dr_maikanti_baruj@defenseministry.net

[firefly]

Money transfer scam.

Dear Friend!

Greetings to you! I am a consultant on security matters with the
ministry of defense Federal Republic of Nigeria –helping the
government solve its terrorism challenges.

In my search for a foreign partner, I got your contact through
the British Online business directory via our chamber of commerce
and Industry and I seek your cooperation in order to successfully
close a deal.

I am pleased to inform you of our intention to partner with you
in order to conclude a huge contract for the purchase and supply
of Military Hardware -being Contract from Federal Ministry of
Defense to the tune of Five Hundred Million United States
Dollars,in order to combat Insurgency and Banditry in the
Northeast and North Western part of the country.

This contract is 100% marked up - and an initial advancement of
Two Hundred & Fifty Million United States Dollars being 50%
percent mobilization that will be released upon our agreement and
signing of MOU -via any of the Overseas payment centers in
Europe/United States -to ensure transparency and to avoid all
bureaucratic bottlenecks of the past.

This supply contract is guaranteed as some powerful individuals
in the office of the President are the ones that have inserted
the purchase into the 2024 budget, and now, the funds have been
approved and ready for disbursement for the procurement to
commence.

The minister of Defense is my first cousin and has mandated me to
seek out and present a reputable and reliable person with a
viable company for the release of Payment to conclude this deal
on their behalf.

Let me know your honest opinion on this urgent matter as well as
your own *INTEREST* going forward, for us to have further
discussions and to furnish you with more details.


Accept my assurances of the highest esteem.

Yours faithfully,


Baruj Maikanti Esq.
Direct WhatsApp line -+44 7404097697

Header:

Return-Path: <service@centuryq8.com>
Received: from cloud-3e8643.managed-vps.net (cloud-3e8643.managed-vps.net. [78.128.60.99])
Received: from [102.69.221.153] (port=51729) by cloud-3e8643.managed-vps.net
Reply-To: dr_maikanti_baruj@defenseministry.net
From: "Dr. Maikanti Baruj" <service@centuryq8.com>
Subject: CONTRACT-SUPPLY
Date: 9 May 2024 13:04:09 -0700
Message-ID: <20240509130408.867586DD78667A2A@centuryq8.com>

Originating IP: 102.69.221.153
Originating ISP: Wirelessplus-3d
City: Accra
Country of Origin: Ghana

+447404097697
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Lycamobile UK Limited

[firefly]

Reply received:

Dear Mr. xxx

Many thanks again for your response and willingness to consummate this
transaction with us.

As I already informed you in my earlier mail; this contract is 100%
marked up and has the backing of the presidency, as powerful individuals
in the Office of the President are solidly behind it and have ensured
the necessary approvals are already in place for a smooth transfer of
funds for the supply to commence.

First and foremost, I really would like you to state categorically what
your INTEREST will be as we agree to work towards the actualization of
this transaction. This is very important as all interests is expected to
be captured in the Memorandum Of Understanding (MOU) that we have to
sign in order to safeguard our various interests.
Going forward, I want you to have it at the back of your mind this
transaction is legal and will be done within the ambit of the law. Due
process will be followed to the later.

Consequently, I will request you send in your company name, address and
any other relevant information you may deem necessary for me to
officially register your company name with the Corporate Affairs
Commission (CAC) as a Bona fide contractor and service provider with the
Defense Ministry —so we can initiate the process of a hitch free
transfer of the approved funds to your nominated account in any bank of
your choice around the world for the procurement to commence.

I have also attached an Internal Memo issued to my office from the
Office of the Honorable minister of Defense mandating me to find a
reputable company to partner with us and consummate this deal.

Please expedite action on the requested information for us to initiate
the process.

Thanking you again for your cooperation.

Kind regards!

Dr. Maikanti Baruj

Header:

ARC-Authentication-Results: i=1; mx.google.com;
dkim=temperror (no key for signature) header.i=@defenseministry.net header.s=default header.b=LODD9mUt;
spf=pass (google.com: domain of dr_maikanti_baruj@defenseministry.net designates 111.90.133.136 as permitted sender) smtp.mailfrom=dr_maikanti_baruj@defenseministry.net
Return-Path: <dr_maikanti_baruj@defenseministry.net>
Received: from server3-ip36.mailsentinel.net (server3-ip36.mailsentinel.net. [111.90.133.136])
Received: from marten1.ipchina163.com ([111.90.142.42]) by server2.mailsentinel.net with esmtpsa (TLSv1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from <dr_maikanti_baruj@defenseministry.net>) id 1s6qD3-0038Se-CY
Date: Tue, 14 May 2024 19:20:35 +0800
From: dr_maikanti_baruj@defenseministry.net
Subject: Re: CONTRACT-SUPPLY
User-Agent: Roundcube Webmail/1.6.6
Message-ID: <4bc084a2909a4732e740b59bed6a985a@defenseministry.net>

Originating IP: 111.90.133.136
Originating ISP: Shinjiru Technology Sdn Bhd
Country of Origin: Malaysia

Fake document received with the message:

[firefly]

The fake site used in scam is a spoof of the Ministry of Defence Nigeria.

The fraudulent domain name shows no content and is used only for the email address.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=167216

From the domain name registration:

Domain Name: DEFENSEMINISTRY.NET
Updated Date: 2024-01-11
Creation Date: 2024-01-11
Expiration Date: 2025-01-11
Registrar: WEBCC

Registry Registrant ID: Not Available From Registry
Registrant Name: JULIA Rockwell
Registrant Organization: unknown
Registrant Street: 304 N 1st Ave
Registrant City: Wisconsin
Registrant State/Province: WI
Registrant Postal Code: 54245
Registrant Country: US
Registrant Phone: +1.5034013019
Registrant Email: jobsdave9@gmail.com

The email address jobsdave9@gmail.com was used to register over 120 fraudulent domain names, with the first one being reported back in 2014.