Spoof Email and Fake Web Site
7th September 2003

This spoof eBay email was distributed on 7th September 2003 and we also have images of the spoof web pages that it would have sent you to. These are just images of the originals, so there is absolutely no code included and none of the links or buttons will now work. The images shown have been reduced 80% of the original size.

The email hoax...

The spoof email states that eBay updated their user agreement and it requests that you use the link provided to log in and accept the new agreement.

If you use the link in that email, you would arrive at a sign in page that looks exactly as you would expect to see on eBay. This page is a spoof web page which has been constructed using code from eBay's own servers. It is clearly apparent that the page is spoofed when you see the URL/web address in your browser's address bar - 'http://new-privacy.com/?SignIn&UserId=.....' has absolutely nothing

to do with eBay whatsoever, in fact registration details show it to be registered to an individual in Edison, New Jersey, USA. And the domain is being hosted on servers registered valueweb.net (we've had a few of these spoofed eBay emails which back trace to these hosts).

The bogus web page...

If you use the link in that email, you will then arrive at the spoof eBay page, but notice the URL shown in the browser address bar - this is not what you would expect to see with a genuine eBay page...