melsonmmanigault@gmail.com

[firefly]

Money transfer scam.

Initial scam format used:

From: melson manigault <melsonmmanigault@gmail.com>
Subject: FROM WARSAW,POLAND
Dear Beneficiary,

Due to your past experiences we want to compensate you with fresh
funds from UKRAINE-RUSSIA WAR Refugees for safe keeping and
reinvestment on behalf of the concerned the total sum in about 22
boxes is $9billion usd which we will be moved into Dubai vaults which
is has no sanction over the Oligarch funds from Russia or Ukrainian
Mps(politicians).

Contact info@dubaivaults.org

for further details,

Sincerely,

Melson.

EURO FUND GROUP.

[firefly]

Email received:

ATTN:SIR,

IT HAS COME TO OUR NOTICE THAT YOU ARE YET TO RETURN THE EUROPEAN UNION DEPOSIT FORM WITH YOUR NAME AND ADDRESS INSERTED ,PLUS THE REQUIRED REGISTRATION CHARGE WHICH WILL ENABLE US APPROVE AND SEND TO MIDFIRST BANK WHO HAVE ISSUED A BLANK TRANSFER SLIP PENDING OPENING OF CONSIGNMENT AND CONFIRMING AMOUNT FOR WIRE WITH YOUR BANK DETAILS.

WAITING YOUR URGENT RESPONSE,

SINCERELY,

MELSON.
=========================================
DEAR BENEFICIARY ,

YOUR ATTENTION IS NEEDED HERE IN EUROPEAN UNION REGARDING THE FUND FROM DUBAI ISLAMIC DEVELOPMENT BANK VIA MIDFIRST BANK WIRE TRANSFER TO YOUR BANK .

SEND YOUR ACCOUNT NAME AS IT APPEARS AND THE BANK ADDRESS SO WE CAN FILL INTO THE BLANK SPACES WHICH HAS ALREADY BEEN STAMPED TO AVOID DELAY.

PLEASE NOTE THAT A SUM OF $250USD IS REQUIRED IN ITUNES CARD OR NORMAL WESTERN UNION TRANSFER TO OUR PREFERRED DESTINATION.

WE URGENTLY NEED YOUR COOPERATION SO WE CAN SEND YOU A FORM FOR WIRE TRANSFER.

SINCERELY,

MELSON.

Header:

From: melson manigault <melsonmmanigault@gmail.com>
Date: Thu, 10 Nov 2022 09:31:35 -0500
Message-ID: <CADi9O7yYURZX9kV+WETLzn0jLYGWFf0pHM1fJKV1MNTtyqw74w@mail.gmail.com>
Subject: URGENT.
To: undisclosed-recipients:;

Fake documents received with the message:

[firefly]

Email received:

FILL URGENT.

MELSON.D

From: melson manigault <melsonmmanigault@gmail.com>
Date: Sat, 12 Nov 2022 09:15:31 -0500
Message-ID: <CADi9O7xfDRbgfgcMXBwH9m5QzHvfmTT=2HfHhYTfXXmVzLAaHw@mail.gmail.com>
Subject: URGENT
To: undisclosed-recipients:;

Fake documents received with the message:

[firefly]

The email sent to melsonmmanigault@gmail.com received a reply from info@dubaivaults.org:

586usd needed to activate your wire transfer.

melson.

Header:

Return-Path: <info@dubaivaults.org>
Received: from us2-ob2-7.mailhostbox.com (us2-ob2-7.mailhostbox.com. [208.91.199.208])
Date: Mon, 14 Nov 2022 02:29:11 -0500
From: ISLAMIC BANK <info@dubaivaults.org>
User-Agent: Roundcube Webmail/1.4.8
Message-ID: <d3a371f779bd52629333daafb549e299@dubaivaults.org>

[firefly]

Replies received:

Send $586 usd to Mr.C. T. F. Virginia,USA so we xan finalize your fund release through midfirst bank.

Yours Truly,

Melson M Manigault Jnr.

send to attached account details

Header:

Return-Path: <info@dubaivaults.org>
Received: from us2-ob3-2.mailhostbox.com (us2-ob3-2.mailhostbox.com. [208.91.198.232])
Received: from localhost (unknown [10.25.144.109]) (Authenticated sender: info@dubaivaults.org)
Date: Thu, 17 Nov 2022 08:00:53 -0500
From: ISLAMIC BANK <info@dubaivaults.org>
User-Agent: Roundcube Webmail/1.4.8
Message-ID: <f08a9d755fd9c2b4aeac84bef1732de0@dubaivaults.org>

Bank account shown in the document:

Zagrebačka banka d.d.
Zagreb, Trg bana Josipa Jelačića 10
ZABAHR2X
M. L.
foreign currency account
HR982360000323001xxxx

[firefly]

The fake site used in scam claims to be Dubai Vaults.

There is no content, the domain name is used only for the email address, as in info@dubaivaults.org.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=159013

From the domain name registration:

Domain Name: DUBAIVAULTS.ORG
Updated Date: 2022-05-09
Creation Date: 2022-03-09
Registrar Registration Expiration Date: 2023-03-09
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registry Registrant ID: Not Available From Registry
Registrant Name: aldo clause
Registrant Street: 2322 Midway Road
Registrant City: Hackett
Registrant State/Province: AZ
Registrant Postal Code: 72937
Registrant Country: US
Registrant Phone: +1.4796380732
Registrant Email: clausealdo@gmail.com

[firefly]

Recovery scam.

DEAR BENEFICIARY,

WE HAVE DISCOVERED YOUR MISSING CONSIGNMENTS WHICH LEFT DUBAI PORTS SEVERAL WEEKS AGO AT THE TRANSIT TERMINAL OF THE NORWEGIAN BORDER CUSTOMS.

CONTACT KRISTIN KABO

+4793044136 ON WHATS APP ONLY

SO YOU CAN CLAIM YOUR CONSIGNMENT,

SINCERELY,

MELSON.

Header:

From: melson manigault <melsonmmanigault@gmail.com>
Date: Mon, 9 Jan 2023 02:57:18 -0500
Message-ID: <CADi9O7xq100OCnHpBehXEzmrWECew2OBZF5vmR_kJLhm5XRoaQ@mail.gmail.com>
Subject: TRANSIT REPORT
To: undisclosed-recipients:;

+4793044136
Number billable as mobile number
Country or destination Norway
Original network provider* NetCom GSM AS

[firefly]

Recovery scam.

A FEDERAL HIGH COURT SITTING IN LAGOS,NIGERIA HAS APPROVED THE SUM OF $5,000,000.00USD IN CASH COMPENSATION FOR THE DAMAGES DONE TO YOU FOR UN AVAILABILITY OF YOUR WITHHELD FUNDS DURING COVID 19 PANDEMIC.

GO AHEAD AND SEND $250USD TO IBEZIM UZOMA IN LAGOS,NIGERIA TO GET THE TRANSFER ACTIVATED TODAY,

USE ANY FAST MONEY AGENT,

OR SEND ITUNES OR GOOGLE PLAY/AMAZON STEAM CARD,

SINCERELY,

MELSON.

Header:

Return-Path: <melsonmmanigault@gmail.com>
From: melson manigault <melsonmmanigault@gmail.com>
Date: Tue, 7 Feb 2023 05:40:34 -0500
Message-ID: <CADi9O7x7X=Wd+DKewED+UW2wCgv3rm=+b12Srt1zxS514TSa2w@mail.gmail.com>
Subject: YOU HAVE WON $500,000.00USD
To: undisclosed-recipients:;

Fake document received with the message:

[firefly]

Email received:

fill and return

copy binance.btcoin@gmail.com

Header:

Return-Path: <melsonmmanigault@gmail.com>
From: melson manigault <melsonmmanigault@gmail.com>
Date: Thu, 29 Jun 2023 06:31:22 -0400
Message-ID: <CADi9O7z_eh48GZv1QuaOsi8MPco9p0Esv34kYhdhkBbYKduE1g@mail.gmail.com>
Subject: BINANCE
To: undisclosed-recipients:;

Fake document received with the message: