Help - Search - Members - Calendar
Full Version: OT: Anyone find this a little fishy?
914World.com > The 914 Forums > 914World Garage
ninefourteener
This is cut and pasted from an e-mail I got from ebay. Is it real?? Would ebay do this??

Dear valuable member,

eBay.com is trying to prevent hacker activities and
hacker damages in our system. Due to a lately multiple
hacker activities, some of our database has been
damaged. In order to keep your account, you have to
reply to this message with the following details:

Account login :
Account password:
First Name :
Last Name :
Address 1 :
Address 2 : (none)
City :
State :
Zip :
Country :
Telephone :
Fax :

Soon, you will receive an email containing our
details about your account and the new password, only
if the account was damaged. Your credit card details
will be processed separately, in a secure form on our
site. We are sorry for any inconvenience, but we are
working hard to keep up the good work. This e-mail message
was sent to you from eBay SquareTrade center and with
the full support of our SafeHarbour staff.



Copyright © 2003 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective
owners.
eBay and the eBay logo are trademarks of eBay Inc.
Brad Roberts
Send it to Ebay FRAUD. Look at the copyright: 2003



B
hargray2
FAKE! The only time you should enter any info anywhere is at the actual site's secure area. Never fill in info in an e-mail--minimize the window and open a new one at the actual site. Make sure the address bar says https:// not http://
Lou W
agree.gif
morph
forward it to spoof@ebay.com
double-a
scam. i get those at least once or twice a month.

~a
Allan
BOGUS!!! ar15.gif
Rhodes71/914
Totaly fake

I get one that says it's from earthlink, my isp, at least once a month. First time I contacted them, since then I just delete. They even have the balls to ask for credit card info, ya right i'll just email that right on over.

jackasses!
skline
The spelling and grammar should have been your first clue. I got one yesterday and sent it to spoof@ebay.com. I get them all the time. Must be someone from another country or an illiterate high school drop out.
brp914
Fake - note the poor english:

Due to a lately multiple
hacker activities, some of our database has been
damaged.
bperry
Pretty much anything that asks for passwords is a fake
But a sure fire way to tell is to look at the full e-mail header.
fakes/spoofs/spams never originate from who they are trying
to spoof.
You can fake a lot of the e-mail header but you can't fake where
where the e-mail really originates from.

If you use outlook express it is not very easy to look at the full headers.
You have to save the e-mail (as a .eml) file and then use
a text editor such as notepad to bring it up.

Example of one I got:
-----------------------
Received: from adsl-67-125-197-112.dsl.lsan03.pacbell.net ([67.125.197.112]) by sccrmxc15.comcast.net (sccrmxc15) with SMTP id <20040208072518s1500ntefqe>; Sun, 8 Feb 2004 07:25:20 +0000
X-Originating-IP: [67.125.197.112]
Received: from ebay.com (data.ebay.com [66.135.195.180]) by adsl-67-125-197-112.dsl.lsan03.pacbell.net (Postfix) with ESMTP id 5537DEFD91 for ; Sun, 08 Feb 2004 01:25:25 -0600
From: "eBay Service"
To: "Bperrybap"
Subject: Ebay Account Update

--------

From outlook/outlook express it looks like its from ebay but you can
see from the header that it is from a DSL user on pacbell not Ebay.
You can even see his IP address is: 67.125.197.112

There are legitimate reasons to actually spoof or alter a return/reply
address but they are pretty rare and
I've never seen spammers attempt to try to compose
their headers this way.
I have no idea why ISPs don't do a better/smarter job of using
email header information to delete obvious spam and spoofed e-mails.


--- bill
p914
Copy the entire properies message info that contains all the headers and body of the email and post it. There may be more to this than the originating IP address. A lot of these come from Romania.

Or if you copy and post the links that are in the email I can track em. Don't click on them from your email.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2024 Invision Power Services, Inc.