MacResource
New ebay fraud - never seen this one before. - Printable Version

+- MacResource (https://forums.macresource.com)
+-- Forum: My Category (https://forums.macresource.com/forumdisplay.php?fid=1)
+--- Forum: Tips and Deals (https://forums.macresource.com/forumdisplay.php?fid=3)
+--- Thread: New ebay fraud - never seen this one before. (/showthread.php?tid=20249)

Pages: 1 2


New ebay fraud - never seen this one before. - volcs0 - 10-09-2006

This is a new one (for me).

Just now, I got an ebay "email from a user" (see below). I saw that the item it not anything I have for sale. I figured someone accidentally sent me a question about a wrong item. So, like an idiot, I click on the item description link. Before I can do anything, Transmit (my FTP program) fires up and receives an HTML document.

It turns out that every link in this email has the same FTP URL:

"ftp://ebaysafeharbor:SSN.dll@205.134.160.10/SignIn&co_partnerId=2&pUserId=&emigrateVisitorweuy.html"

and the HTML file received is one of those fake ebay log in pages that we've all seen.

I guess if you have the "right" setup, the page would download and open up on your browser (mine was just harmlessly downloaded, but didn't open by itself).

Anyway, I've not seen this one before, so I thought I'd pass the warning on.

-Sam







Re: New ebay fraud - never seen this one before. - Zoidberg - 10-09-2006

I've gotten that one a few dozen times. Nearly fooled me at first.


Re: New ebay fraud - never seen this one before. - JoeH - 10-09-2006

That is the most common ebay spoof email in my spam folder for the last several months. Real good attempt, might have fooled me if I had an ebay account.


Re: New ebay fraud - never seen this one before. - volcs0 - 10-09-2006

Well, I get a lot of the "your account has been hijacked, click here" emails that direct you to a log in page.

This was the first time I've seen the ebay communication page used like that.

It could be that I'm missing a lot because of Spamsieve and the other controls I have on my account... maybe this is just one that slipped through.


Re: New ebay fraud - never seen this one before. - NewtonMP2100 - 10-09-2006

they now have ones that say something like "sorry, I didn't pay. .." or "I paid but you never sent the item.. "

i got one and did not click on the link but logged into ebay to check the user ID and it was real. ..as one the alleged item for sale. ..becareful. . ..


Re: New ebay fraud - never seen this one before. - $tevie - 10-09-2006

I don't click on anything that purports to be from eBay. Any legitimate messages can be had by logging into one's account and finding it that way. I don't even pay people that I know I owe through emails that link to invoices. It takes an extra 45 seconds or whatever but I never have to worry.


Re: New ebay fraud - never seen this one before. - ka jowct - 10-09-2006

I've been getting them for months.


Re: New ebay fraud - never seen this one before. - Grateful11 - 10-09-2006

I started getting those a few months ago and they do look real but mine was for something
that ended 6 months earlier and I knew it was something I didn't sell. If you search for the
User ID with most of these it is usually real.


Re: New ebay fraud - never seen this one before. - Joey Cupcakes - 10-09-2006

[quote Grateful11]I started getting those a few months ago and they do look real but mine was for something
that ended 6 months earlier and I knew it was something I didn't sell. If you search for the
User ID with most of these it is usually real.
Real, yes, but usually expired or otherwise inactive.


Re: New ebay fraud - never seen this one before. - Grateful11 - 10-09-2006

[quote Joey Cupcakes][quote Grateful11]I started getting those a few months ago and they do look real but mine was for something
that ended 6 months earlier and I knew it was something I didn't sell. If you search for the
User ID with most of these it is usually real.
Real, yes, but usually expired or otherwise inactive.
The User ID for the above account is open and active, it received 5 feedbacks in the past 30 days:

http://feedback.ebay.com/ws/eBayISAPI.dll?ViewFeedback&userid=future4mnj

The item is even real:

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=180020420790&ru=http%3A%2F%2Fsearch.ebay.com%3A80%2Fsearch%2Fsearch.dll%3Ffrom%3DR40%26satitle%3D180020420790%26fvi%3D1

If volcs0 did not buy this item I would definitely forward it to eBay, spoof@ebay.com, and
let them check it out. Be sure to send the entire message header.