Announcement

Collapse
No announcement yet.

AMAZING DEALS ON GEAR ON eBAY (scam)

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • AMAZING DEALS ON GEAR ON eBAY (scam)

    Decided to wind up a spoofer on eBay today, who was advertising a TOO GOOD TO BE TRUE OSCar synth..

    Basically, the text on the eBay listing has a .jpg in the description, attached below, and has a link to click to make the offer: http://newphotos.newshoppingonlinetop10.party/1821.html

    Account is a legit one in the USA, POST FROM is Taiwan/HK/China, and the recipient for the 'moneygram' is in a derelict/under construction building in London.

    DEFO LEGIT.
    Attached Files
    Last edited by playthatbeat; Mon 11-09-2017, 3:37 PM.
    jUst plAythAtbEAt

  • #2
    Check out the UNBELIEVABLE deals from this guy/gal/creature
    Attached Files
    jUst plAythAtbEAt

    Comment


    • #3
      and the rest!!! my god, it's like a DREAM COME TRUE. TAKE MY MONEY NOW!
      Attached Files
      jUst plAythAtbEAt

      Comment


      • #4
        And the email that arrived after i filled in the bullshit target on the eBay page, offering to complete the deal via fuc*ing MONEYGRAM:

        Code:
        From - Mon Sep 11 14:08:28 2017
        X-Account-Key: account2
        X-UIDL: UID117518-1111606785
        X-Mozilla-Status: 0001
        X-Mozilla-Status2: 00000000
        X-Mozilla-Keys:                                                                                 
        Return-Path: <>
        X-Original-To: ******
        Delivered-To: ******@m05.spamarrest.com
        Received: from localhost.localdomain (www03.spamarrest.com [10.16.213.144])
        	by m05.spamarrest.com (Postfix) with ESMTP id 5B78D39001E
        	for ; Mon, 11 Sep 2017 08:05:34 -0500 (CDT)
        Envelope-to: atrisk@iol.ie
        Delivery-date: Mon, 11 Sep 2017 12:22:43 +0100
        Received: from Debian-exim by hub09.mail.esat.net with spam-scanned (Exim 4.80)
        	(envelope-from )
        	id 1drMna-0001w1-0Q
        	for atrisk@iol.ie; Mon, 11 Sep 2017 12:22:43 +0100
        X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on hub09.mail.esat.net
        X-Spam-Level: 
        X-Spam-Status: No, score=0.1 required=4.5 tests=FREEMAIL_ENVFROM_END_DIGIT,
        	FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,T_DKIM_INVALID,
        	T_TO_NO_BRKTS_FREEMAIL autolearn=disabled version=3.3.2
        Received: from mail-pg0-f47.google.com ([74.125.83.47])
        	by hub09.mail.esat.net with esmtp (Exim 4.80)
        	(envelope-from )
        	id 1drMnZ-0001vj-RA
        	for *****@iol.ie; Mon, 11 Sep 2017 12:22:41 +0100
        Received: by mail-pg0-f47.google.com with SMTP id v66so14663460pgb.5
                for <*****@iol.ie>; Mon, 11 Sep 2017 04:22:41 -0700 (PDT)
        DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
                d=gmail.com; s=20161025;
                h=mime-version:from:date:message-id:subject:to;
                bh=JuK8J5WNhaEm8y6WYai4Wra2BLXUo9fr4n7afKT6Abc=;
                b=dPsY476gA5vLj2kzUEnSuhTY9gL2QivNkuAyJjQ8vMStktnt0k+0W2nJ9jG3BSB3xc
                 INRSblD0cbkjqF+TUeJmqJwrtlrFh5ccxutqeUxjvVZxlj4GEGZ0XnqBjjFibfdPC2Em
                 q4ZVKPQWVMIBikz2/5ntkrtryvP8up5Gfv9oqrqipjkcgXAYwZjhf3+OoNqQxH7ZJoVI
                 mXigx/oWrDnHfPLl+allAWpDEuvz3E9vEoN3na23HkoMMNg+03ac6LyCm2zVjEEjSgFo
                 l3yma1cNUuC18A3hrAjCXhQbSuHSVP4fhHgRIL1qFjpQ46Cn2AhM0JAsd2wCH6WN9cXS
                 9mpw==
        X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
                d=1e100.net; s=20161025;
                h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
                bh=JuK8J5WNhaEm8y6WYai4Wra2BLXUo9fr4n7afKT6Abc=;
                b=AshiZpF+K9EFaEB4JckmisVpHEp4eAdqKkcZpWQACqbtVmJCVZH+qq0dYHlOtVfXCJ
                 s6KGap12ZI1nZ6SrwPkxPFmUcshpICrosrGoQ0/GLd6n1nspfsXCYzOSilfDN627v24P
                 RiSkXRFj4FGViTBtmSyhjfX+T1IH/W8MbBzMIOqbmeEDTwiqth4V6SpRcd88pqn4dJTM
                 puAmqLql2BZ0mEFwvAUU/Bwo04/ruemiUh3ooti8WqenI91tiSsky253CX3yoshRIQ+Y
                 FW53E+RVuRcPtH6DfPaaQ+9kV2VL7m98Kdg9Ml0i5s29Yzru7vWp7UJ49VOSn9W+urcM
                 P+ew==
        X-Gm-Message-State: AHPjjUiInw/wFCB+dI5tTAl2imN+PkyxImHA3F+DApPQ36w9HXpmfbmb
        	+fy+6u+aUXeRp0iM9iqS5wbs7c4gN0ijhgP/dO9z2lrd
        X-Google-Smtp-Source: ADKCNb6Ob4EoN/6sz8hydd+wUsiU6gd0W5Ww4AOkrFBDveDixo2Gc6KID2usn7V9cGlLkyiHZT/aBsKuL7Df0d4Mbek=
        X-Received: by 10.98.103.142 with SMTP id t14mr11679670pfj.56.1505128960571;
         Mon, 11 Sep 2017 04:22:40 -0700 (PDT)
        MIME-Version: 1.0
        Received: by 10.100.137.9 with HTTP; Mon, 11 Sep 2017 04:22:40 -0700 (PDT)
        From: Sales 
        Date: Mon, 11 Sep 2017 07:22:40 -0400
        Message-ID: 
        Subject: OSC OSCAR - Oxford Synthesizer Company - Ultra Rare Vintage Synth
        To: atrisk@iol.ie
        Content-Type: multipart/alternative; boundary="001a1142807c093e760558e825c9"
        X-SA-Poll-Id: 1505129134577..280f4e6b7d42dcb4eb8aeef2645336e7..1..1505128960000
        X-SA-USERIDNR: 260430
        Received-SPF: pass(gmail.com: domain of
        	_netblocks.google.com designates 74.125.83.47 as permitted sender)
        X-SA-MPREASON: UNVERIFIED
        
        --001a1142807c093e760558e825c9
        Content-Type: text/plain; charset="UTF-8"

        Hi there,

        Thank you for purchasing this item, by completing the form with your
        details you agreed to buy this item for the price of EURO 850.00 for that
        reason I just submitted all the details of our Transaction through eBay and
        you should have been already contacted by them with the eBay Invoice for
        your purchase.

        Please let me know if you can complete the payment today.

        Waiting you reply
        Last edited by playthatbeat; Mon 11-09-2017, 3:38 PM.
        jUst plAythAtbEAt

        Comment


        • #5
          Ohhhhh i got a reply, again. looks legit to me:

          Code:
          From - Mon Sep 11 14:51:53 2017
          X-Account-Key: account2
          X-UIDL: UID117519-1111606785
          X-Mozilla-Status: 0013
          X-Mozilla-Status2: 00000000
          X-Mozilla-Keys:                                                                                 
          Return-Path: 
          X-Original-To: *****
          Delivered-To: *****@m05.spamarrest.com
          Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
          	by m05.spamarrest.com (Postfix) with ESMTP id CEF7839001E
          	for ; Mon, 11 Sep 2017 08:15:30 -0500 (CDT)
          Envelope-to: *****@iol.ie
          Delivery-date: Mon, 11 Sep 2017 14:12:13 +0100
          Received: from Debian-exim by hub10.mail.esat.net with spam-scanned (Exim 4.80)
          	(envelope-from )
          	id 1drOVR-0007f4-Nl
          	for ******@iol.ie; Mon, 11 Sep 2017 14:12:13 +0100
          X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on hub10.mail.esat.net
          X-Spam-Level: 
          X-Spam-Status: No, score=0.1 required=4.5 tests=FREEMAIL_ENVFROM_END_DIGIT,
          	FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,T_DKIM_INVALID
          	autolearn=disabled version=3.3.2
          Received: from mail-pg0-f54.google.com ([74.125.83.54])
          	by hub10.mail.esat.net with esmtp (Exim 4.80)
          	(envelope-from )
          	id 1drOVR-0007eo-IN
          	for *****@iol.ie; Mon, 11 Sep 2017 14:12:05 +0100
          Received: by mail-pg0-f54.google.com with SMTP id v66so15093371pgb.5
                  for <*****@iol.ie>; Mon, 11 Sep 2017 06:12:05 -0700 (PDT)
          DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
                  d=gmail.com; s=20161025;
                  h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
                  bh=mbBU3b6qV4Q4Zk+9NDMTyNQuYMvenUslERoeQHEeX6I=;
                  b=je5IFlE0dq+ZnYy0FkoeNQNdeBUGOKYcW9OcyrrliQZQ8sn6yLCrvO2ntorfld4gT6
                   M6cmZ16gclDZ1gkTk0ZJbJVstuWQDEzyWeXWA8KrDDsywp+8TWq0B0GXqMfPvZ8rv1ej
                   KI6d16ws/YC9d/b5BuQEoklIEhkYJ+e0NQ04Z7DCMVGXUB9koMJoJAw2lWo+dHCT3SU6
                   LyLpFCbcJdSWqBFFP7qiu+gg2YON3Kaou6gCUf8fQXJ+SVEgkYZEx/YCfRG4+jngfQGs
                   +oW2Bk9STlo5tmHgXNqaxI+WAOmcEOt3F/37ymVd2644HRNk4AWH2mqvrcejV3YTWXBJ
                   bjPQ==
          X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
                  d=1e100.net; s=20161025;
                  h=x-gm-message-state:mime-version:in-reply-to:references:from:date
                   :message-id:subject:to;
                  bh=mbBU3b6qV4Q4Zk+9NDMTyNQuYMvenUslERoeQHEeX6I=;
                  b=oGg0bUNuhNW56ymCYu1CbUrw0Ze1f69SSXg7H/ywMGcPi+ZuZXVm1o5ZxwczCF2aQR
                   SwPr8JNxL84VKXWzg8Eq4RKb/w0YoYsQgKCKurcxeQ2ZIIdHhmhb9K4eCt8zXCzPJrt4
                   OtxMBqGK+DH2RjBWXCK4ol1Kgrc2XGCd0pL6Z0rX81fBe/LreOk+9oSQ9qJAlrxRd2Ks
                   4QYbDVUd0b1KA3EejPdSi/9P6d7HGFvb+10rA/9WMT1UoeArPAKi0nGxaTuy6PU9z4M3
                   kFhRiHDoHvLLlHAuCpiU4u7ozBRNnCYPER/eo1/1YVH/mDsGJaeHFNM9FnAdf/ujuU7p
                   8sRw==
          X-Gm-Message-State: AHPjjUhJnCXH85p4xR1GUwW5VAirKxJnO38XNC1KfMXBE5YdZCJOEI7T
          	kruh4SdkXomOvL0rEfPqwySOY3b1F0FE+0+s/EFL6g==
          X-Google-Smtp-Source: ADKCNb6i27LCJ7tEqMvt3x037bbUgAntDpd0E30XU3f2km7ovbUZGcwoyx9mQI/sDRZpFMfW0TWK2Cgcq6X3D4Pc21A=
          X-Received: by 10.99.54.7 with SMTP id d7mr11966704pga.115.1505135524710; Mon,
           11 Sep 2017 06:12:04 -0700 (PDT)
          MIME-Version: 1.0
          Received: by 10.100.137.9 with HTTP; Mon, 11 Sep 2017 06:12:04 -0700 (PDT)
          In-Reply-To: <22709553.1138.1505135134466.JavaMail.root@www03>
          References: <22709553.1138.1505135134466.JavaMail.root@www03>
          From: Sales 
          Date: Mon, 11 Sep 2017 09:12:04 -0400
          Message-ID: <1287657.62089.1505135730842.JavaMail.root@m05>
          Subject: Re: OSC OSCAR - Oxford Synthesizer Company - Ultra Rare Vintage Synth
          To: tim <*****@iol.ie>
          Content-Type: multipart/alternative; boundary="94eb2c0a4b124a0bbd0558e9acc4"
          X-SA-Poll-Id: 1505135730682..49d0f381b9d7ef429028e196f65154eb..1..1505135524000
          X-SA-USERIDNR: 260430
          Received-SPF: pass(gmail.com: domain of
          	_netblocks.google.com designates 74.125.83.54 as permitted sender)
          X-SA-MPREASON: sender enabled (newdiscount01@gmail.com)
          
          --94eb2c0a4b124a0bbd0558e9acc4
          Content-Type: text/plain; charset="UTF-8"
          Hi,

          Shipping will be done from US, it is just me in UK with my new business.

          A pick up is not possible.

          Thanks

          On Mon, Sep 11, 2017 at 9:05 AM, tim <*****@iol.ie> wrote:

          > I am in London until Wednesday, staying in WC1, so i can collect
          > the Synth, and give You cash - is that OK?
          >
          > You are at 2 Shaftesbury Avenue - London, W1D 5ER? What time is
          > good for You?
          >
          Last edited by playthatbeat; Mon 11-09-2017, 3:33 PM.
          jUst plAythAtbEAt

          Comment


          • #6
            Actually, this is SUCH a lot of work for someone, i thought i should grab all the images and html of the entire bullshit collection, as in fairness, as anyone who is into their Vintage gear will know, this is a FANTASTIC selection of pretend stuff to try and scam people with.
            Attached Files
            jUst plAythAtbEAt

            Comment


            • #7
              IT GOES ON:


              I am not offering to meet you in a train station, i am offering to visit You at Your place of business, and, i am also offering to discuss acquisition of the entire collection You have listed on eBay.

              What i am thinking is, If You can spare the time, maybe You Can You tell me more about the collection? How You came to be liquidating it? I am very interested in the back story, as it's a superb lot.

              Will You meet me today or not? I have cash here right now for the OSCar, and pending it's delivery and working order, i have the funds to pay Your asking price for all the other items You list.


              On 11/09/17 15:07, Sales wrote:
              > I only deal through eBay, I am a business man, I am not a person who meet strangers in a train station
              >
              >
              jUst plAythAtbEAt

              Comment


              • #8
                Gauntlet drops:

                I am referring to the Vintage Synthesizers You have listed here: https://www.ebay.com/sch/Synthesizer...=&_ssn=bob2057

                I count 49 items, with an average of US$1000 per item, and yes, i am quite serious with my offer.

                On 11/09/17 15:35, Sales wrote:
                > I have items for over $1,000.000 . Do you have that money?
                >
                > On Mon, Sep 11, 2017 at 10:30 AM, mrspring <*****@iol.ie> wrote:
                >
                > I am not offering to meet you in a train station, i am offering to visit You at Your place of business, and, i am also offering to discuss acquisition of the entire collection You have listed on eBay.
                >
                > What i am thinking is, If You can spare the time, maybe You Can You tell me more about the collection? How You came to be liquidating it? I am very interested in the back story, as it's a superb lot.
                >
                > Will You meet me today or not? I have cash here right now for the OSCar, and pending it's delivery and working order, i have the funds to pay Your asking price for all the other items You list.
                >
                >


                jUst plAythAtbEAt

                Comment


                • #9
                  Aw, he/she/it has gone all emo since my last reply.

                  BUT, messing with the URL for the deal, if you change the numbers a bit you get some of the other items on that account: http://newphotos.newshoppingonlinetop10.party/1800.html is a bike, etc.

                  The URL and hosting is a $4.99 special i think? again, DEFO LEGIT, TAKE MAH MONIES

                  newshoppingonlinetop10.partyUpdated 1 second ago
                  Domain Information
                  Domain:
                  newshoppingonlinetop10.party
                  Registration Date:
                  2017-09-04
                  Expiration Date:
                  2018-09-04
                  Updated Date:
                  2017-09-09
                  Status:
                  clientTransferProhibited
                  Name Servers:
                  dns2.registrar-servers.com
                  dns1.registrar-servers.com
                  Registrant Contact
                  Name:
                  WhoisGuard Protected
                  Organization:
                  WhoisGuard, Inc.
                  Street:
                  P.O. Box 0823-03411
                  City:
                  Panama
                  State:
                  Panama
                  Country:
                  PA
                  Phone:
                  +507.8365503
                  Fax:
                  +51.17057182
                  Email:
                  email@whoisguard.com
                  Administrative Contact
                  Name:
                  WhoisGuard Protected
                  Organization:
                  WhoisGuard, Inc.
                  Street:
                  P.O. Box 0823-03411
                  City:
                  Panama
                  State:
                  Panama
                  Country:
                  PA
                  Phone:
                  +507.8365503
                  Fax:
                  +51.17057182
                  Email:
                  email@whoisguard.com
                  Technical Contact
                  Name:
                  WhoisGuard Protected
                  Organization:
                  WhoisGuard, Inc.
                  Street:
                  P.O. Box 0823-03411
                  City:
                  Panama
                  State:
                  Panama
                  Country:
                  PA
                  Phone:
                  +507.8365503
                  Fax:
                  +51.17057182
                  Email:
                  email@whoisguard.com
                  Raw Whois Data

                  Domain Name: newshoppingonlinetop10.party
                  Registry Domain ID: DBDC6E52BFFA34386837F952553FCD144-NSR
                  Registrar WHOIS Server: whois.namecheap.com
                  Registrar URL: http://www.namecheap.com
                  Updated Date: 2017-09-09T09:47:29Z
                  Creation Date: 2017-09-04T09:47:29Z
                  Registry Expiry Date: 2018-09-04T09:47:29Z
                  Registrar: NameCheap, Inc.
                  Registrar IANA ID: 1068
                  Registrar Abuse Contact Email:
                  Registrar Abuse Contact Phone:
                  Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
                  Registry Registrant ID: CB981E43536E840C5A81B8AAA2C1214DC-NSR
                  Registrant Name: WhoisGuard Protected
                  Registrant Organization: WhoisGuard, Inc.
                  Registrant Street: P.O. Box 0823-03411
                  Registrant Street:
                  Registrant Street:
                  Registrant City: Panama
                  Registrant State/Province: Panama
                  Registrant Postal Code:
                  Registrant Country: PA
                  Registrant Phone: +507.8365503
                  Registrant Phone Ext:
                  Registrant Fax: +51.17057182
                  Registrant Fax Ext:
                  Registrant Email: email@whoisguard.com
                  Registry Admin ID: C5DEF26A16D1B4C2D93DA37A24CF9A57C-NSR
                  Admin Name: WhoisGuard Protected
                  Admin Organization: WhoisGuard, Inc.
                  Admin Street: P.O. Box 0823-03411
                  Admin Street:
                  Admin Street:
                  Admin City: Panama
                  Admin State/Province: Panama
                  Admin Postal Code:
                  Admin Country: PA
                  Admin Phone: +507.8365503
                  Admin Phone Ext:
                  Admin Fax: +51.17057182
                  Admin Fax Ext:
                  Admin Email: email@whoisguard.com
                  Registry Tech ID: CA918849823164044BC2B661261DE1B0C-NSR
                  Tech Name: WhoisGuard Protected
                  Tech Organization: WhoisGuard, Inc.
                  Tech Street: P.O. Box 0823-03411
                  Tech Street:
                  Tech Street:
                  Tech City: Panama
                  Tech State/Province: Panama
                  Tech Postal Code:
                  Tech Country: PA
                  Tech Phone: +507.8365503
                  Tech Phone Ext:
                  Tech Fax: +51.17057182
                  Tech Fax Ext:
                  Tech Email: email@whoisguard.com
                  Name Server: dns2.registrar-servers.com
                  Name Server: dns1.registrar-servers.com
                  DNSSEC: unsigned
                  URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
                  >>> Last update of WHOIS database: 2017-09-11T15:06:46Z <<<

                  For more information on Whois status codes, please visit https://icann.org/epp

                  The WHOIS service offered by the Registry Operator, and the access to the records in the Registry Operator WHOIS database, are provided for information purposes only and is designed (i) to assist persons in determining whether a specific domain name registration record is available or not in the Registry Operator database and (ii) to obtain information related to the registration records of existing domain names. The Registry Operator cannot, under any circumstances, be held liable in such instances where the stored information would prove to be wrong, incomplete, or not accurate in any sense. By submitting a WHOIS query, you, the user, agree that you will not use this data: (i) to allow, enable or otherwise support in any way the transmission of unsolicited, commercial advertising or other solicitations whether via direct mail, email, telephone or otherwise; (ii) to enable high volume, automated, electronic processes that apply to the registry (or its systems); (iii) for target advertising in any possible way; (iv) to cause nuisance in any possible way to the registrants by sending (whether by automated, electronic processes capable of enabling high volumes or other possible means) messages to them; (v) to violate any law, rule, regulation or statute; and/or (vi) in contravention of any applicable data and privacy protection acts. Without prejudice to the above, it is explicitly forbidden to extract, copy and/or use or re-utilize in any form and by any means (electronically or not) the whole or a quantitatively or qualitatively substantial part of the contents of the WHOIS database without prior and explicit permission by Registry Operator, nor in any attempt hereof, or to apply automated, electronic processes to Registry Operator (or its systems or their designated third party Registry Service Provider's systems). You agree that any reproduction and/or transmission of data for commercial purposes will always be considered as the extraction of a substantial part of the content of the WHOIS database. By utilizing this website and/or submitting a query you agree to abide by this policy and accept that Registry Operator can take measures to limit the use of its WHOIS services in order to protect the privacy of its registrants or the integrity of the database. We reserve the right to make changes to these Terms and Conditions at any time without prior notice to you. It is your responsibility to review these Terms and Conditions each time you access or use the WHOIS service and to familiarise yourself with any changes. If you do not agree to the changes implemented by Registry Operator, your sole and exclusive remedy is to terminate your use of the WHOIS service. By executing a query, in any manner whatsoever, you agree to abide by these Terms and Conditions.

                  NOTE: FAILURE TO LOCATE A RECORD IN THE WHOIS DATABASE IS NOT INDICATIVE
                  OF THE AVAILABILITY OF A DOMAIN NAME.

                  All domain names are subject to certain additional domain name registration
                  rules. For details, please visit our site at http://whois.nic.party.
                  Last edited by playthatbeat; Mon 11-09-2017, 4:46 PM.
                  jUst plAythAtbEAt

                  Comment


                  • #10
                    TERRIBLE NEWS!! looks like the deal is going to fall through The vendor has stopped replying to the emails..

                    Damn, i had 50,000euro in cash ready to go in a suitcase. I guess i'll have to take the cash back to the bank now.
                    jUst plAythAtbEAt

                    Comment


                    • #11
                      Gutted, i really wanted this VCS3: http://www.ebay.com/itm/EMS-VCS3-MKII-/362098977020

                      This particular VCS3 MKII was once in a synthesizer museum in Great Britain. I acquired it in 2000, and it has lived in my smoke-free studio and been treated very well
                      If you GOOGLE the above quote, you get this on SYNTHFIND:

                      http://www.synthfind.com/ems/ems-vcs3-mk-ii/

                      same text, same pics.

                      NOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOES!!!!!!!!!!!!! 1 IT'S A LIEEEEEEEEEE...
                      jUst plAythAtbEAt

                      Comment

                      Working...
                      X