GoFuckYourself.com - Adult Webmaster Forum

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)
-   Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)
-   -   Wow someone is scamming for info using eBay (https://gfy.com/showthread.php?t=131002)

KRL 05-04-2003 01:10 PM

Wow someone is scamming for info using eBay
 
Did anyone else get this scam e-mail today? Check the link and how realistic it is.


Dear valued eBay member:

It has come to our attention that your eBay billing updates are
out of order. If you could please take 5-10 minutes out of your
online experience and update your billing records you will not run
into any future problems with the online service. However, failure
to update your records will result in account termination. Please
update your records by May 25th.

Once you have updated your account records your eBay session will not be
interrupted and will continue as normal. Failure to update will result in
cancellation of service, Terms of Service (TOS) violations or future billing
problems.

To update your eBay records click here:

http://cgi1.ebay.com/aw-cgi/ebayISAPI.dll?UPdate



eBay Update team

AdultNex 05-04-2003 01:11 PM

How does that scam work?

funkmaster 05-04-2003 01:12 PM

am I missing something here ?

KRL 05-04-2003 01:12 PM

Quote:

Originally posted by AdultNex
How does that scam work?
Click the link again. I just fixed it with the link on where it goes.

KRL 05-04-2003 01:14 PM

I thought it was real at first but then checked the e-mail headers.

Status: U
Return-Path: <[email protected]>
Received: from extro.vurt.net ([203.30.75.6])

and the link goes to a simulated ebay account update page.

AdultNex 05-04-2003 01:15 PM

They should of at least made the e-mail not so obvious by fixing up grammar mistakes.

drunkdollars 05-04-2003 01:16 PM

And used a sub domain like ebay.updateaccount.com/aw-cgi/ebayISAPI.dll?UPdate

KRL 05-04-2003 01:17 PM

I did a Visual Trace on the URL and this is where its actually going.

Name: unassigned-reverse.pcnet.ro
IP Address: 213.154.149.114
Location: Unknown
Network: RIPE-213

PC-NET Data Network S.A
Splaiul Unirii 10, bl B5, sc2, et 1
Bucharest, Romania

psyko514 05-04-2003 01:18 PM

anyone who fills out that form deserved to be scammed.
it asks for SSN.
it asks for online banking username and pasword.
checking account number and routing number.
credit card #, expdt, cvv and card limit
Mothers maiden name.

basically, enough information for someoen to take over your identity.

Gutterboy 05-04-2003 01:18 PM

Ouch. They're gonna get alot of people with this one.

KRL 05-04-2003 01:19 PM

Quote:

Originally posted by AdultNex
How does that scam work?
Some hacker in Romania it appears, in this case, tricks people into inputing all their cc, password, and banking information.

AdultNex 05-04-2003 01:20 PM

Quote:

Originally posted by KRL


Some hacker in Romania it appears, in this case, tricks people into inputing all their cc, password, and banking information.

I was kinda puzzled when the link led to a real eBay page. :winkwink:

beemk 05-04-2003 01:26 PM

this is nothing new. people used to do this stuff on aol all the time 10 years ago.

Mutt 05-04-2003 01:27 PM

i've got that one a few times before, not today tho.

The Click 05-04-2003 03:10 PM

holly shit...i wonder how many people fell for it.

bristol 05-04-2003 03:13 PM

another eastern european off to the caymans then.. :winkwink:

KRL 05-04-2003 03:25 PM

Quote:

Originally posted by The Click
holly shit...i wonder how many people fell for it.
I'm sure a lot of people. I started filling it out, cause I clicked a link to check and it went to eBay and then I hit the back button thinking it was real. Then I saw where the form was asking for banking info and I realized wait a sec I don't have any banking info on eBaby.

Then I checked the message headers and traced the IP and saw Romania for the server location.

But most people would be easily duped.

stocktrader23 05-04-2003 04:56 PM

Quote:

Originally posted by beemk
this is nothing new. people used to do this stuff on aol all the time 10 years ago.
They still do.

tempra 05-05-2003 06:50 PM

I reported it to Ebay,


All times are GMT -7. The time now is 01:22 PM.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123