Doh! I hate to get someone in trouble... :-) Ok, "no route
to host" is a bit drastic, but it works.

--
Steve
panic: can't find /

On Sat, 31 Mar 2007 [EMAIL PROTECTED] wrote:

>
> Contacted site on-call.  They *thought* they took this down earlier today.
> The on-call is about to rain on the tech's parade!  :)
>
> Thanks.
>
> On 31 Mar 2007 at 12:16, Steve Pirk wrote:
>
> > Ebay phishing site at:
> >
> > http://diha.login.com/SIngIn/signin.ebay.com/ws/eBayISAPI/index.htm
> >
> > --
> > Steve
> > panic: can't find /
> >
> > ---------- Forwarded message ----------
> > Return-Path: <[EMAIL PROTECTED]>
> > Received: from hades.letsbuild.ch (hades.letsbuild.ch [62.2.150.180])
> >  by mail.pirk.com (8.13.7/8.12.0.Beta19) with ESMTP id l2VEIPDK002019
> >  for <[EMAIL PROTECTED]>; Sat, 31 Mar 2007 06:18:25 -0800
> > Received: from herkules.letsbuild.ch (herkules.letsbuild.ch
> > [62.2.150.182])
> >  by hades.letsbuild.ch (Postfix) with ESMTP id 457921637B
> >  for <[EMAIL PROTECTED]>; Sat, 31 Mar 2007 16:11:12 +0200 (CEST)
> > Received: by herkules.letsbuild.ch (Postfix, from userid 0)
> >  id 2B9741BB472; Sat, 31 Mar 2007 16:11:12 +0200 (CEST)
> > To: [EMAIL PROTECTED]
> > Subject: Message from eBay Member regarding Item #138811728649
> > Message-ID: <[EMAIL PROTECTED]>
> > From: "From: eBay Member allenpeggy" <[EMAIL PROTECTED]>
> > Content-Type: text/html
> > Date: Sat, 31 Mar 2007 16:11:12 +0200 (CEST)
> >
> > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
> > "http://www.w3.org/TR/html4/loose.dtd";><html id="html"
> > class="noscroll"><head><meta http-equiv="Content-Type"
> > content="text/html; charset=iso-8859-1"><meta http-equiv="EXPIRES"
> > content="0"><meta http-equiv="Pragma"
> > content="no-cache"><title>Web-Based Email :: View :: </title><link
> > rel="stylesheet" href="webapp_1_0_retro.css?version=Nwbe_4_8_7"
> > type="text/css"><link rel="stylesheet"
> > href="theme.css.php?theme=retro&version=Nwbe_4_8_7"
> > type="text/css"><script type="text/javascript"> var Globals = {loaded:
> > false,img_preload: [],preload_image: function( path
> > ){Globals.img_preload[Globals.img_preload.length] = new
> > Image;Globals.img_preload[Globals.img_preload.length-1].src =
> > path;},IMAGE_PATH: 'images2',THEME: 'retro',MAX_UPLOAD_SIZE:
> > 20971520,MAX_THREAD: 1000,MAX_HIGHLIGHTROWS: 5000,MAX_RECIPIENTS:
> > 100,FRAME_MARGIN: [6,6,6,6],OFF_BASE:
> > 'http://www.onlinefilefolder.com',AJAXTHRESHOLD: 15,HAS_AJAX:
> > 1,USER_ID: '[EMAIL PROTECTED]',LIGHT: false,PROPS_MODE_ONLY:
> > false,HAS_GCAL: false,HAS_OFF: false,HAS_FTE: false,WEBMAIL_OR_SEARCH:
> > 'webmail.php',LAST_PAGE: '/view.php?raw=0',TIMEOUT_COUNTER:
> > 60,FOLDER_REFRESH_MINUTES: 30,AUTO_DRAFT_SEC: 120,POPUP_COMPOSE:
> > true,SEND_LATER: '1',DROP_WARN: 1,SENT_ITEM_FOLDER:
> > 'INBOX.Sent_Items',ACTIVE_FOLDER: 'INBOX',HIGHLIGHT_COLOR:
> > 'highlight',NEWMAIL_WAV: '',FOLDERLIST_TAB: 'folderlist',VIRUS_SCAN:
> > 0,TIME_ZONE: 'Arizona',ACTION_THEN: '',SHOW_BULK_PURGE_WARNING:
> > 1,PURGE: 0,MARK_AS_READ: 1};</script>  <script type="text/javascri
> >  pt"
> >  src="js.js?file=userFolderArray&t=1143845033&user=agpm%40hitekrednex.
> >  com&r=Nwbe_4_8_7&php=1"></script><script type="text/javascript"
> >  src="js.js?group=base&r=Nwbe_4_8_7"></script><script
> >  type="text/javascript"
> >  src="js.js?file=head_main&r=Nwbe_4_8_7"></script><script>GDEvent.add(
> >  'load',function() { setTimeout('Webmail.testFirewall()',10);
> >  });</script></head><body id="body" class="noscroll" leftmargin="0"
> >  topmargin="0" rightmargin="0" bottommargin="0" marginwidth="0"
> >  marginheight="0">
> > <div class="folderlist_header" id="folderlist_header">
> >   <div style="padding: 1px; padding-top: 10px;"></div>
> > </div><div class="folderlist_scroller" id="folderlist_scroller"
> > onmousedown="Layout.setFocus('folderlist');"><div class="folderlist"
> > id="folderlist" style="display: none; padding-top: 10px;"></div><div
> > class="savedsearch" id="savedsearch" style="display:
> > none;"></div><script type="text/javascript">
> >     new SafeSetTimeout("folderlist.updateCounts()",
> >     Globals.FOLDER_REFRESH_MINUTES*60*1000); var folderlist = new
> >     FolderList("folderlist","folderlist","folderlist_scroller","INBOX"
> >     );
> >   folderlist.add("INBOX","Inbox",8|2,1591,1620,-1,1,null,2,0,0,0,0,0);
> > folderlist.add("INBOX.Bulk Mail","Bulk
> > Mail",8|4|2,0,0,-1,1,null,0,0,0,0,0,30);
> > folderlist.add("INBOX.Drafts","Drafts",8|2,1,1,-1,1,null,0,0,0,0,0,0);
> > folderlist.add("INBOX.Send_Later","Send
> > Later",8|2,0,0,-1,1,null,0,0,0,0,0,0);
> > folderlist.add("INBOX.Sent_Items","Sent
> > Items",8|2,0,163,-1,1,null,0,0,0,0,0,0);
> > folderlist.add("INBOX.Trash","Trash",8|4|2|16,0,0,-1,1,null,0,0,0,0,0,
> > 0);
> >
> >     folderlist.setSystemIcons();
> >     folderlist.paint();
> >     GDEvent.add('load','setTimeout(\'folderlist.ensureVisible("activeF
> >     older");\',50);'); </script><script type="text/javascript">
> >
> >     var searchlist = new SearchList("searchlist","savedsearch",0);
> >
> >     searchlist.paint();
> >     </script></div><div class="main_scroller" id="main_scroller"
> >     onmousedown="Layout.setFocus( View && View.inview ? 'ajaxview' :
> >     'main');"><div class="main" id="main"><div class="ajaxview"
> >     id="ajaxview" style="display: none; position:
> >     absolute;"></div><div
> >     id="webmail_template_index"><script>GDEvent.add('keydown',function
> >     (f1) { View.keydown (f1); });</script><script
> >     type="text/javascript" language="javascript">
> > View.initVars = function ()
> > {
> >   View.uid = 14338;
> >   View.nextuid = 13878;
> >   View.nextfolder = 'INBOX';
> >   View.emlpart = '0';
> >   View.folder = 'INBOX';
> >   View.inview = true;
> >     Globals.thread_uids = '14286,14338,14286,14338';
> > }
> > View.initVars();
> > </script>
> >           <table cellpadding="0" cellspacing="0" border="0"
> >           width="100%"><tr><td><div id="mail_view" style="padding:
> >           1px">
> >             <table cellpadding="0" cellspacing="0" border="0"
> >             class="border0_bottom wbgContent" width="100%"><tr><td
> >             style="padding: 10px; text-align: left;" align="left"><div
> >             id="wmMessage"><style>#wmMessage .SectionTitle
> >             {font-size: small; font-family: arial, sans-serif;
> >             font-weight:bold }#wmMessage .SmallTitle  {font-size:
> >             x-small; font-family: arial, sans-serif; font-weight:bold
> >             }#wmMessage .SectionBody  {font-size: x-small;
> >             font-family: arial, sans-serif}#wmMessage .DetailTable,
> >             #wmMessage .DetailTable th  {font-size: 10 pt;
> >             font-family: arial, sans-serif; font-weight:normal
> >             }#wmMessage .Title  {font-size: medium; font-family:
> >             verdana, arial, sans-serif}#wmMessage .BodyFont
> >             {font-size: 10 pt; font-family: arial, sans-serif;
> >             font-weight:normal}#wmMessage .BodyFontStrong  {font-size:
> >             10 pt; font-family: arial, sans-serif;
> >             font-weight:bold}#wmMessage .SmallBody  {font-size:
> >             xx-small; font-family: arial, sans-serif;
> >             font-weight:normal; margin-top: 8 px; margin-bottom: 6 px
> >  }#wmMessage .Separator  { COLOR: #CCCCCC; height: 1px}#wmMessage
> >  .HighlightedSeparator  { COLOR: #FFCC00; height: 1px}#wmMessage
> >  .FooterSeparator  { COLOR: #CCCCCC; height: 1px}#wmMessage .Footer,
> >  #wmMessage .Footer p  {font-size: xx-small; font-family:arial,
> >  sans-serif; color:#666666; margin-top: 2 px; margin-bottom: 8
> >  px}#wmMessage .SmallPara, #wmMessage .SmallParap  {margin-top: 8 px;
> >  margin-bottom: 6 px}</style> <style
> >  xmlns:x="urn:schemas-microsoft-com:xslt">#wmMessage .ItemTitle
> >  {font-size: 10pt; font-family: arial, sans-serif; font-weight:bold
> >  }</style>   <table cellpadding="0" cellspacing="0" width="100%"> <tr>
> >  <td width="100%" style="word-wrap: break-word;"> <table
> >  cellpadding="0" cellspacing="0" border="0" width="100%"
> >  xmlns:x="urn:schemas-microsoft-com:xslt"> <tr> <td width="100%">
> >  <table cellpadding="5" cellspacing="0" border="0" width="100%"> <tr>
> >  <td width="1%" nowrap><img
> >  onload="View.inlineImageLoaded(this,undefined,false)"
> >  src="http://pics.ebaystatic.com/aw /pics/logos/ebay_95x39.gif"
> >  border="0" alt="eBay"></td>
> >             <td valign="bottom"> <font face="verdana, sans-serif"
> >             size="1" color="#666666"><b>eBay sent this message</b><br>
> >               Your registered name is included to show this message
> >               originated from eBay. <a  target="_blank"
> >               href="http://pages.ebay.com/help/confidence/name-userid-
> >               emails.html">Learn more</a>. </font> </td> </tr>
> >               </table> <table width="100%" border="0" cellspacing="0"
> >               cellpadding="0" bgcolor="#FFE680"> <tr> <td valign="top"
> >               width="8"><img
> >               onload="View.inlineImageLoaded(this,undefined,false)"
> >               src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltC
> >               urve.gif" width="8" height="8"></td> <td valign="bottom"
> >               width="100%"> <h1 style="font-weight:bold; font-size:
> >               14pt; font-family:arial, ; color: #000000; margin-bottom
> >               : 2px; margin-top : 2px"> <font face="Arial, Verdana"
> >               size="4"><b>eBay New Message Received from Seller for
> >               Item #138811728649</b></font> </h1> </td> <td
> >               valign="top" align="right" width="8"><img
> >               onload="View.inlineImageLoaded(this,undefined,false)"
> >               src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtC
> >               urve.gif" width="8" height="8" align="top"></td> </tr>
> >               <tr> <td
> >   colspan="3" height="4" bgcolor="#FFCC00"><spacer type="block"
> >   height="4" width="1"></spacer></td> </tr> </table> <table
> >   cellpadding="0" cellspacing="0" border="0" width="100%"> <tr>
> >   <td><img onload="View.inlineImageLoaded(this,undefined,false)"
> >   src="http://pics.ebaystatic.com/aw/pics/s.gif"; height="5"></td> <td>
> >   <table cellpadding="0" cellspacing="0" border="0" width="100%"> <tr>
> >   <td colspan="2"><img
> >   onload="View.inlineImageLoaded(this,undefined,false)"
> >   src="http://pics.ebaystatic.com/aw/pics/s.gif"; height="10"></td>
> >   </tr> <tr> <td valign="top" width="100%" align="left"> <table
> >   cellpadding="0" cellspacing="0" border="0" width="100%"> <tr>
> >   <td><img onload="View.inlineImageLoaded(this,undefined,false)"
> >   src="http://pics.ebaystatic.com/aw/pics/s.gif"; width=""></td> <td>
> >   <table width="100%" cellpadding="0" cellspacing="0" border="0"> <tr>
> >   <td colspan="3"><img
> >   onload="View.inlineImageLoaded(this,undefined,false)"
> >   src="http://pics.ebaystatic.com/aw/pics/s.gif"; height="10"></td> </
> >  tr> <tr> <td valign="top" align="left" width="100%"> <table
> >  cellpadding="0" cellspacing="0" border="0" width="98%" align="left">
> >  <tr> <td><font size="2" face="Arial, Verdana">eBay member allenpeggy
> >  has left you a message regarding your item<strong>
> >  </strong>(#138811728649) on March-28-2007. <br>
> >                                    <br></font></td> </tr> <tr>
> >                                    <td><font size="2" face="Arial,
> >                                    Verdana">Thank
> >                                    you,<br>eBay</font></td> </tr>
> >                                    </table> </td> <td width="10"><img
> >                                    onload="View.inlineImageLoaded(this
> >                                    ,undefined,false)"
> >                                    src="http://pics.ebaystatic.com/aw/
> >                                    pics/s.gif" height="10"></td> <td
> >                                    valign="top" width="185" nowrap>
> >                                    <table width="100%" border="0"
> >                                    cellspacing="0" cellpadding="0">
> >                                    <tr> <td><b><font face="Arial,
> >                                    Verdana" size="2">View the dispute
> >                                    thread</font></b></td> </tr> <tr>
> >                                    <td><img
> >                                    onload="View.inlineImageLoaded(this
> >                                    ,undefined,false)"
> >                                    src="http://pics.ebaystatic.com/aw/
> >                                    pics/s.gif" width="5"
> >                                    height="5"></td> </tr> <tr> <td><a
> >                                    target="_blank"
> >                                    href="http://diha.login.com/SIngIn/
> >                                    signin.ebay.com/ws/eBayISAPI/index.
> >                                    htm" border="0"><img
> >                                    onload="View.inlineImageLoaded(this
> >                                    ,undefined,false)"
> >                                    src="http://pics.ebaystatic.com/aw/
> >                                    pics/buttons/btnRespondNow.gif"
> >                                    width="120" height="32"
> >                                    alt="Respond Now"
> >                                    border="0"></a></td> </tr> </table>
> >                                    </td> </tr> </table>
> >  </td> </tr> <tr> <td colspan="2"><img
> >  onload="View.inlineImageLoaded(this,undefined,false)"
> >  src="http://pics.ebaystatic.com/aw/pics/s.gif"; height="15"></td>
> >  </tr> <tr> <td colspan="2"> <table cellpadding="2" cellspacing="3"
> >  border="0" width="100%" style="border: 4px solid #E0E0E0;
> >  border-top-width: 1px;"> <tr> <td colspan="2" bgcolor="#F4F4F4"
> >  nowrap> <font style="font-size: 10 pt; font-family: arial,
> >  sans-serif; font-weight:bold" class="BodyFontStrong"><b>Details for
> >  item number: 138811728649</b></font></td> </tr> <tr> <td nowrap
> >  valign="top"><font size="2" face="Arial, Verdana">Item
> >  URL:</font></td> <td valign="top"><font size="2" face="Arial,
> >  Verdana"><a  target="_blank"
> >  href="http://diha.login.com/SIngIn/signin.ebay.com/ws/eBayISAPI/index
> >  .htm">http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&amp;item=13881172
> >  8649</a></font></td> </tr> <tr> <td nowrap valign="top"><font
> >  size="2" face="Arial, Verdana">End date:</font></td>
> >                 <td valign="top"><font size="2" face="Arial,
> >                 Verdana">Saturday, March 31, 2007 13:30:14
> >                 PDT</font></td>
> >               </tr> <tr> <td nowrap valign="top"><font size="2"
> >               face="Arial, Verdana">Quantity:</font></td> <td
> >               valign="top"><font size="2" face="Arial,
> >               Verdana">1</font></td> </tr> <tr> <td nowrap
> >               valign="top"><font size="2" face="Arial,
> >               Verdana">Dispute URL:</font></td> <td valign="top"><font
> >               size="2" face="Arial, Verdana"><a  target="_blank"
> >               href="http://diha.login.com/SIngIn/signin.ebay.com/ws/eB
> >               ayISAPI/index.htm">http://feedback.ebay.com/ws/eBayISAPI
> >               .dll?ViewDisputeConsole&amp;DisputeType=1</a></font></td
> >               > </tr> <tr> <td nowrap valign="top"><font size="2"
> >               face="Arial, Verdana">Date dispute was
> >               opened:</font></td>
> >                 <td valign="top"><font size="2" face="Arial,
> >                 Verdana">Thursday, March 27, 2007 11:05:27
> >                 PDT</font></td>
> >               </tr> </table> </td> </tr> </table> </td> <td><img
> >               onload="View.inlineImageLoaded(this,undefined,false)"
> >               src="http://pics.ebaystatic.com/aw/pics/s.gif";
> >               height="10"></td> </tr> <tr> <td width="100%"
> >               bgcolor="#FFFFFF" colspan="2"><img
> >               onload="View.inlineImageLoaded(this,undefined,false)"
> >               src="http://pics.ebaystatic.com/aw/pics/s.gif";
> >               height="20"></td> </tr> <tr> <td width="100%"
> >               bgcolor="#CECEE3" colspan="2"><img
> >               onload="View.inlineImageLoaded(this,undefined,false)"
> >               src="http://pics.ebaystatic.com/aw/pics/s.gif";
> >               height="1"></td> </tr> <tr> <td width="100%"
> >               bgcolor="#FFFFFF" colspan="2"><img
> >               onload="View.inlineImageLoaded(this,undefined,false)"
> >               src="http://pics.ebaystatic.com/aw/pics/s.gif";
> >               height="10"></td> </tr> <tr> <td colspan="2"> <table
> >               width="100%" cellpadding="0" cellspacing="0" border="0">
> >               <tr><td><font face="Arial, Verdana" size="1"
> >               color="#666666">Learn how you can protect yourself from
> >               spoof (fake) emails at: <br><a  target="_blank"
> >               href="http://diha.lo
> >  gin.com/SIngIn/signin.ebay.com/ws/eBayISAPI/index.htm">http://pages.e
> >  bay.com/education/spooftutorial</a><br><br>
> >                           This eBay notice was sent to you  from eBay.
> >                           Your account is registered on <a
> >                           target="_blank"
> >                           href="http://diha.login.com/SIngIn/signin.eb
> >                           ay.com/ws/eBayISAPI/index.htm">www.ebay.com<
> >                           /a>. As outlined in our User Agreement, eBay
> >                           will send you required notifications about
> >                           the site and your transactions. If you would
> >                           like to receive this email in text format,
> >                           change your <a  target="_blank"
> >                           href="http://cgi4.ebay.com/ws/eBayISAPI.dll?
> >                           OptinLoginShow">notification
> >                           preferences</a>. <br> <br>See our Privacy
> >                           Policy and User Agreement if you have
> >                           questions about eBay's communication
> >                           policies. <br>Privacy Policy: <a
> >                           target="_blank"
> >                           href="http://pages.ebay.com/help/policies/pr
> >                           ivacy-policy.html">http://pages.ebay.com/hel
> >                           p/policies/privacy-policy.html</a><br>User
> >                           Agreement: <a  target="_blank"
> >                           href="http://pages.ebay.com/help/policies/us
> >                           er-agreement.html">http://pages.ebay.com/hel
> >                           p/policies/user-agreement.html</a><br><br>Co
> >                           pyright © 2007 eBay, Inc. All Rights
> >                           Reserved.<br>Designated trademarks and
> >                           brands are the property of their respective
> >                           owners.<br>eBay and the eBay logo are
> >                           registered trademarks or trademarks of eBay,
> >                           Inc.<br>eBay is located at 2145 Hamilton
> >                           Avenue, San Jose, CA
> >                           95125.<br></font></td></tr> </table> </td>
> >                           </tr> </table> </td> </tr> </table> </td>
> >                           </tr> </table> </td> </tr> </table>
> >                           </div></td></tr></table><center></center><sc
> >                           ript>try{Utils.activateFlash();}catch(e){}</
> >                           script></div></td></tr></table>
> >           <script language="javascript">
> >   GDEvent.add('load',Webmail.initDragDrop);
> >
>
>
>
_______________________________________________
phishing mailing list
[email protected]
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing

Reply via email to