ad: dxeng

Herbert J. Susmann KA2ZOH

Discussion in 'Stolen Radios, Scams and Rip-Offs' started by WA6MHZ, Dec 12, 2012.

Thread Status:
Not open for further replies.
ad: L-HROutlet
ad: l-assoc
ad: L-rfparts
ad: l-rl
ad: l-gcopper
ad: l-innov
ad: l-sarc
ad: L-Geochron
ad: l-Waters
  1. WA6MHZ

    WA6MHZ Premium Subscriber QRZ Page

    KA2ZOH

    Herb KA2ZOH has had is call hijacked by a really ROTTEN RB somewhere in UK that is attempting to scam the good members of QRZed with bogus radio offers. The bogus addy of ka2zoh@yahoo.com was fraudulently made to try and swindle Hams. Herb has nothing to do with this and is an unfortunate victim of Identity theft.

    I received a suspicious email which didn't sound right and a good friend verified it was bogus. here is the full text in case anyone would like to route out the RB and make him burn in HELL!



    Content-Type: multipart/alternative; boundary="398296598-2061691056-1355338658=:67986" Return-Path: <ka2zoh@yahoo.com> Received: from eastrmimpi109 ([68.230.240.49]) by eastrmfepi202.cox.net (InterMail vM.8.01.04.00 201-2260-137-20101110) with ESMTP id <20121212185742.FNUD28922.eastrmfepi202.cox.net@eastrmimpi109> for <wa6mhz@cox.net>; Wed, 12 Dec 2012 13:57:42 -0500 Received: from arrlsmtpout1.edgeni.net ([74.115.253.198]) by eastrmimpi109 with cox id aixg1k01L4Hc0oA01ixh44; Wed, 12 Dec 2012 13:57:41 -0500 X-CT-Class: Clean X-CT-Score: 0.00 X-CT-RefID: str=0001.0A020203.50C8D3A6.00B6,ss=1,re=0.000,fgs=0 X-CT-Spam: 0 X-Authority-Analysis: v=2.0 cv=R9CB6KtX c=1 sm=1 a=QJlNIDVtj+tr+jHOiMeHuw==:17 a=f8_S3n9t2uQA:10 a=keEbVz7ItqgA:10 a=oJL9TIRMo0YA:10 a=rpTeOYvVnQsA:10 a=wPDyFdB5xvgA:10 a=CjxXgO3LAAAA:8 a=1_AvpuH65FkA:10 a=KP7h-czVoX335Zh3Zh0A:9 a=wPNLvfGTeEIA:10 a=PR5ZaPcMzSwA:10 a=vdInvPMzt-oA:10 a=VFM5RT-aPGUA:10 a=mYGSPl7yMm78ZpnOGi0A:9 a=_W_S_7VecoQA:10 a=e3wFpzz6miCTbuWb:21 a=QJlNIDVtj+tr+jHOiMeHuw==:117 X-CM-Score: 0.00 Received: from [172.31.4.192] (helo=arrlscan7.edgeni.net) by arrlsmtpout1.edgeni.net with esmtp (Exim 4.63) (envelope-from <ka2zoh@yahoo.com>) id 1TirUy-0006RM-Sw for wa6mhz@arrl.org; Wed, 12 Dec 2012 13:57:40 -0500 Received: from localhost ([127.0.0.1] helo=arrlscan7.edgeni.net) by arrlscan7.edgeni.net with esmtp (Exim 4.71) (envelope-from <ka2zoh@yahoo.com>) id 1TirUx-0006cC-TT for wa6mhz@arrl.org; Wed, 12 Dec 2012 13:57:40 -0500 Received: from nm18-vm0.bullet.mail.ird.yahoo.com ([77.238.189.215] helo=nm18-vm0.bullet.mail.ird.yahoo.com) with IPv4:25 by arrlscan7.edgeni.net; 12 Dec 2012 13:57:39 -0500 Received: from [77.238.189.48] by nm18.bullet.mail.ird.yahoo.com with NNFMP; 12 Dec 2012 18:57:38 -0000 Received: from [212.82.109.129] by tm1.bullet.mail.ird.yahoo.com with NNFMP; 12 Dec 2012 18:57:38 -0000 Received: from [127.0.0.1] by omp1036.mail.ird.yahoo.com with NNFMP; 12 Dec 2012 18:57:38 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 879322.42833.bm@omp1036.mail.ird.yahoo.com Received: (qmail 68577 invoked by uid 60001); 12 Dec 2012 18:57:38 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1355338658; bh=WOTZYixnfSoZOQsGdylo3MovWuTQ+4/atFPyRz6aZhg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=AHnVVNOqJ5Y4GO69N6GNCeiqCGwsTi1hsVJYBYLnl5wfhvuSzAqX+21CLwVzCmkGXAf7TDy7Vn70IFEdf5e35hdeEcskjwzR7CrnlWiqm0OFSn1yYGbB0gP7fWT+13BoyJNzY//gSAdFgxnxIjGLEWpS0fFTV+DEVjXqLfDdAY8= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=0VFVIByGksLeV5BT1PMgwPxks9tD8N8Nm6R92JW+TIkmY6gGQ14RrdjKPZK+JUeivsIx845lFFOr6GsFFomveAr3oE6WqOcgWBDcSCDD6u6RUeLbhNZz1WqflwKCKrk4Ibbw/tEnkhCmNgIoEetoyJqBjRgDMt88LEE/ww32/Lk=; X-YMail-OSG: VSwIcP4VM1naEo.4IgvSMSefudsBWEUpAeIFc_5RUM.AxZ9 gpb5ikhqGzL73hS.U9QxuKvMfBk1cD14JjVFc3AsElGvYPOsU.xJLFZ95Cik tHa7dqvJEPtpeYch2.HkuP9g2EvUjQmBG0FPBvy2sZVa.G7xV94byGTsc1Uj AkPA7c_h_nGgkxqeY9Bem3EvrhXTs1282CFSoD0kpa8WSc__esh7MrnsUi7_ 3E7AI0uiLc7I2vQXl705s3iZi_xrWm2u_Idesz0j2KrVKQ5uZqditORSX2RW XscYOV0DqsI2gIOqTd7QkjvafHBojAcF68n5Q1GmmIVQH0l5CEikXtPGMboZ oatHpBUHifZJ76UwrxNqys8UHVh.NcCM0dDUydVh15i9CceiqgGZy7TeBe_p VT1_kr59DVf.L2mQP2MDQx_hfs8U1BhAzOMbHNGfxe91D9A-- Received: from [87.248.115.214] by web172404.mail.ir2.yahoo.com via HTTP; Wed, 12 Dec 2012 18:57:38 GMT X-Rocket-MIMEInfo: 001.001,SGVsbG8gLApIb3cgaXMgeW91ciBkYXkgZ29pbmc_Ckkgc2F3IHlvdXIgV1RCIGFkdmVydCx0aGF0J3Mgd2h5IGFtIHNlbmRpbmcgdGhpcyBtYWlsLgpJIGhhdmUgRlRkeDUwMDDCoCB1cCBmb3Igc2FsZSBpbiBhbiBleGNlbGxlbnQgY29uZGl0aW9uLgpMb29raW5nIHRvIHJlYWQgYmFjayBmcm9tIHlvdSBzb29uZXN0LgoKwqAKCkhFUkJFUlQgKEtBMlpPSCkKTlkgMTQ4NTAuClRYVDooNTE2KSA2MzAtMzI5NQoBMAEBAQE- X-Mailer: YahooMailWebService/0.8.128.478 Message-ID: <1355338658.67986.YahooMailNeo@web172404.mail.ir2.yahoo.com> Date: Wed, 12 Dec 2012 18:57:38 +0000 (GMT) From: HERBERT J SUSMANN <ka2zoh@yahoo.com> Reply-To: HERBERT J SUSMANN <ka2zoh@yahoo.com> Subject: FTdx5000 for sale To: "wa6mhz@arrl.org" <wa6mhz@arrl.org> MIME-Version: 1.0 X-Assp-Version: 1.7.5.7(1.0.07) on arrlscan7.edgeni.net X-Assp-Score: -9 (77.238.189 in griplist (0.11)) X-Assp-Score: 12 (bombSubjectRe: 'sale') X-Assp-Received-SPF: none ip=77.238.189.215 mailfrom=ka2zoh@yahoo.com helo=nm18-vm0.bullet.mail.ird.yahoo.com X-Assp-Envelope-From: ka2zoh@yahoo.com X-Assp-Intended-For: wa6mhz@arrl.org X-Assp-ID: arrlscan7.edgeni.net 38659-00576 --398296598-2061691056-1355338658=:67986 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Hello ,=0AHow is your day going?=0AI saw your WTB advert,that's why am send= ing this mail.=0AI have FTdx5000=A0 up for sale in an excellent condition.= =0ALooking to read back from you soonest.=0A=0A=A0=0A=0AHERBERT (KA2ZOH)=0A= NY 14850.=0ATXT:(516) 630-3295=0A --398296598-2061691056-1355338658=:67986 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable <html><body><div style=3D"color:#000; background-color:#fff; font-family:ti= mes new roman, new york, times, serif;font-size:12pt"><div><span>Hello ,<br= >How is your day going?<br>I saw your WTB advert,that's why am sending this= mail.<br>I have FTdx5000&nbsp; up for sale in an excellent condition.<br>L= ooking to read back from you soonest.</span></div><div>&nbsp;</div><div><br= ><span style=3D"font-size:18px;"><b>HERBERT (</b></span><span style=3D"font= -size:18px;"><span class=3D"phone_number"><span class=3D"csgn"><span class= =3D"csignm">KA2ZOH</span></span></span><b>)</b></span><br><span style=3D"fo= nt-size:18px;"><b>NY 14850.<br>TXT:(516) 630-3295</b></span></div><div><spa= n style=3D"font-size:large;"><br></span></div></div></body></html> --398296598-2061691056-1355338658=:67986--

    Hope some of our computer-adept lurkers can find ways to make life miserable for
    this really rotten SOB!
     
  2. K4FRC

    K4FRC Ham Member QRZ Page

    I was offered a Hallicrafters HT-32A by someone claiming to be Herbert J. Susmann (KA2ZOH)...email address: KA2ZOH@yahoo.com. In one of his emails he requests payment via Western Union and lists his name as Herbert Susmann, while in another he lists his name as Herbert Pena....one of his emails lists his location as Albany, New York, 12308, while in another he lists his address as Ithaca, New York. In each of his emails he lists his TXT as: 516-630-3295…and last but not least upon searching for his call sign on QRZ, it of course does not exist.
     
  3. WD4CHP

    WD4CHP Ham Member QRZ Page

    The phone number 516-630-3295 is located in Nassau, NY.
     
  4. W1GNL

    W1GNL Ham Member QRZ Page

    This same individual tried to scam me as well by offering an IC-706MKIIG (as per my Want to buy post) then told me to send him money via Western Union. I just followed QRZ policy on WU offers and told him no thanks, but I can verify this person is still at it.
     
  5. W7NIK

    W7NIK Ham Member QRZ Page

    I just received an email from this guy BS!!!!
     
  6. AD6KA

    AD6KA Ham Member QRZ Page

    Finding an IP Address through an email header is not
    dificult, but the resulting info is often of dubious value.
    [TABLE]
    [TR="class: alt"]
    [TD]IP Address
    [/TD]
    [TD]1.7.5.7
    [/TD]
    [/TR]
    [TR]
    [TD]Location
    [/TD]
    [TD][​IMG] INDIA, TAMIL NADU, CHENNAI
    [/TD]
    [/TR]
    [TR="class: alt"]
    [TD]Latitude, Longitude
    [/TD]
    [TD]13.08784, 80.27847 (13°5'16"E 80°16'42"N)
    [/TD]
    [/TR]
    [TR]
    [TD]Connection through
    [/TD]
    [TD]SIFY LIMITED
    [/TD]
    [/TR]
    [TR="class: alt"]
    [TD]Local Time
    [/TD]
    [TD]17 Dec, 2012 06:35 AM (UTC +05:30)
    [/TD]
    [/TR]
    [TR]
    [TD]Net Speed
    [/TD]
    [TD]DSL
    [/TD]
    [/TR]
    [TR="class: alt"]
    [TD]Area Code
    [/TD]
    [TD]-
    [/TD]
    [/TR]
    [TR]
    [TD]IDD Code
    [/TD]
    [TD]91
    [/TD]
    [/TR]
    [TR="class: alt"]
    [TD]ZIP Code
    [/TD]
    [TD]-
    [/TD]
    [/TR]
    [TR]
    [TD]Weather Station
    [/TD]
    [TD]MADRAS (INXX0075)
    [/TD]
    [/TR]
    [TR="class: alt"]
    [TD]Mobile Country Code (MCC)
    [/TD]
    [TD]-
    [/TD]
    [/TR]
    [TR]
    [TD]Mobile Network Code (MNC)
    [/TD]
    [TD][/TD]
    [/TR]
    [TR="class: alt"]
    [TD]
    You can find a map to the IP location here,
    as well as just posting in the complete header and letting the program ferret out the relevant info:

    [/TD]
    [/TR]
    [/TABLE]
    http://www.iptrackeronline.com/email-header-analysis.php

    Other info found:
    [TABLE="class: forumline"]
    [TR]
    [TD="class: row3, align: center"]Probable IP
    [/TD]
    [TD="class: row3, align: center"]Provider
    [/TD]
    [TD="class: row3, align: center"]City
    [/TD]
    [TD="class: row3, align: center"]Flag
    [/TD]
    [TD="class: row3, align: center"]Country
    [/TD]
    [/TR]
    [TR]
    [TD="class: row2, align: center"]* 1.7.5.7
    Thrd Part Info:
    [/TD]
    [TD="class: row2, align: center"][​IMG][​IMG]
    [/TD]
    [TD="class: row2, align: center"]Sify Limited
    [/TD]
    [TD="class: row2, align: center"]Taramani
    [/TD]
    [TD="class: row2, align: center"][​IMG]
    [/TD]
    [TD="class: row2, align: center"]India
    [/TD]
    [/TR]
    [TR]
    [TD="class: row1, align: center"]87.248.115.214
    [/TD]
    [TD="class: row1, align: center"][​IMG][​IMG]
    [/TD]
    [TD="class: row1, align: center"][/TD]
    [TD="class: row1, align: center"]n/a
    [/TD]
    [TD="class: row1, align: center"][​IMG]
    [/TD]
    [TD="class: row1, align: center"]Ireland
    [/TD]
    [/TR]
    [TR]
    [TD="class: row2, align: center"]212.82.109.129
    [/TD]
    [TD="class: row2, align: center"][​IMG][​IMG]
    [/TD]
    [TD="class: row2, align: center"][/TD]
    [TD="class: row2, align: center"]Dublin
    [/TD]
    [TD="class: row2, align: center"][​IMG]
    [/TD]
    [TD="class: row2, align: center"]Ireland
    [/TD]
    [/TR]
    [TR]
    [TD="class: row1, align: center"]77.238.189.48
    [/TD]
    [TD="class: row1, align: center"][​IMG][​IMG]
    [/TD]
    [TD="class: row1, align: center"][/TD]
    [TD="class: row1, align: center"]n/a
    [/TD]
    [TD="class: row1, align: center"][​IMG]
    [/TD]
    [TD="class: row1, align: center"]Ireland
    [/TD]
    [/TR]
    [TR]
    [TD="class: row2, align: center"]77.238.189.215
    [/TD]
    [TD="class: row2, align: center"][​IMG][​IMG]
    [/TD]
    [TD="class: row2, align: center"][/TD]
    [TD="class: row2, align: center"]n/a
    [/TD]
    [TD="class: row2, align: center"][​IMG]
    [/TD]
    [TD="class: row2, align: center"]Ireland
    [/TD]
    [/TR]
    [TR]
    [TD="class: row1, align: center"]74.115.253.198
    [/TD]
    [TD="class: row1, align: center"][​IMG][​IMG]
    [/TD]
    [TD="class: row1, align: center"]Bit Refinery, Llc
    [/TD]
    [TD="class: row1, align: center"]Denver
    [/TD]
    [TD="class: row1, align: center"][​IMG]
    [/TD]
    [TD="class: row1, align: center"]United States
    [/TD]
    [/TR]
    [TR]
    [TD="class: row2, align: center"]68.230.240.49
    [/TD]
    [TD="class: row2, align: center"][​IMG][​IMG]
    [/TD]
    [TD="class: row2, align: center"]Cox Communications
    [/TD]
    [/TR]
    [/TABLE]

    73, Ken AD6KA
     
  7. KC5MVV

    KC5MVV Ham Member QRZ Page

    I have had one also wanting a tuner I have for sale but he said to get the info from the link below. But the call sign doesn't show up on QRZ. I will not do any business with this guy because I think he is trying to scam me. But that wont work. Before I do business with anybody they have to have a valid QRZ contact with correct email. Then we will talk on the phone about the deal. But this guy doesn't want to tread info...So pooooweeee on him...


    http://qrz.eu.mn/ssl-secure/web/Login by QRZ.COM.htm
     
Thread Status:
Not open for further replies.

Share This Page

ad: Waters-2