New ebay fraud - never seen this one before.

[volcs0]

This is a new one (for me).

Just now, I got an ebay "email from a user" (see below). I saw that the item it not anything I have for sale. I figured someone accidentally sent me a question about a wrong item. So, like an idiot, I click on the item description link. Before I can do anything, Transmit (my FTP program) fires up and receives an HTML document.

It turns out that every link in this email has the same FTP URL:

"ftp://ebaysafeharbor:SSN.dll@205.134.160.10/SignIn&co_partnerId=2&pUserId=&emigrateVisitorweuy.html"

and the HTML file received is one of those fake ebay log in pages that we've all seen.

I guess if you have the "right" setup, the page would download and open up on your browser (mine was just harmlessly downloaded, but didn't open by itself).

Anyway, I've not seen this one before, so I thought I'd pass the warning on.

-Sam

[Zoidberg]

I've gotten that one a few dozen times. Nearly fooled me at first.

[JoeH]

That is the most common ebay spoof email in my spam folder for the last several months. Real good attempt, might have fooled me if I had an ebay account.

[volcs0]

Well, I get a lot of the "your account has been hijacked, click here" emails that direct you to a log in page.

This was the first time I've seen the ebay communication page used like that.

It could be that I'm missing a lot because of Spamsieve and the other controls I have on my account... maybe this is just one that slipped through.

[NewtonMP2100]

they now have ones that say something like "sorry, I didn't pay. .." or "I paid but you never sent the item.. "

i got one and did not click on the link but logged into ebay to check the user ID and it was real. ..as one the alleged item for sale. ..becareful. . ..

[$tevie]

I don't click on anything that purports to be from eBay. Any legitimate messages can be had by logging into one's account and finding it that way. I don't even pay people that I know I owe through emails that link to invoices. It takes an extra 45 seconds or whatever but I never have to worry.

[ka jowct]

I've been getting them for months.

[Grateful11]

I started getting those a few months ago and they do look real but mine was for something
that ended 6 months earlier and I knew it was something I didn't sell. If you search for the
User ID with most of these it is usually real.

[Joey Cupcakes]

[quote Grateful11]I started getting those a few months ago and they do look real but mine was for something
that ended 6 months earlier and I knew it was something I didn't sell. If you search for the
User ID with most of these it is usually real.
Real, yes, but usually expired or otherwise inactive.

[Grateful11]

[quote Joey Cupcakes][quote Grateful11]I started getting those a few months ago and they do look real but mine was for something
that ended 6 months earlier and I knew it was something I didn't sell. If you search for the
User ID with most of these it is usually real.
Real, yes, but usually expired or otherwise inactive.
The User ID for the above account is open and active, it received 5 feedbacks in the past 30 days:

http://feedback.ebay.com/ws/eBayISAPI.dll?ViewFeedback&userid=future4mnj

The item is even real:

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=180020420790&ru=http%3A%2F%2Fsearch.ebay.com%3A80%2Fsearch%2Fsearch.dll%3Ffrom%3DR40%26satitle%3D180020420790%26fvi%3D1

If volcs0 did not buy this item I would definitely forward it to eBay, spoof@ebay.com, and
let them check it out. Be sure to send the entire message header.