EBay phishing site at:

http://0xc.0xa4.0x3b.0x4d/includes/Styles.html
http://12.164.59.77/includes/Styles.html

redirects to:
http://0xc.0x92.0x4a.0x44/custsvc/_vb/eBayISAPI.html
http://12.146.74.68/custsvc/_vb/eBayISAPI.html

Both servers are ownwed by:
[EMAIL PROTECTED]:~/tmp$ get 12.146.74.68
AT&T WorldNet Services ATT (NET-12-0-0-0-1)
                                  12.0.0.0 - 12.255.255.255
POWER DYNAMICS, INC POWER-DY93-74-64 (NET-12-146-74-64-1)
                                  12.146.74.64 - 12.146.74.79

--
Steve
Equal bytes for women.

---------- Forwarded message ----------
Return-Path: <[EMAIL PROTECTED]>
Received: from mail.ascendsys.com (mail.ascendsys.com [202.157.188.10])
    by mail.pirk.com (8.14.1/8.12.0.Beta19) with ESMTP id m265994u027917
    for <[EMAIL PROTECTED]>; Wed, 5 Mar 2008 21:09:11 -0800
Message-Id: <[EMAIL PROTECTED]>
Received: (qmail 20135 invoked by uid 89); 6 Mar 2008 13:00:58 +0800
Received: from unknown (HELO User) ([EMAIL PROTECTED])
  by mail.ascendsys.com with SMTP; 6 Mar 2008 13:00:58 +0800
From: "eBay Member: pmhk"<[EMAIL PROTECTED]>
Subject: You've received a question about your eBay item
Date: Wed, 5 Mar 2008 20:59:44 -0800
MIME-Version: 1.0
Content-Type: text/html;
    charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

eBay eBay sent this message from Phil Kiemel (pmhk).
For security reasons your registered name and email is not included.
Learn more.
[ltCurve.gif] This member has a question for you. [rtCurve.gif]
[iconAlert_32x32.gif] eBay sent this message on behalf of an eBay member
via My Messages. Responses sent using email will not reach the eBay
member. Use the Respond button below to respond to this message. Learn
More.
Dear eBay Member,

Hi,
Is the item still available for sale? Is it brand new? I would like to
meet you to see the product, and it I like it I will pay cash and pick it
up. I would like to buy it, I think it is a great price. Please answer to
me as soon as possible.
Thanks, Phil

- pmhk
Answer the question
[s.gif] [btnRespond.gif]
Item and user details
Item Number: 220164968073
Item URL: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=220164968073
End Date: Mar-15-08 14:01:39 PDT
From User:
pmhk (267[iconTealStar_25x25.gif] )
100% Positive Feedback
Member since Mar-05-98 in United States
Location : CO, United States
Activity with pmhk (last 90 days):pmhk has bid on 0 of my items
This message was sent while the listing was active.pmhk is a potential
buyer.
Marketplace Safety Tip Marketplace Safety Tip [imgTabCorner_25x25.gif]
 *  Always remember to complete your transaction on eBay - it's the safer
    way to buy.
 *  Is this email inappropriate? Does it violate eBay policy? Help
    protect the Community by reporting it.
[s.gif]

________________________________________________________________________________
Learn More to protect yourself from spoof (fake) emails.

Visit our Privacy Policy and User Agreement if you have any questions.

You can report this message as unsolicited (spam/spoof) email.

Copyright © 2008 eBay Inc. All Rights Reserved. Designated trademarks and
brands are the property of their respective owners. eBay and the eBay
logo are trademarks of eBay Inc. eBay Inc. is located at 2145 Hamilton Av
_______________________________________________
phishing mailing list
phishing@whitestar.linuxbox.org
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing

Reply via email to