An
Email with the Subject "eBay! Sign-in Alert - Avoid Fraud IP-731" was
received in one of Scamdex's honeypot email accounts on Wed, 11 Sep 2013 01:27:34 -0700
and has been classified as a Generic Scam Email.
The sender shows as eBay <biling@ebay.co.uk>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
assistancelog insuspendthird partyverificationebaycontactwinsafeaccountresidenttransactioncustomerserviceinc.accesscustomverifysecuresentmaileurouserreferencerespect will securityach[#ac4b6e2c40c43x3ft85a8c1...(fake)dearebay.co.uk
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scamdex@scamdex.com
[delivery-date:] => Wed, 11 Sep 2013 01:27:34 -0700
[received:] => Array
(
[0] => from ns1.nce.ufrj.br ([146.164.10.2]:56703 helo=ceop1.nce.ufrj.br)by lester.newsblaze.com with esmtp (Exim 4.80.1)(envelope-from )id 1VJfls-0006PM-CSfor scamdex@scamdex.com; Wed, 11 Sep 2013 01:27:34 -0700
[1] => from b200.nce.ufrj.br (b200.nce.ufrj.br [146.164.2.18])by ceop1.nce.ufrj.br (Postfix) with ESMTP id 9606EDD7D8for ; Wed, 11 Sep 2013 05:23:52 -0300 (BRT)
[2] => by b200.nce.ufrj.br (Postfix, from userid 33)id 06B961384774; Wed, 11 Sep 2013 05:23:12 -0300 (BRT)
)
[to:] => scamdex@scamdex.com
[subject:] => eBay! Sign-in Alert - Avoid Fraud IP-731
[x-php-originating-script:] => 33:mailist.php
[from:] => eBay
[reply-to:] => biling@ebay.co.uk
[mime-version:] => 1.0
[content-type:] => text/html
[content-transfer-encoding:] => 8bit
[message-id:] => <20130911082312.06B961384774@b200.nce.ufrj.br>
[date:] => Wed, 11 Sep 2013 05:23:12 -0300 (BRT)
[x-spam-status:] => No, score=0.4
[x-spam-score:] => 4
[x-spam-bar:] => /
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: ebayhtm Please note that this is a system generated email; please do not reply to this email because it won't reach us. You can contact Customer Support using the help section from the navbar. Your eBay account is currently limited. [...] Content analysis details: (0.4 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 1.8 DKIM_ADSP_DISCARD No valid author signature, domain signs all mail and suggests discarding the rest-2.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ams2.pl] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Please note that this is a system generated
email; please do not reply to this email because it won't reach us.
You can contact Customer Support using the help section from the
navbar.
Your eBay account is currently
limited.
Security Center Advisory!
Dear
Customer,
This is a
courtesy notice to let you know that your eBay account has been
limited. Why is my account
access limited?
eBay may limit accounts for a variety of reasons to prevent
unauthorised use and verify the identity of users. You can remove your
limitation by following the steps below.
Your account access has been limited for the following
reason(s):
March 25, 2013: We have reason to believe
that your account was accessed by a third party. Because protecting the
security of your account is our primary concern, we have limited access to
sensitive eBay account features. We understand that this may be an
inconvenience but please understand that this temporary limitation is for
your protection.
If you recently accessed your account while traveling, the unusual log
in attempts may have been initiated by you. Therefore, if you are the
rightful account holder, click on the link below to log into your account
and follow the instructions.If you choose to ignore our request, you leave
us no choice but to suspend your account. If you received this notice and
you are not the authorized account holder, please be aware that it is in
violation of eBay`s policy to represent oneself as another eBay user. The
purpose of this verification is to ensure that your account has not been
fraudulently used and to combat the fraud from our community.
Go to My eBay and confirm your account with us.
We can then resolve the issue for you.
eBay
Marketplace safety tip
Keep
your eBay account secure. Don't reply to any email that asks for your
personal information and never click on links these messages contain.
Find out more about protecting your
account.
Email
reference ID: [#ac4b6e2c40c43x3ft85a8c1bc3249d9f#] Please don't
remove this number. Customer Support may ask you for this number, should
you need assistance.
Learn More to protect yourself from spoof
(fake) emails.
eBay sent this email to you about your account
registered on www.ebay.co.uk.
eBay will periodically
send you required emails about the site and your transactions. Read
our Privacy Policy and User Agreement if you have any
questions.
This email was sent by eBay Europe S.à r.l., which may
make use of its affiliates to provide the eBay services. If you are a
non-EU resident, please find the contact data of your contracting party in
the User Agreement.
