Another obviously genuine email from ebay.

I think I might click on all the nice links in this email, the ones that go to…

[noparse]ftp://si3dde3ddi:atown546@ftp.pochta.ru/erBe6yIS6APIdllSignInrru3dfffgsshttpl67oginsyourUsfserChfeck-alsertfdll-ffey-usco62sms.html[/noparse]

Because they’re obviously genuine, right? I mean the internet is funny sometimes. A proper innocent link doesn’t have to go to [noparse]www.ebay.com[/noparse] right? right??

OK lame sarcasm aside, this kind of thing amuses me. Which is why this isn’t in the Pit. I just love how easy it is to expose a fake email if you have a bit of common sense. It’s just a shame so many people don’t.

It’s funny how it says “Your registered name is included to show this message originated from eBay.”
Included where???
And if I follow the visible link ([noparse]http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=300180385361&sspagename=ADME:L:RTQ:US:1[/noparse])

I get a page with the following message…

" This listing (300180385361) has been removed or is no longer available. Please make sure you entered the right item number.
If the listing was removed by eBay, consider it canceled. Note: Listings that have ended more than 90 days ago will no longer appear on eBay."

What the con-artist here has done is surprisingly simple if you think about it. They’ve taken the source code of a genuine ebay email (it even still has genuine ebay links to the pages on ‘how to spot a fake email’) and replaced the underlying url of pertinent links with the sting.
And to round it off. It’s from…

eBay [member@eby.com]
[teacher]You get a D minus for this dismal effort. Please try harder next time[/teacher]

It must be real, it’s not from Nigeria. :smiley: