Email from someone trying to scam me I bet, Can you help find out where its coming from?

Question

Im trying to determine if this email is from a 419er scam artist trying to rip me offf. He sounds legit but I am very very wary. Here is an exact copy of the header and I want to try to find out the location this email is coming from. Any help is appreciated

From - Sat Jun 16 06:58:25 2007
X-Account-Key: account3
X-UIDL: GmailId11334298961902f2
X-Mozilla-Status: 0003
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: [e-mail]
Received: by 10.35.35.6 with SMTP id n6cs208842pyj;
Sat, 16 Jun 2007 03:52:24 -0700 (PDT)
Received: by 10.114.176.1 with SMTP id y1mr4050585wae.1181991144148;
Sat, 16 Jun 2007 03:52:24 -0700 (PDT)
Return-Path:
Received: from mxo8s.craigslist.org (mxo8s.craigslist.org [66.150.243.15])
by mx.google.com with ESMTP id n37si9289446wag.2007.06.16.03.52.23;
Sat, 16 Jun 2007 03:52:24 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounce-anon-dcshoeco1=[e-mail] designates 66.150.243.15 as permitted sender)
DomainKey-Status: bad (test mode)
Received: from hu-out-0506.google.com (hu-out-0506.google.com [72.14.214.231])
by mxi5s.craigslist.org (Postfix) with ESMTP id ADD1122E83
for ; Sat, 16 Jun 2007 03:52:22 -0700 (PDT)
Received: by hu-out-0506.google.com with SMTP id 34so453978hui
for ; Sat, 16 Jun 2007 03:52:21 -0700 (PDT)
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed;
d=gmail.com; s=beta;
h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
b=dz5SgGUSjdn8rB4uDuUDP3Ma6YSyqELVEFBejphWS62J/xEJISCgKdCFjZNrIP4b4bm7vNm36I1uzdDwnfRWirnTZOq572w35BvDt8C4Jgps7timpKKz+//JbgQtvsoPktgs5mxaZXaQhLyrduCxc3mV7BjCeEG7zOBJ3TGfXu8=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=beta;
h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
b=UyL4vkyNMpBE23Op1ePQEeZyFU/oKVwWt2j8ZmpixrWLIInG/qOyVVfiw4a7d2FeWoVu4zfOjFpjcnYuoE76qAyTQQXqkZ5LZvPRAyZCXvDmC1GlOqL7Fxz9Uy4qq+/DPoHvBixl7tXomASQt5zUewgfHbM7MZ4ICN2eW7PKTQA=
Received: by 10.78.149.13 with SMTP id w13mr1630248hud.1181991141307;
Sat, 16 Jun 2007 03:52:21 -0700 (PDT)
Received: by 10.78.178.12 with HTTP; Sat, 16 Jun 2007 03:52:21 -0700 (PDT)
Message-ID:
Date: Sat, 16 Jun 2007 03:52:21 -0700
From: "Frank Konic"
To: [e-mail]
Subject: For Sale or for Parts 1999 Mitsubishi Glant ES - $1000
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Answer 1

No, but I can tell you I got an email from the same domain in response to a Craigslist dating ad. The poster was uncomplimentary, to be sure. And they gave out an address:

66.150.243.15, and the return addy was [e-mail] and the name listed was Ronald Brahin. That may have been faked. And if it was an office it may have been a different person. But it's interesting to note that this was from a Craigslist person. It DOES look like he would be a suspect, doesn't it?

Answer 2

I am trying to sell an item on craigs list. I recieved an email from Frank Konic as well. Like you I am also weary. How was your out come with "Frank"?

Answer 3

Email from someone trying to scam me I bet, Can you help find out where its coming from?

Im trying to determine if this email is from a 419er scam artist trying to rip me offf. He sounds legit but I am very very wary. Here is an exact copy of the header and I want to try to find out the location this email is coming from. Any help is appreciated

Answer 4

He has a Google e-mail address. That's hard to trace.



If you feel like it's a scam, it probably is.

Answer 5

Try using traceroute.org.