*warning" Belgian Scammer On Gemm

[Platters 81]

4 or 5 tasty 45s....about half price......hotmail address.....but green shield guarantee .....so i ordered one......then i got an e-mail from a "PINO SALA" asking me to pay thru paypal.....as it would be quicker than Gemm.....hmmm....i recognise "Sala" from somewhere....doesnt sound very 'downhome'....so i downloaded E-MAIL TRACKER PRO trial version......which gets behind the US Hotmail addy...to the computer which sent the e-mail...which is 'Rue Marie Henriette....Belgium!'.......his e-mail is........superscope1963@hotmail.com..........ive cancelled the order and will report it to Gemm.....

[Diggin' Dave]

do you know what city in belgium he's from?

[Platters 81]

heres the e-mail trace report........Computer 212.166.46.194 has been found. It is probably located in or around Belgium as this is where the organization or individual who manages the system is located. As a further clue, the system appears to be located in timezone GMT +0200.

This system is a mail and web server (click here for details).

Network Contact Information: The following details refer to the network that the system is on.

ludo.vansloen@staff.win.be

+32 81 711 736

WIN S.A. Rue Marie-Henriette, 60 B-5000 Namur

To report this email as spam, virus or other type of abuse, simply right-click the Security Suite icon on the System Tray () and select Abuse Reporting. For more information, click here.

Click here to show the in-depth information on this email (more info) Click here to hide the in-depth information on this email (more info)

This email is sent from the computer identified on the Internet by 212.166.46.194.

The sender claims to be pino sala at address superscope1963@hotmail.com, but this is very easily forged and as such not necessarily reliable.

This email shows that it has been passed to the email server identified on the Internet by aamtain01-winn.ispmail.ntl.com. That server no longer exists, so either it has since been taken down, or the sender was attempting to hide their true location.

A server along the route claimed to be hotmail.com but was actually bay19-f8.bay19.hotmail.com. The server is in the domain so it is probably a configuration error with the server

There have been no apparent attempts to misdirect you as to the true sender of this email.

Click here to show the route map (more info) Click here to hide the route map (more info)

The following map shows the route between you and the entity to which you traced. A solid line represents a hop to a known location, and a dotted line represents a hop to a guessed location.

Click here to show information on each hop along the route (more info) Click here to hide information on each hop along the route (more info)

The table below identifies the Internet route taken to reach the destination requested.

This is valuable data when tracking the end location because it helps qualify the actual final position. In some instances the final location has been derived from the network registration details, which is often the head office location for the Internet Service Provider (ISP). The ISP location is often local to the destination traced, but sometimes also located elsewhere, particularly in the case of large national ISPs. The physical (authoritative) locations of systems in last 2 or 3 hops of the route provide helpful location information as they are often in the vicinity of the destination being traced. Authoritative locations are shown in bold, locations derived from registration details appear in italic.

Address of Hop Name of Hop Location

10.137.248.1 (unnamed) (Private)

80.5.162.193 bagu-t2cam1-b-ge-wan44-116.inet.ntl.com Baguley, UK

80.5.161.137 bagu-t2core-b-ge-wan63.inet.ntl.com Baguley, UK

62.253.188.29 lee-bb-b-so-300-0.inet.ntl.com Leeds, UK

62.253.187.185 lee-bb-a-ae0-0.inet.ntl.com Leeds, UK

62.253.185.238 pop-bb-b-so-100-0.inet.ntl.com Poplar, London, UK

62.253.188.94 amst-ic-1-as0-0.inet.ntl.com Amsterdam, Netherlands

195.69.144.87 ams-ix.belbone.net Amsterdam, Netherlands

80.84.20.137 (unnamed) Europe

212.166.0.113 (unnamed) Belgium

212.166.0.114 (unnamed) Belgium

212.166.0.137 (unnamed) Belgium

212.166.32.57 32-57.win.be Belgium

212.166.32.58 32-58.win.be Belgium

212.166.46.194 (unnamed) Belgium

Click here to show further owner details (more info) Click here to hide further owner details (more info)

Network Owner Information

The following information refers to the network on which this system lies. This is useful information because it describes who you need to report to if someone on their network has been abusive. (How to effectively report network abuse)

% This is the RIPE Whois query server #2.

% The objects are in RPSL format.

%

% Note: the default output of the RIPE Whois server

% is changed. Your tools may need to be adjusted. See

% https://www.ripe.net/db/news/abuse-proposal-20050331.html

% for more details.

%

% Rights restricted by copyright.

% See https://www.ripe.net/db/copyright.html

inetnum: 212.166.46.0 - 212.166.47.255

netname: BE-WIN

descr: WIN ADSL Wholesale Customers

country: BE

admin-c: LV11-RIPE

tech-c: BJ14-RIPE

rev-srv: ns1.win.be

status: ASSIGNED PA

mnt-by: AS9208-MNT

changed: ludo.vansloen@staff.win.be 20011205

source: RIPE

route: 212.166.0.0/18

descr: Win

origin: AS9208

mnt-by: AS9208-MNT

changed: benoit.piret@win.be 19990928

source: RIPE

person: Ludo Vansloen

address: WIN S.A.

address: Rue Marie-Henriette, 60

address: B-5000 Namur

phone: +32 81 711 706

fax-no: +32 81 711 736

e-mail: ludo.vansloen@staff.win.be

nic-hdl: LV11-RIPE

mnt-by: AS9208-MNT

changed: ludo.vansloen@staff.win.be 20010926

source: RIPE

person: Bernard Jonniaux

address: WIN S.A.

address: Rue Marie-Henriette, 60

address: B-5000 Namur

phone: +32 81 711 711

fax-no: +32 81 711 736

e-mail: bernard.jonniaux@staff.win.be

nic-hdl: BJ14-RIPE

mnt-by: AS9208-MNT

changed: ludo.vansloen@staff.win.be 20010926

source: RIPE

Click here to show the analysis of the system's applications (more info) Click here to hide the analysis of the system's applications (more info)

The system is running a mail server (ESMTP Server) on port 25. This means that this system can be used to send email.

The system is running a web server on port 80 (click here to view it). This means that this system serves web pages.

There is no HTTPS server running on this system (the port is closed).

There is no FTP server running on this system (the port is closed).

[Diggin' Dave]

Hmm, this looks very fishy indeed. Namur is situated in an area that has suffered some economical struggle in the past, so that could explain the fact that someone wants to make some money out of a scam somewhere...

on the other hand, the name 'Ludo Vansloen' sounds very flemish (the northern part of Belgium, and namur is situated in the southern part). The other names 'Bernard Jonnieaux' and 'Benoit Piret' sound more southern.

i would be surprised if the server was situated in timezone GMT +2, because Belgium and surroundings lies in the GMT +1-zone. And a lot of details confirm the fact that these scammers are Belgian.

Just trying to help here, i don't know anything about tracking down things thru internet