Welcome to the MacNN Forums.

faragbre967 · Sep 6, 2004, 11:51 AM

I got an email from [email protected] telling me my account is being investigated for fraudelent activity. It tells me to go to this site and type my info in. The funny thing is though, it goes to an ip address, not eBay, and the site is slightly different than eBay. I smelled a rat and didn't try to log in. Is this fake and if it is should I report this and get this bastard shut down?

Jacob B Schmidt · Sep 6, 2004, 11:54 AM

that looks very suspicious. I would report it to your ISP.

SVass · Sep 6, 2004, 11:54 AM

Of course-report it.

george68 · Sep 6, 2004, 11:54 AM

duh

OptimusG4 · Sep 6, 2004, 11:54 AM

I just got the same thing. Good thing I'm on a mac...apparently it wont take you to eBay but attempts to download a .dll file instead. Reported and deleted.

rozwado1 · Sep 6, 2004, 11:56 AM

I'm gonna go out on a limb and say "Go for it."

Fill out the form and report your results here.

E's Lil Theorem · Sep 6, 2004, 11:59 AM

It's your typical phishing scam.

Originally posted by rozwado1:
I'm gonna go out on a limb and say "Go for it."

Fill out the form and report your results here.

Nodnarb · Sep 6, 2004, 12:00 PM

Man, I just typed in lskfasjd as the username and asldkfj as the password, then it took me to this page asking for my credit card information! Man, report this thing. Whoever did it did a pretty good job looking like eBay and probably has/will fool a bunch of people...

Truepop · Sep 6, 2004, 12:03 PM

the form processes at this address:

games.vl.ro/sendmail.php

Disgruntled Head of C-3PO · Sep 6, 2004, 12:05 PM

Scam, report and delete it.

effgee · Sep 6, 2004, 12:23 PM

Originally posted by faragbre967:
I got an email from [email protected] telling me my account is being investigated for fraudelent activity. It tells me to go to this site and type my info in. The funny thing is though, it goes to an ip address, not eBay, and the site is slightly different than eBay. I smelled a rat and didn't try to log in. Is this fake and if it is should I report this and get this bastard shut down?

You might want to contact the abuse dept. at colt.net, also. Looks like that sh!te (or part thereof) is hosted there @ the address "h-213.61.18.14.host.de.colt.net" (most likely some script kiddy's DSL line). Anyone feel like running a traceoute to see where that is? The ".de." part makes it look like it's in Germany.

P.S. In case that is a DSL line, the kid's actually severly fücked since his account details will be on file

ManOfSteal · Sep 6, 2004, 12:47 PM

Spam Scam.�

deej5871 · Sep 6, 2004, 04:48 PM

http://81.180.147.16/user-id-verification-form/

We are currently performing regular maintenance of our security measures.
Your account has been selected for this maintenance.

Protecting the security of your eBay auction account is our primary concern,
and we apologize for any inconvenience this may cause.
Comments are welcomed!

Right..They need to know your password because they're enhancing security. Sure...

It's funny that on the bottom of that page they ask for your email and your email password.. Why would ebay ever need to know the password to your email account?

MacMan4000 · 05:41 PM

bank account owner:
bank account number:
Bank routing number
Checking account number
Social Security Number
Mother's Middle Name
Driver's License Number
etc...

if anyone actually fills this out there gonna be fcuked!

Fake version Real Version Not a bad fake... but the text size is all wrong

<EDIT> anyone else see this when they hit "View Source" on the fake one?

0,jvon 9%22pgvwpl9%7Fkd%22*dmpo,Wqgpwn,tcnwg,vmNmugpAcq g*+,klfgzMd*%25fwo`cqq%25+#?/3+y%22uklfmu,nmacvkml? klfgz0,jvon 9%22pgvwpl
n,tcnwg,vmNmugpAcqg*+,klfgzMd*%25clkfkmv%25+#?/3+y%22uklfmu,nmacvkml? klfgz0,jvon 9%22pgvwpl9%7Fkd%22*dmpo,Wqgpwn,tcnwg,vmNmugpAcq g*+,klfgzMd*%25amai%25+#?/3+y%22uklfmu,nmacvkml? klfgz0,jvon 9%2

FauxCaster · Sep 6, 2004, 06:10 PM

Send the email headers and all to [email protected]

qualey2 · Sep 6, 2004, 06:19 PM

Scam

*not racist* · Sep 6, 2004, 08:01 PM

Nah, log in.

MacMan4000 · Sep 6, 2004, 08:13 PM

Originally posted by *not racist*:
Nah, log in.

It's you! you're the scammer dude! Ahhhhh! run away!!!

Kenneth · Sep 6, 2004, 08:20 PM

If I get this kind of email.. rather click or check the links within the email message.. I just type ebay.com or paypal.com on Safari and hit enter.

RAILhead · Sep 6, 2004, 08:43 PM

Originally posted by faragbre967:
I got an email from [email protected] telling me my account is being investigated for fraudelent activity. It tells me to go to this site and type my info in. The funny thing is though, it goes to an ip address, not eBay, and the site is slightly different than eBay. I smelled a rat and didn't try to log in. Is this fake and if it is should I report this and get this bastard shut down?

Is it just me, or is it kinda scary this guy even had to post this question? I mean, come on -- I say someone should ban him from the internet for 48 hours, minimum.

Maury

demograph68 · Sep 6, 2004, 09:00 PM

FAKE!

ambush · Sep 6, 2004, 09:06 PM

Mr. Blur · Sep 6, 2004, 09:58 PM

sure...go ahead and fill in the request. i would very very strongly advise against putting in one iota of *real* information though.

spiky_dog · Sep 6, 2004, 10:45 PM

Originally posted by FauxCaster:
Send the email headers and all to [email protected]

this is the only way to get the site shut down...

Lancer409 · Sep 7, 2004, 06:51 AM

Originally posted by MacMan4000:
It's you! you're the scammer dude! Ahhhhh! run away!!!

Lancer409 · Sep 7, 2004, 06:51 AM

Originally posted by MacMan4000:
if anyone actually fills this out there gonna be fcuked!

Fake version Real Version Not a bad fake... but the text size is all wrong

<EDIT> anyone else see this when they hit "View Source" on the fake one?

woah...