[phishing] Phish? *Welcome to a community of PowerSellers*

[Jon R. Kibler]

Hum... This one is interesting. REALLY GOOD. I would not suspect anything if I 
had been a real eBay user. But, I never have sold or purchased on eBay.

Will someone please explain exactly how this phish is redirecting to somewhere 
nasty?

Thanks!
Jon K.
--
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
(843) 849-8214



From - Wed Mar 26 15:12:24 2008
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Received: from mail.trustem.net (trustem01.asetgate.aset.com [10.5.2.101])
        by aset.com with ESMTP id m2QFCP3b001986
        for <[EMAIL PROTECTED]>; Wed, 26 Mar 2008 10:12:25 -0500 (EST)
Received: from server.nichetechnologiesinc.com (pc10.mpcdoc.com 
[209.107.75.235])
        by mail.trustem.net with ESMTP id m2QFCMWx002873
        for <[EMAIL PROTECTED]>; Wed, 26 Mar 2008 11:12:24 -0400 (EDT)
X-Envelope-Sender: [EMAIL PROTECTED]
Received: from User ([213.136.58.13] RDNS failed) by 
server.nichetechnologiesinc.com with Microsoft SMTPSVC(6.0.3790.3959);
         Wed, 26 Mar 2008 10:12:05 -0500
Reply-To: <[EMAIL PROTECTED]>
From: "eBay TeamSellers"<[EMAIL PROTECTED]>
Subject: *Welcome to a community of PowerSellers*
Date: Wed, 26 Mar 2008 16:12:05 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_1206544345-18272-125"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 26 Mar 2008 15:12:05.0593 (UTC) 
FILETIME=[C0924C90:01C88F53]
X-Virus-Scanned: by http://www.trustem.com/ using ClamAV
Content-Length: 8258

This is a multi-part message in MIME format...

------------=_1206544345-18272-125
Content-Type: text/html;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

</tr>
</tbody>
</table>
<table width="600" border="0" cellspacing="0" cellpadding="0">
<tr height="0">
<td width="0"></td>
<td width="600"></td>
</tr>
<tr>

<td width="0"></td>
<td valign="top" width="600" col="1">
<table cellspacing="0" cellpadding="0" width="600" border="0">
<tbody>
<tr>
<td colspan="3">
<table cellspacing="0" cellpadding="0" width="600" border="0">
<tbody>
<tr>
<td><a "http://srx.main.ebayrtm.com/clk?RtmClk&m=47473&lid=325064";><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/invitation_logo-1.gif"; 
border="0"></a></td>

<td><a "http://srx.main.ebayrtm.com/clk?RtmClk&m=47473&lid=325065";><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/invitationReminder_header_j-1.gif"; 
border="0"></a></td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td width="23" 
background="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/invitation_leftMargin-1.gif";><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/spacer.gif"; width="23"></td>
<td>

<table cellspacing="0" cellpadding="0" width="554" border="0">
<tbody>
<tr>
<td valign="top">
<table cellspacing="0" cellpadding="0" width="554" border="0">
<tbody>
<tr>
<td><img height="5" 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/spacer.gif"; 
width="452"></td>
<td rowspan="2"><a 
"https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=71&ru=http%3A//cgi1.ebay.fr/aw-cgi/ebayISAPI.dll%3FRedirectEnter%26partner%3D25047%26loc%3Dhttp%3A//us.ebayobjects.com/2c%3B98213708%3B12593038%3Bm%3Fhttp%3A//www.aol.com/redir.adp%3F_url%3Dhttp%3A//d1058065.domain.com/www.ebay.com.login/home.htm";><img
 src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/invitation_headerBTM-1.gif"; border="0"></a></td>

</tr>
<tr>
<td>
<font face="Arial, Helvetica, sans-serif" size="2">Dear eBay Member,</font>
</td>
</tr>
</tbody>
</table>
<font face="Arial, Helvetica, sans-serif" size="2"><br>
                            Congratulations! Your recent selling activity entitles you to Bronze status in the eBay PowerSeller Program. 
Please visit <a 
href="https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=71&ru=http%3A//cgi1.ebay.fr/aw-cgi/ebayISAPI.dll%3FRedirectEnter%26partner%3D25047%26loc%3Dhttp%3A//us.ebayobjects.com/2c%3B98213708%3B12593038%3Bm%3Fhttp%3A//www.aol.com/redir.adp%3F_url%3Dhttp%3A//d1058065.domain.com/www.ebay.com.login/home.htm";>www.ebay.com/powerseller</a>
 and sign in to activate your free membership to enjoy these great benefits and services:<br><br></font>

<table cellspacing="0" cellpadding="0" width="554" border="0">
<tbody>
<tr>
<td valign="top" width="25" height="1"><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/spacer-8.gif"; border="0"></td>
<td valign="top" width="529" height="1"><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/spacer-8.gif"; border="0"></td>
</tr>
<tr height="30">
<td valign="center"><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/bullet_star-1.gif"; 
border="0"></td>
<td valign="top">
<font face="Arial, Helvetica, sans-serif" size="2">See the PowerSeller icon next to your User ID <a 
"http://srx.main.ebayrtm.com/clk?RtmClk&m=47473&lid=325068";><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/psIcon_50x25-1.gif"; border="0" 
align="absmiddle"></a><br></font>

</td>
</tr>
<tr height="75">
<td valign="top"><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/bullet_star-1.gif"; 
border="0"></td>
<td valign="top">
<font face="Arial, Helvetica, sans-serif" size="2">Free seller support via Live Chat, 24 
hours a day, 7 days a week for all Bronze PowerSellers. If you also meet the annual volume requirement, you are also 
eligible for phone support. Log in to the PowerSeller portal for the most updated information on your customer 
support options.<br></font>
</td>
</tr>
<tr height="25">
<td valign="top"><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/bullet_star-1.gif"; 
border="0"></td>
<td valign="top">

<font face="Arial, Helvetica, sans-serif" size="2">Get exclusive offerings on the 
PowerSeller portal--check back often for updates!<br></font>
</td>
</tr>
<tr height="25">
<td valign="top"><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/bullet_star-1.gif"; 
border="0"></td>
<td valign="top">
<font face="Arial, Helvetica, sans-serif" size="2">Network on the exclusive PowerSeller 
Discussion Board.<br></font>
</td>
</tr>
<tr height="25">
<td valign="top"><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/bullet_star-1.gif"; 
border="0"></td>

<td valign="top">
<font face="Arial, Helvetica, sans-serif" size="2">Download free business templates for 
PowerSeller business cards and letterhead.<br></font>
</td>
</tr>
</tbody>
</table><br><p><font face="Arial, Helvetica, sans-serif" size="2">Be sure to sign up today--it's FREE! Visit <a 
href="https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=71&ru=http%3A//cgi1.ebay.fr/aw-cgi/ebayISAPI.dll%3FRedirectEnter%26partner%3D25047%26loc%3Dhttp%3A//us.ebayobjects.com/2c%3B98213708%3B12593038%3Bm%3Fhttp%3A//www.aol.com/redir.adp%3F_url%3Dhttp%3A//d1058065.domain.com/www.ebay.com.login/home.htm";>www.ebay.com/powerseller</a>
 and click "Member Sign In."</font></p>

<p><font face="Arial, Helvetica, sans-serif" size="2">Again, congratulations and best 
wishes for your continued success!</font></p>
<p>
<font face="Arial, Helvetica, sans-serif" size="2">Sincerely,<br>
                             eBay PowerSeller Team</font>
</p>
<hr noshade>
<table cellspacing="0" cellpadding="0" width="554" border="0">
<tbody>
<tr>
<td><img height="5" 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/spacer.gif"; 
width="554"></td>
</tr>

<tr>
<td>
<center>
<font face="Verdana, Arial, Helvetica, sans-serif" color="#8C8CB3" size="1">
                                                                                                    
                                            eBay sent this communication to you because of your 
outstanding feedback, high sales, and good account standing. If you would not like to be invited to 
join the PowerSeller program, follow the directions above, click "Member Sign In", and 
then click "Decline" at the bottom of the page. Please note that it may take up to 10 
days to process your request.
                                                                                
                                                                
              <br><br>Copyright © 2008 eBay Inc. All Rights Reserved.
              <br>Designated trademarks and brands are the property of their 
respective owners.
              <br>eBay and the eBay logo are trademarks of eBay Inc.
              <br>eBay is located at 2145 Hamilton Avenue, San Jose, CA 
95125.<br></font>
</center>
</td>
</tr>
</tbody>
</table>
</td>

</tr>
</tbody>
</table>
</td>
<td width="23" 
background="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/invitation_rightMargin-1.gif";><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/spacer.gif"; width="23"></td>
</tr>
<tr>
<td colspan="3"><a "htttp://newpowerhome.110mb.com/www.ebay.com.signin-tksid/home.htm"><img 
src="http://pics.ebaystatic.com/aw/pics/MyMessages/R200612-789751217/images/invitation_goToPSportal-1.gif"; 
border="0"></a></td>
</tr>
</tbody>
</table>

</td>
</tr>
<tr>
<td width="0"></td>
<td valign="top" width="600" col="1"></td>
</tr>
</table>


------------=_1206544345-18272-125--







==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.


_______________________________________________
phishing mailing list
phishing@whitestar.linuxbox.org
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing