Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

BOGUS Ebay email scam warning
email | self

Posted on 08/20/2003 7:25:41 PM PDT by supercat

I just received the following email. Pay particular attention to the part in red. I do not doubt that the text and visible formatting are copied precisely from a legitimate ebay message, but the highlighted link is almost certainly bogus--probably a data-capturing middleman.

I know this sort of scam is hardly new, but it is circulating again. Beware of it.


TOPICS: Crime/Corruption; Miscellaneous; Your Opinion/Questions
KEYWORDS: ebayscamemailweb; scam
Navigation: use the links below to view more comments.
first previous 1-2021-37 last
To: Severa
Ok FR hiccuped on me *L* Sorry
21 posted on 08/20/2003 8:11:12 PM PDT by Severa (Wife of Freeper Hostel, USN STS3(SS))
[ Post Reply | Private Reply | To 20 | View Replies]

To: supercat
I'm an eBay dealer woth over 4 thousand feedbacks. I get about two of these per week. You should FORWARD (not send) it to:

spoof@ebay.com

They will investigate it and try to shut the bast***s down.

22 posted on 08/20/2003 8:16:18 PM PDT by massadvj
[ Post Reply | Private Reply | To 1 | View Replies]

To: Severa
Uh, oh, you're repeating.:)

I just checked ZA, and there's been over 500 alerts in the last two hours. My connection was really sluggish today; we had some bad storms here, but I tend to think the worm traffic might be contributing to the slowdown as well.

23 posted on 08/20/2003 8:18:53 PM PDT by browardchad
[ Post Reply | Private Reply | To 20 | View Replies]

To: Severa
Yea, this is what my ZoneAlarm is saying.
Rating = Medium, date/time = 2003/08/20 22:26:00, -5:00 GMT, Type = Firewall, Protocol = ICMP (type:8/subtyp:0), Program = Blank, Source IP = All over the place, Destination IP = xxx.xxx.xxx.xxx, Direction = Incoming, Action Taken = Blocked, Count = 1, Source DNS = Blank or something there, Destination DNS = My Computer.
This is a ICMP Echo Request (Ping).
24 posted on 08/20/2003 8:29:54 PM PDT by ktw (kakkate koi)
[ Post Reply | Private Reply | To 20 | View Replies]

To: supercat
ping
25 posted on 08/20/2003 8:38:25 PM PDT by fightu4it (conquest by immigration and subversion spells the end of US.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: supercat
If I read that link in red correctly it is NOT a secure server at all to begin with.
26 posted on 08/20/2003 8:42:48 PM PDT by ICE-FLYER (God bless and keep the United States of America)
[ Post Reply | Private Reply | To 1 | View Replies]

To: supercat
Wow, there are so many virus's, worms, and scams going on right now. We got one on our office computer after opening an email that claimed to be from Office Depot about an order that didn't go through because of an untrusted online orderer. Turns out it was a bug!
27 posted on 08/20/2003 8:50:01 PM PDT by ladyinred (The left have blood on their hands.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: supercat
bump
28 posted on 08/20/2003 8:52:45 PM PDT by GOPJ
[ Post Reply | Private Reply | To 1 | View Replies]

To: supercat
Last month I got an email from ebay telling me my credit card # was close to expiration, which it was. So I WENT to Ebay and clicked on the place to enter credit card info.

A couple of nights ago, I received an email from Ebay stating it needed to verify all my info--called it a security check.
They had the Ebay heading in color, said it was a secure server. They wanted my credit card info.,ebay sign in, personal info-name, add. mother's name, etc. AND they wanted my bank account info., which I have never given even to my Paypal account, so I have remained "Unverified."

I zapped it back and said I had recently updated, and did not feel comfortable with sending it in again--that they should have had all this stuff. I just couldn't see the reason for it, and was afraid it was a scam, even though it looked authentic.

I am not very computer literate, but took note of the info you are giving and wrote the #'s down for the the real Ebay url, so I can check next time.

Were any of you who received this query told they needed it for a security check?

vaudine
29 posted on 08/20/2003 9:07:39 PM PDT by vaudine
[ Post Reply | Private Reply | To 1 | View Replies]

To: vaudine
Last month I got an email from ebay telling me my credit card # was close to expiration, which it was. So I WENT to Ebay and clicked on the place to enter credit card info.

Do you still have that email? It's quite possible you've been scammed.

BTW, even if the site you're logged in seems to 'know' about you, it's possible that the site is using information you're supplying to log into the real ebay, and then sending you back the screens it comes back with.

30 posted on 08/20/2003 9:26:12 PM PDT by supercat (TAG--you're it!)
[ Post Reply | Private Reply | To 29 | View Replies]

To: supercat
I think it was okay. I went back and checked the email. I notified me that my credit card ending in ----(last four numbers ) was about to expire. It gave me a link to Paypal, which had my user name, but I had to click to verify, and then they added my saved password******. It was a month ago, and I haven't seen or heard of any activity on that card. However, I will call the card co. tomorrow to double check--have ins. just in case.

I also rechecked the other "security check" and the info they asked for was unbelievable--Ebay and Paypal password, SS #, Bank Acct. #, etc. I'm pretty sure that one was a scam. It just hit a wrong chord with me even though it had the colored Ebay heading on it.

Thanks for the reply.

vaudine
31 posted on 08/20/2003 9:50:07 PM PDT by vaudine
[ Post Reply | Private Reply | To 30 | View Replies]

To: Brian S
Big Brother is watching you...
32 posted on 08/20/2003 9:53:17 PM PDT by MatthewViti
[ Post Reply | Private Reply | To 7 | View Replies]

To: vaudine
The first one I got had a legitimate link to eBay, but also an email link asking for my screen name and password (which I avoided). A second wanted password, credit card info, and bank account info. I reported it all to eBay and, just to be safe, changed my password.

Personally, I think these scumbags should be killed in very brutal, non-PC ways and their bodies left to be eaten by rodents. Then again, I'm a traditionalist.

33 posted on 08/20/2003 10:07:38 PM PDT by Reverend Bob (Emoticons are for people that can't handle irony.)
[ Post Reply | Private Reply | To 29 | View Replies]

To: supercat
I'm no guru, but tracing through this, it appears there are two web pages. On the first you enter your ebay user ID and password.
FWIW, since this is a bogus page it makes no difference what you enter. Then you go to the second page where your credit card info is collected.
The cc info you enter is sent to www.whiz-mail.cc. Geek tools^ says this URL belongs to:
Registrant: 
Pirker, Raphael (CRDNSHZMWD)
Gsoererweg 28
St. Anton am Arlberg, Tirol 6580
AT

Domain Name: WHIZ-MAIL.CC

Administrative Contact, Technical Contact:
Pirker, Raphael (KBFKRCRBXI) raphaelp@nr1webresource.com
Gsoererweg 28
St. Anton am Arlberg, Tirol 6580
AT
+43-5446-3807

Record expires on 12-Feb-2006.
Record created on 12-Feb-2003.
Database last updated on 21-Aug-2003 00:48:20 EDT.

Domain servers in listed order:

NS.HOSTING4U.NET 209.15.2.3
NS2.HOSTING4U.NET 209.15.2.4

I pass this along FWIW.

34 posted on 08/20/2003 10:19:26 PM PDT by upchuck (I will pay big bucks for a tag line good enough to make the next "Taglinus FreeRepublicus" post.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: supercat
Since we're on the topic of Ebay scams, there are a lot of bogus auctions lately, and they're tied in to the fraud emails we're talking about (keep reading).

If you're shopping for notebook computers, high-end digital cameras, stereo equipment, or plasma TVs, be on your guard for deals that look too good to be true.

Typically, the auction will contain three big red flags: 1) It will be a 'Buy it Now' auction, 2) the price will be way too low, probably one half or less than retail, 3) the auction will always be designated for "pre-approved buyers".

The reason for limiting it to pre-approved buyers is so that you have to contact the seller for approval. That then allows them to contact you outside the Ebay system. Invariably, they'll want to conclude the deal outside of Ebay if you'll send them the money by wire transfer. This is your next red flag. They'll want you to send it somewhere overseas, typically in Europe. They'll give you some reason why they're in Europe and not where they're registered on Ebay (we're on vacation, business, etc.).

You feel skeptical, but they had hundreds of feedbacks and all were positive, so you think it must check out OK.

So what's the real story? This is a scammer. They've hijacked the account of a user with a good feedback history. How did they do that? By tricking someone with a spoofed email.

Believe me, they don't have the merchandise and won't be sending it if you send them the money. But you'll be out several hundreds (if not thousands) of dollars that are unable to be traced.

If you want to have fun with this and see if you can find one of these, do a search for a very expensive digital camera, say the Canon 1Ds, which retails for $7999.00. When you see one with a Buy it Now price of $2000 or less, you know you've found a scammer. Go ahead and contact them... then watch the scenario I described above play out.

If you really want to have fun with them, tell them you'll meet them in person to pick it up (anywhere in the world, "I'm a commercial pilot"). Then see what excuse they come up with why they won't be able to deliver it in person. It can be fun.

35 posted on 08/21/2003 2:30:51 AM PDT by tdadams
[ Post Reply | Private Reply | To 1 | View Replies]

To: Brian S
This might explain the excessive pings you are seeing.
36 posted on 08/21/2003 10:03:06 AM PDT by New Horizon
[ Post Reply | Private Reply | To 7 | View Replies]

To: supercat
bump
37 posted on 08/21/2003 10:57:47 AM PDT by GOPJ
[ Post Reply | Private Reply | To 1 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-37 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson