amfinancialservicesltd.tk . Fake Domain . Business ID Theft

Business ID Theft . Fake Domain . Fake Loan Company .

[email protected]

[email protected]


Begin Scam Email:

All applicant are to fill the attach form correctly and get back to us.
Note, if this form is not filled correctly will shall not continue with this transaction.

All reply to via Email Address <[email protected]>

Best regard


Attachment to Scam Email : "Please fill this application form all correctly.rtf" . 187kb


End Scam Email

***********************************************************************************
Contents of Attachment:

Scam Loan Application Form with ID Theft Potential

The Scammers are using the name of a legitimate Mortgage Broker In Vancouver Canada , and recieving the applications at a dot tk domain and hotmail address.

The attachment contains the correct address and phone number for AM Financial Services Ltd .

www.amfinancial.ca

A legitimate mortgage broker since 1990 but is routing the applications to their email addresses .



************************************************************************************
Fake Domain

From Domain Tools:

Domain name:
AMFINANCIALSERVICESLTD.TK

Organisation:
BV Dot TK
Dot TK administrator
P.O. Box 11774
1001 GT Amsterdam
Netherlands
Phone: +31 20 5315725
Fax: +31 20 5315721
E-mail: abuse: [email protected]

, copyright infringement:[email protected]

Domain Nameservers:
NS01.DOT.TK
NS02.DOT.TK
NS03.DOT.TK
NS04.DOT.TK


*************************************************************************************

Header Details:

Delivered-To: xxxxxx
Received: by 10.180.98.132 with SMTP id ei4csp159994wib;
Wed, 25 Apr 2012 00:26:40 -0700 (PDT)
Received: by 10.50.190.197 with SMTP id gs5mr1065936igc.37.1335338799900;
Wed, 25 Apr 2012 00:26:39 -0700 (PDT)
Return-Path: <[email protected]>
Received: from bay0-omc3-s27.bay0.hotmail.com (bay0-omc3-s27.bay0.hotmail.com. [65.54.190.165])
by mx.google.com with ESMTP id mk6si15008946igc.29.2012.04.25.00.26.37;
Wed, 25 Apr 2012 00:26:39 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.54.190.165 as permitted sender) client-ip=65.54.190.165;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.54.190.165 as permitted sender) [email protected]
Received: from BAY149-W34 ([65.54.190.189]) by bay0-omc3-s27.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 25 Apr 2012 00:26:37 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/mixed;
boundary="_eb33cf03-faf3-48ae-98b5-808a1dfa6cfb_"
X-Originating-IP: [205.251.131.31]
From: AM FINANCIAL SERVICES LIMITED <[email protected]>
Sender: <[email protected]>
To: <xxxxxx>
Subject: Please fill this application form all correctly
Date: Wed, 25 Apr 2012 08:26:37 +0100
Importance: Normal
In-Reply-To:
<CAMmFnJguT7CCwhtoNG+oTfAXP7hDomiqpFrjm57f5h=-chcZ6g@mail.gmail.com>
References:
<[email protected]>,<CAMmFnJguT7CCwhtoNG+oTfAXP7hDomiqpFrjm57f5h=-chcZ6g@mail.gmail.com>
MIME-Version: 1.0
X-OriginalArrivalTime: 25 Apr 2012 07:26:37.0326 (UTC) FILETIME=[BFF032E0:01CD22B4]

--_eb33cf03-faf3-48ae-98b5-808a1dfa6cfb_
Content-Type: multipart/alternative;
boundary="_7a2c06b8-d774-46e9-9f53-b1b2a0cb09fa_"

--_7a2c06b8-d774-46e9-9f53-b1b2a0cb09fa_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Abuse Report Filed at dot.tk



Thank you for your notification to <[email protected]>. We hereby
confirm that your email has been received. All notifications will
be investigated within 1 business day, if properly documented.
If you do not receive a response, do not worry, abuse complaints
are dealt with as a serious matter.

To be able to process your email we need all available information.
If you have not already done so, please send us all available information
about the case you are reporting. Make sure the .TK domain name
is included at all times.

Only with enough information it is possible for us to investigate an
abuse case. All notifications with missing or incorrect information
will be deleted without prior notice and will not be further investigated.

Please only send us abuse complaints regarding:
- SPAM*
- Phishing or other fraud
- Copyright infringements on the content**
- Copyright infringements on the domain name

Make sure to include an explanation of the specific nature
of your complaint(s)

DO NOT send us:
- Multiple notifications about the same issue
- Different complaints in one emailmessage.
- Any attachments or any documents(Microsoft Word, Excel etc.)

IMPORTANT:
Any other issues i.e.. regarding the use of the Dot TK program
can be addressed by using the Dot TK WIKI.

Domain Terminated



Dot TK Support replied:

Dear Sir/Madam,

Thank you for your email.

Dot TK is the exclusive registry for the
Country Code Top Level Domain for the island
of Tokelau (also known as "ccTLD").

Dot TK (.TK) registers domain names globally,
through our services Free Domain and
Paid Domain.

As your email is alerting us of
PHISHING by a holder of a Dot TK domain, we
have researched the case. The user is in
fact a Free Domain registrant, therefore
because of the PHISHING violation, the domain has
been canceled and the registrant has been
removed from our database.

Please note that it may take up to two hours
before the changes are globally affected.

Thank you for your assistance with this.

With Kind Regards,


Dot TK Support