brysonmikolaj@bmarchitectconstruction.com

[firefly]

Posted on behalf of the victim.

The victim was contacted on LinkedIn by someone pretending to be architect, CEO of B.M Architect Construction. After a short period of romance, the scammer asked for the victim financial help. As a proof he can pay back the money he is asking for, he offered the login details to his bank account on a website pretending to be Citi Bank.
heck
The victim realized is a scam and asked us to check the bank. Not only that the website of the bank were the victim was sent is fake, but also the "company" website the scammer used is also fake.

The scammer claimed his name is Bryson Mikolaj. He was using the email address brysonmikolaj@bmarchitectconstruction.com.

The fake bank is active from the domain name enaccess-cgb.com.

Stolen pictures used in scam:

[firefly]

From the fake site used in scam:

Bryson Mikolaj BM Architect Construction founded a construction company in 1975. They named it BM Architect Construction Brothers Corporation and opened first offices Vancouver

.

BM Architect Construction Company was founded in Vancouver in 1975 and is a leader in the British Columbia construction industry.

Contact details:

Main Office
Phoenix, Arizona
602- 800-0351
brysonmikolaj@bmarchitectconstruction.com

The "CEO" picture on the fake site:



+16028000351
Type: Non-Fixed VoIP (e.g. Skype or Google Voice)
Original carrier: Onvoy, Llc - Az

For the fake site details: https://db.aa419.org/fakebanksview.php?key=136820

From the fake site details:

Domain Name: BMARCHITECTCONSTRUCTION.COM
Updated Date: 2018-11-24
Creation Date: 2018-09-24
Registrar Registration Expiration Date: 2019-09-24
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Catherine Curran
Registrant Organization:
Registrant Street: 6635 N Ramona
Registrant City: Lincolnwood
Registrant State/Province: IL
Registrant Postal Code: 60712
Registrant Country: US
Registrant Phone: +1.8635107460
Registrant Email: chukstenders@gmail.com

This is what the fake site looks like:

[firefly]

The fake bank where the victim was sent shows apparently no content, if the victim does not use the exact link received from the scammer.

The fake website uses stolen content from the real Citi Bank website.

Contact details on the fake site:

BRANCH: Malaysia
Address: 473 PERDANA MALL, KUALA LUMPUR, MALAYSIA
BRANCH: UK
CONTACT NUMBER: +44 75 3712 9572
Address: NORTH LONDON, UNITED KINGDOM
BRANCH: USA
CONTACT NUMBER: +1 509 645 3485 +1 618 613 4456
Address: 683 ST STREET, CHARLOTTE, NORTH CAROLINA, USA
BRANCH: Turkey
Address: 161/1 SG Tower; Soi Mahatlekluang 3; Rajdamri Road.
BRANCH: AFGHANISTAN
Address: Street 64 Lane , Kabul , Afghanistan.
Email: customerservice@enaccess-cgb.com

+447537129572
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Stour Marine Limited

+15096453485
Type: Non-Fixed VoIP (e.g. Skype or Google Voice)
Original carrier: Onvoy, Llc - Wa

+16186134456
Type: Non-Fixed VoIP (e.g. Skype or Google Voice)
Original carrier: Level 3 Communications, Llc - Il

For the fake site details: https://db.aa419.org/fakebanksview.php?key=136819

From the fake site details:

Domain Name: ENACCESS-CGB.COM
Updated Date: 2018-05-28
Creation Date: 2017-05-18
Registrar Registration Expiration Date: 2019-05-18
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registrant Name: Catherine Curran
Registrant Street: 6635 N Ramona
Registrant City: Lincolnwood
Registrant State/Province: IL
Registrant Postal Code: 60712
Registrant Country: US
Registrant Phone: +1.8635107460
Registrant Email: chukstenders@gmail.com

This is what the fake site looks like:

[firefly]

Back in 2017, at least one of those pictures was used with a fake profile on Twitter:

Markson williams
@WilliamsMarkson
Philadelphia, PA
Joined February 2017

i'm proud to be a united state army.

Type of messages he used:

hello xxx , is my pleasure to meet you here , kindly permit me to know you better , i like to meet you