jjessop
04-14-2004, 11:41 PM
Heads up all on a scam that points back to a Digital Press site visitor!
Got my first Ebay "Phishing" scam email today and knew it was fake right away. Started tracing the email and the fake page it directed to and found that it was a Road Runner user in New York State. Contacted Road Runner countless times via phone and email to no avail. Then contacted Ebay through some work contacts and got them to shut it down. Too make a long story short the Ebay logo used in the email were linked to Digitpress.com........how odd? Clearly I was targeted by somebody in the classic community from just outside New York.
Address : 24.59.248.67
Name : syr-24-59-248-67.twcny.rr.com (.COM | US Commercial)
Here is the complete email source for your enjoyment or to investigate.
Received: from 64.70.191.167 (24.59.248.67) by DEDICATED (MailMax 4. 8. 3. 0) with ESMTP id 86811920 for jerry@jessopland.com; Wed, 14 Apr 2004 00:44:41 -0700 PDT
Received: from [181.137.163.223]
by 64.70.191.167 id Ewh6u6uEa1gw
for <jerry@jessopland.com>; Wed, 14 Apr 2004 06:02:32 -0300
Message-ID: <7$-i-$--$bsha86aq76-$6dfrk$attq@p1r.0o>
From: "eBay" <security@ebay.com>
Reply-To: "eBay" <security@ebay.com>
To: <jerry@jessopland.com>
Subject: Please Update Your eBay Account
Date: Wed, 14 Apr 2004 06:02:32 -0300
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="60E6DA4__D"
X-Priority: 3
--60E6DA4__D
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
<HTML>
<HEAD>
</HEAD>
<BODY>
<IMG SRC=3D"http://www.digitpress.com/images/logo_ebay.gif">
Dear eBay Customer
For security reasons eBay conducts monthly tests to =
insure your profile information is valid.
It has come to our attention your creditcard information on file is invali=
d. We ask that you please update your eBay profile
to contain up-to-date information, you may follow the link below to update=
your eBay profile.
<a href=3D"http://24.59.248.67">http://cgi.ebay=
com/update</A>
Sincerely, eBay
</BODY>
</HTML>
--60E6DA4__D--
Got my first Ebay "Phishing" scam email today and knew it was fake right away. Started tracing the email and the fake page it directed to and found that it was a Road Runner user in New York State. Contacted Road Runner countless times via phone and email to no avail. Then contacted Ebay through some work contacts and got them to shut it down. Too make a long story short the Ebay logo used in the email were linked to Digitpress.com........how odd? Clearly I was targeted by somebody in the classic community from just outside New York.
Address : 24.59.248.67
Name : syr-24-59-248-67.twcny.rr.com (.COM | US Commercial)
Here is the complete email source for your enjoyment or to investigate.
Received: from 64.70.191.167 (24.59.248.67) by DEDICATED (MailMax 4. 8. 3. 0) with ESMTP id 86811920 for jerry@jessopland.com; Wed, 14 Apr 2004 00:44:41 -0700 PDT
Received: from [181.137.163.223]
by 64.70.191.167 id Ewh6u6uEa1gw
for <jerry@jessopland.com>; Wed, 14 Apr 2004 06:02:32 -0300
Message-ID: <7$-i-$--$bsha86aq76-$6dfrk$attq@p1r.0o>
From: "eBay" <security@ebay.com>
Reply-To: "eBay" <security@ebay.com>
To: <jerry@jessopland.com>
Subject: Please Update Your eBay Account
Date: Wed, 14 Apr 2004 06:02:32 -0300
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="60E6DA4__D"
X-Priority: 3
--60E6DA4__D
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
<HTML>
<HEAD>
</HEAD>
<BODY>
<IMG SRC=3D"http://www.digitpress.com/images/logo_ebay.gif">
Dear eBay Customer
For security reasons eBay conducts monthly tests to =
insure your profile information is valid.
It has come to our attention your creditcard information on file is invali=
d. We ask that you please update your eBay profile
to contain up-to-date information, you may follow the link below to update=
your eBay profile.
<a href=3D"http://24.59.248.67">http://cgi.ebay=
com/update</A>
Sincerely, eBay
</BODY>
</HTML>
--60E6DA4__D--