Dr Strange
23-02-05, 05:20
So far the only emails I've ever gotten from C2P was the general sign up/confirmation/billing ones.
Recently I've gotten 2 emails on my main ISP email account which is NEVER used to sign up for any forum, or program or anything other than official things such as payment/email from C2P, my ISP etc
The first one I just dismissed as spam as the title was "A whole world of Paypal benefits", since I never use Paypal nor plan too.
Today I get one, same title yet its "A whole world of Click2Pay benefits".
I figure its just some spam related to spyware. Ad Aware, Spybot, HijackThis, and MS Anti Spyware all say I'm clean, as does Norton. So its not a spyware or virus relaying a very unknown email to someone.
AND, if it was a common thing such as a spammer just scanning a domain for email accounts, how would they know to email an American email account with a overseas payment company thats not really known over here?
Some more evidence:
Return-path: <williamrbc@forwardslash.com>
Return-path: <william@riverbelle.com>
Received: from ms-mta-03-eri0 (***@***********
by ***@***********
(iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003))
with ESMTP id <***@***********> for
***@***********; Tue, 22 Feb 2005 08:44:46 -0500 (EST)
Received: from ***@*********** (***@*********** []) by ***@***********
(iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003))
with ESMTP id <***@***********> for
***@*********** (ORCPT ***@***********); Tue,
22 Feb 2005 08:44:44 -0500 (EST)
Received: from mx2.mailqueries.com (196.14.133.212) by orngca-mx-04.mgw.rr.com
with ESMTP; Tue, 22 Feb 2005 08:44:44 -0500
Received: from cptcasmail01.capetown.fwslash.net (Not Verified[10.3.3.44])
by mx2.mailqueries.com id <B421b3746000c>; Tue, 22 Feb 2005 15:44:38 +0200
Received: from ([10.3.1.164]) by cptcasmail01.capetown.fwslash.net with
Microsoft SMTPSVC(5.0.2195.6713); Tue, 22 Feb 2005 15:44:37 +0200
Date: Tue, 22 Feb 2005 15:44:37 +0200
From: william@riverbelle.com
Subject: A whole World of Click2Pay Benefits
To: ***@***********
Reply-to: support@bellerockgaming.com
Message-id: <CPTCASMAIL01IgtwOJ800002ae6@cptcasmail01.capetown.fwslash.net>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Original-recipient: ***@***********
X-OriginalArrivalTime: 22 Feb 2005 13:44:37.0781 (UTC)
FILETIME=[A6ABBC50:01C518E4]
Apon checkng our this riverbelle.com (one of the first domains listed), you are forwarded to a River Belle Online Casino. We all know C2P is used online for casino sites and gambling.
Just curious if anyone else has something similar.
Recently I've gotten 2 emails on my main ISP email account which is NEVER used to sign up for any forum, or program or anything other than official things such as payment/email from C2P, my ISP etc
The first one I just dismissed as spam as the title was "A whole world of Paypal benefits", since I never use Paypal nor plan too.
Today I get one, same title yet its "A whole world of Click2Pay benefits".
I figure its just some spam related to spyware. Ad Aware, Spybot, HijackThis, and MS Anti Spyware all say I'm clean, as does Norton. So its not a spyware or virus relaying a very unknown email to someone.
AND, if it was a common thing such as a spammer just scanning a domain for email accounts, how would they know to email an American email account with a overseas payment company thats not really known over here?
Some more evidence:
Return-path: <williamrbc@forwardslash.com>
Return-path: <william@riverbelle.com>
Received: from ms-mta-03-eri0 (***@***********
by ***@***********
(iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003))
with ESMTP id <***@***********> for
***@***********; Tue, 22 Feb 2005 08:44:46 -0500 (EST)
Received: from ***@*********** (***@*********** []) by ***@***********
(iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003))
with ESMTP id <***@***********> for
***@*********** (ORCPT ***@***********); Tue,
22 Feb 2005 08:44:44 -0500 (EST)
Received: from mx2.mailqueries.com (196.14.133.212) by orngca-mx-04.mgw.rr.com
with ESMTP; Tue, 22 Feb 2005 08:44:44 -0500
Received: from cptcasmail01.capetown.fwslash.net (Not Verified[10.3.3.44])
by mx2.mailqueries.com id <B421b3746000c>; Tue, 22 Feb 2005 15:44:38 +0200
Received: from ([10.3.1.164]) by cptcasmail01.capetown.fwslash.net with
Microsoft SMTPSVC(5.0.2195.6713); Tue, 22 Feb 2005 15:44:37 +0200
Date: Tue, 22 Feb 2005 15:44:37 +0200
From: william@riverbelle.com
Subject: A whole World of Click2Pay Benefits
To: ***@***********
Reply-to: support@bellerockgaming.com
Message-id: <CPTCASMAIL01IgtwOJ800002ae6@cptcasmail01.capetown.fwslash.net>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Original-recipient: ***@***********
X-OriginalArrivalTime: 22 Feb 2005 13:44:37.0781 (UTC)
FILETIME=[A6ABBC50:01C518E4]
Apon checkng our this riverbelle.com (one of the first domains listed), you are forwarded to a River Belle Online Casino. We all know C2P is used online for casino sites and gambling.
Just curious if anyone else has something similar.