Welcome to Guru Will Sellit's Home on the Web!

Part of the Sun Surplus Group of Organisations

www.one4sun.net.au


Ebay Fraud Verification Process Scam - Initial Email Received on Monday, March 1, 2004

This is a new slant on the Ebay scams to date. The email was sent to a different email address which I have never used with my Ebay account!

The email message received is reproduced in full below (minus all the HTML encapsulation).


From nobody@polite.elkhost.com  Mon Mar  1 09:27:56 2004
Return-Path: <nobody@polite.elkhost.com>
X-Original-To: cd@lios.apana.org.au
Delivered-To: cd@lios.apana.org.au
Received: by lios.apana.org.au (Postfix, from userid 23)
	id F0F30384B1; Mon,  1 Mar 2004 09:27:55 +1100 (EST)
Received: from polite.elkhost.com (unknown [64.246.38.48])
	by lios.apana.org.au (Postfix) with ESMTP id 2A04D3848B
	for <cd@lios.apana.org.au>; Mon,  1 Mar 2004 09:27:34 +1100 (EST)
Received: from nobody by polite.elkhost.com with local (Exim 4.24)
	id 1AxZPF-0006vw-H0
	for cd@lios.apana.org.au; Sun, 29 Feb 2004 16:27:29 -0600
To: cd@lios.apana.org.au
Subject: Ebay Fraud Verification Process
From: support@ebay.com <support@eBay.com>
Message-Id: <E1AxZPF-0006vw-H0@polite.elkhost.com>
Date: Sun, 29 Feb 2004 16:27:29 -0600
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - polite.elkhost.com
X-AntiAbuse: Original Domain - lios.apana.org.au
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - polite.elkhost.com
X-Spam-Level: *
X-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_60_70,HTML_FONTCOLOR_BLUE,
	HTML_MESSAGE,HTML_TITLE_EMPTY,MIME_HTML_ONLY,RISK_FREE autolearn=no 
	version=2.63
X-Sanitizer: Advosys mail filter
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Status: R
X-Status: 
X-Keywords:                  

Dear eBay user,
As part of our continuing commitment to protect your account and to
reduce the instance of fraud on our website, we are undertaking a period
review of our member accounts.
You are requested to visit our site by following the link given below 
http://www.ebay.com/aw-cgi/eBayISAPI.dll?verification/%?7088080019

Please fill in the required information.
This is required for us to continue to offer you a safe and risk free
environment to run your auctions, and maintain the eBay Experience.
Thank you
Accounts Management

As outlined in our User Agreement, eBay will periodically send you
information about site changes and enhancements. Visit our Privacy Policy
and User Agreement if you have any questions.

Copyright 2002 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective
owners.

eBay and the eBay logo are trademarks of eBay Inc

Announcement | Register | SafeHarbor (Rules & Safety) | Feedback Forum | About eBay

Copyright © 1995-2001 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective
owners.
Use of this Web site constitutes acceptance of the eBay User

Now that you've read the email text, what do you think? This is just one example of the massive number of scams trying to steal login information for online banking, auction, and other financial transaction sites...

As you can see from the headers, the email didn't come from Ebay at all, and the URL which the email asks you to go to doesn't exist at Ebay's site! In the actual email, the URL which shows up in the text is fake and the real URL (which is hidden in the HTML encapsulation) is:

http://nobaca.com/ebay-verify-account-57435-5645-3765/dirDllSSl856-4756-JkkLEbay-547864/newUseBay485-5754-575Hq35-56-SSL/cgi-bin/UserDllebay435-669996054-44/ebay-user-854394/Verify.htm

You can also read the complete email with the full HTML-encoded content that was embedded in it.


You're visitor # . Current time is on .

If there's something you'd like to ask me, or you'd just like to say hello, please send me some email. Note that the email address has been 'poisoned'.


Return to the March 2004 Ebay Fraud Verification Process Scam Page