Spoofed eBay email hoax and web page scam
in distribution from
20th October 2003

This spoofed eBay email has been in distribution from 20th October 2003 and we also have an image of the spoofed web page that it sends you to. These are just images of the originals, so there is absolutely no code included and none of the links or buttons will now work. The images shown have been reduced to 80% of the original size

The Spoofed Email...

The spoofed email suggests that your eBay account could be suspended due some violation of policy, then goes on to suggest that it has been suspended and requests that you update your account information using the link provided within the email.

You should also bear in mind that it is very common for these spoof emails to be redistributed at a later date with only slightly different content. And, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first.

We recommend you read through, look at the images and become familiar with this hoax because it may be coming to an inbox near you soon.

Let's now take a look at the image of the email .....

The Spoofed Web Page...

The spoofed web page looks like a genuine eBay page. It is clearly apparent that the page is spoofed when you see the URL/web address in your browser's address bar.....

http://muistul.hypermart.net/eBayUdapte/SignIn.html
which is hosted by hyoermart.net in Burlington, MA, USA.

This spoofed eBay web page contains a form for you to provide your eBay and Paypal user IDs, passwords, credit card information, etc...

If you provide this information and submit it, it is captured and forwarded via response-o-matic.com's mail form processing service (response-o-matic have closed this account down and they should be commended for their swift response to this abue of their service).