PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : Subject: Congratulations You Have Won A PowerSeller account at eBay



Sven Udo
25.08.2005, 02:00
Habe ich heute in "Australien" erhalten :skull:! Neue "phishing/exploits" Masche? Oder schon mal da gewesen?
From eBay Wed Aug 24 xx:xx:xx 2005
X-Apparently-To: xxxxxxxx [at] yahoo.com.au via 66.218.93.231; Wed, 24 Aug 2005 xx:xx:xx -0700
X-YahooFilteredBulk: 81.56.74.165
X-Originating-IP: [81.56.74.165]
Return-Path: <laurence [at] xserve.xserve>
Authentication-Results: mta101.mail.re2.yahoo.com from=ebay.com; domainkeys=neutral (no sig)
Received: from 81.56.74.165 (EHLO XSERVE) (81.56.74.165) by mta101.mail.re2.yahoo.com with SMTP; Wed, 24 Aug 2005 xx:xx:xx -0700
Received: by XSERVE (Postfix, from userID: [ID filtered]
To: poor [at] spamvictim.tld
Subject: Congratulations You Have Won A PowerSeller account at eBay
From: "eBay" <emailconfirm [at] ebay.com> Add to Address Book
Content-Type: text/html
Message-ID: [ID filtered]
Date: Thu, 25 Aug 2005 xx:xx:xx +0200 (CEST)
Content-Length: 1883
Congratulations! joining the eBay Silver PowerSeller Program. Come and join us. When you join the PowerSeller program, you'll be able to receive more of the support you'll need for continued success. So, why wait?
Join now: http://200.3.123.58/.secured/secure_SSL/ws/eBayISAPIdllSignIn.php
PowerSeller icon next to your User ID: [ID filtered]

PowerSeller Priority Support via email webform and phone support at Silver level and above.

Exclusive offerings on the PowerSeller portal--check in frequently to see updated program benefits and special offers!

Discussion Board for you to network with other PowerSellers.
Free PowerSeller Business Templates for business cards and letterhead.

Membership to the PowerSeller program is FREE.
Please note that you must register by the last day of the month. Again, congratulations and best wishes for your continued success!

Regards,
eBay PowerSeller Team

If you agree with this rank please Become an eBay Power Seller within 24 hours
------------------------------------------------------------------------

eBay sent this communication to you because of your outstanding feedback, high sales, and compliance with eBay marketplace policies. If you would not like to be invited to join the PowerSeller program, follow the directions above, click "Member Sign In", and then click "Decline" at the bottom of the page. Please note that it may take up to 10 days to process your request.
Copyright © 2005 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
eBay and the eBay logo are trademarks of eBay Inc.
eBay is located at 2145 Hamilton Avenue, San Jose, CA 95125.

mink
25.08.2005, 03:28
mit dem PHP üben wir wohl noch mal :

der Content-Type ist text/plain, ehrliche Browser (Firefox) zeigen nur den Quelltext an.

mink

homer
25.08.2005, 08:17
http://200.3.123.58/.secured/secure_SSL/ws/eBayISAPIdllSignIn.php
Hmm, sieht aus, als ob der Server vom José gehackt wurde (.secure ist unter Unixen ein verstecktes Verzeichnis). unter http://200.3.123.58/ gibts einen Link, um mit José in Kontakt zu treten (Personal Data). Sollt man ihm mal mitteilen, das mit Ebay auf seinem Server.

schara56
19.10.2007, 18:18
Received: from host236-254-static.73-81-b.business.telecomitalia.it ([81.73.254.236] helo=User)
by lynx.dnsprincipal.com with esmtpa (Exim 4.63)
(envelope-from <confirm [at] ebaysecure.com>)
ID: [ID filtered]
http://powerselz.com/home.htm

Gespamt über Italien und gehostet in vp206044.static.uac1.hknet.com - ohne Worte.

Eniac
19.10.2007, 19:31
Ähem, soweit ich das sehe ist powerselz.com bei Affinity / Gate.com gehostet und leitet weiter auf den hknet-URL. Sollte kein Problen sein, die Seite zu killen.


Eniac

schara56
27.10.2007, 11:01
Received: from mail.cmb.co.uk (EHLO mail.cmb.co.uk) [213.120.116.167]
by mx0.gmx.net (mx047) with SMTP; 27 Oct 2007 xx:xx:xx +0200
http://aolsearch.aol.com/aol/redir?clickedItemURN=http://1126793554:82/cgi3-eBayISAPII/index.php
-> dahinter steht dann die IP-Adresse http://67.41.129.82. Ohne Redirect lautet der Link entsprechend http://67.41.129.82:82/cgi3-eBayISAPII/signin.ebay.com_ws_eBayISAPI.dllSignIn%20ru=http=www.ebay.com.htm - Viel Spaß beim Eintragen.
Gespamt wurde über GB und gehostet in den USA.