Is this guy trying to scam me?? Help!

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Hello I'm New here! Joined: 29 Apr 2009 Posts: 5

123

Posted: Thu Apr 30, 2009 12:29 am

Welcome to Eater Matt. First and foremost we deal with 419 scams, which this is not. On the other hand, from what you are writing, something does sound shady. That surely is not a secure web page and you were right to balk at not putting your personal info in.

Quote:

Domain Name: PORTALOFCHOICE.COM
Registrar: TUCOWS INC.
Whois Server: whois.tucows.com
Referral URL: http://domainhelp.opensrs.net
Name Server: NS1.IPOWER.COM
Name Server: NS2.IPOWER.COM
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 20-feb-2009
Creation Date: 20-feb-2009
Expiration Date: 20-feb-2010

I'm curious, but have you checked his email headers to see where he is (may be a different person than the one you met)?

Posted: Thu Apr 30, 2009 12:29 am

I've never quite been able to work out how these set ups are viable.

Looking at portalofchoice.com

Quote:

If You Are Less Than Satisfied We Will Buy Back Your Dealership; That's A Promise

... and I presume that chicoip.com are the dealership

I found this puzzling link

long linky MOD Edit to avoid forum blowout - crashhoot

and if you try the 'state' links on this page you'll see what that refers to

http://portalofchoice.com/main.html?src=/#4,0

Quote:

Our sister company www.WackyCoupon.com allows you to post unlimited coupons for the portal-directory and for our partners; Google, Yahoo, MSN, Ask, AOL

Impressive partners. Shocked

but whatever Wacky Coupons is they only have two advertisers.

Bearing in mind that portal of choice was using the free website facility of Google it seems ambitious to call them a partner. On that basis Google are my partners too. Very Happy

.... and the CFO uses a gmail addie, and so do I, probably more than him.

I can't comment on its integrity, or honesty of purpose, but so much of the site is not functioning and really isn't well set up I would seriously wonder if there is much future in it, especially in the current economic climate where advertisers are very money conscious and this type of advertising is of limited appeal.

That's my personal opinion.

I did a search on the site registrant and found this on a cached page

http://209.85.229.132/search?q=cache:27qURa6yjPYJ:www.linkedin.com/pub/a/462/9b4+M+J+Gianoplus&cd=1&hl=en&ct=clnk&gl=uk

Quote:

MJ Gianoplus’s Experience

*
Prinicipal
OSynergyC.com

(Internet industry)

January 1999 — Present (10 years 3 months)

Affiliations inlcude: OSynergyC.com | WebSynergyServices.com
CompleteWebServices.us | CompleteInternetAdvertising.net | SouthernSynergy.net | EmpireSynergy.com | OregonInternetPages.com

I think you'd be wise to know who's employing you and on what terms, with something in writing.

Hello I'm New here! Joined: 29 Apr 2009 Posts: 5

thanks for the research! that mike gianoplus guy is the one who I did the online training with that i was talking about in my original post.

Hello I'm New here! Joined: 29 Apr 2009 Posts: 5

OxygenDeprived wrote:

Welcome to Eater Matt. First and foremost we deal with 419 scams, which this is not. On the other hand, from what you are writing, something does sound shady. That surely is not a secure web page and you were right to balk at not putting your personal info in.

Quote:

Domain Name: PORTALOFCHOICE.COM
Registrar: TUCOWS INC.
Whois Server: whois.tucows.com
Referral URL: http://domainhelp.opensrs.net
Name Server: NS1.IPOWER.COM
Name Server: NS2.IPOWER.COM
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 20-feb-2009
Creation Date: 20-feb-2009
Expiration Date: 20-feb-2010

I'm curious, but have you checked his email headers to see where he is (may be a different person than the one you met)?

I have checked the headers but not 100% sure how to find out if its really him or not.

Posted: Thu Apr 30, 2009 5:34 am

Post the full headers here (delete your email address) and we will soon tell you where he is emailing from.

Hello I'm New here! Joined: 29 Apr 2009 Posts: 5

B8er wrote:

Post the full headers here (delete your email address) and we will soon tell you where he is emailing from.

Here you go!
X-Message-Delivery: Vj0xLjE7RD0wO2w9MQ==

X-Message-Info: JGTYoYF78jEHjJx36Oi8+Z3TmmkSEdPt3Mi6GgUSv7yYKHQgGfDe+2wCW4LegkYQav29Pp7Mm4E=

Received: from gateway01.websitewelcome.com ([69.56.236.19]) by bay0-mc12-f5.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);

Thu, 30 Apr 2009 07:51:21 -0700

Received: (qmail 1759 invoked from network); 30 Apr 2009 14:52:59 -0000

Received: from cala.websitewelcome.com (174.132.128.9Cool

by gateway01.websitewelcome.com with SMTP; 30 Apr 2009 14:52:59 -0000

Received: from [67.182.177.72] (port=1410 helo=FAMILY)

by cala.websitewelcome.com with esmtpa (Exim 4.69)

(envelope-from <[email protected]>)

id 1LzXbV-0008HK-D8

for [email protected]; Thu, 30 Apr 2009 09:51:21 -0500

Message-ID: <DA62EAB2CC8E4B4385AA6AA36CAE3617@FAMILY>

Reply-To: <[email protected]>

From: <[email protected]>

To: "matt sasd" <[email protected]>

References: <[email protected]> <1950DAD8B8DD44EE82EE18F7CF727F39@FAMILY> <[email protected]> <2401BBC01D57449287BF6A26319F32FD@FAMILY> <[email protected]>

Subject: Re: w-9

Date: Thu, 30 Apr 2009 07:52:36 -0700

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0010_01C9C968.A0E3B870"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: <[email protected]>

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - cala.websitewelcome.com

X-AntiAbuse: Original Domain - hotmail.com

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - chicoip.com

Return-Path: [email protected]

X-OriginalArrivalTime: 30 Apr 2009 14:51:21.0648 (UTC) FILETIME=[205B5B00:01C9C9A3]

This is a multi-part message in MIME format.

------=_NextPart_000_0010_01C9C968.A0E3B870

Content-Type: multipart/alternative;

boundary="----=_NextPart_001_0011_01C9C968.A0E3B870"

------=_NextPart_001_0011_01C9C968.A0E3B870

Content-Type: text/plain;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Posted: Fri May 01, 2009 2:17 am

67.182.177.72 IP address location & more:
IP address [?]: 67.182.177.72 [Copy][Whois] [Reverse IP]
IP country code: US
IP address country: United States
IP address state: California
IP address city: Paradise
IP postcode: 95969
IP address latitude: 39.741299
IP address longitude: -121.612099
ISP of this IP [?]: Comcast Cable
Organization: Comcast Cable
Host of this IP: [?]: c-67-182-177-72.hsd1.ca.comcast.net [Whois] [Trace]

Hello I'm New here! Joined: 29 Apr 2009 Posts: 5

irishemigrant wrote:

67.182.177.72 IP address location & more:
IP address [?]: 67.182.177.72 [Copy][Whois] [Reverse IP]
IP country code: US
IP address country: United States
IP address state: California
IP address city: Paradise
IP postcode: 95969
IP address latitude: 39.741299
IP address longitude: -121.612099
ISP of this IP [?]: Comcast Cable
Organization: Comcast Cable
Host of this IP: [?]: c-67-182-177-72.hsd1.ca.comcast.net [Whois] [Trace]

How did you manage to figure out that from what I posted? Thanks a lot though, he says he is actually from paradise so that makes me feel better.

Posted: Fri May 01, 2009 7:49 am

i think he found it by looking through the email header for sets of 4 numbers separated by dots.
these are 'ip addresses' and '67.182.177.72' is what appears in your email header.
the last ip address in a header is always the address of the person who sent the message.
if there had been more ip addresses, they would show how the message was routed to you.
using a service like 'whois' it's possible to pin an ip address down to an approximate geographical location.

Master Baiter Joined: 20 Apr 2009 Posts: 120 Location: USA

I can unplug the power on my dsl modem, wait a few minutes and plug it back in to get a new IP and a new location. I can do it as many times as I want to get the location I want to use. The origin indicated is never more than 100 miles from my true location though.

Posted: Fri May 01, 2009 10:38 am

Having been a consultant, canvassed, worked commission sales, and briefly sold "advertising" (that's an interesting story) in the past, I must tell you that this sounds shady at best. The "what do you mean it's secure" and the informal handling of credit card info are major red flags. Without a signed contract you have little hope of getting paid if there is a dispute. You’re right to be concerned about having to ASK to fill out I-9 and W2 forms. A verbal promise of 30% is an even bigger red flag. 30% is never "always 30% of the sale no matter what" and easily turns into "30% of the time you may have a hope of getting paid". I know nothing of these people other than what you've posted but I'd literally sooner work at a 7-11 (wouldn’t pay the mortgage, but still…). Bear in mind this is coming from someone who left the sales industry many years ago.

Is this guy trying to scam me?? Help!	View next topic View previous topic