Author Topic: Weird eBay email/scam  (Read 1594 times)

Offline krissel

  • Administrator
  • TS Addict
  • *****
  • Posts: 14735
    • View Profile
Weird eBay email/scam
« on: September 23, 2003, 01:52:14 AM »
This is obviously some sort of scam but not done very well.

The message comes through looking like this.

What happens when you click on the link is you get the infamous Verisign intercept:

Verisign intercept

Apparently the central area of the email is actually a gif image so you can't go to the so-called link in the message.

Here's the full header (minus my email addy) :

QUOTE
Return-Path: <us-confirm15@ebay.com>
Received: from mtiwgwc23.worldnet.att.net ([127.0.0.1])
          by mtiwgwc23.worldnet.att.net
          (InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with ESMTP
          id <20030922233213.YGCL6789.mtiwgwc23.worldnet.att.net@mtiwgwc23.worldnet.att.net>
          for <>; Mon, 22 Sep 2003 23:32:13 +0000
Received: from microsoft.com (modemcable095.142-200-24.mtl.mc.videotron.ca[24.200.142.95])
          by mtiwgwc23.worldnet.att.net (mtiwgwc23) with SMTP
          id <200309222332110230087glve>; Mon, 22 Sep 2003 23:32:13 +0000
Date: Mon, 22 Sep 2003 23:28:07 +0000
From: eBay <us-confirm15@eBay.com>
Subject: 0fficial Notice for all eBay users
To: Krissel <>
References: <A3JEC702JJHHHG94@att.net>
In-Reply-To: <A3JEC702JJHHHG94@att.net>
Message-ID: <K7H4E81134ALKF98@eBay.com>
Reply-To: eBay <us-confirm15@eBay.com>
Sender: eBay <us-confirm2@eBay.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_6J016764D3E7D8CGF29K7E326"

<x-html><!x-stuff-for-pete base="" src="" id="1" charset=""><html>
<p><a href="http://scgi.ebay.com@%32%31%31%2E%34%38%2E%31%39%34%2E%32%31%39:%38%39%30/"><img src="cid:pic.gif" width="477" height="241" border="0"></p>
<p><font color="#FFFFF4">I am a in 1804 yTg in 1960 in 1808 I'll speak my mind. Keep calm! kItRrnB OLCdZiodDup IK</font></p>
<p><font color="#FFFFF7">Erika may hit  let's forget He's about  196 children are 6 Are you? 578 rest of the It's not for me</font></p>
<p><font color="#FFFFF2">Get your  where do you live? Come on! I'll call back! in fact in 2007 MII in 1996 in 1836 Should be allowed How are you? not on your side in 1961</font></p>
</body>
</html>

</x-html>
Related: :DALI:pic.gif:000536E8:3F170E19:00000000:00000000


And what's with the gobbledygook at the end of the message?   huh.gif

BTW, I recieved this message again a few hours later with different odd sayings at the bottom.

 wacko.gif
« Last Edit: September 23, 2003, 01:57:01 AM by krissel »


A Techsurvivors founder

Offline MrsLop

  • TS Addict
  • *****
  • Posts: 630
    • View Profile
    • http://
Weird eBay email/scam
« Reply #1 on: September 23, 2003, 06:53:11 AM »
Hello krissel,

It's enough to drive you wacko.gif . There was something listed on the Cox Homepage for Rhode Island about Cox and eBay. I believe that they referred to it as a scam also.

http://www.rhodeisland.cox.net

I don't know how many fraudulent scams using eBay in some fashion there were/are circulating: PayPal, C2IT, account and password verifications etc..

From my cursory reading of the articles involving these scams, it has something to do with harvesting the information when you use the link from the email.

When I want to find out what is going on, I go to eBay and check out the Community bulletins, system status and etc. . They usually have a set of instructions listed regarding this type of email.

MrsLop