Wow someone is scamming for info using eBay - GoFuckYourself.com

KRL · 05-04-2003, 01:10 PM

Did anyone else get this scam e-mail today? Check the link and how realistic it is.

Dear valued eBay member:

It has come to our attention that your eBay billing updates are
out of order. If you could please take 5-10 minutes out of your
online experience and update your billing records you will not run
into any future problems with the online service. However, failure
to update your records will result in account termination. Please
update your records by May 25th.

Once you have updated your account records your eBay session will not be
interrupted and will continue as normal. Failure to update will result in
cancellation of service, Terms of Service (TOS) violations or future billing
problems.

To update your eBay records click here:

http://cgi1.ebay.com/aw-cgi/ebayISAPI.dll?UPdate

eBay Update team

AdultNex · 05-04-2003, 01:11 PM

How does that scam work?

funkmaster · 05-04-2003, 01:12 PM

am I missing something here ?

KRL · 05-04-2003, 01:12 PM

Quote:

Originally posted by AdultNex
How does that scam work?

Click the link again. I just fixed it with the link on where it goes.

KRL · 05-04-2003, 01:14 PM

I thought it was real at first but then checked the e-mail headers.

Status: U
Return-Path: <[email protected]>
Received: from extro.vurt.net ([203.30.75.6])

and the link goes to a simulated ebay account update page.

AdultNex · 05-04-2003, 01:15 PM

They should of at least made the e-mail not so obvious by fixing up grammar mistakes.

drunkdollars · 05-04-2003, 01:16 PM

And used a sub domain like ebay.updateaccount.com/aw-cgi/ebayISAPI.dll?UPdate

KRL · 05-04-2003, 01:17 PM

I did a Visual Trace on the URL and this is where its actually going.

Name: unassigned-reverse.pcnet.ro
IP Address: 213.154.149.114
Location: Unknown
Network: RIPE-213

PC-NET Data Network S.A
Splaiul Unirii 10, bl B5, sc2, et 1
Bucharest, Romania

psyko514 · 05-04-2003, 01:18 PM

anyone who fills out that form deserved to be scammed.
it asks for SSN.
it asks for online banking username and pasword.
checking account number and routing number.
credit card #, expdt, cvv and card limit
Mothers maiden name.

basically, enough information for someoen to take over your identity.

Gutterboy · 05-04-2003, 01:18 PM

Ouch. They're gonna get alot of people with this one.

KRL · 05-04-2003, 01:19 PM

Quote:

Originally posted by AdultNex
How does that scam work?

Some hacker in Romania it appears, in this case, tricks people into inputing all their cc, password, and banking information.

AdultNex · 05-04-2003, 01:20 PM

Quote:

Originally posted by KRL

Some hacker in Romania it appears, in this case, tricks people into inputing all their cc, password, and banking information.

I was kinda puzzled when the link led to a real eBay page.

beemk · 05-04-2003, 01:26 PM

this is nothing new. people used to do this stuff on aol all the time 10 years ago.

Mutt · 05-04-2003, 01:27 PM

i've got that one a few times before, not today tho.

The Click · 05-04-2003, 03:10 PM

holly shit...i wonder how many people fell for it.

bristol · 05-04-2003, 03:13 PM

another eastern european off to the caymans then..

KRL · 05-04-2003, 03:25 PM

Quote:

Originally posted by The Click
holly shit...i wonder how many people fell for it.

I'm sure a lot of people. I started filling it out, cause I clicked a link to check and it went to eBay and then I hit the back button thinking it was real. Then I saw where the form was asking for banking info and I realized wait a sec I don't have any banking info on eBaby.

Then I checked the message headers and traced the IP and saw Romania for the server location.

But most people would be easily duped.

stocktrader23 · 05-04-2003, 04:56 PM

Quote:

Originally posted by beemk
this is nothing new. people used to do this stuff on aol all the time 10 years ago.

They still do.

tempra · 05-05-2003, 06:50 PM

I reported it to Ebay,

05-04-2003, 01:10 PM	#1
KRL Entrepreneur Join Date: Oct 2002 Location: USA Posts: 31,429	Wow someone is scamming for info using eBay Did anyone else get this scam e-mail today? Check the link and how realistic it is. Dear valued eBay member: It has come to our attention that your eBay billing updates are out of order. If you could please take 5-10 minutes out of your online experience and update your billing records you will not run into any future problems with the online service. However, failure to update your records will result in account termination. Please update your records by May 25th. Once you have updated your account records your eBay session will not be interrupted and will continue as normal. Failure to update will result in cancellation of service, Terms of Service (TOS) violations or future billing problems. To update your eBay records click here: http://cgi1.ebay.com/aw-cgi/ebayISAPI.dll?UPdate eBay Update team __________________ If you would like to develop your domains, you can lease inexpensive foreign labor from the leaders in the field at iWebmasters.com TO LOWER YOUR COSTS AND INCREASE YOUR PRODUCTION! * * * * * * * * * * * * Domains Adult News KRL's Newsletter Biz Tips Just Listed Domains

05-04-2003, 01:14 PM	#5
KRL Entrepreneur Join Date: Oct 2002 Location: USA Posts: 31,429	I thought it was real at first but then checked the e-mail headers. Status: U Return-Path: <[email protected]> Received: from extro.vurt.net ([203.30.75.6]) and the link goes to a simulated ebay account update page. __________________ If you would like to develop your domains, you can lease inexpensive foreign labor from the leaders in the field at iWebmasters.com TO LOWER YOUR COSTS AND INCREASE YOUR PRODUCTION! * * * * * * * * * * * * Domains Adult News KRL's Newsletter Biz Tips Just Listed Domains

05-04-2003, 01:16 PM	#7
drunkdollars Confirmed User Join Date: Apr 2002 Location: Club Drunk Posts: 2,734	And used a sub domain like ebay.updateaccount.com/aw-cgi/ebayISAPI.dll?UPdate __________________ SIGS ARE GAY 98055668 icq

05-04-2003, 01:17 PM	#8
KRL Entrepreneur Join Date: Oct 2002 Location: USA Posts: 31,429	I did a Visual Trace on the URL and this is where its actually going. Name: unassigned-reverse.pcnet.ro IP Address: 213.154.149.114 Location: Unknown Network: RIPE-213 PC-NET Data Network S.A Splaiul Unirii 10, bl B5, sc2, et 1 Bucharest, Romania __________________ If you would like to develop your domains, you can lease inexpensive foreign labor from the leaders in the field at iWebmasters.com TO LOWER YOUR COSTS AND INCREASE YOUR PRODUCTION! * * * * * * * * * * * * Domains Adult News KRL's Newsletter Biz Tips Just Listed Domains

05-04-2003, 01:18 PM	#9
psyko514 See sig. Join Epic Cash. Join Date: Oct 2002 Location: Montreal, Quebec. ICQ: 214702014 Posts: 22,366	anyone who fills out that form deserved to be scammed. it asks for SSN. it asks for online banking username and pasword. checking account number and routing number. credit card #, expdt, cvv and card limit Mothers maiden name. basically, enough information for someoen to take over your identity. __________________ Bad Girl Bucks - 50% Revshare through CCBill. Promote BrandyDDD, Pixie's Pillows, Action Allie and more! Phoenix Forum Pics \| Webmaster Access Montreal pics email: psyko514(a)gmail.com \| icq: 214-702-014

05-04-2003, 01:11 PM	#2
AdultNex Confirmed User Join Date: Feb 2003 Location: Bostonnnn Posts: 8,985	How does that scam work?

05-04-2003, 01:12 PM	#3
funkmaster So Fucking Banned Join Date: Sep 2001 Location: shell beach Posts: 7,938	am I missing something here ?

05-04-2003, 01:15 PM	#6
AdultNex Confirmed User Join Date: Feb 2003 Location: Bostonnnn Posts: 8,985	They should of at least made the e-mail not so obvious by fixing up grammar mistakes.

05-04-2003, 01:18 PM	#10
Gutterboy So Fucking Banned Join Date: Jul 2002 Location: Dis Posts: 4,751	Ouch. They're gonna get alot of people with this one.

05-04-2003, 01:26 PM	#13
beemk CLICK HERE Industry Role: Join Date: Jan 2002 Posts: 20,829	this is nothing new. people used to do this stuff on aol all the time 10 years ago. __________________ I host with Vacares

05-04-2003, 01:27 PM	#14
Mutt Too lazy to set a custom title Industry Role: Join Date: Sep 2002 Posts: 34,431	i've got that one a few times before, not today tho. __________________ I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

05-04-2003, 03:10 PM	#15
The Click Confirmed User Join Date: Apr 2003 Location: Canada Posts: 1,685	holly shit...i wonder how many people fell for it. __________________ ICQ: 31-30-30

05-04-2003, 03:13 PM	#16
bristol Registered User Join Date: Dec 2002 Posts: 61	another eastern european off to the caymans then..

05-05-2003, 06:50 PM	#19
tempra Confirmed User Join Date: Jul 2001 Location: Toronto Ontario Canada Posts: 295	I reported it to Ebay,