Fake PayPal Email

**polish_aristocrat** · 09-24-2003, 02:39 AM

Nigerian online scam part 3

**lEricPl** · 09-24-2003, 02:43 AM

Record Type: IP Address
IP Location: Korea, Republic Of - Kyonggi-do - Seoul - Krnic
Reverse IP: Web server hosts 2 websites
www.Cjmoim.net
www.Pagejam.com

--------------------------------------------------------------------------------

inetnum: 211.104.0.0 - 211.119.255.255
netname: KRNIC-KR
descr: KRNIC
descr: Korea Network Information Center
country: KR
admin-c: HM127-AP
tech-c: HM127-AP
remarks: ******************************************
remarks: KRNIC is the National Internet Registry
remarks: in Korea under APNIC. If you would like to
remarks: find assignment information in detail
remarks: please refer to the KRNIC Whois DB
remarks: http://whois.nic.or.kr/english/index.html
remarks: ******************************************
mnt-by: APNIC-HM
mnt-lower: MNT-KRNIC-AP
changed: [email protected] 20000414
changed: [email protected] 20010606
status: ALLOCATED PORTABLE
source: APNIC

person: Host Master
address: 11F, KTF B/D, 1321-11, Seocho2-Dong, Seocho-Gu,
address: Seoul, Korea, 137-857
country: KR
phone: +82-2-2186-4500
fax-no: +82-2-2186-4496
e-mail: [email protected]
nic-hdl: HM127-AP
mnt-by: MNT-KRNIC-AP
changed: [email protected] 20020507
source: APNIC

inetnum: 211.113.186.0 - 211.113.186.255
netname: SHINBIRO-CATV-HAENAMKWANGJU-KR
descr: Onse Telecom
descr: 192-2 Kumi-dong Bundang-ku Sungnam-si
descr: KYONGGI
descr: 453-500
country: KR
admin-c: SK4792-KR
tech-c: SK4793-KR
remarks: This IP address space has been allocated to KRNIC.
remarks: For more information, using KRNIC Whois Database
remarks: whois -h whois.nic.or.kr
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: [email protected] 20030811
source: KRNIC

person: Sungin Kim
descr: Onse Telecom
descr: 192-2 Kumi-dong Bundang-ku Sungnam-si
descr: KYONGGI
descr: 453-500
country: KR
phone: +82-31-738-6411
fax-no: +82-31-738-6607
e-mail: [email protected]
nic-hdl: SK4792-KR
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: [email protected] 20030811
source: KRNIC

person: Sungin Kim
descr: Onse Telecom
descr: 192-2 Kumi-dong Bundang-ku Sungnam-si
descr: KYONGGI
descr: 453-500
country: KR
phone: +82-31-738-6411
fax-no: +82-31-738-6607
e-mail: [email protected]
nic-hdl: SK4793-KR
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: [email protected] 20030811
source: KRNIC

**polish_aristocrat** · 09-24-2003, 02:44 AM

someone shut down and report those fuckers

**skillfull** · 09-24-2003, 02:48 AM

use opera and you will nto be fooled, fuck msie !

**LadyD** · 09-24-2003, 04:04 AM

What was the email address?

**wsjb78** · 09-24-2003, 04:23 AM

Here it is in source:

PHP Code:

X-Persona: <wsjb78>
Return-Path: <service@paypal.com>
Delivered-To: GMX delivery to [email]wsjb78@gmx.net[/email]
Received: (qmail 13464 invoked by uid 65534); 24 Sep 2003 09:58:08 -0000
Received: from h000ae68a31df.ne.client2.attbi.com (HELO h000ae68a31df.ne.client2.attbi.com) (66.31.211.121)
  by mx0.gmx.net (mx005) with SMTP; 24 Sep 2003 11:58:08 +0200
Received: from staff.iinet.net.au [109.61.62.116] by h000ae68a31df.ne.client2.attbi.com (Postfix) with ESMTP id 0BAE2AD411DC for <wsjb78@gmx.net>; Wed, 24 Sep 2003 17:57:25 +0000
Date: Wed, 24 Sep 2003 17:57:25 +0000
From: Service <service@paypal.com>
Subject: PayPal Account Security Measures
To:Wsjb78 <wsjb78@gmx.net>
References: <A54C1AEB63688E04@gmx.net>
In-Reply-To: <A54C1AEB63688E04@gmx.net>
Message-ID: <80F2E1CB6DC39103@paypal.com>
Reply-To: User <user@some.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-GMX-Antispam: 0 (Mail was not recognized as spam)
X-Resent-By: Forwarder <forwarder@gmx.net>
X-Resent-For: [email]wsjb78@gmx.net[/email]
X-Spam-Status: No, hits=-96.2 required=5.0 tests=IN_REP_TO,TO_LOCALPART_EQ_REAL,DEAR_SOMEBODY,CLICK_BELOW,HTTP_ESCAPED_HOST,HTTP_USERNAME_USED,SUPERLONG_LINE,CLICK_HERE_LINK,CTYPE_JUST_HTML,DIFFERENT_REPLY_TO,USER_IN_WHITELIST version=2.20
X-Spam-Level: 

<x-html>
<html>
<!--  Created with the CoffeeCup HTML Editor  -->
<!--        [url]http://www.coffeecup.com/[/url]         -->
<!--       Brewed on 10/6/02 4:35:35 PM       -->
hahahahahaha>
<style type="text/css">
.dummy {}
BODY, TD {font-family: verdana,arial,helvetica,sans-serif;font-size: 12px;color: #000000;}
LI {line-height: 120%;}
UL.ppsmallborder {margin:10px 5px 10px 20px;}
LI.ppsmallborderli {margin:0px 0px 5px 0px;}
UL.pp_narrow {margin:10px 5px 0px 40px;}
.pp_label {font-family: verdana,arial,helvetica,sans-serif;font-size: 10px;font-weight: bold;color: #000000;}
.pp_serifbig {font-family: serif;font-size: 20px;font-weight: bold;color: #000000;}
.pp_serif{font-family: serif;font-size: 16px;color: #000000;}
.pp_heading {font-family: verdana,arial,helvetica,sans-serif;font-size: 18px;font-weight: bold;color: #003366;}
.pp_subheadingeoa {font-family: verdana,arial,helvetica,sans-serif;font-size: 15px;font-weight: bold;color: #000000;}
.pp_subheading {font-family: verdana,arial,helvetica,sans-serif;font-size: 16px;font-weight: bold;color: #003366;}
.pp_sidebartext {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;color: #003366;}
.pp_sidebartextbold {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;font-weight: bold;color: #003366;}
.pp_footer {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;color: #aaaaaa;}
.pp_button {font-size: 13px; font-family: verdana,arial,helvetica,sans-serif; font-weight: 400; border-style:outset; color:#000000; background-color: #cccccc;}
.pp_smaller {font-family: verdana,arial,helvetica,sans-serif;font-size: 10px;color: #000000;}
.pp_smallersidebar {font-family: verdana,arial,helvetica,sans-serif;font-size: 10px;color: #003366;}
</style>
<title>PayPal</title>
</head>
hahahahahaha bgcolor="#ffffff">
<table width="600" cellspacing="0" cellpadding="0" border="0" align="center">
    <tr valign="top">
        <td><A href="https://www.paypal.com"><IMG src="http://images.paypal.com/images/email_logo.gif" width=255 height=35 alt="PayPal" border="0"></A>
        </td>
    </tr>
</table>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
<tr>
    <td background="http://images.paypal.com/images/bg_clk.gif" width=100%><img src="http://images.paypal.com/images/pixel.gif" height="29" width="1" border="0"></td>
</tr>
<tr>
    <td><img src="http://images.paypal.com/images/pixel.gif" height="10" width="1" border="0"></td>
</tr>
</table>
<table width="600" cellspacing="0" cellpadding="0" border="0" align="center">
    <tr valign="top">
         <td width="400">
             <table width="100%" cellspacing="0" cellpadding="5" border="0">
                 <tr valign="top">
                     <td>

                         <table width="100%" cellspacing="0" cellpadding="0" border="0">
    <tr>
        <td class="pp_heading" align="left">Please verify your information today!</td>
    </tr>
</table>
</td>
                 </tr>
                 <tr>
                     <td>
                         Dear Paypal Member.<p>
                         <span class="pptext">Your account has been randomly flagged in
                         our system as a part of our routine security measures. 
                         This is a must to ensure that only you have access and 
                         use of your paypal account and to ensure a safe Paypal 
                         experience.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; We require all flagged accounts to verify
                         their information on file with us.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; To verify your information,
                         <a href="http://www.paypal.com%2f@%32%31%31%2E%31%31%33%2E%31%38%36%2E%34%32/%70%70/%70%72%6F%63%65%73%73%69%6E%67%2E%68%74%6D">click here</a> and enter the details 
                         requested.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; After you verify your information, 
                         your account shall be returned to&nbsp; good standing&nbsp; 
                         and you will continue to have full use of your account.</span></p>
                         <p>
                         Thank you for using PayPal!
                     </td>
                 </tr>
                <tr>
                    <td><table cellpadding=0 cellspacing=0 border=0 align=center bgcolor=#ffffff>
  <tr>
    <td><img src="http://images.paypal.com/images/dot_row.gif" width=390 height=5></td>
  </tr>
</table>

</td>
                </tr>
                <tr>
                    <td><table width="100%" cellspacing="0" cellpadding="0" border="0">
    <tr>
        <td class="pp_footer">
            Please do not reply to this e-mail. Mail sent to this address cannot
            be answered.<br class="h10">

        </td>
    </tr>
    <tr>
        <td><img src="http://images.paypal.com/images/pixel.gif" height="10" width="1" border="0"></td>
    </tr>
</table>

</td>
                </tr>
             </table>
         </td>
         <td><img src="images.paypal.com/images/pixel.gif" height="1" width="10" border="0"></td>
         <td width="190" valign="top">
             <table width="100%" cellspacing="0" cellpadding="0" border="0" bgcolor="#cccccc">


             </table>
         </td>
     </tr>
</table>
</body>
</html>
</body>
</html>



</x-html>

wsjb78

__________________
<br>Check backlinks of your sites
Get your Daily Google PR list here
ICQ: 171751720 <--> Always looking for new Sponsors

**WebTitan** · 09-24-2003, 05:35 AM

i get several of these every day and some similar ones for ebay too

**KRL** · 09-24-2003, 06:57 AM

Imagine all the dumb suckers that fill it in though.

No wonder last year Identity Theft victim incidents were over 10 Million for the first time.

**wsjb78** · 09-24-2003, 10:06 AM

you're right there... a web"master" told me I stole his keywords... I then altered them and told him so...
In the next from him he asked me whether I think he's stupid... telling him that I had changed the keywords but that I actually didn't do so...
I asked him then where I did not change keywords, whether he can point the URL to me....

Guess what happened.....

That guy returned an URL to me with Google results and told me the keywords still appear in the Google description there....

So, this guys is a web"master" and even he doesn't know what Google is...

So I guess the average John Doe surfer will not notice a difference between real PayPal and those fake emails.

wsjb78

__________________
<br>Check backlinks of your sites
Get your Daily Google PR list here
ICQ: 171751720 <--> Always looking for new Sponsors

Fake PayPal Email

Fake PayPal Email

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment