Hi John,

if you look at the message header (sometimes you have to activate it in the
options) one sees something like this
----------------------------------------------------------------------------------------------------------------------------------------
MIME-Version: 1.0
Received: from web37805.mail.mud.yahoo.com by
bay0-mc5-f6.bay0.hotmail.comwith Microsoft SMTPSVC(
6.0.3790.211); Wed, 8 Feb 2006 18:36:01 -0800
Received: (qmail 91824 invoked by uid 60001); 9 Feb 2006 02:36:00 -0000
Received: from [81.181.94.66] by web37805.mail.mud.yahoo.com via HTTP; Wed,
08 Feb 2006 18:36:00 PST
X-Message-Info: JGTYoYF78jEHjJx36Oi8+Z3TmmkSEdPtfpLB7P/ybN8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
b=AAHxW5K3FYkMSM72eyAsgWjcjJTKdxHl18cQHeknIN9CR5FVRyykwAT2tvgfm0BGadtlSV4/P9k8bF89L582MKO5vJWyzB/A16qH8CbEJoPk7Sn2/PWXvFlalU0D7YOUV5BTjo2fMtMYG+KKrTLAEksJe9A4oz6cXOurUK9LN7U=
;
Return-Path: [email protected]
X-OriginalArrivalTime: 09 Feb 2006 02:36:01.0377 (UTC)
FILETIME=[90D64510:01C62D21]
----------------------------------------------------------------------------------------------------------------------------------------------
interesting bit is this *Received: from [81.181.94.66]*

One can then go to a site like http://www.webyield.net/domainquery.html

and you can then see that the ip address is in RO = Romania

  *IP Address:* 81.181.94.66
 *Hostname:* cyan.ew.ro
or
*81.181.94.66 is found in Romania *[image: Flag for Romania]


and drilling down further
**
contact:          Aurelian Alexandru
address:         EUROWEB ROMANIA SA
address:         Nouveau Center
address:         102 Lipscani, Et.3, sect.3
address:         Bucharest, 030039
phone:           +40-21-3076547
fax-no:          +40-21-3076544
this is their website
http://www.euroweb.ro/?p=index&qsearch=CAUTARE%20RAPIDA&from=&pag=1&lang=en
**
but I think that they are just a provider of the web service e.g. maybe have
an internet cafe, so Aurelian Alexandru is not the vampire idelia trader,
just the web co boss.

thanks

Rob




[email protected] <[email protected]> wrote:

>
> In a message dated 2/9/2006 11:30:08 A.M. Mountain Standard Time,
> [email protected] writes:
>
> His IP  address places him in Romania. So I suppose another point to add
> to
> our  "things to watch out for list" if the seller is living in an area so
> remote  that he recons no one else lives there, be careful. I recently
> had  a
> scammer from the Outer Hebridese islands. When I said I was a North  Sea
> Fishing inspector and was often around the islands the machine  suddenly
> moved to his grandmothers cottage in London....  etc
>
> thanks
>
> Rob
>
>
> Rob,
> How can you tell that he is in Romania?  What in the IP address tips  you
> off?  I've looked at it but can discern no clue.
> --Art
> _______________________________________________
> Phono-L mailing list
> [email protected]
>
> Phono-L Archive
> http://www.oldcrank.org/pipermail/phono-l/
>

Reply via email to