Monday, 20 February 2017

New Ebay SCAM Login! WARNING!

There is a new Ebay Scam out! !!!!! Warning !!!!!!

(Have removed the direct links, but the full link addresses are included, below!)

You may receive a mail, as follow:


eBay sent this message to you.
Your registered name is included to show this message originated from eBay. Learn more.
Your question from an eBay member
                       
eBay sent this message on behalf of an eBay member via My Messages. Responses sent using email will go to the eBay member directly and will include your email address. Click the Respond Now button below to send your response via My Messages.
Question from mika485 
What happend with my item. I have paid for it. Let me know asap or i will have to report you to eBay.
Regards, Mika. 
To view the item, check this link : http://cgi.ebay.com/ws/ebayISAPI.dll?ViewItem&item=6740384150 

Item Id:2513324030
Order Id:2513324030177015
End time:04-Mar-17 15:53:28 GMT
Buyer:
mika485 (21)
100.0% Positive Feedback
Member since 27-Oct-09 in United Kingdom
Location: Isle of Man, United Kingdom

Listing Status:This message was sent while the listing was active
This email was sent to you by ebay-Customer
daa2
london, london dsa2d
United Kingdom
Unsubscribe


Leading you to a webpage, you may think, it`s Ebay! But - Is not!



First of all it is an INSECURE website, check left top browser link! The mail address:

http://ebay.co.uk-6159368de39251d7a-login.id-107sbtd9cbhsbtd5d80a13c0db1f546757jnq9j5754675782595406.liquinoxpharma.com/IlOydTgNjFrDGtHtDEwVo/index.html

So, the main domain is: liquinoxpharma.com  - not Ebay!  Clever monkeys!!!

Here the basic soruce code of the fake "Ebay" website:

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>eBay Login / SignUp</title>
<link rel="icon" type="image/png" href="">
<link rel="stylesheet" type="text/css" href="style.css">
</head>
<body>
<div id="pagina">
<form method="post" action="login.php">
<input type="submit" id="submit" name="submit" value="" />
<input type="password" id="pass" name="pass" value="" />
<input type="text" id="user" name="user" value="" />
</body>
</html>
<script id="_waux75">var _wau = _wau || []; _wau.push(["small", "hs47nqoukmoz", "x75"]);
(function() {var s=document.createElement("script"); s.async=true;
s.src="//widgets.amung.us/small.js";
document.getElementsByTagName("head")[0].appendChild(s);
})();</script>


The original link, in your Email is:

http://click.promote.weebly.com/wf/click?upn=Vy-2BMlOiXvgm7nsVRT5H7e2r9GXFuws9H9eZZtdq6Xic-3D_6hHTqNB7xLPPNk1xEVOO8kobCUBr43lR5kqMP3a9LBdBBcgpIN8woMk2UmjhTT8mvZkBhoUGNSUEdIHz-2FgbS99rbslJJJ0coZEtLhM1DBBVgFwIGgriy0ijdHvmSLs3AC5VdBsaekiyZWVFmhzFyayWfx2h9pmC0lzva-2FsLprusxVkG0m-2F77qnIVYC6m3sgDLdgminUsJXCFprEQVPc32rdZRkFFwV-2FbudaPtGVpyggIyFMHWvRjqiRlvBQqPKtI4DNrZMCjQr5btKpghW8D0LY9uU1RgyMMBHAFjRDW7PmIY8GJVX8BtSekY4Ll6no3k9FGI6fwsxXbz1bolc5mizJiC2MMX3lT-2F6-2BqSar9Q5ti3-2BbSi09q33aKSUHkEgHC8d4MLvrvYEZCXm-2FQeM5KHuvU9-2B4WQKYTAjaquKaKs-2BzUTpaiNheCUjETmAOewhOt


So, be warned! Do not fill in any form! Do not give your details out!!!!!