Ebay fraud email warning! Don't fill out!

Toggle sidebar Toggle sidebar
P

Probedude

Senior member
Nov 1, 1999
458
0
0
Pretty obvious that this is a scam, but I received this email today.
When you go to the link it asks for all your personal information, credit card info, and banking info.



Received: from 203.149.15.162 ([218.104.94.130]) by mc3-f19.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600);
Sat, 7 Dec 2002 07:42:53 -0800
Received: from [190.198.219.49] by a231242.upc-a.chello.nl with QMQP; Dec, 07 2002 7:28:11 AM +0300
Received: from unknown (170.127.231.172) by smtp013.mail.yahoo.com with local; Dec, 07 2002 6:32:21 AM +0600
Received: from smtp-server1.cfl.rr.com ([5.151.138.187]) by rly-xl04.mx.aol.com with esmtp; Dec, 07 2002 5:19:29 AM -0700
Received: from sparc.isl.net ([45.55.85.241]) by anther.webhostingtalk.com with NNFMP; Dec, 07 2002 4:21:24 AM +0600
From: Ebay Billing <Billing@ebay.com>
To: probedude@hotmail.com
Cc:
Subject: Ebay Billing Error
Sender: Ebay Billing <Billing@ebay.com>
Mime-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Date: Sat, 7 Dec 2002 07:40:34 -0800
X-Mailer: Microsoft Outlook Express 6.00.2462.0000
Return-Path: Billing@ebay.com
Message-ID: <MC3-F194L28t8YgH5uA0000369a@mc3-f19.law16.hotmail.com>
X-OriginalArrivalTime: 07 Dec 2002 15:42:54.0898 (UTC) FILETIME=[4F1BD920:01C29E07]

<html>
Dear Ebay Member,








<p>We at Ebay are sorry to inform you that we are having problems with the
billing information of your account. We would appreciate it if you would visit
our website <a href="http://www.ebayconfirm.net">[Ebay Billing Center]</a> and fill out the proper information that we are
needing to keep you as an Ebay member.</p>




<p>If you think you have received this email as an error, please visit our
website and fill out the neccesary information. That way we can make sure that
everything is up to date! Again here is the link to our website. <a href="http://www.ebayconfirm.net">Ebay
Billing Center</a></p>




Joe Watson


Ebay Billing Center


Rep ID. 32A






Thank you for your business.






The Ebay Staff.








********************************************************************************
*********************************




Do not reply to this e-mail, for assistance contact the customer service
team.




********************************************************************************
*********************************


</html>

 
R

RDMustang1

Diamond Member
Feb 7, 2001
4,139
0
76
I think it's pretty funny how people should be advised about scans like this... In my opinion, if you're stupid enough to fall for something like this then maybe you should rethink your life.. maybe you should go to a school for common sense... I mean seriously, if some guy was to walk up to you with a shirt on from your bank and asked for your CC# would you give it to him? Even if it was IN your bank, would you give it to him? I for sure wouldn't..
 
I

IBuyUFO

Golden Member
Oct 9, 1999
1,717
0
76
I think it's too general to call people stupid because some people don't know the difference between the link that's provided and the real url for paypal. I think in my opinion, the majority of people don't spend countless hours in front of their computer surfing the web and become familiar with the millions of urls out there. It's also the same reason I don't assume you're a nerd because you know all the ins and outs about the web. So cut these people some slack. They're human and they're not perfect. I would forward that link to the FBI because it could be a much bigger scam than what we all think it is.
 
K

KLineD

Senior member
Jan 13, 2002
532
0
0
eBay does not send out any emails asking for any billing information whatsoever. I fail to understand why ANYONE , EVER, falls for this type of crap. What the hell is the reason for startnig a new thread everytmie some dumbf*k decides to go send out spam? GET IT THROUGH YOUR HEADS: simply do NOT read (well you can read but not believe) any emails asking for credit card numbers or the such. It's like me calling your house saying "Hello, im with your bank. we lost your information, please read it to us so we can store it back into our systems."
 
J

Jeomite

Senior member
Jun 19, 2001
693
1
81
Originally posted by: IBuyUFO
I think it's too general to call people stupid because some people don't know the difference between the link that's provided and the real url for paypal. I think in my opinion, the majority of people don't spend countless hours in front of their computer surfing the web and become familiar with the millions of urls out there. It's also the same reason I don't assume you're a nerd because you know all the ins and outs about the web. So cut these people some slack. They're human and they're not perfect. I would forward that link to the FBI because it could be a much bigger scam than what we all think it is.
Click to expand...

I agree... you can't expect everyone to be computer literate to a degree...
rolleye.gif
 
C

csc2

Member
May 25, 2000
185
0
0
Ditto. While most anandtech users will not fall for this sort of thing, I would guess that 90% of all web surfers would. Therefore it never hurts to spread the word as much as possible.

I have contacted Yahoo Domains to delete the entry for this site ASAP. Anyone else have any ideas how to shut 'er down?

 
C

csc2

Member
May 25, 2000
185
0
0
I just decrypted the source code from the page (It was encrypted with HTMLCrypt) and have determined that the information is being collected by someone with the userid "xacxac" through cutandpastescripts.com. I e-mailed them to shut down the account and to try to determine IP information about this person but I was unable to get anyone by phone as I believe it's after 10 pm in the U.K.



 
C

csc2

Member
May 25, 2000
185
0
0
Just received a reply from cutandpastescripts.com - The form collecting account has been shut down so this guy won't be receiving any more info from this site!

Another public service from all of us at Anandtech! ;)
 
A

alyosha

Senior member
Jan 9, 2001
399
0
0
You guys are so gullible - the form is actually a prank - here is what it give when you input any kind of information - like BS names and other false info:
"Opps!
Something went wrong. There are many reason why, this Cut and Paste Scripts account could of been set-up wrong or the account has been terminated by us due to abuse.

If we have terminated someone for abuse, we have collected the relevant details and will be passing this information on to the most appropriate legal authorities. If you are reading this message after filling in what you think was an official PayPal, Ebay or Aol form then you are a very silly person indeed for not using the official site to make such changes. The Internet is full of many crooks that abuse free service such as the ones we provided. You should be aware of this at all times when you are going to input any personal information. Remember any real company will asked for user name and passwords via a secure server, look for the logo on the bottom right hand corner and click to view the certificate, if it's not the company you think your submitting to, DO NOT RISK YOUR DETAILS, unless you are 100% sure you are submitting on an official web site for the company in question. "
 
R

ReiAyanami

Diamond Member
Sep 24, 2002
4,466
0
0
there are a lot of idiots on ebay, that's why this scam works. the real question is which has more morons, ebay or aol? i vote for aol
 
F

falconx80

Senior member
Jan 23, 2000
332
0
0
THIS IS WHAT I GET AFTER I FILLED OUT THE INFO
------------------------------------------------------------------



Opps!
Something went wrong. There are many reason why, this Cut and Paste Scripts account could of been set-up wrong or the account has been terminated by us due to abuse.

If we have terminated someone for abuse, we have collected the relevant details and will be passing this information on to the most appropriate legal authorities. If you are reading this message after filling in what you think was an official PayPal, Ebay or Aol form then you are a very silly person indeed for not using the official site to make such changes. The Internet is full of many crooks that abuse free service such as the ones we provided. You should be aware of this at all times when you are going to input any personal information. Remember any real company will asked for user name and passwords via a secure server, look for the logo on the bottom right hand corner and click to view the certificate, if it's not the company you think your submitting to, DO NOT RISK YOUR DETAILS, unless you are 100% sure you are submitting on an official web site for the company in question.
 
C

csc2

Member
May 25, 2000
185
0
0
Ummm, did you guys actually read through this whole thread before posting?

You are now getting that error because I had the guys account SHUT DOWN. It used to send him the info via cutandpastescripts.com

 
U

UNIXMuseum

Junior Member
Dec 7, 2002
2
0
0
Guys, I think there is more to it: I turned my Antivirus realtime monitor and headed to this site... And sure enough:

The JScript/KarmaHotel.Encrypted.Wor virus was detected in C:\DOCUMENTS AND SETTINGS\...\EBAYCONFIRM[1].HTM.
File Status: Deleted because of Trojan/Worm infection

So it's not just a simple joke...
 
P

Probedude

Senior member
Nov 1, 1999
458
0
0
Originally posted by: csc2
Just received a reply from cutandpastescripts.com - The form collecting account has been shut down so this guy won't be receiving any more info from this site!

Another public service from all of us at Anandtech! ;)
Click to expand...



Thank you! I was amazed at how long this site did stay up. I sent an email to Ebay stating this was happening, then I also sent one to their domain host - though I'm not too saavy on how to do this precisely (I did a WHOIS and sent the info to yahoo-inc.com).

Dave
 
K

ksfhhllp

Senior member
Jan 25, 2001
316
0
0
Not that it matters, but...

Domain Name.......... ebayconfirm.net
Creation Date........ 2002-12-06
Registration Date.... 2002-12-06
Expiry Date.......... 2003-12-06
Organisation Name.... Lol
Organisation Address. 81 Cottonwood Drive
Organisation Address.
Organisation Address. Daly City
Organisation Address. 94014
Organisation Address. CA
Organisation Address. UNITED STATES

Admin Name........... Elena paul
Admin Address........ 81 Cottonwood Drive
Admin Address........
Admin Address........ Daly City
Admin Address........ 94014
Admin Address........ CA
Admin Address........ UNITED STATES
Admin Email.......... xtatic@epimp.com
Admin Phone.......... 713-552-6352
Admin Fax............

Tech Name............ YahooDomains Techcontact
Tech Address......... 701 First Ave.
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94089
Tech Address......... CA
Tech Address......... UNITED STATES
Tech Email........... domain.tech@YAHOO-INC.COM
Tech Phone........... +1.6198813096
Tech Fax.............
Name Server.......... yns1.yahoo.com
Name Server.......... yns2.yahoo.com
 
N

nealr

Senior member
Dec 20, 2000
771
0
0
Wow, it really looks like an ebay site.. they did a good job putting it together.
 
You must log in or register to reply here.

TRENDING THREADS

COMPANY
RESOURCES
FOLLOW
Top Bottom