eBay Phisher - Can we fuck this person up? - GoFuckYourself.com

Donny · 03-31-2005, 09:15 AM

I received one of those spoof emails from someone trying to phish for my eBay account information. Since I'm on a Mac I wasn't afraid of clicking, as the real URL will show up instead.

Here's the page it sends you to, which forwards to another page:

www.stacys-dungeon.com/ga01/thumb/update.htm

Let's find out who this is!

Donny · 03-31-2005, 09:17 AM

Quote:

Originally Posted by DonovanPhillips

I received one of those spoof emails from someone trying to phish for my eBay account information. Since I'm on a Mac I wasn't afraid of clicking, as the real URL will show up instead.

Here's the page it sends you to, which forwards to another page:

www.stacys-dungeon.com/ga01/thumb/update.htm

Let's find out who this is!

For some reason the Stacy's Dungeon domain seems familiar. I think this person has been here on GFY. Anyway, here's the URL that you're forwarded to:

http://216.93.168.20/signup/eBayIsap/index.htm

x86brandon · 03-31-2005, 09:18 AM

I hate those things. So many people that don't know better probably fall victim to it.

Donny · 03-31-2005, 09:20 AM

I saved both pages as a PDF and am contacting eBay.

Basic_man · 03-31-2005, 09:22 AM

www.stacys-dungeon.com/ga01/thumb/update.htm

Looks like it's an adult webmaster !

MattO · 03-31-2005, 09:22 AM

That's interesting how they hide the real address bar and make a fake one that looks like you're on Ebay. It's kind of obvious on my browser since I have it skinned.

Theo · 03-31-2005, 09:23 AM

trace who? these are big-time criminals, not kids playing with a mail server. Something like the nigerian scammers which have murdered people.

Donny · 03-31-2005, 09:23 AM

Quote:

Originally Posted by Basic_man

www.stacys-dungeon.com/ga01/thumb/update.htm

Looks like it's an adult webmaster !

Registrant:
4point4 Communications
PO Box 6448
Philadelphia, MS 39350
US
601-917-0674

Domain Name: STACYS-DUNGEON.COM
Administrative Contact:
Hammendorp, Rh. [email protected]
PO Box 6448
Philadelphia, MS 39350
US
601-917-0674

Technical Contact:
Hammendorp, Rh. [email protected]
PO Box 6448
Philadelphia, MS 39350
US
601-917-0674

Record last updated 07-09-2004 02:39:30 PM
Record expires on 10-13-2005
Record created on 01-01-2001

Domain servers in listed order:
NS1.HOSTINGINSITE.COM 207.44.222.61
NS2.HOSTINGINSITE.COM 207.44.232.24

MattO · 03-31-2005, 09:25 AM

Chances are stacys-dungeon.com got hacked and had that re-direct page added

Donny · 03-31-2005, 09:29 AM

Quote:

Originally Posted by MattO

Chances are stacys-dungeon.com got hacked and had that re-direct page added

Who knows...

nojob · 03-31-2005, 09:29 AM

wow , that sucks. They may have no clue that this had happened if they were hacked.

sumphatpimp · 03-31-2005, 09:36 AM

they go thru a number of proxies, chances are you will never find them. and why bother? you are not going to make a buck off it so why bother with it? just delete and move on to what makes money for you.
unless you are going to start doing this crap yourself?

Donny · 03-31-2005, 09:38 AM

Quote:

Originally Posted by sumphatpimp

they go thru a number of proxies, chances are you will never find them. and why bother? you are not going to make a buck off it so why bother with it? just delete and move on to what makes money for you.
unless you are going to start doing this crap yourself?

I have to admit:

I honestly thought "busted" when I noticed it went through that stacys-dungeon.com domain.

Guess it's never that simple. Oh well.

sumphatpimp · 03-31-2005, 09:41 AM

you never know what the hell they are up to.
I just delete and move on.

if I can't make a buck from it why am I doing it?

03-31-2005, 09:15 AM	#1
Donny As you wish... Industry Role: Join Date: May 2002 Posts: 13,754	eBay Phisher - Can we fuck this person up? I received one of those spoof emails from someone trying to phish for my eBay account information. Since I'm on a Mac I wasn't afraid of clicking, as the real URL will show up instead. Here's the page it sends you to, which forwards to another page: www.stacys-dungeon.com/ga01/thumb/update.htm Let's find out who this is!

03-31-2005, 09:22 AM	#5
Basic_man Programming King Pin Industry Role: Join Date: Oct 2003 Location: Montreal Posts: 27,360	www.stacys-dungeon.com/ga01/thumb/update.htm Looks like it's an adult webmaster ! __________________ UUGallery Builder - automated photo/video gallery plugin for Wordpress! Stop looking! Checkout Naked Hosting, online since 1999 !

03-31-2005, 09:18 AM	#3
x86brandon Confirmed User Industry Role: Join Date: Apr 2003 Location: Seattle, WA Posts: 101	I hate those things. So many people that don't know better probably fall victim to it.

03-31-2005, 09:20 AM	#4
Donny As you wish... Industry Role: Join Date: May 2002 Posts: 13,754	I saved both pages as a PDF and am contacting eBay.

03-31-2005, 09:22 AM	#6
MattO The O is for Oohhh Join Date: Feb 2003 Location: AUSTIN TEJAS Posts: 10,861	That's interesting how they hide the real address bar and make a fake one that looks like you're on Ebay. It's kind of obvious on my browser since I have it skinned.

03-31-2005, 09:23 AM	#7
Theo HAL 9000 Industry Role: Join Date: May 2001 Posts: 34,515	trace who? these are big-time criminals, not kids playing with a mail server. Something like the nigerian scammers which have murdered people.

03-31-2005, 09:25 AM	#9
MattO The O is for Oohhh Join Date: Feb 2003 Location: AUSTIN TEJAS Posts: 10,861	Chances are stacys-dungeon.com got hacked and had that re-direct page added

03-31-2005, 09:29 AM	#11
nojob The Original NoJob Join Date: Feb 2004 Location: Jerzzey Posts: 3,682	wow , that sucks. They may have no clue that this had happened if they were hacked.

03-31-2005, 09:36 AM	#12
sumphatpimp Confirmed User Join Date: Aug 2002 Posts: 5,235	they go thru a number of proxies, chances are you will never find them. and why bother? you are not going to make a buck off it so why bother with it? just delete and move on to what makes money for you. unless you are going to start doing this crap yourself?

03-31-2005, 09:41 AM	#14
sumphatpimp Confirmed User Join Date: Aug 2002 Posts: 5,235	you never know what the hell they are up to. I just delete and move on. if I can't make a buck from it why am I doing it?