REPORT SUMMARY
Date Reported
10th September 2003
Apparent
Sender
eBay
Subject
not supplied
Senders Address (spoofed)
not supplied
Content
regular security
maintenance and
account
update
(see image)
Spoofed Web page/site?
Yes
Web page/site
content
bogus confirmation
page
Web page/site origin
URL
http://63.110.5.149/..
Identity Theft method
Form information
is captured and
relayed to scammers
utilising PHP script
More...
Latest
email
scam
Latest
Bank Email
Scam
See our guide to
email scams
Other
Resources...
See our guides to
Free Utilities...
List of
Auction Sites
eBay email hoax and web page
10th September 2003
This hoax email was in distribution from 10th September 2003 and we images of the hoax email and bogus web eBay web pages that it sends you to. These are just images of the originals, so there is absolutely no code included and the links or buttons will not work. The images shown have been reduced to 80% of the original size.
The email hoax...
The spoof email states
that eBay is performing regular maintenance of their
security measures, and
it is necessary for you to update your account information. The email
contains a form for you to provide your eBay and
email user IDs and passwords.....
PLEASE SEND US YOUR
EMAIL HOAX SCAMS
click here to
use our online
report form
 |
||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
|
 |
||||||
The spoof web page...
If you provide this information and submit it, it is relayed to the scammers with the use of PHP script while you sent to a confirmation page , after a few moments you are automatically redirected from the confirmation page to the genuine eBay.com home page.
This
spoof utilises scripts located at a domain in the name of escrowinternational.com
which is hosted on servers owned by netnation.com, none of these have
anything to do with eBay.
 |
|
|
|
|
|
|
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
|
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
|
|
 |
 |
 |
 |
 |
|
|
 |
|
The spoof web page...
The hoax web page looks like a genuine eBay page but, it is clearly apparent that the page is spoofed when you see the URL/web address in your browser's address bar -
http://info-update-ebay.com/
which has absolutely nothing to do with eBay whatsoever, and is in fact a domain which is hosted by Charter Communications .
This hoax eBay web page contains a form for you to provide the usual sensitive information. If you provide this information and submit it, it is relayed to the scammers with the use of a PHP script....
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
