More e-bay phish

Posted by Dave Yadallee on
From - Wed Apr 16 02:59:59 2008

X-Account-Key: account2

X-UIDL: a&]!!RE?"!mOR!!^Ah"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208746573.29032@jOZtvq7m0tVpR2qXmlPbkg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3G2u2D6013645

for ; Tue, 15 Apr 2008 20:56:07 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3G2u2j1013644

for dave@doctor.nl2k.ab.ca; Tue, 15 Apr 2008 20:56:02 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Tue, 15 Apr 2008 20:56:02 -0600

Resent-Message-ID: <20080416025602.GA12614@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208737173.02795@jdpsYRLwj/4E+ZgCaYadjQ

Received: from gallifrey.nk.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3G0JQ9L022831

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

for ; Tue, 15 Apr 2008 18:19:31 -0600 (MDT)

X-NetKnow-OutGoing-4688-1-MailScanner-Watermark: 1208737124.6407@jKURun8dLLEUs0oYSHMv5w

Received: from webmail.l-s.com

by gallifrey.nk.ca (8.14.2/8.14.2) with SMTP id m3G0ISR5002661

for ; Tue, 15 Apr 2008 18:18:40 -0600 (MDT)

X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

Received: from intern ([74.246.201.163]) by webmail.l-s.com with Microsoft SMTPSVC(6.0.3790.1830);

Tue, 15 Apr 2008 19:19:50 -0500

From: "eBay"

Subject: {?} {Spam?} {Disarmed} eBay Account Issue - Response Required

Date: Tue, 15 Apr 2008 20:29:07 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 16 Apr 2008 00:19:51.0031 (UTC) FILETIME=[96292870:01C89F57]

X-NetKnow-OutGoing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-OutGoing-4688-1-MailScanner: Found to be clean

X-NetKnow-OutGoing-4688-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=8.469, required 1, BAYES_50 0.00,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, RAZOR2_CF_RANGE_51_100 0.50,

RAZOR2_CF_RANGE_E4_51_100 1.50, RAZOR2_CHECK 0.50, RDNS_NONE 0.10)

X-NetKnow-OutGoing-4688-1-MailScanner-SpamScore: ssssssss

X-NetKnow-OutGoing-4688-1-MailScanner-From: require@verify.ca

X-Spam-Status: Yes, Yes, No

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=15.428, required 5, autolearn=spam,

BAYES_99 3.50, BOTNET 5.00, FORGED_MUA_OUTLOOK 3.12,

FORGED_OUTLOOK_HTML 0.00, FORGED_OUTLOOK_TAGS 0.00,

HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46, MISSING_HEADERS 1.29,

RDNS_NONE 0.10, RELAY_CHECKER 0.00, RELAY_CHECKER_IPHOSTNAME 0.01,

RELAY_CHECKER_KEYWORDS 0.01, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sssssssssssssss

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3G2u2D6013645

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: a&]!!RE?"!mOR!!^Ah"!



































eBay
src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">
color="#666666"

size="1">eBay sent this message requesting your Account

Confirmation.
Your registered name is included to show

this message

originated from
style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay.


target="_blank"

href="http://pages.ebay.com/ebaymotors/help/confidence/name-userid-emails.html"

>Learn more.






border="0">














src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif"

width="8">




style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;">
face="Arial, Verdana" size="4">eBay Account Issue -

Response Required
src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif"

width="8"

align="top">

type="block"

width="1">































src="http://pics.ebaystatic.com/aw/pics/s.gif">












src="http://pics.ebaystatic.com/aw/pics/s.gif">



border="0">








width="1">


border="0">



























Dear

eBay Member,


src="http://pics.ebaystatic.com/aw/pics/s.gif">



size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.




size="2">You can

also copy and paste the following link into

your Web

browser:

rel="nofollow"

target="_blank"

href="http://crawfordhistory.org/feature1/eBay.php"

>MailScanner has detected a possible fraud attempt from "crawfordhistory.org" claiming to be http://cgi4.ebay.com/ws/eBayISAPI.dll?AccountConfirmco_partnerId=2&pUserId=&siteid=0&pageType
Your

confirmation code is: 65417




size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.





Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay


width="99%"

border="0">
















size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">





style="BORDER-RIGHT:#ffcc00 1px solid;BORDER-TOP:#ffcc00 1px

solid;BORDER-LEFT:#ffcc00 1px solid;WIDTH:155px;BORDER-BOTTOM:#ffcc00 1px

solid;HEIGHT:30px;"

cellSpacing="0" cellPadding="4" bgColor="#ffffce"

border="0">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">


target="_blank"

href="http://crawfordhistory.org/feature1/eBay.php"

>Confirm



Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>


src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account



details

height="10"



src="http://pics.ebaystatic.com/aw/pics/s.gif">
src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">



border="0">






size="1">Learn how

you can protect yourself from spoof (fake) emails at:





target="_blank" href="http://pages.ebay.com/education/spooftutorial"

>


color="#003399">http://pages.ebay.com/education/spooftutorial

If

you would like to receive this email in text format,

change

your
target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?OptinLoginShow"

>notification

preferences.

See our Privacy

Policy and

User Agreement if you have questions about
id="lw_1173622849_5"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay's

communication policies.
Privacy Policy:
rel="nofollow"

target="_blank"

href="http://pages.ebay.com/ebaymotors/help/policies/privacy-policy.html"

>


color="#003399">http://pages.ebay.com/ebaymotors/help/policies/privacy-policy.html
User

Agreement:
target="_blank"

href="http://pages.ebay.com/ebaymotors/help/policies/user-agreement.html"

>


color="#003399">http://pages.ebay.com/ebaymotors/help/policies/user-agreement.html

Copyright

2006-2007
style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay, Inc.

All Rights Reserved.
Designated trademarks and

brands are

the property of their respective owners.

id="lw_1173622849_7"

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay and the

eBay logo are registered trademarks or trademarks of




id="lw_1173622849_8"

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay,

Inc.

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay is

located at
style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">2145

Hamilton Avenue, San Jose, CA



95125.

t>

--




This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.


--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.





















Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA