Home  >  Community  >  The eBay Outlook  >  Tricky Fake ebay Spam


<< previous topic post new topic post reply next topic >>
 toyranch-07
 
posted on December 17, 2000 11:02:24 AM
I got this spam email:

quote:

------------------------------------------------------------------------

From: [email protected]
To: [email protected]
Subject: New eBay Software !!! Does it all for you !!!!!

New eBay software does it ALL for you!
For less than 20 bucks, this software lets you:
Create powerful HTML ads in seconds, with no knowledge of HTML code!
Keeps a fully graphical customer database, with pictures of the items for easy reference
Automatically uses e-mail templates to send your bidders/sellers customized email
Automatic adult login (optional)
Automatically prints address labels for your buyer/seller with one click
Prints postage (integrated with Stamps.com)
Full backup & restore so you never lose your database and settings
Built in bid SNIPER, means you NEVER get outbid again!
Sniper is web-based, meaning you don't even have to be connected to the net!
Database is fully searchable, by name, address, email, or auction number!
SOOOO many more features to list!
For more information or to order, simply go to: http://www.ebay0.com
You WON'T be sorry! eBay will never be the same again!!!
----------------------- Headers --------------------------------
Return-Path: <[email protected]>
Received: from rly-yg04.mx.aol.com (rly-yg04.mail.aol.com [172.18.147.4]) by air-yg01.mail.aol.com (v77.31) with ESMTP; Sat, 16 Dec 2000 19:30:26 -0500
Received: from smtp-hub.mrf.mail.rcn.net (207-172-4-107.in-addr.mail.rcn.net [207.172.4.107]) by rly-yg04.mx.aol.com (v77.27) with ESMTP; Sat, 16 Dec 2000 19:30:01 -0500
Received: from smtp01.mrf.mail.rcn.net ([207.172.4.60])
by smtp-hub.mrf.mail.rcn.net with esmtp (Exim 3.16 #5)
id 147RiD-0007kZ-00
for [email protected]; Sat, 16 Dec 2000 19:30:01 -0500
Received: from 216-164-248-243.s2719.apx1.sbo.ma.dialup.rcn.com ([216.164.248.243] helo=friedchicken21)
by smtp01.mrf.mail.rcn.net with smtp (Exim 3.16 #5)
id 147RiC-0007Gr-00
for [email protected]; Sat, 16 Dec 2000 19:30:00 -0500
From: eBay Software<[email protected]>
To: [email protected]
Subject: New eBay Software !!! Does it all for you !!!!!
X-Mailer: Mail Bomber
Reply-To: [email protected]
Date: Sat, 16 Dec 2000 19:19:14 -0500
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-Id: <[email protected]>

------------------------------------------------------------------------


This is for some crapware that yet another spammer is pushing on ebay users.

This is NOT from ebay! It's not sanctioned by ebay! BUT, the 'From' line in the email is "[email protected]"!!!

If they can send email from "@ebay.com" addresses that isn't from ebay, there is a world of trouble ahead!




 
 unknown
 
posted on December 17, 2000 11:14:11 AM
How did they expect you to pay for it?

Contacting them at the @ebay email address wouldn't work.


I got about 15 spam messages from a different guy offering something I don't remember what. But he wanted payment via paypal, so he gave his paypal email address.

I sent him a PayPal money request for "spam receiveing services"

 
 bhearsch
 
posted on December 17, 2000 11:24:27 AM
Hi toyranch Did you report this email to the originating ISP and all of the intermediaries? I report EVERY SINGLE piece of spam that I receive by having SpamCop trace the origin. I used to let SpamCop send the complaints but now I do it myself and I really think it works. I only receive one or two spam emails a week.

BTW, did you ever find a firewall for your Mac? This is a great site for security issues and has a link for Macintosh users. http://web2.airmail.net/buzz/faqlinks.html#3

Blanche


 
 avaloncourt
 
posted on December 17, 2000 11:55:07 AM
unknown ... It says in that email to go to their web address which is real. It then forwards you to another site. I see they accept paypal. That makes it pretty easy to track them down.

 
 amalgamated2000
 
posted on December 17, 2000 12:24:29 PM
If they can send email from "@ebay.com" addresses that isn't from ebay, there is a world of trouble ahead!

It is an absolutely trivial matter to make it appear that an email is coming from ANY email address. Always has been.

In fact, the vast majority of spam contains "spoofed" addresses and domains.

I don't have the address anymore, but there used to be a web site that allowed you to do this, though for individual emails, not in bulk.

I used to send friends email from [email protected] all the time.


[ edited by amalgamated2000 on Dec 17, 2000 12:25 PM ]
 
 abacaxi
 
posted on December 17, 2000 05:02:47 PM
ToyRanch ...
It is extremely easy to change the FROM: just look at the headers. Nothing tricky about it!

ebay0.com ... report this to [email protected] and their lawyers can do the VERO thing and get the misleading website deleted

Return-Path: <[email protected]>
***Sends all the bounces to eBay ... NOT A GOOD IDEA.
Received: from rly-yg04.mx.aol.com (rly-yg04.mail.aol.com [172.18.147.4]) by air-yg01.mail.aol.com (v77.31) with ESMTP; Sat, 16 Dec 2000 19:30:26 -0500
*** internal AOL handoffs
Received: from smtp-hub.mrf.mail.rcn.net (207-172-4-107.in-addr.mail.rcn.net [207.172.4.107]) by rly-yg04.mx.aol.com (v77.27) with ESMTP; Sat, 16 Dec 2000 19:30:01 -0500
**** came FROM RCN.NET so just send the whole thing to [email protected] and they will kill the spammer's account. Send it to [email protected] too and ask them to contact RCN's abuse department to see about prosecuting the spammer for forgery and false assumptionm of identity. The abuse staff at RCN are a wierd bunch, but they LOVE whacking spammers

Received: from smtp01.mrf.mail.rcn.net ([207.172.4.60]) by smtp-hub.mrf.mail.rcn.net with esmtp (Exim 3.16 #5) id 147RiD-0007kZ-00 for [email protected]; Sat, 16 Dec 2000 19:30:01 -0500
***RCN handing off to AOL

Received: from 216-164-248-243.s2719.apx1.sbo.ma.dialup.rcn.com ([216.164.248.243] helo=friedchicken21)
by smtp01.mrf.mail.rcn.net with smtp (Exim 3.16 #5)
***** Spammer handing off to RCN's mail server from within RCN. Should be easy to track.

X-Mailer: Mail Bomber
**** Spammer's bulk mailing program!
Message-Id: <[email protected]>
****** This can be traced right to the spammer's account on RCN. Go get them!

***************

Spammer's supposed contact information
Organization:
Dave Matthews
Dave Matthews
411 Metzler
Molalla, OR 97038
US
Phone: 503-829-4619
Email: [email protected]

Registrar Name....: Register.com
Registrar Whois...: whois.register.com
Registrar Homepage: http://www.register.com

Domain Name: EBAY0.COM

Created on..............: Sun, Aug 06, 2000
Expires on..............: Mon, Aug 06, 2001
Record last updated on..: Tue, Dec 12, 2000

Administrative Contact:
Dave Matthews
Dave Matthews
411 Metzler
Molalla, OR 97038
US
Phone: 503-829-4619
Email: [email protected]

Technical Contact:
Dave Matthews
Dave Matthews
411 Metzler
Molalla, OR 97038
US
Phone: 503-829-4619
Email: [email protected]

Zone Contact:
Dave Matthews
Dave Matthews
411 Metzler
Molalla, OR 97038
US
Phone: 503-829-4619
Email: [email protected]

[ edited by abacaxi on Dec 17, 2000 05:07 PM ]
 
 bobbysoxer
 
posted on December 17, 2000 05:24:06 PM


Here is my thread I started the other day:

http://www.auctionwatch.com/mesg/read.html?num=2&id=299973&thread=299865


If you don't want to go to the thread here is the news bit that the thread was about:

http://net4tv.com/voice/story.cfm?storyid=3201



not bobbysoxer on eBay

[email protected]



 
 SilkMoth
 
posted on December 17, 2000 05:40:53 PM
My my, Mr. "Matthews," what a delightful official contact email address you have.
--------
not SilkMoth anywhere but here
[ edited by SilkMoth on Dec 17, 2000 05:42 PM ]
 
 twinsoft
 
posted on December 17, 2000 05:50:39 PM
I checked out www.ebay0.com and got a message saying "redirecting to faster server" but I wasn't redirected. Also, the link to send email doesn't do anything. The site appears dead?

 
 abacaxi
 
posted on December 18, 2000 05:18:59 AM
It may have been deleted by its host - traceroute ends up at register.com and nothing else happens.

Companies regularly check for domains that are permutations of their name (myeBay, ebay0, etc.) and turn the lawyers loose on them.



 
 rosiebud
 
posted on December 18, 2000 06:05:01 AM
the ebayO page forwards to: http://64.212.32.185
If you trace that, it belongs to gblx.com so you'd have to make a complaint to there as well.

 
 raygomez
 
posted on December 18, 2000 07:19:01 AM
Sending spam with false headers is "criminal impersonation", a crime!

It might be fun to report this to the police, and see where you get with it.

 
 bhearsch
 
posted on December 18, 2000 10:32:21 AM
Those of you who receive a large amount of spam may want to try this free spam filtering service. http://www.brightmail.com/ I haven't tried it myself because I don't get much spam but it's been highly recommended by some of the privacy/security gurus in the OutOut newsgroup. This is NOT an adware or spyware program and they respect your pivacy.

Blanche
 
 dc9a320
 
posted on December 18, 2000 12:31:44 PM
Yes, I would forward the spam to both rcn.net and eBay, the latter because their name was co-opted. It was not very bright of the spammer to make ebay.com be the Reply-To address, and the inevitable flood of complaints sent to the (almost certainly non-existent) Reply-To will still likely attract eBay's attention. I don't think that spammer tried very hard at all to mask his real origin.

Even if an ISP, as opposed to a companies like eBay, is the supposed (faked) origin, I still forward spam to the ISP, even if I know it didn't really come from that ISP, so they know their name is being "borrowed."

Most ISPs don't want to become known as spam havens, whether or not actual relaying went through them, and using an ISP's name as a From or Reply-To can lead to their servers being swamped with a high volume of complaint email. Several major ISPs have sued spammers over these sorts of things.

----
What's being done in the name of direct marketing nowadays is crazy.
The above are all just my opinions, except where I cite facts as such.
Oh, I am not dc9a320 anywhere except AW. Any others are not me.
Is eBay is changing from a world bazaar into a bizarre world?
 
 
<< previous topic post new topic post reply next topic >>

Jump to

All content © 1998-2026  Vendio all rights reserved. Vendio Services, Inc.™, Simply Powerful eCommerce, Smart Services for Smart Sellers, Buy Anywhere. Sell Anywhere. Start Here.™ and The Complete Auction Management Solution™ are trademarks of Vendio. Auction slogans and artwork are copyrights © of their respective owners. Vendio accepts no liability for the views or information presented here.

The Vendio free online store builder is easy to use and includes a free shopping cart to help you can get started in minutes!