bids-auctions.com

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Thu Aug 12, 2010 11:14 am

This is a curious one. I currently have an auction listing on eBay.com. I have included my contact e.mail address in the Listing.

I received an e.mail about the Listing, containing a link to what is ostensibly another auction site. The e.mail looked suspicious and when I replied to it, my reply bounced back as undeliverable (unknown address - invalid recipient). The site the e.mail linked to opens an error page.

The whole thing just smells a bit dodgy. I’d be grateful for second opinions.

Thanks.

Quote:

Return-path: <[email protected]>
Envelope-to: (edit)
Delivery-date: Tue, 10 Aug 2010 (edit)
Received: from [212.159.7.34] (helo=mx.ptn-ipin02.plus.net)
by inmx16.plus.net with esmtp (PlusNet MXCore v2.00) id 1OirWV-0002dA-Sa
for (edit); Tue, 10 Aug 2010 17:17:55 +0100
Received-SPF: None identity=pra; client-ip=77.235.32.111;
receiver=mx.ptn-ipin02.plus.net;
envelope-from="[email protected]";
x-sender="[email protected]";
x-conformance=sidf_compatible
Received-SPF: Neutral identity=mailfrom; client-ip=77.235.32.111;
receiver=mx.ptn-ipin02.plus.net;
envelope-from="[email protected]";
x-sender="[email protected]";
x-conformance=sidf_compatible
Received-SPF: None identity=helo; client-ip=77.235.32.111;
receiver=mx.ptn-ipin02.plus.net;
envelope-from="[email protected]";
x-sender="(edit)";
x-conformance=sidf_compatible
X-SBRS: None
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AtEOAPepYExN6yBv/2dsb2JhbACBVId0ihmME4FTwS+FOgSEJg
X-IronPort-AV: E=McAfee;i="5100,188,6069"; a="40090945"
X-IronPort-AV: E=Sophos;i="4.55,347,1278284400";
d="scan'208,217";a="40090945"
Received: from (edit)) ((edit))
by mx.ptn-ipin02.plus.net with ESMTP; 10 Aug 2010 17:17:55 +0100
Received: (qmail 4085 invoked by uid 110); 10 Aug 2010 17:19:59 +0100
Delivered-To: 166-(edit)
DomainKey-Status: no signature
Received: (qmail 3873 invoked from network); 10 Aug 2010 17:19:52 +0100
Received: from elasmtp-kukur.atl.sa.earthlink.net (209.86.89.65)
by (edit) with SMTP; 10 Aug 2010 (edit)
Received: from [216.108.229.194] (helo=verizon.net)
by elasmtp-kukur.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <[email protected]>)
id 1OirWE-0006h3-Bo
for (edit); Tue, 10 Aug 2010 (edit)
Date: Tue, 10 Aug 2010 (edit)
To: (edit)
From: Marie Murphy <[email protected]>
Message-ID: <[email protected]>
X-Priority: 3
X-Mailer: MIME::Lite 3.01 (F2.71; A1.67; B3.05; Q3.03)
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-ELNK-Trace: ba5f9c166088d49e2cacaae604169a5174bf435c0eb9d478a417a4e7c04abcb20a88583cc1af5b1eb212bdafe2b982ac350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 216.108.229.194
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: eBay item #(edit)
X-Brightmail-Tracker: AAAAAhV7SVQVfCBf
X-Brightmail-Tracker: AAAAAA==

From: Marie Murphy [mailto:[email protected]]
Sent: 10 August 2010
To: (edit)
Subject: eBay item #(edit)

Hello,

I don't know if you received my first email regarding your ebay item. I would like to know if the price includes shipping. I'm very interested to buy it but I'm a little bit confused.

I saw the same product with worldwide shipping included, listed at a cheaper price on www.bids-auctions.com

Please let me know at your earliest convenience if I'm speaking here with the same seller. Thank you.

Best regards,
Marie Murphy

Posted: Thu Aug 12, 2010 1:05 pm

You can say 'dodgy' again Very Happy

Site registered: 11-Jul-2010

The email you received describes the item for sale as 'eBay item', that pretty typical for mass eBay/Craiglist scams.

In this very case the mentioned website tries to drop a Java applet on your browser .. I suspect it to be a phishing website, but I'm not sure.

Posted: Sun Sep 26, 2010 3:09 pm

www.bids-auctions.com

Posted: Sat Dec 04, 2010 10:26 pm

I don't see any evidence of 419AFF scam here. Would this be better in Misc Scams?