REPORT SUMMARY
Date Reported
13th January 2004
Apparent Sender
eBay
Subject
Security Measures
(SafeHarbor)
(KMM82003618
V76837L0KM)
Senders Address
(spoofed)
CustomerSupport
@ebay.com
Content
text with a link
to a forged eBay
page with web form
(see image)
Spoofed Web page/site?
Yes
Web page/site
content
forged eBay web
page with web form
requiring
email user
name & password,
name & address
details, credit or
debit card details
and ebay username
and password,
etc
Web page/site origin
URL
http://
verify-ebay-details.lbgo.com/
ebay.update/
ebay.update.
details.ssl.html
or
http://update-ebay.lbgo.com/
Identity Theft method
Web form
information
is processed using
a script located at
dk3.com and
sent to a Yahoo
email address
(fanenuarevoi
e@yahoo)
while a confirmation
page opens
(see image)
More...
Latest
email
scam
See our guide to
phishing scams
Other
Resources...
See our guides to
Free Utilities...
List of
Auction Sites
Ebay Security Measures (SafeHarbor) (KMM82003618V76837L0KM) - Email Scam
first reported 13th January 2004,
still active with variations in the URL of the forged page
Your eBay billing records are NOT out of date, this is a scam
This spoof email takes the form of a text message with a link (see images below), but the link leads to a forged eBay page with a web form.
The forged web page contains a web frm which requests a variety of personal information including Credit/Debit Card details and eBay user name and password.
The forged page is hosted in a sub-domain of lbgo.com (which has Lebanese contact information) and is therefore certainly nothing to do with eBay. We have received furtehr reports of this spoof email but with variation in the URL of the forged eBay page. In both instances, the URLs have been derivatives of the lbgo.com name (sub-domains).
We also found that the forged page sends any data
submitted to a Yahoo email account (fanenuarevoie@yahoo) via a script
located at dk3.com (which is registered to an individual in Denmark).
Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Email
Alerts
Add your email address to our email alert service...
Subscribe
Privacy Policy
RSS
News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including
My Yahoo!).
Scam Alert News Feed
You can even put the latest alerts on your own web site.
FORWARD
YOUR EMAIL SCAMS
TO KU.OC.SELIMSRELLIM@FOOPS
and help us to
build awareness and
help others
If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.
Take a good look at the following images, because this email scam may be coming to an inbox near you!
The Email ...
 |
 |
 |
 |
 |
 |
 |
 |
 |
The fake web page...
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
||||
The confirmation page ...
