PDA

View Full Version : EBAY scam..


Synthohol
07-22-2006, 10:07 AM
this cant be real.. beware!
i got 2 emails


1)
TKO NOTICE: Restored Account



Dear Member,

It appears your account was accessed by an unauthorized third party. To protect your account from further unauthorized use, we have temporarily restricted your account from sending email through Ask Seller a Question or Contact e-Bay Member, listing and bidding on items. Additionally, the email address on your account may have been tampered with, which is why you may not have received an email about any unauthorized activity. We have taken steps to secure your e-Bay account.

If your account was used in any unauthorized activity, such as listing items or placing bids, this activity has been cancelled without incident. Any associated fees were credited to your account. We assure you that your credit card information is stored on a secure server and cannot be viewed by anyone.

To regain control of your account, please click on the link below:

Click here to restore your account !

About e-Bay | Announcements | Learning Center | Security & Resolution Center | Policies | Government Relations | Site Map | Help


This administrative email was sent to an e-Bay Member from e-Bay. Your account is registered on www.e-bay.com. As outlined in our User Agreement, e-Bay will periodically send you information about site changes and enhancements. If you would like to receive this email in text format, change your notification preferences.

Copyright © 2006 e-Bay, Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
e-Bay and the e-Bay logo are registered trademarks or trademarks of e-Bay, Inc.
e-Bay is located at 2145 Hamilton Avenue, San Jose, CA 95125.

PROPERTIES))
Received: from xxx.xxx.xxx.xxx ([xx.xx.xx.xxx]) by liquidninjas.com with MailEnable ESMTP; Fri, 21 Jul 2006 22:49:22 -0400
Received: from 210.67.204.142 by ; Sat, 22 Jul 2006 02:47:13 -0100
Message-ID: <TFLFTTYURFGQBNGPYXPOOXF@yahoo.com>
From: "support@ebay.com" <support@ebay.com>
Reply-To: "support@ebay.com" <support@ebay.com>
To: synthohol att liquidninjas.com
Subject: TKO NOTICE: Restored Account
Date: Sat, 22 Jul 2006 06:44:13 +0300
X-Mailer: Internet Mail Service (5.5.2650.21)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--14477706115122001925"
X-Priority: 1
X-MSMail-Priority: High
Return-Path: <support@ebay.com>

second email)
eBay Item Not Received Dispute Opened for Item #6884608151




Dear member :
shadow69696 has informed eBay that they have not yet received item 9303607451, K - SWISS Verstad, BRAND NEW, UK Size 9.5, Color NAVY.

There are many reasons why this might have happened. Perhaps the item is still in transit, the payment has not yet cleared, or maybe it was accidentally sent to the wrong address. In addition, buyers can sometimes have unrealistic expectations about how much time it can take for payment, postage and delivery. As a result, no action is being taken by eBay at this time.

However, it's important to remember that when you sell an item on eBay you're agreeing to a contract between you and the buyer. If you don't send an item that a buyer has purchased you may be committing fraud.

Most Item Not Received disputes can be solved with direct communication between the buyer and seller, and we encourage you to work with your trading partner to resolve this situation. Click the link below to view and reply to the information submitted by the buyer.

If you don't respond by 10-Aug-2006 the buyer may elect to escalate this ma
Learn more about eBay's Item Not Received or Significantly Not as Described Process.

You can view the status of this dispute at any time by visiting your Dispute Console, which is accessible here:
http://rebulk.ebay.co.uk/ws/eBayISAPI.dll?ViewDisputeConsole&DisputeType=3

Thank you for your patience and co-operation.


Regards,
eBay

PROPERTIES))
Received: from mail.com ([xx.xxx.xx.xxx]) by liquidninjas.com with MailEnable ESMTP; Sat, 22 Jul 2006 00:06:17 -0400
From: "eBay" <aw-confirm@eBay.com>
Subject: eBay Item Not Received Dispute Opened for Item #6884608151
Date: Fri, 21 Jul 2006 23:06:15 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Return-Path: <aw-confirm@eBay.com>





i have sent this to spoof@ebay.com

dont be fooled, it looked almost genuine until i saw the @yahoo address.

also i removed the ip adresses..

DCMan
07-22-2006, 12:25 PM
Thats fairly convincing!

Flybye
07-22-2006, 04:35 PM
I'm impressed that you've only gotten one of these!!
I've probably received 10+ of these type of emails from so called Ebay & Paypal.

Every single one I always forward it to the spoof emails provided by both companies. It's a shame things like this happen.

Synthohol
07-23-2006, 01:02 AM
response..
Thank you for contacting us about a potential fraudulent (spoof) email
or Web site. We will investigate this situation immediately and inform
you of the results in a separate email. If you are reporting an email or
a Web site that is asking for personal financial information, it is best
to assume it is fake until you receive a response from us.

In order to reply as quickly as possible, we are sending you an
automated response about the following topics:

1. IDENTIFYING FAKE EMAILS AND WEB SITES
2. USING EBAY TOOLBAR WITH ACCOUNT GUARD
3. PROTECTING YOUR ACCOUNT AND INTERNET SECURITY

Please submit other questions or concerns through our Contact Us System,
which can be accessed by clicking on the "help" button on the top of any
eBay page. This allows us to dedicate our resources appropriately.

1. IDENTIFYING FAKE EMAILS AND WEB SITES
The best defense against fake emails and Web sites is learning how to
spot them. You can learn more about fake emails and Web sites through
our Spoof Tutorial at the following Web page:

http://pages.ebay.com/education/spooftutorial/

You can also use My Messages (located at the top of the My eBay page) to
detect Phishing emails. If an email from eBay affects your eBay account
or asks for personal information, it's now in My Messages. Any email
sent to your registered eBay email address from eBay that concerns your
account or requests personal information will now appear in My Messages.

2. USING EBAY TOOLBAR WITH ACCOUNT GUARD
One of the best tools to protect yourself from fraudulent (spoof) Web
sites is eBay Toolbar with Account Guard. The Account Guard feature
indicates when you are on an eBay or PayPal Web site and warns you if
you are on a known spoof site. To learn more about eBay Toolbar with
Account Guard open a new browser and type www.ebay.com/ebay_toolbar into
the address bar.

3. PROTECTING YOUR ACCOUNT AND INTERNET SECURITY
We recommend that you keep your browser, operating system, and virus
protection software up to date. Check for updates at the "Windows
Update" link on www.microsoft.com and scan your computer for viruses
often.

If you think your personal information has been compromised in any way,
you should take immediate steps to change your eBay, PayPal, and email
passwords. You should also contact your bank to see if there has been
any suspicious activity on your account. You can find more information
about protecting your identity at the following help page:

http://pages.ebay.com/help/confidence/problems-identity-theft.html

Thank you again for sending us your report. We appreciate your efforts
to keep eBay and PayPal safe.

Regards,

eBay Trust & Safety Team

properties look better!!

Received: from mx40.sjc.ebay.com ([xx.xxx.xxx.xx]) by liquidninjas.com with MailEnable ESMTP; Sat, 22 Jul 2006 09:14:12 -0400
Received: from smf-klm-01.corp.ebay.com (smf-klm-01.corp.ebay.com [10.108.116.100])
by mx40.sjc.ebay.com (8.13.5/8.13.5) with ESMTP id k6MDE6BH012117;
Sat, 22 Jul 2006 06:14:11 -0700
DomainKey-Signature: a=rsa-sha1; s=dk; d=ebay.com; c=nofws; q=dns;
h=received:precedence:auto-submitted:date:to:subject:from:
reply-to:mime-version:content-type:
content-transfer-encoding:x-mailer:message-id;
b=YeUrp2jvUc6DYJ2IbAlmsD7hKYfq5r1/JYOkvphDZs+wUTFQwHJw8qK6r6A3Wkbip
NgrFyMFBt3+9xZ5SMwvgElWyWp3OECute5Gm2eVYrgS/7fm28POVP1ckWEnvtWVlp2F
jsfvfyRAzT3wIWyr8BWKaIIIEin6hw6idMHK9/w=
Received: from [10.108.47.123] (HELO USA-KTSAE-004.corp.ebay.com)
by smf-klm-01.corp.ebay.com (CommuniGate Pro SMTP 4.1.5)
with SMTP id 189258600; Sat, 22 Jul 2006 06:14:09 -0700
Precedence: bulk
Auto-Submitted: auto-replied
Date: Sat, 22 Jul 2006 06:14:08 -0700
To: Synthohol <Synthohol at liquidninjas.com>
Subject: Thank You for Your Report (SafeHarbor) (KMM33582393V74014L0KM)
From: eBay Customer Support <spoof@ebay.com>
Reply-To: eBay Customer Support <spoof@ebay.com>
MIME-Version: 1.0
Content-Type: text/plain; charset = "us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: KANA Response 7.0.1.142.13
Message-ID: <auto-000189258600@smf-klm-01.corp.ebay.com>
Return-Path: <spoof@ebay.com>

and...

Hello,

Thank you for writing to eBay regarding the email you received.

Emails such as this, commonly referred to as "spoof" or "phished"
messages, are sent in an attempt to collect sensitive personal or
financial information from the recipients.

The email you reported was not sent by eBay. We have reported this email
to the appropriate authorities.

In the future, be very cautious of any email that asks you to submit
information such as your credit card numbers or passwords. If you are
ever concerned about an email you receive from eBay, simply follow these
steps:

1. Open a new Web browser and type www.ebay.com into your browser
address field to go directly to the eBay site.

2. On eBay, sign into your account and click the "My eBay" button at the
top of the page.

3. Check the My Messages section located at the top of the My eBay page.
If an email affects your eBay account, it's now in My Messages. Any
email sent to your registered eBay email address from eBay or from
another eBay member via eBay's member-to-member communication system
will now appear in My Messages.

Just remember, if you get an email to your registered eBay email address
that looks like it's from eBay about a problem with your account or
requesting personal information, check My Messages first. If it's not
there, it's a fake email.

If you still have any doubt about whether an email message is from eBay,
please forward it immediately to spoof@ebay.com. Do not respond to it or
click any of the links. Do not remove the original subject line or
change the email in any way when you forward it to us.

If you have already entered sensitive personal information, financial
information, or your password into a Web site based on a request from a
spoofed email, you should take immediate action to protect your identity
and all of your online accounts. We have developed an eBay Help page
with valuable information regarding the steps you should take to protect
yourself.

http://pages.ebay.com/help/tp/isgw-account-theft-reporting.html

To review eBay's new tutorial about Spoof Emails, please see the
following Web page:

http://pages.ebay.com/education/spooftutorial/

To help you better protect yourself from fake eBay and PayPal Web sites,
we have developed a feature for the eBay Toolbar called "Account Guard."
Account Guard includes an indicator of when you are on an eBay or PayPal
Web site or a known spoof (or "phishing") site, buttons to report fake
eBay Web sites, and a password notification feature that warns you when
you may be entering your eBay password on an unverified site.

To learn more about the eBay Toolbar with Account Guard go to
www.ebay.com, click on "Downloads" at the bottom of the page, and then
click on the "eBay Toolbar" link.

Once again, thank you for alerting us to the spoof email you received.
Your efforts help keep eBay a safe and fair place to trade.

Regards,

eBay SafeHarbor
Investigations Team


properties...

Received: from mx22.sjc.ebay.com ([66.135.197.17]) by liquidninjas.com with MailEnable ESMTP; Sat, 22 Jul 2006 09:16:28 -0400
Received: from smf-klm-01.corp.ebay.com (smf-klm-01.corp.ebay.com [10.108.116.100])
by mx22.sjc.ebay.com (8.13.5/8.13.5) with ESMTP id k6MDGDlw026509;
Sat, 22 Jul 2006 06:16:27 -0700
DomainKey-Signature: a=rsa-sha1; s=dk; d=ebay.com; c=nofws; q=dns;
h=received:date:to:subject:from:reply-to:mime-version:
content-type:content-transfer-encoding:x-mailer:message-id;
b=navDGcOX49iSQtqKmyCgmbGR2iAFyd4/fUOc7BF3Djez9kvfrXbA9F9JWM9ILlcMc
2i7U5H/3DjPv0t99XB6DLn6KGPglqSiqeI/jQ9bCXovryuDpltrDUaYoKoHL1BEuIMI
cW8CKsA/9TinQ7fqEN5h3N/S2z0AXkK8QGqgVI8=
Received: from [xx.xxx.xx.xxx] (HELO usa-ktsae-003.corp.ebay.com)
by smf-klm-01.corp.ebay.com (CommuniGate Pro SMTP 4.1.5)
with SMTP id 189258910; Sat, 22 Jul 2006 06:16:27 -0700
Date: Sat, 22 Jul 2006 06:16:26 -0700
To: Synthohol <Synthohol at liquidninjas.com>
Subject: RE: SP91011 - Your recent report to eBay's Trust and Safety Department (KMM33582566V74151L0KM)
From: "rswebhelp@ebay.com" <rswebhelp@ebay.com>
Reply-To: "rswebhelp@ebay.com" <rswebhelp@ebay.com>
MIME-Version: 1.0
Content-Type: text/plain; charset = "us-ascii"
Content-Transfer-Encoding: quoted-printable
X-Mailer: KANA Response 7.0.1.142.13
Message-ID: <auto-000189258910@smf-klm-01.corp.ebay.com>
Return-Path: <rswebhelp@ebay.com>

much better, at least they take it seriously:)


lol, and while im posting this another came in...

Dear PayPal Member,

During our regularly schedule account maintenance and verification we have detected a slight error in your billing information on file with PayPal.
This might be due to either following reasons:

- A recent change in your personal information (i.e. change of address)
- Submitting invalid information during the initial sign up process.
- An inability to accurately verify your selected option of payment due an internal error within our processors.

Therefore your account has been temporarily suspended. We need you to confirm your identity in order to regain full privileges of your account.

If this is not completed by July 24, 2006, we reserve the right to terminate all privileges of your account indefinitly, as it may have been used for fraudulent purposes. We thank you for your cooperation in this manner.
To confirm your identity please follow the link below:

https://www.paypal.com/cgi-bin/webscr?cmd=_login-run


Thank you for your patience in this matter.

PayPal - Customer Service

Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered.

bullshit properties too...
Received: from 192.168.1.2 ([xx.xx.xx.xxx]) by liquidninjas.com with MailEnable ESMTP; Sat, 22 Jul 2006 10:42:36 -0400
Received: from xxx.xxx.xxx.xxx by ; Sat, 22 Jul 2006 10:32:02 -0500
Message-ID: <YPFRWGQNRVMYKQVNESJQO@yahoo.com>
From: "PayPal" <service@intl.paypal.com>
Reply-To: "PayPal" <service@intl.paypal.com>
To: synthohol at liquidninjas.com
Subject: Notification of Security Measures
Date: Sat, 22 Jul 2006 17:39:02 +0200
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--411367964313758866"
X-Priority: 1
X-MSMail-Priority: High
Return-Path: <service@intl.paypal.com>




spoof fowarded agaiun :)

Synthohol
07-29-2006, 01:28 PM
yeah right!!!

the link fixed itself here but the original was to another IP address...



ber:



We regret to inform you that your account has been suspended .
As a result, your access on PayPal has been restricted.
To start using fully your PayPal account, please update and verify your information by
responding this notification. If you could please take 5-10 minutes
out of your online experience and update your personal records you will not run into
any future problems with the online service.



Please update your records on or before August 03, 2006.

Once you have updated your account records, your PayPal session will not be
interrupted and will continue as normal.

To update your PayPal records click on the following link:
https://www.paypal.com/cgi-bin/webscr?cmd=_login-run



Thank You.
PayPalUPDATE TEAM