eBay Prize Draw email hoax and forged web page scam
20th October 2003 and 10th January 2004

This hoax eBay email scam has been in distribution from 20th October 2003 and we also have an image of the hoax web page that it sends you to. These are just images of the originals, so there is absolutely no code included and none of the links or buttons will now work. The images shown have been reduced to 80% of the original size

The email suggests that eBay are running a draw to win a Ford Explorer (this would be such a surprise if they really were!) and requests that you use the link provided within the email to enter that draw.

The sign in link is disguised and will actually open a forged eBay sign in page which relays any data entered onto the scammers using CGI script, while a forged 'Thank You' page opens and you are then redirected to the genuine eBay site.

You should also bear in mind that it is very common for these spoof emails to be redistributed at a later date with only slightly different content. And, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first.

We recommend you read through, look at the images and become familiar with this hoax because it may be coming to an inbox near you soon.

The Email ...

The Fake eBay Sign-in Page...

The spoofed web page looks like a genuine eBay Sign In page, but it is clearly apparent that the page is a hoax when you see the URL/web address in your browser's address bar.....

October 2003 version
http://acfis.net/aw-cgi/eBayIsapi.html
which traces back to octavialta.com in France (nothing to do with eBay).

and

January 2004 version
http://nivs.lv/aw-cgi/eBayISAPI.dll?SignIn&ssPageName=h:h:sin:US
which traces back to an ISP in Latvia

If you enter this data and click 'Sign In', it will be captured by the scammers with CGI script...