eBay: Emailing “You Won!” to a Spamtrap
eBay, the world’s garage sale, just sent email to a spamtrap notifying it that it had won an auction. eBay has no ESP to blame for its failure to notice that a user’s email address died at least three years ago, and the domain itself at least eighteen months ago. eBay sent this email from its own IPs.
The user also has some explaining to do, of course: he or she actively used an eBay account to bid on something without noticing that the email address he or she has on the account is not valid anymore. But eBay really should notice when an account email address bounces, as this one did during the bid process in the last week. (I checked my logs; the bounces are there.)
Sending IP: 66.135.215.69
Spam Sample:
Actual Headers:
Received: from mxslcpool05.ebay.com (mxslcpool05.ebay.com [66.135.215.69])
by <xxx> (Postfix) with ESMTPS id <xxx>
for <xxx>; Wed, 17 Sep 2014 20:##:## +0300 (EEST)
Received: from <xxx>.stratus.phx.ebay.com (<xxx>.slc.ebay.com [10.89.178.12])
by <xxx>.ebay.com (8.14.4/8.14.4) with ESMTP id <xxx>
for <xxx>; Wed, 17 Sep 2014 10:##:## -0700
X-DKIM: Sendmail DKIM Filter v2.8.3 <xxx>.ebay.com <xxx>
DKIM-Signature: <xxx>
Date: Wed, 17 Sep 2014 10:##:## -0700
From: eBay <ebay@ebay.com>
To: <xxx>
Message-ID: <<xxx>>
Subject: YOU WON: <xxx>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_<xxx>"
X-eBay-MailTracker: <xxx>
Readable Email:
From: eBay <ebay@ebay.com>
To: <spamtrap>
Subject: YOU WON: <xxx>
—————————————————————————
—————————————————————————
————————
Price: $##.##. Please choose shipping and provide payment to complete your purchase. <xxx>(####) will ship as directed.
—————————————————————————
—————————————————————————
————————
eBay
—————————————————————–
—————————————————————————
————
Hey <xxx> –
You won at $##.##!
—————————————————————————
————
<removed>
&copr;2014 eBay Inc., 2145 Hamilton Avenue, San Jose, CA 95125