akaltofenprivate@outlook.com

[firefly]

Money transfer scam.

Dear Sir,

We the Ocean Consultant are interested in investing in your country. Kindly confirm your private email address to our financial director Mr. Anton Kaltofen through his private email address, akaltofenprivate@outlook.com for further details.

Thanks
Mr. Jeomg Changmin.

Header:

Return-Path: <jeongchangminprivate@gmail.com>
From: Jeong Changmin <jeongchangminprivate@gmail.com>
Date: Thu, 7 Mar 2024 07:45:16 -0800
Message-ID: <CAHBQMXzo=VqXSKO5p2Rw6WUrzAXqUeRZpCNYmPL=nS30M1nwCw@mail.gmail.com>
Subject: PROJECT INVESTMENT.

[firefly]

The email sent to akaltofenprivate@outlook.com received a reply from antonkaltofen@oceanconsultant.co.uk :

Kindly confirm the receipt of this test mail so that I can provide you
with
further details.
Warmest Regards

Mr. Anton Kaltofen
Direct Line: +447774819419 whatsapp +447818318787
email: antonkaltofen@oceanconsultant.co.uk
www. oceanconsultant.co.uk

Header:

Return-Path: <antonkaltofen@oceanconsultant.co.uk>
Received: from twentysix.qservers.net (twentysix.qservers.net. [67.225.141.34])
Authentication-Results: mx.google.com;
dkim=pass header.i=@oceanconsultant.co.uk header.s=default header.b=TnAgMbrz;
spf=pass (google.com: domain of antonkaltofen@oceanconsultant.co.uk designates 67.225.141.34 as permitted sender) smtp.mailfrom=antonkaltofen@oceanconsultant.co.uk
Date: Tue, 12 Mar 2024 11:39:04 +0100
From: antonkaltofen@oceanconsultant.co.uk
User-Agent: Roundcube Webmail/1.6.0
Message-ID: <e894d48ae253dff14801bbc2ff1f108b@oceanconsultant.co.uk>

Originating IP: 67.225.141.34
Originating ISP: Liquidweb
City: Bayonne
Country of Origin: United States

+447774819419 / +447818318787
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Vodafone Uk Ltd

[firefly]

The fake site used in scam claims to be a lender named Ocean Consultant. On their fake website, they also claim to be Blue Hills Finance.

From their fake website:

2007
Created to provide capital to small businesses. Evaluates business’ actual performance.
2010
Surpassed $100m in capital delivered to small businesses in all over Europe and America.
2015
Launched line of credit and long term loans. Expanded to Canada and Australia.
Today
Over $6B loaned. Innovative products & services. The leader in online small business lending.

Created to support and empower small businesses, Blue Hills Finance is 100% committed to serving its customers with the smartest financing solutions and world-class service.

Contact details:

253 Halo 158 High Street, London, England, E15 2FY
+447470455278
+447470455268
customerservice@oceanconsultant.co.uk
info@oceanconsultant.co.uk

+447470455278 / +447470455268

Number billable as mobile number
Country or destination United Kingdom
Original network provider* Vodafone Uk Ltd

The lender fake website pretending to be active since 2007 was created in June last year.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=166144

From the domain name registration:

Domain name:
oceanconsultant.co.uk

Data validation:
Nominet was not able to match the registrant's name and/or address against a 3rd party source on 29-Jun-2023

Registrar:
Liquidnet Ltd [Tag = LIQUIDNET]

Relevant dates:
Registered on: 29-Jun-2023
Expiry date: 29-Jun-2024
Last updated: 01-Jul-2023

Registration status:
Registered until expiry date.

Name servers:
ns53.qservers.net
ns54.qservers.net

This is what the fake lender website looks like:

[firefly]

Reply received:

I have an investor who is from Cambodia. He is Mr. SUCHOEM BUNNAROM, a
Project owner and the FOUNDER & CEO OF SOKKAN GROUP Co., LTD in
Cambodia.

I have knows him since over 15 years now and he has asked me to assist
him to invest in your country the value sum of $100million.

He does not want his privacy to be exposed after his business
counterpart Mr. Seam Pluk, president of the National Heart Party, has
been politically targeted and is currently on run.

You can click this link:
https: // www. rfa.org/english/news/cambodia/seam-pluk-04192022182501.html

Mr. Suchoem Bunnarom has initially wanted to establish a project in
Cambodia but due to the opposition's party aim on clamping down their
business empire, he has advised me to have the funds moved to your
country for a safe investment. The luxury housing project requires an
investment of more than 162 million US dollars on an area of 120,084
square meters and takes 72 months to complete.

Cambodia is a developing country in Asia and is between Vietnam, Laos,
Thailand, Malaysia and Singapore. They have a lot of modern
residential buildings and high-rise buildings, which makes the real
estate market in the country very attractive and popular for
investment there. The political problem the investor is having now is
so serious that he no longer want this project carried out in
Cambodia. The benefit of sales is higher for the real estate sector
there but his security is not guaranteed.

This is strictly confidential as he does not want his identity and
privacy to be exposed. His emails and calls are being monitored so he
has requested that I handle this transaction with discrete and should
not communicate him.

He has asked me for a support from a developing country where the
$100 million United State Dollars project will be transferred for
profitable establishment.

Please find my attached file below for your perusals.

Warmest Regards

Mr. Anton Kaltofen
Direct Line: +447774819419 whatsapp +447818318787
email: antonkaltofen@oceanconsultant.co.uk
www. oceanconsultant.co.uk

Header:

Return-Path: <antonkaltofen@oceanconsultant.co.uk>
Received: from twentysix.qservers.net (twentysix.qservers.net. [67.225.141.34])
Date: Sat, 16 Mar 2024 00:50:52 +0100
From: antonkaltofen@oceanconsultant.co.uk
Subject: Reply: xxx
User-Agent: Roundcube Webmail/1.6.0
Message-ID: <d94ab3d203a2b2ce78c501b942d06952@oceanconsultant.co.uk>

Originating IP: 67.225.141.34
Originating ISP: Liquidweb
City: Bayonne
Country of Origin: United States

Fake documents received with the message: