Re: EBay Fraud Attempt

From: Waitman C. Gobble, II (waitmanat_private)
Date: Sun Dec 08 2002 - 22:34:21 PST

Next message: Bojan Zdrnja: "RE: A small quandary"

Previous message: jlewisat_private: "Re: Spam via proxy"
In reply to: Logan F.D. Greenlee: "EBay Fraud Attempt"
Next in thread: george.wasgattat_private: "RE: EBay Fraud Attempt"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

The form posts to 

http://www.cutandpastescripts.com/cgi-bin/formprocessing/forms.pl

It has the following hidden fields, with the following values

activenumber            428283597791
username                xacxac
MfcISAPICommand         SingInWelcome
siteid                  0
co_partnerId            2
UsingSSL                0
ru                      
pp
pa1
pa2
pa3
i1                      -1
pageType                -1

and the following field names, that are entered by the user on the form

name
address
City
State
Zip
Phone
cc
expire
Cvv2
Bank Name
Bank #
checking_account_number
Routing_number
ssn
mmn
dob
dl#
userid
pass (password)
submit (value=Sign In)
keepMeSignInOption (checkbox, checked value=1)

Most of the images on the page are links from the ebay site. 

Except for the following:

http://www.ebayupdates.com/ebayccrevised_files/spacer.gif, which is
120x1 pixels.

http://www.ebayupdates.com/cvv2.jpg, which is 301x245 pixels.

-- 
Waitman C. Gobble, II <waitmanat_private>
EMK Design

application/pgp-signature attachment: This is a digitally signed message part

Next message: Bojan Zdrnja: "RE: A small quandary"
Previous message: jlewisat_private: "Re: Spam via proxy"
In reply to: Logan F.D. Greenlee: "EBay Fraud Attempt"
Next in thread: george.wasgattat_private: "RE: EBay Fraud Attempt"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Dec 09 2002 - 21:51:52 PST