Author Topic: PHISHING email re eBay & credit / bank card expiry  (Read 2987 times)

0 Members and 1 Guest are viewing this topic.

Offline Anne

  • Administrator
  • Registered
  • *
  • Posts: 163
  • Gender: Female
    • Yobunny
PHISHING email re eBay & credit / bank card expiry
« on: August 04, 2010, 03:24:35 PM »
This is most definitely not legit - the sender is claiming to be eBay but it isn't. This has been sent from somewhere else - see red bits in the headers below. eBay and PayPal have been informed of this attempted card details theft.

Quote
Return-Path: <aw-confirm@ebay.co.uk>
Received: (qmail 59520 invoked by uid 1024); 4 Aug 2010 13:48:03 -0000
Received: from aw-confirm@ebay.co.uk by server34.donhost.co.uk by uid 1002 with qmail-scanner-1.22
 ( Clear:RC:0(218.14.214.220):.
 Processed in 0.362632 secs); 04 Aug 2010 13:48:03 -0000
Received: from unknown (HELO zetdz.gov.cn) (218.14.214.220)
  by server34.lb.donhost.co.uk with SMTP; 4 Aug 2010 13:48:02 -0000
Received: from User ([68.236.167.251])
        (envelope-sender <aw-confirm@ebay.co.uk>)
        by 192.168.32.5 with ESMTP
        for <editor@britishblackmusic.com>; Wed, 04 Aug 2010 21:49:02 +0800

Reply-To: <aw-confirm@ebays.co.uk>
From: "eBay"<aw-confirm@ebay.co.uk>
To: customer@paypal.co.uk
Subject: Update your credit card information with PayPal
Date: Wed, 4 Aug 2010 09:43:33 -0400
MIME-Version: 1.0
Content-Type: text/html;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Qmail-Scanner-Message-ID: <128092968367959487@server34.donhost.co.uk>
X-EsetId: 2E61252FDFB678693167257BD1ED38

Dear PayPal Member,<br><br>Your credit card will expire soon. To avoid any disruption to your PayPal<br> service, please update your credit card expiration date by following these steps: <br>That requires you to update the Billing Information.<br>

Please update your records in maximum 24 hours. <br>Once you have updated them, your PayPal session will not be interrupted and will continue as normal.<br><br>Please follow the link below and update your account information:<br>

<br><br><a href="http://www.cserteg.hu/munkatarsain.html?cmd=_login-submit&dispatch=5885d80a13c0db1f1ff80d546411d7f8a8350c132bc41e0934cfc023d4e8f9e54" target="_blank">http://www.paypal.com/cgi-bin/<wbr>webscr</a><br><br><br>Thanks for your patience.<br><br>------------------------------<wbr>------------------------------<wbr>----<br>

<br>Please do not reply to this e-mail. Mail sent to this address cannot be<br>
answered.<br><br><br>Email ID PP32461
Cheers, 
Anne, Board Admin

 

SMF spam blocked by CleanTalk