Phish Eartlink -- Internet Scams

[ Show ]

Support VoyForums

[ Shrink ]

VoyForums Announcement: Programming and providing support for this service has been a labor of love since 1997. We are one of the few services online who values our users' privacy, and have never sold your information. We have even fought hard to defend your privacy in legal cases; however, we've done it with almost no financial support -- paying out of pocket to continue providing the service. Due to the issues imposed on us by advertisers, we also stopped hosting most ads on the forums many years ago. We hope you appreciate our efforts.

Show your support by donating any amount. (Note: We are still technically a for-profit company, so your contribution is not tax-deductible.) PayPal Acct: Feedback:

Donate to VoyForums (PayPal):

[ Login ] [ Contact Forum Admin ] [ Main index ] [ Post a new message ] [ Search | Check update time | Archives: 1, [2], 3, 4 ]

[ Next Thread | Previous Thread | Next Message | Previous Message ]

Date Posted: 22:37:40 10/23/04 Sat
Author: Repost
Subject: Phish Eartlink

THIS SITE IS PRESENTLY ACTIVE.
THIS IP IS CONNECTED THROUGH ALERON.NET.
This is a sophisticated phish site.
It appears genuine and probably will bring in a sucker or two.
Another zombie DSL machine on swbell.net.

http://billing.earthlink.net%01%00@artcraft.or.kr/board_old/icon/Type08/
--- Broken down URL components:
Protocol: http
Username: billing.earthlink.net%01%00
Host: artcraft.or.kr
Path: /board_old/icon/Type08/
--- Decoded URL: [web-sniffer]
http://artcraft.or.kr/board_old/icon/Type08/

-------- Original Message --------
From: - Sat Oct 23 10:33:49 2004
Return-Path:
Received: from adsl-70-241-57-11.dsl.rcsntx.swbell.net ([70.241.57.11])
by tanager.mail.pas.earthlink.net (EarthLink SMTP Server) with SMTP id
1cljQM7A3NZFmQ0 Sat, 23 Oct 2004 04:14:19 -0700 (PDT)
Received: from OKMGR (wcvga.geocities.com[168.40.115.242]) by crane
(EarthLink SMTP Server) with SMTP id 1bI4t07m43NZFjC0
Message-ID: <1059042086.5214@erinet.com>
From: Earthlink Billing Department
Reply-To: Earthlink Billing Department
To: ,
Subject: Important Information Regarding Your Account

------------------------------------------------------------------------

Dear Earthlink User,

This email is a reminder that your EarthLink account information is not
up-to-date. To avoid any interruption to your service including the
ability to log onto EarthLink, please update your credit or debit card
information.

If you do not update your credit or debit card information you may no
longer be able to use EarthLink.

This is your final notice. Please take a moment to update your credit
card information by clicking
http://billing.earthlink.net/update.cgi?id=347182

and submitting your information.

Please note that we will attempt to renew your service five days from
today. If we are still unable to charge your credit card at that time,
your service will be terminated.

Sincerely,
Earthlink Billing Department

[DOMAIN whois information on ARTCRAFT.OR.KR ]
Domain Name: ARTCRAFT.OR.KR
Namespace: ICANN Country Code Top Level Domain - http://www.icann.org
TLD Info: See IANA Whois - http://www.iana.org/root-whois/kr.htm
Registry: Registry information not yet configured
Registrar: Registry information not yet configured
Whois Server: whois.krnic.net
Name Server[from dns, whois+dns ip]: NS8.KOBIS.NET 211.47.67.8
# ENGLISH

Domain Name : artcraft.or.kr
Registrant : korea arts and crafts
Registrant Address : Jewelry Desigh Course Of Study, WonKwang
Health College, ShinYoong-Dong, IkSan, Chollabuk-do
Registrant Zip Code : 570170
Administrative Contact(AC): kim dong hun
AC E-Mail : kobis@kobis.net
AC Phone Number : 019-227-5358
Registered Date : 2000. 11. 17.
Last updated Date : 2003. 11. 19.
Expiration Date : 2005. 11. 17.
Publishes : Y
Authorized Agency : I-NAMES(the "I" stands for "Internet")
Corporation (http://www.inames.co.kr)

Primary Name Server
Host Name : ns8.kobis.net
IP Address :

Secondary Name Server
Host Name : ns2.kobis.net
IP Address :

- KRNIC Whois Service -
# English
Above domain name is not registered to KRNIC.

211.47.67.8
This IP address was found in SPEWS.
http://spews.org/html/S2083.html
euhak
|--------------------
1, 211.47.67.13, euhak.net
1, 211.47.67.0/24, euhak.net (kobis.net)
1, 219.240.33.232, euhak.net / "(��)��л�ǰ�� ؿܾ��п��!
e-��г�"

traceroute to ARTCRAFT.OR.KR (211.47.67.20), 30 hops max, 40 byte packets

10 pos9-0.ar.paxpalca.aleron.net (205.198.10.94) 29.295 ms
11 hanaro.ar.paxpalca.aleron.net (206.185.250.18) 35.154 ms
12 210.180.97.29 (210.180.97.29) 167.958 ms
13 211.37.96.18 (211.37.96.18) 183.582 ms
14 211.200.9.138 (211.200.9.138) 187.488 ms
15 * * *
16 211.47.67.20 (211.47.67.20) 172.841 ms

Namespace: ICANN Unsponsored Generic TLD - http://www.icann.org
TLD Info: See IANA Whois - http://www.iana.org/root-whois/net.htm
Registry: VeriSign, Inc. - http://www.verisign-grs.com
Registrar: TODAY AND TOMORROW CO. LTD. - http://www.ttpia.com
Whois Server: whois.ttpia.com
Name Server[whois+dns with ip] NS.KOBIS.NET 211.47.67.1
Name Server[whois+dns with ip] NS2.KOBIS.NET 211.47.67.2
Status: ACTIVE
Updated Date: 24-jun-2003
Creation Date: 27-nov-1998
Expiration Date: 26-nov-2008
[whois.ttpia.com]

Welcome to TTpia.com.

1. Domain Name : kobis.net
2. Registrar : ttpia.com

3. Record Created on : 1998-11-27
4. Record Expires on : 2008-11-26
5. Record last Updated on : 2003-06-25

6. Name Servers
NS.KOBIS.NET
NS2.KOBIS.NET

--
******************************************
* This is the Spammish Inquisition *
* Not Lumber Cartel Unit 75 [TINLC] *
* http://bobcathoh.50megs.com/tinLC/ *
* david l kayp at earthlink dot net *
******************************************

[ Next Thread | Previous Thread | Next Message | Previous Message ]

[ Contact Forum Admin ]

Forum timezone: GMT-8
VF Version: 3.00b, ConfDB:
Before posting please read our privacy policy.
VoyForums^(tm) is a Free Service from Voyager Info-Systems.
Copyright © 1998-2019 Voyager Info-Systems. All Rights Reserved.