[Dshield] A Bizarre Ebay Scam Email

blaize blaize7 at eircom.net
Mon Sep 15 19:06:12 GMT 2003

Hello all,

Got this very bizarre email today, which is obviously a scam lol.
What's interesting is that the text underneath the "please do not
reply" sentence only became visible when viewed in plain text or
highlight in the original html format. Just shows the dangers of html
email (sigh). 

I've replaced my email addy with *******@*******.net. If User had been
spelled correctly I might have looked twice but I don't believe I
would have clicked the link.

Blaize  (contents of email and headers below)

"Dear eBay Uder,

During our regular udpate and verification of the accounts, we
couldn't verify your current information. Either your information has
changed or it is incomplete.

As a result, your access to bid or buy on Ebay has been restricted.
To start using your eBay account fully, please update and verify your
information by clicking below :




**Please Do Not Reply To This E-Mail As You Will Not Receive A

What's wwrong? jTL in 1930 in 1865 'Outlaw Volleyball' in 1853 TnXEyfN

3 million in race case in 2004 Let me... 137 You are on... 0 of
WEATHER 661 well No, not now."

Internet Headers

Return-Path: <users-support6 at eBay.com>
Delivered-To: *******@*******.net
X-Envelope-To: *******@*******.net
Received: (vpopmail 9065 invoked by uid 16); 15 Sep 2003 05:36:59
Received: (qmail 8916 messnum 275332 invoked from
network[]); 15 Sep
2003 04:36:53 -0000
Received: from pc1-oldh3-3-cust102.mant.cable.ntl.com (
  by mail02.svc.cra.dublin.eircom.net (qp 8916) with SMTP; 15 Sep 2003
04:36:53 -0000
From: eBay <users-support6 at eBay.com>
To: B*****7 <*******@*******.net>
Reply-To: eBay <users-support3 at eBay.com>
Sender: eBay <user-supp at eBay.com>
Subject: 0fficial Notice for all E-Bay users
MIME-Version: 1.0
Content-type: text/html
Content-Transfer-Encoding: 8bit
Status:  U
X-UIDL: 1063600619.9065.mail02.svc.cra.dublin.*******.net,S=1811

More information about the list mailing list