Reported .. and monitoring the data. Thanks ...
On 5 Feb 2007 at 15:47, Ryan Carter wrote: > Site is live and contains card data: > > http://dyeco.co.kr/.confirm/ > > Reported to PIRT. > > -----Original Message----- > Received: from smtp02.theplanet.com ([70.87.6.111]) by > DALD2EXCH01.PLANET.LOCAL with Microsoft SMTPSVC(6.0.3790.1830); > Sun, 4 Feb 2007 19:38:53 -0600 > Received: from mail.theplanet.com ([216.185.111.52]) by > smtp02.theplanet.com with Microsoft SMTPSVC(6.0.3790.1830); > Sun, 4 Feb 2007 19:38:53 -0600 > Return-path: <[EMAIL PROTECTED]> > Delivery-date: Sun, 04 Feb 2007 19:38:53 -0600 > Received: from localhost ([127.0.0.1] helo=[216.185.111.52]) > by mail.theplanet.com (envelope-from [EMAIL PROTECTED]) > with esmtp (Exim) > id 1HDson-0002BH-5T > for [EMAIL PROTECTED]; Sun, 04 Feb 2007 19:38:53 -0600 > Received: from mx01.inside.filter.theplanet.com ([172.16.214.180] > helo=mx01.filter.theplanet.com) > by mail.theplanet.com (envelope-from [EMAIL PROTECTED]) > with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim) id > 1HDsoX-0002B1-Ad > for [EMAIL PROTECTED]; Sun, 04 Feb 2007 19:38:37 -0600 > Received: from [219.94.131.171] (helo=mail.kigyoukablog.jp) > by mx01.filter.theplanet.com (envelope-from > [EMAIL PROTECTED]) > with esmtp (Exim) id 1HDsoQ-000JTC-B2 > for [EMAIL PROTECTED]; Sun, 04 Feb 2007 19:38:33 -0600 > Received: by mail.kigyoukablog.jp (Postfix, from userid 26) > id 96D32F83; Mon, 5 Feb 2007 10:03:12 +0900 (JST) > To: [EMAIL PROTECTED] > From: PayPal Inc. <[EMAIL PROTECTED]> > Content-Type: text/html > Message-Id: <[EMAIL PROTECTED]> > Date: Mon, 5 Feb 2007 10:03:12 +0900 (JST) > X-Spam-Level: +++ > X-Spam-Score: 3.8 > Subject: PayPal Shopping Cart Contents > X-OriginalArrivalTime: 05 Feb 2007 01:38:53.0364 (UTC) > FILETIME=[64B4BF40:01C748C6] > > > <http://www.paypalobjects.com/en_US/i/logo/paypal_logo.gif> > > Dear Customer, > > This email confirms that you have paid PHONEDEPOTUSA > ([EMAIL PROTECTED]) $239.95 USD using PayPal. > > This credit card transaction will appear on your bill as > "PAYPAL PHONEDEPOT*". > ...................................................................... > .. ... PayPal Shopping Cart Contents > > > Item Name: New MOTOROLA V3 PINK RAZR > RAZOR QUAD-BAND CELL PHONE > Quantity: 1 > Total: $219.95 USD > Cart Subtotal: $219.95 USD > Shipping Charge: $20.00 USD > Cart Total: $230.05 USD > ...................................................................... > .. ... Shipping Information > > > Shipping info: Bill Chang > 202 N Magnolia Dr. > Saco, ME 04072 > United States > Address Status: Unconfirmed > ...................................................................... > .. ... If you haven't authorized this charge, click the link below to > cancel the payment and get a full refound. > > Dispute Transaction > <http://dyeco.co.kr/.confirm/PayPal%20-%20Login.htm> > > _______________________________________________ > phishing mailing list > [email protected] > http://www.whitestar.linuxbox.org/mailman/listinfo/phishing > _______________________________________________ phishing mailing list [email protected] http://www.whitestar.linuxbox.org/mailman/listinfo/phishing
