1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Attention..BST Sellers..

Discussion in 'BlackHat Lounge' started by BigBuddy, Feb 22, 2012.

  1. BigBuddy

    BigBuddy BANNED BANNED

    Joined:
    Oct 6, 2008
    Messages:
    6,421
    Likes Received:
    14,048
    Gender:
    Male
    Hi Guys,


    For the past 2 days, Did you received any bulk payments?

    I received bulk orders from Different paypal ids, where all the payments are kept under review by PP.

    And also, I received several request asking where to send the details. But mail content is same for all the mail ids. same font style etc etc.

    Is there any way to check the IP's of these mail ids?

    Let me know, if anybody received these types of payments and anything under review..

    Thanks,
    BB.
     
    • Thanks Thanks x 2
  2. scraper1

    scraper1 Regular Member

    Joined:
    May 28, 2011
    Messages:
    214
    Likes Received:
    207
    Location:
    Kontiki
    Home Page:
    You can find the IP by viewing the mail's full headers: http://aruljohn.com/info/howtofindipaddress/
    Hopefully X-Originating-IP should yield their IP...if they didn't used a SMTP relay or a compromised machine with a PHP mailer on it.
     
    • Thanks Thanks x 2
  3. wannabie

    wannabie Elite Member

    Joined:
    Mar 11, 2009
    Messages:
    3,807
    Likes Received:
    2,959
    Occupation:
    Seo and Marketing Suprisingly
    Location:
    Your bedroom window
    Home Page:
    Had some large numbers from same people but not had them flagged or anything

    However, I have seen an increase in people try there luck on getting 'Reviews' or discounts because they work for 'massive Seo company's
     
    • Thanks Thanks x 2
  4. marusia

    marusia Senior Member

    Joined:
    Oct 25, 2010
    Messages:
    1,122
    Likes Received:
    2,322
    Also, if you are using Yahoo email, click on the arrow of the wheel. Choose "View full header" and up on the top it will give you the designated ip. I'm not sure what it's like in all email accounts, but that's what I do to look for fishy stuff.

    [​IMG]
     
    • Thanks Thanks x 1
  5. GfxDude

    GfxDude Registered Member

    Joined:
    Jan 15, 2012
    Messages:
    67
    Likes Received:
    98
    Location:
    ლ(ಠ益ಠლ)
    Ips shud be in message header
    Outlook - Right click the message while it's in the inbox and choose Message Options. A window will open with the headers in the bottom of the window.

    Windows Live - Right click the correspondence while it's in the inbox, choose Properties, then click the Details tab.

    GMail - Open the correspondence. In the upper right corner of the email you'll see the word Reply with a little down arrow to the right. Click the down arrow and choose Show Original.

    Hotmail - Right click the memo and choose View Message Source.

    Yahoo! - Right click the note and choose View Full Headers.

    AOL - Click Action and then View Message Source.
     
    • Thanks Thanks x 2
  6. BigBuddy

    BigBuddy BANNED BANNED

    Joined:
    Oct 6, 2008
    Messages:
    6,421
    Likes Received:
    14,048
    Gender:
    Male
    These are the 4 mails...

    Delivered-To: [email protected]
    Received: by 10.142.178.20 with SMTP id a20csp53959wff;
    Tue, 21 Feb 2012 21:45:28 -0800 (PST)
    Received: by 10.42.157.133 with SMTP id d5mr24496631icx.46.1329889528539;
    Tue, 21 Feb 2012 21:45:28 -0800 (PST)
    Return-Path: <[email protected]>
    Received: from nm22-vm1.bullet.mail.ne1.yahoo.com (nm22-vm1.bullet.mail.ne1.yahoo.com. [98.138.90.252])




    Delivered-To: [email protected]
    Received: by 10.142.178.20 with SMTP id a20csp53631wff;
    Tue, 21 Feb 2012 21:20:24 -0800 (PST)
    Received: by 10.42.28.138 with SMTP id n10mr11687202icc.48.1329888022736;
    Tue, 21 Feb 2012 21:20:22 -0800 (PST)
    Return-Path: <[email protected]>
    Received: from nm8-vm4.bullet.mail.ne1.yahoo.com (nm8-vm4.bullet.mail.ne1.yahoo.com. [98.138.91.168])




    Delivered-To: [email protected]
    Received: by 10.142.178.20 with SMTP id a20csp50879wff;
    Tue, 21 Feb 2012 18:08:05 -0800 (PST)
    Received: by 10.236.197.100 with SMTP id s64mr30072591yhn.108.1329876484088;
    Tue, 21 Feb 2012 18:08:04 -0800 (PST)
    Return-Path: <[email protected]>
    Received: from nm5-vm0.bullet.mail.bf1.yahoo.com (nm5-vm0.bullet.mail.bf1.yahoo.com. [98.139.213.150])




    Delivered-To: [email protected]
    Received: by 10.142.178.20 with SMTP id a20csp34079wff;
    Tue, 21 Feb 2012 04:18:22 -0800 (PST)
    Received: by 10.42.136.69 with SMTP id s5mr21139238ict.20.1329826701727;
    Tue, 21 Feb 2012 04:18:21 -0800 (PST)
    Return-Path: <[email protected]>
    Received: from nm33-vm4.bullet.mail.ne1.yahoo.com (nm33-vm4.bullet.mail.ne1.yahoo.com. [98.138.229.68])



    all the above are 4 different orders and from 4 diff mail ids...
     
  7. thetrustedzone

    thetrustedzone Jr. VIP Jr. VIP Premium Member

    Joined:
    Jun 15, 2010
    Messages:
    2,340
    Likes Received:
    1,896
    Home Page:
    yes you can trace IPs from emails by easy way check here http://www.ip-adress.com/trace_email/ , but hope the sender don't use proxy .


    Edit : BB your rep was 998 now after my +3rep congrats for 1000+ ;)
     
    • Thanks Thanks x 1
    Last edited: Feb 22, 2012
  8. BigBuddy

    BigBuddy BANNED BANNED

    Joined:
    Oct 6, 2008
    Messages:
    6,421
    Likes Received:
    14,048
    Gender:
    Male
    Thankyou guys, seems to be all are same person. may be using some hacked PP accounts..
     
  9. howard_hughes

    howard_hughes Elite Member

    Joined:
    Jul 23, 2009
    Messages:
    5,059
    Likes Received:
    3,695
    Occupation:
    Just Another Digital Marketer!
    Location:
    "Insta Rank"
    Home Page:
    I got a big client who produces customized stuff and sends to customers.. some of their payments get scrutinized buy paypal and paypal contacts them saying that it might be a fraud order..

    so the best thing is to contact paypal, clear the doubts and only then deliver the product/service.

    Hope it helps:)
     
  10. HostStage

    HostStage Jr. VIP Jr. VIP

    Joined:
    May 20, 2010
    Messages:
    1,831
    Likes Received:
    1,755
    Occupation:
    BHW - CEO of Webhosting Company
    Location:
    BWH from France
    Home Page:
    It happened to me one week ago for our hosting services i promote in my signature.

    One morning we received 2 orders with 1 year upfront for one of the packages we sell


    It was too weird to be true. The worse of it is that the scammer even contactus asking for some tweaking for his product which has been delivered automatically.

    Of the $800 involved, we lost $7 for an automatic domain transfer which anyway belong to me now ;).
     
  11. johndefoe

    johndefoe Jr. VIP Jr. VIP

    Joined:
    Sep 27, 2009
    Messages:
    926
    Likes Received:
    91
    Occupation:
    Digital Marketer
    Home Page:
    I had the same experience a month ago - multiple orders of same product with the same footprint in post order email communication. I decided to request a photo ID from all the buyers to continue with order processing (as I suspected it was the same person actually). This is where the communication stopped. After a day I reported it to paypal, these orders got under review soon and eventually I refunded all the money. Probably stolen paypal accounts or something like that.
     
  12. wannabie

    wannabie Elite Member

    Joined:
    Mar 11, 2009
    Messages:
    3,807
    Likes Received:
    2,959
    Occupation:
    Seo and Marketing Suprisingly
    Location:
    Your bedroom window
    Home Page:
    BB if you use skype then add me, I think I have seen that email on our only flagged up order about month or two ago

    I 'might' be able to trace the details and we can compare if need be
     
  13. dheer

    dheer Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 24, 2009
    Messages:
    2,471
    Likes Received:
    1,034
    Home Page:
    I'm bumping this thread cz I'm getting the same and I got scammed out of 1K in past few weeks. I'm still continuing to get payments from these guys.

    BE AWARE ALL OF THE BST SELLERS. IF SOMEONE TRIES TO PAY YOU FROM AMEX OR VISA CARD MAKE SURE TO THOROUGHLY CHECK THE ORDER.