[phishing] You've received a question about your eBay item (fwd)

2008-06-18 Thread Steve Pirk

Ebay phish redirected from:
12.146.74.68 which redirects to:
http://0xd9da0878/signin.ebay.com/ws/eBayISAPI.html
http://217.218.8.120/signin.ebay.com/ws/eBayISAPI.html

--
Steve
Equal bytes for women.

-- Forwarded message --
Return-Path: [EMAIL PROTECTED]
Received: from buildingclientsforlife.com (migration.buildingclientsforlife.com
[66.216.127.86] (may be forged))
by mail.pirk.com (8.14.1/8.12.0.Beta19) with ESMTP id m5I0tDfk019169
for [EMAIL PROTECTED]; Tue, 17 Jun 2008 17:55:14 -0700
Received: from User [121.67.23.139] by buildingclientsforlife.com with ESMTP
  (SMTPD-9.21) id ACE401D0; Tue, 17 Jun 2008 19:55:00 -0500
From: eBay Member: $buy[EMAIL PROTECTED]
Subject: You've received a question about your eBay item
Date: Wed, 18 Jun 2008 09:57:29 +0900
MIME-Version: 1.0
Content-Type: text/html;
charset=Windows-1251
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.
Message-Id: [EMAIL PROTECTED]

eBay eBay sent this message from Jimmy Fearn ($buy).
For security reasons your registered name and email is not included.
Learn more.
[ltCurve.gif] This member has a question for you. [rtCurve.gif]
[iconAlert_32x32.gif] eBay sent this message on behalf of an eBay member
via My Messages. Responses sent using email will not reach the eBay
member. Use the Respond button below to respond to this message. Learn
More.
Dear member,

Hi, Please let me know if you will make a $15 discount, and i will buy it
now, and will pay for the shipping. Thanks
- $buy
Answer the question
[s.gif] [btnRespond.gif]
Item and user details
Item URL: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItemitem=

From User:

$buy (584[iconPurpleStar_25x25.gif] )
100.0% Positive Feedback
Member since May-07-96 in United States
Location : TX, United States
Activity with $buy (last 90 days):I have bid on 0 items from $buy
Activity with $buy (last 90 days):$buy has bid on 0 of my items
This message was sent while the listing was active.$buy is a potential
buyer.
Marketplace Safety Tip Marketplace Safety Tip [imgTabCorner_25x25.gif]
 *  Always remember to complete your transaction on eBay - it's the safer
way to buy.
 *  Keep your money safe - pay for items with cash or instant money
transfer services, such as Western Union or MoneyGram.
 *  Received a Second Chance Offer email? Double check that it's genuine:
Second Chance Offer emails come directly from eBay and are shown in
your email address.
[s.gif]


Learn More to protect yourself from spoof (fake) emails.

Visit our Privacy Policy and User Agreement if you have any questions.

You can report this message as unsolicited (spam/spoof) email.

___
phishing mailing list
phishing@whitestar.linuxbox.org
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing


[phishing] You've received a question about your eBay item (fwd)

2008-03-06 Thread Steve Pirk

EBay phishing site at:

http://0xc.0xa4.0x3b.0x4d/includes/Styles.html
http://12.164.59.77/includes/Styles.html

redirects to:
http://0xc.0x92.0x4a.0x44/custsvc/_vb/eBayISAPI.html
http://12.146.74.68/custsvc/_vb/eBayISAPI.html

Both servers are ownwed by:
[EMAIL PROTECTED]:~/tmp$ get 12.146.74.68
ATT WorldNet Services ATT (NET-12-0-0-0-1)
  12.0.0.0 - 12.255.255.255
POWER DYNAMICS, INC POWER-DY93-74-64 (NET-12-146-74-64-1)
  12.146.74.64 - 12.146.74.79

--
Steve
Equal bytes for women.

-- Forwarded message --
Return-Path: [EMAIL PROTECTED]
Received: from mail.ascendsys.com (mail.ascendsys.com [202.157.188.10])
by mail.pirk.com (8.14.1/8.12.0.Beta19) with ESMTP id m265994u027917
for [EMAIL PROTECTED]; Wed, 5 Mar 2008 21:09:11 -0800
Message-Id: [EMAIL PROTECTED]
Received: (qmail 20135 invoked by uid 89); 6 Mar 2008 13:00:58 +0800
Received: from unknown (HELO User) ([EMAIL PROTECTED])
  by mail.ascendsys.com with SMTP; 6 Mar 2008 13:00:58 +0800
From: eBay Member: pmhk[EMAIL PROTECTED]
Subject: You've received a question about your eBay item
Date: Wed, 5 Mar 2008 20:59:44 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset=Windows-1251
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.

eBay eBay sent this message from Phil Kiemel (pmhk).
For security reasons your registered name and email is not included.
Learn more.
[ltCurve.gif] This member has a question for you. [rtCurve.gif]
[iconAlert_32x32.gif] eBay sent this message on behalf of an eBay member
via My Messages. Responses sent using email will not reach the eBay
member. Use the Respond button below to respond to this message. Learn
More.
Dear eBay Member,

Hi,
Is the item still available for sale? Is it brand new? I would like to
meet you to see the product, and it I like it I will pay cash and pick it
up. I would like to buy it, I think it is a great price. Please answer to
me as soon as possible.
Thanks, Phil

- pmhk
Answer the question
[s.gif] [btnRespond.gif]
Item and user details
Item Number: 220164968073
Item URL: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItemitem=220164968073
End Date: Mar-15-08 14:01:39 PDT
From User:
pmhk (267[iconTealStar_25x25.gif] )
100% Positive Feedback
Member since Mar-05-98 in United States
Location : CO, United States
Activity with pmhk (last 90 days):pmhk has bid on 0 of my items
This message was sent while the listing was active.pmhk is a potential
buyer.
Marketplace Safety Tip Marketplace Safety Tip [imgTabCorner_25x25.gif]
 *  Always remember to complete your transaction on eBay - it's the safer
way to buy.
 *  Is this email inappropriate? Does it violate eBay policy? Help
protect the Community by reporting it.
[s.gif]


Learn More to protect yourself from spoof (fake) emails.

Visit our Privacy Policy and User Agreement if you have any questions.

You can report this message as unsolicited (spam/spoof) email.

Copyright © 2008 eBay Inc. All Rights Reserved. Designated trademarks and
brands are the property of their respective owners. eBay and the eBay
logo are trademarks of eBay Inc. eBay Inc. is located at 2145 Hamilton Av
___
phishing mailing list
phishing@whitestar.linuxbox.org
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing