posted on May 25, 2003 03:06:42 PM new
At least I learned the proper procedure to follow after one receives one of these disgusting scam emails:
1) HIT FORWARD...
2) In the "TO" field, enter...
3) [email protected]
4) SEND & hope that feeBay prosecutes these pretzel-chokers!
BELOW is eBay's response (pretty concise, actually) & below THAT is the scam email I had received today...
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Hello,
Thank you for writing regarding the email you received.
The message you received was not sent by eBay nor was it endorsed by us
in any way. By altering the reply-to address for this email, this
message may appear to have come from an eBay email address, when it
actually came from an external email address. This also means that
hitting the reply to button will send the message to the altered email
address in the reply to field. This process is commonly referred to as
"Spoofing".
Please rest assured that your account standing has not changed and that
your auctions have not been affected. We are currently investigating
the source of the email. Although we are unable to provide specific
information regarding the result of our investigation, let me assure you
that eBay does take these matters seriously. We work closely with ISPs
to remove sites members are directed to as quickly as possible.
Please remember that eBay will never ask you for your private
information, including credit card information or password, in an email.
Also, eBay will never send you any request or solicitation from a
non-eBay email account, or provide a link outside of eBay for entering
credit card or other private information. If you ever need to give us
information, it is suggested that you go to the main website and follow
links there to the site map or any other place you may need to give
information. That way you are certain you are giving your information
to us and not a third party.
If you entered personal information such as your password, social
security number or credit card numbers into a Web site based on a
request from a spoofed email, you need to take immediate action to
protect your identity. We have developed an eBay Help page with valuable
information regarding the steps you should take to protect yourself.
or, to get to the "Protecting Your Identity" Help page from the eBay
site, please follow the steps outlined below:
1. Go to the eBay site and click on the Help tab at the top of any eBay
page
2. Under the "Topics" tab, click on "Safe Trading," which will open a
list of sub categories
3. Click on, "If Something Goes Wrong"
4. Click on "Protecting Your Identity" and review the information
provided
In the future if you receive a similar email, do not respond to it, and
visit the following link:
Here you will be given the steps to take when reporting spam messages to
eBay.
You may also report future messages impersonating eBay to us by
forwarding the message to [email protected]. When using this email address
please make sure that you use the forward function of your email program
with [email protected] in the to field. Please do not alter the subject
line, add text to your message, or forward the email as an attachment.
We believe that some members are receiving these messages because they
are using or have used their email address for their user ID. We
recommend that all members have a user ID. If your user ID is currently
your email address you may change it by following the instructions
below:
* Click on the site map link located at the top of any eBay page
* Scroll through the 'Services' section
* Click on 'Change my User ID' and follow the instructions on that page
All of your account information will be linked to the new ID including
your feedback profile. Additionally, you will have a Changed ID icon
next to your new ID for 30 days to alert members to the change.
More information about account security can be found at the following
address:
We apologize for any confusion this message may have created for you and
we appreciate your efforts in helping keep eBay a safe trading place.
Regards,
Ian
eBay SafeHarbor
Investigations Team
______________________________
eBay
Your Personal Trading Community (tm)
*******************************************
Important: eBay will not ask you for sensitive personal information
(such as your password, credit card and bank account numbers, Social
Security numbers, etc.) in an email. Learn more account protection tips
at:
In order to better serve you, we'd like to occasionally
request feedback on our service. If you would rather
not participate, please click on the link below and send
us an email with the word "REMOVE" in the subject line.
If that does not work, please send an email to the
email address below. Your request will be processed
within 5 days.
Original Message Follows:
-------------------------
From: Tom & Ralphie
To: eBay Customer Support <[email protected]>
Subject: Fw: You deserve a special thank you from eBay !
Untitled Document
----- Original Message -----
From: [email protected]
To: Mr. Boston Red Sox Ralph
Sent: Sunday, May 25, 2003 1:56 PM
Subject: You deserve a special thank you from eBay !
posted on May 25, 2003 03:12:18 PM new
I haven't received that one yet. I received a spoof paypal one last week and 2 other spoof ebay ones this morning. I forwarded the paypal one to my paypal rep (I didn't know where else that one should go), and he pretty much told me just delete them - they have too many to go after anyone. That's the impression I got from him anyway.
posted on May 25, 2003 03:13:39 PM new
BTW: The headers are VEEEERY INTERESTING (ala Arte Johnson):
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Received: from enforcer.st (serban.org[66.139.75.232](untrusted sender))
by sccrmxc12.attbi.com (sccrmxc12) with ESMTP
id <12345678987654321>; Sun, 25 May 2003 17:54:19 +0000
Received: from recognition.ebay.com (localhost.localdomain [127.0.0.1])
by enforcer.st (8.11.6/8.11.6) with ESMTP id h4PHuqJ00541
for <RalphSNORESlikeANoldMAN>; Sun, 25 May 2003 12:56:52 -0500
Date: Sun, 25 May 2003 12:56:52 -0500
Message-Id: <[email protected]>
To: EvenRALPHIEknowsTHEtax-cutISaJOKE
From: [email protected]
Subject: You deserve a special thank you from eBay !
Content-Type: text/html; charset=ISO-8859-1
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body><table align=left width=60%>
<TD align=middle bgColor=#ffffff height=11><center><IMG height=119 width=454 src="http://[email protected]:12123/community/recognition/orangeStarLogo.JPG" ></center></TD></TR>
<p> </p>
<TR>
<TD bgColor=#ffffff height=22>
<P align=center><FONT color=#333399 size=2><B>CONGRATULATIONS
ON EARNING YOUR ORANGE
STAR!</B></FONT></P></TD></TR>
<TR>
<TD bgColor=#ffffff vAlign=top><p><IMG align=left height=202 hspace=9
vspace=9 width=202 src="http://[email protected]:12123/community/recognition/orangeStar.jpg" > We
at eBay would like to congratulate you on obtaining feedback points and
reaching the
Fidelity Star level. <BR>
<BR>
In order to thank you for your active support of
the eBay marketplace and your dedication in obtaining feedback points,
something that's integral to the success of the marketplace, eBay would
like to offer a token of our esteem for all of your hard work and
dedication. <BR>
<BR>
eBay is sending out this thank you and invitation to
receive a 30% discount on all you're ebay expenses for the next 3 months
as a gift to everyone who has already attained a Fidelity Star level. Below
you have the promotion code needed to activate the gift.</p>
posted on May 25, 2003 03:20:44 PM new
Another new twist. My, they are getting inventive. I keep sending mine to spoof. I wonder how many they have done something about. What I find interesting is that this is the ONLY spam I get on my eBay e-mail account. I don't use it for anything else that could be file scraped. Hmmmm.
posted on May 25, 2003 03:21:04 PM new
I received that same email just a few days ago and started a thread on it right here !
I was stupid enough to click on mine since I got all excited about getting 30% off eBay fees (HA HA... RIGHT!) but quickly decided that there are no orange eBay stars !
I guess these spoofers picked orange for high alert !!
As someone here told me to do, so you might also want to do... is edit that email you have copied and pasted to remove that other persons email that's on it.
Right where I have the XXX's there is an email address @yahoo ( I just copied & pasted this part of your email that you put on here )
Bay sent this e-mail to you because your Notification Preferences
indicate that you want to receive information about Special Promotion,
Offers and Events. You are subscribed as XXXXXXXXXXXXXXXXXXX To change
your communication preferences simply reply to this e-mail with
UNSUBSCRIBE in the subject line. Please
posted on May 25, 2003 03:37:40 PM new
HA HA HA..........yep that B the one HA HA
On the one I received it did have a similar nasty-stupid email address that was also yahoo.....I never even noticed mine .... so I figured same for you !!
posted on May 25, 2003 07:35:07 PM new
The IP address in the headers can reveal quite a bit. Also when you put you mouse pointer on the link lokk right down at the bottom of the window to see where it is really going to take you. Usually it will contain an IP address as well as other bits and pieces. Here is an example that I posted for someone in the PayPal thread. What I do when I get these emails is click on the link below and find out who owns the ip address. In this case "211.229.208.136" Just cut and paste the number into the search box in the link and hit the button.
http://www.arin.net/whois/index.html
or
http://www.apnic.net/apnic-bin/whois.pl
This is what i found when I did a search on this ip.
inetnum: 211.226.0.0 - 211.231.255.255
netname: KORNET
descr: KOREA TELECOM
descr: KOREA TELECOM Internet Operating Center
country: KR
admin-c: DL276-AP
tech-c: WK81-AP
Wow! Who would have thought that paypal ran their servers through a Korean ISP.
I thought you all might like another handy tool to keep the bottom feeders at bay.
Cheers,
Adrian
