eBay Spoof email hoax and fake web page scam
12th November 2003

This bogus eBay email was distributed on 13th September 2003 and we also have images of a bogus web page that it would have sent you to. These are just images of the originals, so there is absolutely no code included and none of the links or buttons will now work. The images shown have been reduced 80% of the original size.

The bogus email states that eBay could not verify your home phone number, and asks you to update and verify your account information or your account will be suspended. The email contains a link, which has been disguised to look like a genuine eBay link which it is NOT. The link takes you to a bogus web page...

The bogus web page looks exactly like what you'd expect to see in a genuine eBay page and has been constructed using code from eBay's own servers. It is clearly apparent that the page is spoofed when you see the URL/web address in your browser's address bar - 'http://unimax.co.kr/picture/my/' which has absolutely nothing to do with eBay whatsoever, and is in fact a site hosted by KRLine.net in Seoul, Korea.

This bogus eBay web page contains a form for you to provide your eBay user ID and password and credit card information. If you provide this information and submit it, it is relayed to the scammers with the use of a CGI script (which is a common process in email scams). There are two pop up notifications which advise you that the form is being processed before you are diverted to the genuine eBay.com home page.

The Fake eBay Page...

If you use the link in this email, you arrive at a bogus eBay page which contains a form...

Once you submit this form, you will see two notifications that the information is being processed...