Sahabi Investment Services: Tailored Financing Solutions

Attachment: None

Subject : P/ Project financing and joint activities
Date : 2024-10-29 18:15:17
From : hr@amplacementservices.com
To : ekashparmar01@yahoo.com; ekashparmar01@yahoo.com
Cc : info@mercranet.com; ludo_gallery@yahoo.com; yaomaiyumingzhaowo@126.com

Hello,

GOOD DAY,

I am Dr. Oscar, an independent consultant linked with Sahabi Investment Services.
We offer loan and joint venture services to clients seeking funding for their projects.
We are interested in partnerships and business expansions.
Kindly confirm your understanding and interest in order to discuss further.
 
Dr. Oscar
Investment Consultant


_________________________________________________
The email appears to have originated from:

  • Though the email claims to be from amplacementservices.com, the final sending IP address is 103.247.19.249 (new-destinationweb-india.dnsracks.com), which seems to be a server located in India.
  • The header shows the originating server as 147.124.212.107, but it's unclear whether this IP address is genuinely linked to amplacementservices.com.
Sender Identification and Service Used:

  • The sender's address is hr@amplacementservices.com, but the SPF check reveals this address isn't authorized to send mail from that domain.
  • The reply-to address is munevaroscar18@gmail.com, which is a completely different Gmail account.
  • The DKIM signature uses the domain essjayericsson.com, but its key isn't found in the DNS, making it invalid.
Conclusion:

This email is highly suspicious and likely spam. The sender's information is forged, the email was routed through multiple IP addresses, and it failed both SPF and DKIM checks. Avoid opening any links or attachments within this email, and it's advisable to directly contact the sender to verify the email's authenticity.

Further Analysis:

The IP address 185.201.19.38 belongs to antispamcloud.com, an anti-spam service provider. The email passing through this server suggests the sender might have tried to bypass spam filters.
Location: 인도

Comments

Post a Comment

Popular spam

Buyout from DJI is imminent at $1.37 per share

Subject : This stock is about to receive a buyout at 10 times its current market price... Date : 2017-03-20 From : "Efren Bray" <Bray779@airenetworks.es> To : rechelemb@yahoo.com Cc : ekashparmar01@yahoo.com, yaomaiyumingzhaowo@126.com, support@mailminion.com, info@mercranet.com, priyeshk00@gmail.com Dear Subscriber, It's been a long time since I sent you my special newsletter containing a hot stock tip. The reason for that is because I really haven't had many opportunities to present to you. Incapta Inc (ticker: INCT) is a company that was brought to my attention earlier this morning by one of my colleagues at an M&A firm in manhattan. It seems that a buyout from DJI is imminent at $1.37 per share and is set to be announced next week on Tuesday, March 28. INCT is a company that has revolutionized the drone industry by creating the first independent drones that can be dispatched to areas of interest such as crime scenes, car chases, wildfire...
Read more

Vietnamese fake inquiry which sent from Nigeria through German email service

Attachment: RFQ-40371.r11 (345.7KB) Spoofed server Name: Dang Thi Toan Mailing Address: So E61, cho Hoi Do, duong Nguyen Chi Thanh, P.Thanh Binh, Hai Duong Thanh Binh 1000 VN Phone: +84.0978599011 Email:zaimu@wacoh-vn.com Subject : Fwd: RFQ-40371 Date : 2017-06-26 19:11:56 From : DANG THI TOAN <dianameitert@t-online.de> To : "samumex@samudies.co.kr" <samumex@samudies.co.kr> Cc : info@mercranet.com; ludo_gallery@yahoo.com; support@mailminion.com Good Day, Please quote for the following items as attached so you can raise contract terms for PI Appreciate to receive your quotation at your earliest. Thank you for your assistance. Best Regards. Sales Manager DANG THI TOAN (Ms) VIET NAM WACOH Co. Ltd. Add: Room 602, 7 th Floor, Hoa Xa Building, 360 Nguyen Luong Bang Street Thanh Binh Ward, Hai Duong city, Hai Duong Province Tel: +84 3203 895 515 Phone: 0978 599 011 Email: zaimu@wacoh-vn.com Refer to below: SECURITY ALERT - Fake ...
Read more

Confirm your banking details

Attachment: Swift Copy.jar (497.6KB) Subject : Re: Re: Confirm your banking details Date : 2017-03-14 11:35:56 From : kasse@fundus-nienburg.de Dear Sir, We have made the bank transfer today and the transfer has been done by our bank, kindly confirm the receipt of the payment and let us know the estimated ETA. The transfer swift copy is attached, hope the transfer is as you instructed and all information are correct on the attached slip. For security purpose, the document is a secured document, enable content and editing to view the document. Thanks! "Sent from my iPhone"
Read more