by eleonor
Thu Jul 05, 2012 9:04 am
First, thank you for this help.
I received that email a couple of weeks ago, it was in my spam box.
When I found it I was so excited to get an online order (I just started my business a couple of months ago) that I saved the email (thinking it was misplaced) and answered with my company info and all... Of course after, I kind of got suspicious and realized it was too good to be true :s ... and found you guys.
Here it is...
Delivered-To: [email protected]
Received: by 10.76.101.83 with SMTP id fe19csp26814oab;
Mon, 11 Jun 2012 08:19:21 -0700 (PDT)
Received: by 10.180.84.6 with SMTP id u6mr21672286wiy.11.1339427960681;
Mon, 11 Jun 2012 08:19:20 -0700 (PDT)
Return-Path: <[email protected]>
Received: from k070.khaki.fastwebserver.de (k070.khaki.fastwebserver.de. [93.186.196.70])
by mx.google.com with ESMTP id ch4si16906286wib.19.2012.06.11.08.19.20;
Mon, 11 Jun 2012 08:19:20 -0700 (PDT)
Received-SPF: neutral (google.com: 93.186.196.70 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=93.186.196.70;
Authentication-Results: mx.google.com; spf=neutral (google.com: 93.186.196.70 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost (k070.khaki.fastwebserver.de.local [127.0.0.1])
by k070.khaki.fastwebserver.de (Postfix) with ESMTP id EC3881B2EA09
for <[email protected]>; Mon, 11 Jun 2012 17:19:18 +0200 (CEST)
X-Amavis-Alert: BAD HEADER SECTION, Improper use of control character (char 0D
hex): From: Jessica Ray <[email protected]>\r
Received: from k070.khaki.fastwebserver.de ([127.0.0.1])
by localhost (k070.khaki.fastwebserver.de [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id M0JoicE+FW2Z for <[email protected]>;
Mon, 11 Jun 2012 17:19:18 +0200 (CEST)
Received: by k070.khaki.fastwebserver.de (Postfix, from userid 2199)
id 14C621B2DA6E; Mon, 11 Jun 2012 16:29:03 +0200 (CEST)
To: [email protected]
Subject: Order Enquiry
From: Jessica Ray <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Mon, 11 Jun 2012 16:29:03 +0200 (CEST)
Hi,
I will like to place an order in your store/company and I will also need to know if you accept credit card and ship international.
Thanks,
Jessica.
NB: There's no problem if you don't ship abroad, I have freight forwarder that can come for the pick up.
Now I'm in conversation with them and if you look above, you will see that the first email, (k070.khaki.fastwebserver.de.local [127.0.0.1]) has a IP address that has nothing to do with the email address it came from. Anyway, I searched that IP address and found it was link to scammers email addresses.
The last email I got from "[email protected]", below, was a legitimite address though... That part I don't understand...!? Anyway, I just want someone to confirm that this is effectivly a scam, and what should I do next, when they answer me again. So here is the rest of the conversation...
Delivered-To: [email protected]
Received: by 10.76.101.83 with SMTP id fe19csp126484oab;
Tue, 3 Jul 2012 15:04:59 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.60.19.42 as permitted sender) client-ip=10.60.19.42;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.60.19.42 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.60.19.42])
by 10.60.19.42 with SMTP id b10mr20224161oee.12.1341353098521 (num_hops = 1);
Tue, 03 Jul 2012 15:04:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=tihHsC9OKFWXMcQkliaz/YzAvNqBWlwFOOG66YiAgh4=;
b=UohebZPIY334pdRVtjPcHS5g6EeH/Mxlh3rw0/9MyqbH7d/lJd/hC93cNUvxXafY0z
+Q0d7RD+/oM6k/rUHebkD2t1HojcMrRY39BrX0/9tWjNIdfjPb8zpV/Fl3Wmjd+lR8OQ
NILRqZ78dUwgFsvG1aSgvlQDBRiBo13W0IqlMXheKMQeWvJJnfp0+t6Ru0qktp6y/jbG
ent8h4/6DBi+NS2ObwbQjEUmNBfBtl7pYvdnuogwSoSAmo4dACXHA7pELUaCxkyQaCL4
ywD7tvS/GDTICk3fDvIejV1BhlUkY/xDip4bv+oUwoO1W1FfK2CtWpXH+NzResFIy+n7
VPUA==
MIME-Version: 1.0
Received: by 10.60.19.42 with SMTP id b10mr20224161oee.12.1341353098496; Tue,
03 Jul 2012 15:04:58 -0700 (PDT)
Received: by 10.76.150.232 with HTTP; Tue, 3 Jul 2012 15:04:58 -0700 (PDT)
Date: Wed, 4 Jul 2012 00:04:58 +0200
Message-ID: <CAMxrJrM3wVtfkYudj852=aNpO03WjeOxvi-tPx96wXfQBqJJQg@mail.gmail.com>
Subject: My order
From: Jessica Ray <[email protected]>
To: Danielle Brodeur <[email protected]>
Content-Type: text/plain; charset=ISO-8859-1
Hi Danielle,
I saw your product on Esty.com
Below are the items I am interested in ordering from your store and I
will want you to get back to me with the total cost plus the shipping
cost to Australia.
DirectX Dress QTY 6 ( Size should be mix with diff sizes/ colors)
Play Me Dress QTY 6 ( Size should be mix with diff sizes/ colors)
To the bones QTY 6 ( Size should be mix with diff sizes/ colors)
Cool Bugs Bunny top QTY 6 ( Size should be mix with diff sizes/ colors)
Bare back Police Tee QTY 6 ( Size should be mix with diff sizes/ colors)
With or without sleeves...( Size should be mix with diff sizes/ colors)
Handcrafted Glycerin Soaps - Grapefruit qty 48
Handcrafted Glycerin Soaps - Ocean Wind qty 48
Handcrafted Glycerin Soaps - Capuccino qty 48
Handcrafted Glycerin Soaps - Sandalwood and Vanilla qty 48
Handcrafted Glycerin Soaps - Raspberry Power qty 48
Handcrafted Glycerin Soaps - Lavender... qty 48
Handcrafted Glycerin Soaps - Mango Punch... qty 48
Handcrafted Glycerin Soaps - Apple Crisp.. qty
Thanks,
Jessica.
JessRay Stores
97, King St,
Melbourne, Victoria - 3000
Australia
On 7/3/12, Danielle Brodeur <[email protected]> wrote:
> Hi Jessica,
>
> I'm so sorry for the time it took for my answer. I hope you didn't think it
> was a lack of interest or business skills :s
> You message was in my Spam Folder, and I almost deleted it.
>
> I would be pleased to take your order, and yes I do take credit card, and I
> can ship, wherever you need.
>
> I made sure that your address is now in my contact list, so this wont
> happen again.
>
> Tank you for your interest, and I hope it,s not too late.>]
>
Here I deleted the business info I gave them (didn't know if I should post it here...)
Gave 3 links to websites for my business, my business phone # (that is also my cell), and my name... :s
>>
> [On Mon, Jun 11, 2012 at 10:29 AM, Jessica Ray <[email protected]> wrote:
>
>> Hi, I will like to place an order in your store/company and I will also
>> need to know if you accept credit card and ship international. Thanks,
>> Jessica. NB: There's no problem if you don't ship abroad, I have freight
>> forwarder that can come for the pick up.
>
To keep them waiting, I also told them to place the order on Etsy, and that I would adjust the price (discount for quantity) after, (wich doesn't make a lot of sense...)
I know I gave them too much info... I would like to know if they can harm me with this or if there is something else I should do. Thanks so much
I received that email a couple of weeks ago, it was in my spam box.
When I found it I was so excited to get an online order (I just started my business a couple of months ago) that I saved the email (thinking it was misplaced) and answered with my company info and all... Of course after, I kind of got suspicious and realized it was too good to be true :s ... and found you guys.
Here it is...
Delivered-To: [email protected]
Received: by 10.76.101.83 with SMTP id fe19csp26814oab;
Mon, 11 Jun 2012 08:19:21 -0700 (PDT)
Received: by 10.180.84.6 with SMTP id u6mr21672286wiy.11.1339427960681;
Mon, 11 Jun 2012 08:19:20 -0700 (PDT)
Return-Path: <[email protected]>
Received: from k070.khaki.fastwebserver.de (k070.khaki.fastwebserver.de. [93.186.196.70])
by mx.google.com with ESMTP id ch4si16906286wib.19.2012.06.11.08.19.20;
Mon, 11 Jun 2012 08:19:20 -0700 (PDT)
Received-SPF: neutral (google.com: 93.186.196.70 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=93.186.196.70;
Authentication-Results: mx.google.com; spf=neutral (google.com: 93.186.196.70 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost (k070.khaki.fastwebserver.de.local [127.0.0.1])
by k070.khaki.fastwebserver.de (Postfix) with ESMTP id EC3881B2EA09
for <[email protected]>; Mon, 11 Jun 2012 17:19:18 +0200 (CEST)
X-Amavis-Alert: BAD HEADER SECTION, Improper use of control character (char 0D
hex): From: Jessica Ray <[email protected]>\r
Received: from k070.khaki.fastwebserver.de ([127.0.0.1])
by localhost (k070.khaki.fastwebserver.de [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id M0JoicE+FW2Z for <[email protected]>;
Mon, 11 Jun 2012 17:19:18 +0200 (CEST)
Received: by k070.khaki.fastwebserver.de (Postfix, from userid 2199)
id 14C621B2DA6E; Mon, 11 Jun 2012 16:29:03 +0200 (CEST)
To: [email protected]
Subject: Order Enquiry
From: Jessica Ray <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Mon, 11 Jun 2012 16:29:03 +0200 (CEST)
Hi,
I will like to place an order in your store/company and I will also need to know if you accept credit card and ship international.
Thanks,
Jessica.
NB: There's no problem if you don't ship abroad, I have freight forwarder that can come for the pick up.
Now I'm in conversation with them and if you look above, you will see that the first email, (k070.khaki.fastwebserver.de.local [127.0.0.1]) has a IP address that has nothing to do with the email address it came from. Anyway, I searched that IP address and found it was link to scammers email addresses.
The last email I got from "[email protected]", below, was a legitimite address though... That part I don't understand...!? Anyway, I just want someone to confirm that this is effectivly a scam, and what should I do next, when they answer me again. So here is the rest of the conversation...
Delivered-To: [email protected]
Received: by 10.76.101.83 with SMTP id fe19csp126484oab;
Tue, 3 Jul 2012 15:04:59 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.60.19.42 as permitted sender) client-ip=10.60.19.42;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.60.19.42 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.60.19.42])
by 10.60.19.42 with SMTP id b10mr20224161oee.12.1341353098521 (num_hops = 1);
Tue, 03 Jul 2012 15:04:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=tihHsC9OKFWXMcQkliaz/YzAvNqBWlwFOOG66YiAgh4=;
b=UohebZPIY334pdRVtjPcHS5g6EeH/Mxlh3rw0/9MyqbH7d/lJd/hC93cNUvxXafY0z
+Q0d7RD+/oM6k/rUHebkD2t1HojcMrRY39BrX0/9tWjNIdfjPb8zpV/Fl3Wmjd+lR8OQ
NILRqZ78dUwgFsvG1aSgvlQDBRiBo13W0IqlMXheKMQeWvJJnfp0+t6Ru0qktp6y/jbG
ent8h4/6DBi+NS2ObwbQjEUmNBfBtl7pYvdnuogwSoSAmo4dACXHA7pELUaCxkyQaCL4
ywD7tvS/GDTICk3fDvIejV1BhlUkY/xDip4bv+oUwoO1W1FfK2CtWpXH+NzResFIy+n7
VPUA==
MIME-Version: 1.0
Received: by 10.60.19.42 with SMTP id b10mr20224161oee.12.1341353098496; Tue,
03 Jul 2012 15:04:58 -0700 (PDT)
Received: by 10.76.150.232 with HTTP; Tue, 3 Jul 2012 15:04:58 -0700 (PDT)
Date: Wed, 4 Jul 2012 00:04:58 +0200
Message-ID: <CAMxrJrM3wVtfkYudj852=aNpO03WjeOxvi-tPx96wXfQBqJJQg@mail.gmail.com>
Subject: My order
From: Jessica Ray <[email protected]>
To: Danielle Brodeur <[email protected]>
Content-Type: text/plain; charset=ISO-8859-1
Hi Danielle,
I saw your product on Esty.com
Below are the items I am interested in ordering from your store and I
will want you to get back to me with the total cost plus the shipping
cost to Australia.
DirectX Dress QTY 6 ( Size should be mix with diff sizes/ colors)
Play Me Dress QTY 6 ( Size should be mix with diff sizes/ colors)
To the bones QTY 6 ( Size should be mix with diff sizes/ colors)
Cool Bugs Bunny top QTY 6 ( Size should be mix with diff sizes/ colors)
Bare back Police Tee QTY 6 ( Size should be mix with diff sizes/ colors)
With or without sleeves...( Size should be mix with diff sizes/ colors)
Handcrafted Glycerin Soaps - Grapefruit qty 48
Handcrafted Glycerin Soaps - Ocean Wind qty 48
Handcrafted Glycerin Soaps - Capuccino qty 48
Handcrafted Glycerin Soaps - Sandalwood and Vanilla qty 48
Handcrafted Glycerin Soaps - Raspberry Power qty 48
Handcrafted Glycerin Soaps - Lavender... qty 48
Handcrafted Glycerin Soaps - Mango Punch... qty 48
Handcrafted Glycerin Soaps - Apple Crisp.. qty
Thanks,
Jessica.
JessRay Stores
97, King St,
Melbourne, Victoria - 3000
Australia
On 7/3/12, Danielle Brodeur <[email protected]> wrote:
> Hi Jessica,
>
> I'm so sorry for the time it took for my answer. I hope you didn't think it
> was a lack of interest or business skills :s
> You message was in my Spam Folder, and I almost deleted it.
>
> I would be pleased to take your order, and yes I do take credit card, and I
> can ship, wherever you need.
>
> I made sure that your address is now in my contact list, so this wont
> happen again.
>
> Tank you for your interest, and I hope it,s not too late.>]
>
Here I deleted the business info I gave them (didn't know if I should post it here...)
Gave 3 links to websites for my business, my business phone # (that is also my cell), and my name... :s
>>
> [On Mon, Jun 11, 2012 at 10:29 AM, Jessica Ray <[email protected]> wrote:
>
>> Hi, I will like to place an order in your store/company and I will also
>> need to know if you accept credit card and ship international. Thanks,
>> Jessica. NB: There's no problem if you don't ship abroad, I have freight
>> forwarder that can come for the pick up.
>
To keep them waiting, I also told them to place the order on Etsy, and that I would adjust the price (discount for quantity) after, (wich doesn't make a lot of sense...)
I know I gave them too much info... I would like to know if they can harm me with this or if there is something else I should do. Thanks so much