Phishers try a phone hook

TalkBack 3 of 7:

Next »

« Previous

• Thread View
• Flat View

I'd like to show you what the full header look like...

Here's a header, with my e-mail address marked off:

X-Message-Status: s3:0
X-SID-PRA: aw-confirm@ebay.com
X-SID-Result: SoftFail
X-Message-Info: 6sSXyD95QpV8SzRXMw3R4G98vgXvzRWwTQsGasNr8B8=
Received: from www.eroskit.com ([83.211.1.155]) by bay0-mc2-f18.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830);
Thu, 27 Apr 2006 10:18:24 -0700
Received: (qmail 30694 invoked by uid 99); 27 Apr 2006 19:18:06 +0200
Date: 27 Apr 2006 19:18:06 +0200
Message-ID: <20060427171806.30693.qmail@www.eroskit.com>
To: --------
Subject: eBay Security Service Notification (NEED CUSTOMER RESPOND)
From:
Reply-To: aw-noconfirm@ebay.com
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Return-Path: anonymous@www.eroskit.com
X-OriginalArrivalTime: 27 Apr 2006 17:18:26.0141 (UTC) FILETIME=[982EE0D0:01C66A1E]

Notice the www.eroskit.com followed by an IP address and a return path of anonymous@www.eroskit.com. As you backtrack from bottom to top of a header, you can see that my e-mail message didn't come from e-Bay. Go to www.geektools.com, click in WHOIS, and type in an IP address to see why.

I know that most everyone doesn't understand e-mail headers and IP addresses, but my point is to share my knowledge of how I spot spoof/phish in e-mail messages.

Posted by: Grayson Peddie   Posted on: 04/28/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Data Center Automation in an Uncertain Economy IBM Today, organizations just like yours are under greater than ever pressures ... Download Now
• Improve Performance in SAP Application Environments Quest Software With the exploding growth of data, the typical DBA must spend a ... Download Now
• ChangeAuditor for Active Directory ScriptLogic ChangeAuditor drives the security and control of Active Directory by ... Download Now