RSS

” FBI ” fbi-office1100@libero.it

18 Oct

RECOVERY SCAM – FBI IMPOSTER – NIGERIAN SCAMMER

Additional information at the end of this post regarding a romance scam by this same scammer, different scam.

Email:

US-FBI-SHADEDSEAL.SVG FEDERAL BUREAU OF INVESTIGATION FBI SEATTLE DIVISION 1110 THIRD AVENUE SEATTLE. 98101-2904

THIS IS ROBERT S. MUELLER III OF FEDERAL BUREAU OF INVESTIGATION (FBI). THE FBI IN ALLIANCE WITH THE ECONOMIC COMMUNITY OF WEST AFRICAN STATES (ECOWAS), WITH THEIR HEAD OFFICE THERE IN NIGERIA HAS BEEN WORKING TOWARDS THE TOTAL ERADICATION OF FRAUDSTERS AND SCAM IN THE WESTERN PART OF AFRICA WITH THE HELP OF THE UNITED STATES GOVERNMENT AND THE (U.N) UNITED NATIONS. WE HAVE BEEN ABLE TO TRACK DOWN SO MANY OF THIS SCAMMERS IN VARIOUS PARTS OF WEST AFRICAN STATES, WHICH INCLUDES (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMEROUN AND SENEGAL) AND THEY ARE ALL IN OUR CUSTODY OVER THERE IN LAGOS NIGERIA, MEANWHILE DURING THE PROCESS OF ARREST, WE WERE ABLE TO RECOVER SOME FUNDS FROM THE PROSECUTED SCAMMER.

REGARDING THIS GREAT ACHIEVEMENT, THE (U.N) UNITED NATIONS ANTI-CRIME COMMISSION AND THE UNITED STATE GOVERNMENT HAVE ORDERED THAT THE MONEY RECOVERED FROM THESE SCAMMERS BE SHARED AMONG 100 LUCKY PEOPLE AROUND THE GLOBE. THIS EMAIL IS BEEN DIRECTED TO YOU BECAUSE YOUR EMAIL ADDRESS WAS FOUND IN ONE OF THE FILE AND COMPUTER HARD DISK RECOVERED FROM THE PROSECUTED SCAMMERS THERE IN OUR CUSTODY. YOU ARE THEREFORE BEING COMPENSATED WITH THE SUM OF $1MILLION DOLLARS. WE HAVE ALSO ARRESTED ALL THOSE WHO CLAIMED TO BE BARRISTERS, BANK OFFICIALS, LOTTERY AGENTS, PERSON OR GROUP OF PERSON’S WHO CLAIM TO HAVE FUNDS IN THEIR CUSTODY THAT BELONGED TO YOU OR WANT YOU TO BE THE NEXT OF KIN OF SUCH FUNDS WHICH DO NOT EXIST.

SINCE YOUR EMAIL APPEARED AMONG THE LUCKY BENEFICIARIES WHO WILL RECEIVE A COMPENSATION OF $1MILLION DOLLARS, WE HAVE ARRANGED YOUR PAYMENT THROUGH OUR SWIFT CARD PAYMENT CENTER WITH ZENITH BANK PLC.

PLEASE, FEEL FREE TO CONTACT THE PROCESSING OFFICER DR. MIKE OBARU. THE SWIFT CARD HAS BEEN SPECIALLY PREPARED TO ENABLE YOU WITHDRAW YOUR MONEY IN ANY ATM MACHINE IN ANY PART OF THE WORLD, SO YOU ARE THEREFORE ADVISED TO CONTACT THE PROCESSING OFFICER DR. MIKE OBARU WITH THE REQUIRED INFORMATION AS STATED BELOW.

CONTACT PERSON: DR. MIKE OBARU. DIRECTOR ZENITH BANK PLC SWIFT CARD PAYMENT CENTER CONTACT EMAIL: (ZENITHATMDEPARTMENT01@HOTMAIL.COM) TEL:+2348125279893

YOU ARE ADVICE TO FORWARD THE INFORMATION BELOW TO DR. MIKE OBARU TO ENABLE HIM SEND YOUR ATM LOADED ATM CARD INCLUDING YOUR PIN FOR EASY ACCESSIBILITY.

YOUR FULL NAME__________________________ YOUR ADDRESS____________________________ P.O.BOX_________________________________ COUNTRY_________________________________ TELEPHONE NUMBER________________________ MOBILE NUMBER___________________________ FAX NUMBER______________________________ OCCUPATION______________________________ MARITAL STATUS__________________________ AGE _______________ SEX___________________

OFFICIALLY SIGN.    ROBERT S.MUELLER III FEDERAL BUREAU OF INVESTIGATION J. EDGAR HOOVER BUILDING 935 PENNSYLVANIA AVENUE, NW WASHINGTON, D.C. 20535-0001, USA http://www.fbi.gov/about-us/executives/director (fake fbi website. I am keeping it on here incase a potential victim uses a search-engine.)

HEADER:

Return-Path:   <fbi-office1100@libero.it>
X-YahooFilteredBulk:   212.52.84.102
Received-SPF:   pass (domain of libero.it designates 212.52.84.102 as permitted sender)
X-YMailISG:   xAtmkYEWLDvD0iBY2KNVvnzKATvf2rmIHFIADQoJJMosMAvJ my.Jfzk7bNiaJvj64Ho6AJfKr9R1oToqR9zlNnXOgGLmEre.RoQd1KFo8MO. 6PU_m0juNZ48raeERM7KHpLz_TfqBH2Km1F0iDYk4cwmgg3Yn33PJwJu3DnM vN3WA9crjid3TJlpmsZm_ZziohvZkVl0LhiMfDWf23rA.h7I1_h0BVzMNq7g BJynJp7yTevnB8UUzjxgoZwwqFKCI0oZ.ng7mS4Enp8C_f1PFwhbc5GfBp6O IkJy1nxQ0fAFqU4iIvrFqwuKqoQWJjLDTR9sXmMths6fpSosVcsJtKEPez9K P6oyzjQ.NbLDsz16NMhE4h1NCXmsbuZLy51MM3yG2bxT3R.jo04is92y9hJb xTJkBXpDVaJe0iZEpVMkiNSZ8i0swhQs1933AnuX2eX5CXgQyWBcrIj3VSy6 bSgXR6CMNIvtIhJ0zz5_aDFV_oRLilAt8IH5xsi9XR2XnczxHZ0ZOcISuSuy cUYT9_7f3On.1oY4O.56xbBo73_88iiP7uiDUSsfMonq5X7ngm260dwE0DaF HnPS3qbR5J93dpJx0wpVRptSFmzUnoDZ_CGiXbineduNHB2eR0or5SrmeNXv BYwZ3VjaoCrPyxMb2nBKH798BjkY.Bea6ez_cEXKpKYylH5mKfFyuCH6b1oK nAKIhx_fldos1FW.8mP4Nz3Mcd1OpVnjnkBZeiOkrLiWCV1jkaRyWXx5XNHd R1uXpiQCnsZAthbAIAyZsU6C.5Ki7ckEY2Mg1nfL2AaulFbgM96IEGi7SqIF dkE4Ha9PV7Ampe5g3Nfz5twkwEVwcM_5oliaVjYNaAHGnezm03WBr3TthvSo qqUbOdE.huUlRdLsaiMYb8jjrGGeH8WDvXZ9NDzDyCW_Rt2iZibfgpCAO7S6 kqsAmPul7ibaj8iiWLIMia.OwQE7JARPN0m7iZsrC6_wne8Beb8FHsGLvMKJ 4zKZ8IT4Hhz6Ien3cGlfTPoZMkXZOZmIpiK2Qdd5hhILkhDFAkECZItupWzP 5uJzRJqNO67KtmhN_VnQlxbwz0KB_hcKHTumnJeAxn.XxXK5ENz8ukLuoGrC wEj_YYllwKpnP_xrnTYY7vAWzmXKD0tCBCdAtswAuQLlc2lCBsu5i_LIp9ox EH.si_2gIbug99h1gRq6uyfxLblSLkoijVHuxynBW.oZU7wtTPvTSOWjY1b3 6bGsOUdGk4GVDeZ89C.LUvcgx5sI1B1vW6VdX8WiggddY15uA3XK.a8g0Drl .JgxEIhczxPal4C6cs1NfUDSb89oBBFsxTx9hj_KTWiqeHxwATvYbDyThMF0 hZ5yN4vzhj6GNog6TAkfkWXl3Yy7rY_gQiTPb7y3VuhlrjL5x9t6ySoYYbJN 8y3WDq6YQfBWrdIH28qPy73FOx_Bk2bvA1QvuCcfM3wDJa1_7PawPAdNX1mZ 4TRD3tMHOab4NC0Oc79D.uKzieP31FrQ_vFGW19c4Wi._JpKAdCRuh5SMCOX EkM._vjyhmVKyGohrXRGk3C69Rv9nQoBSsoy5nqnP3mUTyqeEZA0ISjrYNyw 2N2SYL3Z5rj_550.MN3DEOMRJ1BMBu_cr0MnHzVfs6Bt
X-Originating-IP:   [212.52.84.102]
Authentication-Results:   mta1192.mail.bf1.yahoo.com from=libero.it; domainkeys=neutral (no sig); from=libero.it; dkim=neutral (no sig)
Received:   from 127.0.0.1 (EHLO outrelay02.libero.it) (212.52.84.102) by mta1192.mail.bf1.yahoo.com with SMTP; Mon, 15 Oct 2012 04:09:59 -0700
X-CTCH-Spam:   Bulk
X-CTCH-RefID:   str=0001.0A0B0208.507BED78.0140,ss=3,sh,re=0.000,fgs=16
X-libjamoibt:   1821
Received:   from wmail74 (172.31.0.38) by outrelay02.libero.it (8.5.140.03) id 50764619008E2E89; Mon, 15 Oct 2012 13:09:54 +0200
Message-ID:   <27451027.1527241350299394356.JavaMail.defaultUser@defaultHost>
Date:   Mon, 15 Oct 2012 13:09:54 +0200 (CEST)
From:   “fbi-office1100@libero.it” <fbi-office1100@libero.it>
Reply-To:   “fbi-office1100@libero.it” <fbi-office1100@libero.it>
Subject:   LEGAL MAIL
MIME-Version:   1.0
Content-Type:   text/plain;charset=”UTF-8″
Content-Transfer-Encoding:   7bit
X-SenderIP:   196.46.245.24
X-libjamv:   zn1mBWAiz0I=
X-libjamsun:   dpN/pSNPH5urOmpbGr9iSSTqQoO028QCt0Pe4TZ9g28=
Content-Length:   2999

702303213 ZENITHATMDEPARTMENT01@HOTMAIL.COM

Email-Address: fbi-office1100@libero.it 

IP: 196.46.245.24 – NIGERIA (Lagos)

IP: 41.206.11.37 Lagos, Nigeria

IP: 192.168.34.227

212.52.84.102

animated gif

ATTENTION: 

A Nigerian with the IP address of – 41.206.11.37 – commented on this post, I didn’t accept the comment but I will post what he said below. Also, Lagos, Nigeria is where the comment is originating from which already set me off, but I didn’t want to post him unless I had some type of proof of negative activity. Well, I found warnings from this scammer who using the name “ Elias ” – upesaspelltemple65@yahoo.com –okdousplltemple@yahoo.com (notice in the comment he puts okdousplltemple@yahoo.co but forgets to put the “M” – Somebody needs to tell this thief that only 3rd world countries believe in that spelling casting nonsense. Of course there probably are a small amount of vulnerable people who do believe it, most of us don’t believe it.

Sneaky little rats, below is the comment he sent. 

“this is a spell caster I contacted 2weeks ago. he is really great. I have been scammed initially by other spell casters of almost a thousand of dollars. I am not rich, I work my ass for this hard earned money. But my sadness was turned to joy when I met Dr.okdou he is really terrific and you will get results for whatever you are seeing he for within very few days. he is so honest and sticks to his promises. His contact is below: okdousplltemple@yahoo.co  ”

Also below I’ve posted the names and email addresses of scammer(s) who have sent scam to (potential) victims under the host IP address which is used by the scammer to fool victims into thinking they’re from the United States. The host IP is 207.46.202.15. — however, the scammers REAL IP is  41.206.11.37 which is originating from Africa (Nigeria) — Any questions feel free to ask.

“Elias” – upesaspelltemple65@yahoo.com – okdouspIItemple@yahoo.com ← This Nigerian Scammer is scamming under the following names/email address/etc below:

1) Gerald Moris – geraldmoris50@yahoo.com –

Image

Gerald Moris is pretending to be this man posted above. He tries to lure vulnerable lonely woman on dating websites then tries to scam them out of money.

Host of this IP: 41.206.11.37.vgccl.net >< ISP:MTN NIGERIA >< IP-Address: 41.206.11.37 (Lagos Nigeria)
Contact Email: hotmaster@mtnnigeria.com ><

Organization: IP Block Assigned for MTN N Corporate Clients

Host IP is: 207.46.202.15 which is listed as Beverly Hills, California ><

Host name for this IP: – 1661882.r.msn.com >< 1654287.r.msn.com

Registrar:Markmonitor.com >< http://www.markmonitor.com

Referral URL

http://www.markmonitor.com

ns4.msft.net
ns5.msft.net
ns2.msft.net
ns3.msft.net
ns1.msft.net

41.206.11.37 <- This Nigerian Scammer is connected to the list of IP’s below. (this IP is most likely in some internet cafe where all the cowards meet up and spend their life on the computer trying to rob people.)

te0-2-0-6.mpd21.fra03.atlas.cogentco.com IP: 154.54.62.217 130.117.14.214 (130.117.14.214) 188.138.112.3 ↔ 212.193.237.224 volkan@msn.com 213-152-230-91.mtnns.net – 213.152.230.91 —- xe-2-0-0.mpr2.lhr3.uk.above.net (64.125.28.93) 41.220.75.237 (41.220.75.237.vgccl.net)- Lagos, Nigeria 41.181.77.95 – South Africa City: Johannesburg

static-ip-188-138-112-3.inaddr.ip-pool.com – 188.138.112.3 – volkan@msn.com

_______________________________________________________

ANOTHER SCAM EMAIL SENT BY THE ABOVE SCAMMER –

Fake FBI Scammer is also ” Juillet ” A.k.a ”Romance Scammer”

Hello Dear,
my name is Juliet,
I am, very happy to contact you, to day
i wish to be in good relationship, with you,
and i will be very happy if you can reply me
through my private Email: juillet kamala@yahoo.com

return-path:
envelope-to: scamdex_dmca@HUN1P0T,paypal@HUN1P0T,scamdex@HUN1P0T
delivery-date: Fri, 05 Oct 2012 19:52:55 -0700
received:
from outrelay03.libero.it ([212.52.84.103]:37683)by lester.HUN1P0T with esmtp (Exim 4.77)(envelope-from )id 1TKKVa-00050G-BB; Fri, 05 Oct 2012 19:52:55 -0700
from wmail12 (172.31.0.42) by outrelay03.libero.it (8.5.140.03) id 506C837E0059E570; Sat, 6 Oct 2012 04:52:50 +0200
message-id:
date: Sat, 6 Oct 2012 04:52:50 +0200 (CEST)
from: “23456789juli@libero.it”
reply-to: “23456789juli@libero.it”
subject: hi
mime-version: 1.0
content-type: text/plain;charset=”UTF-8″
content-transfer-encoding: 7bit

___________________________________________________

none (domain of dsnrelay.libero.it does not designate permitted sender hosts) YWdlL3JmYzgyMgMDNQ–
X-YMailISG: nmmVK2kWLDtJxNGdAzHdbyoPWiscf9Y5sfY.IakKrUePMq1t 32dtFcrQ69cMcj_2gGCfyQi04cyKGiaFNndEglLACJX1urKbjLisdKVhhdiH WS9pLOdM7ZeGRZfVqIzd46A5Ou2v6IjJ0eZXK75uMoNSZBErVXqTHjmrrKWX GDsqpJ102bTmiFTBRpPHzW6QSVj1UVgXKUbqiHguH5Hm69ylMuNdMuD8Sth7 jlGwrcLyp8VvoKh82cW7pfDcS60Mw6MIWeAPepfGDPTUHuQk21e0ZL4kogpi 8mLfjiUj4kBxiIlGDggSEwCiJR4wrGLErZ.FJoMy.SnBYRMugb_cB7yZKXWq mKLNnNDrhk4NVL3szpFMl7JQhSa_vzL6jPGr5IxAL_YFtGBXb5NPQ6.zNnEF MkfT9dEJfN8kZv._yaGRtbataqLzoKDVtzE2MhPxrYwlwSpNK3qV.ZSiT0l0 K234WioX7_NqP2uKDIx63p.01CBzzgu2iwD5scbOhr_9gAyqyg12Z6rMO9G0 _2eWEoPC1JmZRkEbGhxoMi0rkHn6ms0Mm4qyEuDmUBjYGvbJKN57I53n.LoV T9zumu.iZeEdrj97uBe1LvDSB.5DEf.I8_Vu72n2V.l4eUFHz2pCc6la7PvR wo72kNlDMaG_U7kN03_hdwvhW81yJFrCCVCgehNDuOKcPnAZKqdzwS0X3855 lJ4MFsbsX1gexEdgQGkA1rtKHEtcSgzqbG9RwarfalZFu_bLvbRbnn2RcxRV KqquWHlheHedyaZZutNXelnZ1k9IzbqJXmt4JNGH7LBkxC5xliIOsjQtORMM x4aYPSy1cIcrBY_ziu3XUvw-
X-Originating-IP: [212.52.84.43]
Authentication-Results: mta1318.mail.gq1.yahoo.com from=mailrelay11.libero.it; domainkeys=neutral (no sig); from=mailrelay11.libero.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dsnrelay.libero.it) (212.52.84.43) by mta1318.mail.gq1.yahoo.com with SMTP; Thu, 18 Oct 2012 00:07:13 -0700
X-libjamoibt: 1020
Received: from mailrelay11.libero.it (192.168.32.95) by dsnrelay.libero.it (8.5.133) id 4F5A21B7479B2052 for <>; Thu, 18 Oct 2012 09:07:11 +0200
Received: from localhost (localhost) by mailrelay11.libero.it (MOS 4.2.3-GA) with internal id MLR71868; Thu, 18 Oct 2012 09:07:11 +0200
From: Mail Delivery Subsystem <MAILER-DAEMON@mailrelay11.libero.it> Add sender to Contacts
Message-Id: <201210180707.MLR71868@mailrelay11.libero.it>
Content-Type: multipart/report; report-type=delivery-status; boundary=”MLR71868.1350544031/mailrelay11.libero.it”
Subject: Returned mail: RCPT TO:<fbi-office1100@libero.it> Mailbox disabled (from ims4b7.libero.it)
Auto-Submitted: auto-generated (failure)
X-DSN-Junkmail-Status: score=10/55, host=mailrelay11.libero.it
X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A0B0201.507FAA9F.0066,ss=1,re=0.000,fgs=256, ip=0.0.0.0, so=2011-06-21 16:49:39, dmn=2011-06-08 23:29:05
X-Mirapoint-Loop-Id: dba025d3596373ad78331c32509687d7

192.168.32.95 <> 212.52.84.43

mtalibero17.libero.it [192.168.34.227]

—– The following addresses had permanent delivery errors —–
fbi-office1100

“fbi-office1100@libero.it” <fbi-office1100@libero.it> MAILER-DAEMON@mailrelay11.libero.it ims4b7.libero.it

Advertisements
 
1 Comment

Posted by on 10/18/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

One response to “” FBI ” fbi-office1100@libero.it

  1. Exposed

    10/18/2012 at 07:36

    Fake FBI Scammer is also ” Juillet ” A.k.a ”Romance Scammer”

    Hello Dear,
    my name is Juliet,
    I am, very happy to contact you, to day
    i wish to be in good relationship, with you,
    and i will be very happy if you can reply me
    through my private Email: juillet kamala@yahoo.com

    return-path:
    envelope-to: scamdex_dmca@HUN1P0T,paypal@HUN1P0T,scamdex@HUN1P0T
    delivery-date: Fri, 05 Oct 2012 19:52:55 -0700
    received:
    from outrelay03.libero.it ([212.52.84.103]:37683)by lester.HUN1P0T with esmtp (Exim 4.77)(envelope-from )id 1TKKVa-00050G-BB; Fri, 05 Oct 2012 19:52:55 -0700
    from wmail12 (172.31.0.42) by outrelay03.libero.it (8.5.140.03) id 506C837E0059E570; Sat, 6 Oct 2012 04:52:50 +0200
    message-id:
    date: Sat, 6 Oct 2012 04:52:50 +0200 (CEST)
    from: “23456789juli@libero.it”
    reply-to: “23456789juli@libero.it”
    subject: hi
    mime-version: 1.0
    content-type: text/plain;charset=”UTF-8″
    content-transfer-encoding: 7bit

     

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: