An
Email with the Subject "MC209 scamdex: eBay Account Update -- Action Needed" was
received in one of Scamdex's honeypot email accounts on Sun, 08 Apr 2012 20:16:05 -0700
and has been classified as a Auction/Escrow Scam Email.
The sender shows as notification@ebay.com.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
ebaycontactaccountnotificationtransactioninc.businesssentbuysellmailuserreferencerespect will boa(scamdex)(ebay@scamdex.com)(fake)dearhttp://pages.ebay.com/hel...http://pages.ebay.com/hel...ebay.comebay com
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => ebay@scamdex.com
[delivery-date:] => Sun, 08 Apr 2012 20:16:05 -0700
[received:] => Array
(
[0] => from mxpool20.ebay.com ([66.135.197.26])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1SH55I-0006kl-Pzfor ebay@scamdex.com; Sun, 08 Apr 2012 20:16:05 -0700
[1] => from sl-wv00-e048876 (sjclb154.sjc.ebay.com [10.6.142.218])by mxpool20.ebay.com (8.13.8/8.13.8) with ESMTP id q393EgXR017887for ; Sun, 8 Apr 2012 20:16:02 -0700 (GMT)
)
[x-dkim:] => Sendmail DKIM Filter v2.8.3 mxpool20.ebay.com q393EgXR017887
[dkim-signature:] => v=1; a=rsa-sha1; c=simple/simple; d=ebay.com; s=dkim;t=1333941362; bh=o1wguEfgyGcdWe0+KBm3nfGlqRk=;h=Message-ID:Date:From:To:Subject:Mime-Version:Content-Type;b=Jqpwt2+AwTqmUMNN1YlknkJGyOVyWyUOI+1rQXM0EJcrb420vlWx0HI2hfx5dpHxo UYAa0QWNaoMa7KSl21Q7dRKLHwWcp/37NZOuCHVrjcaofIbk4SV4krUKgK4b5VQPyW jLFK/0lWBY87UEPudz5BxDOQ46aNqZPzlMk4BUUA=
[domainkey-signature:] => a=rsa-sha1; s=dksm28; d=ebay.com; c=nofws; q=dns;h=message-id:date:from:to:subject:mime-version:content-type:x-ebay-mailtracker;b=DE+tsnE4NJIemGp1TpH4ff0RoaNt2uUwDA757/RqYXmQlbshG1sv2dJtWXsqUGWqeWP/NKkjfID0VA0M/DkzIw==
[message-id:] => <552935669.1333941362323.JavaMail.SYSTEM@sl-wv00-e048876>
[date:] => Sun, 8 Apr 2012 20:16:02 -0700 (MST)
[from:] => notification@ebay.com
[to:] => ebay@scamdex.com
[subject:] => MC209 scamdex: eBay Account Update -- Action Needed
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary=654780167.1333941362323.JavaMail.SYSTEM.sl-wv00-e048876
[x-ebay-mailtracker:] => 10250.767.0.0
[x-spam-status:] => No, score=-13.0
[x-spam-score:] => -129
[x-spam-bar:] => -------------
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: eBay sent this message to Mark Urquhart-Webb (scamdex). Yourregistered name is included to show this message originated from eBay. Learnmore: http://pages.ebay.com/help/confidence/name-userid-emails.html [...]Content analysis details: (-13.0 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 RCVD_IN_RP_CERTIFIED RBL: Sender is in Return Path Certified (trustedrelay)[Return Path SenderScore Certified (formerly][Bonded Sender) - ]-2.0 RCVD_IN_RP_SAFE RBL: Sender is in Return Path Safe (trusted relay)[Return Path SenderScore Safe List (formerly][Habeas Safelist) - ]-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relaydomain-0.0 SPF_PASS SPF: sender matches SPF record-7.5 USER_IN_DEF_SPF_WL From: address is in the default SPF white-list0.0 HTML_MESSAGE BODY: HTML included in message-0.5 ENV_AND_HDR_SPF_MATCH Env and Hdr From used in default SPF WL Match
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
We noticed that you haven't signed in to your eBay account for quite some time, and we'd like to invite you back to buy and sell again. eBay's a great place to buy what you want, and sell what you have.
Unfortunately, since you haven't used your eBay account for a while, it will be deleted if you don't sign in within 30 days from the day this email was sent.
If you are not the account owner or the email address is no longer associated with this eBay account you do not need to contact us. We will delete this account in 30 days.
You can learn more about getting your questions answered, participating in discussion boards, and joining or starting a group. To find out more about getting help from our community resources, visit: http://pages.ebay.com/help/account/community-help.html
We appreciate your business and hope to have you back as part of the eBay community.
Thanks,
eBay
H68051
Learn More to protect yourself from spoof (fake) emails.
This administrative email was sent to ebay@scamdex.com from eBay. Your account is registered on www.ebay.com. As outlined in our User Agreement, eBay will periodically send you information about site changes and enhancements. If you would like to receive this email in text format, change your notification preferences.
eBay will periodically send you required emails about the site and your transactions. Visit our Privacy Policy and User Agreement if you have any questions.
eBay sent this message to Mark Urquhart-Webb (scamdex).
Your registered name is included to show this message originated from eBay. Learn more.
MC209 scamdex: eBay Account Update -- Action Needed
Dear scamdex (ebay@scamdex.com)
We noticed that you haven't signed in to your eBay account for quite some time, and we'd like to invite you back to buy and sell again. eBay's a great place to buy what you want, and sell what you have.
Unfortunately, since you haven't used your eBay account for a while, it will be deleted if you don't sign in within 30 days from the day this email was sent.
If you are not the account owner or the email address is no longer associated with this eBay account you do not need to contact us. We will delete this account in 30 days.
We've got some new information to help you get started again. Just visit:
http://pages.ebay.com/help/account/gettingstarted.html
You can learn more about getting your questions answered, participating in discussion boards, and joining or starting a group. To find out more about getting help from our community resources, visit:
http://pages.ebay.com/help/account/community-help.html
We appreciate your business and hope to have you back as part of the eBay community.
Thanks,
eBay
H68051
Learn More to protect yourself from spoof (fake) emails.
This administrative email was sent to ebay@scamdex.com from eBay. Your account is registered on www.ebay.com. As outlined in our User Agreement, eBay will periodically send you information about site changes and enhancements. If you would like to receive this email in text format, change your notification preferences.
eBay will periodically send you required emails about the site and your transactions. Visit our Privacy Policy and User Agreement if you have any questions.
