Learn about us and introduce yourself
by scamvictim2011 Fri Oct 21, 2011 5:11 pm
Hi,

I wish I could get these folks stopped!! I ordered boots on this website Wednesday and its a fake. They used my credit card all day until I canceled it the next day. I work as a web developer and graphic artist and their site fooled me. This is the website:http://www.uggboots-shoppe.com/default.asp?k=home

There IP adress: 74.125.82.52 goes to a lot of bad stuff..."Honey Pot?"....Can I find out the exact location?

Here is the info in the header of the email that was sent to me. I deleted my info where there is a gap.
From Kiki Joo Fri Oct 21 09:48:02 2011
X-Apparently-To:
Return-Path: <[email protected]>
Received-SPF: pass (domain of gmail.com designates 74.125.82.52 as permitted sender)
d2UgZ28gYWhlYWQgdGhlIG9yZGVyPwoKMjAxMS8xMC8yMCBDbGF1ZGV0dGUg
PHJveHlkYWlzeWJsdWVAeWFob28uY29tPgoKSSBhbHJlYWR5IGNvbnRhY3Rl
ZCBteSBjcmVkaXQgY2FyZCBjb21wYW55IGFib3V0IHlvdXIgZnJhZHVsZW5j
ZSB3ZWJzaXRlLgrCoAEwAQEBAQ--
X-YMailISG: QHgP.K8WLDtY5ts4D3jDmc9aQUiIeZmG7b67EwKzXnH9wIpy
dbphHZdXyGJRzbtJkztnLqZKBlrFWBJp2BxZh_XQnGCHFldrPZUN9yaqXadY
9T5.0vQeqtcUf_d.gX6g1clikPxVKKm6ArOqfPrH7lfZZMLCACt6qPs4P60m
PGuaCuHCtKJZZ.SawFC_dJVDeBOpI8pXa.tu16eMA7Bx4kPQujIYbSsIlmfQ
51so7INsj1dDrBM.842TRDP4fsnfIWs1reHICuOD00Sv78_CCC0j5uRzbV1t
g3z5zBHqX9sCLt31qOr56RnJ1me.AqIXjmMaWeD_n593rThqyWyfPcXtPctA
l88zCXnz5hiXZMGza2OyiY8pNVIhNQezAfEFsmdqRhqEbX8YjOBWgCqKpKwN
aO6i4OgcduIi_lCMoRYwXKw2ovasZ3wwrmrhlOVhSjqS00UaB.dYqSYH9rb4
YC_m1mApiZOHqnCQLsmc78nv.uvNEOS7Bxnm98WX_.4zFZWuBmQz8fwXlRy7
04.Nt_rHwlO.pM_7L05V4v.1EMBqYTSSd1gc75Q7dAwp9FWVnQr6iWmarR5u
WmmZMCBK_fM2xcX_WCezJujZMHOuBWgajPGRSl8QonqjQ8qJCprl785skmBr
70iZJgMwQxVy.3yGupdaqmwKbQ1xMmy7BSS07pyb.MHX9z_AsvDgbsFnRSmm
_1B1o1Kh_TGJUZXwk8IKccYKAZtd6Xg6zJjYE1heFiXuPbifqPw4dNwm0KlD
Lez2yMDsFiGQBq3sOpmLC_Lk_Z_D0rdwRqYtwlG8eg58XGpOBKXSQBT7Bxns
N79FNIyiokkRzcFqk8bCpIio3uH7S6xPmGsORltTsCLKfInsHVmSNJPH.Vq5
JU5fEd6ZIkVAs2yN5.l2h7lWTyp4R6vmq0xRXGdg.wfCgmaRRd2ry_.WDzKk
EBMWmrt5Giq_rgz4E8OGfbUbj5FRmOHu8V_8VfDLadVk0xKkg1vV_JI0Gg7I
mJRqQvTR5kyv6bHYym0FBr8DWSynleY22ZpdhLlGxfRrdroj..9zbCJW20Cs
MNxdtct.ciI_.xm7CpjIKleoI3d.eAoLdO1GTcM1Z9RWUZaLbEc2xt5sI0kx
1c6wiuBnrnAnfX952Y9EJ0MrbHOG
X-Originating-IP: [74.125.82.52]
Authentication-Results: mta1197.mail.mud.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-ww0-f52.google.com) (74.125.82.52)
by mta1197.mail.mud.yahoo.com with SMTP; Fri, 21 Oct 2011 02:48:03 -0700
Received:
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=/synHK5zAA6HrZfxphohMA70GB/MfPqhsSdCs7XO6Lg=;
b=cR0S4dSNBqx51gThdfJGjD8P3UGE32s9uQhC7qGZkdUOOSwKS+3Ie1q13Qs98hIIrg
3Z1igQ0irwTxWeg9iQ4Rjjw2Cw0YZZBEV5dcAVqLQWPbmYyn4gvmtD2Ppyjyz1VOhecG
rOSbYjtSXo5Pbzyz6W4iFh2Ij7scQ+6pj0GTQ=
MIME-Version: 1.0
Received: by 10.227.209.69 with SMTP id gf5mr5384772wbb.28.1319190482539; Fri,
21 Oct 2011 02:48:02 -0700 (PDT)
Received: by 10.180.95.8 with HTTP; Fri, 21 Oct 2011 02:48:02 -0700 (PDT)
In-Reply-To: <[email protected]>
References: <[email protected]>
Date: Fri, 21 Oct 2011 17:48:02 +0800
Message-ID: <CADdVOStOQgLh154+5NduWh9atxJEqZC1f4B7C==SxBL4=8vpOg@mail.gmail.com>
Subject: Re: order # No615013
From: Kiki Joo <[email protected]>
To:
Content-Type: multipart/alternative; boundary=000e0ce03e041a560004afcbf829
Content-Length: 1115
Advertisement

by Justin Fri Oct 21, 2011 8:40 pm
Hello scamvictim2011!

I'm sorry you were scammed. Hopefully your bank is not holding you responsible for the fraudulent charges. Unfortunately the scammer is using gmail which strips the originating IP. Even with an IP it only gives you a general geographical location. Not enough to find the actual person.

Going forward I'm sure you will do a little research before buying something online.

Justin

Who is online

Users browsing this forum: ClaudeBot and 0 guests