posted on March 16, 2004 05:31:27 AM new***Urgent Safeharbor Department Notice***
Fraud Alert ID : 00626654
You have receive this email because you or someone had used your account to make fake bids on eBay. For security purposes, we are required to open an investigation into this matter. To help speed up this process, you are require to verify your eBay account by following the link below.
http://scgi.ebay.com/verify_id=ebay&user=00626654
Please save this fraud alert id for your reference
Please Note - If your account informations are not updated within the next 72 hours, then we will assume this account is fraudulent and will be cancelled. We apologize for this inconvenience, but the purpose of this verification is to ensure that your eBay account has not been fraudulently used and to combat fraud
We apreciate your support and understading, as we work together to keep eBay a safe place to trade
Thank you for your patience in this matter.
Regards, Safeharbor Department (Trust and Safety Department)
eBay Inc.
Please do not reply to this e-mail as this is only a notification Mail sent ti this address cannot answered
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Received: from www.cpu2e.com.tw ([211.23.103.36])
by sccrmxc11.comcast.net (sccrmxc11) with ESMTP
id <20040316131703s110063g75e>; Tue, 16 Mar 2004 13:17:03 +0000
X-Originating-IP: [211.23.103.36]
Received: (from root@localhost)
by www.cpu2e.com.tw (8.11.6/8.11.6) id i2GDLaS18489;
Tue, 16 Mar 2004 21:21:36 +0800
Date: Tue, 16 Mar 2004 21:21:36 +0800
Message-Id: <[email protected]>
To: [email protected]
Subject: TKO Notice: Safeharbor Department Notice - Fraud Alert
From: "[email protected]"<[email protected]>
Content-Type: text/html
border=0></p>
<p><font size="4" face="Times New Roman, Times, serif"><strong><font face="Verdana, Arial, Helvetica, sans-serif">***Urgent
Safeharbor Department Notice***</font></strong></font></p>
<p><font face="Verdana, Arial, Helvetica, sans-serif"><strong>Fraud Alert
ID : 00626654</strong></font></p>
<p></p>
<p><font size="2" face="Verdana, Arial, Helvetica, sans-serif">You
have receive this email because you or someone had used your
account to make
fake
bids on eBay. For security purposes, we are required to open
an investigation into this matter. To help speed up this process,
you are require to verify your eBay account by following the
link below.</font></p>
<p><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><a href="http://cgi5.id-verification-ebay.com/eBayISAPI.php?MfcISAPICommand=SignInFPP&UsingSSL=1&email=&userid=">http://scgi.ebay.com/verify_id=ebay&user=00626654</a></font></p>
<p><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Please save this fraud alert id for your reference</font></p>
<table width="97%" border="0" bgcolor="#EFEFEF">
<tr>
<td><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Please
Note - If your account informations are not updated within
the next 72 hours, then we will assume this account is fraudulent
and will be cancelled. We apologize for this inconvenience,
but the purpose of this verification is to ensure that your
eBay account has not been fraudulently used and to combat
fraud</font></td>
</tr>
</table>
<p><font size="2" face="Verdana, Arial, Helvetica, sans-serif">We apreciate your support and understading, as we work
together to keep eBay a safe place to trade</font></p>
<p><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Thank you for your patience in this matter.</font></p>
<p><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Regards, Safeharbor Department (Trust and Safety Department)<br>
eBay Inc.</font></p>
<p><font color="#999999" size="2" face="Verdana, Arial, Helvetica, sans-serif">Please
do not reply to this e-mail as this is only a notification Mail
sent ti this address cannot answered</font></p>
<p align="center"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Copyright 2004 eBay Inc. All Rights Reserved.<br>
Designated trademarks and brands are the property of their respective
owners.<br>
eBay and the eBay logo are trademarks of eBay Inc. is located at
Hamilton Avenue, San Jose, CA 95125</font></p>
</td>
</tr>
</table>
</body>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
RALPH added the bold & comments: "Come on Mr.YuckFoo, even I (a mere member of the canine community) can spell better!"
posted on March 16, 2004 05:52:14 AM new
I submitted it to SpamCop since you had both the header and the view source for me....
Received: from www.cpu2e.com.tw ([211.23.103.36]) by sccrmxc11.comcast.net (sccrmxc11) with ESMTP id <20040316131703s110063g75e>; Tue, 16 Mar 2004 13:17:03 +0000
X-Originating-IP: [211.23.103.36]
Received: (from root@localhost) by www.cpu2e.com.tw (8.11.6/8.11.6) id i2GDLaS18489; Tue, 16 Mar 2004 21:21:36 +0800
Date: Tue, 16 Mar 2004 21:21:36 +0800
Message-Id: <[email protected]>
To: x
Subject: TKO Notice: Safeharbor Department Notice - Fraud Alert
From: "[email protected]"<[email protected]>
X-Content-Type: text/html
Content-Type: text/html
X-SpamCop-note: Converted to text/html by SpamCop (outlook/eudora hack)
View entire message
Parsing header:
Received: from www.cpu2e.com.tw ([211.23.103.36]) by sccrmxc11.comcast.net (sccrmxc11) with ESMTP id <20040316131703s110063g75e>; Tue, 16 Mar 2004 13:17:03 +0000
211.23.103.36 found
host 211.23.103.36 = 211-23-103-36.HINET-IP.hinet.net (cached)
host 211-23-103-36.HINET-IP.hinet.net (checking ip) = 211.23.103.36
Possible spammer: 211.23.103.36
Received line accepted
Received: (from root@localhost) by www.cpu2e.com.tw (8.11.6/8.11.6) id i2GDLaS18489; Tue, 16 Mar 2004 21:21:36 +0800
Ignored
Tracking message source: 211.23.103.36:
Routing details for 211.23.103.36
[refresh/show] Cached whois for 211.23.103.36 : [email protected][email protected]
Using abuse net on [email protected]
abuse net hinet.net = [email protected]
Using best contacts [email protected]
Yum, this spam is fresh!
211.23.103.36 not listed in dnsbl.njabl.org
211.23.103.36 not listed in dnsbl.njabl.org
211.23.103.36 not listed in cbl.abuseat.org
211.23.103.36 not listed in dnsbl.sorbs.net
211.23.103.36 not listed in relays.ordb.org.
211.23.103.36 not listed in plus.bondedsender.org
211.23.103.36 not listed in query.bondedsender.org
Finding links in message body
Parsing HTML part
Resolving link obfuscation
http://cgi5.id-verification-ebay.com/ebayisapi.php?mfcisapicommand=signinfpp&usingssl=1&email=&userid=
host 66.218.79.157 (getting name) = p2w1.geo.scd.yahoo.com.
Tracking link: http://cgi5.id-verification-ebay.com/ebayisapi.php?mfcisapicommand=signinfpp&usingssl=1&email=&userid=
Resolves to 66.218.79.157
Reports regarding this spam have already been sent:
Re: 211.23.103.36 (Administrator of network where email originates)
Reportid: 794515738 To: [email protected]
Re: http://cgi5.id-verification-ebay.com/ebayisapi.php?mfcisapicommand=signinfpp&usingssl=1&email=&userid= (Administrator of network hosting website referenced in spam)
Reportid: 794515740 To: [email protected]
Re: 211.23.103.36 (Third party interested in email source)
Reportid: 794515739 To: [email protected]
If reported today, reports would be sent to:
Re: 211.23.103.36 (Administrator of network where email originates)
