Threaded Mode | Linear Mode

ZiNgA BuRgA · 17/09/2007 08:32 PM

Just got an interesting email, titled: eBay New Unpaid Item Message from agong32:

Opening it up in Hotmail, it complains "This message may be a phishing scam."

Interestingly, it also doesn't have a "To:" address either.

Anyways, ignoring the stupid warning, I just opened up the message:

Quote:
eBay New Unpaid Item Message from agong32: #230119510438 -- response required

Dear member,

eBay member agong32 has left you a message regarding item #230119510438

View the dispute thread to respond. (Link: http://210.60.133.203/icons/small/ps1.gi...teVisitor=)

Regards,

eBay

Okay, so link looked interesting enough, despite the fact that I have never used eBay, and the link obviously doesn't go anywhere near eBay.

Unfortunately, clicking the link, Firefox just has to pop up and say something about suspected web forgery - even clicking ignore error, the entire page is disabled. Geez, why can't I sPa/\/\ the form with random poo poo? This sucks!

ix_stylez · 17/09/2007 08:55 PM

lol that sPa/\/\ phaled..

UncertainGod · 18/09/2007 01:33 AM

It actually does go to eBay, in the end. It's a XSS flaw in eBay that has been around for 11 months now and they STILL havn't closed it, useless fudgeers that they are.

ZiNgA BuRgA · 18/09/2007 01:42 AM

^ Sorry, I was referring to the actual URL sent in the email...

cR@Zy!NgLi$h · 18/09/2007 02:37 AM

Dogeeee.  LoL ZiNgA tries to scam the scammers... :roflol:

UncertainGod · 18/09/2007 04:17 AM

hmm, must be part of a botnet, the IP is from Milton, Australia

Quote:OrgName:    Asia Pacific Network Information Centre
OrgID:      APNIC
Address:    PO Box 2131
City:       Milton
StateProv:  QLD
PostalCode: 4064
Country:    AU

ReferralServer: whois://whois.apnic.net

NetRange:   210.0.0.0 - 211.255.255.255
CIDR:       210.0.0.0/7
NetName:    APNIC-CIDR-BLK2
NetHandle:  NET-210-0-0-0-1
Parent:
NetType:    Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: NS-SEC.RIPE.NET
NameServer: TINNIE.ARIN.NET
NameServer: DNS1.TELSTRA.NET
Comment:    This IP address range is not registered in the ARIN database.
Comment:    For details, refer to the APNIC Whois Database via
Comment:    WHOIS.APNIC.NET or http://www.apnic.net/apnic-bin/whois2.pl
Comment:    ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment:    for the Asia Pacific region. APNIC does not operate networks
Comment:    using this IP address range and is not able to investigate
Comment:    sPa/\/\ or abuse reports relating to these addresses. For more
Comment:    help, refer to http://www.apnic.net/info/faq/abuse
Comment:
RegDate:    1996-07-01
Updated:    2005-05-20

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3100
OrgTechEmail:  search-apnic-not-arin@apnic.net

# ARIN WHOIS database, last updated 2007-09-17 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

ZiNgA BuRgA · 18/09/2007 04:39 AM

Milton (Brisbane), Australia O_O

I, err, go there every day... (not that it means anything)

ix_stylez · 18/09/2007 05:16 AM

ZiNgA BuRgA Wrote:Milton (Brisbane), Australia O_O

I, err, go there every day... (not that it means anything)

maybe u ate sPa/\/\ there and it followed u home>?

Cyonix · 18/09/2007 09:21 AM

eL Oh eL ;P

u_c_taker · 18/09/2007 10:43 AM

lol

Threaded Mode \| Linear Mode Damn Firefox and Phishing...
Author	Message