Yet another Craigslist scam

After replying to what I thought was a legit inquiry for buying an item I have on Craigslist, I got this (full header follows):


Delivered-To: *********@isp.com
Received: by 10.231.14.201 with SMTP id h9cs129078iba;
Tue, 9 Aug 2011 08:20:47 -0700 (PDT)
Received: by 10.91.177.7 with SMTP id e7mr6103792agp.74.1312903246080;
Tue, 09 Aug 2011 08:20:46 -0700 (PDT)
Return-Path: <[email protected]>
Received: from psmtp.com (exprod6mx242.postini.com [64.18.1.142])
by mx.google.com with SMTP id t20si81516wfh.5.2011.08.09.08.20.45
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 09 Aug 2011 08:20:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 64.18.1.142 as permitted sender) client-ip=64.18.1.142;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 64.18.1.142 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: from mail-gx0-f173.google.com ([209.85.161.173]) (using TLSv1) by exprod6mx242.postini.com ([64.18.5.10]) with SMTP;
Tue, 09 Aug 2011 08:20:45 PDT
Received: by gxk26 with SMTP id 26so75270gxk.32
for <************@isp.com>; Tue, 09 Aug 2011 08:20:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=date:from:to:message-id:subject:mime-version:content-type
:content-transfer-encoding:content-disposition:precedence
:x-autoreply;
bh=cWvFweWTLzpyYGFUTIPUNJcM2z8OsWxVoddb+vWc2Eo=;
b=pJJtS0uf1EQh73VHgVU0cQNngBb+eiLFPgBibkm3K1wUxKpfPCoL04k1W48KBLnxQw
tuHC60+skgLJKoiUs7KX+3QcLLW50XFqU2zOeHLU5b+pR0kNf/73LMmiRSDP1V84CCW2
/Dn8Dl5It5CPqLxmdkAnOrkoPvcIAg0ntZW9w=
Received: by 10.42.28.72 with SMTP id m8mr7408257icc.242.1312903243893;
Tue, 09 Aug 2011 08:20:43 -0700 (PDT)
Date: Tue, 9 Aug 2011 08:20:43 -0700
From: Craigslist <[email protected]>
To: *************@isp.com
Message-ID: <CAPrm-bJxud2Dn6hL7D-d+E=wL63YbD2NL-gWJ11PHtxrESD5JA@mail.gmail.com>
Subject: For security reasons and recently updates your account needs to be re-confirmed Re: Troy-Bilt Super Tomahawk
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Precedence: bulk
X-Autoreply: yes
X-pstn-levels: (S: 0.02999/97.17139 CV:99.9000 FC:95.5390 LC:95.5390 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )

Please click on the following link:

http://tampa.craigslist.org/hdo/rvs/2475703572.html

******************************************************************

The link takes you to a craigslist listing (in a completely different state than I live in), which tells you that your account is "On Hold" and to log in to Craigslist by clicking a button...this button takes you here:

http://216.68.73.239:9090/craigslit.org/verify/v.php?check=account_verifyUID348342773hyh33SESSION_NAME_47yrhu34r8h9jieo23r2829hoefw289frh2fohfh3oer38ru29rh92hrh209rh92rh94h294h39rh293rh29rh923ht4gty4rgtyrbv%2084c34c8rr3c834xn834nxm4cnrrv834b

--which is a bogus Craigslist site (notice how the URL has a misspelled "craigslit" directory!!)

I have contacted Craigslist, but they have not taken down the bogus "Account" listing which is under Tampa, Florida RV's for sale. The whole listing is actually a clickable image, not text!

Hope this helps.
Shamanator