Loan Scam – nayla@cmbmutualfunds.com
The below loan scam email was sent to an email address that exists only to catch scam emails. It has never been used to register on any site, only to communicate with scammers.
Email headers
To: [REDACTED]
Subject: Re: Personal & Business Relief (COVID-19)
X-PHP-Script: k5send.malaysia.escasount.biz/k5.php for 197.210.10.21
From: "Dhia Nayla [CBMF]" <nayla@malaysia.k5send.mypacmblease.com>
Reply-To: nayla@cmbmutualfunds.com
Email body
Hello,
I hope you are well. In these unprecedented times with the COVID-19, we want to support you as you navigate your personal or business situation and projects.
We have decided to tentatively reach you on [REDACTED] to inform you that we are currently providing debt relief/debit financing or credit facility for your personal or business project. Financing could reach a maximum of $300M USD at a 0.67% rate per annum with minimum documentation.
If you, or anyone you know, do require such financial relief of Credit Facility for Personal or Business do not hesitate to contact us before or by October 13, 2020
Thank you, and stay safe.
UMAR, Dhia Nayla
__________________________
CBMF Brokering
Kinrara Seksyen 1,
47180 Puchong, Malaysia
IP Address Analysis
ipTRACKERonline.com Header Analysis Quick Report
Originating IP: 197.210.10.21
Originating ISP: Mtn Nigeria Communication Limited
City: Abuja
Country of Origin: Nigeria
* For a complete report on this email header
goto ipTRACKERonline
WhoIs details for cmbmutualfunds.com
Creation Date: 2019-08-19T12:59:53Z
Registrar Registration Expiration Date: 2021-08-19T12:59:53Z
Registrant Name: Ramlan Hamzah
Registrant Organization:
Registrant Street: Jalan Sp 1
Registrant City: KL
Registrant State/Province: Wilayah Persekutuan Kuala Lumpur
Registrant Postal Code: 52100
Registrant Country: MY
Registrant Phone: +60.122776245
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: ramlanhamzah@hotmail.com
Why is this a loan scam?
- It was sent from a totally different email address to the one that you are asked to reply to.
- The email address used is on a domain that was only registered a year ago, by someone giving only a partial address.
- The ridiculous upper amount of loan being offered.
- The email originated from Nigeria, which is a known Advance Fee Fraud hotspot.