Rental Scam - [email protected]

[Bryon Williams]

From: < [email protected] >
Subject: Lease Agreement

Hello

We wish to inform you that your rental application has been approved. Please see attachment for the duly signed lease agreement. You may now review same, sign the column provided and proceed with the required payment to validate the lease and complete the rental process.

After making the payment, you are to send in a copy of the bank payment slip along with the signed lease agreement to us for documentation purposes and easy integration into the apartment tenant database.

Upon receipt of the signed lease agreement and deposit slip, arrangements will immediately be made to send one month tenant receipt to you as confirmation of your reservation and the unit will be held on your name.

We look forward to your email of the signed lease and payment receipt so we can confirm your reservation and also to a pleasant relationship with you during your entire stay at the apartment.

Payment bank transfer:

Bank Name: JP Morgan Chase Bank
Account Holder: Rudolph George Dunmore
Account Holder Address: 338 West 17th Street, New York, NY 10011
Account Number: 878209639
Routing Number: 322271627

This Scammer will arrange to send you an Invoice -- Make no mistake, the Invoice will be fake !
If you are reading this because you have received such an invoice, kindly forward it to the address in my signature line and I will report the details to the appropriate authorities.

[Bryon Williams]

Delivered-To: xxxxxxxx
Received: by 10.12.136.71 with SMTP id 7csp1434105qvm;
Thu, 25 Jan 2018 12:58:20 -0800 (PST)
X-Google-Smtp-Source: AH8x224tOEwtnRolw8RyCx9m9MdwBXLPCm4JcATNNdyxf6P3DBHVss6VIExCLKoar3H+fFg3yO6V
X-Received: by 10.28.92.70 with SMTP id q67mr8808687wmb.43.1516913899557;
Thu, 25 Jan 2018 12:58:19 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1516913899; cv=none;
d=google.com; s=arc-20160816;
b=aMp7tmBVOmh8NU+sqJaPhSPwCBQeeQDw+3vQ7stGQnTIKZF8Hd0ot/oHwmGqzsVJ9Z
xgjt8vHjDmqcSoTv/+rmIG/ZmyLnhswX1AktZQfN7oZMl2NLMqvpkLOPU3dTjdKkuh9Y
vkbsxNEEkYTrwkl0VT4DZ3TQtMypwZf3gClDmOnNu5j6fkc9CccJB1KLgoYKUlQSnO+D
rs1243Giv37oHC4itOT+YP4FzvzkwrrQ5YFWZalSG+f+FrCRaZ59rOtrbFKc/SNWmD5U
Q2Q61bNS990V006k60gmm6tgHxiXi5uv0zaNaE6NheC8xL0RJRklQ26s4bLZsAoK1qIK
L71Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:message-id:subject:to:frommime-version
:dkim-signature:arc-authentication-results;
bh=gIlXurdDukXfkmnexYRSHJng5VFve+06WXY3SJS9bGY=;
b=uRl5I4pUVFbAc8au4E4rbo8rFBgsR08onWj+1k1XyWWfwHUn5zw9wR66oM5p6q5Oui
xiP+S4SXT1dXGGY/qIg+8xYe0NIAyyFWEskHiOHCaO7iMsIy5YLfD0ei2Z70dauq5qbP
QAjaDawEilAHzWJ3vyyb7o7+2kQORBbB6ckq3CLmZGdbA05VrCVWAYsh9AgeebQlLQPQ
JI4EJ0k8qvijJV4qZttUVPEv2EgZ6DFEvjPRpicN/rVzh8b33u6HSOelhbJ8hg+QoeMX
/eAfqVZunaeEl7PhBI1wjAQbWu55C3rEiPVbnjt4Qhm4+oVv8UOBxFm5LcVTOk7OQNWV
iIag==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=default header.b=AHi/1O6t;
spf=pass (google.com: domain of [email protected] designates 94.130.160.40 as permitted sender) smtp.mailfrom=[email protected]
Return-Path: <[email protected]>
Received: from eu76.hostblast.net (dns76.hostblast.net. [94.130.160.40])
by mx.google.com with ESMTPS id 62si1385658wmd.274.2018.01.25.12.58.19
for <xxxxxx>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 25 Jan 2018 12:58:19 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 94.130.160.40 as permitted sender) client-ip=94.130.160.40;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=default header.b=AHi/1O6t;
spf=pass (google.com: domain of [email protected] designates 94.130.160.40 as permitted sender) smtp.mailfrom=[email protected]
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=crownsproperty.com; s=default; h=Message-ID:Subject:To:From:Date: Content-Type:MIME-Version:Sender:Reply-To:Cc:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=gIlXurdDukXfkmnexYRSHJng5VFve+06WXY3SJS9bGY=; b=AHi/1O6ty82qybW3+jjwWEGHE EiWeReR309fryESrYCxgYwYEh9ThZMX0wJrewza+VNfPX4CXJvd/5Dz3GQTGWXdjsSOpOUGCTN+A6 DD5+xm42xoheSvFeCJMND2uklD1tr+JXNHSxaBsnkWoPEPCU0FUsjHjebuAIPL+W4XMWmShITrvGV Q+vctHdDlFlhx8EVIyHlP+1jQJi/HHTPu9MFksz6J1H6YCicLJv/5303jh+TyTB2hJUG1VqQ1Maml qG8iWlFFe3ArXrpqU+kxddYSHRtASWCo0VWDgrzQZvFhdUJa4HQKX+KkU9qlkQElCNabIJRlitXfr lVfwNrbXA==;
Received: from [::1] (port=36412 helo=eu76.hostblast.net) by eu76.hostblast.net with esmtpa (Exim 4.89_1) (envelope-from <[email protected]>) id 1eeocZ-002UTq-S3 for xxxxxx; Thu, 25 Jan 2018 21:59:43 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=_274464e96182e561b2ca318656f5a5df"
Date: Thu, 25 Jan 2018 21:59:43 +0100
From: [email protected]
To: xxxx
Subject: Lease Agreement
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.3.3
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - eu76.hostblast.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - crownsproperty.com
X-Get-Message-Sender-Via: eu76.hostblast.net: authenticated_id: [email protected]
X-Authenticated-Sender: eu76.hostblast.net: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:

--=_274464e96182e561b2ca318656f5a5df
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII; format=flowed

Hello

We wish to inform you that your rental application has been approved.
Please see attachment for the duly signed lease agreement. You may now
review same, sign the column provided and proceed with the required
payment to validate the lease and complete the rental process.

After making the payment, you are to send in a copy of the bank payment
slip along with the signed lease agreement to us for documentation
purposes and easy integration into the apartment tenant database.

Upon receipt of the signed lease agreement and deposit slip,
arrangements will immediately be made to send one month tenant receipt
to you as confirmation of your reservation and the unit will be held on
your name.

We look forward to your email of the signed lease and payment receipt so
we can confirm your reservation and also to a pleasant relationship with
you during your entire stay at the apartment.
--=_274464e96182e561b2ca318656f5a5df
Content-Transfer-Encoding: base64
Content-Type: application/pdf; name="NEW YORK LEASE AGREEMENT .pdf"
Content-Disposition: attachment; filename="NEW YORK LEASE AGREEMENT .pdf"; size=290909


--=_274464e96182e561b2ca318656f5a5df--

Domain Name: CROWNSPROPERTY.COM
Registry Domain ID: 2207760641_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: http://www.namesilo.com
Updated Date: 2018-01-02T17:59:05Z
Creation Date: 2018-01-02T17:59:05Z
Registry Expiry Date: 2019-01-02T17:59:05Z

Fake contact from the site:
MASSACHUSETTS
304 Newbury street,
Boston MA, 02116
Phone: 617-649-9653

SAN FRANCISCO
1 Hawthorne Street,
San Francisco Ca, 94105
Phone: 415-636-6005

NEW YORK
247 W 11th street,
New York NY, 1001 4
Phone: 646-586-8839

[Bryon Williams]

(617) 649-9653
Non-Fixed VoIP
e.g. Skype or Google Voice

(415) 636-6005
Non-Fixed VoIP
e.g. Skype or Google Voice

(646) 586-8839
Non-Fixed VoIP
e.g. Skype or Google Voice

[Bryon Williams]

Greg Sesso < [email protected] >, wrote:
> Hello
>
> We wish to inform you that your rental application has been approved.
> Please see attachment for the duly signed lease agreement. You may now
> review same, sign the column provided and proceed with the required
> payment to validate the lease and complete the rental process.
>
> After making the payment, you are to send in a copy of the bank payment
> slip along with the signed lease agreement to us for documentation
> purposes and easy integration into the apartment tenant database.
>
> Upon receipt of the signed lease agreement and deposit slip,
> arrangements will immediately be made to send one month tenant receipt
> to you as confirmation of your reservation and the unit will be held on
> your name and taken off the market pending your arrival for moving in on
> 01/30/2018.
>
> You are entitled to a full refund of your deposit if the unit does not
> conform to your taste on your move-in date. This is clearly stated in
> the lease agreement.
>
> We look forward to your email of the signed lease and payment receipt so
> we can confirm your reservation and also to a pleasant relationship with
> you during your entire stay at the apartment.
>
> Looking forward to read your email soon
>
>
> Sincerely,
>
> Greg Sesso
> 315-351-2067
> email: [email protected]

This Scammer will arrange to send you an Invoice -- Make no mistake, the Invoice will be fake !
If you are reading this because you have received such an invoice, kindly forward it to the address in my signature line and I will report the details to the appropriate authorities.

[Bryon Williams]

[email protected]

(315) 351-2067
Non-Fixed VoIP
e.g. Skype or Google Voice

[Bryon Williams]

Payment bank transfer:

Bank Name; WELLS FARGO
Account Holder Name: EMMANUEL ANTHONY
Account Holder Address; 55 West 26th Street. New York NY 10010
Account Number; 2060347339
Routing Number; 1 11900659
Swift Code: WFBIUS6S

This Scammer will arrange to send you an Invoice -- Make no mistake, the Invoice will be fake !
If you are reading this because you have received such an invoice, kindly forward it to the address in my signature line and I will report the details to the appropriate authorities.

[PHT]

Seems like this scammer is still active; with a new name (Brady) and a new website called PacwayProperty.

[email protected]

Thankfully he was stupid enough to use the same phone number, hence how I found this (useful) forum.

I guess same modo operandi as usual, beautiful and cheap place that you can't visit (due to Covid, how convenient), and sign a lease online blablabla.

So I hope Google will linkup Pawayproperty.com to the scam that it is!