Probably victim of a scam. Please help me

Hi all.
I probably have been a victim of a scam.
Basically i accessed a website: http://ws-max.miiduu.com/mobile-phones
Check for the prices and I though it was a good deal. Before, I checked legibility of the company. It has a number. Check this website to see the company regs.: http://levelbusiness.com/doc/company/uk/06477196
I got in contact with a person called:
Josef Wagner
WS MAX LTD
Email: [email protected]
http://ws-max.miiduu.com
Sales Rep

We exchange several emails about prices, legibility and ways to pay. He was careful about it. He said it is a wholesale company which sends more than 10 units only to retailers, but he said who could do it for me. Check his email:

From: Josef Wagner <[email protected]>
To: """""""""""""""
Subject: =?iso-2022-jp?B?UkU6IE5ldyBNZQ==?=
=?iso-2022-jp?B?c3NhZ2UgZnJvbQ==?=
=?iso-2022-jp?B?IHN0b3JlGyRCIScbKEJbVy4=?=
=?iso-2022-jp?B?UyBNQVggU1RPUg==?= =?iso-2022-jp?B?RV0gLSBwcmljZQ==?=
Date: Wed, 23 May 2012 12:20:41 +0000
Importance: Normal
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 23 May 2012 12:20:42.0369 (UTC) FILETIME=[78C51710:01CD38DE]

--_4c9b750d-30c3-4e25-8feb-184d3aaceae5_
Content-Type: text/plain; charset="iso-2022-jp"
Content-Transfer-Encoding: 7bit


Thanks for the mail,
Well i will like you to know that we are a wholesaling companyAnd our prices have to be different from other retailers out there.By right we are not expected to sell nothing less than 10Units.But due to our on going annual promotional sales, which allowsus to sell in smaller quantities to small units buyer, for the same prices we sell to retailers.
Please note that all our products are in good condition, brand new and original.
So do let me know what you would like to buy from us and how many.
ThanksBest Regards.....; WS MAX LTDEmail: wsmax@wss-id.orghttp://ws-max.miiduu.comSales RepJosef

ok... I did agree in buying 2 iphone. I had the option to pay b ywestern union. Stupid of me I did transfer the money to:
Alan Draper
69 Great Hampton street, Birmingham, B18 6EW (familiar??)

Money arrived this monday and I had a message from Josef saying:

From: Josef Wagner <[email protected]>
To: """"""""""
Subject: =?iso-2022-jp?B?UkU6IE5ldyBNZQ==?=
=?iso-2022-jp?B?c3NhZ2UgZnJvbQ==?=
=?iso-2022-jp?B?IHN0b3JlGyRCIScbKEJbVy4=?=
=?iso-2022-jp?B?UyBNQVggU1RPUg==?= =?iso-2022-jp?B?RV0gLSBwcmljZQ==?=
Date: Sun, 27 May 2012 06:55:30 +0000
Importance: Normal

X-OriginalArrivalTime: 27 May 2012 06:55:31.0574 (UTC) FILETIME=[B5150960:01CD3BD5]

--_7695bbd2-1519-4b74-b7b2-1bd92c2823af_
Content-Type: text/plain; charset="iso-2022-jp"
Content-Transfer-Encoding: 7bit


The payment information for your order has been received.Shipment for your order will take place first thing on Monday morning.Best Regards.....; WS MAX LTDEmail: wsmax@wss-id.orghttp://ws-max.miiduu.comSales RepJosef

Right, suddenly another email comes from him:

From: Josef Wagner <[email protected]>
To: """""""""""""""
Subject: =?iso-2022-jp?B?UkU6IE5ldyBNZQ==?=
=?iso-2022-jp?B?c3NhZ2UgZnJvbQ==?=
=?iso-2022-jp?B?IHN0b3JlGyRCIScbKEJbVy4=?=
=?iso-2022-jp?B?UyBNQVggU1RPUg==?= =?iso-2022-jp?B?RV0gLSBwcmljZQ==?=
Date: Mon, 28 May 2012 14:00:34 +0000
Importance: Normal
X-OriginalArrivalTime: 28 May 2012 14:00:35.0291 (UTC) FILETIME=[40E52AB0:01CD3CDA]

--_ed2b0eb2-8936-4746-9ccd-aeac74e31819_
Content-Type: text/plain; charset="iso-2022-jp"
Content-Transfer-Encoding: 7bit


Dear Customer.
I am very sorry in particular about the situation of things and the delay in respond, there has been a Board of Director meeting going on since the last 2days that was the reason why i have been unable to get in-touch with you on time becaus am just sales rep in the company.
Sir, due to the winter period and in order to increase sales the Board of Director has set the minimum order to be 4units and 1unit FOR FREE + FREE Shipping, becuse our promotional sales in going to an end.
Sir, as a result of the new law implement you are expected to increase your order by 3units making the total of 4units and 1unit will be given FOR FREE.
And you are also given a reasonable discount.
So as a result of this i added to your order.Your total order you will receive is stated below.
4Units Of Apple iPhone 4S 64GB = $350 X 5 = $1400
1Unit Of Apple iPhone 4S 64GB
$1400 - $700 = $700.00USD
Sir, you are expected to balance $650 (discount price ) as soon as possible so that the shipping can take place immediately Best Regards.....; WS MAX LTDEmail: wsmax@wss-id.orghttp://ws-max.miiduu.comSales RepJosef

I GOT STUNNED ABOUT THIS. ASKING FOR MORE MONEY.
I sent other email saying for him to sort it out this problem and send me the product or the money back. and he sends another email:

Importance: Normal
X-OriginalArrivalTime: 28 May 2012 17:31:13.0650 (UTC) FILETIME=[ADF1B520:01CD3CF7]

--_81d637bd-a4b0-401a-9650-c016a7947614_
Content-Type: text/plain; charset="iso-2022-jp"
Content-Transfer-Encoding: 7bit


I understand you Mr Tiago but that's the new company policy do complySo we can finalize the shipment for the delivery of your order.
Thanks
Best Regards.....; WS MAX LTDEmail: wsmax@wss-id.orghttp://ws-max.miiduu.comSales RepJosef

Which means, he wants more money to MAYBE send my products. He does not want to say his ph number, he does not want to say who is Alan Draper and now he is not replying my emails. I have his little details copied from internet:

IP address: 65.55.116.77
Redmond, washngton
164th Ave NE (this is what I got with the static IP address)

obs.: I have an invoice paper from the 2 iphones if someone needs to see it.



Sorry about the long message, but I hope i can get some answers.
Thanks!

Hello ursinho,

I'm sorry to say yes you were scammed. Do not send anymore money. The tactic is common for scammers to steal more money. The money you did send is as good as gone since it was sent through Western Union it is completely untraceable.

Hard lesson to learn but only buy from a reputable company. Prices too good to be true always are and never pay for items through Western Union real businesses do not use Western Union to conduct business.

Justin

The address in Washington doesn't tell us much; it belongs to Hotmail. Could you post the complete headers, including Received: and X-Originating-IP:?

The listing in LevelBusiness does not state a website; it states an address in Great Britain. The registration for the website miiduu.com lists an address in Wilmington, Delaware, where the server is also located, and a registrant with a Chinese name. The headers indicate that the person speaks Japanese. miiduu.com's maiserver is Google, not Hotmail. Although the domain has two more years to live, it looks like a fake domain to me. What think you, Justin? Can it be killed?

wss-id.org is owned by Microsoft (which explains the Redmond address) and the scammer is just using it as a mail server.

It's a pretty long registration for a fake but the website looks fake to me defaults left on the contact page ("Your company number here") no real company is going to do that. Plus the insanely low prices. However it looks like this scammer is just using it for the scam since he is not using a domain names email address from the fake site. It may be his site or just another scammers site.

ok. I feel bad and good at the same time.
Here it goes the original codes:

Delivered-To: """"""""""""""""""""""""""""""
Received: by 10.68.2.68 with SMTP id 4csp310255pbs;
Wed, 23 May 2012 05:21:04 -0700 (PDT)
Received: by 10.236.116.66 with SMTP id f42mr4452679yhh.70.1337775663719;
Wed, 23 May 2012 05:21:03 -0700 (PDT)
Return-Path: <[email protected]>
Received: from blu0-omc3-s2.blu0.hotmail.com (blu0-omc3-s2.blu0.hotmail.com. [65.55.116.77])
by mx.google.com with ESMTP id q4si9733502anj.50.2012.05.23.05.21.03;
Wed, 23 May 2012 05:21:03 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.116.77 as permitted sender) client-ip=65.55.116.77;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.116.77 as permitted sender) [email protected]
Received: from BLU152-W54 ([65.55.116.73]) by blu0-omc3-s2.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 23 May 2012 05:20:42 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_4c9b750d-30c3-4e25-8feb-184d3aaceae5_"
X-Originating-IP: [41.13.1.47]
From: Josef Wagner <[email protected]>
To: <[email protected]>
Subject: =?iso-2022-jp?B?UkU6IE5ldyBNZQ==?=
=?iso-2022-jp?B?c3NhZ2UgZnJvbQ==?=
=?iso-2022-jp?B?IHN0b3JlGyRCIScbKEJbVy4=?=
=?iso-2022-jp?B?UyBNQVggU1RPUg==?= =?iso-2022-jp?B?RV0gLSBwcmljZQ==?=
Date: Wed, 23 May 2012 12:20:41 +0000
Importance: Normal
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 23 May 2012 12:20:42.0369 (UTC) FILETIME=[78C51710:01CD38DE]

--_4c9b750d-30c3-4e25-8feb-184d3aaceae5_
Content-Type: text/plain; charset="iso-2022-jp"
Content-Transfer-Encoding: 7bit

Now, should I report this as a fraud somewhere? is there a way we could do it to stop this guys??
Feel like punching them in the face.

If you guys want I can forward all my email conversations with the person.
thanks

Header Analysis Quick Report
Originating IP: 41.13.1.47
Originating ISP: Vodacom
City: Johannesburg
Country of Origin: South Africa
* For a complete report on this email header goto ipTRACKERonline

Here are the results of the header the scammer is in South Africa. You can report the crime to local police or here http://www.ic3.gov/complaint/default.aspx but don't get your hopes up much will be done. Unfortunately these scammers hide behind several layers of lies so finding out who they actually are is near impossible. What you did by posting the information here will help others avoid the scammer if they google the details and this does hurt the scammer.

Justin

Thanks for the headers! Your scammer is in South Africa. (Ninjaed by Justin)

It's a subdomain. It looks like miiduu.com is legitimate but the subdomain is fake.

Thanks guys. I feel much better.
I just did the complaint to IC3
Hope goes somewhere.
I hope I can help others against these crimes.

i think that i am been scam out of 550.00 dollars to interglob transban<[email protected]>it is a private bank in aburi ghana for peoples with a large amount of money to send to peoples from ghana.i would like to know if i am been scam by this bank.

NO legitimate bank will use a hotmail address, so we pretty well have an answer right there.

South African law enforcement has been informed.

ursinho, I too have had dealing with this fellow however I have not paid anything to him as I wanted to pay via paypal and his web site doesn't work with paypal so I got suspicious especially as he wanted to be paid via Western Union.
Anyhow if it is any help to you or to the police here is the email address he gave for me to send a paypal payment to. Hope it helps.
[email protected]

Papabbear, is Ursinho your cub? All you need now is Maman Ourse and three bowls of porridge...

The site's still up but we're working on it. Sometimes it takes a while. Could you post the email where they asked for Paypal to that address? Include headers if you can figure out how.

To switch pigs for bears in midstream, the house is huffed and puffed and blown down!

NO legitimate bank will use a hotmail address, so we pretty well have an answer right there.

well they scam me 7/3/2012 and lie to me so i want them on here as scammers i have got all of thier emails that they send me.they is mark on hotmail.com as scammers i aslo turn them in to ic3govto.