Log In | Subscribe | | |

Don't yawn at the return of the United Nations scam and other interesting spams / scams

Publication: 
Editorial Staff
chiefofficersnet

This weekend has been an interesting weekend for spam, not the least of which is because such a large amount got through our first line filters: far more than usual. But they were all stopped at the second line of defence and as we trawled through the blocked messages, we came across several that were worthy of comment. One is that old chestnut, the United Nations scam; another is the latest example from a spam-house that now allows us to identify their server farm and it is particularly interesting because it appears to promote a scheme that fell under the bus when the British tax authorities began action in relation to that scheme. And then there's the special mention of the persistent finditeasy.info which is just the most blatant spam-scam that it's hard to understand how they think it will pass any filter. And there's more....

Let's start with alexandra@finditeasy.info.

"Payment Notification

This is an automated email, please DO NOT reply to this message as
responses are not monitored on this email address.

This email is to confirm Wiki Trader Inc. has issued a Paypal payment
of $18,831.50 (less fees) to .

Paypal Payment issued for:
Transaction Reference: 17WK571489XJ509DE621

If you have any questions, feel free to contact our team through the
support center in your control panel

Best regards,

Alexander G.
Wiki Trader Support

iLoveTrading,349 Shadowmar Drive, New Orleans, LA, 70112 "

Ah, Alexandra, you've had a sex change between the address of the mail from supportf@finditeasy.info and the end of the message."

And look, she's back:

"Good afternoon, Please validate your account immediately to ensure timely transfer of your funds due from last weeks commissions.

=>>Click Here - Instant Account Validation

Once we have your validation we will transfer the funds
over right away.

Regards,

- SARAH

Krager & Krager LLC,223 Rainbow Road, Charleston, 63343 "

There are humorous "unsubscribe" and "report abuse" links as well as the link to, one presumes, a landing page. Krager and Krager has no listing that we can find, a search for that building fails to find it and, most importantly, if it were there, it seems that the postcode is wrong.

And the delightful Alexandra was back with another message signed by someone else:

"Payment Issue for Order W41817399
Dear Holder,

Your Reference Transaction:

Payment Date : January 6, 2018
Receipt Number : CCO459732118
Payment : USD 18,193.10
Payment : Paid

Should this not be you, please contact us below:

>> Confirm This Payment Here

Kind Regards

Kurt Wilsen
Billing Department

Options 711,3578 Bingamon Road, Cleveland, OH, 44114 "

We didn't bother checking the address.

---------

The non-stop spam from a group of servers with addresses starting with 212 is interesting: first, how this has not been shut down by regulators is a surprise. The spam comes from a range of domain names, some of which have been registered for several years. The latest two are karliova.org (again, ICANN is entirely failing to police the issue of .org domains to ensure they are fit for purpose i.e. charities, etc.) and lenfler.com. It is especially interesting given that the scams are often proposing investments of one sort or another.

It is the Lenfler example, from 212.83.190.203, that is particularly interesting:

"Uncapped growth and the potential for up to 58% tax incentives

Moli Invest

Investing in the British Film Industry has many benefits

Uncapped growth and the potential for up to 58% tax incentives

Highlights

- Established Business - Award Winning British Films

- Enterprise Investment Scheme HMRC approved 30% tax relief

- Exclusive Access - Attend our calendar of red carpet events

- 30% Initial Income Tax Relief

- Actual net cash outlay 70 pence in the �1

- No Capital Gains Tax to pay

- Maximum exposure 38.5 pence in the �1 for a 45% income tax payer

Access the EIS guide:

Experience the benefits of investing in UK film. The UK has a vast
pool of talented film-makers and actors and, with the help of your
investment, we can make help the UK continue to develop outstanding
home-grown writing, acting and production talent to the big screen.

This is the ideal opportunity for both new and experienced
investors. EIS is a UK Government Tax Scheme, which is designed to
encourage investment in certain types of projects by offering
generous tax incentives and reliefs. The team specialise in
mainstream UK film production, with a history of award-winning
films, across the major festivals, including; Cannes, Beijing,
Sitges, BFI London, Sundance, Toronto.

Go here to view the guide:

For these to stop you need to go here:"

Recently, Her Majesty's Revenue and Customs was successful in establishing that many film-industry tax shelters were unlawful and began to issue very substantial demands for tax unpaid. It is interesting that this scam, which began about three weeks ago from the same server group but always different domains, persists even after such a case, demonstrating that spam often depends on the greed, fear or ignorance of the target.

The same domain has been used for what appears to be a pump and dump scheme.

"Doubled its share price since 2017

Proven Investments

Invest in the green company that has doubled its share price since
2017

Click here to find out more:

EIS - An HMRC approved investment with 30% tax relief.

Click here for more information:

Don't miss this limited investment opportunity!

- Company valued at �8,000,000 and projected to double its value on
floatation.

- The company's partners and clients include Mcdonalds, Sodexo, ISS,
Engle and Interserve.

- Pioneers in green cleaning solutions - Chemical free cleaning
solutions ensure less waste, less to landfill and a reduction in your
carbon footprint.

- Team of Directors with a rich history of successfully building and
selling companies.

Click here for more information:

If these are no longer of interest please tell us now here:"

The company is not named in the spam. These addresses are: green@karkamis.org and response@karkamis.org

--------------------------

The domain name renewal scam is back, too.

" countermoneylaundering.com Shutdown Warning

FINAL NOTICE - Your account is pending cancellation

PURCHASE EXPIRATION DATE: 04.16.2018DOMAIN: countermoneylaundering.com
EXPIRATION OFFER SEO NOTIFICATIONPLEASE CLICK ON

SECURE ONLINE PAYMENTTO COMPLETE YOUR PAYMENT

We have NOT received your payment yet"

There's a good reason for that: first, the WHOIS information they quoted is years out of date, secondly, the domain is not due for renewal. And third, whoever issued this amateur effort is not our provider. Duh.

-------------------------

Finally, of those that were interesting, is this from moneywebprivatebank@bundusafar.... This is the return of the "Hey, I'm from the UN and we've got money for you" school of scams. It's a "throw everything including the kitchen sink in" style of scam and, therefore, a fascinating study in the cyclical nature of fraud.

"
PICK UP YOUR ATM CARD

En: +COMPENSATION FUND PAYMENT APPROVED NOTIFICATION RSA

--
FROM THE DESK OF DR. RINA ELIZABETH LAGGAR
INTERNATIONAL MONETARY FUND AGENCY
INTERNATIONAL OPERATION DEPT.
----------------------------------------------------------------

RE-OUTSTANDING PAYMENT

This is to informed you officially of your long overdue Payment
outstanding our Banking records. I saw your name in the Central Computer
(System) among list of unpaid inheritance claims individuals and have to
update your information through this email contact for immediate
confirmation.Your name appeared among the beneficiaries who will receive a
part-payment of US$8.5 Million (Eight Million Five Hundred Thousand United
State dollars) and it has been approved already for payment months ago.
However we received an email from one Mr. Morris Thompson who told us that
he is your next of kin infant your IN-LAW and that you died in a car
accident last four months back.

He has also submitted his bank account information's to the office
department for transfer of the funds to him as your inheritor please do
you know him?. We are now verifying by contacting your email address as we
have in our Bank records before we can make the immediate transfer into
his account and for us to conclude confirmation if you are dead or not?
Please, confirm response immediately before our FOREX DEPT action release
of the outstanding payment against your name listed out. Upon this, I
request you reconfirm back your full personal information as soon as
possible to enable this department finalize the transfer of the fund
release to your nominated foreign Bank Account. This department needs the
following information from you urgently.Your approval code:XP000855764 and
Authorization code:TW45649968X

ATTN: PLEASE VERY URGENT,

GOOD DAY,

THE UNITED NATION (UN) COMBINE AGENCIES WITH THE IMF (INTERNATIONAL
MONETARY FUNDS) HAS FINALLY REACH AGREEMENT AND MANAGED TO TRANSFERRED
YOU SOME PART OF YOUR LONG OUTSTANDING PAYMENT FUNDS OF $100,000.00 USD
ONLY THROUGH MONEYGRAM THIS WAS PAY OUT OF THE TOTAL PRINCIPLE MAIN AMOUNT
FUNDS OF $8.5 MILLION UNITED STATES DOLLARS ONLY, AS INSTALLMENT PAYMENT
YOU MAY NOW QUICKLY PICKUP THIS (ONE HUNDRED THOUSAND UNITED STATES
DOLLARS) ONLY VIA ANY MONEY-GRAM & WESTERN UNION OUTLETS AGENT NEARBY
TOMORROW MORNING WE WILL STILL TRANSFER ANOTHER PAYMENT TO YOU SAME MEANS
OR THROUGH ANOTHER METHOD PLEASE KINDLY DO VIEW THE ATTACHED FILES FOR
MORE INFORMATION'S.

ATTENTION PLEASE, YOU NEED TO PICKUP THIS MONEY NOW SINCE THE MTCN AND THE
REFERENCE NUMBERS HAVE TIME LIMIT FRAME ON THE SYSTEM TO EXPIRE, BECAUSE
RIGHT NOW THE FUNDS ARE AVAILABLE TO PICKUP AT ANY MONEYGRAM OUTLETS
AGENT.

NOTE: BEFORE YOU CAN PICKUP THIS MONEY FROM THE MONEYGRAM OR WESTERN UNION
OUTLETS AGENCIES NEARBY WE NEED TO AUTHORIZE AND APPROVE THIS TRANSACTION
FIRST HERE IN OUR SYSTEM (COMPUTER) .

MONEYGRAM TRANSFERRED PAYMENT INFO:

1. MONEYGRAM. REFERENCE NO#: 84717818

2. SENDER'S NAME: MATHEW JOHN

3. AMOUNT TO PICKUP:US$50,000.00

PLEASE CLICK (OR) COPY THIS LINK TO TRACK THE TRANSACTIONS:

https://secure.moneygram.com/t...

ONCE THE WEBSITE APPEARS PLEASE KINDLY PUT DOWN THE MONEYGRAM REFERENCE NO
AS:84717818 THEN PUT DOWN THE LAST NAME AS:JOHN
========================================================================
KINDLY DO EMAIL ME AT: test@magsmedia.org

FOR INQUIRIES PLEASE EMAIL THE COORDINATOR AT: boardlink@dr.com

FOR ATM CARD DEPT. EMAIL TO: karolin@superonline.com
========================================================================

You have to re-confirm back your details to us once again to avoid any
wrong transfer:

PLEASE FILL IN THE FORM BELOW TO ENABLE US SPEED UP THIS TRANSACTION NOW:

(1) FULL NAME:---------------
(2) DATE OF BIRTH:---------------
(3) MARITAL STATUS:---------------
(4) OCCUPATION:---------------
(5) HOME ADDRESS:---------------
(8) COUNTRY:---------------
(9) NATIONALITY:---------------
(10) CELL (MOBIL) NO:---------------
(11) TEL:NO:---------------
(12) FAX:NO:---------------
(13) PASSPORT / ID COPY:---------------
(14) YOU CAN AS WELL BY ATTACHED YOUR BANK ACCOUNT DETAILS FOR THE WIRE
TRANSFER DIRECTLY INTO YOUR DESIGNATED BANK ACCOUNT WITHIN 48HRS.
(15) BANK NAME:--------------- AND ADDRESS:---------------
(16) BANK ACCOUNT NUMBER: --------------- AND ACCOUNT NAME:---------------

Sincerely,
DR. RINA ELIZABETH LAGGAR
CHIEF COORDINATOR FOREIGN REMITTANCE DEPT.
-------------------------------------------------------------------------------------------------------------------------------------
For more info you may contact my coordinator (Pastor Mrs. Margaret Maria
Putu (PhD) for immediate assist via: Tel:+27-(0) 31 828 2404

--------------------------- Mensagem Original ----------------------------
Assunto: +COMPENSATION FUND PAYMENT APPROVED NOTIFICATION RSA+
De: "PICKUP YOUR ATM CARD"
Data: Qua, Abril 11, 2018 4:03 am
Para:
--------------------------------------------------------------------------

---------------- Advertising ----------------

World NomadsTravel Insurance

 


 

hahagotcha