| Author |
Message |
Fer-de-Lance
Not quite a Newb
Joined: 15 Jun 2007
Posts: 70
Location: Paradise Lost
|
 Posted:
Wed Jul 18, 2007 1:48 am |
  |
Can anyone tell me what this is and how it operates as a scam?
No Paypal message was made and there is NO subscription to Paypal. I went to the Paypl URL mentioned below and got this:
| Quote: |
| The Transaction ID in your link is invalid. |
FDL
| Quote: |
Received: from exsmtp05.epldt.local ([192.168.201.254]) by EXVS02.epldt.local with Microsoft SMTPSVC(6.0.3790.211);
Wed, 18 Jul 2007 06:39:26 +0800
Received: from imss3.vitro.epldt.net ([125.5.96.37]) by exsmtp05.epldt.local with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 18 Jul 2007 06:39:26 +0800
Received: from postfix04 ([203.131.74.12]) by imss3.vitro.epldt.net with
InterScan Messaging Security Suite; Wed, 18 Jul 2007 06:43:51 +0800
Received: from fcchmailing.com (unknown [63.201.107.5])by postfix04
(Postfix) with ESMTP id 343E890C068for <xxxxxxxxxxxxxxxxx>; Wed, 18 Jul
2007 06:20:33 +0800 (PHT)
Received: from User ([24.106.19.10]) by fcchmailing.com with Microsoft
SMTPSVC(6.0.3790.1830); Tue, 17 Jul 2007 15:47:46 -0700
Reply-To: <[email protected]>
From: "Paypal"<[email protected]>
Subject: Your payment has been initiated
Date: Tue, 17 Jul 2007 17:52:40 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset=Windows-1251
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-OriginalArrivalTime: 17 Jul 2007 22:47:47.0004 (UTC)
FILETIME=[7ECFC7C0:01C7C8C4]
To: undisclosed-recipients:
X-Trend-FH-Attachment-Count: 0
X-Trend-FH-Email-Size: 1079
X-imss-version: 2.028
X-imss-result: Passed
X-imss-scanInfo: M:T L:N SM:1
X-imss-tmaseResult: TT:1 TS:-1.4751 TC:02 TRN:96 TV:3.6.1039(15304.001)
X-imss-scores: Clean:100.00000 C:0 M:0 S:0 R:0
X-imss-settings: Baseline:2 C:3 M:3 S:3 R:3 (0.0000 0.0000)
X-tmase-version: 3.6.1039 (15304.001)
X-tmase-result: T:1 TS:-1.4751 RN:96 Cat:02 NL:0.0000
X-tmase-s-info: ID:000000 T:0 FA:0 SA:00 Attr:0000000000000000
X-tmase-s-name:
X-tmase-rule-1: ID:008004 TC:2 S:-0.2204
X-tmase-rule-2: ID:144045 TC:1 S:0.0000
X-tmase-rule-3: ID:140112 TC:1 S:0.0000
X-tmase-rule-4: ID:141005 TC:1 S:-2.4170
X-tmase-rule-5: ID:111600 TC:1 S:0.5853
X-tmase-rule-6: ID:111604 TC:1 S:0.5074
X-tmase-rule-7: ID:188119 TC:2 S:1.7631
X-tmase-rule-8: ID:706110 TC:6 S:0.2895
X-tmase-rule-9: ID:700537 TC:1 S:1.3701
X-tmase-rule-10: ID:700015 TC:2 S:1.3367
X-tmase-rule-11: ID:700017 TC:1 S:-3.7330
X-tmase-rule-12: ID:700004 TC:2 S:4.1845
X-tmase-rule-13: ID:700115 TC:1 S:0.8290
X-tmase-rule-14: ID:705441 TC:1 S:-0.6186
X-tmase-rule-15: ID:700018 TC:1 S:-2.3085
X-tmase-rule-16: ID:700055 TC:1 S:1.2722
X-tmase-rule-17: ID:111606 TC:1 S:2.2212
X-tmase-rule-18: ID:701455 TC:4 S:0.5203
X-tmase-rule-19: ID:111607 TC:1 S:-3.1307
X-tmase-rule-20: ID:188146 TC:1 S:-0.7819
X-tmase-rule-21: ID:188118 TC:1 S:0.3466
X-tmase-rule-22: ID:700074 TC:2 S:-0.3535
X-tmase-rule-23: ID:700345 TC:2 S:-1.1594
X-tmase-rule-24: ID:700622 TC:4 S:0.0781
X-tmase-rule-25: ID:700450 TC:2 S:-0.5515
X-tmase-rule-26: ID:711990 TC:2 S:-0.2738
X-tmase-rule-27: ID:701827 TC:1 S:-1.1564
X-tmase-rule-28: ID:700014 TC:7 S:2.2000
X-tmase-rule-29: ID:700758 TC:4 S:-0.7351
X-tmase-rule-30: ID:700708 TC:1 S:-0.1986
X-tmase-rule-31: ID:700732 TC:1 S:-0.0933
X-tmase-rule-32: ID:706817 TC:1 S:0.3865
X-tmase-rule-33: ID:188142 TC:1 S:-3.3405
X-tmase-rule-34: ID:703829 TC:1 S:-0.7195
X-tmase-rule-35: ID:700826 TC:1 S:-0.6512
X-tmase-rule-36: ID:704425 TC:1 S:-0.4095
X-tmase-rule-37: ID:707496 TC:2 S:-0.7683
X-tmase-rule-38: ID:707472 TC:2 S:-1.1529
X-tmase-rule-39: ID:700264 TC:7 S:-0.7864
X-tmase-rule-40: ID:700802 TC:6 S:-0.6575
X-tmase-rule-41: ID:701669 TC:2 S:-0.5148
X-tmase-rule-42: ID:188038 TC:1 S:-0.4150
X-tmase-rule-43: ID:188114 TC:1 S:-0.3324
X-tmase-rule-44: ID:111605 TC:1 S:0.2994
X-tmase-rule-45: ID:111602 TC:1 S:-0.5651
X-tmase-rule-46: ID:188001 TC:1 S:2.1464
X-tmase-rule-47: ID:139704 TC:11 S:1.3692
X-tmase-rule-48: ID:708196 TC:15 S:-1.2331
X-tmase-rule-49: ID:700073 TC:17 S:1.1000
X-tmase-rule-50: ID:700852 TC:3 S:-0.5941
X-tmase-rule-51: ID:111610 TC:6 S:1.9000
X-tmase-rule-52: ID:700079 TC:5 S:-0.4282
X-tmase-rule-53: ID:704852 TC:1 S:-0.7293
X-tmase-rule-54: ID:700529 TC:3 S:0.6659
X-tmase-rule-55: ID:700077 TC:1 S:0.5809
X-tmase-rule-56: ID:188134 TC:1 S:-0.5886
X-tmase-rule-57: ID:111608 TC:6 S:-0.1904
X-tmase-rule-58: ID:704141 TC:6 S:-0.8132
X-tmase-rule-59: ID:707904 TC:2 S:-0.4151
X-tmase-rule-60: ID:701384 TC:1 S:1.2005
X-tmase-rule-61: ID:706048 TC:4 S:-0.1569
X-tmase-rule-62: ID:705269 TC:4 S:0.4487
X-tmase-rule-63: ID:702747 TC:2 S:0.3148
X-tmase-rule-64: ID:707887 TC:2 S:-0.4595
X-tmase-rule-65: ID:710611 TC:1 S:-0.4790
X-tmase-rule-66: ID:702638 TC:2 S:-0.5566
X-tmase-rule-67: ID:702127 TC:4 S:-0.4267
X-tmase-rule-68: ID:700721 TC:2 S:1.6546
X-tmase-rule-69: ID:700579 TC:1 S:-0.9642
X-tmase-rule-70: ID:702726 TC:1 S:-0.7124
X-tmase-rule-71: ID:703835 TC:1 S:-1.0229
X-tmase-rule-72: ID:703372 TC:3 S:0.1879
X-tmase-rule-73: ID:700767 TC:3 S:-0.8890
X-tmase-rule-74: ID:700274 TC:1 S:-1.4864
X-tmase-rule-75: ID:702020 TC:3 S:0.4547
X-tmase-rule-76: ID:701514 TC:1 S:0.9628
X-tmase-rule-77: ID:186035 TC:1 S:-0.5228
X-tmase-rule-78: ID:708858 TC:2 S:-0.2130
X-tmase-rule-79: ID:139703 TC:2 S:1.3358
X-tmase-rule-80: ID:702551 TC:1 S:0.6678
X-tmase-rule-81: ID:106230 TC:2 S:-0.7484
X-tmase-rule-82: ID:700752 TC:1 S:1.0347
X-tmase-rule-83: ID:708863 TC:1 S:-0.5084
X-tmase-rule-84: ID:700618 TC:2 S:-1.1673
X-tmase-rule-85: ID:701576 TC:2 S:0.7398
X-tmase-rule-86: ID:702643 TC:1 S:-0.6533
X-tmase-rule-87: ID:105270 TC:1 S:0.5626
X-tmase-rule-88: ID:188013 TC:1 S:2.0000
X-tmase-rule-89: ID:704189 TC:1 S:-1.4217
X-tmase-rule-90: ID:700838 TC:1 S:-0.9532
X-tmase-rule-91: ID:190803 TC:1 S:10.0000
X-tmase-rule-92: ID:148052 TC:1 S:0.0000
X-tmase-rule-93: ID:020028 TC:1 S:-2.4913
X-tmase-rule-94: ID:030045 TC:1 S:-0.1223
X-tmase-rule-95: ID:015907 TC:1 S:0.0000
X-tmase-rule-96: ID:015923 TC:1 S:0.0000
Return-Path: [email protected]
----- Original Message -----
From: Paypal
To: undisclosed-recipients:
Sent: Wednesday, July 18, 2007 6:52 AM
Subject: Your payment has been initiated
You have sent a payment! Secure Transaction
--------------------------------------------------------------------------------
You have sent U$394.92 USD to [email protected]. This payment will be completed once the recipient has accepted the payment.
-----------------------------------
Payment Details
-----------------------------------
Amount: U$394.92 USD
Transaction ID: 4Y523822HI578252P
View the details of this transaction online at:
https://www.paypal.com/uk/vst/id=4Y523822HI578252P
Thank you for using PayPal!
The PayPal Team
Your monthly account statement is available any time; just log in to your account at https://www.paypal.com/us/HISTORY . To correct any errors, please contact us through our Help Centre at https://www.paypal.com/us/HELP.
Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page.
PayPal Email ID PP118
-----------------------------------------------
Copyright � 1999-2007 PayPal. All rights reserved.
|
|
_________________
Fer certain ye have to be lost to find the places can't be found, elseways everyone would know where 't was.
Imagination is more important than knowledge - sign hanging in Einstein's office at Princeton
Dont joke with us, right here we are not joking kindly stop joking - C0l3 V4n H44ns |
|
|
|
|
bill2
Baiting Guru
Joined: 10 Sep 2006
Posts: 5495
Location: Yeah who can tell me where I am?
|
| Posted:
Wed Jul 18, 2007 2:38 am |
|
I'm afraid that [email protected] can tell you what see wants, that's the only info of this mass message that seems to be "real" They sort their victims this way? |
_________________
I don't do bling, I just do lads  |
|
|
|
|
Tsnerd
Not quite a Newb
Joined: 14 Jul 2005
Posts: 41
|
| Posted:
Wed Jul 18, 2007 3:16 am |
|
It's a phishing email spoofing Paypal to capture ID and Logins.
Just delete it or forward it to [email protected] |
_________________
Fakers: many, many, lots; an SSL and a couple of Resellers.
 x 6
AH, AH, AH! Two little  ! |
|
|
|
|
Fer-de-Lance
Not quite a Newb
Joined: 15 Jun 2007
Posts: 70
Location: Paradise Lost
|
| Posted:
Wed Jul 18, 2007 4:54 am |
|
Da**, when is this newbness going to wear off? 
Thanks, Tsnerd and Bill2 
FDL |
_________________
Fer certain ye have to be lost to find the places can't be found, elseways everyone would know where 't was.
Imagination is more important than knowledge - sign hanging in Einstein's office at Princeton
Dont joke with us, right here we are not joking kindly stop joking - C0l3 V4n H44ns |
|
|
|
|
Afferbecklauder
Master of Master Baiters
Joined: 08 Jan 2007
Posts: 923
Location: Wide open spaces
|
| Posted:
Wed Jul 18, 2007 2:16 pm |
|
I don't wish to prolong the agony here, but that is quite an ingenious and dangerous phishing email.
The curious recipient , like FDL might wonder how it works. This is how :
Go down the mail until the link, under the invalid bizzo and clicky.
https://www.paypal.com/uk/vst/id=4Y523822HI578252P
The code in this is smart enough to display the Real Life email address of the recipient in the Pay Pal window. Of course there is no password for that Pay Pal account.
But if you do have a Pay Pal account, as I do, you might just be tempted to enter your RL password. If you do, say goodbye to anything that Pay Pal is authorised to access.
It is of course not baitable, but it's the first phishing account that can come up with the one email address out of 15 on this computer that has a pay Pal Account.
Send it to Pay Pal spoof site. |
_________________
DEVIL NA E GO KILL YOU THIEF Williams J Spillboard
I will send a photo copy of your draft to your state security agent with all your information that you are using the money to finance TERRORIST in America that you have received one already, and you also involved in the slept 11 attack.
NA BABA GOD GO PUNISH INA LIVES ANY WHERE INA DEY PLUS
UR BASTARD GOMER COS IN NO BE MISTER ATALL U SILLY
SCOMBERGS U NA DEY CUTT MY JOBS ABI.NO WORRY I NO GO
TELL UNA AGAIN,BUT IF UNA TRY AGAIN UNA NO GO WAKE
FROM SLEEP THE VERY NEXT MORNING I MEAN U WILL BE
MURDERED WITHOUT WARNING THE VERY NEXT MORNING NINFO . Walter Savvidez
 |
|
|
|
|
Afferbecklauder
Master of Master Baiters
Joined: 08 Jan 2007
Posts: 923
Location: Wide open spaces
|
| Posted:
Wed Jul 18, 2007 10:09 pm |
|
Finally on reporting to Pay Pal, this
Dear Xxxx Xxxxxxx
Thank you for taking the time to contact [email protected]. The email you
reported was not sent by PayPal and is a phishing (fraudulent) email.
-------------------
What to do Next
--------------------
Delete the phishing email. If you've already responded to the email,
please log in to your PayPal account and perform some important safety
measures.
1. Go to your Profile and change your password and security questions.
2. Review the payments listed on your Account Overview.
If you notice a payment that you don't recognize, visit the PayPal
Security Center to file a claim. We'll promptly investigate any
suspicious transactions and you won't be held liable for unauthorized
payments sent from your account.
-------------------------------------
Visit the PayPal Security Center
-------------------------------------
In the new PayPal Security Center you'll find fraud-fighting tips,
tools, and technology.
You'll learn:
* Ways to stay safe online
* How to spot fake emails
* What to do if you suspect unauthorized activity in your account
You'll also find tools to help protect against identity theft:
* Equifax credit alerts: Receive notifications about activity on your
credit accounts
* eBay Toolbar: Download a toolbar that warns you when youre on a
potentially fraudulent web site
-------------------------------------
Safeguard Your Account
-------------------------------------
Phishing emails often try to get your attention by telling you that
there's a problem with your account.
One way to figure out if an email is really from PayPal is to open a new
browser and log in to your PayPal account. Any important information
about your account will be displayed once you are logged in.
------------
Thank You
-------------
By alerting us to this phishing email, you're taking an active role in
keeping the PayPal community safe. Users like you are our greatest
partners in combating spoof.
We'll use the information you provided to work with law enforcement to
shut down the fraudulent website.
Sincerely,
PayPal
*************************************************************
Remember, PayPal will never ask you for your password in an e-mail.
There are no exceptions to this policy. If someone claiming to be from
PayPal asks you for your password in response to an e-mail, you should
refuse to provide it and contact us. To contact PayPal, go to the PayPal
Help Center and click the "Contact Us" link.
************************************************************************
This
email is sent to you by the contracting entity to your User Agreement,
either PayPal Inc or PayPal (Europe) Limited. PayPal (Europe) Limited is
authorized and regulated by the Financial Services Authority in the UK
as an electronic money institution.
*************************************************************
It seems Pay Pal are really taking it seriously. I don't recall the offer of no liability for these before. |
_________________
DEVIL NA E GO KILL YOU THIEF Williams J Spillboard
I will send a photo copy of your draft to your state security agent with all your information that you are using the money to finance TERRORIST in America that you have received one already, and you also involved in the slept 11 attack.
NA BABA GOD GO PUNISH INA LIVES ANY WHERE INA DEY PLUS
UR BASTARD GOMER COS IN NO BE MISTER ATALL U SILLY
SCOMBERGS U NA DEY CUTT MY JOBS ABI.NO WORRY I NO GO
TELL UNA AGAIN,BUT IF UNA TRY AGAIN UNA NO GO WAKE
FROM SLEEP THE VERY NEXT MORNING I MEAN U WILL BE
MURDERED WITHOUT WARNING THE VERY NEXT MORNING NINFO . Walter Savvidez
|
|
|
|
|
Fer-de-Lance
Not quite a Newb
Joined: 15 Jun 2007
Posts: 70
Location: Paradise Lost
|
| Posted:
Wed Jul 18, 2007 11:39 pm |
|
I sent in the same fake phishing site to paypal and got the same reply you did, Afferbeck. It's a good thing Paypal work with law enforcement to shut down these fake sites.
The thank you note from Paypal felt pretty good, too, didn't it? 
Cheers,
FDL |
_________________
Fer certain ye have to be lost to find the places can't be found, elseways everyone would know where 't was.
Imagination is more important than knowledge - sign hanging in Einstein's office at Princeton
Dont joke with us, right here we are not joking kindly stop joking - C0l3 V4n H44ns |
|
|
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
SmartFeed
