Muziekvrienden.be
Scam Buster
212.50.160.34 <=> smtpout.karoo.kcom.com
212.50.160.0 - 212.50.191.255 is assigned to as12390.net KINGSTON (GB)
kcom.com is listed at RFC-Ignorant.org (abuse and postmaster)
The phish site is hosted at:
www.muziekvrienden.be => muziekvrienden.be
muziekvrienden.be => 77.95.248.191, No matching reverse DNS
77.95.248.191 <=> e3-srv76.server.eu
77.95.248.0 - 77.95.255.255 is assigned to
gl-ix.net Gelderland-Internet-Exchange (NL)
77.95.248.191 is listed at: Backscatter
Backscatter says:
Sorry 77.95.248.191 is blacklisted at
http://www.backscatterer.org/?ip=77.95.248.191
It was alive a few minutes ago.
------- Forwarded Message
Return-Path: <custome...@onlinesecurity.com>
[local routing snipped]
Received: from smtpout.karoo.kcom.com (smtpout.karoo.kcom.com
[212.50.160.34])
by ip-64-139-1-69.sjc.megapath.net (Postfix) with ESMTP id 004CBBCCE
for <"hal-use..."@ip-64-139-1-69.sjc.megapath.net>; Sun, 11 Jan 2009
04:54:22 -0800 (PST)
Message-Id: <79mlnl$1pv...@smtpout.karoo.kcom.com>
X-IronPort-AV: E=Sophos;i="4.37,248,1231113600";
d="scan'208";a="60793417"
Received: from 182-11-84-91.dsl.eclipse.co.uk (HELO User) ([91.84.11.182])
by smtpout.karoo.kcom.com with SMTP; 11 Jan 2009 12:54:17 +0000
From: "PayPal" <custome...@onlinesecurity.com>
Subject: Please Restore Your Account Access
Date: Sun, 11 Jan 2009 12:54:20 -0000
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
<p><img src="https://www.paypal.com/fr_XC/i/logo/paypal_logo.gif"><br>
<br>
<font face="Verdana" size="-1"> DEAR CUSTOMER,<br>
PayPal is pleased to notify our online banking customers
that <br>
we have successfully upgraded to a more secure and encrypted<br>
SSL servers to serve our
esteemed customers for a better and <br>
more efficent banking services
in the year 2009. <br>
Due to this recent upgrade
you are requested to update your <br>
account information by
following the reference below.
using our<br>
new secure and safe SSL servers. To validate your online banking account
<br>
click on <a
href="http://www.muziekvrienden.be/images/news_cats/Costum-PayPal/Paypal-Security/cgi-bin/us/security/update-paypal/service-peyment/update/login.aspx" targethttps://olb2.nationet.com/signon/index2.asp /main.htm"><strong>Update Online Banking</strong></a> . </font></p><p><font face="Verdana" size="-1"><br> <b>This Email has being sent to all our Bank customers, and it is<br> compulsory to follow as failure to verify account details will lead to<br> account suspension.</b><br> </font></p><p><font face="Verdana" size="-1"><br> Thank you. <br> PayPal Online Banking Security Team <br> 2009 PayPal internet Banking . All rights reserved. Version 1.0 31w23m3 </font></p>