angebliche mail von ebay
WebViper
- sonstiges
0 wahsaga0 WebViper
0 TomIRL0 BrokenBrain
Hi,
ich erhielt gerade zum zweiten mal eine angebliche mail von ebay.
der "angebliche" Absender ist us-confirm9@eBay.com und der Betreff "0fficial Notice for all eBay users".
Mir kommt es nicht so vor (vor allen dingen wenn man den Text im Code beruecksichtigt) dass diese mail von ebay stammt...
Hab den Header und die email mal angehaengt...
Was meint ihr dazu???
--- header ---
Received: from pop.gmx.de (by WEB.DE(pop3abholer) 4.2)
for greim.stefan@web.de; Die, 23 Sep 2003 14:10:26 +0200
Return-Path:
X-Flags: 0000
Delivered-To: GMX delivery to gougl@gmx.de
Received: (qmail 17850 invoked by uid 65534); 23 Sep 2003 11:08:10 -0000
Received: from babsi.gibts.net (EHLO babsi.gibts.net) (194.77.135.138)
by mx0.gmx.net (mx006-rz3) with SMTP; 23 Sep 2003 13:08:10 +0200
Received: from localhost (localhost [127.0.0.1])
by babsi.gibts.net (Postfix) with ESMTP id A941E2D2B4
for ; Tue, 23 Sep 2003 13:08:09 +0200 (CEST)
Received: by babsi.gibts.net (Postfix, from userid 501)
id 2C1EA2D26B; Tue, 23 Sep 2003 13:08:08 +0200 (CEST)
Received: from microsoft.com (ua192d60hel.dial.kolumbus.fi [80.186.29.192])
by babsi.gibts.net (Postfix) with SMTP id 84BFC2D1A1
for ; Tue, 23 Sep 2003 13:08:03 +0200 (CEST)
Date: Tue, 23 Sep 2003 11:03:49 +0000
From: eBay
Subject: 0fficial Notice for all eBay users
To: Webviper
References: 7H19LDA04J4C6KAC@scheissprovider.de
In-Reply-To: 7H19LDA04J4C6KAC@scheissprovider.de
Message-ID:
Reply-To: eBay
Sender: eBay
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_I17D9EC0J80DD04C1IK58GH24"
X-Spam-Status: No, hits=-1.6 required=4.9
tests=HTML_40_50,HTML_FONT_COLOR_UNSAFE,HTML_IMAGE_ONLY_04,
HTML_IMAGE_RATIO_04,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,
HTTP_EXCESSIVE_ESCAPES,HTTP_USERNAME_USED,IN_REP_TO,
MIME_BOUND_NEXTPART,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY,
REFERENCES,USERPASS
version=2.53
X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp)
X-Virus-Scanned: by AMaViS 0.3.12pre8
X-GMX-Antivirus: -1 (not scanned, may not use virus scanner)
X-GMX-Antispam: 0 (Mail was not recognized as spam)
--- email ---
<html>
<p><a href="http://scgi.ebay.com@%32%31%31%2E%32%31%37%2E%32%32%34%2E%31%30%32:%34%39%30%31/%75%70%64%61%74%65/%69%6E%64%65%78%2E%68%74%6D"><img src="/online/logic/download.htm?rv_attid=36782903&si=&rv_crypt=LW7qckJKxf7svRd2Oin0hjoK%2BgpcBiuh6VcjN3r/uw6cXCzhQn4bJHkOnhSEMSqPFou1DmaJq5qDu1LffTbnn0ImqmiYnG%2BMSuQFUQUxby4Tf3x9oXVR5RCmtqKW/JNZwiAY" width="477" height="241" border="0"></p>
<p><font color="#FFFFF5">I say! in 1956 Gdl ïðèâåò investigate blackouts in 1993 Good. DkoLgXO eonhEfwQwtg EY</font></p>
<p><font color="#FFFFF7">it's your fault. CDC: West Nile Shall we... 686 in 1905 2 You'd better not.. 998 It's a pleasure I can't get through</font></p>
<p><font color="#FFFFF1">in 1839 you shouldn't Those who say in 1889 in 1897 in 1997 XDI in 1831 going to as well as in 1988 where do you live? in 2001</font></p>
</body>
</html>
mfg
-WebViper-
hi,
Received: from microsoft.com (ua192d60hel.dial.kolumbus.fi [80.186.29.192])
by babsi.gibts.net (Postfix) with SMTP id 84BFC2D1A1
das sich hinter dem hostnamen des ersten mailservers, über den die mail gelaufen ist,
ua192d60hel.dial.kolumbus.fi [80.186.29.192]
nicht wirklich microsoft.com verbirgt, ist doch wohl sonnenklar.
und microsoft hätte auch gewiss keinen grund, mails für ebay zu versenden.
fazit: ab in die tonne.
gruss,
wahsaga
Hi,
jo, war mir schon irgendwie klar... aber irgendwie erschien mir dies doch irgendwie komisch... aber naja... is ja egal...
danke nochmal...
mfg
-WebViper-
by babsi.gibts.net (Postfix) with SMTP id 84BFC2D1A1
for ; Tue, 23 Sep 2003 13:08:03 +0200 (CEST)
Date: Tue, 23 Sep 2003 11:03:49 +0000
From: eBay
Subject: 0fficial Notice for all eBay users
To: Webviper
References: 7H19LDA04J4C6KAC@scheissprovider.de
In-Reply-To: 7H19LDA04J4C6KAC@scheissprovider.de
Haha *lol*
Babsi gibts.net
Dat gibs ja net!
Man das ist der übliche Spam!
Kommt scheinbar aus Finnland das Ding, kann aber sein das ich mich irre!
Received: from microsoft.com (ua192d60hel.dial.kolumbus.fi [80.186.29.192])
TomIRL
Hi
genau diesen Spam hab ich auch mal bekommen
cu
BrokenBrain