A future scam

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Fri Mar 18, 2011 12:29 am

Check the date on when this will happen/has happened:

Quote:

RFC822 Message body
Return-Path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mc3.midcoast.com
X-Spam-Flag: YES
X-Spam-Level: ***********************
X-Spam-Status: Yes, score=23.7 required=5.0 tests=FORGED_MUA_OUTLOOK,
FROM_MISSPACED,FROM_MISSP_EH_MATCH,FROM_MISSP_MSFT,FROM_MISSP_TO_UNDISC,
FROM_MISSP_USER,NSL_RCVD_FROM_USER,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PSBL,
TVD_PH_BODY_ACCOUNTS_PRE,TVD_PH_SEC,TVD_PH_SUBJ_ACCOUNTS_POST,
T_OBFU_ATTACH_MISSP,T_OBFU_HTML_ATTACH,XMAILER_MIMEOLE_OL_1ECD5
shortcircuit=no autolearn=disabled version=3.3.1
X-Spam-Report:
* 1.5 TVD_PH_BODY_ACCOUNTS_PRE BODY: TVD_PH_BODY_ACCOUNTS_PRE
* 1.5 TVD_PH_SEC BODY: Message has a phrase standard for phishing mails
* 1.2 NSL_RCVD_FROM_USER Received from User
* 2.6 TVD_PH_SUBJ_ACCOUNTS_POST TVD_PH_SUBJ_ACCOUNTS_POST
* 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
* [71.241.233.226 listed in bb.barracudacentral.org]
* 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
* [71.241.233.226 listed in psbl.surriel.com]
* 0.0 T_OBFU_HTML_ATTACH BODY: HTML attachment with non-text MIME type
* 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
* above 50%
* [cf: 100]
* 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
* [cf: 100]
* 0.0 FROM_MISSPACED From: missing whitespace
* 0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
* 2.4 XMAILER_MIMEOLE_OL_1ECD5 XMAILER_MIMEOLE_OL_1ECD5
* 0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
* 0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
* 0.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
* 1.5 FROM_MISSP_USER From misspaced, from "User"
* 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Original-To:
Received: from localhost (localhost [127.0.0.1])
by mc3.midcoast.com (Postfix) with ESMTP id 96D9FF3F87
for <om>; Thu, 17 Mar 2011 15:48:16 -0400 (EDT)
X-Virus-Scanned: by amavisd-new at midcoast.com
Received: from mc3.midcoast.com ([127.0.0.1])
by localhost (mc3.midcoast.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 5SlPWfA5YwGU for <>;
Thu, 17 Mar 2011 15:48:16 -0400 (EDT)
Received: from mx1.midcoast.com (mx1.midcoast.com [69.39.100.26])
by mc3.midcoast.com (Postfix) with ESMTP id 66FF6F3AE1
for <>; Thu, 17 Mar 2011 15:48:16 -0400 (EDT)
Received: from renavakay.com (static-71-241-233-226.washdc.fios.verizon.net [71.241.233.226])
by mx1.midcoast.com (Postfix) with ESMTP id 36E44DA124
for <>; Thu, 17 Mar 2011 14:48:14 -0500 (EST)
Received: from User ([208.123.25.23]) by renavakay.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 17 Mar 2011 13:33:38 -0400
Reply-To: <[email protected]>
From: "PayPal Center Team"<[email protected]>
Subject: PJM-> Your SecureCode program identified some unusual activity in your account
Date: Thu, 17 Mar 2011 12:21:39 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0101_01C2AA85.263C553C"
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-ID: <[email protected]>
X-OriginalArrivalTime: 17 Mar 2011 17:33:38.0475 (UTC) FILETIME=[7355BFB0:01CBE4C9]
To: undisclosed-recipients:;
X-Spam-Prev-Subject: Your SecureCode program identified some unusual activity in your account

This is a multi-part message in MIME format.

------=_NextPart_000_0101_01C2AA85.263C553C
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit

We are contacting you to remind you that on 29/03/2011 our PayPal Security Team identified some unusual activity in your account.
In accordance with User Agreement and to ensure that your account has not been compromised, access to your account was limited.
Your account access will remain limited until this issue has been resolved.
To secure your account and quickly restore full access, we may require some additional information from you for the following reason:
We have been notified that a card associated with your account has been reported as lost or stolen, or that there were additional problems with your card.
This process is mandatory, and if not completed within the nearest time your account or credit card may be subject for temporary suspension.
To securely confirm your account information please download the attachement.
We encourage you to log in and perform the steps necessary to restore your account access as soon as possible.
Allowing your account access to remain blocked for an extended period of time may result in further limitations on the use of your account and possible account closure.
For more information about how to protect your account please visit Security Center.
We apologize for any incovenience this may cause, and we apriciate your assistance in helping us to maintain the integrity of the entire system.

Thank you for using PayPal!

[/quote]

Posted: Fri Mar 18, 2011 1:49 am

I love the smell of Phish and chips on a plate, that's obviousley when the phishing season starts there.
No vinegar for me though, i'm trying to preserve my teeth. Laughing

Posted: Fri Mar 18, 2011 1:58 am

What I like is this page the domain is being redirected to: http://www.securitypaypal.com/

( http://education.apwg.org/r/en/ )

Very nice! Very Happy

Posted: Fri Mar 18, 2011 2:08 am

@Bart Are you saying Pay Pal is psychic?

Quote:

29/03/2011

Or in terms we use 03/29/2011

Posted: Fri Mar 18, 2011 10:00 am

Exactly with that date, maybe they have some time machine!! Laughing