Suspicious Email from lost TRF member

[kyrolexfan]

Last week I got a message (that I seem to no longer be able to find for some reason) saying that this gentleman from Texas had interest in my Corum I have up on the FSOT forum asking me to email him my preferred payment method. He replied with the first attached email, asking if that was the correct posting. I found this weird but thought, "what the heck, there are stupid people in the world," so I began to reply to him without even clicking the link only to see that the link he posted had an alternate link below it (highlighted in second picture). Thank God I have a firewall and URL blocker because naive me copied that into chrome and it was luckily immediately blocked. I'm assuming this is some sort of phishing scam. If the mods could find the users name on here or give any reason why the message is gone for me (maybe he has already been removed), then I think that would be a good move.

Warning signs I looked right past:
1) PMing me asking me to email him instead of emailing me directly
2) The email name, if googled, results in a physician in Ohio and "Eduardor" was supposedly from Texas
3) The random .txt attachment in his email
4) The hidden link in his email

be careful out there people

[Gtecko]

Same same man... be careful.

https://www.rolexforums.com/showthread.php?t=650899