REPORT SUMMARY
Date Reported
6th September 2003
Apparent
Sender
eBay
Subject
Account Verification
Senders Address (spoofed)
service@
ebay.com
Content
text with cloaked
link to fake eBay
web page
(see image)
Spoofed Web page/site?
Yes
Web page/site
content
fake or forged
eBay web form
Web page/site origin
URL
http://
194.254.26.107
/verify/....
Identity Theft method
form information is
forwarded to the
scammers with
the
use of PHP script
while you are
unwittingly diverted
to the genuine
eBay.com home
page
More...
Latest
email
scam
Latest
Bank Email Scam
See our guide to
email scams
Other
Resources...
See our guides to
Free Utilities...
List of
Auction Sites
Spoof Email and Fake Web Site
6th September 2003
This spoof eBay email was distributed on 6th September 2003 and we also have images of the spoof web pages that it would have sent you to. These are just images of the originals, so there is absolutely no code included and none of the links or buttons will now work. The images shown have been reduced 80% of the original size.
The email hoax...
The spoof email states that eBay are performing a regular update and verification of accounts and requests that you complete the verification process by using the link provided in that email.
If you use the link in that email, you would arrive at a spoofed eBay web page that requests your eBay and Paypal IDs and passwords and credit/debit card information. This page is a spoof which has been constructed using code from eBay's own servers. It is clearly apparent that the page is spoofed when you see the URL/web address in your browser's address bar - 'http://194.254.26.107/verify/.....' has absolutely nothing to do with eBay whatsoever, and is in an IP address which is part of a block assigned to Renater.fr, Toulouse, France.
PLEASE SEND US YOUR
EMAIL HOAX SCAMS
click here to
use our online
report form
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
|||||
The bogus web page...
If you use the link in that email, you will then arrive at the spoof eBay page, but notice the URL shown in the browser address bar - this is not what you would expect to see with a genuine eBay page...
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
|||||
If you complete the form and submit, you will then arrive at this confirmation page, by which time any information you've provided is already on its way to the scammers...
