PDA

View Full Version : New Ebay scam???



sidegrinder
12-22-2006, 07:57 AM
Check this out--make sure I'm not just being paranoid. One of the questions about this mill asks if it hasn't been listed before at a lower price. The questioner then includes an address that you can paste to check it out. After you paste the link, a normal-looking ebay screen appears asking for your name and password to view the completed item. I fell for it myself and then noticed that it wasn't a https (secure page) like it normally is on ebay. I went back to the legitamit ebay and immediately changed my password and then posted a warning via a question to the seller (it hasn't appeared yet). Has anyone seen this scam before??? Sidegrinder

http://cgi.ebay.com/Milling-machine-8-x-30-table_W0QQitemZ250064211283QQihZ015QQcategoryZ1258 4QQrdZ1QQcmdZViewItem

Evan
12-22-2006, 08:16 AM
I can't look at the rest of the question because I don't have an ebay id. Could you cut and paste the address here? I'll check it out.

Oh yeah, if you put it here place it within quote marks so it can't be clicked on.

sidegrinder
12-22-2006, 08:18 AM
Here you go Evan!


Questions from other members : Milling machine 8" x 30" table Item number: 250064211283



Question & Answer Answered On

Q: Hello, my name is Deann Dooley. I am interested in your item. The problem is that I am a little confused because I've seen another item exactly like yours at a lower price and I wonder if it isn't your item. Please take a look: "http://3354296940/?www.ebay.com/UserId=&co_partnerId=2&siteid=0&pageType=-1&pa1=&i1=-1&UsingSSL=1&bshowgif=0&favoritenav=&ru=&pp=&errmsg=8.htmlz" Please inform me of your last price.
Dec-22-06
A: I don't know about any other machine. Item 250064211283 is the only one I'm selling.



Q: where is Maumee, OH. I can't seem to locate it. Thanks Matt
Dec-22-06
A: Maumee is next to Toledo. Just Goolge it and you'll find it.



Q: Hi,Do you have a way to load and is there a charge? How much time to pick up like after New Years,JIM
Dec-21-06
A: I can load it on your truck at no charge. You will need your own packing materials. I can hold it for you until after the new year as long as I have received full payment.



Ask seller a question



Page 1 of 1 Go to page


Previous 1 Next








About eBay | Announcements | Security Center | Policies | Site Map | Help



Copyright 1995-2006 eBay Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective owners. Use of this Web site constitutes acceptance of the eBay User Agreement and Privacy Policy.



eBay official time

Evan
12-22-2006, 08:20 AM
That isn't a link to ebay. Just a minute while I decode it.

JCHannum
12-22-2006, 08:21 AM
Deann Dooley is the scammer, the sign in screen is not legitimate. You can report this to eBay, and I will.

sidegrinder
12-22-2006, 08:24 AM
Oops, I didn't see your note about putting quotes around it. All fixed now though ;)

Evan
12-22-2006, 08:33 AM
OK. The first string of digits in the URL is a decimal IP address. It's little known that your browser will interpret an IP from a cumulative number computed from the modulo 256 value of the IP quartets.

That number, 3354296940, translates to IP 199.238.130.108

According to the ARIN database it is assigned to:

OrgName: NTT America, Inc. OrgID: NTTAM-1 (http://bbs.homeshopmachinist.net/whois/?queryinput=O%20%21%20NTTAM-1) Address: 8005 South Chester Street Address: Suite 200 City: Centennial StateProv: CO PostalCode: 80112 Country: US

I have e-mailed the abuse department there and I expect the site will be shut down shortly.

sidegrinder
12-22-2006, 08:42 AM
Hot dang Evan! You are like our own personal HSM bloodhound ;)

JC, please go ahead and report it to ebay. I'm not all that up to date on how to do it. I'm just amazed I even noticed anything out of the ordinary at 6:30am!

Evan
12-22-2006, 09:07 AM
Pretty stupid scammer running a scam from a US network in the US. That's a federal offense. At the least it is wire fraud. He could end up in Leavenworth. Not a fun place. The daily meal budget is $2.45 per day per inmate for three meals.

http://vts.bc.ca/pics/lunch.jpg

Evan
12-22-2006, 06:46 PM
I though I would mention that the scammers site has been taken down. :cool:

Wirecutter
12-23-2006, 12:01 PM
It's down alright. I've got the latest Mozilla here, and this is what I get (eventually) for that link:

http://i70.photobucket.com/albums/i106/wires99/out_of_here.jpg


I particularly liked the "get me out of here" option.

-Mark

A.K. Boomer
12-23-2006, 12:13 PM
Nice Job Evan and JC, You guys are like the Foo fighters, your out there 24-7 gettin the job done --- fighting foo...;)

jr45acp
12-23-2006, 12:14 PM
Pretty stupid scammer running a scam from a US network in the US. That's a federal offense. At the least it is wire fraud. He could end up in Leavenworth. Not a fun place. The daily meal budget is $2.45 per day per inmate for three meals.

http://vts.bc.ca/pics/lunch.jpg

Good point Evan, I worked at Leavenworth from 3/74 to Oct 81!!!!! Given your pic, the meals have improved considerably!!!!!!!

lmi
12-24-2006, 12:54 PM
We had the same thing happen to us. We recently sold a welding machine on eBay, and we actually got 2 messages. The first one just asked if this was the same welding machine that was on another page, and had the address listed. We copied and pasted the address, which had the string of numbers at the beginning of it, but it came up as not found. The second message was word for word what was posted earlier, but the name was different. We copied the address, and got to the eBay sign in page. We looked at the address bar, and saw it was http, not https, and didn't log in. We reported it to eBay as a possible scam.

Milacron of PM
12-24-2006, 02:41 PM
http://vts.bc.ca/pics/lunch.jpg LMAO ! :D