Contacted site on-call. They *thought* they took this down earlier today. The on-call is about to rain on the tech's parade! :)
Thanks. On 31 Mar 2007 at 12:16, Steve Pirk wrote: > Ebay phishing site at: > > http://diha.login.com/SIngIn/signin.ebay.com/ws/eBayISAPI/index.htm > > -- > Steve > panic: can't find / > > ---------- Forwarded message ---------- > Return-Path: <[EMAIL PROTECTED]> > Received: from hades.letsbuild.ch (hades.letsbuild.ch [62.2.150.180]) > by mail.pirk.com (8.13.7/8.12.0.Beta19) with ESMTP id l2VEIPDK002019 > for <[EMAIL PROTECTED]>; Sat, 31 Mar 2007 06:18:25 -0800 > Received: from herkules.letsbuild.ch (herkules.letsbuild.ch > [62.2.150.182]) > by hades.letsbuild.ch (Postfix) with ESMTP id 457921637B > for <[EMAIL PROTECTED]>; Sat, 31 Mar 2007 16:11:12 +0200 (CEST) > Received: by herkules.letsbuild.ch (Postfix, from userid 0) > id 2B9741BB472; Sat, 31 Mar 2007 16:11:12 +0200 (CEST) > To: [EMAIL PROTECTED] > Subject: Message from eBay Member regarding Item #138811728649 > Message-ID: <[EMAIL PROTECTED]> > From: "From: eBay Member allenpeggy" <[EMAIL PROTECTED]> > Content-Type: text/html > Date: Sat, 31 Mar 2007 16:11:12 +0200 (CEST) > > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" > "http://www.w3.org/TR/html4/loose.dtd";><html id="html" > class="noscroll"><head><meta http-equiv="Content-Type" > content="text/html; charset=iso-8859-1"><meta http-equiv="EXPIRES" > content="0"><meta http-equiv="Pragma" > content="no-cache"><title>Web-Based Email :: View :: </title><link > rel="stylesheet" href="webapp_1_0_retro.css?version=Nwbe_4_8_7" > type="text/css"><link rel="stylesheet" > href="theme.css.php?theme=retro&version=Nwbe_4_8_7" > type="text/css"><script type="text/javascript"> var Globals = {loaded: > false,img_preload: [],preload_image: function( path > ){Globals.img_preload[Globals.img_preload.length] = new > Image;Globals.img_preload[Globals.img_preload.length-1].src = > path;},IMAGE_PATH: 'images2',THEME: 'retro',MAX_UPLOAD_SIZE: > 20971520,MAX_THREAD: 1000,MAX_HIGHLIGHTROWS: 5000,MAX_RECIPIENTS: > 100,FRAME_MARGIN: [6,6,6,6],OFF_BASE: > 'http://www.onlinefilefolder.com',AJAXTHRESHOLD: 15,HAS_AJAX: > 1,USER_ID: '[EMAIL PROTECTED]',LIGHT: false,PROPS_MODE_ONLY: > false,HAS_GCAL: false,HAS_OFF: false,HAS_FTE: false,WEBMAIL_OR_SEARCH: > 'webmail.php',LAST_PAGE: '/view.php?raw=0',TIMEOUT_COUNTER: > 60,FOLDER_REFRESH_MINUTES: 30,AUTO_DRAFT_SEC: 120,POPUP_COMPOSE: > true,SEND_LATER: '1',DROP_WARN: 1,SENT_ITEM_FOLDER: > 'INBOX.Sent_Items',ACTIVE_FOLDER: 'INBOX',HIGHLIGHT_COLOR: > 'highlight',NEWMAIL_WAV: '',FOLDERLIST_TAB: 'folderlist',VIRUS_SCAN: > 0,TIME_ZONE: 'Arizona',ACTION_THEN: '',SHOW_BULK_PURGE_WARNING: > 1,PURGE: 0,MARK_AS_READ: 1};</script> <script type="text/javascri > pt" > src="js.js?file=userFolderArray&t=1143845033&user=agpm%40hitekrednex. > com&r=Nwbe_4_8_7&php=1"></script><script type="text/javascript" > src="js.js?group=base&r=Nwbe_4_8_7"></script><script > type="text/javascript" > src="js.js?file=head_main&r=Nwbe_4_8_7"></script><script>GDEvent.add( > 'load',function() { setTimeout('Webmail.testFirewall()',10); > });</script></head><body id="body" class="noscroll" leftmargin="0" > topmargin="0" rightmargin="0" bottommargin="0" marginwidth="0" > marginheight="0"> > <div class="folderlist_header" id="folderlist_header"> > <div style="padding: 1px; padding-top: 10px;"></div> > </div><div class="folderlist_scroller" id="folderlist_scroller" > onmousedown="Layout.setFocus('folderlist');"><div class="folderlist" > id="folderlist" style="display: none; padding-top: 10px;"></div><div > class="savedsearch" id="savedsearch" style="display: > none;"></div><script type="text/javascript"> > new SafeSetTimeout("folderlist.updateCounts()", > Globals.FOLDER_REFRESH_MINUTES*60*1000); var folderlist = new > FolderList("folderlist","folderlist","folderlist_scroller","INBOX" > ); > folderlist.add("INBOX","Inbox",8|2,1591,1620,-1,1,null,2,0,0,0,0,0); > folderlist.add("INBOX.Bulk Mail","Bulk > Mail",8|4|2,0,0,-1,1,null,0,0,0,0,0,30); > folderlist.add("INBOX.Drafts","Drafts",8|2,1,1,-1,1,null,0,0,0,0,0,0); > folderlist.add("INBOX.Send_Later","Send > Later",8|2,0,0,-1,1,null,0,0,0,0,0,0); > folderlist.add("INBOX.Sent_Items","Sent > Items",8|2,0,163,-1,1,null,0,0,0,0,0,0); > folderlist.add("INBOX.Trash","Trash",8|4|2|16,0,0,-1,1,null,0,0,0,0,0, > 0); > > folderlist.setSystemIcons(); > folderlist.paint(); > GDEvent.add('load','setTimeout(\'folderlist.ensureVisible("activeF > older");\',50);'); </script><script type="text/javascript"> > > var searchlist = new SearchList("searchlist","savedsearch",0); > > searchlist.paint(); > </script></div><div class="main_scroller" id="main_scroller" > onmousedown="Layout.setFocus( View && View.inview ? 'ajaxview' : > 'main');"><div class="main" id="main"><div class="ajaxview" > id="ajaxview" style="display: none; position: > absolute;"></div><div > id="webmail_template_index"><script>GDEvent.add('keydown',function > (f1) { View.keydown (f1); });</script><script > type="text/javascript" language="javascript"> > View.initVars = function () > { > View.uid = 14338; > View.nextuid = 13878; > View.nextfolder = 'INBOX'; > View.emlpart = '0'; > View.folder = 'INBOX'; > View.inview = true; > Globals.thread_uids = '14286,14338,14286,14338'; > } > View.initVars(); > </script> > <table cellpadding="0" cellspacing="0" border="0" > width="100%"><tr><td><div id="mail_view" style="padding: > 1px"> > <table cellpadding="0" cellspacing="0" border="0" > class="border0_bottom wbgContent" width="100%"><tr><td > style="padding: 10px; text-align: left;" align="left"><div > id="wmMessage"><style>#wmMessage .SectionTitle > {font-size: small; font-family: arial, sans-serif; > font-weight:bold }#wmMessage .SmallTitle {font-size: > x-small; font-family: arial, sans-serif; font-weight:bold > }#wmMessage .SectionBody {font-size: x-small; > font-family: arial, sans-serif}#wmMessage .DetailTable, > #wmMessage .DetailTable th {font-size: 10 pt; > font-family: arial, sans-serif; font-weight:normal > }#wmMessage .Title {font-size: medium; font-family: > verdana, arial, sans-serif}#wmMessage .BodyFont > {font-size: 10 pt; font-family: arial, sans-serif; > font-weight:normal}#wmMessage .BodyFontStrong {font-size: > 10 pt; font-family: arial, sans-serif; > font-weight:bold}#wmMessage .SmallBody {font-size: > xx-small; font-family: arial, sans-serif; > font-weight:normal; margin-top: 8 px; margin-bottom: 6 px > }#wmMessage .Separator { COLOR: #CCCCCC; height: 1px}#wmMessage > .HighlightedSeparator { COLOR: #FFCC00; height: 1px}#wmMessage > .FooterSeparator { COLOR: #CCCCCC; height: 1px}#wmMessage .Footer, > #wmMessage .Footer p {font-size: xx-small; font-family:arial, > sans-serif; color:#666666; margin-top: 2 px; margin-bottom: 8 > px}#wmMessage .SmallPara, #wmMessage .SmallParap {margin-top: 8 px; > margin-bottom: 6 px}</style> <style > xmlns:x="urn:schemas-microsoft-com:xslt">#wmMessage .ItemTitle > {font-size: 10pt; font-family: arial, sans-serif; font-weight:bold > }</style> <table cellpadding="0" cellspacing="0" width="100%"> <tr> > <td width="100%" style="word-wrap: break-word;"> <table > cellpadding="0" cellspacing="0" border="0" width="100%" > xmlns:x="urn:schemas-microsoft-com:xslt"> <tr> <td width="100%"> > <table cellpadding="5" cellspacing="0" border="0" width="100%"> <tr> > <td width="1%" nowrap><img > onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw /pics/logos/ebay_95x39.gif" > border="0" alt="eBay"></td> > <td valign="bottom"> <font face="verdana, sans-serif" > size="1" color="#666666"><b>eBay sent this message</b><br> > Your registered name is included to show this message > originated from eBay. <a target="_blank" > href="http://pages.ebay.com/help/confidence/name-userid- > emails.html">Learn more</a>. </font> </td> </tr> > </table> <table width="100%" border="0" cellspacing="0" > cellpadding="0" bgcolor="#FFE680"> <tr> <td valign="top" > width="8"><img > onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltC > urve.gif" width="8" height="8"></td> <td valign="bottom" > width="100%"> <h1 style="font-weight:bold; font-size: > 14pt; font-family:arial, ; color: #000000; margin-bottom > : 2px; margin-top : 2px"> <font face="Arial, Verdana" > size="4"><b>eBay New Message Received from Seller for > Item #138811728649</b></font> </h1> </td> <td > valign="top" align="right" width="8"><img > onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtC > urve.gif" width="8" height="8" align="top"></td> </tr> > <tr> <td > colspan="3" height="4" bgcolor="#FFCC00"><spacer type="block" > height="4" width="1"></spacer></td> </tr> </table> <table > cellpadding="0" cellspacing="0" border="0" width="100%"> <tr> > <td><img onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/s.gif"; height="5"></td> <td> > <table cellpadding="0" cellspacing="0" border="0" width="100%"> <tr> > <td colspan="2"><img > onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/s.gif"; height="10"></td> > </tr> <tr> <td valign="top" width="100%" align="left"> <table > cellpadding="0" cellspacing="0" border="0" width="100%"> <tr> > <td><img onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/s.gif"; width=""></td> <td> > <table width="100%" cellpadding="0" cellspacing="0" border="0"> <tr> > <td colspan="3"><img > onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/s.gif"; height="10"></td> </ > tr> <tr> <td valign="top" align="left" width="100%"> <table > cellpadding="0" cellspacing="0" border="0" width="98%" align="left"> > <tr> <td><font size="2" face="Arial, Verdana">eBay member allenpeggy > has left you a message regarding your item<strong> > </strong>(#138811728649) on March-28-2007. <br> > <br></font></td> </tr> <tr> > <td><font size="2" face="Arial, > Verdana">Thank > you,<br>eBay</font></td> </tr> > </table> </td> <td width="10"><img > onload="View.inlineImageLoaded(this > ,undefined,false)" > src="http://pics.ebaystatic.com/aw/ > pics/s.gif" height="10"></td> <td > valign="top" width="185" nowrap> > <table width="100%" border="0" > cellspacing="0" cellpadding="0"> > <tr> <td><b><font face="Arial, > Verdana" size="2">View the dispute > thread</font></b></td> </tr> <tr> > <td><img > onload="View.inlineImageLoaded(this > ,undefined,false)" > src="http://pics.ebaystatic.com/aw/ > pics/s.gif" width="5" > height="5"></td> </tr> <tr> <td><a > target="_blank" > href="http://diha.login.com/SIngIn/ > signin.ebay.com/ws/eBayISAPI/index. > htm" border="0"><img > onload="View.inlineImageLoaded(this > ,undefined,false)" > src="http://pics.ebaystatic.com/aw/ > pics/buttons/btnRespondNow.gif" > width="120" height="32" > alt="Respond Now" > border="0"></a></td> </tr> </table> > </td> </tr> </table> > </td> </tr> <tr> <td colspan="2"><img > onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/s.gif"; height="15"></td> > </tr> <tr> <td colspan="2"> <table cellpadding="2" cellspacing="3" > border="0" width="100%" style="border: 4px solid #E0E0E0; > border-top-width: 1px;"> <tr> <td colspan="2" bgcolor="#F4F4F4" > nowrap> <font style="font-size: 10 pt; font-family: arial, > sans-serif; font-weight:bold" class="BodyFontStrong"><b>Details for > item number: 138811728649</b></font></td> </tr> <tr> <td nowrap > valign="top"><font size="2" face="Arial, Verdana">Item > URL:</font></td> <td valign="top"><font size="2" face="Arial, > Verdana"><a target="_blank" > href="http://diha.login.com/SIngIn/signin.ebay.com/ws/eBayISAPI/index > .htm">http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=13881172 > 8649</a></font></td> </tr> <tr> <td nowrap valign="top"><font > size="2" face="Arial, Verdana">End date:</font></td> > <td valign="top"><font size="2" face="Arial, > Verdana">Saturday, March 31, 2007 13:30:14 > PDT</font></td> > </tr> <tr> <td nowrap valign="top"><font size="2" > face="Arial, Verdana">Quantity:</font></td> <td > valign="top"><font size="2" face="Arial, > Verdana">1</font></td> </tr> <tr> <td nowrap > valign="top"><font size="2" face="Arial, > Verdana">Dispute URL:</font></td> <td valign="top"><font > size="2" face="Arial, Verdana"><a target="_blank" > href="http://diha.login.com/SIngIn/signin.ebay.com/ws/eB > ayISAPI/index.htm">http://feedback.ebay.com/ws/eBayISAPI > .dll?ViewDisputeConsole&DisputeType=1</a></font></td > > </tr> <tr> <td nowrap valign="top"><font size="2" > face="Arial, Verdana">Date dispute was > opened:</font></td> > <td valign="top"><font size="2" face="Arial, > Verdana">Thursday, March 27, 2007 11:05:27 > PDT</font></td> > </tr> </table> </td> </tr> </table> </td> <td><img > onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/s.gif"; > height="10"></td> </tr> <tr> <td width="100%" > bgcolor="#FFFFFF" colspan="2"><img > onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/s.gif"; > height="20"></td> </tr> <tr> <td width="100%" > bgcolor="#CECEE3" colspan="2"><img > onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/s.gif"; > height="1"></td> </tr> <tr> <td width="100%" > bgcolor="#FFFFFF" colspan="2"><img > onload="View.inlineImageLoaded(this,undefined,false)" > src="http://pics.ebaystatic.com/aw/pics/s.gif"; > height="10"></td> </tr> <tr> <td colspan="2"> <table > width="100%" cellpadding="0" cellspacing="0" border="0"> > <tr><td><font face="Arial, Verdana" size="1" > color="#666666">Learn how you can protect yourself from > spoof (fake) emails at: <br><a target="_blank" > href="http://diha.lo > gin.com/SIngIn/signin.ebay.com/ws/eBayISAPI/index.htm">http://pages.e > bay.com/education/spooftutorial</a><br><br> > This eBay notice was sent to you from eBay. > Your account is registered on <a > target="_blank" > href="http://diha.login.com/SIngIn/signin.eb > ay.com/ws/eBayISAPI/index.htm">www.ebay.com< > /a>. As outlined in our User Agreement, eBay > will send you required notifications about > the site and your transactions. If you would > like to receive this email in text format, > change your <a target="_blank" > href="http://cgi4.ebay.com/ws/eBayISAPI.dll? > OptinLoginShow">notification > preferences</a>. <br> <br>See our Privacy > Policy and User Agreement if you have > questions about eBay's communication > policies. <br>Privacy Policy: <a > target="_blank" > href="http://pages.ebay.com/help/policies/pr > ivacy-policy.html">http://pages.ebay.com/hel > p/policies/privacy-policy.html</a><br>User > Agreement: <a target="_blank" > href="http://pages.ebay.com/help/policies/us > er-agreement.html">http://pages.ebay.com/hel > p/policies/user-agreement.html</a><br><br>Co > pyright © 2007 eBay, Inc. All Rights > Reserved.<br>Designated trademarks and > brands are the property of their respective > owners.<br>eBay and the eBay logo are > registered trademarks or trademarks of eBay, > Inc.<br>eBay is located at 2145 Hamilton > Avenue, San Jose, CA > 95125.<br></font></td></tr> </table> </td> > </tr> </table> </td> </tr> </table> </td> > </tr> </table> </td> </tr> </table> > </div></td></tr></table><center></center><sc > ript>try{Utils.activateFlash();}catch(e){}</ > script></div></td></tr></table> > <script language="javascript"> > GDEvent.add('load',Webmail.initDragDrop); > _______________________________________________ phishing mailing list [email protected] http://www.whitestar.linuxbox.org/mailman/listinfo/phishing
![http://pics.ebaystatic.com/aw/pics/s.gif"](http://pics.ebaystatic.com/aw/pics/s.gif"){kind=link}