Search our Spoof Library...
Another Spoof Email and Phishing Scam report by MillerSmiles.co.uk - click this image to go to our home page.

***Urgent Fraud Prevention Group Notice***
31st May 2004

please forward any scams you've received to spoof@millersmiles.co.uk


Report Summary
Date Reported
15th & 31st May 2004
Apparent Sender
eBay
Return Address
aw.confirm@ebay.com <aw.confirm@ebay.com>
Subject
***Urgent Fraud Prevention Group Notice***
Format
HTML
Method
disguised link leads to bogus web content - information submitted into the forged eBay sign in page is captured by a local (located in the same web space) script.
Bogus Web Content?
Yes
URL of web content
http://ebay.com-verify.us/eBayISAPI.dll?MfcISAPICommand... - resolves to a Yahoo user's web space.
RISK LEVEL
Medium
WARNINGS

1. The URL of this bogus eBay sign in page is not a genuine eBay domain ... com-verify.us is the domain (highlighted in the URL above).
2. The page is coded with a second frame (window within the page) placed at the very bottom of the page - this could be to serve a fake status bar, but if this is the case the coding is incorrect, and the extra frame does not load (see image below - depicted by the red arrows) neither is the proper status bar coded out. This kind of spoofing is not beyond the realms of possibility though.

 

" You have received this email because we have strong reason to believe that your eBay account had been recently compromised. "...

 

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

 

The Spoof Email ...

***Urgent Fraud Prevention Group Notice*** - spoofed email

 

The bogus web page (note the extra frame that does not load correctly - marked with red arrows - see report summary above) ...

***Urgent Fraud Prevention Group Notice*** - forged sign in page

 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Email Alerts
Add your email address to our email alert service...
Subscribe

Privacy Policy

RSS News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including My Yahoo!).
Scam Alert News Feed

You can even put the latest alerts on your own web site.

Click here to learn more about RSS News Feeds and our Scam Alert Service!

Resources links - use one of the links below to access more information on Spoof Email & Phishing Scams.

Library of Spoof Email Phishing Scams

Brief guide to Phishing

Full article on spoof email scams

Spoof URL Checker

Link Checker

Browser URL Spoofing Vulnerability Check

Latest browser bug aids Phishing Scams - beware!

Destinations - other resources available on the MillerSmiles.co.uk web site.

Click the arrow to return to previous page

Home

Guides...

Book Terminology

How to identify a first edition book

Auction Watcher

List of the main Auction Sites world wide