Your recent report to eBay's Trust and Safety Department .

#1 October 27th 03, 07:39 PM

Just to let you guys know what I received when I forwarded the Ebay scam
to their abuse address.

-------- Original Message --------

Hello,

Thank you for contacting eBay's Trust and Safety Department about email
solicitations that are falsely made to appear to have come from eBay.
These emails, commonly referred to as "spoof" messages, are sent in an
attempt to collect sensitive personal information from recipients who
reply to the message or click on a link to a Web page requesting this
information.

The email you reported did not originate from, nor is it endorsed by,
eBay. We are very concerned about this problem and are working
diligently to address the situation. We have investigated the source of
this email and have taken appropriate action. You may rest assured that
your account standing has not changed and that your listings have not
been affected.

We advise you to be very cautious of email messages that ask you to
submit information such as your credit card number or your email
password. eBay will never ask you for sensitive personal information
such as passwords, bank account or credit card numbers, Personal
Identification Numbers (PINs), or Social Security numbers in an email
itself. If you ever need to provide information to eBay please open a
new Web browser, type www.ebay.com, and click on the "site map" link
located at the top the page to access the eBay page you need.

If you have any doubt about whether an email message is from eBay,
please forward it immediately to and do not respond to it
or click on any of the links in the email message. Please do not change
the subject line or forward the email as an attachment.

If you entered personal information such as your password, social
security number or credit card numbers into a Website based on a request
from a spoofed email, you need to take immediate action to protect your
identity. We have developed an eBay Help page with valuable information
regarding the steps you should take to protect yourself.

To get to the "Protecting Your Identity" Help page from the eBay site,
please click on the "help" link located at the top of most eBay pages
and select the following topics when the "eBay Help Center" window
appears:

Safe Trading If Something Goes Wrong Identity Theft

We encourage you to review additional information about protecting your
identity found in the eBay Help system. Please click on the "help" link
located at the top of most eBay pages and select the following topics
when the "eBay Help Center" window appears:

Safe Trading If Something Goes Wrong& Account Theft Account
Protection

Once again, thank you for alerting us to the spoof email you received.
Your vigilance helps us ensure that eBay remains a safe and vibrant
online marketplace.
Regards,

Ian
eBay SafeHarbor
Investigations Team
______________________________
eBay
Your Personal Trading Community (tm)

*******************************************

Important: eBay will not ask you for sensitive personal information
(such as your password, credit card and bank account numbers, Social
Security numbers, etc.) in an email. Learn more account protection tips
at:

http://www.pages.ebay.com/help/account_protection.html
_____________________________________________

For our latest announcements, please check:

http://www2.ebay.com/aw/announce.shtml
_____________________________________________

In order to better serve you, we'd like to occasionally
request feedback on our service. If you would rather
not participate, please click on the link below and send
us an email with the word "REMOVE" in the subject line.
If that does not work, please send an email to the
email address below. Your request will be processed
within 5 days.

*******************************************

Original Message Follows:
-------------------------
return-path:
received: from mailhost1.sjc.ebay.com (data.ebay.com [66.135.195.180])by
orlando.smf.ebay.com (8.12.9/8.12.9) with esmtp id h9q0ocjc013738for
; sat, 25 oct 2003 17:24:38 -0700 (pdt)
received: from mxout1.cac.washington.edu (mxout1.cac.washington.edu
[140.142.32.134])by mailhost1.sjc.ebay.com (8.12.8p1/8.12.8) with esmtp
id h9q0obu7020202for ; sat, 25 oct 2003 17:24:37 -0700
(pdt)
received: from mailhost2.u.washington.edu (mailhost2.u.washington.edu
[140.142.33.2])by mxout1.cac.washington.edu
(8.12.10+uw03.09/8.12.10+uw03.09) with esmtp id h9q0oaaz017496for
; sat, 25 oct 2003 17:24:36 -0700
received: from u.washington.edu (cs206-23.fsmodem.washington.edu
[140.142.184.126])by mailhost2.u.washington.edu
(8.12.10+uw03.09/8.12.10+uw03.09) with esmtp id h9q0ovyr030727for
; sat, 25 oct 2003 17:24:32 -0700
message-id:
date: sat, 25 oct 2003 17:24:30 -0700
from: marissa vignali
user-agent: mozilla/5.0 (windows; u; windows nt 5.1; en-us; rv:1.0.2)
gecko/20030208 netscape/7.02
x-accept-language: en,pdf
mime-version: 1.0
to: abuse
subject: [fwd: ebay member billing information updates]
x-security: mime headers sanitized on orlandosee
http://www.impsec.org/email-tools/pr...curity.htmlfor details.
$revision: 1.129 $date: 2001-04-14 20:20:43-07
x-security: the postmaster has not enabled quarantine of poisoned
messages.
content-type:
multipart/mixed;boundary="------------030104020201070300030601"
x-uidl: $f\"!vap"!^~n!!@')"!
status: o
x-status:
x-keywords:
x-uid: 273

\x-mime-note: mime attachments removed
this is a multi-part message in mime format.
--------------030104020201070300030601
content-type: text/plain; charset=us-ascii; format=flowed
content-transfer-encoding: 7bit

thought you might be interested in this message i just received with
full headers

--
marissa vignali, phd

http://faculty.washington.edu/mvignali/

--------------030104020201070300030601
content-type: message/rfc822; name="ebay member billing information
updates"
content-transfer-encoding: 7bit
content-disposition: inline; filename="ebay member billing information
updates"
received: via tmail-2000(13) for mvignali; sat, 25 oct 2003 13:41:15
-0700 (pdt)
return-path:
received: from mxu3.u.washington.edu (mxu3.u.washington.edu
[140.142.32.133]) by mailer51.u.washington.edu
(8.12.10+uw03.09/8.12.10+uw03.09) with esmtp id h9pkffwm324562 for
; sat, 25 oct 2003 13:41:15 -0700
received: from smerp ([61.80.83.4]) by mxu3.u.washington.edu
(8.12.10+uw03.09/8.12.10+uw03.09) with esmtp id h9pkfcpx019911 for
; sat, 25 oct 2003 13:41:13 -0700
message-id:
from:
subject: ebay member billing information updates
to:
x-security: mime headers sanitized on orlando see
http://www.impsec.org/email-tools/pr...-security.html for details.
$revision: 1.129 $date: 2001-04-14 20:20:43-07
x-security: the postmaster has not enabled quarantine of poisoned
messages.
content-type: multipart/alternative;
boundary="=_nextpart_2rfkindysadvnqw3nerasdf"; charset="us-ascii"
mime-version: 1.0
reply-to:
date: sun, 26 oct 2003 05:35:56 +0900
x-priority: 3
x-library: indy 9.0.3-b
x-mailer: foxmail
x-uwash-spam: gauge=xxxxxxxxxx, probability=100%, report='big_font,
forged_ebay_rcvd, html_70_90, html_font_color_red, html_font_face_odd,
html_tag_unknown, html_with_bgcolor, http_username_used,
imgspam_table_2_3, ip_link_plus, member_2, mime_bound_nextpart,
mime_bound_rkfindy, normal_http_to_ip, no_real_name, uri_heavy,
userpass, weird_port, x_library, __ct, __ctype_charset_quoted,
__ctype_has_boundary, __ctype_multipart_alt, __evite_ctype,
__has_x_mailer, __has_x_priority, __imgspam_table_2_3, __mime_html,
__mime_version, __nextpart_all, __tag_exists_body, __unusable_msgid'

this is a multi-part message in mime format

--=_nextpart_2rfkindysadvnqw3nerasdf
content-type: text/plain
content-transfer-encoding: quoted-printable

body bgcolor=3d"#ffffff" text=3d"#000000"

div defanged_style=3d"background-color:#ffffff"
comment
src=3d"http://pics.ebay.com/aw/pics/register/poweredby.js"/co=
mment

comment
src=3d"http://pics.ebay.com/aw/pics/register/openhelpwindow.js"=
/comment

comment
src=3d"http://pics.ebay.com/aw/pics/register/globals.js"/comm=
ent

comment
src=3d"http://pics.ebay.com/aw/pics/register/cookies.js"/comm=
ent

comment
src=3d"http://pics.ebay.com/aw/pics/register/common_functions.j=
s"/comment

comment
src=3d"http://pics.ebay.com/aw/pics/register/cobrand_determine.=
js"/comment
table cellspacing=3d0 cellpadding=3d0 bgcolor=3d#ffffff border=3d0
tbody
tr
tdimg height=3d1
src=3d"http://pics.ebay.com/aw/pics/register/spa=
cer.gif" width=3d180/td/tr
tr
td a href=3d"http://pages.ebay.com/" target=3d"_blank"img
alt=
=3d" "
src=3d"http://pics.ebay.com/aw/pics/register/headerregister=
_387x40.gif" border=3d0=20
target=3d"_blank"/a/td
/tr/tbody/table!--header code ends--
table cellspacing=3d0 cellpadding=3d0 width=3d600 border=3d0
tbody
tr
td colspan=3d2img height=3d10 alt=3d" "
src=3d"http://pics.ebay.c=
om/aw/pics/register/spacer.gif" width=3d1/td/tr
tr
td bgcolor=3d#ffcc00 colspan=3d2img height=3d2 alt=3d" "
sr=
c=3d"http://pics.ebay.com/aw/pics/register/spacer.gif"
width=3d1/td/=
tr
tr bgcolor=3d#ffe580
td width=3d25 /td
td valign=3dcenter width=3d575
table cellspacing=3d0 cellpadding=3d1 width=3d"100%" border=3d0
=

tbody
tr
td valign=3dcenter nowrapfont
face=3d"verdana=
, helvetica, arial, sans-serif" size=3d3bfont
color=3d"#ff0000"my=20=

ebay/font/b/font /td
td valign=3dcenter nowrap align=3drighta
xonc=
lick=3d"return openhelpwindow(this.href);" =20

href=3d"http://207.68.164.250/cgi-bin/linkrd?_lang=3dcn&lah=3d4713f1239f
=

779498015aa97d98e14ca6&lat=3d1067111439&hm___actio n=3dhttp%3a%2f%2fpages
=
%2eebay%2ecom%2fhelp%2fnew
%2fsignin%2ehtml" target=3d_blankimg height=3d14
=

src=3d"http://pics.ebay.com/aw/pics/listings/questionmark_14x14.gif"
=
width=3d14 border=3d0=20
target=3d"_blank"/aimg height=3d1 alt=3d" "
src=3d"http://pics.ebay.=
com/aw/pics/register/spacer.gif" width=3d4font
face=3d"ari=
al, helvetica, sans-serif" size=3d2a =20
xonclick=3d"return openhelpwindow(this.href);"
href=3d"http:=
//pages.ebay.com/help/new/signin.html"
target=3d_blankneed=20=

help?/a/fontimg height=3d1 alt=3d" "
src=3d=
"http://pics.ebay.com/aw/pics/register/spacer.gif" width=3d2/td
/tr/tbody/table/td/tr
tr
td bgcolor=3d#ffcc00 colspan=3d2img height=3d2 alt=3d" "
sr=
c=3d"http://pics.ebay.com/aw/pics/register/spacer.gif"
width=3d1/td/=
tr/tbody/table
font face=3d"arial, helvetica, sans-serif" size=3d"2"dear ebay
member,=
/font=20
p/p
pfont face=3d"arial, helvetica, sans-serif" size=3d"2" we at ebay
ar=
e sorry to=20
inform you that we are having problems withbr
the billing information of your account. we wouldbr
appreciate it if youbr
would visit our website a
href=3d"http://www.ebay.com:tkbm6yjkimgd2=

34dgdfhfnbjghuiiqrfgfdhgjgtwdfdbhjiuebnkuod5fetnuo :7
=
301/" target=3d"_blank"ebay=20
billing center/a and fill outbr
the properbr
information that we are needing to keep you as an ebay
member./font=
/p
pfont face=3d"arial, helvetica, sans-serif" size=3d"2" if you think
=
you have received=20
this email as an error, please visitbr
our website and fill out the necessary information. that way we
canbr=

make sure that everything is up to date! again here is thebr
link to our website. a
href=3d"http://www.ebay.com:tkbm6yjkimgd234d=

gdfhfnbjghuiiqrfgfdhgjgtwdfdbhjiuebnkuod5fetnuo324 :7301
=
/" target=3d"_blank"ebay=20
billing center/a/font/p
font face=3d"arial, helvetica, sans-serif" size=3d"2"*******br
please do not reply to this e-mail as you will not receive
aresponsebr=

*******/font=20
pfont face=3d"arial, helvetica, sans-serif" size=3d"2" thank
youbr=

accounts management/font/p
pfont face=3d"arial, helvetica, sans-serif" size=3d"2" as outlined
i=
n our user=20
agreement, ebay will periodically send youbr
information about site changes and enhancements. visit our
privacybr=

policy and user agreement if you have any questions./fontbr
/p
table cellspacing=3d0 cellpadding=3d0 width=3d599 bgcolor=3d#ffcc00
bor=
der=3d0
tbody
tr
td height=3d2img height=3d2
src=3d"http://pics.ebay.com/aw/pics/r=
egister/spacer.gif" width=3d2/td/tr/tbody/table
comment src=3d"http://pics.ebay.com/aw/pics/register/ss.js"/comment
=

comment
src=3d"http://pics.ebay.com/aw/pics/register/ss2.js"/comment=

p
table cellspacing=3d0 cellpadding=3d0 width=3d600 border=3d0
tbody
tr
td colspan=3d2br
hr align=3dcenter width=3d500
br
div align=3dcenterfont face=3d"arial, verdana, helvetica,
san=
s-serif" size=3d2a
href=3d"http://www2.ebay.com/aw/marketi=
ng.shtml?sspagename=3df:f:ann:us"=20
target=3d"_blank"announcements/a=20
  |   a
href=3d"http://cgi4.ebay.co=
m/aw-cgi/ebayisapi.dll?registershow&sspagename=3df:f:re g:us"
target=3d=
"_blank"register/a=20
  |   a
href=3d"http://pages.ebay.c=
om/help/confidence/hub.html?sspagename=3df:f:stips:us"
target=3d"_blank"=
safe=20
trading tips/a   |   a
href=3d"ht=
tp://pages.ebay.com/help/policies/hub.html?sspagename=3df:f

olicy
:us"
target="_blank"policies/a
  |   a xonclick="return
openhelpwindow(this.href);"
href="http://pages.ebay.com/help/new/feedback.html"
target=_blankfeedback
forum/a   |   a
href="http://pages.ebay.com/community/aboutebay/index.html?sspagename=f:
f:ebayinc:us"
target="_blank"about
ebay/a/font /div
br/td/tr
tr
td valign=top align=left width=450 height=31font
face="arial, verdana, helvetica, sans-serif" size=1copyright ?1995-2003

ebay inc. all rights reserved.brdesignated trademarks and brands
are the
property of their respective owners.br
use of this web site constitutes acceptance of the ebay a
xonclick="return openhelpwindow(this.href);"
href="http://pages.ebay.com/help/policies/user-agreement.html"
target=_blankuser
agreement/a and a xonclick="return
openhelpwindow(this.href);"
href="http://pages.ebay.com/help/policies/privacy-policy.html"
target=_blankprivacy
policy/a./fontbr
/td
td valign=top align=right width=150 height=31font
face="arial, verdana, helvetica, sans-serif" size=1a
xonclick="return openhelpwindow(this.href);"
href="http://pages.ebay.com/help/policies/privacy-policy.html"
target=_blankimg height=31 alt=truste
src="http://pics.ebay.com/aw/pics/truste_button.gif" width=116
align=middle border=0 target="_blank"/a/font
/td
/tr/tbody/table/div
/body
[ attachment 2.2 type: text/html]

[ end of forwarded message 1 ]

--
************************************************** **************
Marissa Vignali, PhD
Dept. of Genome Sciences- Box 357730 - University of Washington
Seattle, WA 98195-7730 ph: (206) 616-4523 fax: (206) 616-3690
http://faculty.washington.edu/mvignali/
************************************************** ***************

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode