joxford@adm-irs.com

[firefly]

Email:

From: Col. John R. Oxford, Jr.

Hello, this is John R. Oxford, Jr., Director, U.S. Army Aviation and Missile Research, Development, and Engineering Center (AMRDEC), USAF base Afghanistan.

It will interest you to know that I have appointed you as the beneficiary and the recipient of my consignment (two military trunk boxes) containing ($20 Million USD) which has just arrived JFK Airport New York from our USAF base here in Afghanistan;

My desire and purpose is to have the U.S Military Air & Surface Transportation Company in New York to deliver the funds to you (or) to any overseas address under your supervision as long as I'm assured that it will be safe in your care until I return home mid-next year.

E-Mail back immediately with your full address and Cell Phone#; the deal is 60/40 split (60% for me, and 40% for you); I am not a greedy person and I hope you will not double-cross a uniform brother who is paying the ultimate price in keeping this nation safe.

God bless America !!

Col. John R. Oxford, Jr.
Director, AMRDEC
APO 1256, SD...Delta Force 18 TG Airborne Corps, United States
E-Mail me at: joxford@adm-irs.com

Received: from [66.70.246.109]
Subject: Transfer of Funds (VERY URGENT) !!
From: John <no-reply@us.army.mil> <- spoofed email address
Reply-To: joxford@gmx.us

Originating IP: 66.70.246.109
Originating ISP: Ovh Sas
City: Montréal
Country of Origin: Canada

[firefly]

The fake site used in scam pretending to be U.S. Army Aviation and Missile Research, Development, and Engineering Center (AMRDEC) shows no content - the domain name is used only for the email address.

From the fake site details:

Domain Name: adm-irs.com
Updated Date:
Creation Date: 2018-03-16
Registrar Registration Expiration Date: 2019-03-16
Registrar: GRANSY S.R.O D/B/A SUBREG.CZ
Reseller: ONEsolution s.r.o.
Registry Registrant ID: G-1065694
Registrant Name: SAMUEL UZOMA
Registrant Organization: DIRECTOR
Registrant Street: 05 BP 2052 ABIDJAN 05
Registrant City: ABIDJAN
Registrant State/Province:
Registrant Postal Code: 00225
Registrant Country: CI
Registrant Phone: +225.08858582
Registrant Email: BABEFACE231@MSN.COM

[firefly]

The message sent to joxford@adm-irs.com received a reply from johnroxfordjr1@gmail.com.

Email:

Dear xxx ,

The attached is the Airway Bill of the shipment from here to New York, and the photos of the boxes for your confirmation on the availability of the consignment in New York.

Thank you for your understanding into this matter and I look forward to your reply.

May God bless you as you extend your helping hand to the needy!

Respectfully,

Col. John R. Oxford, Jr.
APO 1256, SD...Delta Force 18 TG Airborne Corps, United States

Return-Path: <johnroxfordjr1@gmail.com>
Date: Sat, 8 Dec 2018

Fake document and pictures received with the message:

[firefly]

Email:

Private & Confidential
Dear xxx,

Thank you for your message. Like I said, I am here in Kabul, Afghanistan on U.S official mission hence I need your personal assistance in completing this transaction. The funds are surpluses of several contracts executed by my department during the supply of MH (Military Hardware) here in Afghanistan!

The 2 Boxes containing the $20 Million USD is at the ADM facility, JFK Airport New York, United States.

The transfer mechanism is as follows;

We shall implore the Services of the ADM Europa LLC to convey the (2 boxes) to your physical address or any safe and secure location/address of your choice within 48hrs.

For your confidence, all security measure and concerns has been put in place, and the assigned ADM Europa LLC is a well-structured U.S Military Air & Surface Conveyors that can deliver the 2 Boxes to any address of your choice and/or anywhere in the world without the packages (boxes) been inspected or opened at the airport/s or any transit point.

You can be sure of the ADM services and safe delivery to your doorstep.

“All that is required of you to execute the deal is your delivery address and the transportation fee to transport the consignments from JFK Airport New York to your provided address (Doorstep)”.

Once you received the consignments take out your 40% ($8,000,000) and save my 60% ($12,000,000) for me until I return home mid-next year.

Please contact the ADM Europa LLC, New York – United States (Attn: Samuel R. GOLDSTEIN (Mr.) immediately with your below information to enable the transportation of the (two boxes) to your provided address as scheduled this week;

Contact Mr. Goldstein at;

ADM Europa LLC

Military Air & Surface Transportation (MAST)

Legal Affairs Office (LAO)

International Finance Corporation (IFC)

New York, NY 11430, United States

Phone/SMS: +1 (718) 355-9464

e-Mail: admhqrs@outlook.com

(A)

1. Your Full Names...

2. Scan copy of your Int’l Passport, Driver’s License {or} any Photo ID…

3. Your Delivery Address#, City…State…Country...

4. Occupation...

5. Telephone Number...

6. Mobile/Cell Number....

7. Fax....

8. Email Address...

9. Alternative Email Address...

(B)

1. Your Nearest Airport...

2. Address#, City…State…Country...

In view of the above, I am confident that you will not betray the trust and confidence I have in you, and that you will not expose any correspondence to person/persons and parties not privy to this transaction?

I wait expeditiously for your answers,

May God bless you as you extend your helping hand to the needy!

Respectfully,

Col. John R. Oxford, Jr.

APO 1256, SD...Delta Force 18 TG Airborne Corps, United States

+17183559464
Type: Non-Fixed VoIP (e.g. Skype or Google Voice)
Original carrier: Tc Systems,inc. - Ny

[firefly]

Email:

ADM Europa LLC
Military Air & Surface Transportation Company
JFK - Airport New York, NY 11430, USA
Phone: +1 (718) 355 - 9464
e-Mail: admhqrs@outlook.com

ATTN/ xxx

Good day,

This is to acknowledge the receipt of your e-mail message in accordance to the delivery of the Consignment with Airway Bill (N° 8671043631) to your address (Doorstep).

To transport the Consignment to your physical address (Doorstep); the followings are the requirement and transportation costs;

1= Handling & Transportation Fee = 550. 00 $
2= Airport/s Immunity & Non-Inspection Sticker =
3= Airport Tax = 200. 00 $
Totaling: 750.00 (USD)

Please send the ($750 USD) as scheduled via Money Order or bank wire transfer.

After sending the fee today, do not hesitate to send us the payment details.

Thanks for using our services,

ADM Europa LLC
Military Air & Surface Transportation Company
Samuel R. GOLDSTEIN, Principal,
ADM Europa LLC, USA

Return-Path: <admhqrs@outlook.com>
From: ADM Europa LLC <admhqrs@outlook.com>
Subject: ATTN/ xxx
Date: Mon, 24 Dec 2018

[firefly]

Email:

Good day,

This is to acknowledge the receipt of your message.

You can send the ($750) delivery fee through money order (Western Union Or MoneyGram) Payable to;

Name: Francis U.
Address: Houston, Taxes 77099, USA

We will be waiting for the MTCN immediately.

Thanks for using our services,

ADM Europa LLC
Military Air & Surface Transportation Company
Samuel R. GOLDSTEIN, Principal,
ADM Europa LLC, US

[firefly]

Email:

Dear xxx,

Below is the requested bank account information for the payment,

Bank name: Chase Bank
Acct name: F. S.
Account no: 31917xxxx
Routing no: 021000021
Swift code: CHASUS33
Bank address: 2631 Merrick Road, Bellmore, NY 11710, USA

Thanks for using our services,

ADM Europa LLC
Military Air & Surface Transportation Company
Samuel R. GOLDSTEIN, Principal,
ADM Europa LLC, US