Advance fee loan scams and fraudulent loan sites.
#370349 by Ghanageria Fri Aug 03, 2018 4:19 pm
Received: by 2002:a17:90a:170b:0:0:0:0 with SMTP id z11-v6csp504400pjd;
Fri, 3 Aug 2018 12:59:34 -0700 (PDT)
X-Google-Smtp-Source: AAOMgpcclEDykGKPv3841ZsN0AQZLD1D8k01f8sMFw1fPXXHddQ9zhgpbc61YTiwQS4YMqjh4fiA
X-Received: by 2002:aa7:8307:: with SMTP id t7-v6mr6012260pfm.81.1533326374646;
Fri, 03 Aug 2018 12:59:34 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1533326374; cv=none;
d=google.com; s=arc-20160816;
b=bRgbIH5UgYyO/pcatNuvmnFRVXonNsbcSF5uFPp8W3S18zs0JmArHqiwGeqXjaH55U
ssEr8nEfMnjbSzEGhjRsN3Yg7lcwHHS0OpHquM1asv9qTxJhZQ5B/7ff1vSu4ukAu21N
5O0nx2u4uWhAHiBpYGBIryddUGtjB8B24jlBlGxZV5YLssSTIlNTyV5XYyjFUHP0y8Yi
8BKGPwuYIeI4dnqkrC78jx14wrVkx+iX/UV629ClwVMrRIhIwC6d2MD8daYM3vWaYmEX
VZib59CXntz4oqFAfdytNwKJdJDdsBFP1u/zErpiRfyqODO9EXkbohadg09gWXFdtTw4
Oayg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:user-agent:to:from:subject:date:message-id
:dkim-signature:arc-authentication-results;
bh=4M/TpRsOE3J+0cwhZmBVkGIp62PFCClPXvcFqxpixLs=;
b=AugXY2LLJ6uwh5TsWpl1IWdmz+TZpUrnxCC8MhyadYM+nkp+sYrdpszEaKb8Ybr9Mk
7SLHhT7EazS6QiWos39N861I2erl85NnUFuoljIwhFTjA9IBM6LxeUp/ltQijsWpIjdW
CCNxTtcWLWRJlh83JbpEqkzYECDD0smrooJvD8UU1MUabSLr/ULEEbu5cKqDYs9RJBhp
wDhjbIbf/TTWnLX2nLUpmowe6fDjI9a8nbGopVZXovVXHwTBJBvE7lAm57xc4maIqJeu
29El9EjN/pUYnor2uJ9trH3DP1XhqJG+mYBmru2oJEOYw23mTWokeEACDRZVtdVvdrrL
O+GA==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=default header.b=hRh76zjz;
spf=pass (google.com: domain of [email protected] designates 108.170.55.202 as permitted sender) [email protected]
Return-Path: <[email protected]>
Received: from terminal4.veeblehosting.com (terminal4.veeblehosting.com. [108.170.55.202])
by mx.google.com with ESMTPS id v35-v6si4319433plg.117.2018.08.03.12.59.34
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 03 Aug 2018 12:59:34 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 108.170.55.202 as permitted sender) client-ip=108.170.55.202;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=default header.b=hRh76zjz;
spf=pass (google.com: domain of [email protected] designates 108.170.55.202 as permitted sender) [email protected]
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=loanassistanceco.com; s=default; h=Content-Type:MIME-Version:To:From: Subject:Date:Message-ID:Sender:Reply-To:Cc:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=4M/TpRsOE3J+0cwhZmBVkGIp62PFCClPXvcFqxpixLs=; b=hRh76zjzHnYdBjvTm4eIKX4MD /78tjZKxkeR2rdHkcO96zqG6fyIDzaNycj3ueSO0oLGFuUnN/Wu3StL2+TSpLjXXue3DqMT8Aprp4 yLLggjSYXV25pce6fZxM7wSRDjoQN2rz3K+6vDF8uAc4RbMh6FhHWudVcDRcUDaOcGUaY8DhUtTwi WhD5cZ4euFYv45Q7CknYOQIhA91i8Hh8M6jMUJg/omY9h7a4WcO2ZhnrJ4eM4cwZKELmdTHOn7P1V PsgzrI3oJZmWkiy9DnG0coK0MRyQFcjLiTgNEK+qz2y9gFMqP3SytddTDRKrGSwOYg/xO5qENibw8 D0jf6ajbQ==;
Received: from [::1] (port=49714 helo=terminal4.veeblehosting.com) by terminal4.veeblehosting.com with esmtpa (Exim 4.91) (envelope-from <[email protected]>) id 1flgEX-00GZRL-SM; Fri, 03 Aug 2018 12:59:33 -0700
Received: from 77.234.46.230 ([77.234.46.230])
(SquirrelMail authenticated user [email protected])
by terminal4.veeblehosting.com with HTTP;
Fri, 3 Aug 2018 13:59:33 -0600
Message-ID: <bbdd65421322e504758cde2c84b89fac.squirrel@terminal4.veeblehosting.com>
Date: Fri, 3 Aug 2018 13:59:33 -0600
Subject: Re:Request For More Info Please
From: Loan Assistance <[email protected]>
User-Agent: SquirrelMail/1.5.2 [SVN]
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="----=_20180803135933_31035"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - terminal4.veeblehosting.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - loanassistanceco.com
X-Get-Message-Sender-Via: terminal4.veeblehosting.com: authenticated_id: [email protected]
X-Authenticated-Sender: terminal4.veeblehosting.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:

------=_20180803135933_31035
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Attention:

Dear Sir,

The loan application process is simple and as follow:




1. You have to submit your project or executive summary and completed
application form attached.

2. We shall furnish the project to our investors and financier to look
into.

3. All viable and project with lower risk as determine by the financier
would be approved.

4. Upon approval you would be notified and then guideline on signing the
loan contract and fund disbursement would be relayed to you.

5. Upon acceptance you would be given the time frame for the signing of
the loan documents and fund release period which ranges from 07-30 days.

6. The loan amount would be released and you would be required to service
the loan which usually would be after 1 year and in some case 2 year
grace period could be given. Loan tenure is maximum of 20 years.

7. After you confirm the loan amount in your account you would be
required to pay us the facilitators 1% of the principal amount that was
loaned to you as our commission.

The above are summary of the steps that would be taken. should you have
any further question do not hesitate to ask me.

I will furnish you the details of the lender we proceed upon your
request.

Best regard



Clifford James
Int'l Client Executive

------=_20180803135933_31035
Content-Type: application/pdf; name="Loan-Equity Funding Form(A)
(1).pdf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Loan-Equity Funding Form(A)
(1).pdf"


------=_20180803135933_31035--

The above email is a scam using a false identity with intent to defraud.

The scammer will try to convince one to send money in advance. In exchange the scammer will promise even more money or assets will be sent in return. It is all a complete lie.
Advertisement

#370350 by Ghanageria Fri Aug 03, 2018 4:21 pm
Registrant thomas mangoload
Registrant Org thomas mangoload
Registrant Country SG
Registrar Hostinger, UAB
IANA ID: 1636
URL: https://www.hostinger.com
Whois Server: whois.hostinger.com

(p)
Registrar Status clientTransferProhibited
Dates 2 days old
Created on 2018-08-01
Expires on 2019-08-01
Updated on 2018-08-01

Name Servers NS10.VEEBLEHOSTING.COM (has 2,323 domains)
NS11.VEEBLEHOSTING.COM (has 2,323 domains)


Tech Contact thomas mangoload
412 Pasir Ris Street 53,
central singapore, Central Singapore, 510577, SG

(p)
IP Address 108.170.55.202 - 1,022 other sites hosted on this server


IP Location United States - Arizona - Phoenix - Secured Servers Llc
ASN United States AS20454 SSASN2 - SECURED SERVERS LLC, US (registered Oct 18, 2010)
Domain Status Registered And Active Website
IP History 34 changes on 34 unique IP addresses over 6 years

Registrar History 2 registrars with 1 drop

Hosting History 8 changes on 7 unique name servers over 6 years

The above email is a scam using a false identity with intent to defraud.

The scammer will try to convince one to send money in advance. In exchange the scammer will promise even more money or assets will be sent in return. It is all a complete lie.
#370351 by Ghanageria Fri Aug 03, 2018 4:24 pm
Scam mail received a second time via maxmoney.com


Received: by 2002:a17:90a:170b:0:0:0:0 with SMTP id z11-v6csp505164pjd;
Fri, 3 Aug 2018 13:00:22 -0700 (PDT)
X-Google-Smtp-Source: AAOMgpeOaO/Hij/l70lL8i6iwHd9CW10PxYnOHmWxrpajY3RMUux3B9Uz4T9QvDgoBZ2CiRYlsuh
X-Received: by 2002:a62:6a01:: with SMTP id f1-v6mr6115877pfc.156.1533326422656;
Fri, 03 Aug 2018 13:00:22 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1533326422; cv=none;
d=google.com; s=arc-20160816;
b=WlsCqwM/voTInbfJpC91i58/fqRVMYYmTcxE3svuGUV7MIRHi/oiGnZCf2fPCGVFKK
KiUSQciyI6SJdMCc2dnqDSVpE/6hf+dzc1+aLox3hxScEyMa6d3lKRFkT1cErafnES+x
0/9DOrshtywNDpr61xKfSS7Q0fQMLuqXnAfufEqcWylOsDoSB3z+W9+R08+o/IKY3Cmx
dMAQDGn17htPQMC9W0VrmKLS5/MVEgtbCXhw5vifvpCaiCXTAqTuQvJ9c1NUehNQ5PIZ
dgKhMbolLt+j22ltzd9pILC5aZVgjMOwSFwS5NxlkqHdBcGF2eoMRb1hPXatl/Wne+q/
8X8A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:date:message-id:subject:to:from:reply-to
:dkim-signature:arc-authentication-results;
bh=PaRxSlpjeWY6YlCiR6szXdT6jxGrxUMld4mz4uOhOqE=;
b=lxyAhiG+2nSrbnwWpf/REpLt9OZCNn7ynkI4AD0H50cy/4j0AuOTw/FljDXPVs4FjM
ZsUumFtkvHwaof+OLChDI+JQha86fEWadnLOHAjzF92aZbg3wujo6L+92ClI6KQ8s8cJ
C6YDNYDvOdu/SdjV59lzHg3wwN3OW8KqlUnQBXWC79jIa/KGxMQR512me/icu0uLOikg
LpCthyDp//YBVGNIkEdmpLC34hP1HQzFLtIXExwzwIpksLVqtRs7Qg7xmNlXqZDdmDEH
Ge8jUQahpjlJCad4vSHMAVTt5hlJd3FhkK0rmXu1On3iqHrRXyb15JF7JkQAtZTBsV3b
mIHg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=fail [email protected] header.s=default header.b="X/DXZaxG";
spf=pass (google.com: best guess record for domain of [email protected] designates 111.90.132.116 as permitted sender) [email protected]
Return-Path: <[email protected]>
Received: from mail.remitmaster.com (mail2.maxmoney.com. [111.90.132.116])
by mx.google.com with ESMTPS id f7-v6si4528257pgp.496.2018.08.03.13.00.20
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 03 Aug 2018 13:00:22 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 111.90.132.116 as permitted sender) client-ip=111.90.132.116;
Authentication-Results: mx.google.com;
dkim=fail [email protected] header.s=default header.b="X/DXZaxG";
spf=pass (google.com: best guess record for domain of [email protected] designates 111.90.132.116 as permitted sender) [email protected]
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=maxmoney.com; s=default; h=Content-Type:MIME-Version:Date:Message-ID: Subject:To:From:Reply-To:Sender:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=PaRxSlpjeWY6YlCiR6szXdT6jxGrxUMld4mz4uOhOqE=; b=X/DXZaxGpUYr28SKKE9NRqACUC jG0LEdMDk5YQa2zT43VRNbiokRyoBxye3biNGptf8XFQQkwfw/s1gEbIdwnVBBGzBkmT9zmeJTVZX bM9KGUMr1oJxUrXNtUjbOZILDhyCH6KH5UpqL474SrC5sXD/fezuJAKDolq0CkuA1W+VWU9QdHY1c dL+M/oGDbg44kCDwQDejN+8toiIRCa34WaxNZxcH5vuQU69gwT29PNthZEgiK0093COYBo9oInrWJ 6rtCQ31TKbyQVSf0wxP+ADPxXFtYSXSrwhLuOouZARyQzQ3bd5KfCztbfKUdPXjG3lAPAIzespTlf 9ghBTxcQ==;
Received: from [77.234.46.230] (port=16622 helo=[100.120.207.48]) by mail.remitmaster.com with esmtpa (Exim 4.87) (envelope-from <[email protected]>) id 1flgFF-0004z6-91; Sat, 04 Aug 2018 04:00:21 +0800
Reply-To: <[email protected]>
From: Loan Assistance <[email protected]>
Subject: Re:Request For More Info Please
Message-ID: <[email protected]>
Date: Fri, 03 Aug 2018 13:00:11 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_0001_5CAF67C9.EC916442"
X-Priority: 3
X-Mailer: Microsoft Office Outlook 12.0
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - mail.remitmaster.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - maxmoney.com
X-Get-Message-Sender-Via: mail.remitmaster.com: authenticated_id: [email protected]
X-Authenticated-Sender: mail.remitmaster.com: [email protected]

------=_NextPart_000_0001_5CAF67C9.EC916442
Content-Type: multipart/alternative; boundary="----=_NextPart_001_0002_19D7F2CA.59244F44"

------=_NextPart_001_0002_19D7F2CA.59244F44
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Attention:

Dear Sir,

The loan application process is simple and as follow:




1. You have to submit your project or executive summary and completed
application form attached.

2. We shall furnish the project to our investors and financier to look
into.

3. All viable and project with lower risk as determine by the financier
would be approved.

4. Upon approval you would be notified and then guideline on signing the
loan contract and fund disbursement would be relayed to you.

5. Upon acceptance you would be given the time frame for the signing of
the loan documents and fund release period which ranges from 07-30 days.

6. The loan amount would be released and you would be required to service
the loan which usually would be after 1 year and in some case 2 year
grace period could be given. Loan tenure is maximum of 20 years.

7. After you confirm the loan amount in your account you would be
required to pay us the facilitators 1% of the principal amount that was
loaned to you as our commission.

The above are summary of the steps that would be taken. should you have
any further question do not hesitate to ask me.

I will furnish you the details of the lender we proceed upon your
request.

Best regard



Clifford James
Int'l Client Executive

------=_NextPart_001_0002_19D7F2CA.59244F44
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" http-equiv=3DContent-Type=
>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.18538"></HEAD>
<BODY><PRE>Attention:

Dear Sir,

The loan application process is simple and as follow:




1. You have to submit your project or executive summary and completed
application form attached.

2. We shall furnish the project to our investors and financier to look
into.

3. All viable and project with lower risk as determine by the financier
would be approved.

4. Upon approval you would be notified and then guideline on signing the
loan contract and fund disbursement would be relayed to you.

5. Upon acceptance you would be given the time frame for the signing of
the loan documents and fund release period which ranges from 07-30 days.

6. The loan amount would be released and you would be required to service
the loan which usually would be after 1 year and in some case 2 year
grace period could be given. Loan tenure is maximum of 20 years.

7. After you confirm the loan amount in your account you would be
required to pay us the facilitators 1% of the principal amount that was
loaned to you as our commission.

The above are summary of the steps that would be taken. should you have
any further question do not hesitate to ask me.

I will furnish you the details of the lender we proceed upon your
request.

Best regard



Clifford James
Int'l Client Executive</PRE></BODY></HTML>

------=_NextPart_001_0002_19D7F2CA.59244F44--
------=_NextPart_000_0001_5CAF67C9.EC916442
Content-Type: application/pdf; name="Loan-Equity Funding Form(A)
(1).pdf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Loan-Equity Funding Form(A)
(1).pdf"


------=_NextPart_000_0001_5CAF67C9.EC916442--

The above email is a scam using a false identity with intent to defraud.

The scammer will try to convince one to send money in advance. In exchange the scammer will promise even more money or assets will be sent in return. It is all a complete lie.

Who is online

Users browsing this forum: No registered users and 8 guests