SPECIAL INFORMATION

Good-day..

Subject: Transfer of inheritance entitlement totaled $4.5million.

Could you please permit me to introduce myself to you, my name is Mr. Michael .L. Kachasi, I work for the ECOWAS Commission. I would like to initiate a mutual business partnership with you in view of the aforementioned subject matter.

I will not hesitate to give you the details of this viable financial transaction as soon as you express your interest to partner with me.

Best regards,
Michael .L. Kachasi.

Email analysis :

NOTE : codc88@yahoo.com
NOTE : standardfinance_212@yahoo.com
NOTE : 89.34.26.103 (ip6.deliverybox7.batmail.in)

NOTE : Received : from [154.118.2.197] (port=63136 helo=User)

NOTE : by d5.fodseynbg.org with esmtpa (Exim 4.86)

TR : Bill of Lading / AWB#5735574736 (DHL Phishing)

Dear Sir/Ma ,

Your document has arrived our office. please find the original shipping documents for reference. Also the AWB#5735574736 of the original documents sent to your office.

Kindly follow the instruction as attached for your tracking and shipping documents.

Thanks for your patronage.

DHL OFFICE

DHL-Sinotrans International Air Courier Ltd.
No. 18 Ronghua Nanlu,
BDA Beijing 100176
P.R.China
Telephone: +8610 87846000
Fax: +8610 67808799
E-mail: info@dhl.com
Website: www.dhl.com
Description: DHL Authorized Shipping Center®

shipping docs.htm

File analysis :

OPEN : shipping docs.htm
FILL : FORM
FORM : http://upcyclepolymers.com/images/pattern /ch/customer dhl/logon.php
REDIRECT : http://www.dhl.com.ng/en/express/tracking.html

upcyclepolymers.com whois :

Domain Name: UPCYCLEPOLYMERS.COM
Registry Domain ID: 1757217314_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Update Date: 2012-11-05T16:11:26Z
Creation Date: 2012-11-05T16:11:26Z
Registrar Registration Expiration Date: 2017-11-05T16:11:26Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: +1.4806242505
Registrant Name: Jason Lewis
Registrant Organization: Upcycle Polymers, LLC
Registrant Street: P.O. Box 793
Registrant City: Brighton
Registrant State/Province: Michigan
Registrant Postal Code: 48116
Registrant Country: United States
Registrant Phone: 248-875-8370
Registrant Email: jason@uniplasinc.com
Admin Name: Jason Lewis
Admin Organization: Upcycle Polymers, LLC
Admin Street: P.O. Box 793
Admin City: Brighton
Admin State/Province: Michigan
Admin Postal Code: 48116
Admin Country: United States
Admin Phone: 248-875-8370
Admin Email: jason@uniplasinc.com
Tech Name: Jason Lewis
Tech Organization: Upcycle Polymers, LLC
Tech Street: P.O. Box 793
Tech City: Brighton
Tech State/Province: Michigan
Tech Postal Code: 48116
Tech Country: United States
Tech Phone: 248-875-8370
Tech Email: jason@uniplasinc.com
Name Server: NS17.DOMAINCONTROL.COM
Name Server: NS18.DOMAINCONTROL.COM
DNSSEC: unsigned

Email analysis :

NOTE : chooseyourgift@BennettBrothers.com
NOTE : Primary Hostname - d5.seyjhnbg.org
NOTE : X-Remote : 89.34.26.103 (ip6.deliverybox7.batmail.in)

NOTE : X-Authenticated-Sender : d5.seyjhnbg.org: vitalot
NOTE : Received : from [154.118.17.68] (port=58905 helo=User)

NOTE : by d5.fodseynbg.org with esmtpa (Exim 4.86)

COLLABORATION

Good morning

I come by this e-mail to send my best greetings in first and then you have my excuses for this unexpected contact. But imagine with me that it is being given the urgency and the importance of this agreement. Indeed, I work with a group of miners of Ghana, which currently has a gold quantity which they want to sell immediately. It is approximately 89 kilos from a bar from gold, 22 carats+ in 28 000 dollars on a kilo. Moreover, I must say that we do not have yet the official documents with the gold export. Therefore, I come by this e-mail to contact you and to see whether you are interested in this product.

Hoping to have your news soon, please accept my best greetings.

Bidi NAA SARKU.

Bonjour

Je viens par ce mail pour envoyer mes salutations les meilleures en premier et ensuite vous avez mes excuses pour ce contact inattendu. Mais imaginez avec moi qu'il est étant donné l'urgence et l'importance de cet accord. En effet, je travaille avec un groupe de mineurs du Ghana, qui actuellement dispose d'une quantité d'or qu'ils veulent vendre immédiatement. C'est environ 89 kilos de Lingot d'or, 22 carats+ à 28 000 dollars par kilogramme. En outre, je dois dire que nous n'avons pas encore les documents officiels à l'exportation d'or. Donc, je viens par ce mail pour vous contacter et de voir si vous êtes intéressé à ce produit.

Espérant avoir de vos nouvelles bientôt, s'il vous plaît acceptez mes salutations les meilleures.

Bidi NAA SARKU.

Email analysis :

NOTE : bidi.naasarku@gmail.com
NOTE : Return-Path : < cuongtq.qld@moh.gov.vn >
NOTE : X-Originating-Ip : [41.86.234.165]
NOTE : X-Virus-Scanned : amavisd-new at moh.gov.vn
NOTE : Content-Transfer-Encoding : quoted-printable
NOTE : X-Mailer : Zimbra 8.0.6_GA_5922 (zclient/8.0.6_GA_5922)
NOTE : Thread-Topic : COLLABORATION
NOTE : Message-Id : < *.*.*.JavaMail.zimbra@moh.gov.vn >
NOTE : Content-Type : text/plain; charset=utf-8
NOTE : Received : from unknown (HELO mail.moh.gov.vn) (103.1.210.45)
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by mail.moh.gov.vn (Postfix)
NOTE : Received : from mail.moh.gov.vn ([127.0.0.1])
NOTE : by localhost (mail.moh.gov.vn [127.0.0.1])
NOTE : Received : from localhost (localhost [127.0.0.1])
NOTE : by mail.moh.gov.vn (Postfix)
NOTE : Received : from mail.moh.gov.vn ([127.0.0.1])
NOTE : by localhost (mail.moh.gov.vn [127.0.0.1])
NOTE : Received : from mail.moh.gov.vn (mail.moh.gov.vn [103.1.210.45])
NOTE : by mail.moh.gov.vn (Postfix)

Analysis of the scam :

The server from Vietnamese Ministry of Health seems compromised. The server from the Vietnamese Ministry of Health relays the scam from 41.86.234.165. The user cuongtq.qld is the compromised account.

RE: enquiry price

Dear,

Nice day, Glad to hear you are in telecommunication infrastructure projects/transmission line projects, we are steel tower engineering,manufacturing and solution provider worldwide.

1,High quality: ISO 9001/14001 qualified.
2,Major Design software: PLS
3,Advantage: World first class professional design, Competitive price and Best solution provider
4,Accept initial order.
5,Big product range. More than 60000 MT annual capability of steel towers products.
6,Fast delivery: Normally around 4 weeks and always punching the agreed scheduled.

For more information, please feel free contact with me.

Looking for your kind reply.
Best Regards.

Tony Pan Managing Director | GTE Group Ningbo China

M: +86 13857402582
T: +86 574 87590313

Email analysis :

NOTE : huixinsoft44@foxmail.com
NOTE : X-Remote : 118.123.12.125 ()
NOTE : tgnxj@kikyu.com
NOTE : Received : from cloudvm-1e7a8fc ([127.0.0.1])
NOTE : Received : from unknown (HELO kikyu.com) (118.123.12.125)

Acqusition of Landed Properties in your Country

Dear Sir/Madam,

Sorry to disturb your privacy with my sudden email, I got your contact from your country web directory and decided to contact you urgently.

However, I write to inform you of my desire to acquire Business Investment Projects/Landed properties or rather going into Joint venture Partnership with you in your Country as I have interest and decided to relocate to your Country due to this endless war and killings in my country Syria.

Please i need your quick reply and advise suggestion regarding my desire and intention plans with you in your Country.

Your quick response will be highly appreciated.
Thanking you in anticipation of your cooperation.

Yours faithfully,
Mrs. Jbeily Rajwa

Email analysis :

NOTE : rajwa@mailer11.incnets.com
NOTE : jbeily.r@foxmail.com
NOTE : Received : from ppp112-113.static.internode.on.net (HELO User)
NOTE : ([150.101.112.113])
NOTE : by ipmail06.adl2.internode.on.net

Contact western union department

Attention,

After several investigations and research at internet database we find you amongst those that have been defrauded and this proves that you have truly been swindled by scammers in the hope of getting one fund or the other that is not real.We are working together with National Security agencies to track every fraudsters down,do not respond to their e-mails,letters and phone calls any longer as they are scams and you should be very careful to avoid being a victim to fraudsters any longer because they have nothing to offer you but to rip-off what you have worked earnestly hard to earn.

The sum of Two Million Seven Hundred Thousand US Dollars (US$2.7M USD) should be transferred to you as compensation for been defrauded.
Be warned!Stop all communication with them.

We have deposited your fund at Western Union agent location where the investigation started. Reconfirm your information to them so they can be sure of the person they are paying. Contact the Western Union agent office through this email address stated below;

Contact person: Mr.Roy Moore
Email:( roy_westernnunion0@yahoo.com )

Yours sincerely,

Mrs.Lucia Brooks
Investigation Officer.

Email analysis :

NOTE : lina@cucd.cn
NOTE : roy_westernnunion0@yahoo.com
NOTE : X-Remote : 211.103.190.42 ()

NOTE : Received : from User (162.246.20.67)

NOTE : by mail-2.cucd.cn (10.6.6.10)
NOTE : with Microsoft SMTP Server id 8.1.436.0;