Best Nigerian Joke of the Day: Huangshi Dongbei Electrical Appliance Promotion - Part 2
TOKYO (MacHouse) - As we reported earlier, an organized career spammer group circulated a junk message worldwide to scam Internet users at the same time entertaining them. The subject line of the message is Email-User. Sender’s name and his or her e-mail address are shown as HUANGSHI DONGBEI ELECTRICAL APPLIANCE and info@chinaplc.cc, respectively. Furthermore, the return address is shown as ryanagentclaims@yahoo.com.hk. (See Screenshot 01.)
 Screenshot 01 - Source: MacHouse |
 Screenshot 02 - Source: www.huandon.co.cc |
 Screenshot 03 - Source: www.huandon.co.cc |
What’s so interesting about this spam operation is that they actually set up a website to make it look as if they were serious about giving away a 2008 BMW and a cash prize of $970,000. The URL to the scam website is shown in the spam message. It’s http://www.huandon.co.cc. Accessing the URL, one can still find their scam website. (See Screenshot 02.) It’s a login page. The spam message provides the recipient with a login name (winner2) and a password (plc2nd). If you log in, you will see a webpage with the image of a BMW as shown in Screenshot 03.
 Screenshot 04 - Source: www.huandon.co.cc |
 Screenshot 05 - Source: www.0fees.net |
 Screenshot 06 - Source: XLHost.com |
Let’s quickly find out what’s going on with the scam website. There’s an unviewable image at the top of the login page. So let’s see the image source. It’s http://mailsupport.0fees.net/top1.jpg. (See Screenshot 04.) They seem to deliver images from a junk free web host at 0fees.net. (Screenshot 05 shows) We don’t really know who runs this free web hosting website. One organization is known to use a bunch of dedicated servers rented at a Columbus/Ohio-based web hosting company called XLHost.com to host a number of junk free web hosting websites including the one at 0fees.net. (Screenshot 06 shows the index page of XLHost.com.) The scam website itself is possibly hosted in South Korea. The web server is traced to the IP address of 116.124.128.227.
 Screenshot 07 - Source: MacHouse |
 Screenshot 08 - Source: Goweb Hosting Solutions |
 Screenshot 09 - Source: iWeb |
Anyway, next, let’s find out how the spam message was sent out. Screenshot 07 shows the HTML source code of the junk message they circulated about 22 hours ago. It’s a bit confusing to find out who is who. The immediate sender of the spam message is web1.gowebph.com. (Screenshot 08 shows Goweb’s WebMail.) It appears that somebody used an account assigned to a user affiliated with ideal-access.ph. And who is Goweb? It’s a web hosting company located in Philippines. Goweb is probably a reseller or a subsidiary of some sort of a web hosting company based in Quebec/Canada called iWeb. (Screenshot 09 shows the index page of iWeb’s website.)
 Screenshot 10 - Source: MacHouse |
The header also indicates who actually used the web mail function to circulate the spam message. The IP address of his or her terminal is recorded as 41.204.224.16. According to AfriNIC, this IP address is assigned to an organization in Lagos, Nigeria. The whole spam operation appears to be a Nigerian scam. (See Screenshot 10.)
Click on the button to watch a short documentation video. 
Click on the button to watch more documentation videos.
Related stories:
Best Nigerian Joke of the Day: Huangshi Dongbei Electrical Appliance Promotion - Part 1
********** ********** ********** ********** ********** ********** ********** **********
MacHouse is not funded by tax payers' money. We have limited resources. We also need time to sleep and eat just as others. So we will not act as the International police to contact all victims of website abuse. All you have to do is to subscribe to spam messages and spam posts. If we can, why don't you?
January 19th, 2009 at 2:57 am
good day sie
I have email … I do not know whether it is true or fraud
That is:.
————————-
HUANGSHI DONGBEI ELECTRICAL APPLIANCE CO.,Ltd
ADDRESS : Cixi Fuhai Town Industrial Zone Republic of China
PHONE : +44 703 593 2380
WEBSITE : www.huandon.co.cc
Date : 19th.Jan.2009
:::::::____YEAR 2009 EMAIL ID NOTIFICATION____:::::::
Dear Email-User,
We like to officially welcome you to a brand new year of hopes and
aspirations with the most wonderful news of your lifetime.How was your 2008? was it successful? where there goals that you couldn’t accomplish? well worry no more as this new year has showered you with abundant blessings and resources to power your goals and visions.
We at Huangshi Dongbei global office likes to officially congratulat you for the draw that just held by our company which featured you as
the second place winner of our yearly promotions.
Our company holds promotions each year just to promote our global
publicity and reputations as we plan to exploit more corners of the globe
with our highly valued product line.Please visit our website shown above for details.
Your email address with MICROS ID ( DHT-32405-JCG-876TN-8BP ) was luckily drawn to be this year’s winner of a Brand New
2008 BMW x5 car and a cash prize of $970,000 United States Dollars.This money and gift we believe will enable you make some impact in the society and promote our company globally.
Prizes won : 2008 Bmw X5 and $970,000 cash
Your Micros ID is : DHT-32405-JCG-876TN-8BP
__________________________________________________________
_______FOR FURTHER VERIFICATION PLEASE VISIT________
WEBSITE : www.huandon.co.cc
USERNAME : tp2n
PASSWORD :gbx9p
__________________________________________________________
You should ensure to login with your winning username/password on our
website.This will verify if you as a true/legitimate winner.
Ensure you contact Dr, Charles Best who is our claims official in Europe(United Kingdom) that can understand your English and some european
languages.See his details below.
Name :Dr Charles Best
Email : dr_charlesclaims@yahoo.com.hk
Address : 2 Queens Drive, Swindon, SN3 1AW. United Kingdom
Phone : +4…
When contacting the claims agent you should include the following if you must get a response from him;
_________________________________________________
*** Your Full Name
*** Your Address
*** Your Phone number
*** Your Age(Date of birth)
*** Your Gender(Male or Female)
*** Your present Occupation
*** Your Micros ID
_________________________________________________
We await your response. Be sure to login to our website and read our terms and agreement carefully before proceding with claims.
Special greetings from the entire family of Huangshi Dongbei Worldwide.
Signed,
Mrs, Chen Feng (Sec.announcer)
————————————–
i m waiting for a reply from you
Thank you very much
yousef
[Partially edited by Administrator to modify URLs into ASCII]
January 19th, 2009 at 1:04 pm
It’s pretty much the same spam message that we received the other day. Simply, ignore it.
April 7th, 2010 at 2:58 pm
I’m reading this post from my I-Phone and it looks great! I like your writing style and you make some excellent points about search engine optimization.