This is a classic example how some identity are stolen.

From :eBay <support_id_1800506@ebay.com>
To : Scambuster_m2001@juno.com
Subject :0fficiaI Information To CIient Of eBay Inc
Date : Tue, Dec 27, 2005 09:35 AM

I have attached a sample of this. Note at the links see what I am talking about.


Blacklist Status: Clear
Cached Whois: Cached today
Whois History: 7 records stored
Oldest: 2005-11-07
Newest: 2005-12-27
Record Type: IP Address
IP Location: Turkey Turkey - Adsl-met-acibadem-static Pool
Reverse IP: No websites hosted using this IP address
Reverse DNS: dsl.static81214129110.ttnet.net.tr
inetnum: 81.214.128.0 - 81.214.135.255
netname: TurkTelekom
descr: ADSL-MET-Acibadem-Static Pool
country: tr
admin-c: TTBA1-RIPE
tech-c: TTBA1-RIPE
status: ASSIGNED PA
mnt-by: as9121-mnt
source: RIPE # Filtered

role: TT Administrative Contact Role
address: Turk Telekom
address: Bilisim Aglari Dairesi
address: Aydinlikevler
address: 06103 ANKARA
phone: +90 312 313 1950
fax-no: +90 312 313 1949
e-mail: Whois Privacy and Spam Prevention by Whois Source
admin-c: BADB3-RIPE
tech-c: ZA66-RIPE
tech-c: ZA196-RIPE
tech-c: LA109-RIPE
tech-c: NO638-RIPE
nic-hdl: TTBA1-RIPE
mnt-by: AS9121-MNT
source: RIPE # Filtered

Take a Look at the urls in these attachments

Attached Images

	12-27-2005_12-59-55.png (91.7 KB, 80 views)
	12-27-2005_13-02-35.png (54.3 KB, 60 views)
	02-04-2006_18-43-18.png (58.8 KB, 34 views)

This is the official site for ebay regarding PROTECTING YOUR ID....

Protecting your identity is an important part of staying safe online. Some identity thieves send emails that look like they are from a company you know and trust, asking for personal information. These are known as "spoof" emails.

To help the eBay Community determine the difference between emails sent by eBay and spoof emails, eBay is going to start including a header in some of the emails that we send. This header contains the first and last name you registered on your eBay account, along with your eBay User ID.

Please note: Since eBay sends many different types of emails, not all will contain your name and User ID at first. If an email looks like it came from eBay but doesn't include your name and User ID, it may still be legitimate, but we recommend using caution.

Why eBay is including your name and User ID in emails

Since people who send out spoof emails often don't have your first and last name as well as eBay User ID, receiving an email that contains this information should increase your confidence that the email was sent by eBay.

There may still be cases where spoof emails could contain your first and last name as well as eBay User ID, so seeing this information isn't a foolproof indicator that eBay sent an email, but if this information in not included, you should be extra cautious that the email was not sent by eBay.

Why all emails aren't being updated at once eBay sends many different types of emails. Updating all emails at once would simply be too large an undertaking. Therefore, eBay has decided to update all emails over the next several months. Once all emails have been updated, we will change this page to reflect that the update is complete.

Determining when an email is from eBay

eBay's Spoof Tutorial gives several strategies for determining whether or not an email if from eBay. In addition, eBay Toolbar with Account Guard will notify you when you click on a link that takes you to a known spoof or "phishing" Web site.

To report email that appears to have been sent by eBay that you suspect was not, send us the email with the complete message text and full header or forward the entire message to spoof@ebay.com using the forward function of your email program. When forwarding the message, please don't change the subject line, send additional text, or send the message as an attachment

The spoof@ebay.com email address is reserved for handling reports of attempts to impersonate eBay. In order to investigate these reports in a timely manner, we can only accept forwarded messages at this address.

Related Help topics

* Email and Websites Impersonating eBay
* Protecting Your Account

http://pages.ebay.com/help/confidenc...id-emails.html

Attached Images

01-19-2006_12-47-44.png (101.5 KB, 26 views)

X-Gmail-Received: 9358211289d7a6ebdba9f004aa59ca096007d269
Delivered-To: scamfraudalert@gmail.com
Received: by 10.64.3.3 with SMTP id 3cs14155qbc;
Fri, 20 Jan 2006 04:53:57 -0800 (PST)
Received: by 10.65.189.17 with SMTP id r17mr1287835qbp;
Fri, 20 Jan 2006 04:53:57 -0800 (PST)
Return-Path: <apache@lx1.media3.net>
Received: from qmail-in-norm-0.netfirms.com (96-mail.netfirms.com [64.34.64.96])
by mx.gmail.com with SMTP id e15si1210249qbe.2006.01.20.04.53.56;
Fri, 20 Jan 2006 04:53:57 -0800 (PST)
Received-SPF: neutral (gmail.com: 64.34.64.96 is neither permitted nor denied by best guess record for domain of apache@lx1.media3.net)
Received: (qmail 53484 invoked by uid 1008); 20 Jan 2006 12:53:56 -0000
Delivered-To: scamfraudalert.com-admin@scamfraudalert.com
Received: (qmail 53451 invoked from network); 20 Jan 2006 12:53:56 -0000
Received: from lx1.media3.net (206.67.56.201)
by 0 with SMTP; 20 Jan 2006 12:53:56 -0000
Received: from lx1.media3.net (lx1.media3.net [127.0.0.1])
by lx1.media3.net (8.13.1/8.13.1) with ESMTP id k0KCrkZ2018824
for <admin@scamfraudalert.com>; Fri, 20 Jan 2006 07:53:47 -0500
Received: (from apache@localhost)
by lx1.media3.net (8.13.1/8.12.10/Submit) id k0KCrkQc018823;
Fri, 20 Jan 2006 07:53:46 -0500
Date: Fri, 20 Jan 2006 07:53:46 -0500
Message-Id: <200601201253.k0KCrkQc018823@lx1.media3.net>
To: admin@scamfraudalert.com
Subject: Please Restore Your Account Access
From: "member@eBay.com" <member@eBay.com>
Reply-To: aw-confirm@eBay.com
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit


From: member@eBay.com <member@ebay.com>

Reply-To: aw-confirm@ebay.com
To: admin@scamfraudalert.com
Date: Jan 20, 2006 4:53 AM
Subject: Please Restore Your Account Access
Reply | Reply to all | Forward | Print | Add sender to Contacts list | Delete this message | Report not phishing | Show original | Message text garbled?
Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more
eBay sent this message for the following reason: Our system requires further account verification.
For more information about the security of your information, read eBay Privacy Policy. Learn more.

Please Restore Your Account Access

Dear eBay user,

As part of our security measures, we regularly screen activity in the eBay system. We recently contacted you after noticing an issue on your account. To complete your eBay verification, click the link below.

Complete Your eBay Verification

If the above link does not work:

1.Write down this confirmation code: 38216
2.Type in or copy and paste this link into your Web browser: http://pages.ebay.com/register
3.Enter your confirmation code.

If you need additional help, contact eBay's Customer Support or Live help

Learn how you can protect yourself from spoof (fake) emails at:
http://pages.ebay.com/education/spooftutorial

This eBay notice was sent to from eBay based on your account preferences. Your account is registered on www.ebay.com. As outlined in our User Agreement, eBay will periodically send you information about site changes and enhancements. To unsubscribe from this notice, change your notification preferences. Please note that it may take up to 10 days to process your request. If you would like to receive this email in text format, change your notification preferences! ! ! .

See our Privacy Policy and User Agreement if you have questions about eBay's communication policies.
Privacy Policy: http://pages.ebay.com/help/policies/privacy-policy.html
User Agreement: http://pages.ebay.com/help/policies/user-agreement.html
Copyright © 2005 eBay, Inc. All Rights Reserved.