Saw an item I wanted that sells new for $180. It was described as "new in box" from a US seller with over 150 positive ratings. Price: $26. I figure "may as well give it a shot."
Just checked the PayPal payment. It went to someone with a .ru email address.
Time to turn on 2 factor authorization and change the PayPal password.