REPORT SUMMARY
Date Reported
15th October
2003
Apparent
Sender
eBay
Subject
Ebay Account
Update
Senders Address (spoofed)
various
Content
text and a cloaked
link to a fake
eBay
web page
(see images)
Spoofed Web page/site?
Yes
Web page/site
content
Web form - eBay user name & password,
credit/debit card, SSN, date of birth, etc
Web page/site origin
URL
http://
68.32.196.153/.....
Identity Theft method
Web form information
is captured with PHP
script while you are
sent to eBay.com
services page
More...
Latest
email
scam
Latest
Bank Email Scam
See our guide to
email scams
Other
Resources...
See our guides to
Free Utilities...
List of
Auction Sites
eBay
Account Email Scam and fake web page
15th October
2003
This hoax
eBay email has been in distribution from 15th
October 2003 and we also have an image of the hoax web
page that it sends you to. These are just images of the originals,
so there is absolutely no code included and none of the links or buttons
will now work. The images shown have been reduced to 80% of the original
size
The email scam...
The email scam states
that they could not verify your information during a 'regular update and
verification of accounts' and that your user information may have changed
or be incomplete, and asks that you follow a link to rectify the issue. The
link is disguised to look like a genuine eBay link (a cloaked link), but
when clicked on will lead you to a scam web page...
PLEASE SEND US YOUR
EMAIL HOAX SCAMS
click here to
use our online
report form
 |
|
|
|
|
|
|
|
|
|
|
|
|
 |
 |
 |
 |
 |
 |
|
||||||
 |
 |
 |
 |
 |
 |
|
||||||
 |
 |
 |
 |
 |
 |
|
||||||
The scam web page...
The web page scam looks like a genuine eBay page. It is clearly apparent that the page is spoofed when you see the URL/web address in your browser's address bar.
http://68.32.196.153/scgi.ebay.com/saw-cgi/verify.htm?eBayISAPI.dll?
which is an IP address held by comcast.net and has nothing to do with eBay.
This scam eBay web page contains a form for you to provide your eBay user ID and password, credit card information, etc...
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
||
If you provide this information and
submit it, it is captured by the scammers with the use of PHP script
while you are sent to a bogus eBay confirmation page...
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
||
