Search our Spoof Library...
Another Spoof Email and Phishing Scam report by MillerSmiles.co.uk - click this image to go to our home page.

Your eBay account could be suspended!
16th May 2004

please forward any scams you've received to spoof@millersmiles.co.uk


Report Summary
Date Reported
16th May 2004
Apparent Sender
eBay
Return Address
aw-notice@eBay.com <aw-notice@eBay.com>
Subject
Your eBay account could be suspended!
Format
HTML
Method
disguised link leads to bogus web content
Bogus Web Content?
Yes
URL of web content
http://3cgi.ebay.20fr.com/aw-cgi/eBayISAPII/SignIn.html
RISK LEVEL
Medium
WARNINGS

1. Not ethe URL fo the forged page - this is a sub domain of 20fr.com which is worded to give the impressiont hat it is a genuine ebay.com domain.

 

" We regret to inform you that your eBay account could be suspended if you don't resolve your problems. "...

 

This spoof eBay email (see image below) is in HTML format (although it does look like a text only email in order add a sense of authenticity to the link text). The link in the email has been disguised using HTML code to look like a genuine link to eBay and it has been further coded to exploit the URL Spoofing bug in Internet Explorer browsers (test your browser - see link on right).

Using that link will trigger 2 new browser windows, first we will see the genuine eBay.com home page, then what appears to be a pop up window will appear in front of that. This is achieved through the use of JavaScript, and its purpose is purely to convince users that they are seeing a genuine pop up window from the eBay.com page. The pop up window has been crafted to open without the address bar to prevent users from seeing the true URL which would reveal its bogus nature (http://68.88.15.175:4944/dl/confirm.htm).

Any information submitted is processed through a script located on the same server as the bogus content.

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

 

The Spoof Email ...

We regret to inform you that your eBay account could be suspended if you don't resolve your problems. To resolve this problems please click here and update your informations in order to resolve your account problems.If your problems could not be resolved your account will be suspended for a period of 3-4 days, after that it will be again operational.
Per the User Agreement, Section 9, we may immediately issue a warning,temporarily suspend, indefinitely suspend or terminate your membership and refuse to provide our services to you if we believe that your actions may cause financial loss or legal liability for you, our
users or us. We may also take these actions if we are unable to
verify or authenticate any information you provide to us.
Due to the suspension of this account, please be advised you are prohibited from using eBay in any way. This includes the registering of a new account.
Please note that this suspension does not relieve you of your
agreed-upon obligation to pay any fees you may owe to eBay.
Regards,
Safeharbor Department
eBay, Inc.

 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Email Alerts
Add your email address to our email alert service...
Subscribe

Privacy Policy

RSS News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including My Yahoo!).
Scam Alert News Feed

You can even put the latest alerts on your own web site.

Click here to learn more about RSS News Feeds and our Scam Alert Service!

Resources links - use one of the links below to access more information on Spoof Email & Phishing Scams.

Library of Spoof Email Phishing Scams

Brief guide to Phishing

Full article on spoof email scams

Spoof URL Checker

Link Checker

Browser URL Spoofing Vulnerability Check

Latest browser bug aids Phishing Scams - beware!

Destinations - other resources available on the MillerSmiles.co.uk web site.

Click the arrow to return to previous page

Home

Guides...

Book Terminology

How to identify a first edition book

Auction Watcher

List of the main Auction Sites world wide