Jump to content

Ebay B.S.


catesta

Recommended Posts

I already sent an email to ebay to verify if this is legit or not, bit I'm curious if anyone here has seen anything similar.

<b>Dear eBay User,</b>

It has become noticeable that another party has been trying to corrupt your eBay account and has violated our User Agreement policy listed:

4. Bidding and Buying

You are obligated to complete the transaction with the seller if you purchase an item through one of our fixed price formats or are the highest bidder as described below. If you are the highest bidder at the end of an auction (meeting the applicable minimum bid or reserve requirements) and your bid is accepted by the seller, you are obligated to complete the transaction with the seller, or the transaction is prohibited by law or by this Agreement.

You received this notice from eBay because an item was bought fraudulently and it has come to our attention that your account may cause interruptions with other eBay members and eBay requires immediate verification for your account. Please verify your account or the account may become disabled. please <a HREF="http://69.1.65.162/e/ebayintel/"> Click here to verify</a>

Sincerely,

Bobby Williams

Ebay Fraud Department

<b>Case Number</b> :YCSBNE

When I clicked the verification link, all the fields requested are for financial information.

I'm callin' it bullshit.

Link to comment
Share on other sites

Sounds a lot like a recent "Household Bank/Best Buy" scam -- similar e-mails went out to Best Buy credit card holders claiming they were investigating fraud, posing as "Best Buy", asking for financial information -- and then ripping off those who answered. Best Buy has had to do a LOT of P.R. to explain that they had nothing to do with it -- but still no explanation of who hacked in or otherwise had access to account holders addresses. [You can read more about it HERE]

BE CAREFUL!

Edited by maren
Link to comment
Share on other sites

Why would Ebay use a free web hoster for their user accounts?

Look at the page http://69.1.65.162/

This free web hosting site itself seems to be a fake.

The official site of the company mentioned on the page is http://www.hostdepartment.com/ , and it has company information, contact addresses and phone numbers, whereas the faked site has not.

Significantly, traceroute on the IP 69.1.65.162 fails to give a result.

Link to comment
Share on other sites

got one like that last week. replied that i was going to forward the e-mail to a buddy of mine in the FBI. LOL, having me as a buddy would probably keep most people out of the FBI. i then told them to EMF. :lol:

<edit for horrific spelling>

Edited by jacman
Link to comment
Share on other sites

  • 3 weeks later...

I received a spoof Ebay email today, requesting me to update my user data. It would have transferred the login/password data to the Ebay sign-in page, but also passed it to a script hosted on this hacker page : http://www.44rgh.net (you can safely click the link and have a look). The mail has "aw-confirm@ebay.com" in the sender field (which can easily be faked), but came from a german Deutsche Telekom dialup account. This can be checked in the mail header (in Outlook, you have to go to the Message options to see it):

Received: from ebay.com (unverified [217.226.103.***])
(ebay.com is faked, the true sender identity is the IP address, part of which I have omitted here)

One fact is strange: the "To:" field contains my Ebay name, my email address and the reference to an auction I have won. This was probably added to divert suspicion to the seller in this auction (one of the 50+ ebay users to know my email address).

I forwarded the email to the Ebay security department, which now has a tutorial on how to detect spoof emails:

http://pages.ebay.com/securitycenter/

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...