by Tim Atem Fri Mar 13, 2015 7:21 am
Another one that could be either PHISHING or an overpayment scam. I'm posting it because of the amount of contact information in the email. The domain royalbscots.com doesn't exist and the free website royalbscotsgroupincturkey-inc.nazuka.net mentioned in the email also appears to be down as well.

ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 202.62.17.106
Originating ISP: Pt Internux
City: Jakarta
Country of Origin: Indonesia
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.202.81.19 with SMTP id f19csp635620oib;
Thu, 12 Mar 2015 22:07:43 -0700 (PDT)
X-Received: by 10.70.92.132 with SMTP id cm4mr52366198pdb.18.1426223262994;
Thu, 12 Mar 2015 22:07:42 -0700 (PDT)
Return-Path: <[email protected]>
Received: from smtp.internux.co.id (smtp.internux.co.id. [116.50.26.99])
by mx.google.com with ESMTP id cb6si1788574pac.11.2015.03.12.22.07.42
for <<snipped>>;
Thu, 12 Mar 2015 22:07:42 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=116.50.26.99;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from DECKYPC (unknown [202.62.17.106])
by smtp.internux.co.id (Postfix) with SMTP id 693BF181C0B
for <<snipped>>; Fri, 13 Mar 2015 12:05:26 +0700 (WIB)
From: "Royalbscots Group Inc Turkey" <[email protected]>
To: <<snipped>>
Date: Fri, 13 Mar 2015 12:07:28 +0700
Subject: New order for quotation
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Message-ID: <DECKYPCd91c2f09a0ed4d388c1a54422ba8bb0b@DECKYPC>



Dear Sir/Madam,

This is Ahmed Nasir from Royalbscots Group Inc Turkey.Please view our secured purchase order link file as below and revert back to us with your invoice and the following information.
Click on the secured link below or copy the link and paste into your browser to display and login to view our secured po : http://royalbscotsgroupincturkey-inc.nazuka.net/
-Your lowest Prices and FOB Port of loading.
-Your estimated delivery time.
-Your Mode of Payment. ( L/C or T/T )
-Meanwhile quality of product must be guaranteed.
I will be waiting for your response as soon as possible with the requested details.Thanks and have a nice moment.

Ahmed Nasir
International Purchasing & Production Manager
Radiadores Cerezo S. A.
Polígon Industrial Gaserans
Carrer Ter6A 17451 St. Feliu de Buixalleu,Turkey
Telephone : 4 972 86 57 79
Fax : 4 972 86 57 80
Skype : ahmednasir.
E-mail : [email protected] / [email protected]
http://royalbscotsgroupincturkey-inc.nazuka.net/
Certified by ISO 9001:2008.
Certified by LLOYD'S REGISTER GROUP as far as the EN 287.1, EN15614, EN 13133 and EN13134.
"This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you.".
Copyright © 2014 Radiadores Cerezo S. A. All Rights Reserved.

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

by Faizan Docherty Wed Mar 25, 2015 12:31 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 202.62.17.108
Originating ISP: Pt Internux
City: Jakarta
Country of Origin: Indonesia
* For a complete report on this email header goto ipTRACKERonline



Delivered-To: <snipped>
Received: by 10.25.32.4 with SMTP id g4csp2284795lfg;
Tue, 24 Mar 2015 10:11:50 -0700 (PDT)
X-Received: by 10.66.249.68 with SMTP id ys4mr9639962pac.82.1427217106849;
Tue, 24 Mar 2015 10:11:46 -0700 (PDT)
Return-Path: <[email protected]>
Received: from smtp.internux.co.id (smtp.internux.co.id. [116.50.26.99])
by mx.google.com with ESMTP id rd3si6471830pbc.77.2015.03.24.10.11.45
for <snipped>;
Tue, 24 Mar 2015 10:11:46 -0700 (PDT)
Received-SPF: neutral (google.com: 116.50.26.99 is neither permitted nor denied by domain of [email protected]) client-ip=116.50.26.99;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 116.50.26.99 is neither permitted nor denied by domain of [email protected]) [email protected]
Received: from DECKYPC (unknown [202.62.17.108])
by smtp.internux.co.id (Postfix) with SMTP id 606A8181E12
for <snipped>; Wed, 25 Mar 2015 00:08:53 +0700 (WIB)
From: "Royalbscots Group Inc Turkey" <[email protected]>
To: <snipped>
Date: Wed, 25 Mar 2015 00:11:05 +0700
Subject: New order for quotation
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Message-ID: <DECKYPC45115de05d7b4dee860f803f88e09ac6@DECKYPC>


Dear Sir/Madam,

This is Ahmed Nasir from Royalbscots Group Inc Turkey.Please view our secured purchase order link file as below and revert back to us with your invoice and the following information.
Click on the secured link below or copy the link and paste into your browser to display and login to view our secured po : http://royalbscotsgroupincturkeytmini.nazuka.net
-Your lowest Prices and FOB Port of loading.
-Your estimated delivery time.
-Your Mode of Payment. ( L/C or T/T )
-Meanwhile quality of product must be guaranteed.
I will be waiting for your response as soon as possible with the requested details.Thanks and have a nice moment.

Ahmed Nasir
International Purchasing & Production Manager
Radiadores Cerezo S. A.
Polígon Industrial Gaserans
Carrer Ter6A 17451 St. Feliu de Buixalleu,Turkey
Telephone : 4 972 86 57 79
Fax : 4 972 86 57 80
Skype : ahmednasir.
E-mail : [email protected] / [email protected]
http://royalbscotsgroupincturkeytmini.nazuka.net
Certified by ISO 9001:2008.
Certified by LLOYD'S REGISTER GROUP as far as the EN 287.1, EN15614, EN 13133 and EN13134.
"This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you.".
Copyright © 2014 Radiadores Cerezo S. A. All Rights Reserved.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 0 guests