I wish to order from your store

Header Analysis Quick Report
Originating IP: 37.187.71.191
Originating ISP: Ovh Sas
City: n/a
Country of Origin: France
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: a<snipped>
Received: by 10.220.70.5 with SMTP id b5csp34131vcj;
Sat, 15 Feb 2014 13:57:05 -0800 (PST)
X-Received: by 10.204.52.193 with SMTP id j1mr10236013bkg.0.1392501424422;
Sat, 15 Feb 2014 13:57:04 -0800 (PST)
Return-Path: <[email protected]>
Received: from server.haiderkamonah.com (ns3362379.ip-37-187-71.eu. [37.187.71.191])
by mx.google.com with ESMTPS id qw9si4315241bkb.1.2014.02.15.13.57.03
for <snipped>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 15 Feb 2014 13:57:04 -0800 (PST)
Received-SPF: neutral (google.com: 37.187.71.191 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=37.187.71.191;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 37.187.71.191 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from bytbyot by server.haiderkamonah.com with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1WELBp-0005D4-Mg
for <snipped>; Fri, 14 Feb 2014 17:00:33 +0100
To: <snipped>
Subject: Purchase Order
Date: Fri, 14 Feb 2014 16:00:33 +0000
From: Mr Lao <[email protected]>
Message-ID: <[email protected]>
X-Priority: 3
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="us-ascii"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.haiderkamonah.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [557 500] / [47 12]
X-AntiAbuse: Sender Address Domain - server.haiderkamonah.com
X-Get-Message-Sender-Via: server.haiderkamonah.com: authenticated_id: bytbyot/only user confirmed/virtual account not confirmed
X-Source:
X-Source-Args:
X-Source-Dir:

Dear Sir / Ma ,

Good Day,

I am Mr. Yonggang Lao from Mexico.We need the quote regarding list of your products.Kindly give us official quotation,Specification of each of your listed items as we are interested to purchase.Attached is our Purchase order and list of items on demand.Go through and see if you/your company can make a supply.

What is the lead time?and ensure price is very competitive for us to win this order,Please give me a call if further clarification is required.

Thanks and best regards.

Wish you have a nice day.

Warmest regards.

Contact: Mr. Yonggang Lao
Company: G&G Company
Address: Calle 31 No.43 Col. Ampliación las ÁguilAguilas,
Mexico
Tel : 52-91 51 97 10

Header Analysis Quick Report<br>Originating IP: 74.125.83.67<br>Originating ISP: Google<br> City: Mountain View<br>Country of Origin: United States<br>* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.70.126.40 with SMTP id mv8csp83003pdb;
Sun, 16 Feb 2014 09:44:34 -0800 (PST)
X-Received: by 10.43.69.83 with SMTP id yb19mr1666641icb.45.1392572674271;
Sun, 16 Feb 2014 09:44:34 -0800 (PST)
Return-Path: <[email protected]>
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com. [184.154.1.124])
by mx.google.com with ESMTPS id mp6si16466629icc.89.2014.02.16.09.44.32
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 16 Feb 2014 09:44:34 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 184.154.1.124 as permitted sender) client-ip=184.154.1.124;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 184.154.1.124 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: from mail-ee0-f67.google.com ([74.125.83.67]:38249)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1WF5lV-0004RW-T7
for <snipped>; Sun, 16 Feb 2014 11:44:32 -0600
Received: by mail-ee0-f67.google.com with SMTP id d17so3717820eek.2
for <snipped>; Sun, 16 Feb 2014 09:44:26 -0800 (PST)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.15.33.193 with SMTP id c41mr3629361eev.79.1392572666027;
Sun, 16 Feb 2014 09:44:26 -0800 (PST)
Received: by 10.15.63.130 with HTTP; Sun, 16 Feb 2014 09:44:25 -0800 (PST)
Date: Sun, 16 Feb 2014 17:44:25 +0000
Message-ID: <CAOafmmQUwvqbwV31e2y4ZGrnaEmapFqHJpt8PsNR_GASa-9ung@mail.gmail.com>
Subject: SUPPLY INVITATION OF YOUR PRODUCTS
From: JOHN OFORI <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=089e0168159815254604f28997cc
Bcc: <snipped>
X-Spam-Status: No, score=0.5
X-Spam-Score: 5
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: DEAR SUPPLIERS, WE ARE AGENTS SOURCING FOR RELIABLE COMPANIES
THAT CAN SUPPLY TO OUR GOVERNMENT YOUR PRODUCT,ETC IN A LARGER QUANTITY FOR
ON GOING ECONOMIC COMMUNITY OF WEST AFRICAN STATE ( WEST AFRICA PROJECT GHANA)2014/2015
EXHIBITION CONTRACT SUPPLY HERE IN GHANA. [...]

Content analysis details: (0.5 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[74.125.83.67 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(johnofori8[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (johnofori8[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.5 CRM114_PROB_GOOD CRM114: CRM114_PROB_GOOD
X-Spam-Flag: NO
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - r8-chicago.webserversystems.com
X-AntiAbuse: Original Domain - <snipped>
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: r8-chicago.webserversystems.com: none
X-Source:
X-Source-Args:
X-Source-Dir:

DEAR SUPPLIERS,

WE ARE AGENTS SOURCING FOR RELIABLE COMPANIES THAT CAN SUPPLY TO OUR
GOVERNMENT YOUR PRODUCT,ETC IN A LARGER QUANTITY FOR ON GOING ECONOMIC
COMMUNITY OF WEST AFRICAN STATE ( WEST AFRICA PROJECT GHANA)2014/2015
EXHIBITION CONTRACT SUPPLY HERE IN GHANA.

we are interested in your product and to do business with you or your
company, let us know if you can handle this supply;we need your product
list and specification including the price. contact me with this
information Below;

Our PAYMENT TERMS: is 80% advance payment via (T/T) by telegraphic
transfer,before Shipment 20% will complete to your company West Africa
Project Ghana

Please Contact me with this e-mail : [email protected].
Yours sincerely,


MR JOHN

[AlanJones]

Updated script from [email protected]

Hello sales, i am interested in purchasing some items in your store and i need you to get back to me with your website where i can choose out of the vast quantity needed. Kindly get back to me Asap so i can forward you items needed. Also let me know if payment can be made via visa or master card and if can make use of my freight forwarder for the pick up of goods from your store after payment is confirmed. They are so effective in shipping my goods to mya store in Luxembourg is estimated to be 2-3days. Respectful,aaa Cardoso , Address bran stores INC 23-67 Avenue J. F. Kennedy L-1565 Luxembourg Luxembourg Tel: +352 464 0754

Delivered-To: XXX
Received: by 10.194.125.176 with SMTP id mr16csp54442wjb;
Wed, 26 Feb 2014 15:27:07 -0800 (PST)
X-Received: by 10.236.210.18 with SMTP id t18mr11288982yho.67.1393457226671;
Wed, 26 Feb 2014 15:27:06 -0800 (PST)
Return-Path: <[email protected]>
Received: from srv.bri9.com.br (ns1.bri9.com.br. [186.227.162.47])
by mx.google.com with ESMTPS id u64si4119934yhm.70.2014.02.26.15.27.05
for <XXX>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 26 Feb 2014 15:27:06 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 186.227.162.47 as permitted sender) client-ip=186.227.162.47;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 186.227.162.47 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from nobody by srv.bri9.com.br with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1WInyV-0001EO-Od
for XXX; Wed, 26 Feb 2014 20:33:16 -0300
To: XXX
Subject: ORDER INQUIRY
X-PHP-Script: www.flexpromotora.com.br/language/en-GB//domain_sql.php for 41.58.13.4
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: Cardoso Bran <[email protected]>
Reply-To: [email protected]
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: www.flexpromotora.com.br
Message-Id: <[email protected]>
Date: Wed, 26 Feb 2014 20:33:15 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - srv.bri9.com.br
X-AntiAbuse: Original Domain - googlemail.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - srv.bri9.com.br
X-Get-Message-Sender-Via: srv.bri9.com.br: uid via acl_c_vhost_owner from authenticated_id: nobody from /only user confirmed/virtual account not confirmed

Thank you, yes it was a very expensive lesson one which will take a long time to recover from. However, my sharing of my story has saved 2 other people so far from the same fate, they have thanked me for sharing my story. I am really happy this has helped others. Bad for me, but not without a little reward of protecting others. Thanks for your reply, this will never happen to me again, now just to warn others...
when I searched for mike sharples and sharples scam before going through this, nothing came up to warn me.
That has changed.

From [email protected]

Hello Sales ,

Good day to you and your co workers , I am Luize Pable an Italian
American reside in Luxembourg .....I will like to place an order from
you and i will be glad if you accept payment via Visa ,Master and Amex
card for the payment and note we have a personal shipping company that
shipp all our international items world wide .

Also get back to me if you have web site for me to place my order .

I await to read back from you ,

Sincerely ,

Mr Luize Pablo .

Delivered-To: xxx
Received: by 10.216.218.9 with SMTP id j9csp273780wep;
Thu, 13 Mar 2014 05:52:21 -0700 (PDT)
X-Received: by 10.140.82.8 with SMTP id g8mr2012446qgd.88.1394715111686;
Thu, 13 Mar 2014 05:51:51 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-qc0-x242.google.com (mail-qc0-x242.google.com [2607:f8b0:400d:c01::242])
by mx.google.com with ESMTPS id k45si1181099qgd.142.2014.03.13.05.51.51
for <xxx>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Thu, 13 Mar 2014 05:51:51 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:400d:c01::242 as permitted sender) client-ip=2607:f8b0:400d:c01::242;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:400d:c01::242 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-qc0-x242.google.com with SMTP id i8so377748qcq.5
for <xxx>; Thu, 13 Mar 2014 05:51:51 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.140.81.74 as permitted sender) client-ip=10.140.81.74
X-Received: from mr.google.com ([10.140.81.74])
by 10.140.81.74 with SMTP id e68mr1866098qgd.99.1394715110354 (num_hops = 1);
Thu, 13 Mar 2014 05:51:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
MIME-Version: 1.0
X-Received: by 10.140.81.74 with SMTP id e68mr1866098qgd.99.1394715110341;
Thu, 13 Mar 2014 05:51:50 -0700 (PDT)
Received: by 10.140.92.150 with HTTP; Thu, 13 Mar 2014 05:51:50 -0700 (PDT)
Date: Thu, 13 Mar 2014 12:51:50 +0000
Message-ID: <CAJAb9Rj6Jrc32k_WzmYYQd1Ng+VwCDKUZ0QLgjFMTv0KTiBHbA@mail.gmail.com>
Subject: ORDER ENQUIRY
From: Luize Pablo <[email protected]>
To: xxx
Content-Type: text/plain; charset=ISO-8859-1
Bcc: xxx

Fake shipper:
[email protected]
Chronopost Shipping Courier Company

FIRST CLASS SHIPMENT WILL COST THE SUM OF $2450.00 USD

SECOND CLASS SHIPEMENT WILL COST THE SUM OF $1995.00 USD

Kindly send the copy of the email to your customer so that he can
ascertain the shipment he wish to use.

Looking forward to read from you.

Sincerely

Mr Sonny Hargreeves

[AlanJones]

Two separate emails from [email protected] and he seems confused about where his store is.

Good Day, I want to place an order in your store,and I will like to know if you ship to Tokyo, JAPAN and my payment will be remitted via MasterCard.So please let me know if you can assist me with the order,and please do not forget to include your website in your reply.Your quick response will be highly appreciated,I will be very glad if you treat this email with good concern. Regards, Randy Barnes.

Good Day, I am Randy Barnes by name, the C.E.O of a newly Established Store and General Merchandise here in Cyprus I will like to place an order with you/your company but need to know some of your company policy as have some questions to ask you, below are the question: 1. Do you allow Email Order 2. Do you Accept Credit Card (Visa, Master, Amex or Discover) as the Means of Payment. 3. Do you Ship Internationally (Cyprus) or Can I arrange the pick up with my a shipping company after the payment is been confirmed Kindly get back to me immediately with your website or the price list of your present stock list products so I email your the list along with the quantities needed. Hope to read from you now. Regards Dr Randy Barnes Director/C.E.O R.B.store Inc.

[email protected]
"Sharon Zepeda":

Delivered-To: snipped
Received: by 10.182.125.170 with SMTP id mr10csp115073obb;
Mon, 16 Jun 2014 07:55:32 -0700 (PDT)
X-Received: by 10.68.231.229 with SMTP id tj5mr24461112pbc.101.1402930531873;
Mon, 16 Jun 2014 07:55:31 -0700 (PDT)
Return-Path: <[email protected]>
Received: from e-ruri.com ([218.38.136.103])
by mx.google.com with ESMTPS id ql10si13970551pac.31.2014.06.16.07.55.30
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 16 Jun 2014 07:55:31 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 218.38.136.103 as permitted sender) client-ip=218.38.136.103;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 218.38.136.103 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
by e-ruri.com (8.13.8/8.13. with ESMTP id s5GEtTYs018376
for <xxx>; Mon, 16 Jun 2014 23:55:29 +0900
Received: (from apache@localhost)
by localhost.localdomain (8.13.8/8.13.8/Submit) id s5GEtSFh018375;
Mon, 16 Jun 2014 23:55:28 +0900
Date: Mon, 16 Jun 2014 23:55:28 +0900
Message-Id: <[email protected]>
To: xxx
Subject: Enquiry
X-PHP-Originating-Script: 501:zaza.php
From: Sharon <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.2
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

Hello,

To whom it may concern. I will like to place an order from your company to Ukraine. Please confirm if you ship to this region. Also my means of payment is through credit card (visa or Master).

I look forward to hear back from you. Have a nice day!

Thank you.

From [email protected] Thu Jul 17 22: 29:53 2014
Return-Path: <[email protected]>
X-Original-To: me
Delivered-To: me
X-Greylist: delayed 329 seconds by postgrey-1.34 at leopard; Thu, 17 Jul 2014 22:29:53 EDT
Received: from srv001.memberspeed.com (srv001.memberspeed.com [173.193.183.146]) by my box (Postfix) with ESMTPS id 20C794750 for <me>; Thu, 17 Jul 2014 22:29:48 -0400 (EDT)
Received: by srv001.memberspeed.com (Postfix, from userid 10070) id 75A5146CD4; Thu, 17 Jul 2014 21:24:04 -0500 (CDT)
To: me
Subject: About products and order
X-PHP-Originating-Script: 10070:v3mail.php
From: Guillaume Saint-Clair <[email protected]>
Reply-To:
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="D7C72CD48532103042C1C9BBB631E36A"
Message-ID: <[email protected]>
Date: Thu, 17 Jul 2014 21:24:04 -0500

Dear,

We saw your company through the Alibaba products search. Please we would like to know if the attached products is still in production.

Also, kindly quote us with the best price you can offer us on each product.


Best regards,

Guillaume Saint-Clair
ACETO France SAS

Tel : 0033 1 44 16 69 49
Fax : 0033 1 44 16 69 50
Email : [email protected]
-----------------------------
An HTML file is attached; it asks the user to enter his email address and email password, then passes them to a page on www.rocland.cl. Something is very phishy about this.

Subject: International order
Reply to: [email protected]

Dear, I would like to place an order with you. Can i know if you ship international, can i use my frieght forwarder?. More so, Do confirm the type of credit card you accept has a means of payment.So please let me know if you can assist me with the order,and please do not forget to include your website in your reply. I look forward to receive your response we can ascertain from there. Thank you Harry International Biz Mr Harry Bliss - Owner 21, Utkarsh, Mahaveernagar, Vakharbhag, Sangli.416416, Maharashtra TEL : (91) 0233-979999 FAX:- (91) 03923-99292 Email :- [email protected]

---------------


Delivered-To: xxxx
Received: by 10.224.182.205 with SMTP id cd13csp50750qab;
Tue, 29 Jul 2014 10:46:07 -0700 (PDT)
X-Received: by 10.221.56.132 with SMTP id wc4mr3541039vcb.38.1406655966821;
Tue, 29 Jul 2014 10:46:06 -0700 (PDT)
Return-Path: <[email protected]>
Received: from vps.inspectorsites.com (vps.inspectorsites.com. [207.58.152.212])
by mx.google.com with ESMTPS id i7si9098319vek.61.2014.07.29.10.46.06
for <xxx>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 29 Jul 2014 10:46:06 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=207.58.152.212;
Authentication-Results: mx.google.com;
spf=neutral (google.com: [email protected] does not designate permitted sender hosts) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from nobody by vps.inspectorsites.com with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1XCBSK-0003gw-CZ
for xxx; Tue, 29 Jul 2014 12:44:56 -0500
To: xxx
Subject: International order
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: Harry Bliss <[email protected]>
Message-Id: <[email protected]>
Date: Tue, 29 Jul 2014 12:44:56 -0500
X-inspectorsites-MailScanner-Information: Please contact the ISP for more information
X-inspectorsites-MailScanner-ID: 1XCBSK-0003gw-CZ
X-inspectorsites-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-inspectorsites-MailScanner-SpamCheck:
X-inspectorsites-MailScanner-From: [email protected]
X-Spam-Status: No
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps.inspectorsites.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - vps.inspectorsites.com

X-Received: by 10.236.1.34 with SMTP id 22mr16103448yhc.45.1407511998765; Fri,
08 Aug 2014 08:33:18 -0700 (PDT)
Received: by 10.170.132.146 with HTTP; Fri, 8 Aug 2014 08:33:18 -0700 (PDT)
Date: Fri, 8 Aug 2014 08:33:18 -0700
Message-ID: <CACHFz2OgFnvk=p29G8wivOj0+qy7ocZGpgyQ_pXMVp0w2ApZxg@mail.gmail.com>
Subject: Order
From: Andy Marcus <[email protected]>
To: snip
Content-Type: multipart/alternative; boundary=001a1133390ab41f1f05001fec89

Hello Sir/Madam,
I will like to know if you carry gates and also will like you to email me with your website.


--
Andy Marcus

[AlanJones]

Subject: International order
Reply to: [email protected]

Fake shipper and bank details used by this scammer Maytha Elven - [email protected]

ROYAL CARGO
Courier & Cargo Services
49,JALAN MENARA GADING 1 TAMAN CONNAUGHT
CHERAS,KUALA LUMPUR 56000 MALAYSIA (HEAD OFFICE).
Phone: +60166953847 Fax: +601112022111


Thanks for choosing Royal cargo Freights. The profile of the account number LG093569011K, owner is as follow :

Harry International Biz
Mr Harry Bliss - Owner
21, Utkarsh, Mahaveernagar,
Vakharbhag, Sangli.416416,
Maharashtra
TEL : (91) 0233-979999
FAX:- (91) 03923-99292
Email :- [email protected]



Yes we provide the services below:
- Delivery within 72 working hours
- Secure, Safe & Reliable service
- Above 220 countries covered globally
- Collaboration with leading air express companies


The total cost for the shipping will be $1400.50 while insurance and taxes will be $450.00 making a total of $1850.50. 2 to 3 days delivery the shipment will be door to door and payment can be made only by bank transfer. We required shipping charges handled by the merchant of the subject since it is a commercial based..Once the payment has been transferred to the suggested agent we inform our local team to come for the pick up. We need to know when exactly the packages will be ready for pick up and payment will be received earlier before the pick up date. This is to ensure shipping arrangement well scheduled. Pick up address has been acknowledge. We can ship from any location in the world. For all order that takes more than a week for production before pick-up. We would receive payment in advance to ensure shipment is secured at the exact date of pick-up.
Below is the information you will need to make the transfer to our representative via bank transfer:


Bank Information:
Bank Name: Hong Leong Bank
Account Name: Tjia Swee Lie
Account Number: 04650163252
Bank Address: Ground Floor, No, 58 & 59, Jalan Mamanda 9, Ampang Point
68000 Ampang, Selangor, Malaysia
Beneficiary Address: Blk A-12-4 Impiam 1/2
Subang Jaya, Selangor 47100
Swift code: HLBBMYKL


Kindly get back to us with the payment slip given to you from the bank as an evidence that you have made the payment to our bank account.


Kindest Regard,
Mrs Maytha,
Customer Service
Royal cargo Freights.

Western Union recipient details

Dear XXX,

Yes, Your bank was right, because we have so many transactions with account, that is why the account cannot receive payment at the moment. We just had a call from Mr Harry Bliss that he wants his goods to pick up tomorrow. We would advise you to send the money Via western union money transfer today,so that we can come to your store tomorrow to pick up the parcel.

Here is the details for western union money transfer listed below;

Malaysia Payment Details

Name of Receiver: NURLAILA BINTI NURDIN
Receivers address: 49,JALAN MENARA GADING
1 TAMAN CONNAUGHT
City: CHERAS
State: KUALA LUMPUR
Zip code: 56000
Country: MALAYSIA

As soon as you are done with the transfer get back to us with the details below:
1. Sender's name and Address as used to fill the western union form................
2. Total Amount sent after the transfer charges was deducted................
3. Money transfer control number/MTCN.................


Kindest Regard,
Mrs Maytha,
Customer Service
Royal cargo Freights.

IP Address Quick Report
IP Address: 175.139.98.57
Organization: Tm Net
City: Puchong
Country of Origin: Malaysia
* For a complete report on this IP address goto ipTRACKERonline

Another bank account

Dear XXX,

We would like you to proceed with the payment now with a new account of our representative.

Below is the information you will need to make the transfer to our representative bank transfer:


Bank Name: MAYBANK
Account Name: MOHAMED CHERIF
Account Number: 164427367468
Bank Address: N0, 281 JALAN AMPANG, 50450, KUALA LUMPUR, MALAYSIA
Swift code: MBBEMYKL

Kindly get back to us with the payment slip given to you from the bank as an evidence that you have made the payment to our bank account.

Kindest Regard,
Mrs Maytha,
Customer Service
Royal cargo Freights.

[AlanJones]

Subject: International order
Reply to: [email protected]

As well as trying to use a fake shipper, the scammer tries to get high value items actually shipped to

Receiver's name : Alex Nelson
Address : Sutramas condo, Puchong Jaya,47100 , Puchong Selangor Malaysia.
Contact number : 60166953847

Delivered-To: <snipped>
Received: by 10.221.18.133 with SMTP id qg5csp291204vcb;
Wed, 20 Aug 2014 16:02:19 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.112.225.7 as permitted sender) client-ip=10.112.225.7
Authentication-Results: mr.google.com;
spf=pass (google.com: domain of [email protected] designates 10.112.225.7 as permitted sender) [email protected];
dkim=pass [email protected]
X-Received: from mr.google.com ([10.112.225.7])
by 10.112.225.7 with SMTP id rg7mr18725594lbc.52.1408575739209 (num_hops = 1);
Wed, 20 Aug 2014 16:02:19 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.112.225.7 with SMTP id rg7mr42233838lbc.52.1408575738632;
Wed, 20 Aug 2014 16:02:18 -0700 (PDT)
Received: by 10.114.161.52 with HTTP; Wed, 20 Aug 2014 16:02:18 -0700 (PDT)
Date: Wed, 20 Aug 2014 16:02:18 -0700
Message-ID: <CAA-f=1Qf9t4Wj8+oEiX235YZXg-C_UnNBLBZUVqkguy5CMrVWA@mail.gmail.com>
Subject: INQUIRY.
From: Brandon Bill <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/mixed; boundary=001a11348d4e8a7d57050117989e
Bcc: <snipped>

Dear sir,


I am doubtful if you got my mail on the 7th of July 2014. We have interest in purchasing your products and we sincerely hope to establish a long-term business relation with your esteemed company.

Please kindly view the attachment and find our PURCHASE ORDER,SAMPLE CATALOG/DESIGN and please do inform me if you have exactly the same with the right quality material.



Please email me your latest catalog as attachment. Also, inform me about the MOQ, Delivery time, and payment terms.



Your early reply is highly appreciated. Thank You!



Best Regards,

Header Analysis Quick Report
Originating IP: 65.55.90.222
Originating ISP: Microsoft Hosting
City: Redmond
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.70.80.134 with SMTP id r6csp143910pdx;
Tue, 26 Aug 2014 03:58:17 -0700 (PDT)
X-Received: by 10.68.194.66 with SMTP id hu2mr9333736pbc.19.1409050697457;
Tue, 26 Aug 2014 03:58:17 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (si-002-i156.relay.mailchannels.net. [108.178.49.168])
by mx.google.com with ESMTP id bx17si3695905pdb.153.2014.08.26.03.58.15
for <snipped>;
Tue, 26 Aug 2014 03:58:17 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 108.178.49.168 as permitted sender) client-ip=108.178.49.168;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 108.178.49.168 as permitted sender) [email protected]
X-Sender-Id: _forwarded-from|65.55.90.199
Received: from r8-chicago.webserversystems.com (ip-10-220-9-73.us-west-2.compute.internal [10.220.9.73])
by relay.mailchannels.net (Postfix) with ESMTPA id 9253860080
for <snipped>; Tue, 26 Aug 2014 10:58:13 +0000 (UTC)
X-Sender-Id: _forwarded-from|65.55.90.199
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.227.41.147])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.2.12);
Tue, 26 Aug 2014 10:58:14 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|65.55.90.199
X-MailChannels-Auth-Id: wwwh
X-MC-Ingress-Time: 1409050693865
Received: from snt004-omc4s19.hotmail.com ([65.55.90.222]:54661)
by r8-chicago.webserversystems.com with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1XMEQW-000D92-7I
for <snipped>; Tue, 26 Aug 2014 05:56:37 -0500
Received: from SNT151-W18 ([65.55.90.199]) by SNT004-OMC4S19.hotmail.com with Microsoft SMTPSVC(7.5.7601.22701);
Tue, 26 Aug 2014 03:56:35 -0700
X-TMN: [JTWJ+PSGbZmMks89k99L/Bkfzo5Ahi5C]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_a3a33a75-43e3-4b38-b0df-5011ae2cc408_"
From: victor osei <[email protected]>
Subject: SUPPLY
Date: Tue, 26 Aug 2014 10:56:35 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 26 Aug 2014 10:56:35.0504 (UTC) FILETIME=[67665B00:01CFC11C]
X-Spam-Status: No, score=4.8
X-Spam-Score: 48
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Attention: Sir/Madam, Another Order has Been Published, If
You Can Supply This Quantity of Hospital Towels with Good Quality after You
Received Full Payment, Please Reply So That I Will Give You Full Details
Including Shipment Destination And Other Terms. [...]

Content analysis details: (4.8 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(victorosei5[at]hotmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[65.55.90.222 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (victorosei5[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
2.5 MALFORMED_FREEMAIL Bad headers on message from free email service
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: NO
X-MC-Forward: <snipped>
X-AuthUser:

Attention: Sir/Madam,

Another Order has Been Published, If You Can Supply This Quantity of
Hospital Towels with Good Quality after You Received Full Payment,
Please Reply So That I Will Give You Full Details Including Shipment
Destination And Other Terms.


Name: Hospital Towels (Terry Towels)
Colour: White
Fabric: 100% Cotton
Construction: 2/20s x 2/20s x 16s
Size: 40 x 80 cm
Weight: 340 to 375 gram/GSM
Packing: 12 pcs in a poly pack. 144 Pcs per carton, Gross wt of carton
approx 16kg.
Quality Price: USD$2.59 Per Piece Including: C.I.F. & Packaging.
Order Quantity: 750,000. Pcs
Purpose: For Distribution In Selected Hospital

Please Reply On My Email Directly On; [email protected]



You Can Call Me On Phone +233242363277

Thank You, Waiting To Hear From You.

Best Regard,

Mr.Victor Osei
Director
OFFICE: 657 Tudu James Town
MAIL BOX: P.O BOX, 110 Accra.

From [email protected] Fri Aug 15 01: 23:48 2014
Return-Path: <[email protected]>
X-Original-To: me
Delivered-To: me
Received: from mail.netbsd.org (mail.NetBSD.org [IPv6:2001:4f8:3:7::25]) by my box (Postfix) with ESMTPS id B6CD13835 for <me>; Fri, 15 Aug 2014 01:23:42 -0400 (EDT)
Received: by mail.netbsd.org (Postfix, from userid 605) id 4D5DC14B239; Fri, 15 Aug 2014 05:23:38 +0000 (UTC)
Delivered-To: [email protected]
Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id DAB8214B235 for <[email protected]>; Fri, 15 Aug 2014 05:23:35 +0000 (UTC)
X-Virus-Scanned: amavisd-new at NetBSD.org
Authentication-Results: mail.NetBSD.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.NetBSD.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id vFtwAqMP9aGl for <[email protected]>; Fri, 15 Aug 2014 05:23:35 +0000 (UTC)
Received: from mail-la0-x236.google.com (mail-la0-x236.google.com [IPv6:2a00:1450:4010:c03::236]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.netbsd.org (Postfix) with ESMTPS id E2E5514B22F for <[email protected]>; Fri, 15 Aug 2014 05:23:34 +0000 (UTC)
Received: by mail-la0-f54.google.com with SMTP id hz20so1969133lab.13 for <[email protected]>; Thu, 14 Aug 2014 22:23:32 -0700 (PDT)
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:reply-to:date:message-id:subject:from:to:content-type; bh=axOqQWNYB5H0FKgdprbBMd0gf4PLqSbCwcJepgj5+EQ=; b=GIOyB5cLIcVDvpTVrfmqW/BW55aBTq9NoTfauXRayYSm5RXrNGKH+JMCFREL5wW9mW M06idqx41MSvKuuVk0cyBuJq3Mtde9m4/iC3POZaa2jgr73pbzVvg4w1LMfY8vaHKYGB C/2OdVTvunUV90Pm49OnoVtrFlMDwn0WKY0WRF9yaxIR7MeEtcyxOQICN3B7uR7n7R/x dkS59lHEtukw8UhdOmZoq92XcckKFTjOLJIuuQqjgHJ8bHWjjCmV/jLhgBPUNZ9LVF0/ Al9UQPQUuTCEszkl70v21EhR+c05n58qac2/060uXbVQ3bxnpcVkXf6EIebyi0shJ1u7 hWjQ==
MIME-Version: 1.0
X-Received: by 10.112.125.132 with SMTP id mq4mr9539644lbb.68.1408080212622; Thu, 14 Aug 2014 22:23:32 -0700 (PDT)
Received: by 10.114.24.6 with HTTP; Thu, 14 Aug 2014 22:23:32 -0700 (PDT)
Reply-To: [email protected]
Date: Fri, 15 Aug 2014 05:23:32 +0000
Message-ID: <CALAvQh9-g8CMnuAhLg3cNwPT19Lk1BuL--Qf4METjFByy3TJRg@mail.gmail.com>
Subject: Enquiries
From: Trust Light Imports-Agency Inc <[email protected]>
To: [email protected]
Content-Type: text/plain; charset="UTF-8"
Sender: [email protected]
List-ID: mriste.NetBSD.org
Precedence: bulk

We are a Togo based importers of general merchants,we import many
varieties of goods according to orders from our customers and our
market demands.
We operate globally to efficiently furnish our customers with
affordable quality goods.

We are in a look out for a potential and reliable manufacturer or
supplier that is interested in selling their goods here in our region
and we have come accross a reliable source from your region that
recommended your company to us as a potential and reliable supplier.

We hereby ask you to please send us your product catalogue and
pricelist quotations for our consideration so that we can proceed
further to placing our purchasing order.

We wait for your response in anticipation


Contact Person : Silvester Annouah
Posision : General Manager
Company name : Trust Light Imports-Agency Inc.
Company address: 38 Rue De Bekpota
Lome, lome 3935
country : Togo
Tel:(00228)98031435
Email:[email protected]