[Dshield] [Fwd: Ebay Account Verification.]

Rémi Cohen-Scali Remi at Cohen-Scali.com
Sat Jun 28 15:23:47 GMT 2003


Hy all

I received this mail that seems very suspect to me.
The form available when following the proposed link asks many sensitive 
informations
as user name, password,  credit card number, etc ... The page have no SSL
The URL of the link is not the one displayed in the mail
(http://www.eparduotuve.lt/x/ instead of 
http://www.ebay.com/acounts/memb/avncenter/?dll87443%2213)
Finaly, the sender (ReturnPath) is apache at nr1.lt instead of (From) 
support at ebay.com

Please could you widely spread about this malicious hoax. I think the 
people that filled the form
should close their ebay users, change their credit cards etc ...


Message-Id: <20030628093841.230C6A22E9 at nr1.lt> Date: Sat, 28 Jun 2003 
05:38:41 -0400 (EDT)

-------- Original Message --------
Return-Path: 	<apache at nr1.lt>
Received: 	from nr1.lt (nr1.eparduotuve.lt [212.122.68.40]) by 
rcsnet.net (8.12.8/8.12.7) with ESMTP id h5S9pYLg011399 for 
<remi at cohen-scali.com>; Sat, 28 Jun 2003 11:52:20 +0200
Date: 	Sat, 28 Jun 2003 11:52:19 +0200
Message-Id: 	<200306280952.h5S9pYLg011399 at rcsnet.net>
Received: 	by nr1.lt (Postfix, from userid 72) id 230C6A22E9; Sat, 28 
Jun 2003 05:38:41 -0400 (EDT)
To: 	remi at cohen-scali.com
Subject: 	Ebay Account Verification.
From: 	support at eBay.com <support at eBay.com>
Reply-To: 	support at eBay.com
MIME-Version: 	1.0
X-Mailer: 	PHPBulkEmailer 1.1 http://www.nukedweb.com/
Content-Type: 	text/html
Content-Transfer-Encoding: 	8bit
X-AntiVirus: 	checked by AntiVir Milter 1.0.0.8; AVE 6.20.0.1; VDF 6.20.0.9



<http://www.ebay.com/> 	

Dear eBay User,
During our regular update and verification of the accounts, we couldn't 
verify your current information. Either your information has changed or 
it is incomplete.
Please update and verify your information by signing in your account below :
If the account information is not updated to current information within 
5 days then, your access to bid or buy on eBay will be restricted.
go to this link below:

http://www.ebay.com/acounts/memb/avncenter/?dll87443%2213 
<http://www.eparduotuve.lt/x/>

***Please Do Not Reply To This E-Mail As You Will Not Receive A Response***


Thank you
Accounts Managent

As outlined in our User Agreement, eBay will periodically send you 
information about site changes and enhancements. Visit our Privacy 
Policy and User Agreement 
<http://r.aol.com%5Ccgi%5Credir-complex?url=http://pages.ebay.com/help/community/png-user.html?ssPageName=ADME:X:EOA:US:24> 
if you have any questions.

Copyright 2002 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective 
owners.
eBay and the eBay logo are trademarks of eBay Inc



Announcements 
<http://r.aol.com%5Ccgi%5Credir-complex?url=http://www2.ebay.com/aw/marketing.shtml> 
| Register 
<http://r.aol.com%5Ccgi%5Credir-complex?url=http://cgi4.ebay.com/aw-cgi/eBayISAPI.dll?RegisterShow> 
| SafeHarbor (Rules & Safety) 
<http://r.aol.com%5Ccgi%5Credir-complex?url=http://pages.ebay.com/help/community/index.html> 
| Feedback For 
<http://r.aol.com%5Ccgi%5Credir-complex?url=http://pages.ebay.com/services/forum/feedback.html>um 
<http://r.aol.com%5Ccgi%5Credir-complex?url=http://pages.ebay.com/services/forum/feedback.html> 
| About eBay 
<http://r.aol.com%5Ccgi%5Credir-complex?url=http://pages.ebay.com/community/aboutebay/index.html>
------------------------------------------------------------------------


Copyright © 1995-2001 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective 
owners.
Use of this Web site constitutes acceptance of the eBay User Agreement 
<http://r.aol.com%5Ccgi%5Credir-complex?url=http://pages.ebay.com/help/community/png-user.html> 
and Privacy Policy 
<http://r.aol.com%5Ccgi%5Credir-complex?url=http://pages.ebay.com/help/community/png-priv.html>. 

	
<ebay/png-priv.html>




More information about the list mailing list