By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here. - Internet Anti-Fraud Center - now open!

View next topic
View previous topic
Post new topicReply to topic
Author Message
dr stephen williams
Chief Tattooist

Joined: 06 Aug 2007
Posts: 16020
Location: DSW's Tattoo Parlour

PostPosted: Tue May 20, 2008 3:00 am Reply with quoteBack to top is a copy of Text and graphics lifted directly.

This appears to be a phishing site from South Korea. Do we kill phishing sites? Also, should I report this to Alan?

I received a phishing email with a link to this site:
From: [email protected]
Subject: **SPAM** EPPICard - Being informed is your best defense!
Date: May 19, 2008 5:34:51 PM GMT-06:00
Return-Path: <[email protected]>
Received: from localhost by maia with LMTP; Mon, 19 May 2008 23:34:52 +0000
Received: from mx3.[]) (Switch-3.1.6/Switch-3.1.0) with ESMTP id m4JNYqbw013064 for <XXXX>; Mon, 19 May 2008 23:34:52 GMT
Received: from ([]) (authenticated user [email protected]) by (Kerio MailServer 6.3.1) for ; Tue, 20 May 2008 03:33:58 +0400
X-Spam-Status: Yes, hits=6.4 required=4.0 tests=AWL: -1.075,BAYES_50: 1.567,HTML_IMAGE_ONLY_28: 1.9, HTML_MESSAGE: 0.001,HTML_MIME_NO_HTML_TAG: 1.082,MIME_HTML_ONLY: 0.001, NORMAL_HTTP_TO_IP: 0.175,URIBL_PH_SURBL: 2.8,TOTAL_SCORE: 6.451
X-Spam-Flag: YES
X-Spam-Level: ******
X-Original-Subject: EPPICard - Being informed is your best defense!
Message-Id: <20[email protected]>
Mime-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Mh-Spam-Sp: Clean
Mh-Spam-Bc: Clean
Mh-Spam-Confidence: 99.99300%
X-Virus-Scanned: ClamAV version 0.91.2, clamav-milter version 0.91.2 on
X-Virus-Status: Clean


Please beware that there are current reports of phishing emails. Phishing is a type of scam designed to steal your personal information.

We will never request your information such as social security number, card number or PIN through email. Please do not respond to email
requests for this information. Being informed is your best defense. See the Protect Yourself link for ways of avoiding identity theft.

To help protect your account, we may occasionally need to take immediate action to block transactions in a particular area of the country.

For your protection, we have temporary deactivate your MasterCard/Debit Card.

How to reactivate your card

Activate your card online.

Enter your card number and Personal Identification Number (PIN)

After your card is activated, you are directed to additional information and shopping discounts

Who is?


lookup failed
Could not find a domain name corresponding to this IP address.
Domain Whois record

Don't have a domain name for which to get a record

Network Whois record

Queried with ""...

% [ node-1]
% Whois data copyright terms

inetnum: -
netname: KRNIC-KR
descr: KRNIC
descr: Korea Network Information Center
country: KR
admin-c: HM127-AP
tech-c: HM127-AP
remarks: ******************************************
remarks: KRNIC is the National Internet Registry
remarks: in Korea under APNIC. If you would like to
remarks: find assignment information in detail
remarks: please refer to the KRNIC Whois DB
remarks: ******************************************
mnt-by: APNIC-HM
mnt-lower: MNT-KRNIC-AP
changed: [email protected] 20000607
changed: [email protected] 20010606
source: APNIC

person: Host Master
address: 11F, KTF B/D, 1321-11, Seocho2-Dong, Seocho-Gu,
address: Seoul, Korea, 137-857
country: KR
phone: +82-2-2186-4500
fax-no: +82-2-2186-4496
e-mail: [email protected]
nic-hdl: HM127-AP
mnt-by: MNT-KRNIC-AP
changed: [email protected] 20020507
source: APNIC

inetnum: -
netname: PETINET-KR
country: KR
admin-c: JA68-KR
tech-c: JA68-KR
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at
changed: [email protected]
source: KRNIC

person: JinYoung An
address: Yangjeong 2-dong Busanjin-gu BUSAN
address: 273-57
country: KR
phone: +82-51-860-6255
e-mail: [email protected]
nic-hdl: JA68-KR
mnt-by: MNT-KRNIC-AP
changed: [email protected]
source: KRNIC

DNS records

DNS query for returned an error from the server: ServerFailure

No records to display

United Kingdom United States Nigeria x303
Safari x9 Acra-Ctnu Tgo-Pnjari Lgos-Ynde Lgos-Mndmba Lgs-Prku PrtHrcrt-Abche Lgos-Nttngu Bmko-Ctnu (wDQ) Frnce-Dbln (wPadme)
Safari x22 SS
Safari Sand Timer x3 Dr Ray Lgos-Ctnu,
Golden Pith x2 Safari x7 Tattoo x7 Closed lad accounts x9 Mortar Vcamera x14 Sand Timer x6 Team Turd Lgs-Dla Bnn-Lbra Acra-Dkar Dkr-Bnjul- Dkr-Tmbktu-Abche-Adre-N'djmna Lgos-Cairo-Aswn-Jail Ctnu-Lgos Ctnu-acra Lgos-Jbrg-Drbn-Prt-Elzbth-CT-Sprngbk-CT-Drbn-CT-Hrre-Lska-DsSlm-Mmbsa-Nirbi-Kmpla 28,510 Miles
Golden Pith Safari x2 Tattoo x6 Vcamera Sand Timer x2 Team Woody Acra-Sngpre Acra-Dkr-Rsso-Bmko Acra-Ctnu
Nurse Nastys Audi TTpony Whip Mc FryMortar Closed lad accounts pyramid Jack Boot

Last edited by dr stephen williams on Tue May 20, 2008 1:09 pm; edited 2 times in total
View user's profileSend private message
Akai Ryu
Chuck Norris

Joined: 11 Jun 2007
Posts: 1369

PostPosted: Tue May 20, 2008 5:42 am Reply with quoteBack to top

meyer wrote:
On another note, this forum does NOT deal with phishing websites. Please don't post them here.

You can either report them to the real banks in question, or send these phishing emails to and to

There is absolutely no need for us to try to close down phishing websites - the real banks are much better at that than we could ever be, and they are indeed very interested.

Several hundred fake escrows (and others) deaded--no longer counting. --dead a fake site today.

No, Akai, you're a wonderful bitch. --Reaper
View user's profileSend private messageVisit poster's websiteSkype Name
Display posts from previous:      
Post new topicReply to topic

 Jump to:   

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

E-Mail Header Analysis

All Content © 2003 -
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT