See the latest
email Hoax and
more copies
of hoax email
and hoax web
pages or sites
REPORT SUMMARY
Date Reported
7th December 2003
Apparent Sender
eBay
Subject
Security Measures
(SafeHarbor)
Senders Address
(spoofed)
CustomerSupport
@ebay.com
Content
text and a
link to a fake
eBay
web page
(see images)
Spoofed Web page/site?
Yes
Web page/site
content
forged eBay web
page with web form
requiring eBay &
email user
name & password,
name & address
details, etc
Web page/site origin
URL
http://
www.geocities.com/
douglas_johanns/
ebay-check-SSL.html
OR
http://www.
geocities.com/
joseph_amantea/
eBay-check.SSl.html
Identity Theft method
Web form information
is captured and
relayed to the
scammers via a form processing service
provided by
dk3.com, while you
are sent to the
genuine eBay.com
sign in page
RESOURCES
Photographic
Guide to Book
Terminology
including size
codes, condition
terms and common
book defects
How to recognise
a first edition
book
eBay 'Security Measures (SafeHarbor)' spoof email hoax
7th December 2003
Users information is being processed by dk3.com's form processing service ...
This spoof email (as eBay and Paypal like to call these email scams) takes the common form of a text message with a link to a fake web page which contains a form for you to provide your information, as shown below.
The suggestion that your account was hijacked by a third party might convince many to overlook the poor English and proceed to the fake web page which is much more convincing.
The email has so far been distributed with two different links provided in the text. The link will show one of two URLs - either www.check-now.net or www.check-fast.com both of which are domains hosted by Yahoo and are redirected to Geocites pages, and those that hold the fake eBay web form (both pages are identical in bith URLs). The form requests information including your name, address, eBay & email user names and passwords. No guesses what someone would want those for!
If you submit this information in either case, the
data is processed (and sent on to the scammers) using a form
Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Email
Alerts
Add your email address to our email alert service...
Subscribe
Privacy Policy
RSS
News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including
My Yahoo!).
Scam Alert News Feed
You can even put the latest alerts on your own web site.
If you have fallen for this scam
please follow our guidelines on what to do now
FORWARD
YOUR EMAIL SCAMS
TO KU.OC.SELIMSRELLIM@FOOPS
and help us to
build awareness and
help others
processing service at dk3.com (which is located in Denmark) while you are unwittingly sent on to the genuine eBay.com sign in page.
If
you have received this hoax email, please remember that it
is very common
for these email scams to be redistributed at a
later date with only slightly
different content or the same but with the fake page(s) hosted by a different
provider. Also, once you have received one of these hoaxes, it is also common
place to receive at least another one and usually a day or two
after the first, although not necessarily from the same apparent sender.
Take a good look at the following images, because this hoax email scam may be coming to an inbox near you!
The Email ...
(remember that the link shown in the other email hoax is http://www.check-fast.com/eBay-check.SSl.html)
The fake web page...
(remember that the other URL that may show in the address bar is http://www.geocities.com/joseph_amantea/eBay-check.SSl.html)
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
||
