| Author |
Message |
elektro80
Site Admin
Joined: Mar 25, 2003
Posts: 21959
Location: Norway
Audio files: 21
|
 Posted: Mon Mar 07, 2005 1:14 pm Post subject:
Yet another eBay scam. |
  |
|
Right now a spambot is throwing out emails like this one:
Looks legit? Well, if you get one.. take a look at the actual mail headers.. and the IPs .. This is an ID-harvesting scam.
Anyways, are you completely sure you filled in the right info in your profile at ebay..? Of course not..
But going there in order to fix things will send you to
http://www.ashleydesign.net/_vti_log/i/
which of course is NOT eBay at all.
If you try to go to the ashley design main page.. the tricksters have a redirect to http://www.we-will-track-you.com/
The redirect code looks like this:
| Code: | | <html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><meta name="GENERATOR" content="Microsoft FrontPage 4.0"><meta name="ProgId" content="FrontPage.Editor.Document"><SCRIPT LANGUAGE="JavaScript">redirTime = "2";redirURL = "http://www.we-will-track-you.com";function redirTimer() { self.setTimeout("self.location.href = redirURL;",redirTime); }</script></head><BODY onLoad="redirTimer()"><p> <p></head></body></html> |
The email mesage header is amusing..
| Code: | <nobody@victory.webpartner.dk>
Received: from mac.com (smtpin20-en2 [10.13.11.248]) by ms54.mac.com (iPlanet Messaging Server 5.2 Patch 2 (built Jul 14 2004)) with ESMTP id <0ICZ00LJHYIPXA@ms54.mac.com> for xxxx@mac.com; Mon, 07 Mar 2005 11:37:37 -0800 (PST)
Received: from mxbackup.webpartner.dk (mxbackup.webpartner.dk [195.184.96.22]) by mac.com (Xserve/smtpin20/MantshX 4.0) with ESMTP id j27JbZLq025315for <xxxx@mac.com>; Mon, 07 Mar 2005 11:37:36 -0800 (PST)
Received: from victory.webpartner.dk (victory.webpartner.dk [195.184.96.46]) by mxbackup.webpartner.dk (Postfix) with ESMTP id 29E9BDF2EDfor <xxxx@mac.com>; Mon, 07 Mar 2005 20:37:34 +0100 (CET)
Received: (from nobody@localhost) by victory.webpartner.dk (8.12.6/8.12.3/Submit) id j27JbWib022310; Mon, 07 Mar 2005 20:37:32 +0100 (CET)
Message-Id: <200503071937.j27JbWib022310@victory.webpartner.dk>
Mime-Version: 1.0
|
I have of course put in xxxx@mac.com instead of my real email addie..
_________________
A Charity Pantomime in aid of Paranoid Schizophrenics descended into chaos yesterday when someone shouted, "He's behind you!"
MySpace
SoundCloud
Flickr |
|
|
Back to top
|
|
 |
Mohoyoho
Joined: Dec 03, 2003
Posts: 1632
Location: Tennessee
Audio files: 8
|
|
|
Back to top
|
|
|
elektro80
Site Admin
Joined: Mar 25, 2003
Posts: 21959
Location: Norway
Audio files: 21
|
| Posted: Mon Mar 07, 2005 1:33 pm Post subject:
|
|
|
Yup.. this one is nasty..
_________________
A Charity Pantomime in aid of Paranoid Schizophrenics descended into chaos yesterday when someone shouted, "He's behind you!"
MySpace
SoundCloud
Flickr |
|
|
Back to top
|
|
|
jamos
Joined: Jun 01, 2004
Posts: 517
Location: Eugene, Oregon, USA
Audio files: 4
G2 patch files: 44
|
| Posted: Mon Mar 07, 2005 1:41 pm Post subject:
|
|
|
I get stuff like this every day.
Any email from a financial or commercial interest that has a link for "verification of your account" in it is obviously fraudulent and should be deleted. |
|
|
Back to top
|
|
|
|
Forum index » News... » Miscellaneous News
FAQ
Calendar
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
Chat Room
