potential buyers or sellers very serious to sell our stock veryimportant. We also grant loan credits and also we intervene in l ' capital projects has short andlong-term Contact us for more information.

neat
Camara

Email analysis :

NOTE : Received : from mailler15.lws-hosting.com (mailler15.lws-hosting.com. [193.37.145.82])
NOTE : Received : from mailler15.lws-hosting.com (localhost.localdomain [127.0.0.1])
NOTE : by filter.mynetwork.local
NOTE : Received : from mailler15.lws-hosting.com (localhost.localdomain [127.0.0.1])
NOTE : by filter.mynetwork.local
NOTE : Received : by mailler15.lws-hosting.com (Postfix, from userid 10001)
NOTE : Received : from mail15.lwspanel.com (mailler15.lws-hosting.com [193.37.145.82])
NOTE : (Authenticated sender: contact@djogbe-invest.com)
NOTE : Return-Path : < contact@djogbe-invest.com >
NOTE : X-Spam-Checker-Version : SpamAssassin 3.3.1 (2010-03-16)
NOTE : on mailler15.lws-hosting.com
NOTE : Mime-Version : 1.0
NOTE : X-Sender : contact@djogbe-invest.com
NOTE : User-Agent : Roundcube Webmail/1.0.3
NOTE : re:gold offer and investement proposal