VoyForums
[ Show ]
Support VoyForums
[ Shrink ]
VoyForums Announcement: Programming and providing support for this service has been a labor of love since 1997. We are one of the few services online who values our users' privacy, and have never sold your information. We have even fought hard to defend your privacy in legal cases; however, we've done it with almost no financial support -- paying out of pocket to continue providing the service. Due to the issues imposed on us by advertisers, we also stopped hosting most ads on the forums many years ago. We hope you appreciate our efforts.

Show your support by donating any amount. (Note: We are still technically a for-profit company, so your contribution is not tax-deductible.) PayPal Acct: Feedback:

Donate to VoyForums (PayPal):

[ Login ] [ Contact Forum Admin ] [ Main index ] [ Post a new message ] [ Search | Check update time | Archives: 1, 2, [3], 4 ]

[ Next Thread | Previous Thread | Next Message | Previous Message ]

Date Posted: 05:16:16 02/29/04 Sun
Author: Jenz
Subject: Re: Phishing scam
In reply to: Repost 's message, "Phishing scam" on 22:42:57 02/28/04 Sat

I obviously landed on a different kind of list; I never used to receive these and now they're coming in fast & furious.

Delivered by : 69.41.232.98 europa.tonservers.com (The Planet)

Located on: thistleandclover.com
Registrant: Thistle And Clover (HPDQJNYMPD)
418 South Main Street
St. Charles, MO 63301 US
jerry3624@msn.com 636-946-2449

Technical Contact:
Ready Hosting Inc. (TWHBUQCCZO) sysadmin@readyhosting.com
6127 Green Bay Road Suite 400
Kenosha, WI 53142 US
262-652-7640 fax: 262-652-7650

Domain servers in listed order:
NS5.READYHOSTING.COM 63.99.209.103
NS6.READYHOSTING.COM 63.99.209.104

Return-Path:
Received: from europa.tonservers.com ([69.41.232.98])
by fep04-mail.bloor.is.net.cable.rogers.com
(InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with
ESMTP
id

for ; Sun, 29 Feb 2004 00:51:00 -0500
Received: from nobody by europa.tonservers.com with local (Exim 4.24)
id xxxxxx-xxxxxx-xx
for x@rogers.com; Sat, 28 Feb 2004 23:51:00 -0600
To: x@rogers.com
Subject: Notification of PayPal Limited Account Access
From: cumpar@paypal.com
Reply-To: cumpar@paypal.com
Errors-To: cumpar@paypal.com
X-Mailer: MSOUTLOOK / 4.3.4
Content-type: text/html; charset=iso-8859-1
Message-Id: <___________@europa.tonservers.com>
Date: Sat, 28 Feb 2004 23:51:00 -0600


http://thistleandclover.com/images/webscr.dll
source code:

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Date: Sun, 29 Feb 2004 11:51:33 GMT
Content-Type: application/x-msdownload
Accept-Ranges: bytes
Last-Modified: Sun, 29 Feb 2004 05:22:28 GMT
ETag: "e03212684fec31:a21"
Content-Length: 696

Is Jr making less-than-commendable use of daddy's website? Or did
daddy simply forget to secure his IIS?

[ Next Thread | Previous Thread | Next Message | Previous Message ]
[ Contact Forum Admin ]

Forum timezone: GMT-8
VF Version: 3.00b, ConfDB:
Before posting please read our privacy policy.
VoyForums(tm) is a Free Service from Voyager Info-Systems.
Copyright © 1998-2019 Voyager Info-Systems. All Rights Reserved.