Loan Scam – apply@vendorcashloan.com

The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.

Email headers

From: Vendor Cash Loan <k.yunchyts@andersenlab.com>
Reply-To: apply@vendorcashloan.com
Subject: Vendor Cash Loan
X-Originating-IP: [185.41.251.133]

Email body

Dear Valued Customer,
How are you doing today? hope this email message finds you well. Please confirm if this is the best valid email address to reach you.

Rose James (Mrs.)
Senior Loan Manager
NCR Registration No: NCRCP10758
Legal Registration No: 2018/029073/07
VENDOR CASH LOAN
45 St Georges Street;
Cape Town 8001
LEGAL STATUS: Limited Company
OWNERSHIP: Vendor Solution – South Africa
Switchboard Tel: +27 21 813 9626
Email: apply@vendorcashloan.com
www.vendorcashloan.com

IP Address Analysis

ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 185.41.251.133
Originating ISP: Gigatrans Ltd
City: Kiev
Country of Origin: Ukraine
* For a complete report on this email header 
  goto ipTRACKERonline

WhoIs details for vendorcashloan.com

Creation Date: 2020-10-02T11:02:00.00Z
Registrar Registration Expiration Date: 2021-10-02T11:02:00.00Z

Registrant State/Province: Cape Town
Registrant Country: ZA

Why is this a loan scam?

• It was sent from a totally different email address to the one that you are asked to reply to.
• The email address used is on a domain that was only registered 2 months ago.
• The email was mass-mailed to many recipients using BCC.
• The “company” are in South Africa, which is a known Advance Fee Fraud hotspot.
• Although the sender is in South Africa, the email originated from Ukraine