Jump to content

How bad is Craigslist SPAM and Scams?


Recommended Posts

Really bad.

 

This is my posting for my Dell Mini 9 from the other day. On a side note, if you are interested in it, I can ship to you if you are a known member of these forums. Anyway, here is the posting: http://blacksburg.craigslist.org/ele/1247180090.html

 

Notice at the bottom my last comment about who I will not deal with. I had someone try to convince me that he is real and that his friend will make the transaction via money order even though I stated cash only in my posting.

 

SO anyway, the emails I got today alone.

 

Delivered-To: xxx

Received: by 10.204.72.130 with SMTP id m2cs365762bkj;

Thu, 2 Jul 2009 10:38:02 -0700 (PDT)

Received: by 10.141.35.13 with SMTP id n13mr437825rvj.87.1246556280464;

Thu, 02 Jul 2009 10:38:00 -0700 (PDT)

Return-Path: <bounce-anon-xxx=thecomputerninja.com@craigslist.org>

Received: from mxo3p.craigslist.org (mxo3p.craigslist.org [208.82.236.168])

by mx.google.com with ESMTP id 31si4775064yxe.40.2009.07.02.10.37.59;

Thu, 02 Jul 2009 10:38:00 -0700 (PDT)

Received-SPF: pass (google.com: domain of bounce-anon-xxx=thecomputerninja.com@craigslist.org designates 208.82.236.168 as permitted sender) client-ip=208.82.236.168;

Authentication-Results: mx.google.com; spf=pass (google.com: domain of bounce-anon-xxx=thecomputerninja.com@craigslist.org designates 208.82.236.168 as permitted sender) smtp.mail=bounce-anon-xxx=thecomputerninja.com@craigslist.org; dkim=neutral (body hash did not verify) header.i=@gmail.com

Received: from mail-pz0-f120.google.com (mail-pz0-f120.google.com [209.85.222.120])

by mxi4p.craigslist.org (Postfix) with ESMTP id 8347F9E9DD

for <sale-f5dak-1247180090@craigslist.org>; Thu, 2 Jul 2009 10:37:59 -0700 (PDT)

Received: by mail-pz0-f120.google.com with SMTP id 26so215265pzk.22

for <sale-f5dak-1247180090@craigslist.org>; Thu, 02 Jul 2009 10:37:59 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=gamma;

h=domainkey-signature:mime-version:received:date:message-id:subject

:from:to:content-type:content-transfer-encoding;

bh=Fmxm91Y6+S/Rdd+jA9s/wTdtqNFwaluFjj/EIab4Trc=;

b=GYkUHAuWkW6ILPS5HjNjjjWt08nNElVhyQU0F39vO04o8GU0Uvepah+USecsNM63is

5OSmDXnqgNpKUxx18+oG0KWPucrXiVYRMLnmBOHlvKyeOji7YpXGInqz7I2WQGtR1k1q

28jy9Jby7WB91gAl+SS5jZV+ltOZvHMKhI4AY=

DomainKey-Signature: a=rsa-sha1; c=nofws;

d=gmail.com; s=gamma;

h=mime-version:date:message-id:subject:from:to:content-type

:content-transfer-encoding;

b=nK+ZCidGERVj5N/zwaOKxGot+V0koiGEPZntTccUxEO9niCIRc4mM5utiatZa0yDTk

3ONSqb8T+kR70Q+j8nUXLCpgMUyv1NLhNBmG3CoO+yJFWdsYHou7QiuzdWa8k77uigS6

wXCJByW+pe2iy88YX8Z3ipYYL41q8kMXT7suU=

MIME-Version: 1.0

Received: by 10.142.154.14 with SMTP id b14mr195852wfe.67.1246556279315; Thu,

02 Jul 2009 10:37:59 -0700 (PDT)

Date: Fri, 3 Jul 2009 01:37:59 +0800

Message-ID: <7b1765dc0907021037k1c591cf2x951221e4f30287d6@mail.gmail.com>

Subject: Re: Dell Mini 9 Netbook (Black)w/ USB DVD+RW - $300 (Christiansburg)

From: julianne snelling <juliannesnelling230@gmail.com>

To: sale-f5dak-1247180090@craigslist.org

Content-Type: text/plain; charset=ISO-8859-1

Content-Transfer-Encoding: 7bit

 

** CRAIGSLIST ADVISORY --- AVOID SCAMS BY DEALING LOCALLY

** Avoid: wiring money, cross-border deals, work-at-home

** Beware: cashier checks, money orders, escrow, shipping

** More Info: http://www.craigslist.org/about/scams.html

 

Hello, Do you need assistance with your funds situation?

 

 

------------------------------------------------------------------

this message was remailed to you via: sale-f5dak-1247180090@craigslist.org

 

Here is another:

 

Delivered-To: xxx@thecomputerninja.com

Received: by 10.204.72.130 with SMTP id m2cs365761bkj;

Thu, 2 Jul 2009 10:38:02 -0700 (PDT)

Received: by 10.141.29.14 with SMTP id g14mr392980rvj.232.1246556280465;

Thu, 02 Jul 2009 10:38:00 -0700 (PDT)

Return-Path: <bounce-anon-xxx=thecomputerninja.com@craigslist.org>

Received: from mxo3p.craigslist.org (mxo3p.craigslist.org [208.82.236.168])

by mx.google.com with ESMTP id 31si4711554yxe.108.2009.07.02.10.37.59;

Thu, 02 Jul 2009 10:38:00 -0700 (PDT)

Received-SPF: pass (google.com: domain of bounce-anon-xxx=thecomputerninja.com@craigslist.org designates 208.82.236.168 as permitted sender) client-ip=208.82.236.168;

Authentication-Results: mx.google.com; spf=pass (google.com: domain of bounce-anon-xxx=thecomputerninja.com@craigslist.org designates 208.82.236.168 as permitted sender) smtp.mail=bounce-anon-xxx=thecomputerninja.com@craigslist.org; dkim=neutral (body hash did not verify) header.i=@gmail.com

Received: from mail-pz0-f135.google.com (mail-pz0-f135.google.com [209.85.222.135])

by mxi1p.craigslist.org (Postfix) with ESMTP id 468451288B3

for <sale-f5dak-1247180090@craigslist.org>; Thu, 2 Jul 2009 10:37:59 -0700 (PDT)

Received: by mail-pz0-f135.google.com with SMTP id 41so183883pzk.27

for <sale-f5dak-1247180090@craigslist.org>; Thu, 02 Jul 2009 10:37:59 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=gamma;

h=domainkey-signature:mime-version:received:date:message-id:subject

:from:to:content-type:content-transfer-encoding;

bh=i5vRFW7snW/ppO5jf66Gg4XejnSV/WWUubRdFtkggdQ=;

b=FwIYmOQxd6ltIskK2XxQ/QKA3Ui+bAvNqde6Omg+FhtoA+pOuXkVfMvxo0W7FulSIB

M+YwsRAHpPatFxHe0dsMnl85gKEgMVMQW2sZS+bZ9hgmNTay3yoOnKnrc2K+BOH5Jvqy

+4NZqegQoUrcuZdkQ2JfGvuWZ3PPAUUWvw7dc=

DomainKey-Signature: a=rsa-sha1; c=nofws;

d=gmail.com; s=gamma;

h=mime-version:date:message-id:subject:from:to:content-type

:content-transfer-encoding;

b=jKBNJm21FOBeP0PQOaMx2zcmd+qNACeZ4pn65lFC+PEhyi0NPoQyQ/MvqLCLsM+wQn

UE8izo8eKs/x/jD36YrIkQioQBTWUMkIxUgsPidf30jQFehEpGAl9LnjyRsQneETyLTI

8Lw6LLLZ8mjYvowa8085tn/Lx3C6fmCh7KGCs=

MIME-Version: 1.0

Received: by 10.115.110.6 with SMTP id n6mr438813wam.12.1246556279056; Thu, 02

Jul 2009 10:37:59 -0700 (PDT)

Date: Fri, 3 Jul 2009 01:37:59 +0800

Message-ID: <428775080907021037v3703d2e7o2e5e9aca5b79fa3c@mail.gmail.com>

Subject: Re: All Types of Land & Commercial Property Considered (Texas)

From: letisha hudson <letishahudson781@gmail.com>

To: sale-f5dak-1247180090@craigslist.org

Content-Type: text/plain; charset=ISO-8859-1

Content-Transfer-Encoding: 7bit

 

** CRAIGSLIST ADVISORY --- AVOID SCAMS BY DEALING LOCALLY

** Avoid: wiring money, cross-border deals, work-at-home

** Beware: cashier checks, money orders, escrow, shipping

** More Info: http://www.craigslist.org/about/scams.html

 

Hii, do u need help with $?

 

 

------------------------------------------------------------------

this message was remailed to you via: sale-f5dak-1247180090@craigslist.org

 

 

One More:

 

Delivered-To: xxx@thecomputerninja.com

Received: by 10.204.72.130 with SMTP id m2cs365767bkj;

Thu, 2 Jul 2009 10:38:11 -0700 (PDT)

Received: by 10.140.172.21 with SMTP id u21mr408863rve.167.1246556289713;

Thu, 02 Jul 2009 10:38:09 -0700 (PDT)

Return-Path: <bounce-anon-xxx=thecomputerninja.com@craigslist.org>

Received: from mxo5p.craigslist.org (mxo5p.craigslist.org [208.82.236.170])

by mx.google.com with ESMTP id 31si4711928yxe.108.2009.07.02.10.38.09;

Thu, 02 Jul 2009 10:38:09 -0700 (PDT)

Received-SPF: pass (google.com: domain of bounce-anon-xxx=thecomputerninja.com@craigslist.org designates 208.82.236.170 as permitted sender) client-ip=208.82.236.170;

Authentication-Results: mx.google.com; spf=pass (google.com: domain of bounce-anon-xxx=thecomputerninja.com@craigslist.org designates 208.82.236.170 as permitted sender) smtp.mail=bounce-anon-xxx=thecomputerninja.com@craigslist.org; dkim=neutral (body hash did not verify) header.i=@gmail.com

Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.225])

by mxi3p.craigslist.org (Postfix) with ESMTP id E7C3596ACB

for <sale-f5dak-1247180090@craigslist.org>; Thu, 2 Jul 2009 10:38:01 -0700 (PDT)

Received: by rv-out-0506.google.com with SMTP id f9so748262rvb.13

for <sale-f5dak-1247180090@craigslist.org>; Thu, 02 Jul 2009 10:38:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=gamma;

h=domainkey-signature:mime-version:received:date:message-id:subject

:from:to:content-type:content-transfer-encoding;

bh=3jAbrfFIgiYg0TFYeUL/r2/16bWgyqJydQ6YIvoFgRo=;

b=V7Cr1wKScsQqwRmqO/HUZeRIk22ZPkCwWixsz8UgfCMvDOEUfBOirZqTk0Xnd4by4Q

v5J63TM596FCoPqpSAUc8+p6ujFQi2InM2KQy6z3bAU9de/G0/tS/HielNYK2rlWodV7

C/3HalaKiBoVxJ5syOyT8CwoH23BzBhQ1Nnww=

DomainKey-Signature: a=rsa-sha1; c=nofws;

d=gmail.com; s=gamma;

h=mime-version:date:message-id:subject:from:to:content-type

:content-transfer-encoding;

b=CWcuFRrs8BEj5Ht0y10ueQXzuq+w4rZfhHMouzFF1JWtV+U0V0C5l4JKQlT9LiJO9X

6DYb0Y0x5oBBG9XnWjW43qAav8R4Yh3BFUMoo4edNdrryM2EwotIuSM3huuICY4pz+wm

h05x10uiXgKMbuYk5daweeroCv0sDr6xOkKfI=

MIME-Version: 1.0

Received: by 10.140.247.11 with SMTP id u11mr478988rvh.23.1246556279068; Thu,

02 Jul 2009 10:37:59 -0700 (PDT)

Date: Fri, 3 Jul 2009 01:37:59 +0800

Message-ID: <f91761120907021037m3a017e57g861593bde78bf865@mail.gmail.com>

Subject: Re: Discounted Offices for all NONPROFITS!!

From: chanel dykes <chaneldykes590@gmail.com>

To: sale-f5dak-1247180090@craigslist.org

Content-Type: text/plain; charset=ISO-8859-1

Content-Transfer-Encoding: 7bit

 

** CRAIGSLIST ADVISORY --- AVOID SCAMS BY DEALING LOCALLY

** Avoid: wiring money, cross-border deals, work-at-home

** Beware: cashier checks, money orders, escrow, shipping

** More Info: http://www.craigslist.org/about/scams.html

 

Hello, how are you doing today? Do you need help with how to allocate

your funds and pay your bills this month?

 

 

------------------------------------------------------------------

this message was remailed to you via: sale-f5dak-1247180090@craigslist.org

 

Delivered-To: xxx

Received: by 10.204.72.130 with SMTP id m2cs333968bkj;

Wed, 1 Jul 2009 22:02:24 -0700 (PDT)

Received: by 10.211.180.19 with SMTP id h19mr6020130ebp.22.1246510944554;

Wed, 01 Jul 2009 22:02:24 -0700 (PDT)

Return-Path: <>

Received: from mail-ew0-f213.google.com (mail-ew0-f213.google.com [209.85.219.213])

by mx.google.com with ESMTP id 8si3314719ewy.109.2009.07.01.22.02.23;

Wed, 01 Jul 2009 22:02:23 -0700 (PDT)

Received-SPF: pass (google.com: best guess record for domain of mail-ew0-f213.google.com designates 209.85.219.213 as permitted sender) client-ip=209.85.219.213;

Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of mail-ew0-f213.google.com designates 209.85.219.213 as permitted sender) smtp.mail=; dkim=pass (test mode) header.i=@googlemail.com

Received: by ewy9 with SMTP id 9so1663103ewy.2

for <xxx>; Wed, 01 Jul 2009 22:02:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlemail.com; s=gamma;

h=domainkey-signature:received:message-id:date:from:to:subject

:in-reply-to:mime-version:content-type:content-transfer-encoding

:content-disposition:precedence:x-autoreply:references;

bh=bRmxo37AKGGvbzhaiLPLJAe4BQnc96V7L+RN5snYgGs=;

b=Slf7DhFRcWtjFPhxi24Malg88hmCjwqwhuTnyH8x51vwsoM1q65MkUHU4QPmqphHtv

Yk306IOgtGzl3DUtg1I43ty4bfmFqOH7kpS5QmbwD5TS+ayCN4vE3Wx8Xa19ByRdxIkb

b5fslJeYXYJTIdx+xHhS6dhjG3aB99i5CdVMo=

DomainKey-Signature: a=rsa-sha1; c=nofws;

d=googlemail.com; s=gamma;

h=message-id:date:from:to:subject:in-reply-to:mime-version

:content-type:content-transfer-encoding:content-disposition

:precedence:x-autoreply:references;

b=PfLpALT5Gn981qiS99jP37a0BdRV2XPvqF9BKP85VEYMFstUpWIN5E3OfBmt5RJ29F

2Zf6K0l6B1NEkbUThXxfaNG+VqCs2NSntKDcNskuQogjL9XwNfjfS16JMr3hW/rXSluC

nobhfO0AxrlBIaLVRiEKxeQqTu3kzxNniYS9k=

Received: by 10.216.36.79 with SMTP id v57mr2994195wea.19.1246510943074;

Wed, 01 Jul 2009 22:02:23 -0700 (PDT)

Message-ID: <a4b81e8c0907012202n2902c52bt@mail.gmail.com>

Date: Wed, 1 Jul 2009 22:02:22 -0700

From: "Danuta Beecher" <danuta.beecher@googlemail.com>

To: lee

Subject: Re: dell mini 9 netbook (black)w/ usb dvdrw

In-Reply-To: <EE7C64B5-C056-4342-AF4D-CD09E8258DF1@thecomputerninja.com>

MIME-Version: 1.0

Content-Type: text/plain; charset=WINDOWS-1252

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Precedence: bulk

X-Autoreply: yes

References: <a4b81e8c0907012101j7cc109f8lea82ea46e0ffa438@mail.gmail.com>

<EE7C64B5-C056-4342-AF4D-CD09E8258DF1@thecomputerninja.com>

 

Hi there, I was in the same situation as you and i found this contest.

If you=92re interested the contest that I won the mac on is still

running so you can check it out at http://www.giveitems.com/mac

 

Have a good one

 

elivered-To: xxx@thecomputerninja.com

Received: by 10.204.72.130 with SMTP id m2cs269893bkj;

Tue, 30 Jun 2009 19:01:54 -0700 (PDT)

Received: by 10.100.213.13 with SMTP id l13mr12251276ang.110.1246413712283;

Tue, 30 Jun 2009 19:01:52 -0700 (PDT)

Return-Path: <bounce-anon-xxx=thecomputerninja.com@craigslist.org>

Received: from mxo4p.craigslist.org (mxo4p.craigslist.org [208.82.236.169])

by mx.google.com with ESMTP id 6si1797335gxk.83.2009.06.30.19.01.51;

Tue, 30 Jun 2009 19:01:52 -0700 (PDT)

Received-SPF: pass (google.com: domain of bounce-anon-xxx=thecomputerninja.com@craigslist.org designates 208.82.236.169 as permitted sender) client-ip=208.82.236.169;

Authentication-Results: mx.google.com; spf=pass (google.com: domain of bounce-anon-xxx=thecomputerninja.com@craigslist.org designates 208.82.236.169 as permitted sender) smtp.mail=bounce-anon-xxx=thecomputerninja.com@craigslist.org; dkim=neutral (body hash did not verify) header.i=@gmail.com

Received: from mail-gx0-f206.google.com (mail-gx0-f206.google.com [209.85.217.206])

by mxi5p.craigslist.org (Postfix) with ESMTP id 4453A5B041

for <sale-f5dak-1247180090@craigslist.org>; Tue, 30 Jun 2009 19:01:49 -0700 (PDT)

Received: by mail-gx0-f206.google.com with SMTP id 2so880556gxk.1

for <sale-f5dak-1247180090@craigslist.org>; Tue, 30 Jun 2009 19:01:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=gamma;

h=domainkey-signature:mime-version:received:date:message-id:subject

:from:to:content-type:content-transfer-encoding;

bh=pGb/DASNrCm8C8WXkIabdcnxUDuJSihwk+2Ptn59Qus=;

b=VC4P6pKnGWevcffEb2L6QAsCXCDCqYePbR5oLgK7gcGbFvlMNTE9Padtx3gSyvhrI+

MsD7rAyrTrBMCDdJoQuJiZgPSwI1LhX9KGBlNNyU8tv1hImcRTb/HRWYPx0BAwLAdggG

gRX7Kb/2Slyt1vbBjJxAJitMlYl01wCon3bNc=

DomainKey-Signature: a=rsa-sha1; c=nofws;

d=gmail.com; s=gamma;

h=mime-version:date:message-id:subject:from:to:content-type

:content-transfer-encoding;

b=Q4Hc7f1dgUeYbcff7zdS5qgZlQ1jcQzosZybeFtYS5c+WFQjNusFcvm00i2Pl65as/

heqe0ywoQaZZcpTT0RQYZGRnroR5K6FcQcQW8OqAR0mR0aPUeewreT2bXcJcKIyVx6p1

aX0nHHsIz7Oy6KrkjrtjI8QAhtzIDzG1TmVas=

MIME-Version: 1.0

Received: by 10.231.32.69 with SMTP id b5mr1851606ibd.4.1246413709024; Tue, 30

Jun 2009 19:01:49 -0700 (PDT)

Date: Wed, 1 Jul 2009 10:01:49 +0800

Message-ID: <81ab5f240906301901g5d2a8c21xdc5074116ee6577f@mail.gmail.com>

Subject: Re: Dell Mini 9 Netbook (Black)w/ USB DVD+RW - $300 (Christiansburg)

From: sergio thompson <sergiothompsonwh89@gmail.com>

To: sale-f5dak-1247180090@craigslist.org

Content-Type: text/plain; charset=ISO-8859-1

Content-Transfer-Encoding: 7bit

 

** CRAIGSLIST ADVISORY --- AVOID SCAMS BY DEALING LOCALLY

** Avoid: wiring money, cross-border deals, work-at-home

** Beware: cashier checks, money orders, escrow, shipping

** More Info: http://www.craigslist.org/about/scams.html

 

Hi there, how's it going? Do you want some help finding a job online?

Let me know

 

 

------------------------------------------------------------------

this message was remailed to you via: sale-f5dak-1247180090@craigslist.org

------------------------------------------------------------------

 

 

So what is wrong with getting this SPAM? Well, for one, it is SPAM. But the thing that really gets me is that it is getting past Gmail's SPAM filters. Every single one of them get past and all of the email addresses that they are coming from are Gmail email addresses. I got all of these today except for that last one from the other day. It seems that there are SPAM bots scouring Craigslist scouring for those long email addresses that Craigslist generates for you.

 

 

So, do you want to help? Find similarities in the spam messages. What do they have in common besides coming from gmail email addresses? What would be a good way to make these Craigslist postings that would work to prevent these things? Sometimes, they ask you questions about the item and after you reply, they send the spam regarding job searching or if you are in need of money.

Link to comment
Share on other sites

anytime i sell on craiglist, i start the post in big obnoxious h1 font saying: "if your subject line does not include the solution to 4+8, it will be deleted" then continue on with the post.

 

i also create a filter that moves anything to the cl email address to a labeled archive.

Link to comment
Share on other sites

to be honest about the friend thing... I found a bike on craigslist and had to get my friend was going to pick it up because it was in richmond.. good thing I wasn't trying to buy a Dell Mini 9 from you :)

Link to comment
Share on other sites

to be honest about the friend thing... I found a bike on craigslist and had to get my friend was going to pick it up because it was in richmond.. good thing I wasn't trying to buy a Dell Mini 9 from you :)

 

I guess something like that but this guy was saying he was out of the country and needed an associate to pick it up and he would mail me a money order despite my saying no money orders. But yeah SJ, I was thinking the same thing with regards to the subject line.

Link to comment
Share on other sites

anytime i sell on craiglist, i start the post in big obnoxious h1 font saying: "if your subject line does not include the solution to 4+8, it will be deleted" then continue on with the post.

 

i also create a filter that moves anything to the cl email address to a labeled archive.

 

Does the answer have to be correct? I'm not good at the higher maths..... :P

Link to comment
Share on other sites

Maybe this is related somehow to the fact that in the last week I've suddenly started to see spam get past Gmail's filters as they are supposedly from people on my contact list. Actually they seem to be using people from the US as I've gotten "mail" from people like Kilzugud and Nicksoapdish (their real names anyways) which really weirded me out.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...