Board logo

is this a spoof?
JoelP - 24/5/04 at 09:56 PM

this is an email i recieved the other day, but the wording seems a bit familiar to be real.

quote:

Dear eBay member,

We recently noticed one or more attempts to log in to your eBay account from a foreign IP address and we have reasons to believe that your account was used by a third party without your authorization. If you recently accessed your account while traveling, the unusual login attempts may have been initiated by you.
The login attempt was made from:
IP address: 68.190.191.68
ISP Host: 68-190-191-68.slt-cres.charterpipeline.net

By now, we used many techniques to verify the accuracy of the information our users provide us when they register on the Site. However, because user verification on the Internet is difficult, eBay cannot and does not confirm each user's purported identity. Thus, we have established an offline verification system o help you evaluate with who you are dealing with. The system is called ebay PowerSafe and it's the most secure eBay wallet so far.

If you are the rightful holder of the account, click on the link below, fill the form and then submit as we will verify your identity and register you to ebay PowerSafe.

Complete eBay Registration By clicking here
To make eBay.com the most secure site to place or bid on your auctions,every user will be registered to PowerSafe.

If you choose to ignore our request, you leave us no choice but to temporally suspend your account.


* Please do not respond to this e-mail as your reply will not be received.

Regards, eBay Inc.




heres the header:

From : aw-confirm@ebay.com <aw-confirm@ebay.com>
Reply-To : "aw-confirm@ebay.com" <aw-confirm@ebay.com>
Sent : 24 May 2004 18:54:30
To : <joel_patrick@hotmail.com>
Subject : TKO Notice: eBay Account Verification

| | | Inbox

MIME-Version: 1.0
Received: from smtp.excite.com ([63.236.75.74]) by mc4-f1.hotmail.com with Microsoft SMTPSVC(5.0.2195.6713); Mon, 24 May 2004 14:12:35 -0700
Received: from produse_no1@excite.com (port-212-202-224-62.reverse.qsc.de [212.202.224.62])by smtp.excite.com (Postfix) with SMTP id 1185C1957Bfor <joel_patrick@hotmail.com>; Mon, 24 May 2004 14:56:29 -0400 (EDT)
X-Message-Info: 6sSXyD95QpW9bCu2MAVVDySSBnjeaSgw
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-Id: <20040524185629.1185C1957B@smtp.excite.com>
Return-Path: aw-confirm@ebay.com
X-OriginalArrivalTime: 24 May 2004 21:12:36.0262 (UTC) FILETIME=[D64EF460:01C441D3]


can anyone tell if its real? i know someone has tried something bent with my account cos when i changed address it had an american address stored too. but when i ignored the last one like this, my account never got suspended as this one threatens.


Hellfire - 24/5/04 at 10:06 PM

Joel - as a user of ebay. I would login to the account - alter passwords and confirm addresses and other personal details. Sounds like your account has been hacked. When you are in your account make sure the padlock is visible at the bottom right of your screen - also the website extension ends in *.shtml.

Your email doesn't look genuine as the originator is excite in germany.

Course I may be totally wrong!!!!


I love speed :-P - 24/5/04 at 10:14 PM

try this site

http://www.millersmiles.co.uk/identitytheft/032804-Security_Measures_SafeHarbor_KMM82003618V76837L0KM-EBAY.php


I love speed :-P - 24/5/04 at 10:16 PM

o and this 1

http://www.lawdiscussion.com/archive/topic/8037-1.html


gjn200 - 24/5/04 at 10:33 PM

Load of balls mate. My aol ip changes at every logon and I also use auction stealer that bids from a different place entirley. Never had an email like that, and why 'ebay member' and not your sign in?


andrew-theasby - 24/5/04 at 10:51 PM

Id agree too, just change your password through the normal way(dont use the link) just to be sure. I had two similar ones a while ago with the ebay logo etc, and came from the address normal ebay stuff shows up as, but it asked for my ebay password and e-mail password. I sent it to ebay and they said they would never ask for a password over the e-mail.


Surrey Dave - 25/5/04 at 06:01 AM

I've had these , just delete them and forget it or forward it to ebay.

My account has never been suspended.


JoelP - 25/5/04 at 08:16 AM

cheers all! i'll change passwords now. damn its hard to remember them all as it is though!


JoelP - 25/5/04 at 08:18 AM

quote:
Originally posted by Hellfire
When you are in your account make sure the padlock is visible at the bottom right of your screen - also the website extension ends in *.shtml.



theres no .shtml and theres no padlock. There is when i do on line banking though. How do i sort this out?! the bastards...


Peteff - 25/5/04 at 09:21 AM

Did you copy and paste it Joel. Too many mistakes for a professional.
system o help you evaluate with who you are dealing with.
to temporally suspend. They don't make mistakes like that, grammar and spelling are checked I think. I know people who have received these emails who don't even use ebay so it's obviously someone sending them out on an off-chance of fooling someone.


richijenkin - 25/5/04 at 10:39 AM

http://broadroom.net/ubbthreads/showthreaded.php?Cat=&Number=55899&page=0&view=expanded&sb=5&o=14&fpart=


JoelP - 25/5/04 at 11:21 AM

word for word the same...!

off to send it to spoof@ebay.co.uk now.

someone should get these bastards and stick them in the human recycling machine i once mentioned... B.A.M.Fs.

[Edited on 25/5/04 by JoelP]


stephen_gusterson - 25/5/04 at 10:24 PM

I recon your accoutn was always safe. This is someone asking for you to give info about your account so they can hijack it. After all, if its from ebay, they already know your details cos its on their servers!

Ignore it.

atb

steve


Hellfire - 25/5/04 at 10:55 PM

quote:
Originally quoted by Joelp
i know someone has tried something bent with my account cos when i changed address it had an american address stored too



SteveG - maybe not!


stephen_gusterson - 26/5/04 at 12:46 PM

does Joel mean a delivery adress in his ebay details OR an american adress in the email header?

If its american in his account adress, they must already have the password to have changed it - if its in the email header, thats a possible indicator of a foreign scam - or that ebay uk is serviced from america

atb
steve


quote:
Originally posted by Hellfire
quote:
Originally quoted by Joelp
i know someone has tried something bent with my account cos when i changed address it had an american address stored too



SteveG - maybe not!


JoelP - 26/5/04 at 12:54 PM

i went to the change address section in ebay, and one saved address was in the bad ol' US of A. Might go and have a fiddle now actually...


Hellfire - 26/5/04 at 01:02 PM

quote:
Originally posted by JoelP
..... Might go and have a fiddle now actually...


Whooaaa!! Too much information....


JoelP - 26/5/04 at 01:07 PM

IM BACK!!!! always good to fiddle..!

gotta say, ebay layout is crap. I havent found how to change passwords yet, even after going to the help section! cretins...


Peteff - 26/5/04 at 02:12 PM

Sod it I'll stick with my harmonica.
Sign into ebay and go to the "my ebay" section Joel. Then click the preferences tab next to the end one. All the sections are there to change your password etc.


JoelP - 26/5/04 at 03:01 PM

yeah, i was using the new version that they bang on about, but they havent upgraded the help section to cover it yet! but i worked it out and temporarily went back to the old version, and there it was...

is anyone else using the beta thingamebob that they're testing?


Peteff - 26/5/04 at 03:18 PM

The same sections are down the left hand side under my account, Personal Information. I keep switching from one to the other ready for when they change.