Don't Be Fooled: Inside the AL-QASMIA INVESTMENT Phishing Attempt

Attachment: None

From: AL-QASMIA INVESTMENT<hussainal-saffar@alqasmiainvestment.com>
Sent: Thursday, April 10, 2025 5:04 AM
To : ekashparmar01@yahoo.com; ekashparmar01@yahoo.com
Cc : info@mercranet.com; ludo_gallery@yahoo.com; yaomaiyumingzhaowo@126.com
Subject: ARE YOU STILL INTERESTED IN THE LOAN?

Sir/Ma,

We are actively searching for new business opportunities and projects for possible funding and capital financing. We have investors who intend to invest in viable ventures or projects to expand their global portfolio.

If you have any viable business and you need funding in the form of partnership or loan , let me know so we can arrange  for a meeting immediately to discuss details .

Note : You can also recommend another person for a  commission to you. Your response is most anticipated if this is of interest to you.

Kind Regards
Mr. Hussain Al-Saffar
Head of Asset Management
AL-QASMIA INVESTMENT


_________________________________________________
This email exhibits several characteristics commonly found in scam or phishing attempts:
  1. Misleading Sender Identity: There is a discrepancy between the technical sending information (IP location, HELO/From domain) and the sender's claimed company name/reply-to address.
  2. Different Reply-To Address: Directing replies to a different location than the technical origin is suspicious.
  3. Unsolicited Generic Offer: The content is a generic offer for loans/funding.Considering these points, the email is highly suspicious and likely a scam attempt. It is strongly recommended not to reply, click any links, or provide any personal or business information.
Further Analysis:
  • The geographical/logical inconsistency between the sending IP's location (Spain - 185.230.xxx.xxx), the domain used by the sender, and the claimed identity ("AL-QASMIA INVESTMENT" - presumed Middle Eastern) further increases suspicion.
Location: 스페인

Comments

Post a Comment

Popular spam

Buyout from DJI is imminent at $1.37 per share

Subject : This stock is about to receive a buyout at 10 times its current market price... Date : 2017-03-20 From : "Efren Bray" <Bray779@airenetworks.es> To : rechelemb@yahoo.com Cc : ekashparmar01@yahoo.com, yaomaiyumingzhaowo@126.com, support@mailminion.com, info@mercranet.com, priyeshk00@gmail.com Dear Subscriber, It's been a long time since I sent you my special newsletter containing a hot stock tip. The reason for that is because I really haven't had many opportunities to present to you. Incapta Inc (ticker: INCT) is a company that was brought to my attention earlier this morning by one of my colleagues at an M&A firm in manhattan. It seems that a buyout from DJI is imminent at $1.37 per share and is set to be announced next week on Tuesday, March 28. INCT is a company that has revolutionized the drone industry by creating the first independent drones that can be dispatched to areas of interest such as crime scenes, car chases, wildfire...
Read more

Vietnamese fake inquiry which sent from Nigeria through German email service

Attachment: RFQ-40371.r11 (345.7KB) Spoofed server Name: Dang Thi Toan Mailing Address: So E61, cho Hoi Do, duong Nguyen Chi Thanh, P.Thanh Binh, Hai Duong Thanh Binh 1000 VN Phone: +84.0978599011 Email:zaimu@wacoh-vn.com Subject : Fwd: RFQ-40371 Date : 2017-06-26 19:11:56 From : DANG THI TOAN <dianameitert@t-online.de> To : "samumex@samudies.co.kr" <samumex@samudies.co.kr> Cc : info@mercranet.com; ludo_gallery@yahoo.com; support@mailminion.com Good Day, Please quote for the following items as attached so you can raise contract terms for PI Appreciate to receive your quotation at your earliest. Thank you for your assistance. Best Regards. Sales Manager DANG THI TOAN (Ms) VIET NAM WACOH Co. Ltd. Add: Room 602, 7 th Floor, Hoa Xa Building, 360 Nguyen Luong Bang Street Thanh Binh Ward, Hai Duong city, Hai Duong Province Tel: +84 3203 895 515 Phone: 0978 599 011 Email: zaimu@wacoh-vn.com Refer to below: SECURITY ALERT - Fake ...
Read more

Confirm your banking details

Attachment: Swift Copy.jar (497.6KB) Subject : Re: Re: Confirm your banking details Date : 2017-03-14 11:35:56 From : kasse@fundus-nienburg.de Dear Sir, We have made the bank transfer today and the transfer has been done by our bank, kindly confirm the receipt of the payment and let us know the estimated ETA. The transfer swift copy is attached, hope the transfer is as you instructed and all information are correct on the attached slip. For security purpose, the document is a secured document, enable content and editing to view the document. Thanks! "Sent from my iPhone"
Read more