HomemadeTurbo - DIY Turbo Forum

HomemadeTurbo - DIY Turbo Forum (https://www.homemadeturbo.com/)
-   General Discussion (https://www.homemadeturbo.com/general-discussion-6/)
-   -   OMG look at this email!!!! (https://www.homemadeturbo.com/general-discussion-6/omg-look-email-9660/)

Dr.Boost 09-12-2003 05:30 PM

OMG look at this email!!!!
 
Dear eBay Uder,

During our regular udpate and verification of the accounts, we couldn't verify your current information. Either your information has changed or it is incomplete.

As a result, your access to bid or buy on Ebay has been restricted. To start using your eBay account fully, please update and verify your information by clicking below :

https://scgi.ebay.com/saw-cgi/eBayIS...ifyInformation

Regards,

eBay

**Please Do Not Reply To This E-Mail As You Will Not Receive A Responce**

in 1982 OuY in 1897 So, if we.. in 1968 in 1957 ePauzrm DtAKmTqotZv op

It's funny in 1970 Could I speak to... 673 in 1902 7 Don't go that way 501 Lovely day How can I get to..


The words in bold appeared when I copied it. I think this is a scam because I can still bid on ebay. I clicked the link and it took me to a screen that asked for ALL my passwords and account numbers and even my ATM pin. WTF? This can't be right? I seen something like this before about scammers doing ---- like this. I can't believe this.
http://scgi.ebay.com@%32%31%31%2e%33...:%37%33%30%31/

What do you think? ??? :-\
__________________
Best Car Insurance | Auto Protection Today | FREE Trade-In Quote

Puma1077 09-12-2003 05:51 PM

Re:OMG look at this email!!!!
 
#1 im pretty sure its a fraud, it would have ebay in the url, also that little secure information icon would be on ur status bar when on teh page but its not

#2 let ebay know about it so they can nail that dipshit

Puma1077 09-12-2003 05:57 PM

Re:OMG look at this email!!!!
 
also did they spell "User" wrong "Uder" lol

Dr.Boost 09-12-2003 06:01 PM

Re:OMG look at this email!!!!
 
Yeah, they spelled "User" wrong. I guess that was my first clue. I can't believe this. How crazy are these hackers getting? Geez. >:( I'm going to notify ebay before someone fills that form out and gets screwed. :-\ I wonder how many people have filled it out? :-[
__________________
Best Car Insurance | Auto Protection Today | FREE Trade-In Quote

BlinD 09-12-2003 06:02 PM

Re:OMG look at this email!!!!
 
Thats crazy. And fraud. Send to ebay.

Dr.Boost 09-12-2003 06:09 PM

Re:OMG look at this email!!!!
 
I just looked on ebay and I guess they already know all about this. You would think those dumbass mother fuckers would warn everybody. WTF is wrong with them? How stupid are these people? They could put some sort of announcement on the main page or something, but no. They want to sit back and watch people get fucked for some reason. That really pisses me off. ---- ebay. >:(
__________________
Best Car Insurance | Auto Protection Today | FREE Trade-In Quote

91AccordLX 09-12-2003 07:09 PM

Re:OMG look at this email!!!!
 
Tracing that ip (211.37.185.30) pointed to a Korean ISP address. The ISP Company is MacroBusiness(KolNet), located in Seoul Korea.

I can give you the ISP administration info if you want to follow it up directly.

I hate ------- spoof scamers like this. Because they're overseas and will probably just shutdown their computer and move on. On a good note, when I clicked on your link to check the scam site, I had a connect from Hackerwatch.org run by Mcafee Security, so it seems this is a known scam and being monitored.

Dr.Boost 09-12-2003 07:12 PM

Re:OMG look at this email!!!!
 
How did you get all that information? That's crazy. :o
__________________
Best Car Insurance | Auto Protection Today | FREE Trade-In Quote

mikefxu 09-12-2003 07:39 PM

Re:OMG look at this email!!!!
 
inetnum: 211.32.0.0 - 211.39.255.255
netname: KRNIC-KR
descr: KRNIC
descr: Korea Network Information Center
country: KR
admin-c: HM127-AP
tech-c: HM127-AP
remarks: ******************************************
remarks: KRNIC is the National Internet Registry
remarks: in Korea under APNIC. If you would like to
remarks: find assignment information in detail
remarks: please refer to the KRNIC Whois DB
remarks: http://whois.nic.or.kr/english/index.html
remarks: ******************************************
mnt-by: APNIC-HM
mnt-lower: MNT-KRNIC-AP
changed: hostmaster@apnic.net 19990827
changed: hostmaster@apnic.net 20010606
status: ALLOCATED PORTABLE
source: APNIC

person: Host Master
address: 11F, KTF B/D, 1321-11, Seocho2-Dong, Seocho-Gu,
address: Seoul, Korea, 137-857
country: KR
phone: +82-2-2186-4500
fax-no: +82-2-2186-4496
e-mail: hostmaster@nic.or.kr
nic-hdl: HM127-AP
mnt-by: MNT-KRNIC-AP
changed: hostmaster@nic.or.kr 20020507
source: APNIC

inetnum: 211.37.185.0 - 211.37.185.63
netname: KOLNET-LLINE-MACROBUSINESS-KR
descr: MACROBUSINESS
descr: #13 DAEWOO B/D 34-3 YOIDO-DONG YOUNDUNGPO-GU
descr: SEOUL
descr: 150-716
country: KR
admin-c: YC466-KR
tech-c: YC467-KR
remarks: This IP address space has been allocated to KRNIC.
remarks: For more information, using KRNIC Whois Database
remarks: whois -h whois.nic.or.kr
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: hostmaster@nic.or.kr 20030811
source: KRNIC

person: YOUNGWON CHOI
descr: MACROBUSINESS
descr: #13 DAEWOO B/D 34-3 YOIDO-DONG YOUNDUNGPO-GU
descr: SEOUL
descr: 150-716
country: KR
phone: +82-2-782-5522
fax-no: +82-2-782-5523
e-mail: KOLNET@HITEL.NET
nic-hdl: YC466-KR
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: hostmaster@nic.or.kr 20030811
source: KRNIC

person: YOUNGWON CHOI
descr: MACROBUSINESS
descr: #13 DAEWOO B/D 34-3 YOIDO-DONG YOUNDUNGPO-GU
descr: SEOUL
descr: 150-716
country: KR
phone: +82-2-782-5522
fax-no: +82-2-782-5523
e-mail: KOLNET@HITEL.NET
nic-hdl: YC467-KR
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: hostmaster@nic.or.kr 20030811
source: KRNIC


91AccordLX 09-12-2003 07:41 PM

Re:OMG look at this email!!!!
 

Originally Posted by Dr.Boost
How did you get all that information? That's crazy. :o


Neotrace ;)

mikefxu 09-12-2003 07:42 PM

Re:OMG look at this email!!!!
 
most the time its a hacker that has this running on company's machine then all he has to do is grab the file(account information) off the machine and he/she is free and clear. this is a good way for someone to steal ur identy. credit card, social securtity#, even wanted alternate passwords(hack other accounts) man i feel for the dumb people out there. identy theft is a tuff thing to clear up

Dr.Boost 09-12-2003 07:45 PM

Re:OMG look at this email!!!!
 
Holy ----. I tried to call that fucker, but it wouldn't go through. That little bitch probably disconnected his phone. ------- Korean! >:(
__________________
Best Car Insurance | Auto Protection Today | FREE Trade-In Quote

91AccordLX 09-12-2003 07:52 PM

Re:OMG look at this email!!!!
 

Originally Posted by Dr.Boost
Holy ----. I tried to call that fucker, but it wouldn't go through. That little bitch probably disconnected his phone. ------- Korean! >:(

What # did you call? all the numbers listed are for the ISP and the Korean National Internet Registry, not the actually user...

And their all international #s, so unless you have an international calling plan, you can't dial them.

mikefxu 09-12-2003 08:02 PM

Re:OMG look at this email!!!!
 
I think its running YOUNGWON CHOI webserver so his # is +82-2-782-5522. but i think he will speak korean so ur ---- out of luck, maybe email him and use a translater and send it in english and korean, possible he speaks engish, his site is in korean though

ZexRex 09-12-2003 09:09 PM

Re:OMG look at this email!!!!
 
ya thats not an ebay url

http://scgi.ebay.com@%32%31%31%2e%33...:%37%33%30%31/

is

http://scgi.ebay.com@211.37.185.30:7301/

you see that @ in there, that makes your webbrowser treat the ebay url as a password for the site that is just an ip address(and then the website just ignores it).(211.37.185.30 port number 7301) the scammers will take your info and try to hack your ebay account or do things that are much much worse.

if you filled it in go and change your ebay password and tell your cc company and atm company to cancel the accounts and get new numbers. seriously they have all the info they need to take a $100,000 loan in your name and ---- your credit over for years.

Foreward the email to ebay, dont just copy it, foreward it to them.

Hope you can prevent anything bad from happening.

ZexRex 09-12-2003 09:13 PM

Re:OMG look at this email!!!!
 
oh and i bet any money it is someone in the US or somewhere else using their server for hosting or hacked their server and put that page on there.

in other words the koreans prob dont even know what that page is doing, or that its even there.

jazeo24 09-12-2003 11:37 PM

Re:OMG look at this email!!!!
 
i think any email that comes from ebay has an S after the http, so that you know it's secure... https//: blah blah

ZexRex 09-13-2003 11:57 AM

Re:OMG look at this email!!!!
 
dosent matter it would be easy to set up a fake server that would have a secure url like that.

customcoach 09-13-2003 12:15 PM

Re:OMG look at this email!!!!
 
Rene' here-

This is definitely fake. I get about four or five of them a week (probably because of the powerseller status). Ebay has a special page to report these, and you definitely need to do so. You need to include the header information (the info with all the garbedly gook, which includes the DNS information, etc.), and the complete body of the email. You can do that here (sorry for the long URL!!):

http://cgi3.ebay.com/aw-cgi/eBayISAP...ult%26rdir%3D0

If Ebay ever REALLY wants you to update account information, they will never put a link in the email. They always give instructions to go to www.ebay.com and update your account through the My Ebay page.

Hope this helps!
Rene'

Dr.Boost 09-13-2003 04:19 PM

Re:OMG look at this email!!!!
 
I forwarded it to them and they were very promt at getting back to me. They thanked me for sending it in and included instructions on how to protect myself. I think it's pretty stupid to warn/inform users AFTER they get this email and possibly give out there secret information. :-\
__________________
Best Car Insurance | Auto Protection Today | FREE Trade-In Quote

BlinD 09-13-2003 04:37 PM

Re:OMG look at this email!!!!
 
Well ebay does say that they will never ask for your information or passwords on the site in a few places.

Dr.Boost 09-13-2003 04:42 PM

Re:OMG look at this email!!!!
 
Yeah, but when you see an amail that appears to be ebay and they want you to update your account, you really aren't thinking about the little messages on the bottom of the bid confirming emails or whereever else they have it.

I just think that since they know this is a big problem right now and people are getting fucked, they should place a warning on the main page or in "my ebay". That would inform the people and warn them before they fill that form out and get boned.
__________________
Best Car Insurance | Auto Protection Today | FREE Trade-In Quote


All times are GMT -5. The time now is 10:35 PM.


© 2024 MH Sub I, LLC dba Internet Brands