by Terminator5
Sun Oct 06, 2013 6:34 pm
Recieved from 41.138.188.46
Geo Location Information
Lagos , Nigeria
Begin Scam Email:
On behalf of the Management Board of TONQ GLOBAL LIMITED. We kindly wish to inform you that your company has been chosen to be our choice supplier.
Below is our Datasheet where you will see the specific brand, drawing and description of product details (Purchase Order)
Click below for our parking list and purchase order
VIEW OUR PARKING LIST FOR 2OFT
http://maslechemascarne.com/images/orde ... ation2.zip
CLICK AND LOGIN FOR OUR PURCHASE ORDER
http://relaxcup.com/alawu/capt/producti ... index.html
Ms. Kathy Zhao
Tonq Global Limited
Voice: (02) 4838031
Fax: (02) 48383811
http://www.tonqzishan888.com
End Scam Email
Commentary by T5
First Hyperlink leads to a zip file download . Probable Malware or Virus
Second Hyperlink leads to a Generic Email and Password Phishing Site .
Website in email is non functional.
Registration Details From non functional web site : tonqzishan888.com
Domain: tonqzishan888.com
Nameserver: shades20.rzone.de
Nameserver: docks15.rzone.de
Expires: 24-jul-2014
Status: OK
Registrant Name: Paul Dalton
Registrant Address: 37 Cloister Rd,
Registrant Postal Code: NW2 2NN
Registrant City: London
Registrant Country: GB
Registrant Phone: +44 7937947987
Registrant Email: [email protected]
Admin-C Name: Paul Dalton
Admin-C Address: 37 Cloister Rd,
Admin-C Postal Code: NW2 2NN
Admin-C City: London
Admin-C Country: GB
Admin-C Phone: +44 7937947987
Admin-C Email: [email protected]
Tech-C Name: Hostmaster Strato Rechenzentrum
Tech-C Address: Cronon AG Professional IT-Services
Tech-C Address: Emmy-Noether-Str. 10
Tech-C Postal Code: 76131
Tech-C City: Karlsruhe
Tech-C Country: DE
Tech-C Phone: +49 72166320305
Tech-C Fax: +49 72166320303
Tech-C Email: [email protected]
Zone-C Name: Hostmaster Strato Rechenzentrum
Zone-C Address: Cronon AG Professional IT-Services
Zone-C Address: Emmy-Noether-Str. 10
Zone-C Postal Code: 76131
Zone-C City: Karlsruhe
Zone-C Country: DE
Zone-C Phone: +49 72166320305
Zone-C Fax: +49 72166320303
Zone-C Email: [email protected]
Registration Details From TONGTRADE.ORG
Domain ID:D169869065-LROR
Domain Name:TONGTRADE.ORG
Created On:06-Oct-2013 08:01:53 UTC
Last Updated On:06-Oct-2013 08:01:54 UTC
Expiration Date:06-Oct-2014 08:01:53 UTC
Sponsoring Registrar:Freeparking Domain Registrars, Inc. (R1352-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Status:ADDPERIOD
Registrant ID:DI_30178797
Registrant Name:brandy (446976)
Registrant Organization:brandy
Registrant Street1:15 Foundry Street
Registrant Street2:
Registrant Street3:
Registrant City:South Easton
Registrant State/Province:Massachusetts
Registrant Postal Code:02375
Registrant Country:US
Registrant Phone:+1.3013098643
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:[email protected]
Admin ID:DI_30178798
Admin Name:brandy (446977)
Admin Organization:brandy
Admin Street1:15 Foundry Street
Admin Street2:
Admin Street3:
Admin City:South Easton
Admin State/Province:Massachusetts
Admin Postal Code:02375
Admin Country:US
Admin Phone:+1.3013098643
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:[email protected]
Commentary by T5
Brand New Registration for this domain . 6 October 2013
Header Details:
Delivered-To: xxxxxx
Received: by 10.60.124.131 with SMTP id mi3csp71193oeb;
Sun, 6 Oct 2013 14:05:00 -0700 (PDT)
X-Received: by 10.43.178.135 with SMTP id ow7mr1517326icc.43.1381093500416;
Sun, 06 Oct 2013 14:05:00 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mx7.freeparking.co.uk (mx7.freeparking.co.uk. [72.1.201.197])
by mx.google.com with ESMTPS id t15si9201817igr.21.1969.12.31.16.00.00
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 06 Oct 2013 14:05:00 -0700 (PDT)
Received-SPF: neutral (google.com: 72.1.201.197 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=72.1.201.197;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 72.1.201.197 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from [10.9.1.73] (helo=pop.freeparking.co.uk)
by mx7.freeparking.co.uk with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1VSvSj-000885-72; Sun, 06 Oct 2013 17:02:01 -0400
Received: from ([41.138.188.46]) by webmail.freeparking.co.uk with MailEnable WebMail; Sun, 6 Oct 2013 16:11:17 -0400
To: undisclosed-recipients
From: <[email protected]>
Subject: Re: Order Specification
Date: Sun, 6 Oct 2013 13:11:17 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
X-Mailer: MailEnable WebMail.NET
X-MimeOLE: Produced By MailEnable WebMail.NET V5.54.0.0
X-Read: 0
Content-Type: multipart/mixed;
boundary="--=_Part_006C110C59AD4D1799DE7A9FAF28D490"
X-Priority: 3
X-MSMail-Priority: Medium
Geo Location Information
Lagos , Nigeria
Begin Scam Email:
On behalf of the Management Board of TONQ GLOBAL LIMITED. We kindly wish to inform you that your company has been chosen to be our choice supplier.
Below is our Datasheet where you will see the specific brand, drawing and description of product details (Purchase Order)
Click below for our parking list and purchase order
VIEW OUR PARKING LIST FOR 2OFT
http://maslechemascarne.com/images/orde ... ation2.zip
CLICK AND LOGIN FOR OUR PURCHASE ORDER
http://relaxcup.com/alawu/capt/producti ... index.html
Ms. Kathy Zhao
Tonq Global Limited
Voice: (02) 4838031
Fax: (02) 48383811
http://www.tonqzishan888.com
End Scam Email
Commentary by T5
First Hyperlink leads to a zip file download . Probable Malware or Virus
Second Hyperlink leads to a Generic Email and Password Phishing Site .
Website in email is non functional.
Registration Details From non functional web site : tonqzishan888.com
Domain: tonqzishan888.com
Nameserver: shades20.rzone.de
Nameserver: docks15.rzone.de
Expires: 24-jul-2014
Status: OK
Registrant Name: Paul Dalton
Registrant Address: 37 Cloister Rd,
Registrant Postal Code: NW2 2NN
Registrant City: London
Registrant Country: GB
Registrant Phone: +44 7937947987
Registrant Email: [email protected]
Admin-C Name: Paul Dalton
Admin-C Address: 37 Cloister Rd,
Admin-C Postal Code: NW2 2NN
Admin-C City: London
Admin-C Country: GB
Admin-C Phone: +44 7937947987
Admin-C Email: [email protected]
Tech-C Name: Hostmaster Strato Rechenzentrum
Tech-C Address: Cronon AG Professional IT-Services
Tech-C Address: Emmy-Noether-Str. 10
Tech-C Postal Code: 76131
Tech-C City: Karlsruhe
Tech-C Country: DE
Tech-C Phone: +49 72166320305
Tech-C Fax: +49 72166320303
Tech-C Email: [email protected]
Zone-C Name: Hostmaster Strato Rechenzentrum
Zone-C Address: Cronon AG Professional IT-Services
Zone-C Address: Emmy-Noether-Str. 10
Zone-C Postal Code: 76131
Zone-C City: Karlsruhe
Zone-C Country: DE
Zone-C Phone: +49 72166320305
Zone-C Fax: +49 72166320303
Zone-C Email: [email protected]
Registration Details From TONGTRADE.ORG
Domain ID:D169869065-LROR
Domain Name:TONGTRADE.ORG
Created On:06-Oct-2013 08:01:53 UTC
Last Updated On:06-Oct-2013 08:01:54 UTC
Expiration Date:06-Oct-2014 08:01:53 UTC
Sponsoring Registrar:Freeparking Domain Registrars, Inc. (R1352-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Status:ADDPERIOD
Registrant ID:DI_30178797
Registrant Name:brandy (446976)
Registrant Organization:brandy
Registrant Street1:15 Foundry Street
Registrant Street2:
Registrant Street3:
Registrant City:South Easton
Registrant State/Province:Massachusetts
Registrant Postal Code:02375
Registrant Country:US
Registrant Phone:+1.3013098643
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:[email protected]
Admin ID:DI_30178798
Admin Name:brandy (446977)
Admin Organization:brandy
Admin Street1:15 Foundry Street
Admin Street2:
Admin Street3:
Admin City:South Easton
Admin State/Province:Massachusetts
Admin Postal Code:02375
Admin Country:US
Admin Phone:+1.3013098643
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:[email protected]
Commentary by T5
Brand New Registration for this domain . 6 October 2013
Header Details:
Delivered-To: xxxxxx
Received: by 10.60.124.131 with SMTP id mi3csp71193oeb;
Sun, 6 Oct 2013 14:05:00 -0700 (PDT)
X-Received: by 10.43.178.135 with SMTP id ow7mr1517326icc.43.1381093500416;
Sun, 06 Oct 2013 14:05:00 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mx7.freeparking.co.uk (mx7.freeparking.co.uk. [72.1.201.197])
by mx.google.com with ESMTPS id t15si9201817igr.21.1969.12.31.16.00.00
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 06 Oct 2013 14:05:00 -0700 (PDT)
Received-SPF: neutral (google.com: 72.1.201.197 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=72.1.201.197;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 72.1.201.197 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from [10.9.1.73] (helo=pop.freeparking.co.uk)
by mx7.freeparking.co.uk with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1VSvSj-000885-72; Sun, 06 Oct 2013 17:02:01 -0400
Received: from ([41.138.188.46]) by webmail.freeparking.co.uk with MailEnable WebMail; Sun, 6 Oct 2013 16:11:17 -0400
To: undisclosed-recipients
From: <[email protected]>
Subject: Re: Order Specification
Date: Sun, 6 Oct 2013 13:11:17 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
X-Mailer: MailEnable WebMail.NET
X-MimeOLE: Produced By MailEnable WebMail.NET V5.54.0.0
X-Read: 0
Content-Type: multipart/mixed;
boundary="--=_Part_006C110C59AD4D1799DE7A9FAF28D490"
X-Priority: 3
X-MSMail-Priority: Medium
Daniel 8 :25
