by Bryon Williams
Fri Oct 12, 2012 11:50 am
[email protected]
John Adams
Header Analysis Quick Report
Originating IP: 41.190.3.114
Originating ISP: Emts Limited / Etisalat Nigeria
City: Lagos
Country of Origin: Nigeria
The scammer wants to steal your merchandise and have you ship it to him
The scammer will want to purchase an ‘item’ you have for sale on Craigslist, Ebay or another online site and may offer you more than your asking price to have you remove your advertisement quickly.
He will ask you to receive payment via his 'verified' PAYPAL or BANK payment and ship the 'item' to a relative or friend for him.
In this scam Paypal has not received any money to be paid to you and you will lose your merchandise if you ship. It is almost impossible to stop a shipment.
John Adams
Header Analysis Quick Report
Originating IP: 41.190.3.114
Originating ISP: Emts Limited / Etisalat Nigeria
City: Lagos
Country of Origin: Nigeria
Received: by 10.112.5.74 with SMTP id q10csp128802lbq;
Thu, 11 Oct 2012 22:50:51 -0700 (PDT)
Received: by 10.66.78.69 with SMTP id z5mr8621472paw.14.1350021050257;
Thu, 11 Oct 2012 22:50:50 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm15.bullet.mail.ird.yahoo.com (nm15.bullet.mail.ird.yahoo.com. [77.238.189.68])
by mx.google.com with ESMTPS id p7si3972999pay.177.2012.10.11.22.50.48
(version=TLSv1/SSLv3 cipher=OTHER);
Thu, 11 Oct 2012 22:50:50 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 77.238.189.68 as permitted sender) client-ip=77.238.189.68;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 77.238.189.68 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from [77.238.189.234] by nm15.bullet.mail.ird.yahoo.com with NNFMP; 12 Oct 2012 05:50:47 -0000
Received: from [212.82.108.250] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 12 Oct 2012 05:50:47 -0000
Received: from [127.0.0.1] by omp1015.mail.ird.yahoo.com with NNFMP; 12 Oct 2012 05:50:47 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 48525 invoked by uid 60001); 12 Oct 2012 05:50:47 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1350021047; bh=kmgd0zD9l79e0Lwi6ApPmVge94aUnv4Twdd09EY3ue4=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=O6O+VT/y+SoVzSK6nwqW9sMW5r9huBMaa9hKQATTY9cQdYhD7u835aNsyKrznVQPAnstE9q+vefAJ8FYRpWJdXwx0desfgZAr3FEjgOXwQrcQ13pUeH12bRscGSwNLBlcgnbfuHToZ2XhuXD969V093OYrC7mVBUEcPNbcQJH2E=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=bR/qGMudsn7nvxS+P1UHs1rjqgTyekBHMtt3Ub701UJIVGulKg7TevPvVppjbJM6VaXI61Si9jxFAintvglrmO+TnCl4EWXeZwQtD23KSyi3Xlul+Ucl/WJeySAP2OevhhKtc0Z0Ei7tYwUiP5/UCLd7ZFRJ6P6HQnVOydSobdg=;
X-YMail-OSG: 3f2UwW0VM1kMt.t5IgaWAcb1LtHuo_WuEsIg50r4c7BNLYb
ygTTMMWLKaWMDyXtuF54RroqZFk9lAqGO_F9EEzCxDniWcJkAXwUB3PGvnmU
haa7kJFzzfuIEP5Z6.A6PxRWlI0oPvpaTvwJt2OZZcweH.RbG9zEaSeZWCkD
nfn7QGF5q9w3mds2qtGm1zI0FXHK_BwQ7A7ZZ7zKvdpI_lf.iSySTfzYetQ9
4Nd3DtkplGWQKp3zrdrBhg_yHbE1Q99iG.YssIAIXJtEExI4zYiGanS6LCGj
65fDAZe8SE2KXC109NciHIx9z0cRik2q7buHBYBmRriHu6skHpcFTIsTrkmh
FhWGpNnOAiPaxtlQgSu.6D2ECfuVTq.eg8YhoJz4TxzIPTIOOjjuXnwz5dWN
E4vMOLz_gRoA5ic4uiuc_vvfG_liwDgEmJG1lYP033901IKfu2gGJHpr4QZX
SH2LnAjVotuGsEAvU.Zodir37xER_zXnqD84MXpggWlBl89vnV6rnQRWZ6fZ
MkuUPYdN4uzQDkdUU9Z8Yw2YZqSCDcNwW1oCPMwRq7ijn6W.Z.pyKkCzK
Received: from [41.190.3.114] by web171603.mail.ir2.yahoo.com via HTTP; Fri, 12 Oct 2012 06:50:47 BST
X-Rocket-MIMEInfo: 001.001,VGhhbmtzIGZvciB0aGUgcmVzcG9uc2UsQW0gZ29pbmcgdG8gdGFrZSBpdCBmb3IgJDM3MCBwbHVzIHRoZSBwb3N0YWdlLFdoYXQncyB0aGUgUGF5UGFsIGVtYWlsIGFkZHJlc3MgdG8gc2VuZCBmdW5kcyB0b28gYW5kIGFsc28gZG8geW91IG1pbmQgZW1haWxpbmcgbWUgd2l0aCBtb3JlIHBpY3R1cmVzIGFzIHdlbGwgP1doYXQgaXMgeW91ciBwYXlwYWwgZW1haWwgYWRkcmVzcyB0byBzZW5kIHRoZSBmdW5kcyB0b28gP1RoYW5rcyBhbmQgaSBhd2FpdCB0byByZWFkIGZyb20geW91LgpCZXN0IFJlZ2FyZC4KVGgBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.123.450
References: <[email protected]>
Message-ID: <[email protected]>
Date: Fri, 12 Oct 2012 06:50:47 +0100 (BST)
From: John Adams <[email protected]>
Reply-To: John Adams <[email protected]>
Subject: Re: Acer Notebook - $275 (Pocotello Idaho)
Hello is this item still up for sale? what is your final price for it?
Your fast response is anticipated.
Thanks
Ok how much do you want it to go for ?? am ready now to make an offer and pay for it , gimme the price for it
Thanks for the response,Am going to take it for $370 plus the postage,What's the PayPal email address to send funds too and also do you mind emailing me with more pictures as well ?What is your paypal email address to send the funds too ?Thanks and i await to read from you.
Best Regard.
Thanks
The scammer wants to steal your merchandise and have you ship it to him
The scammer will want to purchase an ‘item’ you have for sale on Craigslist, Ebay or another online site and may offer you more than your asking price to have you remove your advertisement quickly.
He will ask you to receive payment via his 'verified' PAYPAL or BANK payment and ship the 'item' to a relative or friend for him.
In this scam Paypal has not received any money to be paid to you and you will lose your merchandise if you ship. It is almost impossible to stop a shipment.
Please contacta moferatorstor if you have a question or information about this post.
Please do not tell the scammer he is posted here.
Please remember the fallen. https://www.odmp.org/
Please do not tell the scammer he is posted here.
Please remember the fallen. https://www.odmp.org/