Scammed for thousands

Post your questions about IP address geolocation here.
Post Reply
gus58
New Member
Posts: 1
Joined: Thu Jul 19, 2018 6:32 pm

Scammed for thousands

Post by gus58 » Thu Jul 19, 2018 6:52 pm

I bought a rare motorcycle online and would like someone to confirm that the originator of the messages are in Romania and Texas..... I have a couple of IP's to check. He has given me a website with tracking number that appears to work, but 24 hrs of phone calls have returned answering machine only. Any help appreciated.

Code: Select all

Delivered-To: ******@gmail.com
Received: by 2002:a6b:d219:0:0:0:0:0 with SMTP id q25-v6csp930485iob;
        Wed, 18 Jul 2018 13:32:30 -0700 (PDT)
X-Received: by 2002:a62:ac12:: with SMTP id v18-v6mr6545708pfe.126.1531945950825;
        Wed, 18 Jul 2018 13:32:30 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1531945950; cv=none;
        d=google.com; s=arc-20160816;
        b=pEW0jDxMfeIGs+eBl9Jjkf/5cx3A8/tMHNKQctMjUvqMlYIBzcl/7WJYqydox246Vu
         jVEmcio/+UQ582cELJuQYxEfYB9BvIX04o/D0wqWp+rJLC/e9vnL4JnUWDiuKUTUvtnj
         epN9baVR3MLgYgw1hgziH4bC3xAc2Kp73t8B0kg9PQlcPcAXzFfB/8yEe/XnCos1LF5L
         LEJjenTVw8Fp40wkRIUn7Db27TAvBYNvDM+myi0W2AMlvoVmPMSPwAJIEEK3YBsrsM+Z
         7uUdwxcAvZnnD7eyaV8qwelL2bsCSwehCgUG9zlqvb/zag/mBoO6Wex2cB5RKiDPcC7/
         hXUg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:references:in-reply-to:mime-version
         :dkim-signature:arc-authentication-results;
        bh=3cAhmjpEsRBEyid+3Ft6Aq689etkVaJjX8VPAvOr8bc=;
        b=uvKzjLI0j9Gb8L+7EIJ7ZF4P3prOcHINjDKVZcTLKnsqQs/qEU9Hym9NH+di534lkr
         Rk1H9TRk04wOszsExg1jSwHC0lccuFtbAV+vlTFpvNY4r8yUX8HnNBlGRtxM9+eN3fXU
         XIwVlG22iAI6lXt60H3Wfk9eP/iIgRaVXYWnzwot6xEqA+hPVUFyXgJeFhsS0+ffBm/L
         Sp6AbUmHKBEPRn1032m2Tk6LqxX0DEjC580Slg8f7Z6cpDXQakNXceDF8rPZyuF77ZRF
         Rvf1oOCT65bDBG0I5v1EGJuHTQmbyIgXywDAGllYwEwSP82spjjb7/xcFLnIhcrEWg/U
         BQ3A==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20161025 header.b=Zu7nEyCo;
       spf=pass (google.com: domain of rhkm323@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=rhkm323@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <rhkm323@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
        by mx.google.com with SMTPS id d1-v6sor1290373pge.309.2018.07.18.13.32.30
        for <******@gmail.com>
        (Google Transport Security);
        Wed, 18 Jul 2018 13:32:30 -0700 (PDT)
Received-SPF: pass (google.com: domain of rhkm323@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20161025 header.b=Zu7nEyCo;
       spf=pass (google.com: domain of rhkm323@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=rhkm323@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
        bh=3cAhmjpEsRBEyid+3Ft6Aq689etkVaJjX8VPAvOr8bc=;
        b=Zu7nEyCoqgntLv7IKQojK9DMjT/k8NaiKGHvKdbxdIrtKG4CfFi2hABBHoH4nkZ8eL
         dmiWf/GHqGwg9K/eN+dGWqdVrCYe4Sgk1WFcqdGREL7gOaRRAb+rGKve/rjoVIxNLLHq
         OgY+QEPiRHXrYcWJh0puqZy+POUDxhGup71QPO+iY5b4MGCEKGfV9+wmvn2XdjelRWz3
         +z34JlAkxjwW9pj/Oyjn0iXyPsGVcG3WRRF+uAbfYmYjoKsT9mZyI3GMgjidAAra3F01
         CxaAKKFyugBArwWqpou76R/XvwQww7xaswd8Z6aogHQGTDGNpmdRl81aeek0LFmcuaJm
         vmTg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:in-reply-to:references:from:date
         :message-id:subject:to;
        bh=3cAhmjpEsRBEyid+3Ft6Aq689etkVaJjX8VPAvOr8bc=;
        b=UdAvORXnMDaSFNmrFNikKAnJfG8yQp5hC3mDIQZCx6ldlrEXSd3GupL6hylvqLDMj1
         m3Oolti7IF23KvK042Kg08aZLMrpUCTEqqZA5iJZ6xlHqXiXdkwgpQEJl+Moy6vnp+TY
         wX6OC1I2bJDbgV5chhxgG3rQGNcqUdbScZQmzCP+qVPBoPs/xC7TfkIwyZvRNclYlsTW
         BexhWArKxBxP3cIskaxp+kPMDdHEk67HkdqMgnzpssYm+sYSStK/GahLekNPhH8b8G0x
         7xXUKj+o6u0+wrYADFBpPbWMVZewfRlAJHE5743Jl0a7YagM7yOJHDei7B3BQYTfNc7I
         Z1pw==
X-Gm-Message-State: AOUpUlFu6SRD+5GyrwcovK30mNUbqL87zlfsgTeKYoWJnMGWiYeOkcuJ LGxevSPuY/Yg7uuT06RWHDvS1/pMwPIfCF9mRqA=
X-Google-Smtp-Source: AAOMgpdhIQr3t/UgXxq+EDgKpijQMKHQY+m/YBtogo2dIEWuPRaa5NbygrvjKX0YfPz5v3/lvn8nXUtWZPLnZ0hIBWY=
X-Received: by 2002:a63:8f03:: with SMTP id n3-v6mr7208014pgd.166.1531945950097; Wed, 18 Jul 2018 13:32:30 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90a:3b09:0:0:0:0 with HTTP; Wed, 18 Jul 2018 13:32:29 -0700 (PDT)
In-Reply-To: <65d3cc7e8222925edc065d02f21ddecd@botcargo.com>
References: <E1ffr3f-004OWJ-AV@server15.thcservers.com> <65d3cc7e8222925edc065d02f21ddecd@botcargo.com>
From: Km Rh <rhkm323@gmail.com>
Date: Wed, 18 Jul 2018 21:32:29 +0100
Message-ID: <CAHe5+pmtJ=8=iS9=hZ2AHR4H6XoVS4v_NoKUEb3GFvu6NuVUeg@mail.gmail.com>
Subject: Fwd: Your Shipment is on its way!
To: ****** <******@gmail.com>
Content-Type: multipart/alternative; boundary="0000000000002bb5e805714bf6ca"

--0000000000002bb5e805714bf6ca
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello ***,
Just received email from the shipping company containing the tracking and I
deem it wiser to forward to you as well as you complained not receiving the
first sent by them!!

Please confirm the tracking number and process with payment...

Cheer


---------- Forwarded message ----------
From: BOT CARGO <info@botcargo.com>
Date: Wed, Jul 18, 2018 at 8:49 PM
Subject: Your Shipment is on its way!
To: *******@gmail.com
Cc: rhkm323@gmail.com



Dear ********,

Your Awesome Motorcycle has Shipped! California =E2=80=93 Here we come! You=
r
shipment began 07/18/2018. Thank you for patronizing BOT Cargo Logistics.

This email is to confirm that your Motorcycle shipment from CHARLOTTE,
NORTH cAROLINA to CALIFORNIA has been processed and should arrive within
7days from today.

Shipping Destination: 838W 12th St, Long Beach, CA 90813

Shipment Tracking No: *853122331574* on www.botcargo.com

If you have any questions, please feel free to call us for immediate
assistance at our corporate office at 213-4322064 or email us at :
info@botcargo.com



Sincerely,

Export Sales Shipping Department

BOT Cargo Logistics, Inc- Export Department

Website: www.botcargo.com
Email: info@botcargo.com

--0000000000002bb5e805714bf6ca
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hello ***,=C2=A0</div><div>Just received email from t=
he shipping company containing the tracking and I deem it wiser to forward =
to you as well as you complained not receiving the first sent by them!!</di=
v><div><br></div><div>Please confirm the tracking number and process with p=
ayment...</div><div><br></div><div>Cheer</div><div><br></div><br><div class=
=3D"gmail_quote">---------- Forwarded message ----------<br>From: <b class=
=3D"gmail_sendername">BOT CARGO</b> <span dir=3D"ltr">&lt;<a href=3D"mailto=
:info@botcargo.com">info@botcargo.com</a>&gt;</span><br>Date: Wed, Jul 18, =
2018 at 8:49 PM<br>Subject: Your Shipment is on its way!<br>To: <a href=3D"=
mailto:******@gmail.com">******@gmail.com</a><br>Cc: <a h=
ref=3D"mailto:rhkm323@gmail.com">rhkm323@gmail.com</a><br><br><br><div styl=
e=3D"font-size:10pt;font-family:Verdana,Geneva,sans-serif">
<div class=3D"m_1218130940310319126pre" style=3D"margin:0;padding:0;font-fa=
mily:monospace">=C2=A0</div>
<div class=3D"m_1218130940310319126pre" style=3D"margin:0;padding:0;font-fa=
mily:monospace">
<div class=3D"m_1218130940310319126pre" style=3D"margin:0;padding:0;font-fa=
mily:monospace"><span>Dear <strong>******</strong>,</span><br><br><=
span>Your Awesome Motorcycle has Shipped! California =E2=80=93 Here we come=
! Your shipment began 07/18/2018. Thank you for patronizing BOT Cargo Logis=
tics.</span><br><br><span>This email is to confirm that your Motorcycle shi=
pment from CHARLOTTE, NORTH cAROLINA to CALIFORNIA has been processed and s=
hould arrive within 7days from today.</span><br><br><span>Shipping Destinat=
ion: 838W 12th St, Long Beach, CA 90813</span><br><br><span>Shipment Tracki=
ng No: <strong>853122331574</strong> on <a href=3D"http://www.botcargo.com"=
 target=3D"_blank">www.botcargo.com</a></span><br><br><span>If you have any=
 questions, please feel free to call us for immediate assistance at our cor=
porate office at 213-4322064 or email us at : <a href=3D"mailto:info@botcar=
go.com" target=3D"_blank">info@botcargo.com</a></span></div>
<div class=3D"m_1218130940310319126pre" style=3D"margin:0;padding:0;font-fa=
mily:monospace">=C2=A0</div>
<div class=3D"m_1218130940310319126pre" style=3D"margin:0;padding:0;font-fa=
mily:monospace"><br><br><span>Sincerely,</span><br><br><span>Export Sales S=
hipping Department</span><br><br><span>BOT Cargo Logistics, Inc- Export Dep=
artment</span><br><br><span>Website: <a href=3D"http://www.botcargo.com" ta=
rget=3D"_blank">www.botcargo.com</a></span><br><span>Email: <a href=3D"mail=
to:info@botcargo.com" target=3D"_blank">info@botcargo.com</a></span></div>
</div>
</div>
</div><br></div>

--0000000000002bb5e805714bf6ca--

Code: Select all

Delivered-To: ******@gmail.com
Received: by 2002:a2e:1505:0:0:0:0:0 with SMTP id s5-v6csp2656681ljd;
        Sat, 2 Jun 2018 23:08:40 -0700 (PDT)
X-Received: by 2002:a65:4b49:: with SMTP id k9-v6mr13337517pgt.369.1528006120762;
        Sat, 02 Jun 2018 23:08:40 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1528006120; cv=none;
        d=google.com; s=arc-20160816;
        b=AfRWsGXpP3hwhGf20vlmLNCRPOOYoG36SFODsPepaDWfEjR/hVNKQkGFLG4+CpX6la
         dHbTeiwkkTcw6Pj4BDLDBzA7wQlNw41X768oN3En4Ep2kVuQNOOA2XQy/p4tRJjMenmk
         NEBd3KYR6bEI6AzSADgH3CIuljZo0Wl0cl6louxwM1XYqZyKPTmP9p7mo5J/dPT5IvRV
         LFZiI/ucJq+P8SVrqReoMAWYE2DjcTFMj7gl68oH6db17J3Kt/jTM10JyKzjbUtAzQkn
         Ny2TBXuqhr4IeEvyrjOLA2vPZe5Ec8zJTIBLPXQX21L/27czYWQ8QsiyAMtKtjTyVjcZ
         OrBA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:in-reply-to:references:mime-version
         :dkim-signature:arc-authentication-results;
        bh=Df4jEdiVh+Nrib9sLKaQubxC3xmQbykWM8RMiu02vIU=;
        b=a7WMchJyR3bRIfecDNHHpFMGrFnUV2JZA+2hwjmWlR6sFz93o3ICJMcyULZRktqeqn
         UhMS184FZYKbh4DPiSJsWV4v0FblF7WQNMThXKBHZBIPl87/PzxHUv27ygKRv6jnNbIP
         rSeyNt411r6MvrGS5FyHXss06aHda5uqhFn/CuHQFksxAdud1B1DD4bVTJZIiCuz3EV8
         dxJCubthTcaZfhLBcOZI1oJ/NYa9kSWv4R6xVPknbLr5YYaCgxOCjnQp4NKEonSIjEtU
         Kn87E1F6o19/UXCwVT7pLZXFKClvomKN5a2TDhrUgPgK2gtKBBLiGad+wFrgp2H7tYx5
         Ildg==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20161025 header.b=vRnqD3RF;
       spf=pass (google.com: domain of cyclecollector8@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=cyclecollector8@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <cyclecollector8@gmail.com>
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
        by mx.google.com with SMTPS id 1-v6sor16690999plw.51.2018.06.02.23.08.40
        for <******@gmail.com>
        (Google Transport Security);
        Sat, 02 Jun 2018 23:08:40 -0700 (PDT)
Received-SPF: pass (google.com: domain of cyclecollector8@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20161025 header.b=vRnqD3RF;
       spf=pass (google.com: domain of cyclecollector8@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=cyclecollector8@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
        bh=Df4jEdiVh+Nrib9sLKaQubxC3xmQbykWM8RMiu02vIU=;
        b=vRnqD3RFg3KSMAotKLYeIFEou6v2mU9G1m+JaxzGvEufWsCfrMqtOHc/2HXqVgVjGO
         3LiOI9zwqhvEmplMXETj8QGtqk1lclTDYIjF73bUDVeDGDJ+XzWwnOM9PjKg+5tZ6gFZ
         dEtuEQb9n5gyDEqS6SGJ/bg0o8+ihz6His1DiD1css4oaMKJXutevmDPIe6r6LAAS2w1
         3VqVp0zegI5MWNjdOd8r57wsUONXp3KGiiN9CkfeuXRJLEWLtB39cvIGNaTGMfggqo0N
         syhmT1I5ElnE5uglYH9gXQemdtC+CgVedpewrGaPLOSuS7FIcGJqDrs4ytQ+aj6XhOth
         kz5w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:references:in-reply-to:from:date
         :message-id:subject:to;
        bh=Df4jEdiVh+Nrib9sLKaQubxC3xmQbykWM8RMiu02vIU=;
        b=WcsigRDze4meD9qx0coHYfisqub04yWpHx3DyCKhA73UOPFCkL2WzmQQ5EbKgg1CNT
         Q2KDWpyxn2m7sDISnFfKPTGtzx8CkZ/TEt0p+WKI3w1RFDx2lmBUwa6VloTMzzwZVxmU
         dJDE+wWZGVf68EKCuR150lDlGGgkyD9nO9Vf2M6sSA/42lTY2UYk7cVFu9nF0McCflW5
         UlmicqeuvvuIcYQyJix84kZp95eQRY1WXGZWQGCLtJgeJKWv+4pALqVLxAzO2o3vxFoj
         AMZU5aowm0rYxLvtAq+vFVDlk9y20bqHg2J0oTB2v6s9W+v9d3JHF3Vucr4FRjBdyNZv
         eHFQ==
X-Gm-Message-State: ALKqPwe9HCXuK0RzzLHQSJKoaD5IA2psoeVmlgKta2UwLWhic0YTU1tY kEz0piTwBiE5LlVTh6Dzi4FndcyTRklisa4LVGA=
X-Google-Smtp-Source: ADUXVKIxRUDcwMsO3EsPyRQ9d0kcWOlDuyOy841nUxLpiu6BUF3g4KoQiU9nusn4cjJHpWk9SJmxnADAIV9DVqt5UuE=
X-Received: by 2002:a17:902:b087:: with SMTP id p7-v6mr17089798plr.227.1528006120158; Sat, 02 Jun 2018 23:08:40 -0700 (PDT)
MIME-Version: 1.0
References: <CALGPbedvWZaRitjrQdNnLmW3ps2QXY5UZyM+cP4pV6=1F7kNaw@mail.gmail.com>
In-Reply-To: <CALGPbedvWZaRitjrQdNnLmW3ps2QXY5UZyM+cP4pV6=1F7kNaw@mail.gmail.com>
From: Cycle Collector <cyclecollector8@gmail.com>
Date: Sun, 3 Jun 2018 07:08:29 +0100
Message-ID: <CAN8bpuF1fybxjy-KKnMWC5UWzfgDhw-ueHmGA-UX=teuOnEL7Q@mail.gmail.com>
Subject: Re: hi
To: ****** <******@gmail.com>
Content-Type: multipart/alternative; boundary="00000000000001bb59056db6a643"

--00000000000001bb59056db6a643
Content-Type: text/plain; charset="UTF-8"

Who are you and what are you talking about? Do I know you?













On Sat, Jun 2, 2018 at 3:42 PM ******<*******@gmail.com>
wrote:

> wow other emails too.... lol enjoy jail
>

--00000000000001bb59056db6a643
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div>Who are you and what are you talking about? Do I know you?</div><div><=
br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><=
br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><=
br></div><div><br></div><div><br><div class=3D"gmail_quote"><div>On Sat, Ju=
n 2, 2018 at 3:42 PM ******* &lt;<a href=3D"mailto:*******@gm=
ail.com">******@gmail.com</a>&gt; wrote:<br></div><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex"><div>wow other emails too.... lol enjoy jail<br></div>
</blockquote></div></div>

--00000000000001bb59056db6a643--

User avatar
Chrispcritters
Forum Administrator
Posts: 2400
Joined: Tue Mar 02, 2010 5:41 pm
Location: 127.0.0.1 | ::1
Contact:

Re: Scammed for thousands

Post by Chrispcritters » Sat Jul 21, 2018 7:04 am

Unfortunately, Google does not include the sender's IP address in the headers.

See https://whatismyipaddress.com/get-ip #9 for two ways you might be able to get them to reveal their IP address.

By what method did you send the money?
Founder & CEO of WhatIsMyIPAddress.com.
You can follow me on Twitter and Facebook for some behind the scenes info.

P+happy+T
New Member
Posts: 1
Joined: Mon Oct 01, 2018 8:06 am

Re: Scammed for thousands

Post by P+happy+T » Mon Oct 01, 2018 8:15 am

Hello Gus, sorry to read of your problem, I have had the same misfortune, I responded to an advert for a Triumph Hurricane on a NZ website. A guy called Steve Winsted replied saying he was in Portland OR USA & would arrange shipping to UK with BOT Cargo. I paid a lot of money and never got the bike this happened over a period June to Sept '18. Have you made any progress ?

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest