It appears that Yahoo has allowed the account to be reactivated.
Thanks to the Harford County Sheriffs Office for the heads up.
Keep an eye out for:
Domain Name: KODAK-SLIDE-SHOW.NET
Registrar: OMNIS NETWORK, LLC
Whois Server: whois.omnis.com
Referral URL: http://domains.omnis.com
Name Server: NS1.OMNIS.COM
Name Server: NS2.OMNIS.COM
Updated Date: 20-jul-2010
Creation Date: 20-jul-2010
Expiration Date: 20-jul-2011
An eBay scammer is sending re-direct files via 2 methods.
The scammer is also apparently sending intended victims to fake eBay pages and a fake eBay live chat area using the name Samuel A.
He is sending intended victims to the site:
It forwards people to the real Kodak site unless you are directed to the viewer download page.
The download page is only available via email from the scammer.
The fake site is a spoof of the real Kodak slideshow site located at:
The other method he is using is to send a file attachment via emails named pictures.zip which contains the file pictures.exe
NEVER open files from strangers, especially .exe files.
Its a program which takes over control of your browser and re-directs you to a fake eBay listing on another site.
Here is a fix, provided it is a host file, browser hijack problem:
I'm surprised this site hasn't come to anyone's attention before now.
The domain was created:
Domain Name: KODAK-SLIDESHOWS.COM
Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Whois Server: whois.melbourneit.com
Referral URL: http://www.melbourneit.com
Name Server: YNS1.YAHOO.COM
Name Server: YNS2.YAHOO.COM
Updated Date: 29-jul-2010
Creation Date: 21-jul-2010
Expiration Date: 21-jul-2012
Here is a reference to the scammer using the site for a 1980 Ferrari.
The scammer is selling a Ford F150 and using the email address:
Here is what he is telling intended victims:
I had a buyer, but the deal fell through because he didn't get his loan approved. I am still interested to sell and I am willing to let it go for less as long as we get this done faster.
I have also attached a few pictures of the truck, check them out.
(DO NOT OPEN THE ATTACHED FILE !!!!!!)
Let me know if you are still interested. Thanks!
Right now I'm in Canada on a business trip and unfortunately forgot my cell at home, so it's best to email me. The truck is back home, but shipping is already paid, because my first buyer changed his mind after I have made the arrangements to ship the car. The trucking company would not refund me but can ship it to anywhere within continental US, so I've left it at their warehouse and it's ready to ship at anytime.
Item# is 170515682914, you can search for it on eBay
Buy it now price: $9,000
Title is clear! There are no problems with the vehicle whatsoever!
If you want it, you can use the "Buy It Now" option on eBay. This way our transaction will be protected by eBay. You will have to make the payment as a bank transfer, you'll find details on the auction page. However, if you request it, eBay will lock my bank account so I will not have access to the money you send me for the car until you inspect it and approve it. I'm OK with that too.
It's in Oregon, but shipping is free. Mileage is 59k.Just to get a perfect idea of how this vehicle looks like and its awesome condition, I have uploaded some new pics on Kodak. Feel free to check them out:http://www.kodak-slideshows.com/ (edited to remove location of the actual page containing the kodakviewer.exe file, image of it below) The domain is used to forward users to the real Kodak site.
I am selling because I need the money fast. Like I said I had a buyer and I was counting on the sale but he sort of backed out.The car will not be available for inspection in OR, because it's at the shippers warehouse. However on eBay you can either place a lock on my account or you can opt for an eBay agent that will hold your money secure until you receive and approve the car. Basically you'll be able to inspect the car yourself before "giving up" the money. So if you're serious about this thing please go ahead and use the "Buy it Now" option on eBay. I would love to get this done asap, even today if possible.Here is a picture of the fake page which prompts you to click on the installer for the scammer's file: