jerrydec@boa-org.com

[firefly]

Recovery scam.

CONGRATULATION
PLEASE CONTACT THE BANK NOW
This is to inform you that we have finalized with Bank of America to pay you your inheritance payment go ahead and contact them with information below and make sure you get back to me so that I will know exactly the day you has been paid okay Mr. Jerry Decembre
Brokers License No: IFSC/000102/198.
Address: 1229 Route 27, Somerset, NJ 08873 USA.
Telephone Number: +1 (718) 956-3089. (Whatsapp Number)
Telephone Number: +1 (732) 201-2221.
Official email: jerrydec@boa-org.com
Private email:jerrydecembre@aol.com

PLEASE GET BACK TO ME FOR AN UPDATE

THANKS

Header:

Return-Path: <william.jcallahan011@gmail.com>
From: "william.j callahan" <william.jcallahan011@gmail.com>
Date: Wed, 1 Feb 2023 11:40:57 +0100
Message-ID: <CAEbaAjDcuQ4rR5X84m2xCK4qer-ddkbJgVTaREXw7bZA39SPCg@mail.gmail.com>
Subject: CONGRATULATION
To: undisclosed-recipients:;

+17189563089
Number billable as geographic number
Country or destination United States
City or exchange location New York City, NY
Original network provider* Verizon New York Inc.

+17322012221
Number billable as geographic number
Country or destination United States
City or exchange location Keansburg, NJ
Original network provider* Comcast Business Communications, Llc - Nj

[firefly]

Reply received:

ATTENTION xxx

We are here to serve you better make sure that you receive your money into your nominated bank account .Reconfirm your bank details where you want your money to be transferred

BENEFICIARY BANKING DETAILS:


Bank Name:.............
Address:..................
Swift Code: .............
Routing No:................
Account Number:........
Account Name:............

Brokers License No: IFSC/000102/198.
Address: 1229 Route 27, Somerset, NJ 08873 USA.
DirectTelephone Number: +1 (201) 298-3876. (Whatsapp Number)
Office Telephone Number: +1 (732) 201-2221.
Official email: jerrydec@boa-org.com
Private email:jerrydecembre@aol.com

Header:

Return-Path: <jerrydec@boa-org.com>
Received-SPF: pass (domain of boa-org.com designates 162.210.70.34 as permitted sender)
Authentication-Results: atlas-production.v2-mail-prod1-gq1.omega.yahoo.com;
dkim=pass header.i=@boa-org.com header.s=20220225;
spf=pass smtp.mailfrom=boa-org.com;
dmarc=unknown header.from=boa-org.com;
Received: from 162.210.70.34 (EHLO us2-ob2-5.mailhostbox.com)
Date: Tue, 07 Feb 2023 06:43:14 -0800
From: BOA <jerrydec@boa-org.com>
Subject: ATTENTION xxx
User-Agent: Roundcube Webmail/1.4.8
Message-ID: <3c6fd3afb7b4832af70acb0b4d086148@boa-org.com>

Originating IP: 162.210.70.34
Originating ISP: Public-domain-registry
Country of Origin: United States

[firefly]

The fake site used in scam is a spoof of Bank of America.

The fraudulent domain name shows no content and is used only for the email address, as in jerrydec@boa-org.com.

Entry in the aa419 databae of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=159954

From the domain name registration:

Domain Name: BOA-ORG.COM
Updated Date: 2022-04-27
Creation Date: 2022-02-25
Registrar Registration Expiration Date: 2023-02-25
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: GDPR Masked
Registrant Name: GDPR Masked
Registrant Organization: GDPR Masked
Registrant Street: GDPR Masked
Registrant City: GDPR Masked
Registrant State/Province: Paris
Registrant Postal Code: GDPR Masked
Registrant Country: FR