More eBay fraud!!!

[Martoch]

WTF is up with this? Got this in the mail today...

Dear eBay User,

We recently noticed one or more attempts to login into your eBay
account from a foreign IP address and we have reasons to believe that
your account has been hijacked by a third party without your
authorization.

In order to protect your sensitive information or unauthorized listings we temporarily suspended your account for further investigations. To reactivate your account, click on the link below and confirm your identity by completing the secure form that will appear.

If you recently accessed your account while traveling, the unusual
login attempts may have been initiated by you.

Take our apologies for any inconvenience that this may cause.

Thank you

eBay Account Theft Prevention

http://signin.ebay.com/aw-cgi/eBayIS...ame=h:h:sin:US

The log in attempt was made from:

IP address: 205.188.211.167

ISP host: afxs-d32a.blue.aol.com

Is this BS or what!!!
Sign in on a non-secure form?

I'm filling out my info now...

[joker_927]

How do you know that THIS isn't the actual scam?

Someone sends you an e-mail and you goto the link, and put in your account information.

[Martoch]

Hehe...that's what I was getting at with the littl winky guy.

[joker_927]

Oh geez, I thought you were actually filling this out, and I was just kind of joking. Geez, I would have filled out my information.

How can you tell if it is the real Ebay site or not?

Doesn't eBay have a disclaimer that they'll NEVER ask you for your username/password via e-mail or something like that?

[Tomteriffic]

Mike, I've been getting them from eBay, PayPal, Earthlink, and credit card companies where I don't even have an account.

Some of 'em are GOOOOOD too! They even spoof the URL to include the https part, to get you to think you're logging into a secure site. The one from Earthlink was so good I had to call them, since I HAD made some changes to my service recently.

What happened next is the subject of a totally different rant, so I'll leave it at that.

[Army2001]

yeah they do...this is quite common...I've had about 5 different versions now with all different excuses telling me to give my username and password...its total BS since they say they'll never ask for your password or username on their site

[Xtreeme]

Yep read ebay disclamer. They wont ask you your acount info ever. Mark sender as spam. I would.

[butch81385]

wow, that was cleanly done, the only difference i could find were this:
souce code did not include code for the stored cookie


other than that it looked the exact same (to a noobie like me)

anyone else find any differences

[butch81385]

an interesting thing. the real ebay sign in site is http not https hmm...