Wednesday, April 26, 2006

I received ANOTHER "Phishing" attempt

I received ANOTHER "Phishing" attempt tonight. This one was a good laugh for me.
It was to welcome me to join something called the "PowerSeller Silver Membership"
What is so funny is I have sold exactly ONE item on eBay.
I really don't think I qualify to be a "Power Seller", silver or any color!

Of course I reported this to eBay, but they seem to be about as good at stopping these clowns as Bush seems to be at catching Osama BinLaden. I thought I would do some snooping on my own.

Here is the subject line. How thoughtful, they want ME to join their little club.

Subject:Your PowerSeller Silver Membership
From: "eBay PowerSellers"
Date: Tue, 04 Apr 2006 22:10:35 +0000

Orignal email link embedded in HTML of spoof email is:

Reverse DNS points us to the evildoers: A IN 14400

They are pretty sneaky about their information. They do however leave a email address:(

Registration Service Provided By: Surpass Hosting

Domain name:
Registrant Contact:
somename somename (
Fax: somephone
somecity, SC somezip

A google search for ( lead to a page on Hmmm.

This is only a jumping off point that points to the REAL spoof eBay site, as you will see here...

That URL ( redirects to another site in Germany:

DNS reverse lookup using DNS Stuff A IN 86400

IP address:
Reverse DNS:
Reverse DNS authenticity: [Verified]
ASN: 31103
ASN Name: KEYWEB-AS (Keyweb AG)
IP range connectivity: 0
Registrar (per ASN): RIPE
Country (per IP registrar): DE [Germany]

WHOIS report on

registrant: CD820810-NICAT
admin-c: CD820810-NICAT
tech-c: CD820810-NICAT
zone-c: CD820810-NICAT
changed: 20040503 16:31:12
source: AT-DOM

personname: Christian Dvorak
street address: Soedingberg 129
postal code: A-8152
city: Stallhofen
country: Austria
phone: +433142805280
fax-no: +433142805230
nic-hdl: CD820810-NICAT
changed: 20050409 10:35:11
source: AT-DOM

inetnum: -
netname: DE-KEYWEB-I
descr: Keyweb AG IP Network
country: DE
admin-c: MERO-RIPE
tech-c: MERO-RIPE
mnt-by: KEYWEB-MNT
changed: 20060217
source: RIPE

WHOIS report on netblock:
Information related to ' -'

person: Holger Amberg
address: Keyweb AG
address: Neuwerkstrasse 45/46
address: 99084 Erfurt
address: Germany
phone: +49 361 658530
fax-no: +49 361 6585366
nic-hdl: MERO-RIPE
mnt-by: KEYWEB-MNT
changed: 20050419
source: RIPE

A google for Mr. Christiian Dvorak leads to this web page and this contact info:

Eintrag korrigieren Kontakt
Strasse / Nr.: SÖDINGBERG 6
Telefon: 03142 80 52 80
Fax: 03142 80 52 30

It is a web hosting company in SÖDINGBERG Austria.

Someone should let Mr. Dvorak his server is being bad!

What follows is the text of the email.

Subject:Your PowerSeller Silver Membership
From: "eBay PowerSellers"
Date: Tue, 04 Apr 2006 22:10:35 +0000

Dear eBay Member,

You've been on a super sales streak and since you've done so well, it's time to recognize you for your efforts. You are PowerSeller Silver!

Congratulations! joining the eBay Silver PowerSeller Program. Come and join us. When you join the PowerSeller program, you'll be able to receive more of the support you'll need for continued success. So, why wait? Join now!

PowerSeller icon next to your User ID in recognition of your hard work.
PowerSeller Priority Support via email webform and phone support at Silver level and above.
Exclusive offerings on the PowerSeller portal--check in frequently to see updated program benefits and special offers!
Discussion Board for you to network with other PowerSellers.
Free PowerSeller Business Templates for business cards and letterhead.

Membership to the PowerSeller program is FREE.

Again, congratulations and best wishes for your continued success!

eBay PowerSeller Team
If you agree with this rank please Become an eBay Power Seller within 24 hours
You are receiving this communication because you are part of the PowerSeller program. This is a one time communication. There is no need to unsubscribe. eBay will not request personal data (password, credit card/bank numbers) in an email.

Copyright © 2003 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners. eBay and the eBay logo are trademarks of eBay Inc.


Post a Comment

<< Home