wolfgrrl detectifying! home

ebay spoof

I received an ebay email this morning that looked like your typical message from ebay when a member contacts you with a question. But there was something wrong: this was a question pertaining to shipment of an item that I did not or never have had for sale.

When I hovered my mouse over the "Respond Now" link, I got this website address:

http://1112179655/horde/config/redirect.php/.../domain=signin.ebay.com/ws/eBayISAPI.dll%20SignIn/

The messages that come from ebay are this address:

http://contact.ebay.com/ws/eBayISAPI.dll?M2MContact&item=260006090957&requested=ps28fl&qid=2642753530&redirect=0&sspagename=ADME:B:AAQ:US:2

This was a phisher link that redirects to a page that captures your ebay username and password.

Just wanted to make you all aware of this: some of you may not know about it.