Anyone elase get a PM from larrygillespie200?

[Beauregard]

larrygillespie200 private messages me saying he'd like to buy a watch from me and should he paypal or send a check- when I replied to his PM his mailbox was full.... and he's been a member for one whole day.

[Halothane]

Yes, I received the same message for 2 of my items for sale. No response to my PM's or email - seems shady.

[antoflo]

Yes I received a similar message from this member.
When I read the word "check" I just laughed

[Beauregard]

I just got the exact eamil from him twice.... I smell a rat.

Hi

Thanks for your response.
I send multiple inquiries on TRF.
Is this ad yours? https://www.rolexforums.com/forsale/2856h74

Here is my complete shipping details:
45 winthrop St
Taunton Ma 02780

Funds is ready for payment

[DrWapenshaw]

Originally Posted by Beauregard

I just got the exact eamil from him twice.... I smell a rat.

Oh crap. Yep he sent me a similar email.

[MonBK]

Originally Posted by Beauregard

I just got the exact eamil from him twice.... I smell a rat.

Did the link go to your ad?

[sleddog]

The user has been removed...

[///armin]

Guys, do not click the link on these types of emails! These are either phishing routing you to a different forum to steal your logins or could be ransomware!

Carefully as you move your mouse cursor to the link, you will see that the actual link on the bottom of your screen is pointing to a different domain than what it actually says. I also got a recent PM from larrygillespie200 and could not respond, in the email, he asked me to verify the post but when I moved my cursor, I saw that it was pointing to http://forumrolezx.*******..... this is not the domain on the forum.

[email protected]
Larry Alldayluva <[email protected]>

It would be good for admins to block the IP he is coming from.

On the email that I got, looks like the email came from the below IP:

Looks like his IP is: 204.29.186.68

X-Originating-IP: [204.29.186.68]
Authentication-Results: mta1399.mail.gq1.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=mx.aol.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO omr-a017e.mx.aol.com) (204.29.186.68)
by mta1399.mail.gq1.yahoo.com with SMTPS; Tue, 09 May 2017 19:50:48 +0000
Received: from mtaomg-maa02.mx.aol.com (mtaomg-maa02.mx.aol.com [172.26.222.144])
by omr-a017e.mx.aol.com (Outbound Mail Relay) with ESMTP id 83BC33800059
for <[email protected]>; Tue, 9 May 2017 15:50:47 -0400 (EDT)
Received: from core-lex15a.mail.aol.com (core-lex15.mail.aol.com [10.76.17.132])

[X JBM X]

I got one too. Something is definitely not right.

Said funds were ready to go. Told me he was in NJ and then sent me a shipping address in Taunton, MA.

45 Winthrop St
Taunton, MA

Which does not look like it's lived in by someone named Larry Alldayluva

When googled, Larry Alldayluva has zero information. I smell bullshit. Not to mention that name

[Beauregard]

Originally Posted by MonBK

Did the link go to your ad?

It went to a 404 page.

And thanks ///armin for your diligent research.