Bank scam -- Internet Scams

[ Show ]

Support VoyForums

[ Shrink ]

VoyForums Announcement: Programming and providing support for this service has been a labor of love since 1997. We are one of the few services online who values our users' privacy, and have never sold your information. We have even fought hard to defend your privacy in legal cases; however, we've done it with almost no financial support -- paying out of pocket to continue providing the service. Due to the issues imposed on us by advertisers, we also stopped hosting most ads on the forums many years ago. We hope you appreciate our efforts.

Show your support by donating any amount. (Note: We are still technically a for-profit company, so your contribution is not tax-deductible.) PayPal Acct: Feedback:

Donate to VoyForums (PayPal):

[ Login ] [ Contact Forum Admin ] [ Main index ] [ Post a new message ] [ Search | Check update time | Archives: 1, 2, 3, [4] ]

[ Next Thread | Previous Thread | Next Message | Previous Message ]

Date Posted: 22:47:41 01/18/04 Sun
Author: Repost
Subject: Bank scam

A US bank fraud that is going around.
It tries to make the link look like
https://www.usbank.com/account_verify/cgi/index.htm
But really the link is
http://www.usbank.com@bos.es.kr/index.htm

01/18/04 23:11:38 dns http://www.usbank.com@bos.es.kr/index.htm
http://bos.es.kr/index.htm using authentication www.usbank.com

The real link appears to be in Korea at
http://bos.es.kr/

Tracking link: http://bos.es.kr/index.htm
Resolves to 210.111.239.228

Tracking ip 210.111.239.228
Routing details for 210.111.239.228
[refresh/show] Cached whois for 210.111.239.228 : hsh1636@tenet.or.kr
Using last resort contacts hsh1636@tenet.or.kr

01/18/04 23:16:32 whois 210.111.239.228@whois.krnic.net

whois -h whois.krnic.net 210.111.239.228 ...
�ѱ��ͳ��Ϳ�� ϴ� ��̸� �� ȸ(WHOIS) ��
�Դϴ�.

query: 210.111.239.228

# ENGLISH

KRNIC is not ISP but National Internet Registry similar with APNIC.
Please see the following end-user contacts for IP address information.

IP Address : 210.111.224.0-210.111.255.255
Network Name : DAEJON-EDUCATION
Connect ISP Name : ISP-1
Connect Date : 20021007
Registration Date : 20021007

[ Organization Information ]
Orgnization ID : ORG257558
Org Name : Daejon Metropolitan Office of Education
State : TAEJON
Address : 1294, Dunsan-Dong, Seo-Gu
Zip Code : 302-703

[ Admin Contact Information]
Name : Hwang Sunhee
Org Name : Daejon Metropolitan Office of Education
State : TAEJON
Address : 1294, Dunsan-Dong, Seo-Gu
Zip Code : 302-703
Phone : +82-42-480-7548
Fax : +82-42-480-7929
E-Mail : hsh1636@tenet.or.kr

[ Technical Contact Information ]
Name : Hwang Sunhee
Org Name : Daejon Metropolitan Office of Education
State : TAEJON
Address : 1294, Dunsan-Dong, Seo-Gu
Zip Code : 302-703
Phone : +82-42-480-7548
Fax : +82-42-480-7929
E-Mail : hsh1636@tenet.or.kr

--------------------------------------------------------------------------------

If the above contacts are not rechable, please see the following ISP
contacts
for relevant information or network abuse complaints.

[ ISP IP Admin Contact Information ]

[ ISP IP Tech Contact Information ]

[ ISP Network Abuse Contact Information ]

Reported via spamcop.net as well as http://www.phonebusters.org

Jamie

--
For newsgroups and email this message is the property of the sender.
NO portion of this message may be copied or reposted without my
written consent. The message may not be altered in any way with
out written permission. Copyright � 2003 - 2004 by Jamie

Return-Path:
Received: from localhost (darkshad@localhost [127.0.0.1])
by darkshado.dyndns.org (8.12.10/8.12.10) with ESMTP id
i0J10t6W032011
for ; Sun, 18 Jan 2004 20:00:55 -0500
Received: from pop.bloor.is.net.cable.rogers.com [66.185.95.101]
by localhost with POP3 (fetchmail-6.2.4)
for darkshad@localhost (single-drop); Sun, 18 Jan 2004 20:00:55 -0500
(EST)
Received: from videotron.ca ([24.201.233.161])
by fep03-mail.bloor.is.net.cable.rogers.com
(InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with
SMTP
id <20040119002245.ZQBD494083.fep03-mail.bloor.is.net.cable.rogers.com@videotron.ca>
for ; Sun, 18 Jan 2004 19:22:45 -0500
Received: from modemcable161.233-201-24.mc.videotron.ca
(modemcable161.233-201-24.mc.videotron.ca [24.201.233.161])
by videotron.ca (8.12.8p1/8.12.8) with ESMTP id lkviy23193
for ; Mon, 19 Jan 2004 14:15:57 -0400
(EST)
Message-ID:
From: "U.S. Bank"
To:
Subject: **SPAM** Your account at U.S. Bank has been suspended.
Date: Mon, 19 Jan 2004 14:15:55 -0400 (EST)
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_000F_01C33095.9F84B280"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300
X-UIDL: 6HO"!E_X"!?CJ!!I4Q"!
X-SpamPal: SPAM DSBL 24.201.233.161

This is a multi-part message in MIME format.

------=_NextPart_000_000F_01C33095.9F84B280
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0010_01C33095.9F84B280"

------=_NextPart_001_0010_01C33095.9F84B280
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

------=_NextPart_001_0010_01C33095.9F84B280
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Dear U.S. Bank account holder,

We regret to inform you, that we had to block your U.S. Bank
accoun=
t

because we have been notified that your account may have been
compro=
mised by outside parties.

Our terms and conditions you agreed to state that your account
must=
always be under your control or those you designate at all
times.
=

We have noticed some activity related to your account that
indicates=
that other parties may have access and or control of your
information=
in your account.

These parties have in the past been involved with money
laundering,=
illegal drugs, terrorism and various Federal Title 18 violations.
>
In order that you may=20
access your account we must verify your identity by clicking on the
=
link below.

Please be aware that until we can verify your identity no further
a=
ccess to your account will be allowed and we will have no other
liabil=
ity for your

account or any transactions that may have occurred as a result of
yo=
ur failure to reactivate your account as instructed below.

Thank you for your time and consideration in this matter.

target=3D"=
_blank">https://www.usbank.com/account_verify/cgi/index.htm

Before you reactivate your account, all payments have been frozen,
=
and you will not be able to use your account in any way until we have
=
verified your

identity.

[ Next Thread | Previous Thread | Next Message | Previous Message ]

[ Contact Forum Admin ]

Forum timezone: GMT-8
VF Version: 3.00b, ConfDB:
Before posting please read our privacy policy.
VoyForums^(tm) is a Free Service from Voyager Info-Systems.
Copyright © 1998-2019 Voyager Info-Systems. All Rights Reserved.