Mr. Chao Shu Chung [email protected]

[Tim Atem]

I don't have an email from the domain itself yet, but the domain boa-usa.com is a fake!

Domain Name: BOA-USA.COM
Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.REGISTRAR-SERVERS.COM
Name Server: DNS2.REGISTRAR-SERVERS.COM
Name Server: DNS3.REGISTRAR-SERVERS.COM
Name Server: DNS4.REGISTRAR-SERVERS.COM
Name Server: DNS5.REGISTRAR-SERVERS.COM
Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Updated Date: 10-mar-2015
Creation Date: 10-mar-2015
Expiration Date: 10-mar-2016

Delivered-To: <snipped>
Received: by 10.107.39.139 with SMTP id n133csp1256562ion;
Fri, 18 Dec 2015 10:09:37 -0800 (PST)
X-Received: by 10.50.143.4 with SMTP id sa4mr4660871igb.76.1450462177398;
Fri, 18 Dec 2015 10:09:37 -0800 (PST)
Return-Path: <[email protected]>
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2hn0248.outbound.protection.outlook.com. [65.55.169.248])
by mx.google.com with ESMTPS id d16si12152554igo.8.2015.12.18.10.09.34
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 18 Dec 2015 10:09:37 -0800 (PST)
Received-SPF: neutral (google.com: 65.55.169.248 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=65.55.169.248;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 65.55.169.248 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mailfrom=[email protected]
Authentication-Results: spf=none (sender IP is )
smtp.mailfrom=[email protected];
Received: from [204.151.8.137] (204.151.8.137) by
BN3PR1001MB1186.namprd10.prod.outlook.com (10.165.74.148) with Microsoft SMTP
Server (TLS) id 15.1.355.16; Fri, 18 Dec 2015 18:09:29 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Wire Transfer of $50,500,000.00.
To: Recipients <[email protected]>
From: Bank of America <[email protected]>
Date: Fri, 18 Dec 2015 13:09:14 -0500
Reply-To: <[email protected]>
X-Originating-IP: [204.151.8.137]
X-ClientProxiedBy: DM3PR14CA0018.namprd14.prod.outlook.com (25.164.193.156) To
BN3PR1001MB1186.namprd10.prod.outlook.com (25.165.74.148)
Return-Path: [email protected]
Message-ID: <BN3PR1001MB1186CB42508566BBEEF86C58E4E10@BN3PR1001MB1186.namprd10.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics:
<snipped>
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR1001MB1186;
X-Microsoft-Antispam-PRVS: <BN3PR1001MB1186792BE6E7ED1F9CE90309E4E10@BN3PR1001MB1186.namprd10.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: <snipped>
X-Forefront-PRVS: 07943272E1
X-Forefront-Antispam-Report: <snipped>
Received-SPF: None (protection.outlook.com: nic11.0fees.us does not designate
permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: <snipped>
X-Microsoft-Exchange-Diagnostics: <snipped>
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: nic11.0fees.us
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Dec 2015 18:09:29.6684
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR1001MB1186

Dear Valued Customer,

Sir,

Re: Wire Transfer of $50,500,000.00.

Please be informed that a payment worth sum of (US$50,500,000.00) has been approved through Bank of America. We advise you send your full name, contact address, copy of your id and telephone number, to enable us process your payment.

Regards,

Mr. Chao Shu Chung
Account Department

Bank of America.
Utah - USA.