#187305 by Terminator5 Tue Jan 14, 2014 7:12 pm
HEITZ & CIA EPS & XPS CO.LTD [email protected]

Am Elena from VP TRADE CO.LTD we want to buy your product therefore we need you latest catlog,preferred price list, payment terms and shipping period so that we can place our order.please we need your earliest response .
best regards

Elena(purchase manager)
541 Jefferson Avenue, Suite 204,
Redwood City, CA 94063, USA
Tel: +1 (651) 249-6682

Delivered-To: xxxxxx
Received: by with SMTP id y2csp210132oee;
Tue, 14 Jan 2014 04:49:38 -0800 (PST)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates as permitted sender) client-ip=
Authentication-Results: mr.google.com;
spf=pass (google.com: domain of [email protected] designates as permitted sender) smtp.mail=[email protected];
dkim=pass header.i=@gmail.com
X-Received: from mr.google.com ([])
by with SMTP id se8mr22686657wic.7.1389703777682 (num_hops = 1);
Tue, 14 Jan 2014 04:49:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
MIME-Version: 1.0
X-Received: by with SMTP id se8mr20048762wic.7.1389703777125;
Tue, 14 Jan 2014 04:49:37 -0800 (PST)
Received: by with HTTP; Tue, 14 Jan 2014 04:49:37 -0800 (PST)
Date: Tue, 14 Jan 2014 13:49:37 +0100
Message-ID: <[email protected]m>
Subject: NEW ORDER
From: "HEITZ & CIA EPS & XPS CO.LTD" <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=001a1134db54fa91dd04efed9f59
Bcc: xxxxxx

Content-Type: text/plain; charset=ISO-8859-1

"Benigno numine . Di pia facta vident "

Fake Site Investigative Reporting


#195326 by AlanJones Wed Mar 26, 2014 9:24 am
It is difficult to say, without seeing further messages, but it is likely one of 3 things.

  • Advanced Fee Fraud - They will tell you they represent a Government or Agency and want fees to be paid for you to be awarded a contract
  • Card Fraud - They will try and pay by credit card, but ask to use their own shipper - the cards will be stolen and you will lose the money you send to the shipper when the card payments are reversed.
  • Phishing - they will reply asking you to click a link and sign in using your email and password.

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
#195330 by blk03001 Wed Mar 26, 2014 10:54 am
Thank you for the quick reply. The email references Credit Card payment and has a link to a PO asking for you to log-in. My guess is probably the second two you mention fit.

Thanks again for all the help!

Who is online

Users browsing this forum: No registered users and 3 guests