eBay Phisher - Can we fuck this person up?

**Donny** · 03-31-2005, 07:17 AM

Originally posted by DonovanPhillips

I received one of those spoof emails from someone trying to phish for my eBay account information. Since I'm on a Mac I wasn't afraid of clicking, as the real URL will show up instead.

Here's the page it sends you to, which forwards to another page:

www.stacys-dungeon.com/ga01/thumb/update.htm

Let's find out who this is!

For some reason the Stacy's Dungeon domain seems familiar. I think this person has been here on GFY. Anyway, here's the URL that you're forwarded to:

http://216.93.168.20/signup/eBayIsap/index.htm

**x86brandon** · 03-31-2005, 07:18 AM

I hate those things. So many people that don't know better probably fall victim to it.

**Donny** · 03-31-2005, 07:20 AM

I saved both pages as a PDF and am contacting eBay.

**Basic_man** · 03-31-2005, 07:22 AM

www.stacys-dungeon.com/ga01/thumb/update.htm

Looks like it's an adult webmaster !

**MattO** · 03-31-2005, 07:22 AM

That's interesting how they hide the real address bar and make a fake one that looks like you're on Ebay. It's kind of obvious on my browser since I have it skinned.

**Theo** · 03-31-2005, 07:23 AM

trace who? these are big-time criminals, not kids playing with a mail server. Something like the nigerian scammers which have murdered people.

**Donny** · 03-31-2005, 07:23 AM

Originally posted by Basic_man

www.stacys-dungeon.com/ga01/thumb/update.htm

Looks like it's an adult webmaster !

Registrant:
4point4 Communications
PO Box 6448
Philadelphia, MS 39350
US
601-917-0674

Domain Name: STACYS-DUNGEON.COM
Administrative Contact:
Hammendorp, Rh. [email protected]
PO Box 6448
Philadelphia, MS 39350
US
601-917-0674

Technical Contact:
Hammendorp, Rh. [email protected]
PO Box 6448
Philadelphia, MS 39350
US
601-917-0674

Record last updated 07-09-2004 02:39:30 PM
Record expires on 10-13-2005
Record created on 01-01-2001

Domain servers in listed order:
NS1.HOSTINGINSITE.COM 207.44.222.61
NS2.HOSTINGINSITE.COM 207.44.232.24

**MattO** · 03-31-2005, 07:25 AM

Chances are stacys-dungeon.com got hacked and had that re-direct page added

**Donny** · 03-31-2005, 07:29 AM

Originally posted by MattO

Chances are stacys-dungeon.com got hacked and had that re-direct page added

Who knows...

**nojob** · 03-31-2005, 07:29 AM

wow , that sucks. They may have no clue that this had happened if they were hacked.

**sumphatpimp** · 03-31-2005, 07:36 AM

they go thru a number of proxies, chances are you will never find them. and why bother? you are not going to make a buck off it so why bother with it? just delete and move on to what makes money for you.
unless you are going to start doing this crap yourself?

**Donny** · 03-31-2005, 07:38 AM

Originally posted by sumphatpimp

they go thru a number of proxies, chances are you will never find them. and why bother? you are not going to make a buck off it so why bother with it? just delete and move on to what makes money for you.
unless you are going to start doing this crap yourself?

I have to admit:

I honestly thought "busted" when I noticed it went through that stacys-dungeon.com domain.

Guess it's never that simple. Oh well.

**sumphatpimp** · 03-31-2005, 07:41 AM

you never know what the hell they are up to.
I just delete and move on.

if I can't make a buck from it why am I doing it?

eBay Phisher - Can we fuck this person up?

eBay Phisher - Can we fuck this person up?

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment