Listing Site Scammer - [email protected]

[Frost]

Advertisment:

Please contact us directly to "[email protected]". I'm not going to answer through flea.
Selling tractor Antonio Carraro. The tractor is excellently preserved and little used.
Year: 2005
Of 588 Del.ur
Power: 38 Ks
4x4
Diesel, original condition
Perfectly preserved.

[Frost]

Scammer replies from [email protected]

From: Mancini Macchine <[email protected]>
Phone number: +390802226827
Fake website: www.mancini-macchine.com / mancini-macchine.com

Hello,

The Antonio Carraro 44OO is still for sale for the price of 3,500 EUR. It's in excellent condition, CE marked and ready for work.
We are a company from Italy and we can deliver it to your address for a cost of 400 EUR using our own trucks and trailers.
The delivery time is between 7 and 14 days. 6 months warranty is offered with machine and 15 days evaluation period after it is delivered to you.
If you are not satisfied with the machine, you have the possibility to return it against a full refund.

We offer a wide range of used machinery for sale. You can check the current stock on our website: www.mancini-macchine.com

Please let me know if you need further information and I will be happy to assist.

Thank you,
Marco Bianchi - Sales Manager
VAT Nr.: IT 0533 9050 725
Tel: +39 080 222 6827
Website: www.mancini-macchine.com

[Frost]

Will post email headers as soon as I receive them.

[Frost]

Email header:

Received: from compute4.internal (compute4.nyi.internal [10.202.2.44])
by sloti27t02 (Cyrus 3.0.0-beta1-git-fastmail-12410) with LMTPA;
Fri, 18 Mar 2016 03:22:17 -0400
X-Sieve: CMU Sieve 2.4
X-Spam-score: 2.6
X-Spam-hits: BAYES_50 0.8, HTML_MESSAGE 0.001, RCVD_IN_DNSWL_LOW -0.7,
RCVD_IN_UNSUBSCOREBL 1, SPF_PASS -0.001, URIBL_RHS_DOB 1.514,
LANGUAGES en, BAYES_USED global, SA_VERSION 3.3.2
X-Spam-source: IP='195.208.6.4', Host='relay08.nicmail.ru', Country='RU',
FromHeader='com', MailFrom='com'
X-Spam-charsets: to='UTF-8', plain='US-ASCII', html='UTF-8'
X-Resolved-to: ***REMOVED***
X-Delivered-to: ***REMOVED***
X-Mail-from: [email protected]
Received: from mx5 ([10.202.2.204])
by compute4.internal (LMTPProxy); Fri, 18 Mar 2016 03:22:17 -0400
Received: from mx5.messagingengine.com (localhost [127.0.0.1])
by mx5.nyi.internal (Postfix) with ESMTP id EE145280E27
for <***REMOVED***>; Fri, 18 Mar 2016 03:22:16 -0400 (EDT)
Received: from mx5.nyi.internal (localhost [127.0.0.1])
by mx5.messagingengine.com (Authentication Milter) with ESMTP
id E9D6BFBAD76.C185C280DDD;
Fri, 18 Mar 2016 03:22:16 -0400
Authentication-Results: mx5.messagingengine.com;
dkim=none (no signatures found);
dmarc=fail (p=none) header.from=mancini-macchine.com;
spf=pass [email protected] smtp.helo=relay08.nicmail.ru
Received-SPF: pass (mancini-macchine.com ... nicmail.ru: Sender is authorized to use '[email protected]' in 'mfrom' identity (mechanism 'include:dc1.nicmail.ru' matched)) receiver=mx5.messagingengine.com; identity=mailfrom; envelope-from="[email protected]"; helo=relay08.nicmail.ru; client-ip=195.208.6.4
Received: from relay08.nicmail.ru (relay08.nicmail.ru [195.208.6.4])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx5.messagingengine.com (Postfix) with ESMTPS id C185C280DDD
for <***REMOVED***>; Fri, 18 Mar 2016 03:22:14 -0400 (EDT)
Received: from [109.70.25.214] (port=50798 helo=mail.nic.ru)
by f17.mail.nic.ru with esmtp (Exim 5.55)
(envelope-from <[email protected]>)
id 1agojc-0005Yy-43
for ***REMOVED***; Fri, 18 Mar 2016 10:22:12 +0300
Received: from [10.0.6.129] (account [email protected] HELO mail.nic.ru)
by proxy01.mail.nic.ru (Exim 5.55)
with id 1agojc-0005CS-6R for ***REMOVED***; Fri, 18 Mar 2016 10:22:12 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_2107a3c2ab181fdbef65dc79107e6094"
Date: Fri, 18 Mar 2016 07:22:11 +0000
From: Mancini Macchine <[email protected]>
To: ***REMOVED***
Subject: Re: ***REMOVED***
In-Reply-To: <[email protected]>
References: <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.1.1

--=_2107a3c2ab181fdbef65dc79107e6094
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII