Senders Address (spoofed)
Spoofed Web page/site?
Web page/site origin
Identity Theft method
See our guide to
See our guides to
Spoof Email and Fake Web Site
PLEASE SEND US YOUR
EMAIL HOAX SCAMS
click here to
use our online
The spoof web page looks exactly like the genuine eBay sign in page and has been constructed using code from eBay's own servers. It is clearly apparent that the page is spoofed when you see the URL/web address in your browser's address bar - 'http://188.8.131.52:12123/community/recognition/Sign%20In.htm' has absolutely nothing to do with eBay whatsoever, and is in fact an IP address registered to Elkhart.net in Elkhart, Indiana, USA.
This forged eBay web page asks for your eBay user name and password. Once completed and the "Sign In" button is pressed, any information you have entered on this page is relayed to the scammer(s) utilising CGI script located on the same server, while you are sent to the next spoofed web page which requests the 'activation code' mentioned in the spoofed email . After submitting that code on the form, you are then diverted to the genuine eBay.com sign in page.
The bogus web page...
If you use the link provided within that email, you will then arrive at the spoof eBay sign in page, but notice the URL shown in the browser address bar - this is not what you would expect to see with a genuine eBay page...
On signing in here, you would be sent to the next spoofed web page, while your log in information is sent to the scammers usitlising CGI script...
Once you've entered the code and submitted here, you would be then be diverted to the genuine eBay.com sign in page.
|© Copyright MillerSmiles.co.uk. All Rights Reserved. .|