Monday, January 19, 2015

wcw貴司

貴公司你好,

本公司可開具(國税-地税)【發票】點数优惠,

可验證后付款。

联系人:刘小姐

聯系手机:13632552036
QQ: 1548817816

Email analysis :

+ ym@xmb.com.cn
+ X-Sohu-Antispam-Language : 1
+ X-Sohu-Antispam-Bayes : 50
+ Return-Path : < jiangzhuowenpu@sohu.com >
+ X-Remote : 123.125.123.1


+ X-Mailer : Lxjkqf 2
+ Received : from unknown (HELO smtp?3.177) (123.125.123.1)


+ Received : from lcqha (unknown [112.93.36.177]) by smtp_3.177


+ wcw貴司

Promotion!! PEK-EURO 17-21 Jan

Have a nice weekend!!

PANAIR--Europe promotion rate!

LH-FRA Daily Flight, CA965/931 direct flight 134567

+100 +300 +500 +1000

1:1 cargo 2.65 2.45 2.3 2.2
1:300 2.3 2.2 2.1 2
1:500 2.0 1.85 1.75 1.7
1:1000 1.85 1.65 1.6 1.5
1:100 2.1 1.9 1.7 1.7
1:110 2.2 2.1 1.9 1.85

CA961 MUC 13567, CA933 CDG directly daily flight

+100 +300 +500 +1000

1:1 cargo 2.6 2.45 2.2 2.1
1:300 2.2 2.1 1.9 1.85
1:500 2.0 1.7 1.6 1.5
1:1000 1.7 1.6 1.5 1.5
1:100 2.1 1.9 1.7 1.7
1:110 2.2 2.1 1.9 1.85

BOD/LIL/LYS/MRS/NCE/NTE/SXB/TLS/BRU TRUCKING, +USD 0.18/KG

all in rate by FOB Beijing, in USD.

B.rgds.
Betty

Oversea Department
ShenZhen Panair Global Logistics Company Limited
ROOM 709-710, I PARK BUILDING (B), #26 DENGLIANG ROAD, NANSHAN DISTRICT, SHENZHEN, CHINA
Tel: 86-755-33986072 Fax: 86-755-33986077
Mob: 18608632890 QQ:2851685784
E-mail:betty@***.com
oversea@***-cn.com
Skype: betty.panair
Http://www.***.com

Friday, January 16, 2015

confirm your reply 2

Sir,

I am contacting you with regards to business transaction I want us to execute. The Nigeria National Petroleum Corporation NNPC has commenced filing of documentation to offset all refined Crude oil products supplies, for outstanding Subsidy claims/payment. click the link and see details

http://leadership.ng/business/398693/fg-pays-n166bn-outstanding-fuel-subsidy-claims

As the Sub-head, claims review board for foreign contractors/beneficiary currently supervised by me. In this regard, I have the opportunity to include your name as one of the beneficiary`s to be paid Subsidy Arrears payment for Oil products supplies for last year, via our offshore center

I cannot do it all alone except with the cooperation of a foreigner like you. This is to enable me fine tune and approve the $9.6 million Dollars subsidy arrears from the USD$300 Billion EXCESS CRUDE OIL FUND Account set aside by the PETROLEUM CORPORATION [NNPC] to OFFSET local and foreign Subsidy arrears. Avail yourself this opportunity and share enormous benefit with me on 60/40 ratio. Payment has been structured to be effected via offshore correspondence Bank in USA. Upon receiving your interest, I will effect necessary paper-work here to include your name with other contractors/beneficiary among whom will receive the Subsidy claims payment. Pls. do reply me ASAP with your Indicated interest and do the needful. This message demands absolute confidentiality.

If you have any question, Please feel free.

Yours Faithfully,
Mr, Yusuf Bello
Director
NNPC:FED/REP/NIG/CAP/TER ABUJA:

Email analysis :

+ lng@kijabe.net
+ yusufbello@freemail.hu
+ Received : from centos3.bgshosting.net (91.150.91.114)
+ Received : from 111-251-254-216.dynamic.hinet.net
+ ([111.251.254.216]:62845 helo=User)


+ by centos3.bgshosting.net
+ confirm your reply 2

MR JAMES IBE THE DELIVERY MAN I SENT HAS ARRIVED ,CALL HIM NOW(+16465689774)?

FROM THE EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA (CBN)
GOV.SANUSI LAMIDO
E-mail: sanusilamido228@yahoo.com.hk

URGENT NOTICE,
ATTENTION: BENEFICIARY

This is to inform you that your delivery man has arrived with your inheritance cash trunk boxes value $8.3 million dollars in John F. Kennedy International Airport New York as their transit. I want you to know that you have 24 hours to call him now with this line (+16465689774) or email (jamesibe18@yahoo.com.ph ),then ask to speak to the diplomatic deliveryman in person of Mr.James Ibe in the United States.Let us know if you are still interested to get your two trunk boxes delivered to you today? As he has been waiting to hear from you to enable him get to your home address without missing his way. For your information, the deliveryman with your package is not aware of the content of the boxes for security purpose. Please do not tell him to avoid running away with your funds.On no account should you let him know about the content of the consignment to avoid evil intention. Most importantly you are advised to send your full data to him,which include your Full Name,Current Residential Address, Direct Cell Number,and A copy of any identity card to verify that you are the right receiver to avoid mistakes. Note that you must call me as soon as you receive this email for more discussion, Also reconfirm your full current address and valid phone number to the Delivery officer via his above email address once you receive this email to enable him deliver your cash consignment boxes to your house without any further delay or mistake.

You are advised not to waste his time at the airport,so that he would not be stranded in any way because he will return if he finds out that you are not doing anything to get him over to your house.

CONGRATULATIONS.
MALLAM SANUSI LAMIDO AMINU,
EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA

Email analysis :

+ Gov.inf1@live.com
+ governorsanusil@yahoo.com.hk
+ Received : from msgw001-05.ocn.ad.jp (180.37.203.74)
+ Received : from User (p26025-ipngn2001kokuryo.gunma.ocn.ne.jp [118.0.49.25])


+ by msgw001-05.ocn.ad.jp
+ MR JAMES IBE THE DELIVERY MAN I SENT HAS ARRIVED ,CALL HIM NOW(+16465689774)?
+ Content-Transfer-Encoding : 7bit

From Joy

How is your day,

Mine is fine over here in Dakar Senegal, My name is Joy Daniel, Am 23 years single tall and fair in complexion, Very good looking girl that is very sharing, giving, caring and loving girl, above all God fearing and trusted, I'm from Ivory Coast in west Africa and presently I am residing in the refugee camp here in Dakar as a result of the civil war going on in my country.


My late father Dr Daniel Gbagbo was the personal adviser to the former head of state of Ivory Coast before the rebels attacked my house one early morning killing my mother and my father, It was only me that is alive now and we managed to make our way to near by country Senegal where we are living now in a refugee camp.
I send and receive e-mails in the office of our Reverend father Paul, He has been so kind to me since i became close to him during one of his visitation to the clinic in the camp when i was sick, I would like to know more about you. Your likes and dislikes,your hobbies and what you are doing presently, I will tell more about myself in my next mail, Attached here is my picture, Hoping to hear from you soonest.

Miss Joy.

My Picture - Copy.jpg

Email analysis :

+ Mime-Version : 1.0
+ Return-Path : < joyand400@hotmail.com >
+ Return-Path : joyand400@hotmail.com
+ Importance : Normal
+ Received-Spf : client-ip=65.55.111.150;
+ X-Originating-Email : [joyand400@hotmail.com]
+ From Joy

Picture analysis :

+ Already used in numerous scams.
+ Use http://www.tineye.com
+ Proven scam...

Thursday, January 15, 2015

Account Notice (Paypal Phishing)

Thu 15/1/2015 5:28:36

Dear Valued Customer,

Unauthorized access has been detected in your account.

Unfortunately, due to this event, our security system has limited the access to your account. Account Limitations prevent you from completing certain actions with your account, such as withdrawing, sending, or receiving money. These limitations are implemented when we see unusual or suspicious activity to help protect both PayPal buyers and sellers. Please verify your account by completing the form which is attached in this email. By doing this, restrictions in your account will be lifted.

We apologize for any inconvenience.

Thank you,
PayPal Security Team

Email analysis :

+ services@ppsec.com
+ Content-Type : multipart/mixed; boundary="--17415"
+ Mime-Version : 1.0
+ Return-Path : < services@ppsec.com >
+ X-Mailer : Balsa 14.0.103581
+ Received : from unknown (HELO mail.dsdemails.co.uk) (216.98.153.222)
+ Received : from 216.98.153.222 ([219.232.247.108]) by dsdemails.co.uk
+ Account Notice

Phishing analysis :

OPEN : Attached.html
FORM : http://www.csticket.su/submit.php

csticket.su analysis :

domain: CSTICKET.SU
nserver: ns1.hostns222777.com.
nserver: ns2.hostns222777.com.
nserver: ns3.hostns222777.com.
nserver: ns4.hostns222777.com.
state: REGISTERED, DELEGATED
person: Private
Person e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2015.01.11
paid-till: 2016.01.11
free-date: 2016.02.13
source: TCI

rawixidawax@hotmail.com analysis :

domain: FE-CC.SU
nserver: ns1.freedns.ws.
nserver: ns2.freedns.ws.
nserver: ns3.freedns.ws.
nserver: ns4.freedns.ws.
state: REGISTERED, DELEGATED
person: Private Person
e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2014.02.18