S2000 Talk Discussions related to the S2000, its ownership and enthusiasm for it.

Scam on Ebay!

Thread Tools
 
Old Jan 16, 2004 | 12:31 PM
  #1  
X4DLuvOfSpeedX's Avatar
Thread Starter
Registered User
 
Joined: May 2003
Posts: 2,076
Likes: 0
From: Miami, Florida
Default Scam on Ebay!

Check this out:
Cheap Ferrari Modena Spider on eBay!!!
A Modena Spider that met the reserve at only $100,000? Don't these cars sell for at least $250K? Sounded like an awesome deal to me, until I saw the "security check" box that you need to fill out with your password in order to read the product description! Anyone who knows squat about ebay knows there is no such thing, much less under the "product description" section which is filled out by the seller. Nothing more than a scam to get your user ID and password and hack your account

Can anyone show me how to send a virus to these people?
Reply
Old Jan 16, 2004 | 12:38 PM
  #2  
folex187's Avatar
Registered User
 
Joined: Dec 2003
Posts: 1,915
Likes: 0
From: Kinda Close to St. Louis
Default

I think they are more like 150k unless you want a spyder or F1.
Reply
Old Jan 16, 2004 | 12:41 PM
  #3  
koala's Avatar
Registered User
 
Joined: Nov 2002
Posts: 7,731
Likes: 1
From: Calgary, AB
Default

Yup, scam.
Reply
Old Jan 16, 2004 | 12:48 PM
  #4  
s2kmugen's Avatar
Registered User
20 Year Member
 
Joined: Dec 2002
Posts: 5,731
Likes: 0
From: houston, texas
Default

woah.. the IP address almost even looked real.... I've gotten some of these emails asking for my ebay user name/password too.. and I almost fell for it.. scary shiet
Reply
Old Jan 16, 2004 | 01:34 PM
  #5  
AustinS2k2003's Avatar
20 Year Member
 
Joined: Apr 2003
Posts: 1,256
Likes: 1
From: Austin
Default

I'm not so sure - not that I'd submit my id, but I looked at the source and the form in question submits to Ebay...

<form name=form1 method=post action=http://session.ebaymotors.com@ebayupdates.biz/session.php>

Interesting indeed - there is no indication of submittal anywhere but ebay within the HTML source...and you can't SPOOF the host cgi.ebay.com - it is an EBAY domain...
Reply
Old Jan 16, 2004 | 01:42 PM
  #6  
dave22's Avatar
Registered User
 
Joined: Feb 2002
Posts: 13,065
Likes: 0
From: Virginia Beach, VA
Default

The real sign-in page:

http://signin.ebay.com/aw-cgi/eBayISAPI.dl...geType=174&i1=0


Their sign-in page:

http://signin.ebay.com/aw-cgi/eBayISAPI.dl...Name=h:h:sin:US
Reply
Old Jan 16, 2004 | 01:48 PM
  #7  
jeffbrig's Avatar
20 Year Member
Liked
Loved
Community Favorite
 
Joined: Jul 2002
Posts: 2,537
Likes: 101
From: Fort Lauderdale
Default

Funny, I did the same thing you did.

However, I'm not convinced that session.ebaymotors.com is legit.

The normal ebay motors login page does not contain this reference in its HTML.
Reply

Trending Topics

Old Jan 16, 2004 | 01:49 PM
  #8  
dave22's Avatar
Registered User
 
Joined: Feb 2002
Posts: 13,065
Likes: 0
From: Virginia Beach, VA
Default

I put:

Username: Blow
Password: Me

and it came back invalid
Reply
Old Jan 16, 2004 | 02:02 PM
  #9  
Ishy's Avatar
Registered User
 
Joined: Jul 2003
Posts: 267
Likes: 0
From: East Bay
Default

I went to the actual www.ebaymotors.com website and searched for that item number, and it did come up as an actual real item. I dunno if that helps at all...
Reply
Old Jan 16, 2004 | 05:42 PM
  #10  
dky1e's Avatar
Registered User
 
Joined: Jan 2004
Posts: 242
Likes: 0
From: san diego
Default

It's a bug in internet explorer (it hides the actual address in the address bar [more here:http://www.derkeiler.com/Mailing-Lists/NT-...03-12/0027.html]

After entering the username and pass it brings you to (what you think is) session.ebaymotors.com, but right click, select properties and check out the actual page of:

http://session.ebaymotors.com@ebayupdates....biz/session.php

you're on ebayupdates.biz, the fake page.
Reply



All times are GMT -8. The time now is 09:12 AM.