eBay email hoax and web page
13th September 2003

This hoax email was in distribution from 13th September 2003 and we images of the hoax email and bogus web eBay web pages that it sends you to. These are just images of the originals, so there is absolutely no code included and the links or buttons will not work. The images shown have been reduced to 80% of the original size.

The hoax email...

The hoax email stateseBay could not verify your account information, and asks you to update and verify your account information. The email contains a link, which has been disguised to look like a genuine eBay link which it is NOT. The link takes you to a hoax web page...

The spoof web page...

The hoax web page looks like a genuine eBay page (see the image of this page here) and has been constructed using code from eBay's own servers. It is clearly apparent that the page is spoofed when you see the URL/web address in your browser's address bar -

http://unimax.co.kr/picture/my

which has absolutely nothing to do with eBay whatsoever, and is in fact an IP address registered to Apnic in Seoul, Korea.

This hoax eBay web page contains a form for you to provide your eBay user ID and password and credit card information. If you provide this information and submit it, it is relayed to the scammers with the use of a PHP script (which is a common process in recent hoax emails) while you are sent to the genuine eBay.com home page.