🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: be.comp.security
Article #441

Re: MS reclame via phishing spam?

#441
From: Paul Cobbaut
Date: Sun, 24 Jul 2005 09:26
68 lines
3430 bytes
Cyrano wrote:
>>>Mail schijnt afkomstig te zijn van thousandpeak.com.
>>
>>Om dat te weten moet je ons de hele header geven...
> 
> 
> 
> Allee dan:
> 
> Subject:    Update And Verify Your PayPal Account
> Sender:     <root@mail.thousandpeak.com>
> To:   cyrano.mac@techemail.com
> From:    update@paypal.com <update@paypal.com>
>    
> X-Virus-Scanner:     This message was checked by NOD32 Antivirus 
> systemNOD32 for Linux Mail Server.For more information on NOD32 
> Antivirus System,please, visit our website: http://www.nod32.com/.
>    
> X-Eon-DM:   pop16
>    
> Received:   from mail.thousandpeak.com (ip174.bb173.pacific.net.hk 
> [202.64.173.174])by pop16.mta.everyone.net (EON-INBOUND) with ESMTP id 
> pop16.42df3f92.7edd4afor <cyrano.mac@techemail.com>; Sat, 23 Jul 2005 
> 11:09:40 -0700 (PDT)

Uw mail komt van Hong Kong (deel van China)

inetnum:      202.64.173.0 - 202.64.173.255
netname:      MEGA_ACCESS
descr:        mega
country:      HK
admin-c:      PN2-AP
tech-c:       PN2-AP
remarks:      Internet Service Provider
remarks:        ####################################
remarks:        # Please send abuse and port probe #
remarks:        # email to abuse@pacific.net.hk    #
remarks:        # and noc@pacific.net.hk           #
remarks:        ####################################
notify:       noc@pacific.net.hk
mnt-by:       MAINT-HKSUPER-AP
mnt-lower:    MAINT-HKSUPER-AP
changed:      noc@pacific.net.hk 20040917
status:       ALLOCATED NON-PORTABLE
source:       APNIC

person:       PSN NOC
nic-hdl:      PN2-AP
e-mail:       noc@pacific.net.hk
address:      574, 1 TradeMart Drive,
address:      HITEC, Kowloon Bay,
address:      Hong Kong
phone:        +85-226-201880
fax-no:       +85-223-354520
country:      HK
changed:      noc@pacific.net.hk 20030825
mnt-by:       MAINT-HKSUPER-AP
source:       APNIC


cheers,
pol :)

-- 
Geef verstoten dieren een thuis: http://www.dierenasieltienen.be
Software moet vrij en open zijn: http://www.softwarepatenten.be
Vermijd warezzz en illegaliteit: http://distrowatch.com
Deel uw rijkdom met arme mensen: http://www.plan-international.org
Technical Details
Message-ID: <42e35edb$0$1859$ba620e4c@news.skynet.be>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!feeder1.cambrium.nl!feed.tweaknews.nl!195.238.0.32.MISMATCH!skynet.be!newspost001!tjb!not-for-mail
References: <cyrano.mac-EF68EB.09225424072005@europe.isp.giganews.com> <42e34370$0$1810$ba620e4c@news.skynet.be> <cyrano.mac-BA309E.09472724072005@europe.isp.giganews.com>

Show Full Headers
Complete Article Headers
X-Google-Thread: 113446,a4cc1e1044bdde6b
X-Google-Attributes: gid113446,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!feeder1.cambrium.nl!feed.tweaknews.nl!195.238.0.32.MISMATCH!skynet.be!newspost001!tjb!not-for-mail
Date: Sun, 24 Jul 2005 11:26:52 +0200
From: Paul Cobbaut <paulnews@cobbaut.be>
User-Agent: Mozilla Thunderbird 1.0.2 (X11/20050404)
X-Accept-Language: en-us, en
MIME-Version: 1.0
Newsgroups: be.comp.security
Subject: Re: MS reclame via phishing spam?
References: <cyrano.mac-EF68EB.09225424072005@europe.isp.giganews.com> <42e34370$0$1810$ba620e4c@news.skynet.be> <cyrano.mac-BA309E.09472724072005@europe.isp.giganews.com>
In-Reply-To: <cyrano.mac-BA309E.09472724072005@europe.isp.giganews.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 68
Message-ID: <42e35edb$0$1859$ba620e4c@news.skynet.be>
Organization: -= Belgacom Usenet Service =-
NNTP-Posting-Host: 8c277fcf.news.skynet.be
X-Trace: 1122197211 news.skynet.be 1859 80.201.37.246:11890
X-Complaints-To: usenet-abuse@skynet.be