22 Feb
2006
22 Feb
'06
3:31 p.m.
Geoffrey Thomas wrote:
Any chance of posting the original - if you still have it - for the rest of
us to see ?
Yeah - I love advertising my own stupidity. :)
Seriously, like Jim said, I use Thunderbird, and I *should* have
caught the signs. It was late, I was tired, I had just upgraded my
system and hadn't finished configuring T-bird to my normal "no HTML"
settings. I got careless.
Here's a screenshot of the email with HTML display turned on:
http://www.docsbox.net/ebay_phish.jpg
(~700KB, 700x1024 pixels)
What made this extremely slick is that I ended up in *my own* "My
eBay" page. Apparently the phish site grabs the login and password,
then redirects you to and *through* the real eBay login with that
login/password pair.
And here's the text with HTML turned off. You can see that without
the HTML masking the links, they're very obviously Not Right:
Subject: Question from ebay member
Date: Tue, 17 Jan 2006 00:49:04 +0100
From: aw-confirm at ebay.com <gxjnchvk at ciaoweb.it>
Reply-To: aw-confirm at ebay.com <gxjnchvk at ciaoweb.it>
Organization: for 2 or
To: Casey <doc at mdrconsult.com>
Your registered name is included to show this message originated from
eBay. Learn more
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>.
*Question about Item -- Respond Now* eBay
eBay sent this message on behalf of an eBay member via My Messages.
Responses sent using email will go to the eBay member directly and will
include your email address. Click the *Respond Now* button below to send
your response via My Messages (your email address will not be included).
Question from seller
Item: (6436472319
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>)
This message was sent while the listing was *active*.
barnsley1105 is a *potential buyer*.
Hello , I want to buy purchase your item. please tell me where you shipp
from and if you will accept paypal for the payment
thank you
*Respond to this question in My Messages.*
Respond Now
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>
*Item Details*
Item number: 6436472319
End date: 16-Jan-05 12:14:12 BST
View item description:
htps://cgi.ebay.co.uk/ws/eBayISAPI.dll?ViewItem&item=6436472319&sspagename=ADME:B:AAQ:UK:1
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>
Thank you for using eBay
http://www.ebay.co.uk/
Marketplace Safety Tip *Marketplace Safety Tip
<http://pages.ebay.co.uk/safetycentre>*
*Always remember to complete your transactions on eBay - it's the safer
way to trade.*
Is this message an offer to buy your item directly through email without
winning the item on eBay? If so, please help make the eBay marketplace
safer by reporting it to us. These external transactions may be unsafe
and are against eBay policy. Learn more about trading safely
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>.
Is this email inappropriate? Does it breach eBay policy
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>?
Help protect the community by reporting it
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>.
Learn how you can protect yourself from spoof (fake) emails at:
https://pages.ebay.co.uk/education/spooftutorial
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>
This eBay notice was sent to canguru_usere200 at yahoo.com on behalf of
another eBay member through the eBay platform and in accordance with our
Privacy Policy. If you would like to receive this email in text format,
change your notification preferences
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>.
See our Privacy Policy and User Agreement if you have questions about
eBay's communication policies.
Privacy Policy:
https://pages.ebay.co.uk/help/policies/privacy-policy.html
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>
User Agreement:
https://pages.ebay.co.uk/help/policies/user-agreement.html
<http://ssiiggnniinn.100free.com/ws/eBayISAPIdllSignInfavoritenav=2sid2=ruproduct=pp=co_partnerId=2ru=i1=ruparams=pageType=pa2=bshowgif=pa1=pUserId=errmsg=UsingSSL-runame-iteid=1/signin.htm>
Copyright ? 2005 eBay, Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective
owners.
eBay and the eBay logo are registered trademarks or trademarks of eBay, Inc.
------------------------------------------------------------------------