Paypal phishing

Sapphire's Strike

Administrator
Staff member
Received from: 74.91.93.137,
CANADA, Ottawa, SMTP

Return Path: <account-paypalgift@mail.shared-health.co.uk>
From: PayPal <account-paypalgift@mail.shared-health.co.uk>
Date: 4th Pct 2017
Subject: Update Your Account Info

- Don't wait to book holiday travel this year with great savings. View Online
PayPal SEASON SAVINGS
PAYPAL MEMBER SPECIAL OFFER
Hotels.com
GET $50 OFF
your purchase of $300 or more at Hotels.com
when you pay with PayPal.*
Expires 11/30/2017. Exclusions apply. See offer terms below.
Update Your Account Info. Please click below.

PayPal Update —————> http://dkwebpro.com/tools/paypal/p/paypal/paypal/customercenter/customer-IDPP00C564/myaccount/signin/?country.x=GB&locale.x=en_GB

Thank you for choosing PayPal
 

Central Scrutinizer

Administrator
Staff member
From: 103.247.244.101,
Indonesia, Jakarta, Pt. Interlink Technology

Return-Path: <props@e-service.com>
Subject: Your account access has been limited !
To: Recipients <props@e-service.com>
From: "Service PayPal" <props@e-service.com>
Date: Sun, 01 Oct 2017
Message-Id: <20171001214009.0A1B447BB1@kolinkmail.com>

We've noticed that some of your account information appears to be missing or incorrect. We need to verify your account information in order to continue using your PayPal account.

* 1 Download the attached e-banking questionnaire and follow the instructions.
* 2 Confirm that you are the account holder PayPal

Once opened, you will be provided with steps to avoid blocking of your account. Failing to do so will be considered a denial of our terms and conditions and your account will be permanently closed.

We appreciate your understanding as we work to ensure your account safety.

Copyright © 1996-2017 PayPal Inc. All rights reserved.

Download

Accounts .htm
 

Sapphire's Strike

Administrator
Staff member
Return Path: <apple-invoice@nonasita4.com>
From: iTunes Store <apple-invoice@nonasita4.com>
Date: Thu, Oct 12,
Subject: [ New Statement Update ] Fraud Activity : Please Review Your receipt from Apple

Dear

This email confirms your purchase of the following subscription:
Name of Subscription: PREMIUM Account
Name of Application: Virtual Trainer PRO : Exercise Workout Fitness
Content Provider: Virtualtrainer Sweden AB
Date of purchase: 12/10/17
Subscription Period: 1 year
Renewal Price: $35.99
Payment Method: Credit Card
The subscription period will automatically renew unless you turn it off no later than 24 hours before the end of the current period. To cancel automatic renewal or manage your subscriptions, click below and sign in.
Developer's Support Page or Terms of Use : Support Page

If you did not authorize this purchase , please visit iTunes Payment Cancellation Form
and follow the steps ——————> http://apple-account-information-update.nut.cc/Login.php?sslchannel=true&sessionid=iK90vnbsZS0oNoO3VZUscycKuSUarekJZtKuRVXQOXfCl4Fh3AJf8V0DOUNg8707AKCsGzjvxy7TCMaF

Regards,
Apple
 

Naruto

Administrator
Staff member
From: 89.46.106.199,
Italy, Arezzo, Aruba S.p.a. - Shared Hosting

Return-Path: <18944303@webxc241s05.ad.aruba.it>
Subject:We're investigating a PауpаI pаyment reversаI (Cаse ID #PP-1143-520-288-812)
Date: Fri, 20 Oct 2017
From: From: PауpаI Sеrvіϲе <sеrvіϲе@pауpаI.ϲοm>
Message-ID: <6752f7b3b7fa6c7030fd79d2f6db7424@www.snalspz.it>

Costumer – Important notifce about your PayPaI account. View Online

PayPaI

Important Notice

Hello Costumer,

Some information on your account appears to be missing or incorrect. Please update your information promptly so that you can continue to enjoy all the benefits of your PayPaI account. If you don't update your information within 72 hours, we'll Iimit what you can do with your PayPaI account. What do I need to do?
Click or type http://tiergrabstein.ch/fonts/verification/informations%20verification/secure/verify/security/secure%20informations/ into a new browser window, and update your information.
Please read about Limits PayPaI service

Yours sincerely,
PayPaI
 
CMM-sender-ip: 83. 239. 116 .56 - RUSSIA
From: Gillian <assistant @ beanbookmarks. io>
To: xxxx
Subject: Gillian just sent you $3,543.00 USD with Paypal. Paypal recommends to withdraw it now.

--
Gillian just sent you $3,543.00 USD with Paypal.

Click here to continue (http :// thecoach2017. com /109/)

Best of luck!
Gillian
--

Website Information
Analysis Date 2 months ago
Safety Reputation 4/34
Domain 1st Registered 2017-06-13 (4 months ago)
Server Location
(NZ) New Zealand
Advertisement
Safety Scan Report
MyWOT View more details...
SCUMWARE View more details...
SURBL View more details...
Fortinet View more details...
 

Kat

Administrator
Staff member
Return-Path: <sal.moncalieri@engim.it>
Received: from (EHLO zimbra.engim.it) (213.215.173.214)
Date: Fri, 17 Nov 2017
From: PayPal <sal.moncalieri@engim.it>
Message-ID: <511968267.238951.1510884010393.JavaMail.zimbra@engim.it>
Subject: Verify Your PayPal Account!

Dear PayPal user,

This is an automatic message by the system to let you know that you have to confirm your account information within 48 hours. Your account has been frozen temporarily in order to protect it.

To proceed to confirm your account information please click on the link below and follow the instructions that will be required.This will help protect you in the future. The process does not take more than 3 minutes.

Confirm your account

Click here to verify http://rederswhitesincs.com/secure_pp

Once you have updated your account records, your information will be confirmed and your account will start to work as normal once again.

Sincerely,
PayPal Account Review Department
(Case ID #PP-003-498-237-832)
 

Quark

Moderator
Staff member
From: 114.124.176.30,
Indonesia Jakarta Pt Telekomunikasi Selular Indonesia

Return-Path: <postmaster@weescreamyeah.com>
Message-ID: <875a8d35054fc81fbeb77bb8001872a6@2ysln2a9.gq8iu>
From: "service@paypaI.com" <mysender-jochaqsw@2ysln2a9.gq8iu>
Subject: IMPORTANT : We Declined Your Last Transaction For Your Safety ID 905691905691905691

PayPal
We declined your last transaction for your safety
Dear
As you know, your last transaction was recently declined. What you may not know is that it was because Your transaction looks suspicious or someone using your account without your permission so we limit your account. Let’s make sure it doesn’t happen again. For your safety, we must confirm you are indeed the account holder to prevent fraud.

Confirm Now` http://ow.ly/yDKG30h8cHM

Security
We monitor every transaction, 24/7 to help prevent fraudulent transactions, and email phishing. Every transaction is heavily guarded behind our advanced encryption.
 

Sphinx

Administrator
Staff member
From: 197.26.144.200,
Tunisia, Tunis, Ati - Agence Tunisienne Internet

Return-Path: <oneoffer@server5.floathosting1.com>
Subject: Account Notification
Date: Wed, 3 Jan 2018
From: Account Support <no-reply@server5.floathosting1.com>
Message-ID: <4ebd304ac4506eed76d3f7b03df3ad59@oneofferonly.com>

Beloved , Costumer(s)
Your account acces will be denied because we've noticed significant changes in your activity. As your last payment method, we need to understand these update sbetter.
This account Iimitation will affect your ability to:

Send or receive money
Withdraw money
Also, you won't be able to:
Remove any accounts
Remove credit cards
Close your account

What to do next ?
Please log in to your account and provide the requested information through the Resolution Center. If we don't receive the information before this deadline or we notice additional significant changes in your account activity, your account access may be further Iimited.

Reload my account http://bksvm.in/includes/.international/Login-account/

Thank you for your understanding and cooperation. If you need further assistance, please check our support case ID

Copyright © 2017 PayPol, Inc. All rights reserved. PayPol is located at 2211 N. First St., San Jose, CA 95131.I'm a new Text block ready for your content.
 

Miyuki

Administratrix
Staff member
From: 41.142.151.208,
Morocco, Oujda, Maroc Telecom

Return-Path: <majestiquerattan@hwsrv-207044.hostwindsdns.com>
Date: Fri, 22 Dec 2017
From: support [service@team.co.uk]
Sent: Friday, December 22, 2017
Subject: Notice : [Account-Verification]

PayPal update

Your account access will be limited in 24h.

Dear Customer,

- We need your help resolving an issue with your account. To give us time to work together on this, we've temporarily limited what you can do with your account until the issue is resolved.
- We understand it may be frustrating not to have full access to your PayPal account. We want to work with you to get your account back to normal as quickly as possible.

What's the problem ?
- We need a little bit more information about you to help confirm your identity.

Verify My Account <http://ru.supersalon.eu/modules/vtemskitter/slides/secure-up/customer/>

How you can help ?
1. It's usually pretty easy to take care of things like this. Most of the time, we just need a little more information about your account or latest transactions.
2. To help us with this and to find out what you can and can't do with your account until the issue is resolved, log in to your account and go to the Resolution Center.

Yours sincerely,
PayPal

Please do not reply to this email. To get in touch with us, click Help & Contact <http://ru.supersalon.eu/modules/vtemskitter/slides/redirected.php> .
 

Central Scrutinizer

Administrator
Staff member
Return-Path: <accountupdate454101214@www.help.e2ma.net>
Received: from (EHLO mout.kundenserver.de) (212.227.126.187)
Date: Wed, 10 Jan 2018
Message-Id: <zM1wcG-1eXTpa0b6I-007E9l@infong-es209.kundenserver.de>
Subject: Fwd : Account Update - Receipt #901346797
From: Service Inc. <accountupdate454101214@www.help.e2ma.net>

Reference #PP-110-365-002-333

Account Status Update Response required

Change your password and security questions Upon receipt

Log in to your PayPal account as soon as possible

Dear Customer,

There's been recent activity in your PayPal account that seems unusual compared to your normal account activities. Please log in to PayPal to confirm you're the account owner and update your password and security questions.
To help protect your account, we've limited what you can do with it until you confirm you're the account holder. That means no one can send money or withdraw money. In addition, no one can close your account, send refunds, remove any bank accounts, or remove credit cards.

What's going on?
We're concerned that someone may be using your PayPal account without your knowledge. Recent activity from your account seems to have occurred from a new location or under circumstances that may be different to usual.

What to do
Log in to your PayPal account as soon as possible. We may ask you to confirm information you provided when you created your account to make sure that you're the account holder. We'll then ask you to change your password and security questions.

You should also do the following for your own protection:
Log in to your PayPal account https://ctoid.net/idfs_write?uid=d88b3abc-ae6d-4d7b-8087-021845831a5d&r=http://bit.ly/2FjWg6n

Check your PayPal account details (address, email, phone, etc.) to make sure they're accurate.
Review your account activity to make sure you recognise the transactions recently made.
Report any unknown or unauthorised activity. Go to the Resolution Centre and click Dispute a Transaction.

What's next?
After you complete all of the tasks, we'll respond within 72 hours.

If you need help or have any questions, call us on 1800 073 263 (toll free), +61 2 8223 9500, 6am to 10pm AEST Monday to Friday, 8am to 7pm AEST Saturday and Sunday.

Kind regards,
PayPal
Help Centre | Safety Advice
Copyright © 1999-2017 PayPal Australia Pty Limited ABN 93 111 195 389 (AFSL 304962). All rights reserved.
PayPal Email ID PP1781
 

Kat

Administrator
Staff member
From: 41.96.156.28,
Algeria, El Malah, Telecom Algeria

Return-Path: <sdaidyafoundc@rio.serversfarm.com>
Subject: Account service
From: no-reply <update-info@intl.service.com>
Sender: <sdaidyafoundc@rio.serversfarm.com>
Date: Sun, 14 Jan 2018

Dear ,
We emailed you a little while ago to ask for your help resolving an issue
with your PayPal account. Your account is still temporarily limited because
we haven't heard from you.
We understand it may be frustrating not to have full access to your PayPal
account. We want to work with you to get your account back to normal as
quickly as possible.
What's the problem?
We noticed some unusual activity on the credit card linked to your PayPal
account.
Case ID Number: PP-005-364-871-793
How you can help
It's usually pretty easy to take care of things like this. Most of the
time, we just need a little more information about your account or latest
transactions.
To help us with this and to see what you can and can't do with your account
until the issue is resolved, log in to your account and go confirm your account

Log In to account https://www.rkcreativephotography.com/Securiy_Update/

Yours sincerely,
Service
Consumer advisory: PayPal Pte Ltd, the Holder of the PayPal™ payment
service stored value facility, does not require the approval of the
Monetary Authority of Singapore. Consumers (users) are advised to read the
terms and conditions: carefully.
PayPal Email ID PP638 - 1b363253dbe7c

Copyright © 1999-2018 PayPal Inc. All rights reserved.
 

Phantom

Ninja
I don't know who Andrea Napier but it is not me.

From: 142.54.244.114,
USA, Wakefield, Epsilon Data Management

Return-Path: <bounce@mail.paypal.com>
Return-Path: <bounce@mail.paypal.com>
Reply-To: "noreply@mail.paypal.com" <noreply-HP2v40000016109a91089c88ecaf4bbcf76f8078@mail.paypal.com>
Subject: Annual Error Resolution Notice
From: "PayPal" <paypal@mail.paypal.com>
Date: Thu, 18 Jan 2018

Dear Andrea Napier:

We're sending you a copy of our Annual Error Resolution Notice to provide helpful information if you have a billing error or unauthorized transaction on your PayPal account. Just remember that you can check out our Error Resolution Notice anytime by going to the section of our User Agreement "Liability for Unauthorized Transactions and Other Errors". As always, if you need help or have any questions, visit our Help Center. You can also find the link on any page of our website. Thank you for being a PayPal customer.

Sincerely,
PayPal

Annual Error Resolution Notice
In case of errors or questions about your electronic transfers, please call us at 888-221-1161 or write us at PayPal, Attn: Error Resolution Department, P.O. Box 45950, Omaha, NE 68145-0950 as soon as you can, if you think your statement or receipt is wrong or if you need more information about a transfer listed on the statement or receipt. We must hear from you no later than 60 days after we sent the FIRST statement on which the problem or error appeared.

Tell us your name and account number (if any).

Describe the error or the transfer you are unsure about, and explain as clearly as you can why you believe it is an error or why you need more information. Tell us the dollar amount of the suspected error.

If you tell us orally, we may require that you send us your complaint or question in writing within 10 business days.

We will determine whether an error occurred within 10 business days after we hear from you and will correct any error promptly. If we need more time, however, we may take up to 45 days to investigate your complaint or question. If we decide to do this, we will credit your account within 10 business days for the amount you think is in error, so that you will have the use of the money during the time it takes us to complete our investigation. If we ask you to put your complaint or question in writing and we do not receive it within 10 business days, we may not credit your account.

For errors involving new accounts, point-of-sale, or foreign-initiated transactions, we may take up to 90 days to investigate your complaint or question. For new accounts, we may take up to 20 business days to credit your account for the amount you think is in error.

We will tell you the results within three business days after completing our investigation. If we decide that there was no error, we will send you a written explanation. You may ask for copies of the documents that we used in our investigation.

Please do not reply to this email. We are unable to respond to inquiries sent to this address. For immediate answers to your questions, visit our Help Center by clicking "Help" located on any PayPal page or email.

PayPal, Inc. is Licensed as a Money Transmitter by the New York State Department of Financial Services. PayPal, Inc., NMLS #910457, License #FT3345, Massachusetts Foreign Transmittal License. PayPal, Inc., Transmit Money By Check, Draft or Money Order By The Department of Banking, Commonwealth of Pennsylvania. PayPal, Inc. Rhode Island Licensed Money Transferor. PAYPAL, INC., NMLS #910457, LICENSE #34967, IS LICENSED BY THE GEORGIA DEPARTMENT OF BANKING AND FINANCE.

Copyright © 2018 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
 
From: KKBLU7No-Reply-iWc @ buni-psek. com (209.85.128.196 - EEUU/RUS, in different website tell me both, but possibly RUS - SCAMMER)
To: XXX
Subject: = 'PayPal' says you have changed your email address

__

Dear, XXX

This is just a quick confirmation that you added a new email address (misterx531 @ yahoo. com) to your PayPal account.
If you want to make this your primary email address - where we'll send all your account-related information - log in to your PayPal account and go to your Profile.

If you didn't add this email, Please login to your account and ensure no one login to your account. It's important because it helps us make sure no one is getting into your account without your knowledge.

Is that you?
Buttons Yes/No with the url: https : // drw . sh /vahgtz (not apparently malware inside but yes for scam purposes)

_


Website Information
Analysis Date 10 months ago
Safety Reputation 0/34
Domain 1st Registered Unknown
Server Location
(RU) Russian Federation

 

De Master Yoda

Emeritus
https : // drw . sh /vahgtz Flagged by two anti virus programs. Please do an anti virus scan if anyone has clicked on the site. Thank you.

SCUMWARE
OpenPhish

Yes you were correct it shows as Russian.
Server Location
(RU) Russian Federation.
 
From: "service-intl @ paypal. com"
<no-reply @ update. id. paypal-privacypolicyupdateaccountservicereminderaccountresoltuion. center. 99-accountlive. mail. co. uk> (74.125.82.98 - US - SCAMMER)
To: XXXX
Subject: Re[ Summary New Report ] : Updates Statement Update News Confirmation Report

We Need Your Help To Resolved Unauthorized Activities.

Dear Customer,
This is part of ouur buyer protection program. We're concerned that someone is using your account without your knowledge. Recent activity from your account seems to have occurred a suspicious or under cirumstances that may be different than usual.

Please check that no one has logged in to your account without your permission. For more information, Please log in to PayPal and see the section limited,

Login Now and Verify Your Account (short url: https :// t .co/ oxJX9cbNdT that redirect to: http :// x. co /6nH5u and this last not appear that redirrect to other site)

After we receive and review your documentation, we'll email you regarding the status of your PayPal account. Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any PayPal page.

Sincerely,
PayPal

Tips For Secured Your Account?
Make Strong Password
Use some very strong password with unique character and symbols.

Buyer Protection
If an eligible item doesn’t show up, or turns out to be significantly different, we’ll help sort things out.

Not Share Your Account
We recommended you to never share your account to anyone else.

PayPal
Disclaimer — PayPal is not responsible for promotions offered by third parties and you should read the Terms & Conditions relevant to any promotion at the merchant's website. This email has been sent to XXX by an automatic system, Please do not reply to this email. Unfortunately, we are unable to respond to inquiries sent to this address. For immediate answers to your questions, simply visit our Help Center by clicking "Help & Contact" at the bottom of any PayPal page.

Consumer advisory — PayPal Pte. Ltd. the holder of PayPal's stored value facility does not require the approval of the Monetary Authority of and Users are advised to read the terms and conditions carefully.

Copyright © 2017 PayPal. All rights reserved.
___

T.co
Analysis Date 2 days ago
Safety Reputation 1/34
Domain 1st Registered 2010-04-26 (8 years ago)
Server Location
(US) United States
Advertisement
Safety Scan Report
SCUMWARE View more details...


--

X. co
Analysis Date 1 day ago
Safety Reputation 4/34
Domain 1st Registered 2010-04-23 (8 years ago)
Server Location
(US) United States

SCUMWARE View more details...
hpHosts View more details...
ZeroCERT View more details...
OpenPhish View more details...
 
From: "Report Sttemnt ." <n0-reply. report-id78452 @ rikkeseenberg22. com> (209.85.215.67 - US - SCAMMER)
Subject: RE : 【News】 You have successfully changed a new email address at 02/02/2018 12:31 PM
To: undisclosed-recipients:;
BCC: XXX
___-_

(ATTACHED FILE, that simulate a Paypal document with a url (http: //gg. gg/ 8opam):
IMAGE:

upload_2018-2-6_9-59-25.png

PayPaI (paypai? Tao Pai pai?)

Your Account Was Opened Another Device

Dear {email},

We recently received your request to update your email address and have updated our records accordingly.

Please read your secure message by opening attachment

(Information_Login.pdf). You will be prompted to open (Log in Now) file or save (download) to your computer.

Immediately confirm when this message has been submitted for the security and comfort of our members.

"This message and any attachments are solely for the intended recipient and may contain confidential or privileged information."

Thanks,
AppIe Team

__

Gg.gg

Website Information
Analysis Date 23 days ago
Safety Reputation 4/34
Domain 1st Registered Unknown
Server Location
(US) United States
Advertisement
Safety Scan Report
MyWOT View more details...
SCUMWARE View more details...
hpHosts View more details...
OpenPhish View more details...
 

Sphinx

Administrator
Staff member
Return-Path: <postmaster@jancokjaransakdokare.com>
Received: from (EHLO mail-vk0-f100.google.com) (209.85.213.100)
From: "Service@int.paypal.com" <dontsreply-mublictorexxqwqey3zbp4bmw01vuisytcym4e@jugn.mchugcu82fozs>
Subject: Alert : Verify Your PayPal Account
Date: Wed, 21 Feb 2018

Hello,

We just wanted to confirm that you’ve changed your password. If you didn’t make this change, please login to your PayPal account now.

Verify to PayPal http://ykm.de/YjdlOT

It’s important that you let us know because it helps us prevent unauthorised persons from accessing the PayPal network and your account information.

Sincerely,
PayPal
 

Miyuki

Administratrix
Staff member
Return-Path: <admin@failed-acitivity-sec-pypl.com>
Received: from mail-it0-f97.google.com (mail-it0-f97.google.com [209.85.214.97])
From: CloudSecurity <admin@failed-acitivity-sec-pypl.com>
Subject: Reminder : Your Apple ID has been Locked.
Date: Tue, 13 Feb 2018

Dear

We've detect that your Apple ID is being used by another device that is unauthorized with your Apple ID. So that we will Lock your Apple ID to make sure your data is safe.

What Should I Do ?

If your Apple ID was Locked you must update your Informations of your Apple ID. If you already have update your Informations, your Apple ID will start to work as normal once again.

If you don't update your Apple ID Informations within 24 Hours, your Apple ID will be Locked Permanently.

Update now

Sincerely,
Apple ID
Apple ID | Support | Privacy Policy
Palo Alto,California, United States
 
Top