REPORT SUMMARY
Date Reported
26th September 2003
Apparent
Sender
eBay
Subject
eBay Security
Request
Senders Address (spoofed)
not supplied
Content
verify your
information with
a user
name and
password form
(see image)
Spoofed Web page/site?
Yes
Web page/site
content
'Enter Your
Registration
Information'
requiring eBay and
Paypal user names
+ passwords, credit
card + ATM
PIN,
bank details, SSN
Web page/site origin
URL
216.110.171.248
and
216.110.172.252
SEE TEXT FOR THE FULL URLs
Identity Theft method
Web form information
is captured with PHP
script while you are
sent to eBay.com
home page
More...
Latest
email
scam
Latest
Bank Email Scam
See our guide to
email scams
Other
Resources...
See our guides to
Free Utilities...
List of
Auction Sites
eBay email hoax and fake web page
26th September 2003
This hoax eBay email was distributed on 26th September 2003 and we an image of the hoax email and bogus web eBay web page that it sends you to. These are just images of the originals, so there is absolutely no code included and the links or buttons will not work. The images shown have been reduced to 80% of the original size.
The email hoax...
The spoof email states that eBay has tried to 'verify' your account information, and such verification has failed. The email hoax requests that you log into eBay using the form provided within the email. If you enter this information and click the 'Submit' button, you will arrive at the genuine eBay.com home page (the information entered is relayed to the scammers using PHP script), but a further web page will open in a new window (pop up) as well - this is the bogus eBay web page, and it contains a form to enter further information (see below).
PLEASE SEND US YOUR
EMAIL HOAX SCAMS
click here to
use our online
report form
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
||||
The bogus web page...
The bogus web page which opens in a new window (pop up) does not have the browser tool bars or address bar, so you cannot see the URL of the bogus web page that you are viewing. The URL is actually...
216.110.171.248/eBayISAPidlldasSKJEDFKJSdsalkepoamncjfdsjKKdsjdxc
mnzkjsjeLKKLKdsjnxs/ksjdeISJJSjjISSdlldkDKJlLXcdcawerfDEurERRudsksa
lfkmcxXXlkdmfldll/LKJDjedssjheflkcgieBaysadkKJEDjdfklluseridLKSKdskdmx
skjdeEEdkjas7837sdkjd/a.php
this has absolutely nothing to do with eBay whatsoever, and is in fact an IP address assigned to a domain called cardsfolter.com, hosted at valueweb.net.
This forged eBay web page asks for your eBay and Paypal log ins, credit card information, etc, etc. Once completed and the "Submit" button is pressed, any information you have entered on this page is relayed to the scammer(s) utilising PHP code, while you are diverted to the genuine eBay.com home page.
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
||||
