Dangerous Ebay link? - Page 1
Forum section: electronics / general

author: Jwalling
author_rank: Unknown
timestamp: May 17, 2017, 07:51:11 pm
content: http://www.ebay.com/itm/LeCroy-WaveRunner-64Xi-Digital-Oscilloscope-600MHz-10GSs-Working-condition-/222514770810?hash=item33cee9f37a:g:6I0AAOSw~FJZHKFJAnother fake auction I think, but when you click on the link, it directs you to login with your ebay credentials here:http://muisa8.altervista.org/wsusrid.html?dliviewsellersotherItemsanduseridakscomplete&daal2s2a42aIt's not my machine, any other ebay item doesn't do this to me...Yikes.

author: helius
author_rank: Super Contributor
timestamp: May 17, 2017, 07:55:02 pm
content: You shouldn't click on links in ebay listings. Their rules actually prohibit linking (which is swatting a fly with a hammer, but is for exactly this situation).

author: Jwalling
author_rank: Unknown
timestamp: May 17, 2017, 07:57:01 pm
content: Quote from: helius on May 17, 2017, 07:55:02 pmYou don't understand; That direct ebay link above in the first URL redirects you somewhere else. I'm not clicking on a link *in* the listing

author: Jwalling
author_rank: Unknown
timestamp: May 17, 2017, 08:00:11 pm
content: OK, it was taken down in minutes! Did anyone see what I'm saying?

author: edpalmer42
author_rank: Super Contributor
timestamp: May 17, 2017, 08:06:52 pm
content: No, I missed it. It just went to a standard ebay page. That item# doesn't exist. Either there's a virus on the PC you're using, or ebay got hacked, or maybe there was a malicious ad on the page that did the redirection.Ed

author: helius
author_rank: Super Contributor
timestamp: May 17, 2017, 08:14:25 pm
content: It simply leads to an error message when I try it.Does ebay allow you to write your own <html><head> elements? I would have thought that they didn't (<meta http-equiv=refresh> needs to be in the header)

author: tablatronix
author_rank: Regular Contributor
timestamp: May 17, 2017, 08:29:00 pm
content: That would indicate that someone might have found a xss exploit and is actively exploiting it. Most modern browsers prevent this click jacking now for you.What browser you using , and is it up to date?

author: wraper
author_rank: Unknown
timestamp: May 17, 2017, 08:34:16 pm
content: Quote from: helius on May 17, 2017, 07:55:02 pmNope you made it up by yourself. Links are not prohibited as long they don't point to somewhere where you are trying to sell outside ebay.

author: Jwalling
author_rank: Unknown
timestamp: May 17, 2017, 08:35:28 pm
content: Quote from: tablatronix on May 17, 2017, 08:29:00 pmFirefox 53.0.2. Just checked and it's up to date.Just ran a full virus scan now (Symantec Internet security)Nothing...

author: Jwalling
author_rank: Unknown
timestamp: May 17, 2017, 08:43:07 pm
content: It's backhttp://www.ebay.com/sch/i.html?_from=R40&_sacat=0&_nkw=64xi&_sop=10This is just a search for "64xi"The one listed at 13:06 PST is the one.

author: TheSteve
author_rank: Unknown
timestamp: May 17, 2017, 08:47:34 pm
content: Wow, it redirects off site quite nicely doesn't it.Someone found a nasty bug.

author: janoc
author_rank: Super Contributor
timestamp: May 17, 2017, 08:51:21 pm
content: Yeah, there is some sort of javascript exploit on that page. When I turn off my javascript and ad blocking, I get the nice red Chrome warning:"Deceptive site aheadAttackers on muisa8.altervista.org may trick you into doing something dangerous like installing software or revealing your personal information (for example, passwords, phone numbers or credit cards)."If you have adblocking/javascript off, there is only normal eBay listing, albeit very scammy looking. It was a script called muisa8.altervista.org/x.js that does that redirection.And the auction was taken down again.

author: Jwalling
author_rank: Unknown
timestamp: May 17, 2017, 08:56:15 pm
content: Thanks for the confirms. I didn't want everyone to think I'm nuts!

author: helius
author_rank: Super Contributor
timestamp: May 17, 2017, 09:12:30 pm
content: Quote from: wraper on May 17, 2017, 08:34:16 pmThey made the rules more general recently.QuoteYou aren't allowed to "refer to" your own website, which means you cannot link to it.

author: Jwalling
author_rank: Unknown
timestamp: May 17, 2017, 09:20:35 pm
content: Quote from: janoc on May 17, 2017, 08:51:21 pmAnd back again at 14:16 PST. Must be like whack-a-mole for the admins.

author: Nuno_pt
author_rank: Frequent Contributor
timestamp: May 17, 2017, 09:28:19 pm
content: It's back here also as new listing.

author: james_s
author_rank: Super Contributor
timestamp: May 18, 2017, 12:57:27 am
content: Hopefully Ebay is desperately working on a fix for the bug you uncovered. Beats me how phony sellers pop back up so quickly.

author: hendorog
author_rank: Super Contributor
timestamp: May 18, 2017, 03:27:46 am
content: The eevblog notification email for this thread has been detected as malicious by gmail and was automatically moved to my spam folder."Be careful with this message. It contains a suspicious link that has been used to steal people's personal information. Unless you trust the sender, don't click on links or reply with personal information. "Pretty sure this happened some time after it arrived.

author: janoc
author_rank: Super Contributor
timestamp: May 18, 2017, 08:10:46 am
content: Quote from: james_s on May 18, 2017, 12:57:27 amScripted robot? Fairly easy to do, there are plenty of tools for automated posting of eBay auctions.

author: dexters_lab
author_rank: Unknown
timestamp: May 19, 2017, 10:38:52 am
content: i have had rogue adverts within ebay causing issues like this, browser redirects, opening new tabs or playing audiothankfully they don't normally occur very often or for long periods but the number of adverts ebay place on their site is a major problem

author: helius
author_rank: Super Contributor
timestamp: May 30, 2017, 12:59:10 am
content: Quote from: dexters_lab on May 19, 2017, 10:38:52 amI just saw this (redirects by ads) for the first time. It only happens (to me) fromwww.ebay.ca.Actually I have not seen any of the ads on the US site for years since I blocked certain domains, but they seem to have proliferated the partners that serve their ads. Another recent change is the increase of anti-blocking techniques in all kinds of sites: ads served from the same domain you are browsing to, or embedded in the webpage itself, in order to frustrate blocking by domain.

author: CJay
author_rank: Super Contributor
timestamp: June 12, 2019, 11:17:06 am
content: Quote from: Jwalling on May 17, 2017, 08:00:11 pmNo, didn't see that one though I've seen similar before, they're usually gone in a very short space of time but I do wonder if that's how we occasionally get the 0.99 IR thermometer and 9.99 Lab PSU type scams

author: coromonadalix
author_rank: Super Contributor
timestamp: June 13, 2019, 02:04:03 am
content: Thoses links seems fishy too, say it an usa resident(s) but when you check all their listings you see china based too in thoses sellSame identicals photoshttps://www.ebay.com/itm/DER-EE-DE-5000-High-Accuracy-Handheld-LCR-Meter-w-TL-21-TL-22-New-F-S-Tracking/323831689917?https://www.ebay.com/itm/DER-EE-DE-5000-High-Accuracy-Handheld-LCR-Meter-w-TL-21-TL-22-New-F-S-Tracking/323831860749?

author: ebastler
author_rank: Super Contributor
timestamp: June 14, 2019, 07:11:53 pm
content: Quote from: CJay on June 12, 2019, 11:17:06 amThat might have to do with the fact that the auction in question was activetwo years ago.Please let the dead (threads) rest in peace...

author: CJay
author_rank: Super Contributor
timestamp: June 17, 2019, 09:07:23 am
content: Indeed, it appeared in my unread threads for some reason, apologies for the necro

author: quincybatten
author_rank: Newbie
timestamp: August 07, 2019, 10:32:20 am
content: Quote from: Jwalling on May 17, 2017, 08:56:15 pmGoogle Safe Browsing services have created this message in order to protect people from unsafe online content. This service scans websites and looks for deceptive buttons, for instance, download buttons that install software from unrelated and unreliable third-party sources.Deceptive sitewarning is basically designed to keep you away from web pages and content that can put your privacy at serious risk.Visit an unsafe pageOn your computer, open Chrome.On the page where you see a warning, click Details.Click Visit this unsafe site.The page will load.When you visit an unsafe site, Chrome will try to remove the unsafe content from the page.To view the entire page:On your computer, open Chrome.On a deceptive site, to the right of the address bar, click Content blocked Content blocked.In the alert, click Load full site.The page will load.