eBay - Security Update - Email Scam
21st January 2004

This 'regular update and verification of the accounts' is a scam ...

This spoof email is in HTML format with text and a button link (see images below), but the button will open a forged eBay page.

The forged eBay web page has the following URL (see browser address bar) http://sf1000.registeredsite.com/
~user1016159/ cgi.ebay.com/verif which resolves to registeredsite.com (Georgia, USA), and which clearly has nothing to do with eBay. Any data entered and submitted into this form is captured and processed using PHP script located in the same web space.

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

Take a good look at the following images, because this email scam may be coming to an inbox near you!

The Email ...

The forged web page...