Another fake Ebay

suspended

Looks impressive, doesn’t it?
Ebay has nothing to do with it: Where’s my name????

The message text is crappy as well – Ebay wouldn;t be as dunb as this.

It originates from Japan. If the two links are scrutenized, you see a non-ebay address:

<p>If you feel you have been suspended in error or want to appeal this decision by providing additional information, please
<a href=3D"http://ns.maple-soft.co.jp/eBay">click here</a>.</font></p>
<p><tt><font size=3D"2" face=3D"Arial">Due to recent activity, including possible unauthorized listings, we have temporarily suspended activity
on your account in order to allow us to investigate this matter further.
If you believe that this action may have been taken in error, or, if you
feel that your account may have been tampered with, please
<a href=3D"http://ns.maple-soft.co.jp/eBay">click here</a> to provide
additional information and regain your full access on eBay.

Even on the bottom link, it’s this same link.

The header reveals some detail as well:

Return-Path: support@ebay.com
Received: from ftp.pcw.pcw.net (66.70.223.111)
by *** my server *** (V5.6-9, OpenVMS V8.3 Alpha);
Fri, 27 Jul 2007 00:12:32 +0100 (CET)
Received: from User (cable-62-205-81-65.upc.chello.be [62.205.81.65])
(authenticated (0 bits))
by pcw.pcw.net (8.12.10/8.11.6) with ESMTP id l6QJTnR5009737;
Thu, 26 Jul 2007 15:29:50 -0400

This could be the originator, or some dude that has his mailserver set as an open relay.
I haven’t tried the link to ns.maple-soft.co.jp yet.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.