PDA

View Full Version : scam



W6MJZ
06-07-2011, 04:54 PM
had this person email me about i radio for sell on here. he said he wanted to buy it and all then the last email he sent me was asking me to send $210 to the shipping agent for him cause he couldnt do it. here is there info Wil Craig <wilcraig@rediffmail.com> dont be taken by this scam

73,
James whitney
W6MJZ

AD6KA
06-08-2011, 02:36 AM
James helped me do some digging, and just for fun..
wilcraig@rediffmail.com
Redffimail is a free email service based in Mumbai, India. Charming place, that!
Of course there were many odd paths but we
managed to track down the orifinal IP of
83.170.116.30, Location: UK

inetnum: 83.170.116.30 - 83.170.116.30
netname: UK2-55320-DEDI
descr: UK2 Customer
country: GB
admin-c: BB963-RIPE
tech-c: BB963-RIPE
status: ASSIGNED PA
remarks: Abuse matters to: abuse@uk2.net
remarks: Abuse mail to any other address may be ignored
mnt-by: AS13213-MNT
source: RIPE # Filtered

person: Bo Bendtsen
address: UK2.NET
address: One Canada Square, Canary Wharf
address: London
address: UK
phone: +44 20 7987 1200
fax-no: +44 20 7987 0449
e-mail: ripe@uk2.net
nic-hdl: BB963-RIPE
mnt-by: AS13213-MNT
source: RIPE # Filtered
(Only the ISP provider info of course)


And a map of that original IP email,
Though it seems to be in the middle of a park
of some kind north of Leeds .
You really have switch to "Map" and pan out a ways to make any sense of it.

http://www.ip-adress.com/map/Map_of_United_Kingdom/7fa6cc7ae3867a5e66ccdc462cdc2737

Let's hope this one pops up again!
73, Ken AD6KA

W4PC
06-10-2011, 10:21 AM
Had this one last night to my company

X-Antivirus: AVG for E-mail
Return-Path: <postmaster@visionistanbul.com>
Delivered-To: ricker@2162194.2373118
Received: (qmail 25477 invoked by uid 78); 10 Jun 2011 00:47:40 -0000
Delivered-To: info@cssincorp.com
Received: (qmail 25473 invoked by uid 78); 10 Jun 2011 00:47:40 -0000
Received: from unknown (HELO cloudmark1) (10.49.16.82)
by 0 with SMTP; 10 Jun 2011 00:47:40 -0000
Received: from [77.75.35.30] ([77.75.35.30:55798] helo=lin03.radore.net)
by cm-mr7 (envelope-from <postmaster@visionistanbul.com>)
(ecelerity 2.2.3.46 r(37554)) with ESMTP
id 46/0E-23826-CA961FD4; Thu, 09 Jun 2011 20:47:40 -0400
Received: from lin03.radore.net (localhost [127.0.0.1])
by lin03.radore.net (8.14.4/8.14.4/Debian-2ubuntu1) with ESMTP id p5A0kxO8031039
for <info@cssincorp.com>; Fri, 10 Jun 2011 03:46:59 +0300
Received: (from visionistanbulcom@localhost)
by lin03.radore.net (8.14.4/8.14.4/Submit) id p5A0kxNg031023;
Fri, 10 Jun 2011 03:46:59 +0300
Date: Fri, 10 Jun 2011 03:46:59 +0300
Message-Id: <201106100046.p5A0kxNg031023@lin03.radore.net>
X-Authentication-Warning: lin03.radore.net: visionistanbulcom set sender to postmaster@visionistanbul.com using -f
To: info@cssincorp.com
Subject: Order Enquiry...
From: dan <dan_lee03@rediffmail.com>
Reply-To: dan_lee03@rediffmail.com
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

From: dan [mailto:dan_lee03@rediffmail.com]
Sent: Thursday, June 09, 2011 8:47 PM
To: info@cssincorp.com
Subject: Order Enquiry...

Good Day
l want to know if you ship to Ukraine and accept credit cards and as a method of payment Looking forward to read back from you Have a nice Day ahead

Regard
Mr Tom lee


No callsign.. no products.. no way!! :)

Rick - W4PC

M0DCD
06-13-2011, 09:57 AM
If you go on the Ordnance Survey map, a nearby place name seems quite appropriate - Rotten Park. However there's no-one living up on that bit of Embsay Moor, unless you're a sheep or a grouse.

WA6UZR
06-25-2011, 03:55 AM
I just got an e-mail from this address and they want to buy a horse trailer we have for sale.
Sounded to fishy to me, so I reported it to PayPal which is how they wanted to pay for it.
Thanks for posting your info.

Art
WA6UZR



had this person email me about i radio for sell on here. he said he wanted to buy it and all then the last email he sent me was asking me to send $210 to the shipping agent for him cause he couldnt do it. here is there info Wil Craig <wilcraig@rediffmail.com> dont be taken by this scam

73,
James whitney
W6MJZ

AD6KA
06-25-2011, 10:08 PM
Maybe report it, wiith all emails & headers to abuse@rediffmail.com?
Maybe they can "flag" the account.
(Violates the "Terms Of Service Agreement")
If they get more than one complaint, they will kill the account.
Small consolation I know, but lets the scammer know people are
watching him.....
Ken AD6KA

ad: giga-rw