Results 1 to 27 of 27
  1. #1
    Join Date
    Nov 2002
    Location
    Lakeport CA, Clear Lake
    Posts
    1,856

    New eBay phishing scam?

    I'm just wondering if this is a new variation of the eBay phishing scams or have I just missed it until now? I received this as an email this afternoon.

    Dear eBay member

    We regret to inform you that your eBay account has been suspended due
    to concerns we have for the safety and integrity of the eBay community.

    Per the User Agreement, Section 9, we may immediately issue a warning,
    temporarily suspend, indefinitely suspend or terminate your membership
    and refuse to provide our services to you if we believe that your
    actions may cause financial loss or legal liability for you, our users or
    us. We may also take these actions if we are unable to verify or
    authenticate any information you provide to us.

    Due to the suspension of this account, please be advised you are
    prohibited from using eBay in any way. This includes the registering of a new
    account.

    To update your eBay Informations click here:

    Code:
    http://cgi1.ebay.com/aw-cgi/ebayISAPI.dll?UPdate
    (which actually goes to:
    Code:
    http://211.251.236.131/Update/SAPI.dll/account-information-update/verify/eb5.02/aw-cgi/ws2/SignIn.html?eBayISAPI.dll=username&value=0:US
    Please note that any seller fees due to eBay will immediately become
    due and payable. eBay will charge any amounts you have not previously
    disputed to the billing method currently on file.


    Regards,

    Safeharbor Department
    eBay, Inc.



    I'm thinking this could confuse and even scare some inexperienced people.

    Mods, if this is in the wrong forum, please move it and accept my apologies. I posted here because I figured this was the most popular forum on this board.
    Everyone is entitled to MY opinion.
    CatfishEd.com

  2. #2
    Join Date
    Oct 2003
    Location
    West Yorkshire, UK
    Posts
    2,813
    I, personally, have received a few of these or very similar to these over the last few months. Certainly not new, Ed.
    - Jamie Harrop

  3. #3
    Join Date
    Sep 2002
    Location
    Georgia
    Posts
    1,822
    211.251.236.131

    Location: Korea-KR

    Organization ID : ORG103123
    Org Name : kongjujungdong Elementary School
    State : CHUNGNAM
    Address : ho 3 244beonji jungdong kongjusi
    Zip Code : 314-050

    The problem is that many people do not notice that
    Imagination is more important than knowledge.

  4. #4
    theres also a paypal one of these going around. saying something about updates to pay pal service and you have to follow a link to an ip address

  5. #5
    Join Date
    Sep 2002
    Location
    Georgia
    Posts
    1,822
    L-A-N,

    Yes there is PayPal one as well. I have heard that people are selling PayPal E-mail addresses to scammers and they are trying to hijack it.
    Imagination is more important than knowledge.

  6. #6
    Join Date
    May 2005
    Location
    Chicago, IL USA
    Posts
    1,428
    Yeah nothing new really. I receive similar ones 2 or 3 times a week- and I do not even have an eBay account!
    ||| Mike Bowers - Marketing Director
    ||| atOmicVPS LTD
    ||| OnApp Powered Linux & Windows Cloud Hosting ► [Shared] ► [Reseller] ► [VPS]
    ||| Follow the atOmicVPS Blog

  7. #7
    Join Date
    Oct 2003
    Location
    West Yorkshire, UK
    Posts
    2,813
    Yes, there is, L-A-N. I receive one of these every couple of days, as well as similar ones regarding banks that I'm not even a customer of.
    - Jamie Harrop

  8. #8
    Join Date
    Feb 2005
    Posts
    1,128
    That is definitely not new. I have received so many different ones over the past couple of years, but I know that I've seen that one many times before.
    Daily Updated Web Hosting News Blog
    Including an RSS feed that you can syndicate!
    Daily Updated Web Hosting News Blog
    Unlimited vs. Unmetered bandwidth

  9. #9
    Join Date
    Nov 2002
    Location
    Lakeport CA, Clear Lake
    Posts
    1,856
    Thanks everyone for your replies. I have received hundreds of these type phishing (or whatever you call them) scams but I had never received one saying they had suspended my account, banned me from eBay etc. I thought this was a new twist but evidently it's old stuff. Sorry about that.
    Everyone is entitled to MY opinion.
    CatfishEd.com

  10. #10
    Join Date
    May 2004
    Location
    Milton, Florida
    Posts
    783

    Fake Email From Ebay!!

    First Off, I have already reported this to ebay; Im just trying to warn everyone else.. So please dont flame this message


    The Subject Was: Warning ! your eBay account could be suspended

    Dear valued customer

    We regret to inform you that your eBay account could be suspended
    if you don't re-update
    your account information. To resolve this problems please copy
    and paste link below to your
    browser address bar and re-enter your account

    <<Removed link>>

    information. If your problems could not be resolved your account
    will be suspended for a
    period of 3-4 days, after this period your account will be
    terminated.

    For the User Agreement, Section 9, we may immediately issue a
    warning, temporarily suspend,
    indefinitely suspend or terminate your membership and refuse to
    provide our services to you if
    we believe that your actions may cause financial loss or legal
    liability for you, our users or us.
    We may also take these actions if we are unable to verify or
    authenticate any information you
    provide to us.

    Due to the suspension of this account, please be advised you are
    prohibited from using eBay in
    any way. This includes the registering of a new account. Please
    note that this suspension does
    not relieve you of your agreed-upon obligation to pay any fees
    you may owe to eBay.


    Regards,Safeharbor Department eBay, Inc
    The eBay team.
    This is an automatic message. Please do not reply.

    The first thing that sent up a red flag was that it was sent to my Company email account.. When if it was really from ebay it would have been went to my personal email..

    Just Giving everyone the Heads Up..
    Last edited by anon-e-mouse; 06-17-2005 at 06:54 PM.

  11. #11
    Join Date
    Sep 2004
    Location
    Northern Europe.
    Posts
    2,571

  12. #12
    Join Date
    May 2004
    Location
    Milton, Florida
    Posts
    783
    Yea, I get it from Paypal every now and then.. but this was the first from ebay.

    With Ebay you just email/ forward the message to "[email protected]"

  13. #13
    never open a link you received in your email...
    http://www.empresasdehosting.com
    THE WEB HOSTING INDEX IN SPANISH
    http://www.empresasdehosting.net
    THE WEB HOSTING DIRECTORY IN SPANISH

  14. #14
    I get this stuff all the time, from ebay, and paypal.. and as someone else said, ones to banks, that I am not even a part of!!

  15. #15
    Join Date
    Jan 2005
    Location
    Cardiff, UK
    Posts
    375
    citibank, that's my favourite. Whenever i see the citibank logo, it makes me laugh.
    Peter Hall
    Tera Web Hosting
    UK Web Hosting and Backup Storage

  16. #16
    Join Date
    Feb 2002
    Location
    Australia
    Posts
    24,009
    Yep, I get these once or twice a week. These lamo limp scammers are getting sneakier and sneakier, not that I ever think they're real emails from PayPal. The thing is, they could almost fool internet savvey folks, so what chance does the normal internet user have?
    AussieHost.com Aussie Bob, host since 2001
    Host Multiple Domains on Fast Australian Servers!!

  17. #17
    Join Date
    Oct 2004
    Posts
    1,168
    I forgot what it's called, but firefox has a "bug" there in the address bar it will display international charaecters, so an "o" looking int'l char might be mistaken for an american "o" - they'll lead to different domains.. and yea
    www.Yekaroo.com - Your Chinese Radio Online!

  18. #18
    Join Date
    Oct 2004
    Location
    San Francisco, CA
    Posts
    2,454
    I received one yesterday that actually went to eBay's site
    Tyler Cole
    Eeek, a Blog

  19. #19
    Join Date
    Nov 2002
    Location
    Los Angeles, CA
    Posts
    412
    I have had a customer which was using one of my reseller packages as a way to send out his mass emails. He wasn't the brightest of people, since he continuesly came from the same IP and obviously the same ISP.

    All this was fairly recent. So if anyone would like the information I have collected and possibly take action against him/her or help me do so. Let me know in a PM or something.

  20. #20
    Join Date
    Jul 2001
    Location
    Canada
    Posts
    1,284
    I got 4 of these yesterday to 2 usenet only addresses, on on my high school alumni site, and one to an online forum site. I just reported them to ebay and the RCMP CID and dropped them into a hold folder temporarily. Mine went to a domain (http://www.antoq.com/ebay/index.html) not an IP address.
    "Obsolesence is just a lack of imagination."

  21. #21
    Join Date
    Oct 2002
    Posts
    13,277

    Another Ebay Scam!!

    This one places a floating address bar over your bar so you dont see its not ebay.....

    hxxp://218.8.252.73/image/.../

    IM telling ya..................

    I did my usual duties Filling out my ATM pin,credit card PIN,etc...........










    WITH BOGUS INFO


    And heres a good site to check out/report other scams
    (the "Archive" link on the left from this page shows previous scams):

    http://www.antiphishing.com

    Tinyurl is the answer for posting long urls!!!

  22. #22
    Join Date
    Aug 2005
    Posts
    44
    It just sickens me that people will go so far to trick people. Besides porn, phishing, adware, spyware, and viruses, the Internet is really a good place...

    Thats what I keep telling people anyway.

  23. #23
    Join Date
    Jun 2005
    Posts
    448
    I've received this two days ago on my private email:

    Dear PayPal User,

    We recently noticed one or more attempts to log in to your PayPal account
    from a foreign IP address. We have temporarily limited access to sensitive
    PayPal account features. Allowing your account access to remain limited for
    an extended period of time may result in further limitations on the use of
    your account and possible account closure.

    If you recently accessed your account while traveling, the unusual log in
    attempts may have been initiated by you. However, if you did not initiate
    the log ins, please visit PayPal as soon as possible to log in and perform
    the steps necessary to restore your account access:

    https://www.paypal.com/us/cgi-bin/webscr?cmd=_login-run


    After filling in the information required we advise you to change your password.
    Changing your password is a security measure that will ensure that you are
    the only person with access to the account.


    Thanks for your patience as we work together to protect your account.

    Sincerely,
    PayPal



    Please do not reply to this e-mail. Mail sent to this address cannot be
    answered. For assistance, log in to your PayPal account and choose the
    "Help" link in the header of any page.

    PayPal Email ID PP321

    Link points to: http://211.167.249.35/horde/.cgi-bin/webscr/.paypal/

    I've been playing around a bit, found http://211.167.249.35/horde/test.php?mode=phpinfo

    SERVER_ADDR 211.167.249.35
    SERVER_ADMIN [email protected]
    SERVER_NAME mail.hdjxedu.cn

    Wonder how much longer will the server be up...
    Have a question?

  24. #24
    Join Date
    Oct 2003
    Posts
    228

  25. #25
    Originally posted by Tyler
    I received one yesterday that actually went to eBay's site
    That one is actually a working scam. You do go to the real Ebay site.

    Edit - heres more info.

    http://www.techworld.com/security/ne...sID=4142&email
    Last edited by page-zone; 08-22-2005 at 12:46 AM.

  26. #26
    Join Date
    Oct 2002
    Posts
    13,277
    Originally posted by Milovan
    Link points to: http://211.167.249.35/horde/.cgi-bin/webscr/.paypal/
    Does exactly the same thing the one i posted does (The floating address bar)

    Unfortunetly people do far for this crap

    Thanx for providing the link......I did my usual duties and filled out EVERY LINE OF THAT FORM...............




















    WITH BOGUS DATA

    Tinyurl is the answer for posting long urls!!!

  27. #27
    i dont think it will be fair that the inexperienced wont know it!

    STUPID HACKERS!!

    DIE!!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •