Scam warning !!!

Re: Scam warning !!!

get the barstard
hope everything works out here, people like this shouldnt be around guitars
 
Re: Scam warning !!!

If he has a Yahoo address they should be contacted as well. First contact the local police who will most likely forward you to the DA's office. Have a criminal case number before you contact Yahoo if possible.

Good luck LZ
 
Re: Scam warning !!!

thanks for all the kind words guys.
I was thinking about whether he's really a 'pro' or not. He's obviously not too smart if he sets up scams, then 1 week later lists all the SAME stuff again, under the SAME email. I would just think a pro would find new items to scam, and get a new email.
He doesn't seem that smart, he's just got the scamming part down, doesn't look he's got himself prepared to be set up IMHO
 
Re: Scam warning !!!

TattooedCarrot said:
I have an email bugger that plants a miniscule HTML in email that follows the email whereever it goes. It tells me who opened it, where they were when they opened it, how long they looked at it, to whom they might forward it to and same for them, tells me their operating system, IP address, the works. I don't know if it works on something like Yahoo.com, it might just show me the yahoo stuff. But I sent him an email inquiring about the recto 50 so as soon as he opens it I'll post the results here.
Hmm could you email the code? bryan@evo-labs.com

I'm just curious to to see it because I thought HTML couldn't really execute plans?

:smack: I just came up with an idea that would be 100x easier. I know enough PHP that I could have just sent him a link that when he clicked it, it would log his IP, browser info, location etc... I'm gonna get started on that now.
 
Re: Scam warning !!!

He responded

Bryan,
i dont have IM. but you can check photos at:
http://www.geocities.com/atlanticguitars/01.JPG
http://www.geocities.com/atlanticguitars/02.JPG
http://www.geocities.com/atlanticguitars/03.JPG
http://www.geocities.com/atlanticguitars/04.JPG

excelent conditions. there's one person interested to
get it for $790 USD shipped UPS. if you can cover this
offer we can talk about a deal. thanks

best regards

Which sort of screws my plans up, but I asked him abotu a trade and including pictures of an amp I own and included links. He should be the only person who clicks these links who has visited my server, so I can check the logging software on my server and should be able to grab an IP there. If Tattooed Carrot is also successful and we both come up with the same IP address, that would mean he has a broadband connection.
 
Re: Scam warning !!!

can you guys post the header to his E-mail? i can check his IP too.
only the header will do.
 
Re: Scam warning !!!

proxy said:
He responded



Which sort of screws my plans up, but I asked him abotu a trade and including pictures of an amp I own and included links. He should be the only person who clicks these links who has visited my server, so I can check the logging software on my server and should be able to grab an IP there. If Tattooed Carrot is also successful and we both come up with the same IP address, that would mean he has a broadband connection.
that is the easiest way yes. send him the adress containing the pics then check the server access logs for the ip's .. after then you should track em to see if he's using a proxy or is in his area
 
Re: Scam warning !!!

pac112 said:
can you guys post the header to his E-mail? i can check his IP too.
only the header will do.
header.jpg
 
Re: Scam warning !!!

proxy said:
Hmm could you email the code? bryan@evo-labs.com

I'm just curious to to see it because I thought HTML couldn't really execute plans?
I'm not 100% sure how it works, and it has nothing to do with my job. It's a subscription service anyone can use if you want to pay for it. I use it to screen potential scammers from real people in all the trading/buying/selling of gear I do.

There are a lot of other features too, like I can tell mail sent email to self destruct once it's been opened, etc.

www.readnotify.com
 
Re: Scam warning !!!

ack! dude, can u sent it to me in text form? i need to feed it in. cant do it if its an image.
 
Re: Scam warning !!!

To:atlanticguitars@yahoo.com
Subject: Mesa Boogie Rectifier Solohead 50 Amp
Sent:16-Apr-05 at 19:36:46pm 'US/Pacific' time
Opened:17-Apr-05 at 08:58:38am (UTC -7:00) - 13hours21mins52secs after sending
Location: Belo Horizonte, Minas Gerais, Brazil (81% likelihood)
Opened on IP: (200.196.41.245:2132)
Language of recipient's PC: pt-BR (Portuguese/Brazil)
Browser used by recipient: Moz/4.0 (MSIE 6.0; WinNT 5.1) Opera 7.21 pt-BR
Files browser can open: text/html, ap/xml;q=0.9, ap/xhtml+xml;q=0.9, i/png, i/jpeg, i/gif, i/x-xbitmap, */*;q=0.1
Referrer: http://us.¬f612.¬mail.¬yahoo.¬com/ym/ShowLetter?MsgId=8064_27883391_11465
Opened 1 time by 1 reader

Map Here
.
 
Last edited:
Re: Scam warning !!!

dudes, i ran a check on his IP, this is what i got

netnum: 200.128/9
status: allocated
owner: Comite Gestor da Internet no Brasil
ownerid: BR-CGIN-LACNIC
responsible: Frederico A C Neves
address: Av. das Nações Unidas, 11541, 7° andar
address: 04578-000 - São Paulo - SP
country: BR
phone: +55 11 9119-0304 []
owner-c: CGB
tech-c: CGB
inetrev: 200.128/9
nserver: A.DNS.BR
nsstat: 20050413 AA
nslastaa: 20050413
nserver: B.DNS.BR
nsstat: 20050413 AA
nslastaa: 20050413
nserver: C.DNS.BR
nsstat: 20050413 AA
nslastaa: 20050413
nserver: D.DNS.BR
nsstat: 20050413 AA
nslastaa: 20050413
nserver: E.DNS.BR
nsstat: 20050413 AA
nslastaa: 20050413
remarks: These addresses have been further assigned to Brazilian users.
remarks: Contact information can be found at the WHOIS server located
remarks: at whois.registro.br or at http://whois.registro.br
created: 19950104
changed: 20020902

nic-hdl: CGB
person: Comite Gestor da Internet no Brasil
e-mail: blkadm@NIC.BR
address: Av. das Nações Unidas, 11541, 7° andar
address: 04578-000 - São Paulo - SP
country: BR
phone: +55 19 9119-0304 []
created: 20020902
changed: 20020902

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
 
Re: Scam warning !!!

we can do something with the phone number. can we? use brasillian telkom service to triangulate him.
 
Last edited:
Re: Scam warning !!!

It appears 200.196.41.245 has it's FTP port open. Wonder what kind of fun that could be :dance:
 
Re: Scam warning !!!

Pepi said:
It appears 200.196.41.245 has it's FTP port open. Wonder what kind of fun that could be :dance:

ledzepp29 said:
I'm not quite sure whats goin on? is this good? lol

Yes if you're into the revenge business. Basically it means that with the IP address (if you know what you're doing - which sadly I don't) I believe you can access his computer
 
Re: Scam warning !!!

Someone should act like they live right near him in Brazil and see if he's willing to let you check any of the amps in person. Obviously, he probably won't be up for that, but maybe you can get an address somehow.
 
Re: Scam warning !!!

presa_tito said:
Someone should act like they live right near him in Brazil and see if he's willing to let you check any of the amps in person. Obviously, he probably won't be up for that, but maybe you can get an address somehow.

Unlikely,

First you need someone who speaks/writes Portugese ... not so bad we got a couple of guys here.

But as soon as someone starts wanting to come over and check out the merch ... personally I think he'll pickup on the fact that some of his recent inquiries seem a little off, and in his case all he has to do is shutdown what he's doing and be quite for a few months and he effectively disapears
 
Re: Scam warning !!!

He's not going to agree to meet to view the gear because he doesn't have it. All asking him to do so does is add suspicion that he might not have the gear if he's unwilling to allow it to be inspected - which we already know.
 
Back
Top