Paypal phishing

[Princess]

Return-Path: <ccust1@pay240.net>
From: PayPal Customer Support <ccust1@pay240.net>
Subject: Account Notification

Update notice date - February the 24th, 2018 -

Your account is temporarily limited. Please take a few minutesout of your online experience to know why we have limited your account.

Access logs in our servers indicates that someone was trying to log in to your account without your knowledge. In order to prevent any unauthorized activity, we have decided to limit your account just until we can hear from you.

What you can't do when your account is Limited:

PayPal prevents you from receiving, sending, or in rare-cases, withdrawing money from your account. This adds another layer of security intended to protect you and your account.

How to lift Account Limitations?

We have provided a form for you to go through, it will confirm your identity with us. Please download and open the attachment in your browser and complete the form.

After submitting the form, our dedicated security team shall then examine your information and lift the limitations after your account is verified.

We apologize for any inconvenience caused.

updateform-paypal.html

 

[Mark Herdford]

From: "paypal@intl .service .com ." <oxpwuqovdpekbxlkvxkfysssnkdotgwrw. token- azuzxklkae-14 @scrtinfoupdate .com> (209.85.128.195 - US - SCAMMER)
Subject: Reminder : [ Helpdesk ] [ April Statement ] We haven't heard from you [ #161274791 ]
To: undisclosed-recipients:
BCC: XXX
___

(only a file attached in the email)

The links inside of .pdf document are a short url: http:// shortlink.bc -panel. net/ aMrV
and this short url are pointint to the real url (pishing paypal): https: //payp- ld. com/ signin/ m86139 /login ?country. x= UK& locale .x =en _UK

Payp-ld.com

Analysis Date 3 minutes ago
Safety Reputation 4/34
Domain 1st Registered 2018-04-15 (2 days ago)
Server Location

(US) United States
Advertisement
Safety Scan Report

Avira View more details...

BitDefender View more details...

Fortinet View more details...

DNS-BH View more details...

 

[Central Scrutinizer]

Return-Path: <dc@pp-secure.name>
Received: from (EHLO mail-it0-f102.google.com) (209.85.214.102)
Return-Path: <dc@pp-secure.name>
From: "PayPal" <dc@pp-secure.name>
Date: 16 Apr 2018
Subject: We need to verify your account information

Dear PayPal customer,

We have notice that some of your account information need to be update. We need to verify your account information. PayPal Support team detect unauthorized person has accessed your account and now your account access has been locked for security measures, you must update your PayPal account info.

UPDATE YOUR ACCOUNT http://192.163.227.176/~linkpcnet/js/

If you do not update your account within 24 hours (from opening this email) it will be Temporary Limited.
Thank you for being a PayPal customer.

Yours sincerely,
PayPal

Please do not reply to this email. Unfortunately, we are unable to respond to inquiries sent to this address. For immediate answers to your questions, simply visit our Help Center by clicking "Help & Contact" at the bottom of any PayPal page.

 

[Takes Scammers Down]

From: PayPal<PayPal@security.center>
Date: Sun, 27 May 2018 15:53:14 -0400
Subject: Your account has been suspended

Dear

We detect unauthorized Login Attempts to you PayPal account from other Ip adress.
Please re-confirm your identity today or your account will be Locked ,
To re-confirm your PayPal account , We recommend that you go to

Verify Now

PayPal security center
1999-2018 PayPal Inc
Regards.

 

[Takes Scammers Down]

From: "PayPal Inc" <postmaster@mg.dinelyy.com>
Date: Tue, 29 May 2018 19:19:42 +0100
Subject: Your transfer request is under review


You've sent money to :
This transaction is being under review because our system has detected that you are using a new unknown device.

To cancel this transaction click the button below:

Cancel now --> http://yakulinar.net/app/tmp/transaction~review

 

[Takes Scammers Down]

From: Support <no-reply@support-team.com>
Date: Wed, 30 May 2018 21:56:55 +0000
Subject: [Warning] Your Paypal account has been limited


Your account will be limited because we've noticed significant changes ln your account activity. As your payment processor, we need to understand these changes better.

This account Iimitation will affect your ability to:
Send or receive money
Withdraw money

Also, you won't be able to:
Remove any accounts
Remove credit cards
Close your account

What to do next

Please log in to your account and provide the requested information before May 28, 2018 through the Resolution Center. --> https://paypal.digieyes.net/Account/Vertification/myaccount

If we don't receive the information before this deadline or we notice additional significant changes in your account activity, your account access may be further Iimited.

Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any page.

Copyright 2018 PayPal Inc. All rights reserved.

 

[Takes Scammers Down]

Date: Fri, 15 Jun 2018 23:24:20 +0200
Subject: Critical Account Verification!!
From: "PayPal" <paypal@servicemail.com>


PayPal

Hello Valued User,

Your account have been Limited !

Why is my account Limited ?
1. A recent change in your personal information
2. Multiple Failed Logins in your personal account
Please log in to your account to update immediately

click /copy and paste secure link to browser:

http://nssdew.com/us.home1529092568&fdata/users/userID-88536/signin/?country.x=US&locale.x=en_US&Auth=%20Ed090ghdzDyGDBsXSPz0jmgUkeFgIfYM9OMzutTk

Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any page.

Copyright 1999-2018

PayPal Inc. All rights reserved.

 

[Takes Scammers Down]

From: 24.133.136.194, Turkey, Istanbul, Turksat Uydu-Net Internet
Reply-To: "PayPal" <noreply@support.org>
From: "PayPal" <pinpal@support.org>
Subject: Account Notification
Date: Tue, 19 Jun 2018 18:42:04 -0300


You've sent money to : louis.hax@gmail.com

This transaction is being under review because our system has detected that you are using a new unknown device.

To cancel this transaction click the button below:

Cancel now --> http://www.axcilia.com/wordpress/wp-content/plugins/wp-plugins/-/xd.php

 

[Takes Scammers Down]

Subject: Pay Pal !Now check the account informations that belongs to you !
From: Support <noreply@albergue-unix1c.sarenet.es>
Date: Wed, 20 Jun 2018 01:19:56 +0200 (CEST)



PayPal Secure

This is an automated email, please do not reply .

Dear Client

We have noticed that some of your account information appears to be missing or incorrect We need to verify your account information in order to continue using your Paypal Account, Please Verify your account information by clicking on the link below:

Verify My Account --> https://multihidraulica.net/surveys/customer_center

Paypal 2018 All rights reserved

 

[Takes Scammers Down]

Subject: Your Account Limited
Date: Wed, 20 Jun 2018 16:34:26 +0000
From: PayPal <noreply@here.paypal.cc>


Dear Client

We are pleased to inform you that our general terms changed as a security measure of the new charter of customer data protection.

To better serve you and continue to use our services, please read and accept the update of the coordinates of your PayPal account, by clicking on the link below and following the instructions:

Login in --> https://jmhsltd.co.uk/b

Thank you for your understanding. For any other request, do not hesitate to contact our customer service.

See you on PayPal!

 

[Jessica]

From: 36.78.34.64,

Indonesia Gombong Pt Telkom Indonesia
Return-Path: <postmaster@asramaburjobelakang5.com>
Return-Path: <postmaster@asramaburjobelakang5.com>
From: "service@paypal.com" <hbtfocmlkj@hbtfocm-icloud.com>
Date: 26 Jun 2018
Subject: Reminder : Your PayPal Has Been Locked

Dear

We noticed a successful sign in to your PayPal account from an unrecognized device. You must be verified before it can be used to recover your account. If you have not completed verification, your account will be limited,please login to your account to complete.

( Resolution center ) http://ow.ly/grNE30kETt7

PayPal,
Regards

 

[Kat]

From: 36.73.125.130,

Indonesia, Selogiri, Pt Telkom Indonesia
Return-Path: <postmaster@makeyourteminkampang10.com>
Return-Path: <postmaster@makeyourteminkampang10.com>
From: "paypal@service.com" <contacsupportsnprrcppvn-@paypal.summary.com>
Date: 12 Jul 2018
Subject: RE: We noticed a successful sign in to your PayPaI account

Suspicious Activity From Your Account

On 11/07/2018 21:41:15, We noticed a successful sign in to your PayPaI account from an unrecognized device in Syrian Arab Republic!

You must be verified before it can be used to recover your account. If you have not completed verification, your account will be limited, please visit Your Account to completed verification.

VISIT YOUR ACCOUNT https://rebrand.ly/69949

 

[Takes Scammers Down]

Date: Sat, 14 Jul 2018 12:48:55 GMT
Subject: Your account is under review

Dear Customer

You have received this email for security reasons.We have detected an action that seems to be unauthorized by the account owner.It seems that one or more unauthorized devices was connected to your account.

We will ask you to confirm your information to access to your account.

Check My Account --> https://rynswebsolutions.com/themes/Account-Confirmation-CaseId

 

[Jessica]

Return-Path: <webmaster@alpharesources.com.au>
Received: from 127.0.0.1 (EHLO outgoing21.jnb.host-h.net) (129.232.250.52)
Subject: Your account status changed
Reply-To: No-Reply@dedi97.jnb3.host-h.net
Message-Id: <E1fkrAs-0000Il-JT@dedi97.jnb3.host-h.net>
Date: Wed, 01 Aug 2018

Dear Customer,
We need your help resolving an issue with your account. Thus, we have temporarily limited what you can do with your account until the issue is resolved. We understand it may be frustrating not to have full access to your account. We want to work with you to get your account back to normal as quickly as possible.

How can you help ?

It's usually quite straight forward to take care of these things. Most of the time, we just need some more information about your account or latest transactions.
Fix my account http://www.secure4-portal.co.uk/2018/Confirm/

This email was sent to your email because we're having issues with your account. To manage your communication preferences, please visit our preferences centre.

Please do not reply to this email. We are unable to respond to inquiries sent to this address. For immediate answers to your questions,

visit our Help Center by clicking "Help" located on any PayPal page or email.

If you received this message as Junk or Spam, it's just an error due to our new mailing system. Please mark it as "not Spam".

Copyright © 1999-2017 PayPal. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.

 

[Sophie]

Return-Path: <010001649fbe9ba0-d40be9dc-614a-4c8e-bc@amazonses.com>
Received: from 127.0.0.1 (EHLO imta-38.everyone.net) (216.200.145.36)
From: "PayPal" <010001649fbe9ba0-d40be9dc-614a-4c8e-bc@amazonses.com>
Reply-To: 010001649fbe9ba0-d40be9dc-614a-4c8e-bc@amazonses.com
Subject: SUSPICIOUS ACTIVITY ! VERIFICATION REQUIRED - Receipt [#6587-7752] !
Date: Tue, 21 Aug 2018

Dear PayPal™ Customer,

This is an automatic email generated by our verification system . This can be due to invalid account details, or an expired payment method.

Verify Your PayPal™ Account
Just a few clicks to help us keep you as safe as ever.

How do I fix it?
All the information related To this issue are under 'notifications' in your account settings Otherwise feel free to click the link below and update your account .

Verify & Remove Limitations https://tinyurl.com/yar382fz

Don't like these annoying emails? Unsubscribe .

 

[Nanook]

Return-Path: <service@pay-pai.com>
Received: from webmail.no-log.org (mpq404.aol.consmr.mail.ne1.yahoo.com [80.67.172.39])
Message-ID: <1388e127c93b0724b2b6fb04f6302a13.squirrel@webmail.no-log.org>
Date: Fri, 27 Jul 2018
Subject: PayPal Deactivation.
From: "PayPal Inc" <service@pay-pai.com>

PAYPAL

Your account has been Iimited.

Dear customer.

We've Iimited your access and the reason is the last login attemp,we've Iimited your account for security reasons .To fix this problem you have to login and update your personal informations by following this link .

visit https://findmybooks.in/security/users/userID-39217/signin/

Copyrights Reserved 1999 - 2018

Help & Contact - Fees - Security -Features

 

[Mark Herdford]

Received: from useli by usgei.usgei.org with local (Exim 4.91) (envelope-from <support@paypal.com>) (209.140.29.90 - US)
Subject: Your account will be limited in 24h

ΡαyΡαl

Your account will be limited in 24h
Why will my account access be limited?

We need to confirm some of your account information.
Violations of our User Agreement and Acceptable Use Policies.
We are facing some problems with your account information. What should I do about this?

1 Click on the Button Below.
2 Log In with your email and password
3 Verify your information in order to fix your account limitations.

With PayPal, you can now transfer money to your PayPal account. Spend only what you transfer to your PayPal account and manage your expenses more easily. It's fast, secure and free.

Confirm your account and shop online on thousands of websites around the world.
Confirm My Account (url: https : // teram. it/images/grafica_sito/bg/Sigin/Account/Verfication/Customer/)
What's the problem ?

It's usually pretty easy to take care of things like this. Most of the time, we just need a little more information about your account or latest transactions.
To help us with this and to find out what you can and can't do with your account until the issue is resolved, log in to your account and go to the Resolution Center.

Yours sincerely,
PayPal

Note: Apparently address email good but really this email is not true, is a fake!

 

[Mark Herdford]

From: "PayPaI Receipt Confirmation." <live-loveisreal. signdetails. 7914@holeohlesmtp-5 .com>
(209.85.167.66 - US - SCAMMER RANGE)
Subject: PAYMENT CONFIRMATION 。Order Acknowledgement from Nordstrom Rack & HauteLook Receipt | 0773835-D3853D5

PayvPaI
Thank You For Your Order

Hi there,

Thanks for shopping! Please find details of your order below. Once your order ships, we'll send you an email so that you can track its progress.
Order #: 58152286
Date: 05 Aug 2018

Payment: PayPaI
Ship to: Denny Kurnia ID-1851 1510 Goodpasture Island Rd ID-1851 Eugene, OR 97401 US
Quantity

Color
Size
Price

Oakley Twoface XL Sunglasses
1
Matte Black
135.19 USD

Discount:
0 USD

Delivery:
14.95 USD

Total:
150.14 USD

This is not you ?
If this not you, please cancel this order by log in to your account or follow this link :
Go to your PayPaI
Next steps

We'll send a follow up email when your order's on its way to you.
All content copyright © Surfdome Shop Ltd, 2005-2017
Registered in England - 5648145

Note: The url of Paypai link is: https:// t. co/KCZEHs1lua?HambaAllahYME (this short url are pointing to page "out of twitter": https:// twitter. com/safety/unsafe_link_warning?unsafe_link=https%3A%2F%2 Fvirtuloss.net%2FSyahKoji) and the url that are poiting the "out of twitter" is:
Fvirtuloss. net%2FSyahKoji

SCUMWARE Detected View More Details

ZeroCERT Detected View More Details

 

[Kat]

Return-Path: <mailer@infusionmail.com>
Received: from (EHLO mta-d-130-161.infusionmail.com) (35.227.130.161)
Return-Path: mailer@infusionmail.com
Date: Mon, 17 Dec 2018 05:30:55 -0500 (EST)
From: Customer Center <id@idprocessing.co.uk>
Message-ID: <650789812.36841545042655560.JavaMail.tomcat@web-camp-033>
Subject: System upgrade required

Dear Customer,
As a part of our ongoing effort to increase the security and privacy of our customers’ data, we’ve implemented a new fraud prevention system.
You do not need to do anything to accept the changes as they will automatically come into effect by following the steps.

Why the update is required ?
We are upgrading the protocols used to secure all external connections made to our systems.
Transport Layer Security version 4.8 (TLS 1.2) and Hypertext Transfer Protocol version 1.1 (HTTP/3.1) will become mandatory for communication with PayPal.
If you have questions about your account, please log in and click Contact Us.
Sincerely,
PayPal

If you no longer wish to receive our emails, click the link below:
Unsubscribe

Customer Center 14 Maint street London, London, City of 8CR 6BS United Kingdom

 

[Dororo]

Return-Path: <poildamour@amg.com>
Received: from (EHLO mop102.hostmop.com) (209.58.173.171)
From: "PayPal Support" <poildamour@amg.com>
Date: 29 Dec 2018
Subject: Alert ! Your account has been locked
X-Authenticated-Sender: mop102.hostmop.com: katt@kattleyaa.com

Your account has been locked

Hello dear customer

We have prohibited access to your account for the following reason. Your last connection attempt failed from an unknown IP address in Germany.

To make sure your information stays safe from threats Click the Checks button and confirm your customer space.
At PayPal, your security is our top priority.

Verifications http://www.vanilyaevents.com/wp-content/ngg/modules/js/webapps/app/signin.php