Fake ebay login

Scams
1

I got an email that claims my account has been blocked. included in the email was this form:

http://thermofor.com.tr/wp-includes/css/dist/nux/cli/c12ea03df0277b47fe5843fb0a98d7a6MWUwZmEwYmJjODVhZWYyZDIzOTY0ZmVhNjExYWEwY2U=/signin/

Email sender: [email protected]
Original link (before redirects): http://infondoallastrada.it/hme/

image screen-shot-2018-12-21-at-101048-pmpng.png![image screen-shot-2018-12-21-at-101048-pmpng.png](replace/assets/files/2018-12-22/06:11:100-screen-shot-2018-12-21-at-101048-pmpng.png)

2

It submits to http://thermofor.com.tr/wp-includes/css/dist/nux/cli/c12ea03df0277b47fe5843fb0a98d7a6MWUwZmEwYmJjODVhZWYyZDIzOTY0ZmVhNjExYWEwY2U=/system/sand_signin.php

I’ll test if it accepts requests from other sources.