23rd December 2003
text and a
link to a fake
Spoofed Web page/site?
forged eBay web
page with web form
requiring eBay &
name & password,
name & address
Credit or Debit
Web page/site origin
Identity Theft method
Web form information
is captured and
relayed to the
Bank Email Scam
See our guide to
See our guides to
NOTICE eBay Obligatory Verifying - Invalid User Information - Email Phishing
23rd December 2003
Does your home phone number have an error on
Ebay Inc. databases - No! Its a scam
This spoof email (as eBay and Paypal like to call
these email scams) takes the form of a text email with a link (see images
The email text urges you to use the link to provide
your telephone number due to an apparent error in eBay's database. This
is of-course, a complete fabrication, and using the link will result
in a forged eBay web form appearing in your browser.
This forged web form asks for much more than just
your telephone number (see images below) and includes all 'bells and
whistles' such as eBay's own logo's and graphics to add a sense of authenticity.
Thankfully, the link is not cloaked (see our article on link
cloaking) and will show up in the browser address bar as http://18.104.22.168/https/ebaySignIn/Ebaycom/errorphone
/ which is clearly NOT a valid eBay URL.
The first part of that URL reveals the true location
of this fake eBay web page - a Korean High School (
Bobsong Commercial High School, Chonnam, Korea).
informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Add your email address to our email alert service...
Tap into our Scam Alert service using your News Reader or Aggregator (including
Scam Alert News Feed
You can even put the latest alerts on your own web
We also found a hard coded email address (firstname.lastname@example.org)
in the page, to which the data entered into the form would be forwarded,
together with the odd message "IReallyLoveU".
If you have received this hoax email, please remember
is very common for these email scams to be redistributed at a
later date with only slightly different content or the same but with the fake
page(s) hosted by a different provider. Also, once you have received one of
these hoaxes, it is also common place to receive at least another one
and usually a day or two after the first, although not necessarily from
the same apparent sender.
Take a good look at the following images, because
this hoax email scam may be coming to an inbox near you!
The Email ...