Scams re-targeting those who have already been victimized
#354607 by Tim Atem Sun Feb 04, 2018 6:42 am
from: FBI - [email protected]
reply-to: [email protected]

HAVE YOU LOST ANY OF YOUR MONEY TO SCAMMERS BEFORE,EMAIL BACK TO US NOW FOR ALL YOUR LOST MONEY



imperialtextilecompany-uk.com is an email-only domain registered to [email protected]

Domain Name: imperialtextilecompany-uk.com
Registry Domain ID: 2097779758_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: https://www.namesilo.com/
Updated Date: 2018-02-03T07:00:00Z
Creation Date: 2017-02-14T07:00:00Z
Registrar Registration Expiration Date: 2018-02-14T07:00:00Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.4805240066
Reseller: QHOSTER.COM
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Jhazmin Ozolini
Registrant Organization:
Registrant Street: 7 Djusina
Registrant City: Belgrade
Registrant State/Province: Central Serbia
Registrant Postal Code: 11000
Registrant Country: RS
Registrant Phone: +381.113037432
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: Jhazmin Ozolini
Admin Organization:
Admin Street: 7 Djusina
Admin City: Belgrade
Admin State/Province: Central Serbia
Admin Postal Code: 11000
Admin Country: RS
Admin Phone: +381.113037432
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: Jhazmin Ozolini
Tech Organization:
Tech Street: 7 Djusina
Tech City: Belgrade
Tech State/Province: Central Serbia
Tech Postal Code: 11000
Tech Country: RS
Tech Phone: +381.113037432
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: [email protected]
Name Server: NEIL.NS.CLOUDFLARE.COM
Name Server: WANDA.NS.CLOUDFLARE.COM
DNSSEC: unsigned

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

#361324 by Frost Thu Apr 05, 2018 5:27 am
From: FBI <[email protected]> via gmail.com
Reply-to: [email protected]


Fake Registrant details.

Registrar's address belong to: Faculty of Mining And Geology.
http://www.rgf.bg.ac.rs/index.php?menu=kontakt&lang=en



Email headers:
Received: by 10.74.166.75 with SMTP id j11csp4988982oom;
Wed, 4 Apr 2018 09:55:50 -0700 (PDT)
X-Received: by 10.28.63.212 with SMTP id m203mr7956037wma.124.1522860950785;
Wed, 04 Apr 2018 09:55:50 -0700 (PDT)
ARC-Seal: i=3; a=rsa-sha256; t=1522860950; cv=pass;
d=google.com; s=arc-20160816;
b=tBLCrQSVgl7KzkgazWWZLdbkFnozD6+peuaEifLVI4s7MSwfpZWARU4CrF56IDVH/A
TjwKZAWU7DgaAhioZ7pdXdtCkiU3yEsFNfwIhIc+bQKXAv/BZp7WAa5sfvk1fuRQ4EP3
oNFAkrBr5vACoELOPmO33z3t80t6M9us3P9Okrmt376eSar042INmmu9VJ5P+5kL6TKI
lFofF9mBZTD9kxqdjPIsR9hmLNSrhA0K9VbBpTh54YzLNoBmBrVdh6dOmQ0Fhlx04aXw
jCJGLBmZSU4SuOJA492Xl8+sUzUQ06t3cse4CuNZlkzphcilwNQtglk2tNCzzAUmsz13
0eog==
ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=message-id:content-transfer-encoding:mime-version:date:subject:from
:reply-to:arc-authentication-results:arc-message-signature
:delivered-to:arc-authentication-results:arc-message-signature
:delivered-to:arc-authentication-results;
bh=TovJX/LcDSgeHEwY+liMUWhkuPy7+YG8YWvhhDwXbL0=;
b=aYxPMpzURqyL9aBUnEqgKAkT+Y3bfLRNJaDsnMdRRmc1Pj9mcYRAcR10EWRDC9TfnX
F9kLPT40QEuW96s9/EbdXlglDUkqaqzkGICQel5a+0WAFmE9990qOf4d4IJDJiGFsF+W
bIHftKd7oHfVhR9QNp1FLCWjuzEC5ZpfxGofB3zcCxKRzmT8OQUp4NrPT2Ex1I9otAzs
PgLnZg596yZF+eQeLwjXAxFFn4MCTZuTsJE12tFwHVQY8wWkkacCQHVacLOZVBvjlY+v
XNOnN6xEK4trkLo+Cpy4Zu1T2ELK1GCd1KOxb7TRxnx0z2vBs88FqbQNxtOfNE/tUZrH
3UyA==
ARC-Authentication-Results: i=3; mx.google.com;
arc=pass (i=2 spf=pass spfdomain=gmail.com);
spf=pass (google.com: domain of ***REMOVED*** designates 209.85.220.41 as permitted sender) smtp.mailfrom=***REMOVED***
Return-Path: <***REMOVED***>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
by mx.google.com with SMTPS id u1sor2708355wri.86.2018.04.04.09.55.50
for <***REMOVED***>
(Google Transport Security);
Wed, 04 Apr 2018 09:55:50 -0700 (PDT)
Received-SPF: pass (google.com: domain of ***REMOVED*** designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
arc=pass (i=2 spf=pass spfdomain=gmail.com);
spf=pass (google.com: domain of ***REMOVED*** designates 209.85.220.41 as permitted sender) smtp.mailfrom=***REMOVED***
Authentication-Results: cox.net; auth=pass (LOGIN) [email protected]
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:delivered-to:x-original-authentication-results
:delivered-to:reply-to:from:subject:date:mime-version
:content-transfer-encoding:message-id;
bh=TovJX/LcDSgeHEwY+liMUWhkuPy7+YG8YWvhhDwXbL0=;
b=PZUBEJBUinDKhRCO34n8vrFOq4vQ1ZomsIlw5Qxiv5b2IgAw0k1vLA2KT8dGv52t2i
qqiyNAF3/9yMQmAJ8+AXjCAcKHboAZ1k/34CB8NJN/tlCuwiGnf/BMxzeOZH/E0ctsco
5Fat/Ohb1HRu+0XKn4kDZPrMiFIU4uO1ivTVGLLf72YFIotPAGI3aXFojc54aV8a2gTC
1ITIY0c5ZLg06PXMh7l9cZUd1A8unxLrzhaiEGLy/bMxTuLgjJ+LpSsjShLD86mbmCFs
rSv9rZJIVGQ3QcsT6o5EPxi1i3nm/Ww9yp8jOZP98toH5MkeXwyDUp2Tv0LECthJhUiy
78Mg==
X-Gm-Message-State: AElRT7HEdghWrMthqmra3nRQFJmUVALwzVuN8/KVeMmBdMptkyYvFrNf l2evLRK3suScFNaZjTS5BZukDF+Q3jb+ZstMPSjwgg6bSluTpgw=
X-Received: by 10.223.144.69 with SMTP id h63mr13185677wrh.218.1522860950543;
Wed, 04 Apr 2018 09:55:50 -0700 (PDT)
Delivered-To: ***REMOVED***
Received: by 10.28.224.68 with SMTP id x65csp3292604wmg;
Wed, 4 Apr 2018 09:55:49 -0700 (PDT)
X-Received: by 2002:a19:8f13:: with SMTP id r19-v6mr11355804lfd.92.1522860949622;
Wed, 04 Apr 2018 09:55:49 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1522860949; cv=pass;
d=google.com; s=arc-20160816;
b=V4M2TYCQ5tNO7Dvp+9LxflGNUKhxUc1TK9eGmQEYGIAOFc4Trrh1/k3JHrzk3BBxRh
vQF4RDEA6ppe+SiKvB2LNZvRZOERFlyLIyduAbyUVjIMlXOi9rzzBx9IScNWlADuS2wh
CikGsPHnxIEhLpp6eeJ9yu4OBN+ZWGCLIgyucDo0oIHuzTiBQMAE1/NNqHrjj+XBnZj8
mM/HjfgOk7izMlDdbwwlYYtYO1zuOBYTkjbD/DQmo3nhrg3DuF9K0I3fVSglCIo97cDc
SjWQxlBp6JwpL14VYLXXuRy0Z74CGIASdFZahyv6bPEv2tW0biUIl/zQ6BbGVyT8qPn0
yZlw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=message-id:content-transfer-encoding:mime-version:date:subject:from
:reply-to:arc-authentication-results:arc-message-signature
:delivered-to:arc-authentication-results;
bh=TovJX/LcDSgeHEwY+liMUWhkuPy7+YG8YWvhhDwXbL0=;
b=n+PTIPq0kWFN62LU6aWagvJGt0jcAcV16hquZ3sOwM1deT8zUeQ3jzoN6xPFWX0iIA
Nfeou1jysfToXt/lnnKTAFuYkOhoq16IIhQ1jNnS1ZHElsrov7J3YK/KC2awO5mzSLH9
WM1qAWjoAJ9p2CoPrnhH6OMTbOo2FDggcaeXMWgc3Lg4FsJATuEBUlTjRyxpEUuZhh2q
sz587nLQDDh5I7UMOYprbsnN4SmA2eYsRJv/4BE0n2zp7eEbuLg0tDBglnqHaUBErbp/
YHuNA0yUtc2V7HkAwzCk4N7qfinXndbM9MDvFEtsGGFKjGj9LZSIlqBTJ8p026wYJKMB
sS6w==
ARC-Authentication-Results: i=2; mx.google.com;
arc=pass (i=1 spf=pass spfdomain=cox.net);
spf=pass (google.com: domain of ***REMOVED*** designates 209.85.220.41 as permitted sender) smtp.mailfrom=***REMOVED***
Return-Path: <***REMOVED***>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
by mx.google.com with SMTPS id r78sor1435532ljr.64.2018.04.04.09.55.49
for <***REMOVED***>
(Google Transport Security);
Wed, 04 Apr 2018 09:55:49 -0700 (PDT)
Received-SPF: pass (google.com: domain of ***REMOVED*** designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
X-Original-Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 68.230.241.218 as permitted sender) [email protected]
X-Received: by 10.46.53.11 with SMTP id z11mr11467014ljz.69.1522860949405;
Wed, 04 Apr 2018 09:55:49 -0700 (PDT)
Delivered-To: ***REMOVED***
Received: by 2002:a19:fa3:0:0:0:0:0 with SMTP id 35-v6csp300722lfp;
Wed, 4 Apr 2018 09:55:47 -0700 (PDT)
X-Google-Smtp-Source: AIpwx49bfwnDjgq6hPpDAcLfIYt5eqUkeN3WPm7EB3rIfkpVuaK8ohqTVoIcRh6RaIvM0piDl1xr
X-Received: by 2002:a9d:5697:: with SMTP id o23-v6mr12035011oth.345.1522860947267;
Wed, 04 Apr 2018 09:55:47 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1522860947; cv=none;
d=google.com; s=arc-20160816;
b=HxUAWnmSgSf3BTkb4IvCp/F+kttSTbo+eCbpXxU1N7k5sWNAwTFGP0VNn8dBe+7yoE
vQn3v0lmYA/72Xh/3sqhuoIEwkZKNtt32VPJbxVlyYKWYi6A3gKMSFjEO6QcoE7sV1QB
iVcEr0011i832Rc65BAeo0O3SENQzq7m4if1Bp+B2OiguCS8vGeKWLgdpAFpyhb1SVyg
hhA2WB784fydRx9JVv1/0yy/mh+92kBQ8+dczJ1bJHsNvE7JyUiVO7vk7zCOEeQ0d91G
grUTnXxvXfMqQb01+6VNMT9A62Xm2ge+6tUGu0xRbtJtadwPrAxD5XufBZmbKOq5aDjm
xZMw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=message-id:content-transfer-encoding:mime-version:date:subject:from
:reply-to:arc-authentication-results;
bh=TovJX/LcDSgeHEwY+liMUWhkuPy7+YG8YWvhhDwXbL0=;
b=QW/rwEAWJ4hK9eBB/gTAT3OiZrmBZBr1KO1BVOoaAHLCSnpfZAmE56YpZWOVVRcLQl
TmsgHYgh/MeVd6jpgClwpJOKXn5Vn7Q0+Trv8HjQgHuAmsmXfLkxs4wUitwsimyJ5mft
x1KZ3E/EXKdGaqo69r09ay9wgZdQ6kLRcQ/gcoXF0XRp8cKEavBBFesidC/taPpaGgRC
7hdA3+Z1TZA+Y/lefo1COkDuuoize749ettRuBPom4EfZvvJqaFvsH57pCoi6zOlDD1R
S1zBtx7x6+FWEbOSEhE2lS+U54gB4KJNZfrHCY/BNEYH/U+WSOlUUXafw5sTSOg24red
3HbQ==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of [email protected] designates 68.230.241.218 as permitted sender) [email protected]
Return-Path: <[email protected]>
Received: from eastrmfepo203.cox.net (eastrmfepo203.cox.net. [68.230.241.218])
by mx.google.com with ESMTP id x15-v6si1815865otx.284.2018.04.04.09.55.47
for <***REMOVED***>;
Wed, 04 Apr 2018 09:55:47 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 68.230.241.218 as permitted sender) client-ip=68.230.241.218;
Received: from eastrmimpo209.cox.net ([68.230.241.224])
by eastrmfepo203.cox.net
(InterMail vM.8.01.05.28 201-2260-151-171-20160122) with ESMTP
id <20180404165546.XLVB31819.eastrmfepo203.cox.net@eastrmimpo209.cox.net>
for <***REMOVED***>; Wed, 4 Apr 2018 12:55:46 -0400
Received: from hosusdasa9 ([73.38.252.181]) by eastrmimpo209.cox.net with cox id WGvC1x00l3vbBNp01GvH2t; Wed, 04 Apr 2018 12:55:46 -0400
X-Authority-Analysis: v=2.2 cv=Rva1FGuK c=1 sm=1 tr=0 a=GWU5e4caidwBXI+T/X+Xpw==:117 a=GWU5e4caidwBXI+T/X+Xpw==:17 a=9cW_t1CCXrUA:10 a=Dyoqhi_TatcA:10 a=Cfj4BQAnxiAA:10 a=x7bEGLp0ZPQA:10 a=iuw_WQ4JvakA:10 a=Quq1ZfL-CPCyUlLaKIYA:9 a=Ft8UYL4EG9YA:10
X-CM-Score: 0.00
Reply-To: <[email protected]>
From: FBI <[email protected]>
Subject: $
Date: Wed, 4 Apr 2018 17:55:44 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 180404-6, 04/04/2018), Outbound message
X-Antivirus-Status: Clean
Message-Id: <20180404165546.XLVB31819.eastrmfepo203.cox.net@eastrmimpo209.cox.net>

i am here to see that you get all your lost money that you lost to scammers,email us now for your money

Please do not tell the scammer he is posted here.

Email: fraud.report @ outlook.com

Who is online

Users browsing this forum: No registered users and 6 guests