Another Scam - Nearly caught out

[benc]

As some of you know, I am looking or a SIB... and I found one on gumtree which I was quite interested in:

Honda Honwave TS38 inflatable with Honda BF20SHU Engine Boats, Kayaks & Jet Skis for Sale central london London


All looks good, seemed a bit cheap, but thought it might just be a bargain, so I contacted them... and offered £1,400, they said £1,450.. I agreed... I asked when I could go see/collect.. they said they wanted 50% of the money up front because they've had two time wasters yesterday who were using stolen paypal accounts... I said I understand, but didn't feel confident in transferring £700 without even seeing the boat first. I suggested I would go to a cash machine, and use 3 of my bank accounts to draw £500 from each to pay for it so that he can see the cash is not fake notes.. they said they still want money up front, and to use moneygram to send..

Anyway, it went on a bit like this... and it all seemed a bit fishy. I noticed he was using a microsoft email address (live.com) so I use the option in my email client to show all of the mail headers, and found the relevant one I was looking for:

X-Originating-IP: [178.138.35.204]

Microsoft automatically add this head which contains the IP of the internet connection the person was using to send the email.... so I used some of the tools on the internet to look the IP up, including IP Address Lookup (IPv4 & IPv6). The IP is in romania - the guy has told me he lives in london and owns a construction company... etc etc

Mail transcript is here (read bottom to top)
http://www.bencummins.com/honda/

[Burtox]

Blimey well done, checking the IP address is a pretty good idea

The are so many robbing B*sterd out there, if you are at all suspicious do not carry on. I never hand any money over until I have the goods in my hand.

Cheers,

Paul

[biffer]

you need to send thhat one to the old bill, ben, you've done there work for them

[benc]

Ooo, looks like gumtree are on the ball, I reported it, and they've removed it already

[benc]

I think this is it too
Honda Honwave TS38 inflatable with Honda BF20SHU Engine | eBay UK

[boristhebold]

Checking ip address very good idea, I do IT Security for a living so I am well impressed.

[Courageous]

The old "Bill Ben" Biffer? Sounds like the makings of a good movie there miss Poppins!

[benc]

Originally Posted by Courageous

The old "Bill Ben" Biffer? Sounds like the makings of a good movie there miss Poppins!

[biffer]

A thought. Is there a program that could check where ip addresses are registered

Sent from a remote device

[benc]

Originally Posted by biffer

A thought. Is there a program that could check where ip addresses are registered

Sent from a remote device

Lots of them, I use the websites though as it's easier, just google "ip lookup"