mama.business01@gmail.com

[Big Al]

Loan scam:

Good Morning.

We are a specialist loan and project financing group.

Contact us for terms and conditions with interest at @2% PA.

I can be reached on email and Whatsapp: +97155 647 4204.

Regards,

MA
Financial Consultant
Whatsapp: +97155 647 4204

Header:

Received: from 10.217.135.43
Return-Path: <vb9763417@gmail.com>
X-Originating-Ip: [209.85.218.42]
Reply-To: consultantma073@gmail.com
From: MA <vb9763417@gmail.com>
Date: Fri, 16 Feb 2024 03:59:24 -0800
Message-ID: <CADeCv+Ss1cZkZQtnA97OuhTYYUZ_PG3UGRBAmYoDoQcF1VMB1A@mail.gmail.com>
Subject: REF: LOANS.
To: undisclosed-recipients:;

Phone: +971556474204
Number billable as mobile number
Country or destination United Arab Emirates
City or exchange location
Original network provider* du

[firefly]

Same phone number, new email address.

Good Morning.

We are a specialist project financing group.

Contact us for terms and conditions .

I can be reached on email and Whatsapp: +97155 647 4204.

Regards,

MA
Financial Consultant
Whatsapp: +97155 647 4204

Header:

Return-Path: <esaause1@gmail.com>
Reply-To: rupareliagroup.investment@gmail.com
From: "project financing group." <esaause1@gmail.com>
Date: Mon, 4 Mar 2024 20:19:48 +0100
Message-ID: <CA+k=aGfWpJQJ82VEW_AL-KGQBu5Pjj3-vY+Pv1PFL4JS-xt5pA@mail.gmail.com>
Subject:
To: undisclosed-recipients:;

[Big Al]

Same phone number, another Loan Scam:

Good Morning.

We are an investment and loan financing group.

We fund economically viable projects at 2% interest rate for 1-10 years.

Our client, a high networth person, also has an investment fund that can be used to finance your new and existing project.

I can be reached on email and Whatsapp: +97155 647 4204.

Contact us for more details.

Regards,

MA
Financial Consultant
Whatsapp me: +97155 647 4204

Header:

Received: from 10.197.33.205
Return-Path: <kings2020a2@gmail.com>
X-Originating-Ip: [209.85.215.181]
Reply-To: info@intlconsultant.com
From: We are an investment and loan financing group <kings2020a2@gmail.com>
Date: Sat, 9 Mar 2024 06:39:42 +0100
Message-ID: <CAM=fpidr64CVEBCdxNJpgS0Jn7A8ynPNESLwJYb=Wtydd_8p+g@mail.gmail.com>
Subject:
To: undisclosed-recipients:;

Phone: +971556474204
Number billable as mobile number
Country or destination United Arab Emirates
City or exchange location
Original network provider* du

[Big Al]

Thank you for the email message..

We are providing Loan/Investment funds to Companies and Individuals with profitable projects in any area of specialization at a low interest rate of between 2% - 3.5% PA for a duration of 1 to 10 years plus a 12-24 months grace period depending on the project type and region you are located.

We have two options for loans as stated below:

Secured Loan
Loan criteria features are as stated below:

* Placement Opens to: Entrepreneurs and Corporations worldwide.

* Region: Anywhere in the world

* Min Loan Amount approx: 1,000,000.00 USD/EURO

* Max Loan Amount: 10 Billion USD/EURO

* Terms: 1 to 10 year's Renewable tenure with option of early repayment

* Repayment: Yearly

* Grace period: 1 year

* Interest: 2% per year (Fixed)

The Loan is offered with a low interest rate and will be secured by a Collateral which the Borrower shall pledge to stand as security against risk of loss by the Lender.

Unsecured Loan
Loan criteria features are as stated below:

* Placement Opens to: Entrepreneurs, Corporations and Lenders

* Region: Anywhere in the world

* Min Loan Amount approx: 50,00.00 USD/EURO

* Max Loan Amount: 2 Billion USD/EURO

* Terms: 1 to 5 year's Renewable tenure with option of early repayment

* Repayment: Yearly

* Grace period: 1 year

* Interest: 2.5% per year (Fixed)

Lender in collaboration with Banker shall appoint representatives who will be inspecting the Business/Project funded in time bases every six Calendar (6 Months) twice annually pending when the Borrower finished the repayment Plan of the Loan.

To proceed on either way, we need the attached application form completed and the documents requested below provided.

1. Your full name and address
2. Company name and address/ company registration documents
3. Contact Telephone Number, mobile and Fax
4. Current work position
5. International passport / driver license
6. Project Summary
7. Formal loan request letter on your company letter headed paper

Above is basically the available loan options.

Sincerely
Dr. Mohammed AL-Kuwari
Gulf Pacific Investment and Loans Limited
Website:https:/ /www.gulfpacific-group.com
Email: Office email: info@gulfbusinesserviceslimited.com

Header:

Delivered-To:
Received: by 2002:a0c:e151:0:b0:690:6845:f90b with SMTP id c17csp324223qvl;
Sat, 9 Mar 2024 09:19:02 -0800 (PST)
X-Google-Smtp-Source: AGHT+IEs2I/j1pBo8CftVGHaIZYYzwWMVL1/Tgdbf/aoeGAF2LzJnhV4qIzckqK2eDqzgWObWE7n
X-Received: by 2002:a05:6a21:3405:b0:1a2:f4fd:b1cb with SMTP id yn5-20020a056a21340500b001a2f4fdb1cbmr1038078pzb.55.1710004742334;
Sat, 09 Mar 2024 09:19:02 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1710004742; cv=none;
d=google.com; s=arc-20160816;
b=Q4wmbn7BhYJXHmGnjHkKVGjCtFNnWN4QNCqH6czHqQ21HT9HxNBI/7xTLuwgriOzZM
jLfOot7tOzqbPOR7+la0avbdN65WalxJ/cmhAvbJLaWVY7+yV2vJu2KuAJ+EX5vieToR
YZElCJM66AwIHonahNrpNc0qGAHIQjH6qqesCix/lfTI8lvTlwZEHoQf+vyTz8TVTsHj
DI/9hywIQWqvdmu/oCFDaQ1oR2FadvUvGWI5TTpgo/jrt/LUwlW8w3AcL9hLIamVLuEl
OGAx+TeV7sz1Ijqf7Bz2LfaOEZeIO1J03ye0+H/nk4bNzwgQ7YXrNez6mCJDCgK9QSqN
GJrw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=organization:message-id:user-agent:references:in-reply-to:reply-to
:subject:to:from:date:mime-version:dkim-signature;
bh=DWL+gGotIX493enxUEghjBMGn+eTx4r3H1H3Be2l5Dk=;
fh=1sHkQJ/xbgGUbbhsRYBis8OU8h3NdbF+/Og171TwfaY=;
b=o1LB8fF9QpDo0fTb7CKj1RltKNAtq9cuUrxIIXzB/h0gBEi6gg/MH4rffM4EaEUacr
UeEI53NZnW5wLIgMx4Tw/iTc9KA4BP/25WfmcvGdjWjhj5KkFE9tV3hB8nUhsbWDgIHT
ELn309IBuI4Df2u3LxxdXgfJqLA0oYv7F5+RJnVPseq4gsgLzlbdKcXlOUb/fmVD1Tzy
ra8IAUrRZ1ktAqG1dA+kExXQ5JQQ6Zx20gxxHe2j4GyOMfxch5aqDf96m4CoL3ssAfou
F8tkPQ8K1fwu/bD5EDsD9R9QdrkYxg4hHOln6m3pJRDcxs9Mp5K9+OwZc13jj1Hmujqq
9EiQ==;
dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@intlconsultant.com header.s=20240305 header.b=TYLM5bAk;
spf=pass (google.com: domain of info@intlconsultant.com designates 208.91.199.209 as permitted sender) smtp.mailfrom=info@intlconsultant.com
Return-Path: <info@intlconsultant.com>
Received: from us2-ob2-3.mailhostbox.com (us2-ob2-3.mailhostbox.com. [208.91.199.209])
by mx.google.com with ESMTPS id z23-20020a17090acb1700b0029bb0c14a42si3475837pjt.15.2024.03.09.09.19.00
for < >
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Sat, 09 Mar 2024 09:19:00 -0800 (PST)
Received-SPF: pass (google.com: domain of info@intlconsultant.com designates 208.91.199.209 as permitted sender) client-ip=208.91.199.209;
Authentication-Results: mx.google.com;
dkim=pass header.i=@intlconsultant.com header.s=20240305 header.b=TYLM5bAk;
spf=pass (google.com: domain of info@intlconsultant.com designates 208.91.199.209 as permitted sender) smtp.mailfrom=info@intlconsultant.com
Received: from localhost (unknown [10.25.144.104]) (Authenticated sender: info@intlconsultant.com) by us2.outbound.mailhostbox.com (Postfix) with ESMTPA id A4C515000F2 for < >; Sat,
9 Mar 2024 17:18:59 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intlconsultant.com; s=20240305; t=1710004739; bh=DWL+gGotIX493enxUEghjBMGn+eTx4r3H1H3Be2l5Dk=; h=Date:From:To:Subject:Reply-To:In-Reply-To:References; b=TYLM5bAkRmcXxPJsV9RNhuNdhn135kxb6mw4bO0zTQlchbtN2Oc3DAJTes6cijJkA
bEapwJwawkYSxGiUHzYhFKc07eGdb1A+uH6p4yfiqLhptiupNKD0JuzV/yl41iL2cW
iquAgN7VdO5RG8gp9V5kVP/w1PT0AqLgBiV2+FkE=
MIME-Version: 1.0
Date: Sat, 09 Mar 2024 09:18:59 -0800
From: INTERNATIONAL LOAN CONSULTANT <info@intlconsultant.com>
To:
Subject: Re:
Reply-To: info@intlconsultant.com
In-Reply-To: <CABd=3yi+4AQmLo0Xmfv20LheaSBhmcZHaQfs8g4EisfMAxUmjQ@mail.gmail.com>
References: <CABd=3yi+4AQmLo0Xmfv20LheaSBhmcZHaQfs8g4EisfMAxUmjQ@mail.gmail.com>
User-Agent: Roundcube Webmail/1.4.8
Message-ID: <8d80d97bbfe66d02cd64da58ad4fe4bf@intlconsultant.com>
X-Sender: info@intlconsultant.com
Organization: INTERNATIONAL LOAN CONSULTANT
Content-Type: multipart/alternative; boundary="=_051d6f6485983075ff0532c27c5970ca"
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.4 cv=fLxaYbWe c=1 sm=1 tr=0 ts=65ec9a03 a=hLd06i1nfbUmwS9liN7fzg==:117 a=iGTFmJ5uAAAA:8 a=OYPtapK_AAAA:8 a=_6GpL_ENAAAA:8 a=DwgUIJNb0kOOJUZ8aeAA:9 a=CjuIK1q_8ugA:10 a=CnRvnd-sZBIA:10 a=4d2D4LtiAAAA:8 a=ijsYw5EQXfMsyv-ZKLAA:9 a=8eRmlMDkSH9jqvKm:21 a=_W_S_7VecoQA:10 a=QEXdDO2ut3YA:10 a=QLmc3-YpuyB5hlBS0yZ2:22 a=RzN3KXPTmEEgNSwEw-O4:22 a=hJnrvW8ITIrk0Oi8sSDQ:22

--=_051d6f6485983075ff0532c27c5970ca
Content-Transfer-Encoding: 7bit

[Big Al]

Administrative and processing fee is USD2,850.00 only.

Header:

Delivered-To:
Received: by 2002:a0c:e151:0:b0:690:6845:f90b with SMTP id c17csp1116678qvl;
Mon, 11 Mar 2024 05:42:58 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IFw/KEn9Nqj/dtgujAtN4+UUf+YhHW96ZeNCGy0fe3RGFPXS1BrFGp0ETKf+s+baPW5qpUU
X-Received: by 2002:a05:6a20:d906:b0:1a2:a596:4dce with SMTP id jd6-20020a056a20d90600b001a2a5964dcemr8914102pzb.58.1710160977988;
Mon, 11 Mar 2024 05:42:57 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1710160977; cv=none;
d=google.com; s=arc-20160816;
b=F/zKDrq1dY0MlJmY2Rey5Gj/cDUybFGYQ+TGIy+MB2tcZHbBC9YAqprinGgk2XB/47
jSElvLjSmTLDXIoFoRKtSHN69LsvXcIQG0C5RyuseAOwDVcAl95eBjOgb6oI+ba7Qwhj
IrCQ3Yj4Dl6k1L+jwjcKjZ1i4U1c/v5leQGixGn+SfhlxP59LGozwphAciirnmOon5QW
vxW641bZodRdh/2R0/hJDleVD6+ZOpluuabjZZcBfcbKQhRFPLlLyVjrajfpSm857ZYe
j6RSTGVhyrE3+dhhOWEiTRne8VQoVWZrFYL98lM18E4fIKKhYAXSRnGB2Gn9jbLdXPip
1OCg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=message-id:user-agent:references:in-reply-to:subject:to:from:date
:mime-version:dkim-signature;
bh=xg+jrRYNwGa8T1q5SKwF1MqabM6MBbymmJ3vfn3sx8A=;
fh=1sHkQJ/xbgGUbbhsRYBis8OU8h3NdbF+/Og171TwfaY=;
b=NA60BP9rNIkPvsRXisv72SEFoR6lDAHNuhVNHH6XFL9IqMAjW8bDtRzcm1h2n4de53
fNiqoath/CkNRz3knXixVk6rrmg4ABKZShbyCwQjWDVK6NLiKrR2N2dspGH0LeCFPMk3
Lory9S6NY2QQDAlF3T6M8g3V4Z65T+G5BQp7HWnPnLDmyyd1uckuOyYWHGOJrMuEYLh+
8PxLk9Qz2fPqgPzvuzBBcQ4F3bvdPYKCkl81/1FwxGtaph7J7IodVAo3kUu2IcOS7GL9
AVP45cKMqY6bXlInB4Civ7sNtfzSzB+AXO057mEqbEOV9+bVXWsVCJgRYtwOTpGYNugp
M8nA==;
dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@gulfbusinesserviceslimited.com header.s=20230525 header.b=Q7Hih21e;
spf=pass (google.com: domain of info@gulfbusinesserviceslimited.com designates 162.210.70.57 as permitted sender) smtp.mailfrom=info@gulfbusinesserviceslimited.com
Return-Path: <info@gulfbusinesserviceslimited.com>
Received: from us2-ob1-4.mailhostbox.com (us2-ob1-4.mailhostbox.com. [162.210.70.57])
by mx.google.com with ESMTPS id lm14-20020a056a003c8e00b006e5a36610d6si4874167pfb.153.2024.03.11.05.42.56
for < >
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 11 Mar 2024 05:42:57 -0700 (PDT)
Received-SPF: pass (google.com: domain of info@gulfbusinesserviceslimited.com designates 162.210.70.57 as permitted sender) client-ip=162.210.70.57;
Authentication-Results: mx.google.com;
dkim=pass header.i=@gulfbusinesserviceslimited.com header.s=20230525 header.b=Q7Hih21e;
spf=pass (google.com: domain of info@gulfbusinesserviceslimited.com designates 162.210.70.57 as permitted sender) smtp.mailfrom=info@gulfbusinesserviceslimited.com
Received: from localhost (unknown [10.25.144.114]) (Authenticated sender: info@gulfbusinesserviceslimited.com) by us2.outbound.mailhostbox.com (Postfix) with ESMTPA id 19704640098 for < >; Mon, 11 Mar 2024 12:42:56 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gulfbusinesserviceslimited.com; s=20230525; t=1710160976; bh=xg+jrRYNwGa8T1q5SKwF1MqabM6MBbymmJ3vfn3sx8A=; h=Date:From:To:Subject:In-Reply-To:References; b=Q7Hih21etSOAYbssTbywcKSdosM3uJCuNZ0q83heknn+44xABcB8L8BLc5iodXD3a
H1IGSdQDWWNzQJIIrYNHmjImDyXRbkKPzv4TmzUFlemCpW+bqX5Czk8ro+0YFdD64z
v21m/RNNbLFvxBz4OlfvDwk2jIGGvQO1UqWTVTjM=
MIME-Version: 1.0
Date: Mon, 11 Mar 2024 05:42:55 -0700
From: info@gulfbusinesserviceslimited.com
To:
Subject: Re:
In-Reply-To: <CABd=3yhVuwWku9yeV_AXm26uHt_8xqeqMvKqfH3FtNwGtE17UQ@mail.gmail.com>
References: <CABd=3yi+4AQmLo0Xmfv20LheaSBhmcZHaQfs8g4EisfMAxUmjQ@mail.gmail.com> <8d80d97bbfe66d02cd64da58ad4fe4bf@intlconsultant.com> <CABd=3yhVuwWku9yeV_AXm26uHt_8xqeqMvKqfH3FtNwGtE17UQ@mail.gmail.com>
User-Agent: Roundcube Webmail/1.4.8
Message-ID: <fff3a88e83490197cb2fcb1c0f1e6a8f@gulfbusinesserviceslimited.com>
X-Sender: info@gulfbusinesserviceslimited.com
Content-Type: multipart/alternative; boundary="=_ae04daba4565a3d62ae87dfaebc68477"
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.4 cv=GKRrrsBK c=1 sm=1 tr=0 ts=65eefc50 a=9qmouGwOkM1RY4ZlNWS6/w==:117 a=_6GpL_ENAAAA:8 a=X7SfVIChAAAA:8 a=iGTFmJ5uAAAA:8 a=OYPtapK_AAAA:8 a=HUOEar8CYJRkTf8RzmwA:9 a=3ZKOabzyN94A:10 a=QEXdDO2ut3YA:10 a=CnRvnd-sZBIA:10 a=4d2D4LtiAAAA:8 a=WRWN_B6E3EvzrKSWItUA:9 a=QmPjEcNomymKTi2_:21 a=_W_S_7VecoQA:10 a=lqcHg5cX4UMA:10 a=dY-ZnE-r2uDIIsVCzPI3:22 a=QLmc3-YpuyB5hlBS0yZ2:22 a=RzN3KXPTmEEgNSwEw-O4:22 a=hJnrvW8ITIrk0Oi8sSDQ:22 a=g0ZwaWlWt52AHwoTBZRF:22

--=_ae04daba4565a3d62ae87dfaebc68477
Content-Transfer-Encoding: 8bit

[Big Al]

Make payment to the bank details below and also fill out the attached application form.

Bank Name: Royal Bank of Scotland
Bank Address: 88 Main st Rutherglen Glasgow G73 2JA
Swift Code: RBOSGB2L
Sort Code: 83 21 27
Account Number: 1937XXXX
Account Name: A. P.
Iban: GB92RBOS83212719XXXXXX
Beneficiary Address: GLASGOW G31 3RP UNITED KINGDOM
Reason for transfer: LOGISTIC SERVICES

Sincerely
Dr. Mohammed

[firefly]

Intl Consultant is a bogus company, using the domain name intlconsultant.com only for the email address.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=166061

From the domain name registration:

Domain Name: INTLCONSULTANT.COM
Updated Date: 2024-03-05
Creation Date: 2024-03-05
Registrar Registration Expiration Date: 2025-03-05
Registrar: BigRock Solutions Ltd.

Registry Registrant ID: Not Available From Registry
Registrant Name: Pharell wise
Registrant Organization:
Registrant Street: Churchill drive
Registrant City: NYC
Registrant State/Province: New York
Registrant Postal Code: 10115
Registrant Country: US
Registrant Phone: +1.2125894236
Registrant Email: pharellwise@yahoo.com

[firefly]

The faker maker using the email address pharellwise@yahoo.com operates few other fraudulent domain names:

bnkofhw.com - spoofing Bank of Hawaii
charlesschwabankcoinc.com - spoofing Charles Schwab Bank (email only domain)
europeanfinancialconsortium.com - pretending to be European Financial Consortium
fincenusnetwork.com - spoofing the Financial Crimes Enforcement Network US (email only domain).

[firefly]

Gulf Pacific Investment and Loans Limited is yet another fraudulent domain name used only for the email address.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=166153

From the domain name registration:

Domain Name: GULFBUSINESSERVICESLIMITED.COM
Updated Date: 2023-07-25
Creation Date: 2023-05-25
Registrar Registration Expiration Date: 2024-05-25
Registrar: BigRock Solutions Ltd.

Registry Registrant ID: Not Available From Registry
Registrant Name: ramsey knoor
Registrant Street: Lily field estate
Registrant City: Ajah
Registrant State/Province: Lagos
Registrant Postal Code: 102102
Registrant Country: NG
Registrant Phone: +234.08063910308
Registrant Email: ramseyknoor09@gmail.com

The faker maker using the email address ramseyknoor09@gmail.com and his other fake sites were previously reported on our forum here: viewtopic.php?f=6&t=109606

[Big Al]

What is wrong with the account ?

That account is very ok.