Ebay security question

Sell and Buy equipment via Ebay and Craigslist
Forum rules
This is for posting links to off site deals that you are not personally selling,but wanting to pass along good deals
Post Reply
User avatar
cjk
5 valves
5 valves
Posts: 1915
Joined: Fri Mar 19, 2004 12:16 pm

Post by cjk »

It's spam designed to lift your personal information.

Note the url. It doesn't take you to Ebay.

Source addresses of emails are extremely easy to fake. Take the email you receive with a grain of salt. If there's any doubt in your mind as to whether an email is spam or not, it's spam.
User avatar
ThomasDodd
5 valves
5 valves
Posts: 1161
Joined: Tue Mar 23, 2004 11:37 am
Location: BFE, Mississippi

Post by ThomasDodd »

Forward a copy to ebay's fraud address.
User avatar
windshieldbug
Once got the "hand" as a cue
Once got the "hand" as a cue
Posts: 11511
Joined: Tue Mar 01, 2005 4:41 pm
Location: 8vb

Post by windshieldbug »

You did good by asking if you weren't sure!
Instead of talking to your plants, if you yelled at them would they still grow, but only to be troubled and insecure?
User avatar
Rick F
5 valves
5 valves
Posts: 1677
Joined: Thu Mar 18, 2004 11:47 pm
Location: Lake Worth, FL

Post by Rick F »

I just checked that URL above. It's been closed down.
This URL redirection has been closed down

The web site you are trying to browse to has been disabled.
The cause for this can be SPAM, illegal content or violations to Kickme.to/Has.it TOS
Miraphone 5050 - Warburton mpc (Brandon Jones)
YEP-641S (on long-term loan to grandson)
DE mpc (102 rim; I-cup; I-9 shank)
User avatar
Chuck(G)
6 valves
6 valves
Posts: 5676
Joined: Fri Mar 19, 2004 12:48 am
Location: Not out of the woods yet.
Contact:

Post by Chuck(G) »

Another thing is NEVER click on an address with an "@"sign in it, nor with a site represented by a numeric value only:

For example (all of these are harmless):

http://www.ebay.com@www.tubasr.us

Or

http://support.ebay.com@1113982824

Or even

http://1113982824

Same cautions for web site addresses using the % sign:

http://purchases.ebay.com@%57%57%57%2e%54%55%42%41%53%52%2e%55%53

Or anything with a dotted IP address:

http://66.102.7.147

And never click on an address in HTML without knowing what it actually points to:

http://www.ebay.com

Some of these may not work with all browsers, but a spoofer only needs one "sucker".
User avatar
Dan Schultz
TubaTinker
TubaTinker
Posts: 10423
Joined: Thu Mar 18, 2004 10:46 pm
Location: Newburgh, Indiana
Contact:

Post by Dan Schultz »

The email you received was not from Ebay. The message you received is commonly known as 'phishing' and is designed to steal your identity. Forward email like this directly to ebay at this email address:

spoof@ebay.com

Ebay will NEVER send you a message requesting your personal information.
Dan Schultz
"The Village Tinker"
http://www.thevillagetinker.com" target="_blank
Current 'stable'... Rudolf Meinl 5/4, Marzan (by Willson) euph, King 2341, Alphorn, and other strange stuff.
User avatar
Rick F
5 valves
5 valves
Posts: 1677
Joined: Thu Mar 18, 2004 11:47 pm
Location: Lake Worth, FL

Post by Rick F »

Good points Chuck. Sometimes a link can be disguised too. The link looks like the real thing, but if you 'right-click', 'copy shortcut' and then paste it in an email or someplace you can check it, you may see something entirely different. I've seen this while helping McAfee AV as a volunteer moderator on their forum.

Google sometimes does for their sponsored links to hide the fact they have tracking cookies or ad-ware. For instance, go to Google, type in "McAfee" (without the quotes). The two sponsored links look like, "www.mcafee.com" and "www.memoryoptimizer.com". If you copy Google's shortcut (right-click etc) and paste in somewhere, you'll see it goes to a different URL entirely. That first link takes you to McAfee by way of some browser tracking service.
Miraphone 5050 - Warburton mpc (Brandon Jones)
YEP-641S (on long-term loan to grandson)
DE mpc (102 rim; I-cup; I-9 shank)
User avatar
ABQtuba
bugler
bugler
Posts: 24
Joined: Thu Feb 17, 2005 3:15 pm
Location: Albuquerque NM
Contact:

eBay spoof

Post by ABQtuba »

I've gotten these too. They never come from eBay. If you look at the address in the link, it's usually a URL in numerals--not eBay's. When I get these, I forward them to spoof@ebay.com.

I've also gotten spoofed messages requesting that I update my banking info, credit card info, etc. They're never legitimate--just attempts to collect your valid information for some purpose you wouldn't approve of.
ABQtuba
King 2341
Reynolds Contempora
Yamaha YBB-621
User avatar
ThomasDodd
5 valves
5 valves
Posts: 1161
Joined: Tue Mar 23, 2004 11:37 am
Location: BFE, Mississippi

Post by ThomasDodd »

I got one over the weekend, not from ebay, but a bank. My bank merged with this one before being bough by a 3rd. The spoof suggested my debit card was used in an ATM in europe, and to go to the banks site to clear it up. Since I never banked with this particular bank, I looked a little deeper.
But the link text didn't match the HTML reference.

text was bank.name.com, HTML was bank-name.com
Took me a few minutes to figure out what the problem was, but it was there.
Post Reply