check this szamboti auction out; is this legit?

[woodyosborne]

when i wanted to ask seller a question,ebay's account guard popped up to say this was not an ebay site. site changed from: http://cgi.ebay.com/Gus-Szamboti-1980-GS80B_W0QQitemZ7179603907QQcategoryZ21212QQrdZ1QQcmdZViewItem(iterm #7179603907 )
to: http://www.stvbrg.com/cue.php what is going on here? have i seen this cue on another site? chalkers? seems familiar.

 

[sjm]

when i wanted to ask seller a question,ebay's account guard popped up to say this was not an ebay site. site changed from: http://cgi.ebay.com/Gus-Szamboti-1980-GS80B_W0QQitemZ7179603907QQcategoryZ21212QQrdZ1QQcmdZViewItem(iterm #7179603907 )
to: http://www.stvbrg.com/cue.php what is going on here? have i seen this cue on another site? chalkers? seems familiar.

There's already a thread on this subject.

 

[TATE]

when i wanted to ask seller a question,ebay's account guard popped up to say this was not an ebay site. site changed from: http://cgi.ebay.com/Gus-Szamboti-1980-GS80B_W0QQitemZ7179603907QQcategoryZ21212QQrdZ1QQcmdZViewItem(iterm #7179603907 )
to: http://www.stvbrg.com/cue.php what is going on here? have i seen this cue on another site? chalkers? seems familiar.

I don't get it either. I am going to report it to e-bay right away. There is something wrong with the HTML in the ad to misdirect the question to an off-e-bay site through their internal messaging system. It's possible that the code is corrupted. This would take fraud to a new level of hacking as far as I'm concerned. E-Bay might use this company's software to direct their internal communications.

Definitely don't do anything with this. This would be a major security breach if it's not a programming glich.

Chris

 

[TATE]

when i wanted to ask seller a question,ebay's account guard popped up to say this was not an ebay site. site changed from: http://cgi.ebay.com/Gus-Szamboti-1980-GS80B_W0QQitemZ7179603907QQcategoryZ21212QQrdZ1QQcmdZViewItem(iterm #7179603907 )
to: http://www.stvbrg.com/cue.php what is going on here? have i seen this cue on another site? chalkers? seems familiar.

I reported it. This is a new one on me.

To explain it to everyone else, in this ad when you click on the "ask the seller a question" button, the ad redirects you to a non- e-bay web site (instead of their private message system) where they can probably get anything they want out of you.

They probably have you log in again, get your password, give you a virus, whatever. Somehow, they wrote the ad in HTML and it overwrote everything that would normally be there.

Chris

 

[TATE]

I just carried it through to all the screens - it's just a scam to get your e-mail address associated with a screen name. They can then answer you making the mail look official and offer you the cue outside of e-bay.


Chris

 

[Guru]

It's a very slick scam. They have included some javascript in the description to make the page act that way. It should be reported to eBay. Good find.

 

[TATE]

It's a very slick scam. They have included some javascript in the description to make the page act that way. It should be reported to eBay. Good find.

Thanks for the info, Guru. These guys are getting clever.

Chris

 

[Guru]

Thanks for the info, Guru. These guys are getting clever.

Chris

You aint kiddin' This one is very very clever. It basically redirects any link that has a url that's 16 characters long (in the string) to the fake page. The ask seller is at: contact.ebay.com, you get the same page if you click the "Email this page to a friend" link because ebay uses the same url with a different string. (if you're counting the letters, include the dots to get a 16 character string)

Just a further FYI the owner of the domain that it goes to is:
Registrant:

Steve Scarborough (2BX74) stvschrbgh@yahoo.com
steves
500 S. Bahnson Ave.
Sioux Falls, South Dakota 57103
United States
Phone: (605)3386926 x

Dunno if this guy is known in the cue industry, but it's public info that might give some of you a heads up.