Hallo,

Heb al een paar keer deze email aangekregen en heb een vermoeden dat het een virus is door de bijlage...
Is dit een virus?
Ga de bijlage wel niet openen he :lol:
http://img257.imageshack.us/img257/3709/hallmarkuh6.jpg

@Mosquitos : ik heb ook reeds Hallmark E-Cards verstuurd en gekregen, inderdaad krijgt men dan een dergelijke mail maar bij mijn weten zit er achter Hallmark niets verkeerd.
U kunt dit bovendien checquen door naar de Hallmark site te gaan en er een op te sturen naar Uzelf, U zult zien, no problems.

De email is wel degelijk een virus, het e-mail adres is waarschijnlijk gespoofd.
De e-mail is niet afkomstig van Hallmark zelf, dat zul je ook zo vinden in de headers.

Niet openen dus.

De email is wel degelijk een virus, het e-mail adres is waarschijnlijk gespoofd.
De e-mail is niet afkomstig van Hallmark zelf, dat zul je ook zo vinden in de headers.

Niet openen dus.
Dit is de broncode...



X-Message-Delivery: Vj0zLjQuMDt1cz0wO2w9MDthPTA=
X-Message-Status: n:0
X-SID-PRA: postcards@hallmark.com
X-SID-Result: Neutral
X-Message-Info: 6sSXyD95QpVtxyi8XQRzLOLTgsK53jJr0lGxzJRqrrJDs0deCN FpzmNVnXYHcaQ3GVNcB5ZpPGfdDH7rFRFoHA==
Received: from hallmark.com ([217.64.251.146]) by bay0-mc9-f8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Fri, 25 Jul 2008 00:44:58 -0700
From: postcards@hallmark.com
To: e-mailadres verwijderd om spam te voorkomen.
Subject: You've received A Hallmark E-Card!
Date: Fri, 25 Jul 2008 09:32:27 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0001_CB320FB0.21ED89C3"
X-Priority: 3
X-MSMail-Priority: Normal
Return-Path: postcards@hallmark.com
Message-ID: <BAY0-MC9-F8SJ2OFVBL00B0B9E3@BAY0-MC9-F8.BAY0.HOTMAIL.COM>
X-OriginalArrivalTime: 25 Jul 2008 07:44:59.0010 (UTC) FILETIME=[56AA5620:01C8EE2A]

This is a multi-part message in MIME format.

------=_NextPart_000_0001_CB320FB0.21ED89C3
Content-Type: text/html;
charset="Windows-1252"
Content-Transfer-Encoding: 8bit

<TABLE cellSpacing=0 cellPadding=3 width="97%" border=0><TBODY><TR><TD><TABLE cellSpacing=0 cellPadding=0 width=617 border=0><TBODY><TR><TD>http://www.hallmark.com/wcsstore/HallmarkStore/images/globalNav/gnav_logo.gif (http://www.hallmark.com/)http://www.hallmark.com/wcsstore/HallmarkStore/images/globalNav/gnav_shop.gifhttp://www.hallmark.com/wcsstore/HallmarkStore/images/globalNav/gnav_hmkmag.gifhttp://www.hallmark.com/wcsstore/HallmarkStore/images/globalNav/gnav_ecards.gifhttp://www.hallmark.com/wcsstore/HallmarkStore/images/globalNav/gnav_gcs.gif</TD></TR></TBODY></TABLE><TABLE cellSpacing=0 cellPadding=0 width=617 border=0><TBODY><TR><TD vAlign=center bgColor=#e0d8d0 height=28> You have recieved A Hallmark E-Card.</TD></TR><TR><TD><TABLE cellSpacing=0 cellPadding=0 width="100%" border=0><TBODY><TR><TD colSpan=3 height=35></TD></TR><TR><TD width=20></TD><TD>Hello!

You have recieved a Hallmark E-Card from your friend.

To see it, check the attachment.

There's something special about that E-Card feeling. We invite you to make a friend's day and send one.

Hope to see you soon,
Your friends at Hallmark

Your privacy is our priority. Click the "Privacy and Security" link at the bottom of this E-mail to view our policy.
</TD><TD width=20></TD></TR><TR><TD colSpan=3 height=35></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE><TABLE borderColor=#a8a098 height=32 cellSpacing=0 cellPadding=0 width=617 bgColor=#f0f0e8 border=0><TBODY><TR><TD height=32>Hallmark.com | Privacy & Security | Customer Service | Store Locator </TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE>




------=_NextPart_000_0001_CB320FB0.21ED89C3
Content-Type: application/octet-stream;
name="postcard.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="postcard.zip"

------=_NextPart_000_0001_CB320FB0.21ED89C3--


</BAY0-MC9-F8SJ2OFVBL00B0B9E3@BAY0-MC9-F8.BAY0.HOTMAIL.COM>

ip waarbij broncode staat ie iig niet van hallmark, maar ik weet niet zo veel van headers lezen :P

Ip wat erbij staat:

217.64.251.146 BE - mac-ant 16 jul 08:17 Nederlands

ip waarbij broncode staat ie iig niet van hallmark, maar ik weet niet zo veel van headers lezen :P

Ip wat erbij staat:

217.64.251.146 BE - mac-ant 16 jul 08:17 Nederlands

Tis een IP van belgië dan nog :wtf:


Checking IP: 217.64.251.146...
Name: 217.64.251.146.mactelecom.net
IP: 217.64.251.146
Domain: mactelecom.net

Querying root.rwhois.net:4321 for mactelecom.net...

Querying whois.tucows.com for mactelecom.net...
Registrant:
MAC Telecom
av. Louise 326
Brussels, Ixelles 1050
BE

Domain name: MACTELECOM.NET


Administrative Contact:
Jabon, Helene
av. Louise 326
Brussels, Ixelles 1050
BE
+32 2 790 90 90 Fax: +32 2 790 90 91

Technical Contact:
Jabon, Helene
av. Louise 326
Brussels, Ixelles 1050
BE
+32 2 790 90 90 Fax: +32 2 790 90 91



Registration Service Provider:
MAC Telecom Hostmaster
32 2 790 90 90
32 2 790 90 91 (fax)



Registrar of Record: TUCOWS, INC.
Record last updated on 15-Apr-2008.
Record expires on 28-Apr-2009.
Record created on 28-Apr-2003.

Registrar Domain Name Help Center:


Domain servers in listed order:
NS1.MACTELECOM.NET 82.196.201.17
NS0.MACTELECOM.NET 217.64.240.18


Domain status: clientTransferProhibited
clientUpdateProhibited

The Data in the Tucows Registrar WHOIS database is provided to you by Tucows
for information purposes only, and may be used to assist you in obtaining
information about or related to a domain name's registration record.

Tucows makes this information available "as is," and does not guarantee its
accuracy.

By submitting a WHOIS query, you agree that you will use this data only for
lawful purposes and that, under no circumstances will you use this data to:
a) allow, enable, or otherwise support the transmission by e-mail,
telephone, or facsimile of mass, unsolicited, commercial advertising or
solicitations to entities other than the data recipient's own existing
customers; or (b) enable high volume, automated, electronic processes that
send queries or data to the systems of any Registry Operator or
ICANN-Accredited registrar, except as reasonably necessary to register
domain names or modify existing registrations.

The compilation, repackaging, dissemination or other use of this Data is
expressly prohibited without the prior written consent of Tucows.

Tucows reserves the right to terminate your access to the Tucows WHOIS
database in its sole discretion, including without limitation, for excessive
querying of the WHOIS database or for failure to otherwise abide by this
policy.

Tucows reserves the right to modify these terms at any time.

By submitting this query, you agree to abide by these terms.

NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY. LACK OF A DOMAIN
RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.



Querying whois.arin.net for 217.64.251.146...

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 217.0.0.0 - 217.255.255.255
CIDR: 217.0.0.0/8
NetName: 217-RIPE
NetHandle: NET-217-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: NS-EXT.ISC.ORG
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at
RegDate: 2000-06-05
Updated: 2005-07-27

# ARIN WHOIS database, last updated 2008-07-25 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Querying whois.ripe.net:43 for 217.64.251.146...
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '217.64.251.0 - 217.64.251.255'

inetnum: 217.64.251.0 - 217.64.251.255
netname: MAC-ANT02
descr: Mac Telecom Antwerp 02
country: BE
admin-c: MAC16-RIPE
tech-c: MAC16-RIPE
status: ASSIGNED PA
mnt-by: MAC-TELECOM-MNT
mnt-lower: MAC-TELECOM-MNT
mnt-routes: MAC-TELECOM-MNT
source: RIPE # Filtered
remarks: INFRA-AW

role: MAC Telecom RIPE Role
abuse-mailbox
address: MAC Telecom
address: Blue Tower
address: Avenue Louise 326
address: 1050 Brussels
address: Belgium
admin-c: VDK5-RIPE
tech-c: VDK5-RIPE
nic-hdl: MAC16-RIPE
source: RIPE # Filtered

% Information related to '217.64.240.0/20AS29096'

route: 217.64.240.0/20
descr: MACTELECOM-BLOCK
origin: AS29096
mnt-by: MAC-TELECOM-MNT
source: RIPE # Filtered



Querying whois.abuse.net for mactelecom.net...
(default, no info)