info.cyberw@centraoffshoredepts.org

[Wayne]

Scammer's email address.: info.cyberw@centraoffshoredepts.org

Content of the email.: Did you Lose Money to Crypto scam or online scam? It's not too late. Get your money back. We are Team of Experts who specialize in Recovering Lost funds. We shall help you recover your lost digital currency, You are required to send us the scammer investment platform, all the screenshots of your payment, the scammer wallet, and the total amount lost. Also provide your mobile number.

Looking forward to your response.
Regards,

=====================================================
Mitnick Security Consulting | Cyber Security Services.
Security Services and Support:
info.cyberw@centraoffshoredepts.org
Kevin Mitnick
Security Consultant, Public Speaker, & Author Whistling ICBM launch codes since 1988
=====================================================

[Big Al]

Yes we can help you get your 5,000$ back, all we require from you is to send us the trading platform, scammers wallet address and your WhatsApp number or telegram number for easy conversation.

Header:

Delivered-To:
Received: by 2002:a98:d716:0:b0:1f2:e36d:6454 with SMTP id y22csp3214867eik;
Mon, 1 Apr 2024 12:21:28 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IGwysh62IYluwiCP96GbzaPlrilnZqlUJzdLFKyZd9ABhlRo4xMZZCPB2GEAqV7+LroQXFC
X-Received: by 2002:a17:906:3c58:b0:a45:ab98:aec with SMTP id i24-20020a1709063c5800b00a45ab980aecmr8572273ejg.10.1711999288188;
Mon, 01 Apr 2024 12:21:28 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1711999288; cv=none;
d=google.com; s=arc-20160816;
b=hib7a5sDV2ZZyVmQ8ZUoOWJ+nq+p72QeVT9xzdD7rlvrDuZPJvQ+d0bUcBF0Bl3j9+
6aP0IhNLEf5pGEMvnJud945HCCwgc8HrCZJsGw50RqljZhsmoYLeSKg4nRno+TzpI49V
fcJRzxAUKF1D1syD5jq/sTyn6u1VeGa2G7dth11tyDPiA7vpltQqJPE/F1FFCkfi4gHL
KfOp+5w+HVVGIUryyQYmrcWksEYg/aS4ncAZgCCcbsyyNAv9msuimBs//XoYoeFOIDbg
bWO1r2hXUcyFOk0gEbdJc9gew9UoF6KApBTvzXlkliGBTTlz2e5ZWaNpSGqGVH4ebg7J
RpNg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=message-id:references:in-reply-to:subject:to:from:date:mime-version
:dkim-signature;
bh=lKCQty0O8CLkwb9blY99OkmjxBW3xqIy7+gltQAt7d8=;
fh=0RFCJIAPR+e1Q9RvwWpa7jEdafSSc9EFn/a1vSFGk1Y=;
b=WbbFPsSQ+w5NpsfvssA0h1e5bcavDIywFdE3paszI/8tFgFtOXaKp6XZLlCW8UxzrN
t1D83cnghImr/ugndPrlK6Z0MH6MXyt2JaKbKsL4fQf8Xz6zjhh2gbicAGf0zUUAK9eE
d4HqhqXQK1C3xI7bgvD64IlLDM0lHIiRJ4YrlsIkJSj4/Q/kV+W26Aitnn3+Yj00dmF6
sNNfSGGTD5u/cb2ZPIAinm67NP2dW1Vd2ptXYyVjaC4DxMaKGl5VJX5wKMS4QSjmPUK/
g5PLzu4ISALU8GLnSOw9XK19eyM4jN1SsWzMsbk4PsrLJZ8G11bwl2LfHTQJZKgZ4k7T
SEjQ==;
dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
dkim=fail header.i=@centraoffshoredepts.org header.s=x header.b=BJCGP8G+;
spf=pass (google.com: domain of info.cyberw@centraoffshoredepts.org designates 198.251.84.129 as permitted sender) smtp.mailfrom=info.cyberw@centraoffshoredepts.org
Return-Path: <info.cyberw@centraoffshoredepts.org>
Received: from d5.my-control-panel.com (d5-129.my-control-panel.com. [198.251.84.129])
by mx.google.com with ESMTPS id bg15-20020a170906a04f00b00a46a6459f50si4794400ejb.783.2024.04.01.12.21.27
for < >
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 01 Apr 2024 12:21:27 -0700 (PDT)
Received-SPF: pass (google.com: domain of info.cyberw@centraoffshoredepts.org designates 198.251.84.129 as permitted sender) client-ip=198.251.84.129;
Authentication-Results: mx.google.com;
dkim=fail header.i=@centraoffshoredepts.org header.s=x header.b=BJCGP8G+;
spf=pass (google.com: domain of info.cyberw@centraoffshoredepts.org designates 198.251.84.129 as permitted sender) smtp.mailfrom=info.cyberw@centraoffshoredepts.org
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=centraoffshoredepts.org; s=x; h=Content-Type:Message-ID:References: In-Reply-To:Subject:To:From:Date:MIME-Version:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=lKCQty0O8CLkwb9blY99OkmjxBW3xqIy7+gltQAt7d8=; b=BJCGP8G+5b/3nhaXmQnDgyLyBh WLCZYQfNkJGguAubUBSA/o/PuMkQWMPZnJ4O26l6lfwYjWRNW1746irOR8PZE2/sj0Q8TgQVpQoTs GZvs1/mtzByOKuaTo15gYff6UXRReCJkf1H6SZ1bPWmGfeJp2Ojq1oUcaFSd8Av/IqpfQr7F6oMES YwtzsY4dvucpVg15K2iDf2qjBd6TY6eUVOBsuEM/TxyzCti4lL+T/e3fH8JNqu9w29NKvhWGy5e/J 8+HtJZjnlcgPsG7WN+ENAAdOJREflNx4USy0c/A7t6SQ5XWmgP8eVzyGB5EJf2HNln8BULQ4Rbp4P oC04DChw==;
Received: from [127.0.0.1] (helo=d5.my-control-panel.com) by d5.my-control-panel.com with esmtpa (Exim 4.97.1) (envelope-from <info.cyberw@centraoffshoredepts.org>) id 1rrNDj-00000006nmt-0WEd for ; Mon, 01 Apr 2024 21:21:27 +0200
MIME-Version: 1.0
Date: Mon, 01 Apr 2024 22:21:26 +0300
From: Cyber Security Services <info.cyberw@centraoffshoredepts.org>
To:
Subject: Re: FUNDS RECOVERY
In-Reply-To: <CABwrbKqppvsoz1UqWajYBoVdUTNf3ORSL+_R8VxWk-GwFycc1g@mail.gmail.com>
References: <e3d8c0460c41dd117684a8d04101f528@centraoffshoredepts.org> <CABwrbKqppvsoz1UqWajYBoVdUTNf3ORSL+_R8VxWk-GwFycc1g@mail.gmail.com>
Message-ID: <100acac4934165ef5805d735694a38e6@centraoffshoredepts.org>
X-Sender: info.cyberw@centraoffshoredepts.org
Content-Type: multipart/alternative; boundary="=_0e1fe9286401a445adc76b30dd6495b2"
X-Authenticated-Id: info.cyberw@centraoffshoredepts.org

--=_0e1fe9286401a445adc76b30dd6495b2
Content-Transfer-Encoding: 8bit

[Big Al]

we shall carefully analyze the wallet to see if your funds are still recoverable, we advise you install WhatsApp on your phone for easy conversation and text us on WhatsApp +19173843379

Phone: +19173843379
Number billable as mobile number
Country or destination United States
City or exchange location New York City, NY
Original network provider* Usa Mobility Wireless, Inc.

[Big Al]

That is the reason I said we continue this conversation on WhatsApp

[firefly]

The fake site used in scam is a spoof of Mitnick Security Consulting.

The fraudulent domain name shows no content and is used only for the email address.

Entry in the aa419 database of fraudulent websites: https://db.aa419.org/fakebanksview.php?key=166650

From the domain name registration:

Domain Name: CENTRAOFFSHOREDEPTS.ORG
Updated Date: 2024-03-20
Creation Date: 2024-03-20
Registrar Registration Expiration Date: 2025-03-20
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Saman thaRe
Registrant Street: 21WEndAve
Registrant City: NewYork
Registrant State/Province: New York
Registrant Postal Code: 10023
Registrant Country: US
Registrant Phone: +1.9146299400
Registrant Email: portcazhar@gmail.com

Back in 2019 when it was reported for the first time, the email address portcazhar@gmail.com was used to register the fraudulent domain name royalmtrustc.com - Royal Majestic Trust Corporation, by someone pretending to be:

Registrant Name: Adam Smolarchuk
Registrant Organization: Adam Smolarchuk
Registrant Street: 9008 SCOTT CRES NW
Registrant City: EDMONTON
Registrant State/Province: AB
Registrant Postal Code: T6R0E3
Registrant Country: CA
Registrant Phone: +1.6049002526
Registrant Email: portcazhar@gmail.com