eBay car scam???

You've received a Second Chance Offer on eBay item: 1932 Morris Minor Tourer 2 Seater in Green. (130864861054)
Inbox
x
eBay <[email protected]>

10:46 PM (51 minutes ago)

to me
eBay eBay sent this message to James Xxxxxxxx (Real username).
Your registered name is included to show this message originated from eBay. Learn more.
You've received a Second Chance Offer

Dear James Xxxxxx (eBay username),
You've been given a second chance to buy 1932 Morris Minor Tourer 2 Seater in Green., which you placed a bid on for £5,500.00 on 08-Mar-13 20:40:33 GMT. To purchase this item, reply to this email or just contact the seller at: [email protected]
1932 Morris Minor Tourer 2 Seater in Green.
1932 Morris Minor Tourer 2 Seater in Green.
Price:
£5,500.00
Seller:
Seller E-mail:

errantjoe ( 150)
[email protected]
View Item | Ask Seller A Question


Additional Information about Second Chance Offers:
The seller, errantjoe, is making this Second Chance Offer because the high bidder was either unable to complete the transaction or the seller has a duplicate item for sale. The selling of this item through Second Chance Offer is in compliance with eBay policy; you will be able to exchange Feedback with the seller and will be eligible for all eBay services associated with a transaction, such as fraud protection.

Act Now - This Offer Ends Soon !
To take advantage of this opportunity, please act quickly To buy this item contact the seller at: [email protected]

To learn more about Second Chance Offer, please visit:
http://pages.ebay.co.uk/help/sell/personal_offer.html

Email reference ID: [#de9dbc336a228071ce4aa214313dd999#]
Please don't remove this number. Customer Support may ask you for this number, should you need assistance.

I http://www.ebay.co.uk/itm/1932-Morris-Minor-Tourer-2-Seater-in-Green-/130864861054?pt=Automobiles_UK&hash=item1e78274f7e&nma=true&si=43YZBC3w69gJCKWbIieK%252F%252BFJvf0%253D&orig_cvip=true&rt=nc&_trksid=p2047675.l2557

Hi James49, Please post up some of the communications with the seller or some comments on what makes you suspect that this is a scam. From what you posted I am not really sure what it means.

It is definitely a scam.

eBay 2nd chances offers go through eBay, just like any other purchase. A legitimate 2nd chance offer would NOT instruct you to contact the seller via email, or to reply to an email. You would sign into your ebay account, and you could see and accept the offer in your "My eBay."

We also have a fake domain here:

Domain Name: EBAY-SEC.COM
Registrar: VITALWERKS INTERNET SOLUTIONS LLC DBA NO-IP
Whois Server: whois.no-ip.com
Referral URL: http://www.no-ip.com
Name Server: KEN.NS.CLOUDFLARE.COM
Name Server: ROXY.NS.CLOUDFLARE.COM
Status: clientTransferProhibited
Updated Date: 01-feb-2013
Creation Date: 01-feb-2013
Expiration Date: 01-feb-2014

If you receive an email pretending to be a Second Chance Offer please also forward it to [email protected].

autodw.com looks fake, but either it's under DoS or the website is empty, probably the latter. (It's behind CloudFlare.) Please post the email from [email protected] with full headers, along with the email you sent to him, also with full headers, removing your info from both. We need that to kill it.

* Thanks for the replys - Just had this email from 'Andy'


Hi Finally managed to get to a laptop where I can check my inbox, hope it hasn't been long since you emailed. My wife and I celebrate 15 years of marriage, ended up in Isle of Skye, Scotland. Long story short the winner after speaking on the phone waiting for him all day long comes up and wants a straight swap. If that wasn't enough the bugger almost made us lose our flight. Hopefully we can come to an agreement so I won't have to relist it therefore I am willing to accept your last bid price ( . I've got nothing to hide, agree with and recommend for your peace of mind a proper inspection before cash changes hands. Next week I'll return home and would like to have a buyer waiting for me. I'd appreciate if you can get back with an answer by tomorrow if you're keen to buy it. Regards, Andy. P.S. Can be reached on 07546611697 low signal strength area I do check emails regularly.

vonpaso xlura - How do I post the headers? - I'm a bit of a technophobe

Does anybody know how they got my registered name [with eBay] and email address - I put a bid on the auction but that was it (I didn't email them a question etc)... The account used has a 150 feedback score but 0% + feedback?

I sent the 'offer' to spoof@ebay but had no reply...

http://www.abika.com/Reports/Samples/em ... rguide.htm

Delivered-To:
Received: by 10.194.121.70 with SMTP id li6csp12923wjb;
Thu, 21 Mar 2013 01:48:29 -0700 (PDT)
Return-Path: <3XMlKUQkJB6kJQdRUNXYUPVJRU.LXVQfNMUNhPVJRU.LXV@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com>
Received-SPF: pass (google.com: domain of 3XMlKUQkJB6kJQdRUNXYUPVJRU.LXVQfNMUNhPV ... google.com designates 10.224.18.132 as permitted sender) client-ip=10.224.18.132
Authentication-Results: mr.google.com;
spf=pass (google.com: domain of 3XMlKUQkJB6kJQdRUNXYUPVJRU.LXVQfNMUNhPV ... google.com designates 10.224.18.132 as permitted sender) smtp.mail=3XMlKUQkJB6kJQdRUNXYUPVJRU.LX ... google.com;
dkim=pass [email protected]
X-Received: from mr.google.com ([10.224.18.132])
by 10.224.18.132 with SMTP id w4mr12443419qaa.1.1363855708960 (num_hops = 1);
Thu, 21 Mar 2013 01:48:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=autodw.com; s=google;
h=mime-version:x-received:reply-to:x-google-appengine-app-id
-google-appengine-app-id-alias:message-id:date:subject:from:to
:content-type;
bh=z88h9NTNV1zN4XI//N4tic+jpZfb07Dpr2Wv1DiRxro=;
b=mr46qaVkrpCh2Z85R2sOeqtDTYu8JNz5vpAyg0GLshpMIeUjmxvQYQs362Lk5Z6eFz
v6NGGlXg0Po9baFQkffF8f3Fvj9fE190RfAd06LJ1HUgTbiUHPeR5plMK8+6qq1UNxd0
OPygOswl/JW7rHs/DmKXegYj2En+DGmF2rYjg=
MIME-Version: 1.0
X-Received: by 10.224.18.132 with SMTP id w4mr5321393qaa.1.1363855708306; Thu,
21 Mar 2013 01:48:28 -0700 (PDT)
Reply-To: [email protected]
X-Google-Appengine-App-Id: s~ahuileopl
X-Google-Appengine-App-Id-Alias: ahuileopl
Message-ID: <[email protected]>
Date: Thu, 21 Mar 2013 08:48:28 +0000
Subject: eBay Morris
From: [email protected]
To:
Content-Type: multipart/alternative; boundary=bcaec51b12a104c0b404d86b6733

--bcaec51b12a104c0b404d86b6733
Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes

Hi Finally managed to get to a laptop where I can check my inbox, hope it
hasn't been long since you emailed. My wife and I celebrate 15 years of
marriage, ended up in Isle of Skye, Scotland.
Long story short the winner after speaking on the phone waiting for him
all day long comes up and wants a straight swap. If that wasn't enough the
bugger almost made us lose our flight.

Hopefully we can come to an agreement so I won't have to relist it
therefore I am willing to accept your last bid price ( . I've got nothing
to hide, agree with and recommend for your peace of mind a proper
inspection before cash changes hands.

Next week I'll return home and would like to have a buyer waiting for me.
I'd appreciate if you can get back with an answer by tomorrow if you're
keen to buy it.
Regards,
Andy.

P.S. Can be reached on 07546611697 low signal strength area I do check
emails regularly.

Hmmm..

Last month, he and his wife were celebrating their anniversary at Yellowstone. Apparently they really get around.

http://www.dodgecharger.com/forum/index.php?topic=99496.0

it is scam got same e mail today from andy at least good to know that there is place I kan find info

Delivered-To:
Received: by 10.194.121.70 with SMTP id li6csp33539wjb;
Thu, 21 Mar 2013 10:46:24 -0700 (PDT)
Return-Path: <3b0dLUQkJB7ofmznqjtuqlrfnq.htrm1jiqj3lrfnq.htr@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com>
Received-SPF: pass (google.com: domain of 3b0dLUQkJB7ofmznqjtuqlrfnq.htrm1jiqj3lr ... google.com designates 10.224.189.78 as permitted sender) client-ip=10.224.189.78
Authentication-Results: mr.google.com;
spf=pass (google.com: domain of 3b0dLUQkJB7ofmznqjtuqlrfnq.htrm1jiqj3lr ... google.com designates 10.224.189.78 as permitted sender) smtp.mail=3b0dLUQkJB7ofmznqjtuqlrfnq.ht ... google.com;
dkim=pass [email protected]
X-Received: from mr.google.com ([10.224.189.78])
by 10.224.189.78 with SMTP id dd14mr14379929qab.0.1363887984172 (num_hops = 1);
Thu, 21 Mar 2013 10:46:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=autodw.com; s=google;
h=mime-version:x-received:reply-to:x-google-appengine-app-id
-google-appengine-app-id-alias:message-id:date:subject:from:to
:content-type;
bh=PoB09W0EXI9jaMCyMpy8MEGRExxj1defmhb6H5ju1as=;
b=N6M8jxrS9320u6RENCRR0zWICf+j6Tdfu9OJA6ic3+TRIDYh+xEf8blL7j48PgG/Jh
31dygtqN2PkHe/goY1szVq1A9nDvycFoz1yFKMZu47A+maOtQnE/I+vlKMiLmk7En9q8
2znuifCz9sLj7InO+qO9uPQyjFrW8NXdcHEsY=
MIME-Version: 1.0
X-Received: by 10.224.189.78 with SMTP id dd14mr6161464qab.0.1363887983737;
Thu, 21 Mar 2013 10:46:23 -0700 (PDT)
Reply-To: [email protected]
X-Google-Appengine-App-Id: s~ahuileopl
X-Google-Appengine-App-Id-Alias: ahuileopl
Message-ID: <[email protected]>
Date: Thu, 21 Mar 2013 17:46:23 +0000
Subject: Re: eBay Morris
From: [email protected]
To:
Content-Type: multipart/alternative; boundary=20cf30363683c8bb0f04d872eaa5

--20cf30363683c8bb0f04d872eaa5
Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes

Please let me know your ebay userId or email address. I can't find your
email address in my offers.

Regards,
Andy

--20cf30363683c8bb0f04d872eaa5
Content-Type: text/html; charset=ISO-8859-1

Please let me know your ebay userId or email address. I can't find your email address in my offers.

Regards,
Andy
--20cf30363683c8bb0f04d872eaa5--

it is scam got same e mail today from andy at least good to know that there is place I kan find info

- Glad you found us! - Was it for the same vehicle: Morris Minor Tourer?

nope it was triumph bike I was not even second highest bidder but same amail address as in your post "motor@..." and exactly same email about isle of skye........