At Sun Dec 14 18:40:27 2003, Matt Kettler wrote: > > At 01:24 PM 12/14/2003, Robert Nicholson wrote: > >When you see encoded urls like that you have to suspect that this is an > >ebay phish right? > > > >Does anybody know what the url is? > > Um.. encoded URL? sorry, but your copy-paste didn't bring over the > "encoded" part of the URL.
I'm using elm, and saw this: <a href="http:// ebay.com%69%6E%64%65%78%6C%6F%67%69%6E%68%74%6D%6C%61%64%73%66%61%73%64% 68%6A%6B%71%77%65%6B%6A%68%61%73%64%61%6C%73%64%61%6A%6B%73%64%6B%6A%71% [EMAIL PROTECTED] %30%30%2E%31%36%31%2E%31%35%31%2E%35%34:%38%30/ %65%2E%68%74%6D%6C">https://cgi.ebay.com/saw-cgi/eBayISAPI.dll? UpdateInformation</a><br><br> Which seems to decode to: http://[EMAIL PROTECTED]:80/e.html 200.161.151.54 resolves to 200-161-151-54.dsl.telesp.net.br > But, based only on the fact that this message came from > 12-229-8-208.client.attbi.com, and claims to be an ebay message, it's most > definitely a fraud. ebay does NOT send official notices directly from a > machine on a home-user at&t broadband internet account. Martin -- Martin Radford | "Only wimps use tape backup: _real_ [EMAIL PROTECTED] | men just upload their important stuff -o) Registered Linux user #9257 | on ftp and let the rest of the world /\\ - see http://counter.li.org | mirror it ;)" - Linus Torvalds _\_V ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
