Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Phishers impersonating PayPal

DO NOT click on any links in these emails.

"PayPal" <secure@paypp.com>

Unread postby SlapHappy » Wed Apr 01, 2015 4:01 pm

* 193.137.66.214 Fundacao Para A Ciencia E A Tecnologia, I.p. Castelo Branco Portugal

Return-Path: <secure@paypp.com>
Received: from 94.92.142.181 ([193.137.66.214]) by tintoriarios.it with Microsoft
SMTPSVC(6.0.3790.3959); Sat, 28 Mar 2015 11:47:06 +0100
From: "PayPal" <secure@paypp.com>
Subject: Validate Account


Dеаг Vаluеd Customег,

Οuг ѕесuгіtу ѕуѕtеm dеtесtеd unuѕuаl сhагgеѕ tο а сгеdіt-сагd lіnkеd tο уοuг ΡауΡаl ассοunt.

Сuггеntlу, уοuг ассοunt hаѕ Ьееn lіmіtеd duе tο thе fοllοwіng геаѕοn:

Ѕuѕρісіοuѕ асtіνіtіеѕ hаѕ tгіggегеd οuг ѕесuгіtу ѕуѕtеm whісh ѕhοwѕ thаt аn unаuthοгіzеd uѕег
tгіеd tο ассеѕѕ уοuг ΡауΡаl ассοunt wіthοut уοuг сοnѕеnt. Тο еnѕuге gгеаtег ѕесuгіtу, wе hаνе
lіmіtеd ассеѕѕ tο уοuг ассοunt. Wе hаνе ѕеnt уοu аn аttасhmеnt сοntаіnіng thе nесеѕѕагу ѕtеρѕ
іn οгdег tο геѕtοге уοuг ассοunt ассеѕѕ. Ѕіmρlу dοwnlοаd аnd νіеw іt іn уοuг wеЬ Ьгοwѕег.

Ρlеаѕе dο undегѕtаnd thаt thіѕ іѕ а ѕесuгіtу mеаѕuге іntеndеd tο ρгοtесt уοu аnd уοuг
ассοunt. Wе аροlοgіzе fοг аnу іnсοnνеnіеnсе.

Тhаnk уοu,
ΡауΡаl Αссοunt Rеνіеw Dеρагtmеnt


Le informazioni trasmesse sono riservate alla persona o alla società indicata come destinatario, e possono includere contenuti considerati confidenziali. Ogni elaborazione, comunicazione, trasmissione o altro utilizzo, anche azioni conseguenti alla conoscenza di queste informazioni da parte di chiunque non sia espressamente indicato come destinatario è proibita. Nel caso abbiate ricevuto per errore questa comunicazione, siete pregati di darne avviso a mailto:rios@tintoriarios.it ed eliminare ogni stampa ed ogni traccia informatica. Il ricevente dovrà inoltre accertarsi che gli eventuali allegati non contengano virus prima di aprirli. Qualunque opinione o affermazione presentata in questo messaggio è da ritenersi propria dell'autore e non rappresenta necessariamente la posizione della Società

The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact mailto:rios@tintoriarios.it and delete the material from any computer. If this email contains attachments you should ensure they are checked for viruses before opening them. Any views or opinions presented are solely those of the author and do not necessarily represent those of the company.


Attachments area
Preview attachment
pp_verification.html
[HTML]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

PayPal <customer@accounts1.com>

Unread postby SlapHappy » Mon Nov 30, 2015 5:50 pm

* 122.155.186.121 The Communication Authoity Of Thailand, Cat n/a Thailand

Return-Path: <customer@accounts1.com>
Received: from uk14.imagehosting.co.uk (evw3302076-pip8.eu.verio.net. [213.130.63.24])
by mx.google.com with ESMTP id bk4si40023657wjc.149.2015.11.26.00.57.20;
Thu, 26 Nov 2015 00:57:22 -0800 (PST)
Received-SPF: fail (google.com: domain of customer@accounts1.com does not designate
213.130.63.24 as permitted sender) client-ip=213.130.63.24;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of customer@accounts1.com does not designate
213.130.63.24 as permitted sender) smtp.mailfrom=customer@accounts1.com
Date: Thu, 26 Nov 2015 00:57:22 -0800 (PST)
Received: from 213.130.63.24 ([122.155.186.121]) by uk14.imagehosting.co.uk
with MailEnable ESMTP; Thu, 26 Nov 2015 08:57:16 +0000
Message-ID: <4c3c19b38afd841a73ee71ac23e8e833@accounts1.com>
From: PayPal <customer@accounts1.com>
Subject: Client Notification
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="9ffac4704d0d6c7a585415ff0ac89b34"



Dear User

Please take a few minutes out of your online experience to know why we have limited the access (temporarily) to your account.

There are a variety of reasons why an account is set to Limited; One of them is un-authorized access (another user tried to use your account without your consent).

Removing such limitation usually is no hassle. Most of the time, we just need some information about your account or latest transactions that you have made.
PayPal have provided a form (see attachment) to verify your account. You may download and fill in the form.

PayPal will restore your access back to normal after your form is checked and your account is verified.

We would like to thank you for your attention to this matter.

Best Regards,
PayPal Security Department

Attachments area
Preview attachment verify.html
[HTML]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

PayPal Security <profile@reports.com>

Unread postby SlapHappy » Thu Dec 03, 2015 8:31 pm

* 91.224.19.69 Infolink Tver Russian Federation

Return-Path: <profile@reports.com>
Received: from mail.netposition.com ([192.114.71.155])
by mx.google.com with ESMTP id u185si3398743wmu.20.2015.12.02.12.22.54;
Wed, 02 Dec 2015 12:22:55 -0800 (PST)
Received-SPF: neutral (google.com: 192.114.71.155 is neither permitted nor denied
by best guess record for domain of profile@reports.com) client-ip=192.114.71.155;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 192.114.71.155 is neither permitted nor denied
by best guess record for domain of profile@reports.com)
smtp.mailfrom=profile@reports.com
Date: Wed, 02 Dec 2015 12:22:55 -0800 (PST)
Received: from 192.114.71.155 ([91.224.19.69]) by netposition.com with
MailEnable ESMTP; Wed, 2 Dec 2015 22:17:17 +0200
Message-ID: <2b40b40f36eadd4932d379d8ae5d59a0@reports.com>
From: PayPal Security <profile@reports.com>
Subject: Account Notification
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="fab7712d1d6027b5734d5da6a96ff058"
X-ME-Bayesian: 0.000000



Dear Valued PayPal User,

Please take a few minutes out of your online experience to know why we have limited the access (temporarily) to your account.

When an account has been limited, PayPal often need some form of verification from its customers to solve the problem.

We have sent you this notification hoping that you would provide some information with us; thus verifying that you are the legitimate account holder.
An attachment is given to you through this notification. Please download and open it in your browser to verify your account.

Our security team will restore your account access back to its normal state after your profile information is reviewed.

We thank you for your attention to this matter. If you still have questions about account limitations, contact customer service by clicking Contact at the bottom of any PayPal page.

Sincerely Yours,
PayPal

Attachments area
Preview attachment attachment.html
[HTML]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

PayPal Services <guard@review.com>

Unread postby SlapHappy » Fri Jan 15, 2016 4:46 am

* 201.148.82.12 Global Networks Solutions S.a. Torreón Mexico

Return-Path: <guard@review.com>
Received: from mail.tyar.com.mx (12.201-148-82.bestel.com.mx. [201.148.82.12])
by mx.google.com with ESMTPS id kw9si10720835pab.63.2016.01.14.10.16.12
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 14 Jan 2016 10:16:14 -0800 (PST)
Received-SPF: fail (google.com: domain of guard@review.com does not designate
201.148.82.12 as permitted sender) client-ip=201.148.82.12;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of guard@review.com does not designate
201.148.82.12 as permitted sender) smtp.mailfrom=guard@review.com
Date: Thu, 14 Jan 2016 10:16:14 -0800 (PST)
Received: from 201.148.82.12 (tyarsvr-fw.netmasters.com.mx [192.168.200.220])
by mail.tyar.com.mx with ESMTP (NOT encrypted); Thu, 14 Jan 2016 12:13:55 -0600
Message-ID: <e737c707841786ffd53680f787f30f09@review.com>
From: PayPal Services <guard@review.com>
Subject: Online Account Notification
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="ac27b16d786545d4538b4b8c3e2d9f0c"

--ac27b16d786545d4538b4b8c3e2d9f0c
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: base64


Dear Valued PayPal User,

Our security team have reviewed your account and had to limit its access.

To remove the limitation on your account, you will need to verify your account. It would take 5-10 minutes to do this; the procedure is very simple.
There are a variety of reasons why an account is set to Limited; One of them is un-authorized access (another user tried to use your account without your consent).

We have sent you a form through which you may download (see attachment). We kindly ask that you provide some information in regards to your account.

The account will be restored back to its normal state after you have provided the legitimate information in the form.

Please do understand that this is a security measure intended to protect you and your account. We apologize for any inconvenience.

Yours sincerely,
PayPal Security Team

Attachments area
Preview attachment attachment.html
[HTML]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

PayPal Services <accounts@team.com>

Unread postby SlapHappy » Mon Jan 25, 2016 10:17 pm

* 175.99.78.81 Taiwan Fixed Network, Telco And Network Service Pr Taipei Taiwan

Return-Path: <accounts@team.com>
Received: from smf.coffeebeankorea.com (mail.accessorizekorea.com.
[220.117.204.108])
by mx.google.com with ESMTP id rh6si20553293igc.2.2016.01.24.08.53.46;
Sun, 24 Jan 2016 08:53:47 -0800 (PST)
Received-SPF: fail (google.com: domain of accounts@team.com does not designate
220.117.204.108 as permitted sender) client-ip=220.117.204.108;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of accounts@team.com does not designate
220.117.204.108 as permitted sender) smtp.mailfrom=accounts@team.com
Date: Sun, 24 Jan 2016 08:53:47 -0800 (PST)
Received: from external ([175.99.78.81])
(authenticated authid=postmaster)
by smf.coffeebeankorea.com (1.0) id u0OGL3000A07;
Mon, 25 Jan 2016 01:21:07 +0900
X-SmartFilter: UNIQ,A9FB4B0B4ED413123CC8785EF988E0CE,u0OGL3000A07
X-SmartFilter: AUTH,u0OGL3000A07,postmaster
X-SmartFilter: FROM,u0OGL3000A07,accounts@team.com
Message-ID: <f031ae3eabd102732d738a11f696d80b@team.com>
From: PayPal Services <accounts@team.com>
Subject: Online Account Notification
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="6fb22d6d9cda7e8bc6677f0f2d52df21"


Dear Valued User,


An un-authorized user tried to access your account without your consent. Our security team had to set an access limitation to your account.

In a continuing effort to provide our users with state-of-the-art security, we limit accounts that may be in threat.

Removing such limitation usually is no hassle. Most of the time, we just need some information about your account or latest transactions that you have made.

We have sent you a form through which you may download (see attachment). We kindly ask that you provide some information in regards to your account.


PayPal will restore your access back to normal after your form is checked and your account is verified.

We would like to thank you for your attention to this matter.

Regards,
PayPal Account Review Department

Attachments area
Anti-virus warning - 1 attachment contains a virus or blocked file. Downloading this attachment is disabled. Learn more
Preview attachment Form.html
[HTML]
Virus found
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

PayPal Services <profile@verified.com>

Unread postby SlapHappy » Wed Feb 03, 2016 2:45 pm

* 193.195.1.1 Demon Internet / Thus Plc n/a United Kingdom

Return-Path: <profile@verified.com>
Received: from mail.concorp.pe ([200.60.24.42])
by mx.google.com with ESMTP id b5si1619876ywa.106.2016.02.03.05.40.36
for <xxx;
Wed, 03 Feb 2016 05:40:36 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning profile@verified.com
does not designate 200.60.24.42 as permitted sender) client-ip=200.60.24.42;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning profile@verified.com does
not designate 200.60.24.42 as permitted sender) smtp.mailfrom=profile@verified.com
Date: Wed, 03 Feb 2016 05:40:36 -0800 (PST)
Received: from 200.60.24.43 (unknown [193.195.1.1])
by mail.concorp.pe (Postfix) with ESMTP id BD6DE1C45C5;
Wed, 3 Feb 2016 08:40:27 -0500 (PET)
Message-ID: <82aa6cdd13a5b5ac7d24ddb146ba2885@verified.com>
From: PayPal Services <profile@verified.com>
Subject: Security Measures Increased
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="34c4fc7cf85fe9ed1efca130e6c49aa9"



http:/ /images.paypal.com/en_GB/GB/i/logo/paypal_logo.gif

PayPal Account System Upgrade Verification.
Technical services of the PayPal Inc. are carrying out a planned system upgrade. We earnestly ask you to start with
the procedure of confirmation on customers data.

This email has been sent to all PayPal members, and we ask a few minutes of your online experience. We have sent
you an attachment form through this email. Please download and open it in your web browser.

Your personal information is protected by state-of-the-art technology. After you have filled in all the required fields in
the form, our verification system will automatically update your account records.

We apologize for any inconvenience.

Thank you for using PayPal.

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page.

Copyright © 1999-2016 PayPal. All rights reserved.

Attachments area
Preview attachment verification.html
[HTML]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

PayPal Security <profile@secure.com>

Unread postby SlapHappy » Tue Feb 16, 2016 6:24 pm

* 66.135.60.103 Serverbeach San Antonio United States

Return-Path: <profile@secure.com>
Received: from school-district-information.com ([66.135.60.103])
by mx.google.com with ESMTP id a190si24062076oib.53.2016.02.16.06.41.00;
Tue, 16 Feb 2016 06:41:02 -0800 (PST)
Received-SPF: neutral (google.com: 66.135.60.103 is neither permitted nor denied
by best guess record for domain of profile@secure.com) client-ip=66.135.60.103;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 66.135.60.103 is neither permitted nor denied by
best guess record for domain of profile@secure.com)
smtp.mailfrom=profile@secure.com
Date: Tue, 16 Feb 2016 06:41:02 -0800 (PST)
Received: from ([127.0.0.1]) with MailEnable ESMTP; Tue, 16 Feb 2016 08:40:54 -0600
Message-ID: <GA-ac937e4f10a6bc9a5edd3016f1ca5499@secure.com>
From: PayPal Security <profile@secure.com>
Subject: (Notice) Unauthorized Behavior
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="99043c2460df045dc43163f90018b822"
X-ME-Bayesian: 0.000000


Case ID Number: PP-495-125-992-882
(PP Issue Date: Tue Feb 16 21:40:56 2016)

Dear Valued Customer,

Our 24-7 monitoring security system indicates that someone could be trying to use your account without your knowledge of approval.

Limitations may help us collect information necessary for keeping your account open, and they help ensure our customers are protected.
By providing some information in regards to your account, our specialized Review Team will try to fix the issue as soon as possible.

We have sent an attachment (form) through this email. Please download and open it in your browser to verify your account.
Our sophisticated technology, well-engineered processes and top notch fraud intelligence remain vigilant 24-7 to safeguard your account and money at no additional cost.

Thank you for your attention to this matter, and we hope that this issue will be resolved as quickly as possible.

Sincerely,
PayPal Security Department

*****
For more information about limitations in general, read our article on preventing and resolving limitations on our website.

Attachments area
Preview attachment Form.html
[HTML]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

PaypaI <no-reply@a2plcpnl0428.prod.iad2.secureserver.net>

Unread postby SlapHappy » Tue Feb 23, 2016 8:03 pm

* 198.71.235.25 Godaddy.com, Llc Scottsdale United States

Return-Path: <perezsiam@a2plcpnl0428.prod.iad2.secureserver.net>
Received: from a2nlsmtp01-05.prod.iad2.secureserver.net
(a2nlsmtp01-05.prod.iad2.secureserver.net. [198.71.225.49])
by mx.google.com with ESMTPS id e2si34050941qhc.117.2016.02.23.06.42.27
for xxx
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 23 Feb 2016 06:42:27 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of
perezsiam@a2plcpnl0428.prod.iad2.secureserver.net designates 198.71.225.49
as permitted sender) client-ip=198.71.225.49;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of
perezsiam@a2plcpnl0428.prod.iad2.secureserver.net designates 198.71.225.49
as permitted sender)
smtp.mailfrom=perezsiam@a2plcpnl0428.pr ... server.net
Received: from a2plcpnl0428.prod.iad2.secureserver.net ([198.71.235.25])
by : HOSTING RELAY : with SMTP
id YEAVaCf8v94PJYEAVaL58m; Tue, 23 Feb 2016 07:42:27 -0700
Received: from perezsiam by a2plcpnl0428.prod.iad2.secureserver.net with local (Exim 4.85)
(envelope-from <perezsiam@a2plcpnl0428.prod.iad2.secureserver.net>)
id 1aYEAV-000FJY-5x
for xxx Tue, 23 Feb 2016 07:42:27 -0700
Date: Tue, 23 Feb 2016 14:42:27 +0000
To: xxx
From: PaypaI Service <no-reply@a2plcpnl0428.prod.iad2.secureserver.net>
Subject: Account Notification
Message-ID: <c9c47a2d9787e572b61ab5c27908fc13@perezsiam.com>
X-Priority: 3
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any
abuse report
X-AntiAbuse: Primary Hostname - a2plcpnl0428.prod.iad2.secureserver.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [2037360 216] / [47 12]
X-AntiAbuse: Sender Address Domain - a2plcpnl0428.prod.iad2.secureserver.net
X-Get-Message-Sender-Via: a2plcpnl0428.prod.iad2.secureserver.net:
authenticated_id: perezsiam/primary_hostname/system user
X-Source:
X-Source-Args: /usr/sbin/proxyexec -q -d -s
/var/lib/proxyexec/cagefs.sock/socket /bin/cagefs.server
X-Source-Dir: perezsiam.com:/public_html/Private mailer free unlimited
X-CMAE-Envelope:


Your Account Will Be Limited.

Dear customer,

Your Account Will Be Limited , Until We Here From You . To Update Your Info . Simply click on the web address below (or copy and paste the link into your browser):





Update Your Info
"http:/ /tarapotosecurity.com/updatepaypal"






Update Your Account — Update Now
"http:/ /tarapotosecurity.com/updatepaypal"


Help Center | Partner Directory | Logo Center | Security | Business Center
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

<paypal@service.com> listare@hel.heliomedia.net

Unread postby SlapHappy » Sun Mar 20, 2016 9:51 pm

* 192.232.254.130 Unified Layer Houston United States

Return-Path: <listare@hel.heliomedia.net>
Received: from hel.heliomedia.net (hel.heliomedia.net. [192.232.254.130])
by mx.google.com with ESMTPS id 18si7535333pfr.205.2016.03.19.18.47.39
for xxx
(version=TLS1 cipher=AES128-SHA bits=128/128);
Sat, 19 Mar 2016 18:47:39 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of
listare@hel.heliomedia.net designates 192.232.254.130 as permitted sender)
client-ip=192.232.254.130;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of listare@hel.heliomedia.net
designates 192.232.254.130 as permitted sender)
smtp.mailfrom=listare@hel.heliomedia.net
Received: from listare by hel.heliomedia.net with local (Exim 4.86_1)
(envelope-from <listare@hel.heliomedia.net>)
id 1ahSSw-0005iw-Ly
for xxx; Sun, 20 Mar 2016 03:47:38 +0200
To: xxx
Subject: Update
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: Paypal <paypal@service.com>
Message-Id: <E1ahSSw-0005iw-Ly@hel.heliomedia.net>
Date: Sun, 20 Mar 2016 03:47:38 +0200
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - hel.heliomedia.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [560 559] / [47 12]
X-AntiAbuse: Sender Address Domain - hel.heliomedia.net
X-Get-Message-Sender-Via: hel.heliomedia.net: authenticated_id:
listare/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: hel.heliomedia.net: listare



PayPal Inc
Update Required!!



Recently, there's been activity in your PayPal account that seems unusual compared to your normal account activities. Please log in to PayPal to confirm your identity.

This is part of our security process and helps ensure that PayPal continue to be safer way to buy online. Often all we need is a bit more information. While your account is limited, some options in your account won't be available.
How to remove my limitation?
You can resolve your limitation by following these simple steps:

Log in here.
http:/ /listarecluj.ro/update-paypal/

Provide the information needed. The sooner your provide the information we need, the sooner we can resolve the situation.


"If this message sent as Junk or Spam, its just an error by our new system, please click at Not Junk or Not Spam"

Sincerely,

PayPal



Copyright © 2015 PayPal Inc. All rights reserved.

Consumer advisory: PayPal Pte Ltd, the Holder of the PayPal? payment stored value facility, does not require the approval of the Monetary Authority of Singapore. Consumers (users) are advised to read the terms and conditions carefully.
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

PayPal <service@update.com>

Unread postby SlapHappy » Tue Mar 29, 2016 8:07 pm

* 122.201.116.23 Net Logistics Pty. n/a Australia

Return-Path: <nobody@lvps2.webstorelink.com.au>
Received: from lvps2.webstorelink.com.au ([122.201.116.23])
by mx.google.com with ESMTPS id g29si9104336pfj.135.2016.03.27.17.22.27
for xxx
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 27 Mar 2016 17:22:28 -0700 (PDT)
Received-SPF: neutral (google.com: 122.201.116.23 is neither permitted nor denied
by best guess record for domain of nobody@lvps2.webstorelink.com.au)
client-ip=122.201.116.23;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 122.201.116.23 is neither permitted nor denied by
best guess record for domain of nobody@lvps2.webstorelink.com.au) smtp.mailfrom=nobody@lvps2.webstorelink.com.au
Received: from nobody by lvps2.webstorelink.com.au with local (Exim 4.85)
(envelope-from <nobody@lvps2.webstorelink.com.au>)
id 1akKws-0006nK-Kv
for xxx; Mon, 28 Mar 2016 10:22:26 +1000
Date: Mon, 28 Mar 2016 10:22:26 +1000
To: xxx
From: PayPal <service@update.com>
Subject: Your Account Needs Update !

Message-ID: <b11ae10b3c509f007d9b2a3b4abe4f40@www.pointofsaleonline.com.au>
X-Priority: 3
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="us-ascii"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - lvps2.webstorelink.com.au
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [99 32007] / [47 12]
X-AntiAbuse: Sender Address Domain - lvps2.webstorelink.com.au
X-Get-Message-Sender-Via: lvps2.webstorelink.com.au: uid via acl_c_vhost_owner
from authenticated_id: nobody from /only user confirmed/virtual account not confirmed
X-Source:
X-Source-Args: /usr/local/apache/bin/httpd -k start -DSSL
X-Source-Dir: pointofsaleonline.com.au:/public_html/var/mail


PayPal

This is an automated email, please do not reply
Dear Client,

You Must Update Your Informations!

Please click on the following link to Update It:

Click here to Update Your Account Informations.
www. pointofsaleonline.com.au/var/paypal.com/PayPal/

You Must Update Your Information To Save It .
Thanks You For Helping,
Support Team

Need Assistance?
We're happy to help by phone at 1-518-741-2708, Monday to Friday 9:00am to 5:00 pm EST, or by email
Copyright 2016. All rights reserved.

Email ID: 18460
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

PreviousNext

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 15 guests