Eryk from Canada?

[memes]

Anyone else get this one yesterday -
Greetings from Canada,
Could you please advise availability and price for your property for
the whole month of September.
We are a retired couple , independent travelers, and prefer the
smaller towns and villages off the beaten track, and away from the
tourist hordes.
Our idea of a great time is long walks, good grub and wine, and
mixing with the locals.
Hoping to hear from you soon.
Cheers and All the Best!

No mention of the country they are looking at, no phone no, they are a couple asking about a place for 6 - rings all sorts of alarm bells with me but then the english is better than the average scam...I have replied asking if they really want somewhere that big..
Did anyone else get similar?

Cheers

M

[Paul Carmel]

I would roll with it, but keep the alarm bells ringing at all times........could be legit.

[Chianti]

Bet it's not

Chianti

[memes]

I'll let you know if I hear anything more - my scam antennae are on full alert..I just doubt someone would want to come to Italy for a month from Canada and stay in one place thats much bigger than they need.
Hope I'm proved wrong!
M

[Paul Carmel]

Memes, Have you run the numbers though a ip locater?

[memes]

no Paul - how do I do that? I'm all ears..

[Paul Carmel]

The following is courtesy of 419eater.com




Reading Email Headers

Here is the answer to what is probably THE most asked question when it comes to baiting, "How can I find thier IP address?".

The answer is very simple. Since most scammers use Yahoo!, finding their IP address is fairly simple. First, we will look at a typical header from an email sent to my gmail account from a scammer using Yahoo!. (email addresses have been replaced with "xxxscammer@yahoo.com or xxxbaiter@gmail.com" to prevent box killing)

X-Gmail-Received: 3aea05e30c6ec9798d6c51537eaebadfa6d600fd
Delivered-To: xxxbaiter@gmail.com
Received: by 10.64.27.17 with SMTP id a17cs505121qba;
Fri, 8 Sep 2006 12:02:49 -0700 (PDT)
Received: by 10.70.29.7 with SMTP id c7mr737346wxc;
Fri, 08 Sep 2006 12:02:48 -0700 (PDT)
Return-Path: <xxxscammer@yahoo.com>
Received: from web57215.mail.re3.yahoo.com (web57215.mail.re3.yahoo.com [216.252.111.231])
by mx.gmail.com with SMTP id h40si3005666wxd.2006.09.08.12.02.47;
Fri, 08 Sep 2006 12:02:48 -0700 (PDT)
Received-SPF: pass (gmail.com: domain of xxxscammer@yahoo.com designates 216.252.111.231 as permitted sender)
DomainKey-Status: good (test mode)
Received: (qmail 92842 invoked by uid 60001); 8 Sep 2006 19:02:47 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-
Version:Content-Type:Content-Transfer-Encoding;
b=FW475h+KQ0l5uOS0HzHoOAYdM5Z3
+htGaFFzrlKhR6BI0ezNCSaB/JfK8fGO
jlwwXSu5gm/kH4R3IpBPImhJLFUqoIfQeA
UdAIQq7nDjsipcFcdw/PdSocGWbe2
DLeSDLiva0hm+KVakxSeSITHHENjF06k4IsndnXsrsqICyXg= ;
Message-ID: <20060908190247.92840.qmail@web57215.mail.re3.yahoo.com>
Received: from [209.159.166.122] by web57215.mail.re3.yahoo.com via HTTP; Fri, 08 Sep 2006 12:02:47 PDT
Date: Fri, 8 Sep 2006 12:02:47 -0700 (PDT)
From: XXX Scammer <xxxscammer@yahoo.com>
Subject: MY IP ADDRESS IS NAKED AS A NEWBORN BABY!
To: XXX Baiter <xxxbaiter@gmail.com>
In-Reply-To: <1a7adfd70609070650y227ac44al796b19033acbcc30@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1932846235-1157742167=:91815"
Content-Transfer-Encoding: 8bit

--0-1932846235-1157742167=:91815
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit


When reading a header to find the IP address, start from the bottom and work your way up. The sender's IP address is usually the first one from the bottom, sometimes the second. In the case of this header, the sender's IP address is 209.159.166.122.

Now that we have the scammer's IP address, let's see where he is. Copy that IP address and go to http://www.dnsstuff.com . Choose an option that fits your IP (or domain name) tracing needs, paste it in the field and click the button. This will usually show you who OWNS the IP address block. If you are looking for a geographic location, try http://www.ip2location.com/free.asp ...

No IP address lookup is 100% accurate. In the case of this particular scammer, the IP address is located in Nigeria and his ISP is "Direct On PC". However, sometimes this can be deceiving. Alot of scammers use satellite internet providers, which will make them appear to be in Australia, Isreal, Utah and several other locations. Please remember, scammers can come from any country or any walk of life and are just as able to trace IP addresses.

[Alan Knighting]

Paul,

And, if any of the addresses look anything like xxx @ mixmaster.xxx you know for sure you are dealing with a scammer of the worst sort because they are anonymous and are said to be virtually untraceable.

Alan

[memes]

How do I get the header info - I just have an email address - which ends .ca - I presume thats Canada..
Soz if I'm being super-thick..

[paolo]

This reads like a legitimate enquiry to me. I get people staying in bigger houses as a couple so I wouldn't worry about that. A lot of couples also use two bedrooms rather than one, and they may also plan to be visited by a friend or two during their stay.

[Paul Carmel]

Memes, what do you use? Yahoo, gmail, Hotmail etc?

[Alan Knighting]

This reads like a legitimate enquiry to me.

Me too!

I find the tactics of scammers to be so obvious that I’m never excited by them and I find it very difficult to understand how anyone can ever fall for them but it would seem that some people do. Why would that be?

Alan

[Hells Bells]

Reads to be fairly legit to me.

[memes]

Thanks all - maybe I'm just getting overly paranoid!
Paul, I use yahoo..(just like the scammers do tee)

M

[Paul Carmel]

Ok, open the email and you should see a drop down on the right hand side called Compact Header, hit that and you should see the Full Header command open that, and all his info is within, inc the IP address.

Alan, I had a look, and can you believe that address is taken

Paolo, I agree, but keep your fingers tightly crossed behind your back Memes.

Chianti, How much?