Announcement

Collapse
No announcement yet.

AMAZING DEALS ON GEAR ON eBAY (scam)

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • AMAZING DEALS ON GEAR ON eBAY (scam)

    Decided to wind up a spoofer on eBay today, who was advertising a TOO GOOD TO BE TRUE OSCar synth..

    Basically, the text on the eBay listing has a .jpg in the description, attached below, and has a link to click to make the offer: http://newphotos.newshoppingonlinetop10.party/1821.html

    Account is a legit one in the USA, POST FROM is Taiwan/HK/China, and the recipient for the 'moneygram' is in a derelict/under construction building in London.

    DEFO LEGIT.
    Attached Files
    Last edited by playthatbeat; Mon 11-09-2017, 3:37 PM.
    jUst plAythAtbEAt

  • #3
    and the rest!!! my god, it's like a DREAM COME TRUE. TAKE MY MONEY NOW!
    Attached Files
    jUst plAythAtbEAt

    Comment


    • #4
      And the email that arrived after i filled in the bullshit target on the eBay page, offering to complete the deal via fuc*ing MONEYGRAM:

      Code:
      From - Mon Sep 11 14:08:28 2017
      X-Account-Key: account2
      X-UIDL: UID117518-1111606785
      X-Mozilla-Status: 0001
      X-Mozilla-Status2: 00000000
      X-Mozilla-Keys:                                                                                 
      Return-Path: <>
      X-Original-To: ******
      Delivered-To: ******@m05.spamarrest.com
      Received: from localhost.localdomain (www03.spamarrest.com [10.16.213.144])
      	by m05.spamarrest.com (Postfix) with ESMTP id 5B78D39001E
      	for ; Mon, 11 Sep 2017 08:05:34 -0500 (CDT)
      Envelope-to: atrisk@iol.ie
      Delivery-date: Mon, 11 Sep 2017 12:22:43 +0100
      Received: from Debian-exim by hub09.mail.esat.net with spam-scanned (Exim 4.80)
      	(envelope-from )
      	id 1drMna-0001w1-0Q
      	for atrisk@iol.ie; Mon, 11 Sep 2017 12:22:43 +0100
      X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on hub09.mail.esat.net
      X-Spam-Level: 
      X-Spam-Status: No, score=0.1 required=4.5 tests=FREEMAIL_ENVFROM_END_DIGIT,
      	FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,T_DKIM_INVALID,
      	T_TO_NO_BRKTS_FREEMAIL autolearn=disabled version=3.3.2
      Received: from mail-pg0-f47.google.com ([74.125.83.47])
      	by hub09.mail.esat.net with esmtp (Exim 4.80)
      	(envelope-from )
      	id 1drMnZ-0001vj-RA
      	for *****@iol.ie; Mon, 11 Sep 2017 12:22:41 +0100
      Received: by mail-pg0-f47.google.com with SMTP id v66so14663460pgb.5
              for <*****@iol.ie>; Mon, 11 Sep 2017 04:22:41 -0700 (PDT)
      DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
              d=gmail.com; s=20161025;
              h=mime-version:from:date:message-id:subject:to;
              bh=JuK8J5WNhaEm8y6WYai4Wra2BLXUo9fr4n7afKT6Abc=;
              b=dPsY476gA5vLj2kzUEnSuhTY9gL2QivNkuAyJjQ8vMStktnt0k+0W2nJ9jG3BSB3xc
               INRSblD0cbkjqF+TUeJmqJwrtlrFh5ccxutqeUxjvVZxlj4GEGZ0XnqBjjFibfdPC2Em
               q4ZVKPQWVMIBikz2/5ntkrtryvP8up5Gfv9oqrqipjkcgXAYwZjhf3+OoNqQxH7ZJoVI
               mXigx/oWrDnHfPLl+allAWpDEuvz3E9vEoN3na23HkoMMNg+03ac6LyCm2zVjEEjSgFo
               l3yma1cNUuC18A3hrAjCXhQbSuHSVP4fhHgRIL1qFjpQ46Cn2AhM0JAsd2wCH6WN9cXS
               9mpw==
      X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
              d=1e100.net; s=20161025;
              h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
              bh=JuK8J5WNhaEm8y6WYai4Wra2BLXUo9fr4n7afKT6Abc=;
              b=AshiZpF+K9EFaEB4JckmisVpHEp4eAdqKkcZpWQACqbtVmJCVZH+qq0dYHlOtVfXCJ
               s6KGap12ZI1nZ6SrwPkxPFmUcshpICrosrGoQ0/GLd6n1nspfsXCYzOSilfDN627v24P
               RiSkXRFj4FGViTBtmSyhjfX+T1IH/W8MbBzMIOqbmeEDTwiqth4V6SpRcd88pqn4dJTM
               puAmqLql2BZ0mEFwvAUU/Bwo04/ruemiUh3ooti8WqenI91tiSsky253CX3yoshRIQ+Y
               FW53E+RVuRcPtH6DfPaaQ+9kV2VL7m98Kdg9Ml0i5s29Yzru7vWp7UJ49VOSn9W+urcM
               P+ew==
      X-Gm-Message-State: AHPjjUiInw/wFCB+dI5tTAl2imN+PkyxImHA3F+DApPQ36w9HXpmfbmb
      	+fy+6u+aUXeRp0iM9iqS5wbs7c4gN0ijhgP/dO9z2lrd
      X-Google-Smtp-Source: ADKCNb6Ob4EoN/6sz8hydd+wUsiU6gd0W5Ww4AOkrFBDveDixo2Gc6KID2usn7V9cGlLkyiHZT/aBsKuL7Df0d4Mbek=
      X-Received: by 10.98.103.142 with SMTP id t14mr11679670pfj.56.1505128960571;
       Mon, 11 Sep 2017 04:22:40 -0700 (PDT)
      MIME-Version: 1.0
      Received: by 10.100.137.9 with HTTP; Mon, 11 Sep 2017 04:22:40 -0700 (PDT)
      From: Sales 
      Date: Mon, 11 Sep 2017 07:22:40 -0400
      Message-ID: 
      Subject: OSC OSCAR - Oxford Synthesizer Company - Ultra Rare Vintage Synth
      To: atrisk@iol.ie
      Content-Type: multipart/alternative; boundary="001a1142807c093e760558e825c9"
      X-SA-Poll-Id: 1505129134577..280f4e6b7d42dcb4eb8aeef2645336e7..1..1505128960000
      X-SA-USERIDNR: 260430
      Received-SPF: pass(gmail.com: domain of
      	_netblocks.google.com designates 74.125.83.47 as permitted sender)
      X-SA-MPREASON: UNVERIFIED
      
      --001a1142807c093e760558e825c9
      Content-Type: text/plain; charset="UTF-8"

      Hi there,

      Thank you for purchasing this item, by completing the form with your
      details you agreed to buy this item for the price of EURO 850.00 for that
      reason I just submitted all the details of our Transaction through eBay and
      you should have been already contacted by them with the eBay Invoice for
      your purchase.

      Please let me know if you can complete the payment today.

      Waiting you reply
      Last edited by playthatbeat; Mon 11-09-2017, 3:38 PM.
      jUst plAythAtbEAt

      Comment


      • #5
        Ohhhhh i got a reply, again. looks legit to me:

        Code:
        From - Mon Sep 11 14:51:53 2017
        X-Account-Key: account2
        X-UIDL: UID117519-1111606785
        X-Mozilla-Status: 0013
        X-Mozilla-Status2: 00000000
        X-Mozilla-Keys:                                                                                 
        Return-Path: 
        X-Original-To: *****
        Delivered-To: *****@m05.spamarrest.com
        Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
        	by m05.spamarrest.com (Postfix) with ESMTP id CEF7839001E
        	for ; Mon, 11 Sep 2017 08:15:30 -0500 (CDT)
        Envelope-to: *****@iol.ie
        Delivery-date: Mon, 11 Sep 2017 14:12:13 +0100
        Received: from Debian-exim by hub10.mail.esat.net with spam-scanned (Exim 4.80)
        	(envelope-from )
        	id 1drOVR-0007f4-Nl
        	for ******@iol.ie; Mon, 11 Sep 2017 14:12:13 +0100
        X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on hub10.mail.esat.net
        X-Spam-Level: 
        X-Spam-Status: No, score=0.1 required=4.5 tests=FREEMAIL_ENVFROM_END_DIGIT,
        	FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,T_DKIM_INVALID
        	autolearn=disabled version=3.3.2
        Received: from mail-pg0-f54.google.com ([74.125.83.54])
        	by hub10.mail.esat.net with esmtp (Exim 4.80)
        	(envelope-from )
        	id 1drOVR-0007eo-IN
        	for *****@iol.ie; Mon, 11 Sep 2017 14:12:05 +0100
        Received: by mail-pg0-f54.google.com with SMTP id v66so15093371pgb.5
                for <*****@iol.ie>; Mon, 11 Sep 2017 06:12:05 -0700 (PDT)
        DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
                d=gmail.com; s=20161025;
                h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
                bh=mbBU3b6qV4Q4Zk+9NDMTyNQuYMvenUslERoeQHEeX6I=;
                b=je5IFlE0dq+ZnYy0FkoeNQNdeBUGOKYcW9OcyrrliQZQ8sn6yLCrvO2ntorfld4gT6
                 M6cmZ16gclDZ1gkTk0ZJbJVstuWQDEzyWeXWA8KrDDsywp+8TWq0B0GXqMfPvZ8rv1ej
                 KI6d16ws/YC9d/b5BuQEoklIEhkYJ+e0NQ04Z7DCMVGXUB9koMJoJAw2lWo+dHCT3SU6
                 LyLpFCbcJdSWqBFFP7qiu+gg2YON3Kaou6gCUf8fQXJ+SVEgkYZEx/YCfRG4+jngfQGs
                 +oW2Bk9STlo5tmHgXNqaxI+WAOmcEOt3F/37ymVd2644HRNk4AWH2mqvrcejV3YTWXBJ
                 bjPQ==
        X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
                d=1e100.net; s=20161025;
                h=x-gm-message-state:mime-version:in-reply-to:references:from:date
                 :message-id:subject:to;
                bh=mbBU3b6qV4Q4Zk+9NDMTyNQuYMvenUslERoeQHEeX6I=;
                b=oGg0bUNuhNW56ymCYu1CbUrw0Ze1f69SSXg7H/ywMGcPi+ZuZXVm1o5ZxwczCF2aQR
                 SwPr8JNxL84VKXWzg8Eq4RKb/w0YoYsQgKCKurcxeQ2ZIIdHhmhb9K4eCt8zXCzPJrt4
                 OtxMBqGK+DH2RjBWXCK4ol1Kgrc2XGCd0pL6Z0rX81fBe/LreOk+9oSQ9qJAlrxRd2Ks
                 4QYbDVUd0b1KA3EejPdSi/9P6d7HGFvb+10rA/9WMT1UoeArPAKi0nGxaTuy6PU9z4M3
                 kFhRiHDoHvLLlHAuCpiU4u7ozBRNnCYPER/eo1/1YVH/mDsGJaeHFNM9FnAdf/ujuU7p
                 8sRw==
        X-Gm-Message-State: AHPjjUhJnCXH85p4xR1GUwW5VAirKxJnO38XNC1KfMXBE5YdZCJOEI7T
        	kruh4SdkXomOvL0rEfPqwySOY3b1F0FE+0+s/EFL6g==
        X-Google-Smtp-Source: ADKCNb6i27LCJ7tEqMvt3x037bbUgAntDpd0E30XU3f2km7ovbUZGcwoyx9mQI/sDRZpFMfW0TWK2Cgcq6X3D4Pc21A=
        X-Received: by 10.99.54.7 with SMTP id d7mr11966704pga.115.1505135524710; Mon,
         11 Sep 2017 06:12:04 -0700 (PDT)
        MIME-Version: 1.0
        Received: by 10.100.137.9 with HTTP; Mon, 11 Sep 2017 06:12:04 -0700 (PDT)
        In-Reply-To: <22709553.1138.1505135134466.JavaMail.root@www03>
        References: <22709553.1138.1505135134466.JavaMail.root@www03>
        From: Sales 
        Date: Mon, 11 Sep 2017 09:12:04 -0400
        Message-ID: <1287657.62089.1505135730842.JavaMail.root@m05>
        Subject: Re: OSC OSCAR - Oxford Synthesizer Company - Ultra Rare Vintage Synth
        To: tim <*****@iol.ie>
        Content-Type: multipart/alternative; boundary="94eb2c0a4b124a0bbd0558e9acc4"
        X-SA-Poll-Id: 1505135730682..49d0f381b9d7ef429028e196f65154eb..1..1505135524000
        X-SA-USERIDNR: 260430
        Received-SPF: pass(gmail.com: domain of
        	_netblocks.google.com designates 74.125.83.54 as permitted sender)
        X-SA-MPREASON: sender enabled (newdiscount01@gmail.com)
        
        --94eb2c0a4b124a0bbd0558e9acc4
        Content-Type: text/plain; charset="UTF-8"
        Hi,

        Shipping will be done from US, it is just me in UK with my new business.

        A pick up is not possible.

        Thanks

        On Mon, Sep 11, 2017 at 9:05 AM, tim <*****@iol.ie> wrote:

        > I am in London until Wednesday, staying in WC1, so i can collect
        > the Synth, and give You cash - is that OK?
        >
        > You are at 2 Shaftesbury Avenue - London, W1D 5ER? What time is
        > good for You?
        >
        Last edited by playthatbeat; Mon 11-09-2017, 3:33 PM.
        jUst plAythAtbEAt

        Comment


        • #6
          Actually, this is SUCH a lot of work for someone, i thought i should grab all the images and html of the entire bullshit collection, as in fairness, as anyone who is into their Vintage gear will know, this is a FANTASTIC selection of pretend stuff to try and scam people with.
          Attached Files
          jUst plAythAtbEAt

          Comment


          • #7
            IT GOES ON:


            I am not offering to meet you in a train station, i am offering to visit You at Your place of business, and, i am also offering to discuss acquisition of the entire collection You have listed on eBay.

            What i am thinking is, If You can spare the time, maybe You Can You tell me more about the collection? How You came to be liquidating it? I am very interested in the back story, as it's a superb lot.

            Will You meet me today or not? I have cash here right now for the OSCar, and pending it's delivery and working order, i have the funds to pay Your asking price for all the other items You list.


            On 11/09/17 15:07, Sales wrote:
            > I only deal through eBay, I am a business man, I am not a person who meet strangers in a train station
            >
            >
            jUst plAythAtbEAt

            Comment


            • #8
              Gauntlet drops:

              I am referring to the Vintage Synthesizers You have listed here: https://www.ebay.com/sch/Synthesizer...=&_ssn=bob2057

              I count 49 items, with an average of US$1000 per item, and yes, i am quite serious with my offer.

              On 11/09/17 15:35, Sales wrote:
              > I have items for over $1,000.000 . Do you have that money?
              >
              > On Mon, Sep 11, 2017 at 10:30 AM, mrspring <*****@iol.ie> wrote:
              >
              > I am not offering to meet you in a train station, i am offering to visit You at Your place of business, and, i am also offering to discuss acquisition of the entire collection You have listed on eBay.
              >
              > What i am thinking is, If You can spare the time, maybe You Can You tell me more about the collection? How You came to be liquidating it? I am very interested in the back story, as it's a superb lot.
              >
              > Will You meet me today or not? I have cash here right now for the OSCar, and pending it's delivery and working order, i have the funds to pay Your asking price for all the other items You list.
              >
              >


              jUst plAythAtbEAt

              Comment


              • #9
                Aw, he/she/it has gone all emo since my last reply.

                BUT, messing with the URL for the deal, if you change the numbers a bit you get some of the other items on that account: http://newphotos.newshoppingonlinetop10.party/1800.html is a bike, etc.

                The URL and hosting is a $4.99 special i think? again, DEFO LEGIT, TAKE MAH MONIES

                newshoppingonlinetop10.partyUpdated 1 second ago
                Domain Information
                Domain:
                newshoppingonlinetop10.party
                Registration Date:
                2017-09-04
                Expiration Date:
                2018-09-04
                Updated Date:
                2017-09-09
                Status:
                clientTransferProhibited
                Name Servers:
                dns2.registrar-servers.com
                dns1.registrar-servers.com
                Registrant Contact
                Name:
                WhoisGuard Protected
                Organization:
                WhoisGuard, Inc.
                Street:
                P.O. Box 0823-03411
                City:
                Panama
                State:
                Panama
                Country:
                PA
                Phone:
                +507.8365503
                Fax:
                +51.17057182
                Email:
                email@whoisguard.com
                Administrative Contact
                Name:
                WhoisGuard Protected
                Organization:
                WhoisGuard, Inc.
                Street:
                P.O. Box 0823-03411
                City:
                Panama
                State:
                Panama
                Country:
                PA
                Phone:
                +507.8365503
                Fax:
                +51.17057182
                Email:
                email@whoisguard.com
                Technical Contact
                Name:
                WhoisGuard Protected
                Organization:
                WhoisGuard, Inc.
                Street:
                P.O. Box 0823-03411
                City:
                Panama
                State:
                Panama
                Country:
                PA
                Phone:
                +507.8365503
                Fax:
                +51.17057182
                Email:
                email@whoisguard.com
                Raw Whois Data

                Domain Name: newshoppingonlinetop10.party
                Registry Domain ID: DBDC6E52BFFA34386837F952553FCD144-NSR
                Registrar WHOIS Server: whois.namecheap.com
                Registrar URL: http://www.namecheap.com
                Updated Date: 2017-09-09T09:47:29Z
                Creation Date: 2017-09-04T09:47:29Z
                Registry Expiry Date: 2018-09-04T09:47:29Z
                Registrar: NameCheap, Inc.
                Registrar IANA ID: 1068
                Registrar Abuse Contact Email:
                Registrar Abuse Contact Phone:
                Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
                Registry Registrant ID: CB981E43536E840C5A81B8AAA2C1214DC-NSR
                Registrant Name: WhoisGuard Protected
                Registrant Organization: WhoisGuard, Inc.
                Registrant Street: P.O. Box 0823-03411
                Registrant Street:
                Registrant Street:
                Registrant City: Panama
                Registrant State/Province: Panama
                Registrant Postal Code:
                Registrant Country: PA
                Registrant Phone: +507.8365503
                Registrant Phone Ext:
                Registrant Fax: +51.17057182
                Registrant Fax Ext:
                Registrant Email: email@whoisguard.com
                Registry Admin ID: C5DEF26A16D1B4C2D93DA37A24CF9A57C-NSR
                Admin Name: WhoisGuard Protected
                Admin Organization: WhoisGuard, Inc.
                Admin Street: P.O. Box 0823-03411
                Admin Street:
                Admin Street:
                Admin City: Panama
                Admin State/Province: Panama
                Admin Postal Code:
                Admin Country: PA
                Admin Phone: +507.8365503
                Admin Phone Ext:
                Admin Fax: +51.17057182
                Admin Fax Ext:
                Admin Email: email@whoisguard.com
                Registry Tech ID: CA918849823164044BC2B661261DE1B0C-NSR
                Tech Name: WhoisGuard Protected
                Tech Organization: WhoisGuard, Inc.
                Tech Street: P.O. Box 0823-03411
                Tech Street:
                Tech Street:
                Tech City: Panama
                Tech State/Province: Panama
                Tech Postal Code:
                Tech Country: PA
                Tech Phone: +507.8365503
                Tech Phone Ext:
                Tech Fax: +51.17057182
                Tech Fax Ext:
                Tech Email: email@whoisguard.com
                Name Server: dns2.registrar-servers.com
                Name Server: dns1.registrar-servers.com
                DNSSEC: unsigned
                URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
                >>> Last update of WHOIS database: 2017-09-11T15:06:46Z <<<

                For more information on Whois status codes, please visit https://icann.org/epp

                The WHOIS service offered by the Registry Operator, and the access to the records in the Registry Operator WHOIS database, are provided for information purposes only and is designed (i) to assist persons in determining whether a specific domain name registration record is available or not in the Registry Operator database and (ii) to obtain information related to the registration records of existing domain names. The Registry Operator cannot, under any circumstances, be held liable in such instances where the stored information would prove to be wrong, incomplete, or not accurate in any sense. By submitting a WHOIS query, you, the user, agree that you will not use this data: (i) to allow, enable or otherwise support in any way the transmission of unsolicited, commercial advertising or other solicitations whether via direct mail, email, telephone or otherwise; (ii) to enable high volume, automated, electronic processes that apply to the registry (or its systems); (iii) for target advertising in any possible way; (iv) to cause nuisance in any possible way to the registrants by sending (whether by automated, electronic processes capable of enabling high volumes or other possible means) messages to them; (v) to violate any law, rule, regulation or statute; and/or (vi) in contravention of any applicable data and privacy protection acts. Without prejudice to the above, it is explicitly forbidden to extract, copy and/or use or re-utilize in any form and by any means (electronically or not) the whole or a quantitatively or qualitatively substantial part of the contents of the WHOIS database without prior and explicit permission by Registry Operator, nor in any attempt hereof, or to apply automated, electronic processes to Registry Operator (or its systems or their designated third party Registry Service Provider's systems). You agree that any reproduction and/or transmission of data for commercial purposes will always be considered as the extraction of a substantial part of the content of the WHOIS database. By utilizing this website and/or submitting a query you agree to abide by this policy and accept that Registry Operator can take measures to limit the use of its WHOIS services in order to protect the privacy of its registrants or the integrity of the database. We reserve the right to make changes to these Terms and Conditions at any time without prior notice to you. It is your responsibility to review these Terms and Conditions each time you access or use the WHOIS service and to familiarise yourself with any changes. If you do not agree to the changes implemented by Registry Operator, your sole and exclusive remedy is to terminate your use of the WHOIS service. By executing a query, in any manner whatsoever, you agree to abide by these Terms and Conditions.

                NOTE: FAILURE TO LOCATE A RECORD IN THE WHOIS DATABASE IS NOT INDICATIVE
                OF THE AVAILABILITY OF A DOMAIN NAME.

                All domain names are subject to certain additional domain name registration
                rules. For details, please visit our site at http://whois.nic.party.
                Last edited by playthatbeat; Mon 11-09-2017, 4:46 PM.
                jUst plAythAtbEAt

                Comment


                • #10
                  TERRIBLE NEWS!! looks like the deal is going to fall through The vendor has stopped replying to the emails..

                  Damn, i had 50,000euro in cash ready to go in a suitcase. I guess i'll have to take the cash back to the bank now.
                  jUst plAythAtbEAt

                  Comment


                  • #11
                    Gutted, i really wanted this VCS3: http://www.ebay.com/itm/EMS-VCS3-MKII-/362098977020

                    This particular VCS3 MKII was once in a synthesizer museum in Great Britain. I acquired it in 2000, and it has lived in my smoke-free studio and been treated very well
                    If you GOOGLE the above quote, you get this on SYNTHFIND:

                    http://www.synthfind.com/ems/ems-vcs3-mk-ii/

                    same text, same pics.

                    NOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOES!!!!!!!!!!!!! 1 IT'S A LIEEEEEEEEEE...
                    jUst plAythAtbEAt

                    Comment

                    Working...
                    X