Fake: Query Regarding Purchase Procedures for Product Information

I am writing to inquire about this products listed on your website. Could you kindly provide a quote with lead time including specifications & pricing.

Attcking email

Complete Email


I hope this email finds you well. I am writing to inquire about the products listed on your website.

Could you kindly provide a quote with lead time including specifications and pricing for the following products for our newly opened company in Norway.

Attached are the drawings and step files. Additionally, I would appreciate any information on payment methods and shipping options to Port of Flekkefjord and provide the possible delivery date.

Thank you for your prompt attention to this matter. I look forward to your response.

Best regards,

Martin Dvorak
Export Specialist
VitalThings AS

Red Flag

This email contains several red flags that could indicate it is part of a phishing attempt or scam. Here's a breakdown of these red flags:

  1. Email Address: The sender's email address "orval@daophuochai1289.shop" appears suspicious. Legitimate business correspondence typically comes from professional or company domain email addresses, not generic or unusual domains like ".shop".

  2. Mismatch Between Sender's Name and Email Domain: The sender's name, Martin Dvorak, and the provided company name, VitalThings AS, do not match the domain of the sender's email address. This inconsistency is a common tactic in phishing emails to make the message seem legitimate at first glance.

  3. Unsolicited Attachment: The email mentions attached drawings and step files. Unsolicited attachments are a common method for spreading malware. It's a best practice to avoid opening attachments from unknown or suspicious sources.

  4. Vague References: The email vaguely refers to "this products listed on your website" without specifying which products. Scammers often use generic language to send the same email to multiple potential victims.

  5. Request for Quotes for an Unspecified "Newly Opened Company": While not inherently suspicious, scammers sometimes pretend to represent a new or foreign company to avoid scrutiny or verification.

  6. Urgency or a Request for Prompt Attention: Phrases like "Thank you for your prompt attention to this matter" are designed to rush the recipient into responding without taking the time to verify the legitimacy of the email.

  7. Contact Information Mismatch or Plausibility: While the provided phone number seems to be Norwegian (+47), which aligns with the claim of the company being in Norway, discrepancies or inconsistencies in contact information are common in scam emails. Always verify through independent sources.

  8. Generic Signature: The signature "Export Specialist" along with a generic name and position, without additional verifiable information or links to a legitimate company website, can be a red flag.

To safely respond to or verify the legitimacy of this email, consider the following steps:

  • Do not open the attachments unless you can verify the sender's identity and the email's legitimacy through other means.
  • Look up VitalThings AS online to find contact information, and reach out directly through official channels to verify the email.
  • Be cautious with providing sensitive information or agreeing to financial transactions based on unsolicited emails.

Always err on the side of caution with emails that contain one or more of these red flags.