The con artist used a stolen name, phone number and address to register ebay-validations.com

Then he set up as site inside someone elses network computer. (also stolen access)

When people filled out the fake eBay account form, it emailed the information to a Free mailbox...