Car scam

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Hello I'm New here! Joined: 24 Dec 2009 Posts: 18

Here's the header from lastest message from the Ebay financial department.

Received: from mail-ew0-f217.google.com (mail-ew0-f217.google.com [209.85.219.217])
by mx.google.com with ESMTP id 4si5957366ewy.8.2010.01.12.08.46.45;
Tue, 12 Jan 2010 08:46:45 -0800 (PST)
Received-SPF: neutral (google.com: 209.85.219.217 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=209.85.219.217;
Authentication-Results: mx.google.com; spf=neutral (google.com: 209.85.219.217 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: by mail-ew0-f217.google.com with SMTP id 9so5977109ewy.11
for <[email protected]>; Tue, 12 Jan 2010 08:46:45 -0800 (PST

Safe to assume it's the same location as the other headers

Hello I'm New here! Joined: 24 Dec 2009 Posts: 18

Here's the Moneybookers Financial department headers.

Received: from web1110.biz.mail.sk1.yahoo.com (web1110.biz.mail.sk1.yahoo.com [74.6.114.42])
by mx.google.com with SMTP id 8si86352517pwi.6.2010.01.12.07.32.21;
Tue, 12 Jan 2010 07:32:22 -0800 (PST)
Received-SPF: neutral (google.com: 74.6.114.42 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=74.6.114.42;
Authentication-Results: mx.google.com; spf=neutral (google.com: 74.6.114.42 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: (qmail 44859 invoked by uid 60001); 12 Jan 2010 15:32:21 -0000

Posted: Tue Jan 12, 2010 8:49 pm

This one comes up in Mountainview which is where Google headquarters are:

Email Tracing successful!
The email sender

used at the IP address: 209.85.219.217 from United States, Mountain View.

Email Sender IP address location & IP address info:
IP address [?]: 209.85.219.217 [Whois]
IP address country: ip address flag United States
IP address state: California
IP address city: Mountain View
IP postcode: 94043
IP address latitude: 37.4192
IP address longitude: -122.0574
ISP of this IP [?]: Google
Organization: Google
Host of this IP: [?]: mail-ew0-f217.google.com [Whois]
Local Time of this IP country: 2010-01-12 12:33
Full-screen
Email sender
This Email was sent at
from this IP address:
209.85.219.217
IP Location: Mountain View in United States.
Click here for a big satellite image.
Map data ©2009 Google - Terms of Use
50 mi
100 km
The second set of headers come up as not complete but when I googled [email protected] it came up as scam.
http://www.dslreports.com/forum/r22048020-Scam-Ebay-Motors-
Scam~start=60
Post that site here: http://forum.419eater.com/forum/viewforum.php?f=57
with the email and ask someone to kill it.

Hello I'm New here! Joined: 24 Dec 2009 Posts: 18

Here's another one Fartina,if you don't mind

Received: from snt0-omc1-s28.snt0.hotmail.com (snt0-omc1-s28.snt0.hotmail.com [65.55.90.39])
by mx.google.com with ESMTP id 27si25876959qyk.123.2010.01.03.12.20.41;
Sun, 03 Jan 2010 12:20:41 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.90.39 as permitted sender) client-ip=65.55.90.39;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.90.39 as permitted sender) [email protected]
Received: from SNT107-W34 ([65.55.90.8]) by snt0-omc1-s28.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 3 Jan 2010 12:20:41 -0800

Posted: Wed Jan 13, 2010 12:11 am

This one is the same spot in kansas as the 1st one. Is this part of the same scam?

Hello I'm New here! Joined: 24 Dec 2009 Posts: 18

Fartina o'douriss wrote:

This one is the same spot in kansas as the 1st one. Is this part of the same scam?

Well, this person has many listings with different names,some claiming to be in canada,some in the UK, and one even in the US military claiming to be stationed in pearl harbour with the car in shipping in Virginia. I asked him why he advertised it on a canadian website with a specific location.His answer was because it was free to advertise.

The names he's using that I know of on the site buysell.com and I'm in contact with are

Johanna Paz (Canada)
Frank Owens (Army protecting our freedom)
Cystal Amorosi (UK)
Jessika Doll (UK)

[email protected] -waiting for a response from this one.

The site may not be well monitored because he has had vehicles on there forup to a month with crazy low prices.I'm just wondering how many people would really fall for those to good to be true prices.

Posted: Wed Jan 13, 2010 2:22 am

If you want to report him to Ebay:
http://www.auction-safety.org/

To report fraud at buysell.com:

Quote:

Please report the ad to BuySell.com by clicking on the "Report Abuse" link found at the bottom of all ads. We will investigate the ad and remove it if necessary.

Hello I'm New here! Joined: 24 Dec 2009 Posts: 18

Here's the header for a new name. Helen Kitty of Scotland

Received: from col0-omc2-s3.col0.hotmail.com (col0-omc2-s3.col0.hotmail.com [65.55.34.77])
by mx.google.com with ESMTP id 7si45050390iwn.109.2010.01.13.11.27.47;
Wed, 13 Jan 2010 11:27:47 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.77 as permitted sender) client-ip=65.55.34.77;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.34.77 as permitted sender) [email protected]
Received: from COL105-W35 ([65.55.34.72]) by col0-omc2-s3.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 13 Jan 2010 11:26:13 -0800
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_06648391-930a-4919-bce6-99e1598ad2d7_"
X-Originating-IP: [172.129.136.40]

He's trying to sell me the original Nissan Altima that Jesikka Doll was selling.
He must be starting to get frustrated as he tells me in this Email that he has little time at his disposal and doesn't want his time wasted with endless discussions.He has tons of emails to sort through.(Some of my other gmail accounts no doubt).He wants this transaction to go fast and smoothly.

Posted: Thu Jan 14, 2010 2:39 am

Scotland my A**
This is the same kansas location as the 1st two.
Email Tracing successful!
The email sender

used at the IP address: 172.129.136.40 from United States, .

Email Sender IP address location & IP address info:
IP address [?]: 172.129.136.40 [Whois]
IP address country: ip address flag United States
IP address state: n/a
IP address city: n/a
IP address latitude: 38.0000
IP address longitude: -97.0000
ISP of this IP [?]: America Online
Organization: America Online
Host of this IP: [?]: AC818828.ipt.aol.com [Whois]
Full-screen
Email sender
This Email was sent at
from this IP address:
172.129.136.40
IP Location: in United States.
Click here for a big satellite image.
Map data ©2009 Google - Terms of Use
50 mi
100 km

Hello I'm New here! Joined: 24 Dec 2009 Posts: 18

Got this today in one of my gmails

£950.000.00 GBP has been awarded to you in our Mercedes Benz New Year
Spash send your details

1.Names
2.Address
3.Country

Header

Received: from web81207.mail.mud.yahoo.com (web81207.mail.mud.yahoo.com [68.142.199.111])
by mx.google.com with SMTP id 9si4186132gxk.6.2010.01.15.07.41.34;
Fri, 15 Jan 2010 07:41:34 -0800 (PST)
Received-SPF: neutral (google.com: 68.142.199.111 is neither permitted nor denied by domain of [email protected]) client-ip

Posted: Sat Jan 16, 2010 1:38 am

Hi Scouter!
This is coming up near Google headquarters so either that's where it's coming from or there are some scamming tricks at work...

Email Tracing succesful!
The email sender

used at the IP address: 68.142.199.111 from United States, Sunnyvale.

Email Sender IP address location & IP address info:
IP address [?]: 68.142.199.111 [Whois]
IP address country: ip address flag United States
IP address state: California
IP address city: Sunnyvale
IP postcode: 94089
IP address latitude: 37.4249
IP address longitude: -122.0074
ISP of this IP [?]: Inktomi Corporation
Organization: Inktomi Corporation
Host of this IP: [?]: web81207.mail.mud.yahoo.com [Whois]
Local Time of this IP country:

Hello I'm New here! Joined: 24 Dec 2009 Posts: 18

Here's the latest email I got on my scamming gmail.

UNITED NATION PAYMENT OFFICE
UN HEAD OFFICE ABUJA.
PLOT 11, BLOCK 43,
GARKI, ABUJA.NIGERIA
TEL: +2347035064732

Dear Carl putt,

UNICEF COMPENSATION QUALIFICATION NUMBERS: (UCF/UN/EU/009)

In anticipate of your email this office has been assigned to handle the payment of your compensation grant donation from unicef, we just confirmed that you have been officially cleared for delivery by the Verifications Department at the headquarters of the United nation pay office.

All your compensation documents which include your certificate and a covering document (Money Laundering protection and Letter of Affidavit for Claims) from the British government, stating that the money was obtained legally through Unicef Foundation will be sent to you as soon as you meet up with any of the option selected.

You can now begin the final step of the claims process, which is the delivery of your compensation prize to you. With regards to this, there a options open to you, you are required to select the most convenient of the options and immediately get back to us for adequate instructions on how you can pay the fees.

NOTE: THE CHARGES MUST BE PAID BY YOU BEFORE WE CAN DELIVER YOUR PRIZE TO YOU

The options, together with their associated conditions are presented below:
Option 1:
Courier your compensation grant bank draft and documents to you via any of this DHL channels listed below:

(24 hours Delivery)
Mailing....................... ..................$100.00
Insurance..................... .................$200.25
Vat (5%).......................... ..........$50.00
Total......................... ..................$350.25

Option 2:

Direct Bank Wire Transfer :

In this option, your grant amount shall be transfered to your nominated local bank account within 48hrs that is 2(Two) working days.
Administrative Charge : ========= $US 70:00
Tax Clearance Charge : ========== $US 80:00
Insurance Charge : ========== $US 200:00
Transfer Vat Charge : ========== $US 170:00
Total : $US 520:00

Note that your grant is protected by a hardcover insurance policy, which makes it impossible to deduct any amount from the money before it is being remitted to you. This means that the above charges cannot be deducted from the prize and hence must be provided by you before your prize is being delivered to you. Moreover, you are required to send payment charges via western union money transfer, of what ever option you have chosen to our national account's officer, who is in charge of your bank draft and Compensation documents.

Also, you are required to send to us as soon as possible, these few information below:

(1.) The delivery option which you have chosen.
(2.) Re confirm Your home address and
(3.) Attach a scanned copy of either your driver's license, international passport (photo page) or any other legally identifying document and send to us for identification and documentation purposes.

Having done this, you will be given proper guidelines on how delivery payments are made by beneficiary.
Upon the confirmation of your payment by the verifications department of this company, your parcel shall be immediately cleared for delivery and shall be delivered to you in accordance with the conditions stated in the option chosen.

ALL BENEFICIARIES MUST NOTE THAT STRINGENT ADHERENCE TO THESE INSTRUCTIONS IS A VERY SALIENT PART OF THE CLAIMS PROCESS, AS A BENEFICIARY MAY BE DISQUALIFIED WITHOUT ANY FURTHER PRIOR NOTICE ON THESE GROUNDS.

Regards.
PAYMENT OFFICER
MR THOMAS SANCHEZ
UN HEAD OFFICE ABUJA.
PLOT 11, BLOCK 43,
GARKI, ABUJA.NIGERIA
TEL: +2347035064732

Header

Received: from blu0-omc2-s7.blu0.hotmail.com (blu0-omc2-s7.blu0.hotmail.com [65.55.111.82])
by mx.google.com with ESMTP id 10si3546210fxm.74.2010.01.16.00.36.30;
Sat, 16 Jan 2010 00:36:30 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.111.82 as permitted sender) client-ip=65.55.111.82;

Posted: Fri Jan 22, 2010 7:12 pm

Hi Scouter!
This is the same Kansas location.
I don't mind helping but if you want to be able to find the locations yourself go to (my favourite): http://www.ip-adress.com/trace_email/
or
http://www.ipaddresslocation.org/email-tracking/email-header.php
or
http://headertool.apelord.com/

Hello I'm New here! Joined: 24 Dec 2009 Posts: 18

Fartina o'douriss wrote:

Hi Scouter!
This is the same Kansas location.
I don't mind helping but if you want to be able to find the locations yourself go to (my favourite): http://www.ip-adress.com/trace_email/
or
http://www.ipaddresslocation.org/email-tracking/email-header.php
or
http://headertool.apelord.com/

O.K. Thanks.

I've been playin around with him on 6 different gmails and running out of ideas.One was going for almost a month with 19 gmails regarding an apparently cheap 2006 audi for 5000$. What a deal.And he still never sold it.

Not quite a Newb Joined: 21 Jan 2010 Posts: 21

Fartina o'douriss wrote:

I put the headers through: http://www.ip-adress.com/trace_email/
She's in Kansas apparently.

Is having a gmail account enough to stop the scammers doing this back?

Hello I'm New here! Joined: 24 Dec 2009 Posts: 18

Noahflintstone wrote:

Fartina o'douriss wrote:

I put the headers through: http://www.ip-adress.com/trace_email/
She's in Kansas apparently.

Is having a gmail account enough to stop the scammers doing this back?

That's what I was thinkin about my gmail accounts.He's probably so busy answering emails he don't bother.

Not quite a Newb Joined: 21 Jan 2010 Posts: 21

That things scarry, put an email from my hotmail account in and it gave out exactley where I am Confused

I notice a few scam emails i've had are gmail, so they must know better

Posted: Fri Jan 22, 2010 11:47 pm

I wouldn't imagine too many lads know how to do this. Using Gmail will stop the ones that do though.

It's also worth noting that they can't trace you any more accurately than (maybe) city level without asking your ISP, and for that they'd need to come up with a really good reason they need to know. ("I'm an evil scammer and feel like hunting this person down" won't work too well Wink

Quote:

68.142.199.111 from United States, Sunnyvale.

That's Yahoo HQ, not Google. You'll need the complete header to trace that one, you didn't provide enough of it.

Posted: Sat Jan 23, 2010 2:36 am

If you're concerned about your own email put the headers through one of these sites. Mine tells me that I'm in Pacifica, California. Along with thousands of other folks. So yes, a lad could learn that also, but all he has is that and a fake name. Good luck to him if he's going to try to hunt me down!

Hello I'm New here! Joined: 19 Aug 2010 Posts: 2

that was a sad story man. I was a victim also of a scam. A person assured me that he will buy some of my autoparts but then he did not show up during our meet up.