by YaYa
Wed Dec 15, 2010 8:31 am
I posted a wanted add in craigslist. I didn't look at a reply email carefully before I opened it. It repeated my craigslist title, but it was from a private email address. I don't know how they do this, some kind of hack, but a reply from craigslist should have "craigslist" as the sender. It had all the links to craiglist in the email, but it's fake and can take you somewhere to steal your information!!
Right away I look up the IP. It's a scam from Gawd only knows where. It says Washington but it really could come from anywhere in the world. The IP is all over the net, and even on here once as a scam. This email was from a "Matthew Long" He must be using that name right now as I found "him" under investigation for some scam. Only we know there is no Matthew Long, he is nothing more then a number, and will never be caught. English is not this persons first language.
I'll post all the information on this IP. but I think it's important for everyone to know..do not answer emails that do not look right from craigslist or ebay, never click the links in these emails. Any information you need from either of these sites can be obtained by going directly there. Never ever give out personal information via email. And none of these places ask for SS#.
This is the most important part of the email.. blu0-omc1-s11.blu0.hotmail.com His IP is 65.55.116.22
From: Matthew Long <[email protected]
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9Mg==
X-Message-Status: n
X-SID-PRA: Matthew Long <[email protected]>
X-SID-Result: SoftFail
X-DKIM-Result: None
X-AUTH-Result: FAIL
X-Message-Info: JGTYoYF78jEg+XzuAEmpZ5gBPT4hmrZJj13kWKpOl7ITKH8hIDuyISScG4IrgcdsFU3Wi3sQPwy/hfuDTmvf5q7/X4aj2xSNda9T59eC4YZ297c9ahtJdA==
Received: from mxo6p.craigslist.org ([208.82.236.171]) by bay0-mc1-f2.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 15 Dec 2010 02:08:37 -0800
Received: from blu0-omc1-s11.blu0.hotmail.com (blu0-omc1-s11.blu0.hotmail.com [65.55.116.22])
by mxi6p.craigslist.org (Postfix) with ESMTP id A125A70AE8
for <[email protected]>; Wed, 15 Dec 2010 02:08:37 -0800 (PST)
Received: from BLU0-SMTP10 ([65.55.116.9]) by blu0-omc1-s11.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 15 Dec 2010 02:08:37 -0800
X-Originating-IP: [123.55.84.39]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Received: from 51504048372615 ([123.55.84.39]) by BLU0-SMTP10.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 15 Dec 2010 02:08:36 -0800
Date: Wed, 15 Dec 2010 18:08:33 +0800
From: Matthew Long <[email protected]>
To: [email protected]
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2727.2615
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.2615
Subject: tom's for a drum set (newark)
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html
X-OriginalArrivalTime: 15 Dec 2010 10:08:36.0408 (UTC) FILETIME=[09A8AB80:01CB9C40]
Return-Path: [email protected]
<html> <span style="background-color: #ffff99; font-family: courier; font-weight: bold">** CRAIGSLIST ADVISORY --- AVOID SCAMS BY DEALING LOCALLY<br>** Avoid: <font color="red">wiring money, cross-border deals, work-at-home</font><br>** Beware: <font color="red">cashier checks, money orders, escrow, shipping</font><br>** More Info: <a href="http://www.craigslist.org/about/scams.html">http://www.craigslist.org/about/scams.html</a><br></span><br><br><html><head><META http-equiv=3D"Content-Type" content=3D"text/html;charset=3D=
utf-8"></head><body>c.ould you lessen the price tag?
</body></html>
<br><br><hr>this message was remailed to you via: [email protected]<hr>
Right away I look up the IP. It's a scam from Gawd only knows where. It says Washington but it really could come from anywhere in the world. The IP is all over the net, and even on here once as a scam. This email was from a "Matthew Long" He must be using that name right now as I found "him" under investigation for some scam. Only we know there is no Matthew Long, he is nothing more then a number, and will never be caught. English is not this persons first language.
I'll post all the information on this IP. but I think it's important for everyone to know..do not answer emails that do not look right from craigslist or ebay, never click the links in these emails. Any information you need from either of these sites can be obtained by going directly there. Never ever give out personal information via email. And none of these places ask for SS#.
This is the most important part of the email.. blu0-omc1-s11.blu0.hotmail.com His IP is 65.55.116.22
From: Matthew Long <[email protected]
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9Mg==
X-Message-Status: n
X-SID-PRA: Matthew Long <[email protected]>
X-SID-Result: SoftFail
X-DKIM-Result: None
X-AUTH-Result: FAIL
X-Message-Info: JGTYoYF78jEg+XzuAEmpZ5gBPT4hmrZJj13kWKpOl7ITKH8hIDuyISScG4IrgcdsFU3Wi3sQPwy/hfuDTmvf5q7/X4aj2xSNda9T59eC4YZ297c9ahtJdA==
Received: from mxo6p.craigslist.org ([208.82.236.171]) by bay0-mc1-f2.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 15 Dec 2010 02:08:37 -0800
Received: from blu0-omc1-s11.blu0.hotmail.com (blu0-omc1-s11.blu0.hotmail.com [65.55.116.22])
by mxi6p.craigslist.org (Postfix) with ESMTP id A125A70AE8
for <[email protected]>; Wed, 15 Dec 2010 02:08:37 -0800 (PST)
Received: from BLU0-SMTP10 ([65.55.116.9]) by blu0-omc1-s11.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 15 Dec 2010 02:08:37 -0800
X-Originating-IP: [123.55.84.39]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Received: from 51504048372615 ([123.55.84.39]) by BLU0-SMTP10.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 15 Dec 2010 02:08:36 -0800
Date: Wed, 15 Dec 2010 18:08:33 +0800
From: Matthew Long <[email protected]>
To: [email protected]
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2727.2615
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.2615
Subject: tom's for a drum set (newark)
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html
X-OriginalArrivalTime: 15 Dec 2010 10:08:36.0408 (UTC) FILETIME=[09A8AB80:01CB9C40]
Return-Path: [email protected]
<html> <span style="background-color: #ffff99; font-family: courier; font-weight: bold">** CRAIGSLIST ADVISORY --- AVOID SCAMS BY DEALING LOCALLY<br>** Avoid: <font color="red">wiring money, cross-border deals, work-at-home</font><br>** Beware: <font color="red">cashier checks, money orders, escrow, shipping</font><br>** More Info: <a href="http://www.craigslist.org/about/scams.html">http://www.craigslist.org/about/scams.html</a><br></span><br><br><html><head><META http-equiv=3D"Content-Type" content=3D"text/html;charset=3D=
utf-8"></head><body>c.ould you lessen the price tag?
</body></html>
<br><br><hr>this message was remailed to you via: [email protected]<hr>