Loan Scam – nayla@cmbmutualfunds.com
The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.
Email headers
To: [REDACTED] Subject: Re: Personal & Business Relief (COVID-19) X-PHP-Script: k5send.malaysia.escasount.biz/k5.php for 197.210.10.21 From: "Dhia Nayla [CBMF]" <nayla@malaysia.k5send.mypacmblease.com> Reply-To: nayla@cmbmutualfunds.com
Email body
Hello,
I hope you are well. In these unprecedented times with the COVID-19, we want to support you as you navigate your personal or business situation and projects.
We have decided to tentatively reach you on [REDACTED] to inform you that we are currently providing debt relief/debit financing or credit facility for your personal or business project. Financing could reach a maximum of $300M USD at a 0.67% rate per annum with minimum documentation.
If you, or anyone you know, do require such financial relief of Credit Facility for Personal or Business do not hesitate to contact us before or by October 13, 2020
Thank you, and stay safe.
UMAR, Dhia Nayla
__________________________
CBMF Brokering
Kinrara Seksyen 1,
47180 Puchong, Malaysia
IP Address Analysis
ipTRACKERonline.com Header Analysis Quick Report Originating IP: 197.210.10.21 Originating ISP: Mtn Nigeria Communication Limited City: Abuja Country of Origin: Nigeria * For a complete report on this email header goto ipTRACKERonline
WhoIs details for cmbmutualfunds.com
Creation Date: 2019-08-19T12:59:53Z Registrar Registration Expiration Date: 2021-08-19T12:59:53Z Registrant Name: Ramlan Hamzah Registrant Organization: Registrant Street: Jalan Sp 1 Registrant City: KL Registrant State/Province: Wilayah Persekutuan Kuala Lumpur Registrant Postal Code: 52100 Registrant Country: MY Registrant Phone: +60.122776245 Registrant Phone Ext: Registrant Fax: Registrant Fax Ext: Registrant Email: ramlanhamzah@hotmail.com
Why is this a loan scam?
- It was sent from a totally different email address to the one that you are asked to reply to.
- The email address used is on a domain that was only registered a year ago, by someone giving only a partial address.
- The ridiculous upper amount of loan being offered.
- The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.