REPORT SUMMARY
Date Reported
6th January 2004
Apparent Sender
eBay
Subject
Your eBay account
Registration
Suspension
Senders Address
(spoofed)
accounts@eBay.com
Content
text and a
link to a forged
ebay web page
(see images)
Spoofed Web page/site?
Yes
Web page/site
content
forged eBay web
page with web form
requiring
email user
name & password,
name & address
details, credit or
debit card and ATM
PIN numbers, etc
Web page/site origin
URL
http://
www.user-support
.ph/
verifyaceess
Identity Theft method
Web form
information
is captured by the
scammers using
PHP script
while you
are sent to the
genuine ebay.com
sign in page
More...
Latest
phishing
scam
Another
Bank Email Scam
See our guide to
phishing scams
Other
Resources...
See our guides to
Free Utilities...
List of
Auction Sites
Your eBay account Registration Suspension - Email Scam
6th January 2004
This spoof eBay email is a scam with a forged eBay
web page ...
This spoof email takes the form of a text mail with a link to a forged eBay web page (see images below). The link contains many numbers in an effort to disguise its malicious nature, or to add authenticity.
The email text indicates (with very bad english) that you need to 'update your information' using the link, due to failure of a so called 'regular update'.
The link opens a fake eBay web form in your browser with a URL beginning with 'http://www.user-support.ph/verifyaceess'. This is a Philippine domain and clearly has nothing to do with eBay. Scammers will often register domains which have names suggesting some form of customer or user support or account verification in an effort to add authenticity to these scams.
We also found that the data that is entered into this
forged ebay web page is processed using a PHP script located
in the same web space.
Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Email
Alerts
Add your email address to our email alert service...
Subscribe
Privacy Policy
RSS
News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including
My Yahoo!).
Scam Alert News Feed
You can even put the latest alerts on your own web site.
FORWARD
YOUR EMAIL SCAMS
TO KU.OC.SELIMSRELLIM@FOOPS
and help us to
build awareness and
help others
If you have received this hoax email, please remember
that it
is
very common for these email scams to be redistributed at a
later
date with only slightly different content or the same but with the fake
page(s) hosted by a different provider. Also, once you have received one of
these hoaxes, it is also common place to receive at least another one
and usually a day or two after the first, although not necessarily from
the same apparent sender.
Take a good look at the following images, because this hoax email scam may be coming to an inbox near you!
The Email ...
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
The fake web page...
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|||
