Resolution Center - Account Issues
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Wed Nov 14 22:14:09 2012
X-Account-Key: account6
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: x
Received: by 10.58.213.134 with SMTP id ns6csp62118vec;
Sat, 3 Nov 2012 06:49:54 -0700 (PDT)
Received: by 10.43.92.72 with SMTP id bp8mr4167799icc.49.1351950593636;
Sat, 03 Nov 2012 06:49:53 -0700 (PDT)
Return-Path: <paypal@resolutioncenter.com>
Received: from mail.900950.com ([61.132.109.6])
by mx.google.com with ESMTP id e6si16632741paw.27.2012.11.03.06.49.10;
Sat, 03 Nov 2012 06:49:53 -0700 (PDT)
Received-SPF: neutral (google.com: 61.132.109.6 is neither permitted nor denied by best guess record for domain of
paypal@resolutioncenter.com) client-ip=61.132.109.6;
Authentication-Results: mx.google.com; spf=neutral (google.com: 61.132.109.6 is neither permitted nor denied by best
guess record for domain of paypal@resolutioncenter.com) smtp.mail=paypal@resolutioncenter.com
Message-Id: <x@mx.google.com>
Received: (qmail 20659 invoked by uid 8061); 14 Oct 2012 21:02:46 -0000
Received: from 216.107.107.254 by mail (envelope-from <paypal@resolutioncenter.com>, uid 0) with qmail-scanner-1.24
(4.4.4.56.
Clear:RC:0(216.107.107.254):.
Processed in 3.008027 secs); 14 Oct 2012 21:02:46 -0000
Received: from 216-107-107-254.static.networktel.net (HELO User) (yuan@[216.107.107.254])
(envelope-sender <paypal@resolutioncenter.com>)
by 0 (magicmail) with SMTP
for x; 14 Oct 2012 21:02:43 -0000
X-Smtpd-Remotehost: 216-107-107-254.static.networktel.net
X-Smtpd-Helo: User
X-Smtpd-IP: 216.107.107.254
X-Smtpd-From: paypal@resolutioncenter.com
X-Smtpd-To: x
Reply-To: <noreply@thank.you>
From: "PayPal"<paypal@resolutioncenter.com>
Subject: Resolution Center - Account Issues
Date: Sun, 14 Oct 2012 16:18:25 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0089_01C2AA85.22626EE0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-Qmail-Scanner-Message-ID: <1350248564139020649@mail>
X-Account-Key: account6
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: x
Received: by 10.58.213.134 with SMTP id ns6csp62118vec;
Sat, 3 Nov 2012 06:49:54 -0700 (PDT)
Received: by 10.43.92.72 with SMTP id bp8mr4167799icc.49.1351950593636;
Sat, 03 Nov 2012 06:49:53 -0700 (PDT)
Return-Path: <paypal@resolutioncenter.com>
Received: from mail.900950.com ([61.132.109.6])
by mx.google.com with ESMTP id e6si16632741paw.27.2012.11.03.06.49.10;
Sat, 03 Nov 2012 06:49:53 -0700 (PDT)
Received-SPF: neutral (google.com: 61.132.109.6 is neither permitted nor denied by best guess record for domain of
paypal@resolutioncenter.com) client-ip=61.132.109.6;
Authentication-Results: mx.google.com; spf=neutral (google.com: 61.132.109.6 is neither permitted nor denied by best
guess record for domain of paypal@resolutioncenter.com) smtp.mail=paypal@resolutioncenter.com
Message-Id: <x@mx.google.com>
Received: (qmail 20659 invoked by uid 8061); 14 Oct 2012 21:02:46 -0000
Received: from 216.107.107.254 by mail (envelope-from <paypal@resolutioncenter.com>, uid 0) with qmail-scanner-1.24
(4.4.4.56.
Clear:RC:0(216.107.107.254):.
Processed in 3.008027 secs); 14 Oct 2012 21:02:46 -0000
Received: from 216-107-107-254.static.networktel.net (HELO User) (yuan@[216.107.107.254])
(envelope-sender <paypal@resolutioncenter.com>)
by 0 (magicmail) with SMTP
for x; 14 Oct 2012 21:02:43 -0000
X-Smtpd-Remotehost: 216-107-107-254.static.networktel.net
X-Smtpd-Helo: User
X-Smtpd-IP: 216.107.107.254
X-Smtpd-From: paypal@resolutioncenter.com
X-Smtpd-To: x
Reply-To: <noreply@thank.you>
From: "PayPal"<paypal@resolutioncenter.com>
Subject: Resolution Center - Account Issues
Date: Sun, 14 Oct 2012 16:18:25 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0089_01C2AA85.22626EE0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-Qmail-Scanner-Message-ID: <1350248564139020649@mail>
Body:
Dear valued PayPal Customer,
We’re constantly working to make PayPal safer, simpler and more convenient for our customers.
This means that from time to time we have to verify and keep up to date your account.
It has come to our attention that your PayPal account information needs to be updated as part of our continuing commitment to protect your account.
Attached at this message you have the reactivation form for your account.
Open and Complete this form to avoid account termination.Remember to allow JavaScript or ActiveX from the pop-up bar that will appear when you complete the form.
Thank you. PayPal Account Service
We’re constantly working to make PayPal safer, simpler and more convenient for our customers.
This means that from time to time we have to verify and keep up to date your account.
It has come to our attention that your PayPal account information needs to be updated as part of our continuing commitment to protect your account.
Attached at this message you have the reactivation form for your account.
Open and Complete this form to avoid account termination.Remember to allow JavaScript or ActiveX from the pop-up bar that will appear when you complete the form.
Thank you. PayPal Account Service
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Paypal Phishing Scam - Attention! Your PayPal Account Could Be Suspended!PayPal Phishing Scam - PayPal Alert: Security Checkpoint
Paypal Phishing Scam - Take Action
Paypal Phishing Scam - Important Message
PayPal Phishing Scam - Notification of Limited Account Access
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
Just in case you did not know, paypal@resolutioncenter.com is not an official e-mail address of PayPal, so just by looking at the From address you can already tell that it is fake.
The scammers are either total retards, they have a good sense of humour or they are insulting the intelligence of their victims.
No matter how you look at it, this sentence just doesn't sound right.
Phishing scammers attach files AT a message, normal people attach it TO a message.
The scammers are trying to get past the security settings of your browser. Do not allow anything that was blocked by your browser just because someone told you so in an e-mail. Make sure you understand why your browser blocked something before you allow it and if you don't know why it was blocked, it is better to leave it blocked and ask someone with knowledge about browser security to have a look at it for you.