BuxarNET.ru Support forum
Lithuanian => Mūsų projektų forumai => Buxar-Host.eu => Тема начата: BuxarNET admin от Июля 21, 07, 2005, 13:59:49 (EEST)
-
Jodas sаraрas klijentш
Иia raрisiu tuos kurie paюeide HOST\'o taisykles ir jiu akk buvo panaikinti.
T.p. visi рie zmones bus ineрati б bendrus nepakimш юmoniш sаraрus
-
Nik turboliuxaz ir Mr. Bazoka
IP 193.219.64.68
MSN baziuk@hotmail.com
e-mail baziuk@hotmail.com , turboliuxaz@yahoo.com
E-Gold: 2139642 (confirm)
Prezastis: SPAM\'er
Turejo nupirkes hosta: http://www.turboliuxaz.buxar-host.com (https://forum.buxarnet.ru/go.php?url=aHR0cDovL3d3dy50dXJib2xpdXhhei5idXhhci1ob3N0LmNvbQ==)
Irodimai:
Hello,
The user turboliu has been suspended as per the complaint below for running a paypal phishing site. Please respond after you have dealt with this matter.
Directory listing follows before complaint.
root@server [/home/turboliu/public_html/usage/paypal]# ls -al
ЙФПЗП 220
drwxr-xr-x 2 turboliu turboliu 4096 йАМ 7 22:51 ./
drwxr-xr-x 5 turboliu turboliu 4096 йАМ 8 06:49 ../
-rw-r--r-- 1 turboliu turboliu 112 йАМ 7 22:50 addr.gif
-rw-r--r-- 1 turboliu turboliu 257 йАМ 7 22:50 adress.png
-rw-r--r-- 1 turboliu turboliu 3680 йАМ 7 22:50 ccval.php
-rw-r--r-- 1 turboliu turboliu 620 йАМ 7 22:50 confirmation.htm
-rw-r--r-- 1 turboliu turboliu 2845 йАМ 7 22:50 ebscr.php
-rw-r--r-- 1 turboliu turboliu 4620 йАМ 7 22:50 email.html
-rw-r--r-- 1 turboliu turboliu 4620 йАМ 7 22:50 email.php
-rw-r--r-- 1 turboliu turboliu 33061 йАМ 7 22:51 formular.php
-rw-r--r-- 1 turboliu turboliu 321 йАМ 7 22:51 go1click.gif
-rw-r--r-- 1 turboliu turboliu 1003 йАМ 7 22:51 go1.gif
-rw-r--r-- 1 turboliu turboliu 1034 йАМ 7 22:51 go1roll.gif
-rw-r--r-- 1 turboliu turboliu 1124 йАМ 7 22:51 ie2.gif
-rw-r--r-- 1 turboliu turboliu 13605 йАМ 7 22:51 index.php
-rw-r--r-- 1 turboliu turboliu 3425 йАМ 7 22:51 linie.jpg
-rw-r--r-- 1 turboliu turboliu 13605 йАМ 7 22:51 login.html
-rw-r--r-- 1 turboliu turboliu 11073 йАМ 7 22:51 login.php
-rw-r--r-- 1 turboliu turboliu 16384 йАМ 7 22:50 .login.php.swp
-rw-r--r-- 1 turboliu turboliu 88 йАМ 7 22:51 pdownclick.gif
-rw-r--r-- 1 turboliu turboliu 123 йАМ 7 22:51 pdown.gif
-rw-r--r-- 1 turboliu turboliu 3096 йАМ 7 22:51 pin.html
-rw-r--r-- 1 turboliu turboliu 3425 йАМ 7 22:51 pp.jpg
-rw-r--r-- 1 turboliu turboliu 86 йАМ 7 22:51 ress.gif
-rw-r--r-- 1 turboliu turboliu 7376 йАМ 7 22:51 secure.jpg
-rw-r--r-- 1 turboliu turboliu 3327 йАМ 7 22:51 security.jpg
-rw-r--r-- 1 turboliu turboliu 72 йАМ 7 22:51 sline.gif
-rw-r--r-- 1 turboliu turboliu 43 йАМ 7 22:51 spacer.gif
-rw-r--r-- 1 turboliu turboliu 6973 йАМ 7 22:51 sys.php
-rw-r--r-- 1 turboliu turboliu 5026 йАМ 7 22:51 verify.jpg
-rw-r--r-- 1 turboliu turboliu 376 йАМ 7 22:51 webscr.php
[ SpamCop V1.466 ]
This message is brief for your comfort. Please use links below for details.
Spamvertised web site: http://www.turboliuxaz.buxar-host.com/usage/PayPal4/PayPal/ (https://forum.buxarnet.ru/go.php?url=aHR0cDovL3d3dy50dXJib2xpdXhhei5idXhhci1ob3N0LmNvbS91c2FnZS9QYXlQYWw0L1BheVBhbC8=)
http://www.spamcop.net/w3m?i=z1463575067z6...75b1624c95c22cz (https://forum.buxarnet.ru/go.php?url=aHR0cDovL3d3dy5zcGFtY29wLm5ldC93M20/aT16MTQ2MzU3NTA2N3o2ZTc3MmE5NzAyNzA2ZDM4MTU3NWIxNjI0Yzk1YzIyY3o=)
http://www.turboliuxaz.buxar-host.com/usage/PayPal4/PayPal/ (https://forum.buxarnet.ru/go.php?url=aHR0cDovL3d3dy50dXJib2xpdXhhei5idXhhci1ob3N0LmNvbS91c2FnZS9QYXlQYWw0L1BheVBhbC8=) is 66.197.205.11; Fri, 08 Jul 2005 17:22:31 GMT
[ Offending message ]
\"From SRS0=/nwI=VM=clust04-www04.powweb.com=salbum@bounce2.pobox.com Thu Jul 7 20:52:10 2005\"
Return-Path:
X-Original-To: x
Received: from gold.pobox.com (gold.pobox.com [208.210.124.73])
by mail1.panix.com (Postfix) with ESMTP id 3AF5058B29
for ; Thu, 7 Jul 2005 20:52:10 -0400 (EDT)
Received: from gold.pobox.com (localhost [127.0.0.1])
by gold.pobox.com (Postfix) with ESMTP id 07D1773843
for ; Thu, 7 Jul 2005 20:50:57 -0400 (EDT)
Delivered-To: x
Received: from clust04-www04.powweb.com (clust04-www04.powweb.com [66.152.98.44])
by gold.pobox.com (Postfix) with ESMTP id A6A3C7384C
for ; Thu, 7 Jul 2005 20:50:50 -0400 (EDT)
Received: by clust04-www04.powweb.com (Postfix, from userid 120065)
id D512B78724; Thu, 7 Jul 2005 17:29:13 -0700 (PDT)
To: x
Subject: Update your PayPal account.
From: PayPal Billing Department
Reply-To: PayPal@clust04-www04.powweb.com,
Billing@clust04-www04.powweb.com, Department@clust04-www04.powweb.com
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id:
Date: Thu, 7 Jul 2005 17:29:13 -0700 (PDT)
PayPal
dummy {}
BODY, TD {font-family: verdana,arial,helvetica,sans-serif;font-size
:12px;color: #000000;}
LI {line-height: 120%;}
UL.ppsmallborder {margin:10px 5px 10px 20px;}
LI.ppsmallborderli {margin:0px 0px 5px 0px;}
UL.pp_narrow {margin:10px 5px 0px 40px;}
hr.dotted {width: 100%; margin-top: 0px; margin-bottom: 0px; border-left
:#fff; border-right: #fff; border-top: #fff; border-bottom: 2px dotted #ccc;}
pp_label {font-family: verdana,arial,helvetica,sans-serif;font-size
:10px;font-weight: bold;color: #000000;}
pp_serifbig {font-family: serif;font-size: 20px;font-weight: bold;color
:#000000;}
pp_serif{font-family: serif;font-size: 16px;color: #000000;}
pp_sansserif{font-family: verdana,arial,helvetica,sans-serif; font-size
:16px;color: #000000;}
pp_heading {font-family: verdana,arial,helvetica,sans-serif;font-size
:18px;font-weight: bold;color: #003366;}
pp_subheadingeoa {font-family
:verdana,arial,helvetica,sans-serif;font-size: 15px;font-weight: bold;color
:#000000;}
pp_subheading {font-family: verdana,arial,helvetica,sans-serif;font-size
:16px;font-weight: bold;color: #003366;}
pp_sidebartext {font-family: verdana,arial,helvetica,sans-serif;font-size
:11px;color: #003366;}
pp_sidebartextbold {font-family
:verdana,arial,helvetica,sans-serif;font-size: 11px;font-weight: bold;color
:#003366;}
pp_footer {font-family: verdana,arial,helvetica,sans-serif;font-size
:11px;color: #aaaaaa;}
pp_button {font-size: 13px; font-family
:verdana,arial,helvetica,sans-serif; font-weight: 400; border-style:outset;
color:#000000; background-color: #cccccc;}
pp_smaller {font-family: verdana,arial,helvetica,sans-serif;font-size
:10px;color: #000000;}
pp_smallersidebar {font-family
:verdana,arial,helvetica,sans-serif;font-size: 10px;color: #003366;}
ppem106 {font-weight: 700;}
Dear valued PayPal® Member
It has come to our attention that your
Congratulations!PayPal®
account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. If you could please take 5-10 minutes out of your online experience and update your personal records you will not run into any future problems with the online service.
You must
click the link below and enter your password on the following page
to Update your email address.
Click here to Update your account
However, failure to update your records will result in account suspension. Please update your records on or before: Buy from an online auctionPay on a merchant
websiteSend money to anyone with an email address
You can also confirm your However, failure to update your records will result in account suspension. Please update your records on or before: email address by logging into your PayPal
account at https://www.paypal.com/us/ (https://forum.buxarnet.ru/go.php?url=aHR0cHM6Ly93d3cucGF5cGFsLmNvbS91cy8=). Click on
the \"Confirm email\" link in the Activate Account box and then enter this
confirmation number: 1328-8599-4830-9811-3174
Thank you for using PayPal!
The PayPal Team
Please do not reply to this e-mail. Mail sent to this address cannot be
answered. For assistance,
log
in to your PayPal account and choose the \"Help\" link in the footer of
any page.
To receive email notifications in plain text instead of HTML, update
your preferences here.
PayPal Email ID PP468
Protect Your Account
Info
Make sure you never provide your password to
fraudulent websites.
To safely and securely access the PayPal
website or your account, open a new web browser (e.g. Internet Explorer or
Netscape) and type in the PayPal URL (https://www.paypal.com/us/) to be
sure you are on the real PayPal site.
PayPal will never ask you to
enter your password in an email.
For more information on protecting
yourself from fraud, please review our Security Tips at
https://www.paypal.com/us/securitytips (https://forum.buxarnet.ru/go.php?url=aHR0cHM6Ly93d3cucGF5cGFsLmNvbS91cy9zZWN1cml0eXRpcHM=)
NOTE: This email contained Javascript, which was removed upon arrivalNOTE: This email contained Javascript, which was removed upon arrival
Thank you,
Technical Support
BurstNET Technologies, Inc.
Your Server Details
-----------------------------------------------------------------
Server Name.: server.localserver.ru
Primary IP..: 66.197.205.5
Hosting Type: NOCSTER
(please reply back and correct us if these details are incorrect)
-
Nik Ultimate
IP 193.219.64.229
e-mail egold@ultimate-designs.net
E-Gold: 2110012 (ForBussiness)
Prezastis: SPAM\'er
Turejo nupirkes hosta: http://march.buxar-host.com (https://forum.buxarnet.ru/go.php?url=aHR0cDovL21hcmNoLmJ1eGFyLWhvc3QuY29t)
Irodimai:
Hello,
We have received another complaint. If we receive another complaint we will suspend your server. Please get back to us as soon as possible once action has been taken.
The original message follows
:-----------------------------
[ SpamCop V1.466 ]
This message is brief for your comfort. Please use links below for details.
Spamvertised web site: http://march.buxar-host.com/lloyds.co.uk/s...e/access/login/ (https://forum.buxarnet.ru/go.php?url=aHR0cDovL21hcmNoLmJ1eGFyLWhvc3QuY29tL2xsb3lkcy5jby51ay9zZWN1cmUvYWNjZXNzL2xvZ2luLw==)
http://www.spamcop.net/w3m?i=z1471935546z7...6f6549b63f56eaz (https://forum.buxarnet.ru/go.php?url=aHR0cDovL3d3dy5zcGFtY29wLm5ldC93M20/aT16MTQ3MTkzNTU0Nno3OTFiYTllZjBhOTgxZjU0ZDY2ZjY1NDliNjNmNTZlYXo=)
http://march.buxar-host.com/lloyds.co.uk/s...e/access/login/ (https://forum.buxarnet.ru/go.php?url=aHR0cDovL21hcmNoLmJ1eGFyLWhvc3QuY29tL2xsb3lkcy5jby51ay9zZWN1cmUvYWNjZXNzL2xvZ2luLw==) is 66.197.205.11; Wed, 20 Jul 2005 07:52:55 GMT
[ Additional comments from recipient ]
> This is a Bank Phishing Fraud. I do not have a Lloyds account
[ Offending message ]
Received: by zetnet.co.uk (mbox x)
(with Cubic Circle\'s cucipop (v1.31z6 2004-07-06) Wed Jul 20 08:22:21 2005)
X-From_: xtradersbiz@clust04-www06.powweb.com Tue Jul 19 23:46:24 2005
Received: from clust04-www06.powweb.com (clust04-www06.powweb.com [66.152.98.46])
by zetnet.co.uk (8.13.4/8.13.4/Debian-1) with ESMTP id j6JMkMXq001096
for ; Tue, 19 Jul 2005 23:46:23 +0100
Received: by clust04-www06.powweb.com (Postfix, from userid 137870)
id 5D4D2A24C7; Tue, 19 Jul 2005 15:46:26 -0700 (PDT)
To: x
Subject: [Notice] Your Lloyds TSB account Expired
From: Lloyds TSB Services
Reply-To: services@lloydstsb.co.uk
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id:
Date: Tue, 19 Jul 2005 15:46:26 -0700 (PDT)
personal & business account
Security Alert
Please note that Your Lloyds TSB Online Account is about to expire. In order for it to remain active, please Use the link below to proceed and access your account.
https://online.lloydstsb.co.uk/customer/Login.ibc (https://forum.buxarnet.ru/go.php?url=aHR0cHM6Ly9vbmxpbmUubGxveWRzdHNiLmNvLnVrL2N1c3RvbWVyL0xvZ2luLmliYw==)
NOTE: This email contained Javascript, which was removed upon arrival
Thank you,
Technical Support
BurstNET Technologies, Inc.
Your Server Details
-----------------------------------------------------------------
Server Name.: server.localserver.ru
Primary IP..: 66.197.205.5
Hosting Type: NOCSTER
(please reply back and correct us if these details are incorrect)
-
Nik: Poukis
V. P.:
Gimino data
Adresas:
IP 82.140.172.85
WWW hotmonitors.net
MSN poukis@gmail.com
ICQ
e-mail poukis@gmail.com
WMID:
Z:
StormPay: poukis@gmail.com
MoneyBookers:
E-Gold: 2609752 (Poukis offers)
Prezastis: Uzsiminejo spamo issiuntimui
Turejo nupirkes hosta: http://poukis.buxar-host.com (https://forum.buxarnet.ru/go.php?url=aHR0cDovL3BvdWtpcy5idXhhci1ob3N0LmNvbQ==)
Displaying Message ID 1EqpOt-0008J9-Ku
Main >> Email >> Mail Queue Manager
Delete Message | Deliver Message Now | Return to Mail Queue 1EqpOt-0008J9-Ku-H
poukisb 33324 33327
<poukisb@server.localserver.ru>
1135592179 0
-ident poukisb
-received_protocol local
-body_linecount 92
-auth_id poukisb
-auth_sender poukisb@server.localserver.ru
-allow_unqualified_recipient
-allow_unqualified_sender
-deliver_firsttime
-local
XX
1
queensha@msn.com
147P Received: from poukisb by server.localserver.ru with local (Exim 4.52)
id 1EqpOt-0008J9-Ku
for queensha@msn.com; Mon, 26 Dec 2005 13:16:19 +0300
021T To: queensha@msn.com
040 Subject: your account will be suspended
044F From: service@paypal.us <service@paypal.us>
028R Reply-To: service@paypal.us
018 MIME-Version: 1.0
024 Content-Type: text/html
032 Content-Transfer-Encoding: 8bit
054I Message-Id: <E1EqpOt-0008J9-Ku@server.localserver.ru>
038 Date: Mon, 26 Dec 2005 13:16:19 +0300
1EqpOt-0008J9-Ku-D
<table cellSpacing=\"0\" cellPadding=\"0\" width=\"600\" align=\"center\" border=\"0\">
<tr vAlign=\"top\">
<td><a href=\"https://www.paypal.com/us\" target=\"_blank\">
<img alt=\"PayPal\" src=\"http://images.paypal.com/en_US/i/logo/email_logo.gif\" border=\"0\" width=\"255\" height=\"35\"></a>
</td>
</tr>
</table>
<table cellSpacing=\"0\" cellPadding=\"0\" width=\"100%\" border=\"0\">
<tr>
<td width=\"100%\" background=\"http://images.paypal.com/images/bg_clk.gif\">
<img height=\"29\" src=\"http://images.paypal.com/images/pixel.gif\" width=\"1\" border=\"0\"></td>
</tr>
<tr>
<td>
<img height=\"10\" src=\"http://images.paypal.com/images/pixel.gif\" width=\"1\" border=\"0\"></td>
</tr>
</table>
<table cellSpacing=\"0\" cellPadding=\"0\" width=\"600\" align=\"center\" border=\"0\">
<tr vAlign=\"top\">
<td width=\"400\">
<table cellSpacing=\"0\" cellPadding=\"5\" width=\"600\" border=\"0\">
<tr vAlign=\"top\">
<td width=\"590\">
<table cellSpacing=\"0\" cellPadding=\"0\" width=\"100%\" border=\"0\">
<tr>
<td class=\"pp_heading\" align=\"left\"> </td>
</tr>
</table>
</td>
</tr>
<tr>
<td class=\"pptext\" width=\"590\">Dear Paypal valued member,<br>
<br>
Due to concerns, for the safety and integrity of the paypal<br>
account we have issued this warning message.<br>
<br>
It has come to our attention that your account information needs<br>
to be updated due to inactive members, frauds and spoof reports.<br>
If you could please take 5-10 minutes out of your online experience and
renew<br>
your records you will not run into any future problems with the online
service.<br>
However, failure to update your records will result in account
suspension <br>
Once you have updated your account records your paypal account<br>
service will not be interrupted and will continue as normal.<br>
<br>
Please follow the link below and login to your account<br>
and renew your account information
<p><a href=\"http://www.danielkitroser.com/images/Online%20Paypal%20Update%20Center%20www.paypal.com/\" target=\"_blank\">
https://www.paypal.com/cgi-bin/webscr?cmd=_...a></p> (https://forum.buxarnet.ru/go.php?url=aHR0cHM6Ly93d3cucGF5cGFsLmNvbS9jZ2ktYmluL3dlYnNjcj9jbWQ9X2xvZ2luLXJ1biZsdDsvYSZndDsmbHQ7L3AmZ3Q7)
<p>Sincerely,<br>
Paypal customer department!</td>
</tr>
<tr>
<td width=\"590\">
<table cellSpacing=\"0\" cellPadding=\"0\" width=\"100%\" border=\"0\">
<tr>
<td class=\"pp_footer\"><font color=\"#c0c0c0\" size=\"2\">Please do not
reply to this e-mail. Mail sent to this address cannot be answered.
For assistance, </font><font size=\"2\">
<a href=\"https://www.paypal.com/us/cgi-bin/webscr?cmd=_login-run\" target=\"_blank\">
<font color=\"#c0c0c0\">log in</font></a><font color=\"#c0c0c0\"> to
your PayPal account and choose the \"Help\" link in the footer of any
page.<br>
<br class=\"h10\">
To receive email notifications in plain text instead of HTML, update
your preferences </font>
<a href=\"https://www.paypal.com/us/PREFS-NOTI\" target=\"_blank\">
<font color=\"#c0c0c0\">here</font></a></font><font color=\"#c0c0c0\" size=\"2\">.
</font></td>
</tr>
<tr>
<td>
<img height=\"10\" src=\"http://images.paypal.com/en_US/i/scr/pixel.gif\" width=\"1\" border=\"0\"></td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>
Pasto deziutei, priskirtai hostui, guli 1188 grazintu spam laisku
-
Kur galima rasti hostingo taisykles? Jos kiek zinau niekur nera publikuojamos
-
Kur galima rasti hostingo taisykles? Jos kiek zinau niekur nera publikuojamos
Nereikia skaititi taisikliu, kad zinuoti, kad SPAM yra draudziamas dalikas (ir uz jis beja yra baudziama)
-
Buxar nesupratau kodel bet nebeiveikai hostas!Atejo man vakar laiskas tipo is tavo kompanijos,kurio nesupratau krc as:
From : <hotbuxa@server.localserver.ru> Sent : Friday, March 24, 2006 6:03 PM To : paulenas87@hotmail.com Subject : GO FOR PROFIT [ MY WEBSITE ] | | | Inbox Vardas: admin El. paštas: admin@egold.com Siuntejo IP: 87.247.127.76 Hello, we see that you are stupid monkey and we will suspend your account after four days . admin greetz
nesupratau kame cia kampas!Ir neveikai dabar puslapis is viso!O reklamos pripirkes ir viskas nuplauke bl ir ne pirma karta jau!!!
-
Cia laiskas ne is mano kompanijos
Mano IP jei kas 84.240.*.*
Matit kaskas pokstauja. o del histo, tai turejau nusiskundimu. Serveris kelem valandom luzes buvo