credit@creditsuise.com

[firefly]

Recovery scam.

Dear Beneficiary

We received a deposit of sum of €45Million payment to your name and have to update your information's through this email contact for immediate payment.

All arrangements have been completed for the immediate release of your funds through the electronic banking system where you will open an E-banking account ,lodge in your funds and you can make transfers electronically to any local account of your choice.

We will open an investment bank account that offers very discreet and elusive monetary transactions.it has unlimited holding capacity to receive any amount of funds . We will get the account activated and ready for use.

As part of our requirement to open an online account in your name and give you username and password to access your funds and make transfer into your account.

We shall complete your account opening and shall send you secured checkbook and a debit card,login details which will enable you to access your account /funds.

Having an account with us is a 24hrs banking at your fingertips
Your Prompt response is highly required

Respectively Yours

Mrs.Christine Graeff.
Chief Financial Officer Credit Suisse AG

Header:

Return-Path: <credit@creditsuise.com>
Received: from us2-ob1-2.mailhostbox.com (us2-ob1-2.mailhostbox.com. [162.210.70.53])
Received-SPF: pass (google.com: domain of credit@creditsuise.com designates 162.210.70.53 as permitted sender) client-ip=162.210.70.53;
Date: Mon, 08 Jan 2024 00:57:04 -0800
From: Credit Suisse <credit@creditsuise.com>
To: undisclosed-recipients:;
Subject: We received a deposit of sum of €45Million payment to your name
User-Agent: Roundcube Webmail/1.4.8
Message-ID: <8a2745f07d6e229ba0959b68bad3aa30@creditsuise.com>

Originating IP: 162.210.70.53
Originating ISP: Public-domain-registry
Country of Origin: United States

[firefly]

The fake site used in scam is a spoof of Credit Suisse.

The fraudulent domain name shows no content and is used only for the email address.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=165275

From the domain name registration:

Domain Name: CREDITSUISE.COM
Updated Date: 2023-12-01
Creation Date: 2023-12-01
Registrar Registration Expiration Date: 2024-12-01
Registrar: BigRock Solutions Ltd.

Registrant Name: James philips
Registrant Street: No 235 peter imemesi satellite
Registrant City: Satellate
Registrant State/Province: Lagos
Registrant Postal Code: 102262
Registrant Country: NG
Registrant Phone: +234.8055074136
Registrant Email: j.philips13@yahoo.com

[Big Al]

Dear

The Organization for Economic Co-operation and Development has mandated this bank to pay you owe inherited/contract payment valued $49.5M ,Check our website :http:/ /WWW.CREDIT-SUISSE.COM

please we request you to provide the following.
1.Identity Document (International Passport or Drivers license or National ID Card)
2.Bank account details.
3.Contact Mobile Phone, Make sure your phone has whatsapp installed.
4. €100 cot cost required for remittance
We're expecting to hear from you as soon as possible.

Be assured of my esteemed Regards.
Mr.Simon Grimwood
Chief Financial Officer Credit Suisse AG.

©2024 Credit Suisse AG Zurich takas ve Santral bağlantı hizmetleri.This e-mail and the attachments transmitted with it are confidential and intended solely for the use of the addressee. If you have received this e-mail in error, kindly notify the sender. If you are not the addressee, you should not disseminate, distribute or copy this e-mail.Any views or opinions expressed in this e-mail or attachments are solely those of the sender and may not necessarily represent the views and opinions of Switzerland Finansal Takas ve Santral bağlantı hizmetler

Header:

Delivered-To:
Received: by 2002:aa6:d9a2:0:b0:28c:9da2:6ab5 with SMTP id bt2csp1809378lkb;
Mon, 15 Apr 2024 00:19:13 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IFUSiRl1RTTmpCmqb31pn42pvmGRw77kb1A8JYNorIyFXg5fJvb6k0EGwNkmtp4yMxmNxtX
X-Received: by 2002:a05:6e02:218f:b0:36a:3c40:3e34 with SMTP id j15-20020a056e02218f00b0036a3c403e34mr8113595ila.1.1713165553431;
Mon, 15 Apr 2024 00:19:13 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1713165553; cv=none;
d=google.com; s=arc-20160816;
b=E3wp0MfLOrt1ZNdCmXGlZIy4/E5b8yPIgg1q7tlul9/L6OnGsv4jw70mZ+I+mBgZZm
0iVRo/IkxmNI83bdgguxEWDFJjXKo611rY/eoEQ+87HEE2tdHpNzGOUhVVIYMWQC6THj
vrud2Dw2yc1xdsLLSnjoJpqffr6NwxiTJocCxRPRNk66AvgAqrQxLiCwiyR462AYq9Ju
4Pdj+gwxJttu4+XPGymVpyH73Z9ix5YIB0Gfr+GEhFvr9XRkNmNVPrGUMPRzlFOnXM8q
34BDrEJVsNI8MUstDxBVY1LtYBqZm6NbmPOl5LWmNd420Nm25yjjUU6aLi/eaq3TsHqi
U9Ow==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=message-id:user-agent:subject:to:from:date:mime-version
:dkim-signature;
bh=aef6pqmjxGe2r90owJ8ulxEs5J38tiPS4qzhCuUmi3U=;
fh=ITyUZKrHxVN5Gb1mGzIjIHzh6indUD8bfUjXo+kM7u4=;
b=Q8C5LfdN8Xim04c0exOS0b/CIsCO74VOytiVgUO1EliYP5bYBdzm1vYp+A6va/+lae
18QFvxv9Pg1cnrDtqNmjgaBO71d/ZJIEGjiDZQW7dv0P2a9nrdTyDwE8AVqW71GaxjBD
9GthFeiXEaMku0MAk9GHQwQQiLyoM1Q4ZMVYj7ig7reG9hqH/CJaL7jT/IWCKCiEQb5V
9X5QJpTolODfz/U+HJYoC18udfwrLZwSF1FFrkY16pufs+xPI3lH5p8sgpRLYEkfoWBu
DMayVlY7s26YgySktx1b1lmj+w5AiJG+egAdMzgkPneh40r/dQrQAim8LVCImk4TgdTe
gVuA==;
dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@creditsuise.com header.s=20231201 header.b=QLcQpDV0;
spf=pass (google.com: domain of credit@creditsuise.com designates 208.91.199.219 as permitted sender) smtp.mailfrom=credit@creditsuise.com
Return-Path: <credit@creditsuise.com>
Received: from us2-ob3-6.mailhostbox.com (us2-ob3-6.mailhostbox.com. [208.91.199.219])
by mx.google.com with ESMTPS id y18-20020a92c992000000b0036a0ccea9b1si3139627iln.72.2024.04.15.00.19.13
for < >
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 15 Apr 2024 00:19:13 -0700 (PDT)
Received-SPF: pass (google.com: domain of credit@creditsuise.com designates 208.91.199.219 as permitted sender) client-ip=208.91.199.219;
Authentication-Results: mx.google.com;
dkim=pass header.i=@creditsuise.com header.s=20231201 header.b=QLcQpDV0;
spf=pass (google.com: domain of credit@creditsuise.com designates 208.91.199.219 as permitted sender) smtp.mailfrom=credit@creditsuise.com
Received: from localhost (unknown [10.25.144.114]) (Authenticated sender: credit@creditsuise.com) by us2.outbound.mailhostbox.com (Postfix) with ESMTPA id 958A6A80510 for < >; Mon, 15 Apr 2024 07:19:12 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=creditsuise.com; s=20231201; t=1713165552; bh=aef6pqmjxGe2r90owJ8ulxEs5J38tiPS4qzhCuUmi3U=; h=Date:From:To:Subject; b=QLcQpDV0KKmIXRa0qc3JQxe7Z4KiP/yb/lHM461s7EjAhau22rTpY2PIsX0n3xlxu
WNl/Q8waIrbGo5I43WQumPoFcLqs1vr/nu22Z7pTXStuTTBnRNPvk3GEUxgOhC3TVG
wOjIU63lmX+DRTjSL4WJESSdqf4CLuCDnPxKNqws=
MIME-Version: 1.0
Date: Mon, 15 Apr 2024 00:19:12 -0700
From: credit-suisse <credit@creditsuise.com>
To:
Subject: The Organization for Economic Co-operation and Development has mandated this bank to pay you owe inherited/contract payment valued $49.5M
User-Agent: Roundcube Webmail/1.4.8
Message-ID: <91c7f050ef26d426c5a01110ddb77fcd@creditsuise.com>
X-Sender: credit@creditsuise.com
Content-Type: multipart/alternative; boundary="=_bd0736f0ac320f2e4050ec2bea759b12"
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.4 cv=cYcZrWDM c=1 sm=1 tr=0 ts=661cd4f0 a=9qmouGwOkM1RY4ZlNWS6/w==:117 a=VxRwG52evnUhIMOR:21 a=btHVt4BeAAAA:8 a=DcFAN1QZaXZEhO2cE_sA:9 a=3ZKOabzyN94A:10 a=QEXdDO2ut3YA:10 a=9-KwQFFf1NrRmsYiPEgA:9 a=dYYjwFb50ARcWHsP:21 a=_W_S_7VecoQA:10 a=KL_xTUVpW3ZzPdMG0HOT:22

--=_bd0736f0ac320f2e4050ec2bea759b12
Content-Transfer-Encoding: 8bit

The fake website now has content.

[Big Al]

Dear

Sir,

We confirm receipt of your banking details , Please provide your Identification as attached and a €100 COT cost require ,payable by apple card or BITCOIN WALLET as follow: bc1qjn04gut0akc9h7xgjs4p0vcq39paj8a3s4lz5j

We're expecting to receive the remaining details as soon as possible.

CONGRATULATION !!!!!!!!!!
Kind regard

Mrs. Christine Graeff
Managing Director of Credit Suisse.

©2024 Credit Suisse AG Zurich takas ve Santral bağlantı hizmetleri.This e-mail and the attachments transmitted with it are confidential and intended solely for the use of the addressee. If you have received this e-mail in error, kindly notify the sender. If you are not the addressee, you should not disseminate, distribute or copy this e-mail.Any views or opinions expressed in this e-mail or attachments are solely those of the sender and may not necessarily represent the views and opinions of Switzerland Finansal Takas ve Santral bağlantı hizmetler.

[Big Al]

Dear

We will only beable to accept fee via Bitcoin and Apple Card .

Your cooperation is highly required and We're expecting to receive €100 cost asap.
Be assured of my esteemed Regards.
Mr.Simon Grimwood
Chief Financial Officer Credit Suisse AG.

[Big Al]

Dear

The Organization for Economic Co-operation and Development has mandated this bank to pay you owe inherited/contract payment valued $49.5M ,Please Check our website :http:/ /WWW.CREDIT-SUISSE.COM

please we request you to provide the following.
1.Identity Document (International Passport or Drivers license or National ID Card)
2.Bank account details.
3.Contact Mobile Phone, Make sure your phone has whatsapp installed.
4. €100 cot cost required for remittance
We're expecting to hear from you as soon as possible.

Be assured of my esteemed Regards.
Mr.Simon Grimwood
Chief Financial Officer Credit Suisse AG.

©2024 Credit Suisse AG Zurich takas ve Santral bağlantı hizmetleri.This e-mail and the attachments transmitted with it are confidential and intended solely for the use of the addressee. If you have received this e-mail in error, kindly notify the sender. If you are not the addressee, you should not disseminate, distribute or copy this e-mail.Any views or opinions expressed in this e-mail or attachments are solely those of the sender and may not necessarily represent the views and opinions of Switzerland Finansal Takas ve Santral bağlantı hizmetler

[Big Al]

Dear Sir

Your Banking details has been received accordingly for your payment $49.5M as scheduled today dated 22/04/24. You are expected to pay COT cost of €100 via Steam Card or apple card or by our Bitcoin wallet : 15Dqas6y3VzHs8V86rzyFSPG7E11mt31qk


We're expecting to hear from you as soon as possible.

Be assured of my esteemed Regards.
Mrs Christine Graeff
Chief Financial Officer Credit Suisse AG.