Just a heads-up......

slim_boy_fat · Nov 11, 2016

Just a word of warning lads & lasses.

I've just received a text which 'purports' to be from eBay saying that I've received a message from member 1650bullet and inviting me to click on a link [note it's not https :rolleyes:

]

Needless to say this is either a scam or phishing job as others on the 'Bay report having received the same thing, and there's no message notification on eBay account(s). One chap thought the sender was in Australia but I don't know how he worked that out.

Thing is, if you get either a text or email to this effect don't open it or click on any links......

Possibly picking phone numbers off Gumtree as I listed/sold something there in the last week [to a genuine, local(ish) buyer].

Stay safe out there. :laughing:

EDIT: And guess what.....there appears to be a lot of it about http://findwhocallsyou.com/0428425830 and this http://www.ebay.co.uk/gds/Beware-Ne...eBay-Message-System-/10000000002999105/g.html

slim_boy_fat · Nov 11, 2016

As a follow-up to the above, I decided to pursue it with eBay.

I'm a bit like a dog with a bone and with the term "nemo me impune lacessit" in mind [it's the Scots 'adopted' motto and translates into English as "no-one attacks me with impunity", but I prefer it in Scots as "‘Wha duar meddle wi me?"

( http://www.scotsman.com/heritage/pe...-of-the-day-nemo-me-impune-lacessit-1-3655817 for anyone interested

) I phoned eBay on their 0800 freephone number - and received a surprisingly quick response from 'Mel' in the States. :thumbup:

He asked me to report it by email to scam@eBay.com which I have done, the body of my message reads.......

"Hi,

As requested by your telephone responder Mel, I write to report an attempted scam which I received by text message to my mobile phone today.

The text message, which purported to be from eBay, advised that I had received a message from member 1650bullet and invited me to click on an embedded link, which was "http://phdog/17rr" .

I did not click on the link as I immediately suspected a scam and, on logging into my account as normal, confirmed no messages waiting action.

I am concerned as to how the scammer(s) obtained my mobile phone number but Mel advised that a) eBay do not share members details and b) that he was neither aware of such a scam, nor was there any record of one in the system.

A confirmation on these two points would be appreciated, to help set my mind at ease.

Yours,
John Reid (account user-name XXXX XXX XXX)"

Be interesting to see what they come back with, in light of what's reported in my second link in my first post on the thread. :whistle:

Shox Dr · Nov 11, 2016

I dont click on anything. Period.
Someone sends me link, unless I've specifically asked them to send me a link,
or they have told me before hand; It ain't 'appenin.

If I do then I manually put it in the browser.

MoreWellie · Nov 11, 2016

thoughtful of you to put the link in here so that we can not click it as well :laughing:

wookie · Nov 11, 2016

I wouldn't worry about it, it doesn't resolve here so I guess the powers that be have removed it's DNS record.

Whois gives the following for phdog.com

Code:

Domain Name: PHDOG.COM
Registry Domain ID: 86026442_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2016-03-29T01:01:01.00Z
Creation Date: 2002-04-27T11:29:40.00Z
Registrar Registration Expiration Date: 2017-04-27T11:29:00.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: DOMAIN ADMIN
Registrant Organization: A D D R E S S O R   -  DOMAIN REGISTRATION SERVICE
Registrant Street: CP 10870
Registrant Street: COPACABANA
Registrant City: RIO DE JANEIRO
Registrant State/Province:
Registrant Postal Code: 22022-970
Registrant Country: BR
Registrant Phone: +55.2199829099
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: ADMIN@ADDRESSOR.COM
Registry Admin ID:
Admin Name: DOMAIN ADMIN
Admin Organization: A D D R E S S O R   -  DOMAIN REGISTRATION SERVICE
Admin Street: CP 10870
Admin Street: COPACABANA
Admin City: RIO DE JANEIRO
Admin State/Province:
Admin Postal Code: 22022-970
Admin Country: BR
Admin Phone: +55.2199829099
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: ADMIN@ADDRESSOR.COM
Registry Tech ID:
Tech Name: DOMAIN ADMIN
Tech Organization: A D D R E S S O R   -  DOMAIN REGISTRATION SERVICE
Tech Street: CP 10870
Tech Street: COPACABANA
Tech City: RIO DE JANEIRO
Tech State/Province:
Tech Postal Code: 22022-970
Tech Country: BR
Tech Phone: +55.2199829099
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: ADMIN@ADDRESSOR.COM
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
DNSSEC: unSigned
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252982646

colnerov · Nov 11, 2016

wookie said:
I wouldn't worry about it, it doesn't resolve here so I guess the powers that be have removed it's DNS record.

I take it that's a good thing. :dontknow:

wookie · Nov 11, 2016

colnerov said:
I take it that's a good thing.

Yes, because it won't resolve, you can't connect to the site therefore you can't get clobbered by whatever nasty code was waiting for you on the site.

Migmac · Nov 11, 2016

It's must be the day for it, I got one supposedly from Amazon. I don't buy off amazon and I certainly don't use my work email address on any emails apart from work. It got deleted, l do learn from past mistakes!!

Nick67GT · Nov 11, 2016

I'm suddenly getting a few suspicious emails relating to my PayPal account.

Needless to say they get dismissed immediately.

colnerov · Nov 11, 2016

Hi, It's coming up to Christmas time, people are buying and selling and are pre-occupied and so may be vulnerable. Of course the crims are having to buy presents as well so need the extra money.

Colin

winchman · Nov 11, 2016

I get them from Gumtree

wookie · Nov 11, 2016

One of the easiest ways to help you spot dodgy emails is to have them displayed as "plain text" rather than "html", okay you loose all the formatting and silly colours/fonts people sometimes choose to use but importantly any links show the actual address you'll be going to rather than clicking on a link to "amazon" that actually goes to some dodgy site in Mongolia (or wherever) you can see that the address is wrong.

For example : http://www.amazon.com

slim_boy_fat · Nov 11, 2016

MoreWellie said:
thoughtful of you to put the link in here so that we can not click it as well

It wasn't meant to appear as a clickable link and wasn't typed in as one, but it's impossible to type in without the site converting to one...... :mad:

colnerov · Nov 11, 2016

slim_boy_fat said:
It wasn't meant to appear as a clickable link and wasn't typed in as one, but it's impossible to type in without the site converting to one......

I think if you type the HTTP bit phonetically like HTeeTeePee it doesn't do it, but you get the gist of it across.

Colin

cumbriasteve · Nov 11, 2016

I get at least four spam mails a day re my order or my giftcard from Boots/Marks and Spencer's/Amazon etc, been going on for a few months now.

There is a world of spammers out there thinking up new ideas every day and some of them making an awful lot of money.

Just a heads-up......

slim_boy_fat

Member

slim_boy_fat

Member

Shox Dr

Chief Engineer to Carlos Fandango

MoreWellie

Member

wookie

Member

colnerov

Member

wookie

Member

Migmac

Forum Supporter

Nick67GT

Member

colnerov

Member

winchman

Member

wookie

Member

slim_boy_fat

Member

colnerov

Member

cumbriasteve

Moderator