phishing e-mail

[orijinal]

I received what was clearly a phishing e-mail for some money site that I don't even have an account with, but I clicked the link just to see what site it linked to (link was http://www.samsplint.de/osc/catalog/images/gold/login.htm)... clearly not e-gold.com. It was of course a form for this money site, complete with all links linking to the original money site, but i'm sure when inputting this info it redirects to the main host of this fraudulent campaign. The host site was: http://www.samsplint.de/ .

What I wanted to know was even if I went to that phishing page (which i filled out the form with a bunch of "f u's"... is it possible for this site to have still gotten some info from me? for example, read my cookies? is that possible?

 

[yg17]

is it possible for this site to have still gotten some info from me? for example, read my cookies? is that possible?

No

 

[WildCowboy]

As yg17 said, that can't have gotten any info from you, but they could detect that you clicked on the link and thus your address has possibly been flagged as a valid one that will be more widely distributed to other spammers.

 

[orijinal]

how could they find out my e-mail address by clicking the link?

 

[exabytes18]

how could they find out my e-mail address by clicking the link?

The link could have been something like "www.somephishingsite.com/index.php?email=pleasedontspam@me.com" which redirects and then they just 'GET' the email when you visit their site.

They could also just monitor the referer and get the address that way ("http://mail.google.com/mail/?account_id=exabytes18%40gmail.com" for example). This relies on a webmail client though.

 

[GFLPraxis]

I just got my first phishing email...

It linked me to
htt p://999412483/icons/small/paypal/www.paypal.com/SecureInfo/paypal/
(broken up so no clicking)

I copied and pasted the link into the address bar, is it likely I'm going to get more spam at this point?

I had the same thought ("can it read my cookies?"), which is why I looked and found this thread.

And it was coming from a webmail client.