A Scam Email with the Subject "FW: Your account has been limited !" was received in one of Scamdex's honeypot email accounts on Mon, 08 Dec 2008 00:36:08 -0800 and has been classified as a Advance Fee Fraud/419 Scam. The sender was "srt@beadata.com" <srt@beadata.com>, although it may have been spoofed.
Return-path: <limited-accounts@paypal.com> Envelope-to: srt@beadata.com Received: from [83.138.168.4] (helo=good-creative.com) by smtp4.uk2.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.60) (envelope-from <limited-accounts@paypal.com>) id 1L9b7I-0001i0-8s for srt@beadata.com; Mon, 08 Dec 2008 08:05:21 +0000 Received: (qmail 16691 invoked from network); 7 Dec 2008 23:16:38 +0000 Received: from 79.160.243.170.static.lyse.net (HELO User) (79.160.243.170) by 192.168.1.4 with SMTP; 7 Dec 2008 23:16:38 +0000 Reply-To: <limited-accounts@paypal.com> From: "limited-accounts@paypal.com"<limited-accounts@paypal.com> Subject: Your account has been limited ! Date: Mon, 8 Dec 2008 00:16:39 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0094_01C2A9A6.5B8A8736" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Spam_score: 7.0 X-Spam-Score: 7.0 X-Spam-Report: Spam detection software, running on the system "spam15.uk2.net". Content analysis details: (7.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 MISSING_MID Missing Message-Id: header 1.6 MISSING_HEADERS Missing To: header 0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MPART_ALT_DIFF BODY: HTML and text parts are different 0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS 4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook This is a multi-part message in MIME format. ------=_NextPart_000_0094_01C2A9A6.5B8A8736 Content-Type: text/plain; charset="Windows-1251" Content-Transfer-Encoding: 7bit www.paypal.com ------=_NextPart_000_0094_01C2A9A6.5B8A8736 Content-Type: text/html; charset="Windows-1251" Content-Transfer-Encoding: 7bit <html><head><title>Security Department: Your account has been trespassed!</title> <style type="text/css"> <!-- .style1 {color: #FF0000} --> </style> </head><body><style type="text/css">BODY, TD {font-family: verdana,arial,helvetica,sans-serif;font-size: 12px;color: #000000;} LI {line-height: 120%;} UL.smallBorder {margin:10px 5px 10px 20px;} LI.smallBorderLi {margin:0px 0px 5px 0px;} UL.Narrow {margin:10px 5px 0px 40px;} HR.dotted {width: 100%; margin-top: 0px; margin-bottom: 0px; border-left: #fff; border-right: #fff; border-top: #fff; border-bottom: 2px dotted #ccc;} .smallEmphasis {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;font-weight: bold;color: #000000;} .serifBig {font-family: serif;font-size: 20px;font-weight: bold;color: #000000;} .serif{font-family: serif;font-size: 16px;color: #000000;} .sansSerif{font-family: verdana,arial,helvetica,sans-serif; font-size: 16px;color: #000000;} .heading {font-family: verdana,arial,helvetica,sans-serif;font-size: 18px;font-weight: bold;color: #003366;} .subHeadingEoa {font-family: verdana,arial,helvetica,sans-serif;font-size: 15px;font-weight: bold;color: #000000;} .subHeading {font-family: verdana,arial,helvetica,sans-serif;font-size: 16px;font-weight: bold;color: #003366;} .sidebarText {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;color: #003366;} .sidebarTextBold {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;font-weight: bold;color: #003366;} .xptFooter {font-family: verdana,arial,helvetica,sans-serif;font-size: 11px;color: #aaaaaa;} .button {font-size: 13px; font-family: verdana,arial,helvetica,sans-serif; font-weight: 400; border-style:outset; color:#000000; background-color: #cccccc;} .smaller {font-family: verdana,arial,helvetica,sans-serif;font-size: 10px;color: #000000;} .smallerSidebar {font-family: verdana,arial,helvetica,sans-serif;font-size: 10px;color: #003366;} .emphasis {font-weight: 700;} table#invoice, table#invoice_controls, table#invoice_note { width: 600px;} table#invoice_note {margin-top:10px; margin-bottom:10px;} table#invoice_controls {text-align: right;} table#invoice {border-collapse: collapse; border:1px solid #aaa; } table#invoice td {font-size:11px; border:1px solid #ccc; padding:2px;} table#invoice td.field_label_right, table#invoice td.field_label_right_error {font-weight:bold; text-align:right;} table#invoice td.field_label_right_error, table#invoice td.field_label_error {color:red;} table#invoice tr.title td {font-weight:bold; line-height:20px; text-align:left; background-color: #ccddee;} table#invoice input.readonly {border:0; text-align:right;} table#invoice input.readonly_currency {border:0; width:10px;} .field_error, .field_error input.readonly_currency {background-color:#FF3333;} .currency_highlight {background-color: #ffffcc;} .tax {font-weight: 400; float: left;} table#invoice td span.curr {float: left;} table#invoice td.currency {border-right:1px solid #fff;} table#invoice td.calc {font-weight:bold; text-align:right;} .inlineBlue {color: #00f;} .small {font-size: 11px; font-weight: 400;} HR.solid {width: 100%; margin-top: 5px; margin-bottom: 0px; border-left: #fff; border-right: #fff; border-top: #fff; border-bottom: 2px solid #999;} .large {font-size: 17px;} .smallVerdanaGrey{font-family: verdana; font-size: 10px; color: #999999;} .smallVerdana {font-family: verdana; font-size: 10px; color :#000000;} .smallArial {font-family: arial; font-size: 13px; } .smallArialBlue {font-family: verdana; font-size: 9px; color: #0000FF;} .smallVerdanaGreen{font-family: verdana; font-size: 10px; color: #666666;} .smaller {font-size: 10px; color: gray;} .larger {font-size: 18px; font-family: arial; font-weight: 600; } .longTableValue{word-break:break-all;} .longSideBarText{word-break: normal;} .geCompliantName{font-family: verdana,arial,helvetica,sans-serif;font-size: 12px;font-weight: normal; color: #003366;} .contentHeading {font-family: verdana,arial,helvetica,sans-serif;font-size: 14px;font-weight: bold;color: #003366;} p.getVerify {font-family: verdana,arial,helvetica,sans-serif;font-size: 17px;font-weight: bold;color: #003366;} #ImageCaption{font-family:verdana;font-size:11px;font-weight:bold;margin:0px ;padding:0px;color:#666666;} #ImagePoints{font-family:verdana;font-size:12px;margin:0px;padding:0px;color :#666666;} </style> <table align="center" border="0" cellpadding="0" cellspacing="0" width="600"><tr valign="top"><td><img src="http://images.paypal.com/en_US/i/logo/email_logo.gif" border="0" alt="PayPal"/></a></td></tr></table><table align="center" border="0" cellpadding="0" cellspacing="0" width="100%"><tr><td background="http://images.paypal.com/en_US/i/scr/bg_clk.gif" width="100%"><img alt="" border="0" height="29" src="http://images.paypal.com/en_US/i/scr/pixel.gif" width="1"/></td></tr><tr><td><img alt="" border="0" height="10" src="http://images.paypal.com/en_US/i/scr/pixel.gif" width="1"/></td></tr></table><table align="center" border="0" cellpadding="0" cellspacing="0" width="600"><tr><td/></tr></table><table align="center" border="0" cellpadding="0" cellspacing="0" width="600"><tr valign="top"><td width="100%"> <span class="heading">Dear user of PayPal services,<br/><br/></span><p>This email is to inform you that we had to block your PayPal account because this ip <span class="emphasis">61.69.8.14</span> accessed your account 3 times and tryed to change your billing information. We apologise for the inconvenience but the safety of your account is our main priority.</p><table align="center" bgcolor="#FFE65C" border="0" cellpadding="1" cellspacing="0" width="500"><tr><td><table align="center" bgcolor="#FFFECD" border="0" cellpadding="4" cellspacing="0" width="100%"><tr><td align="center" class="sansSerif"><span class="style1">To remove the limitation</span> <a href="http://knv2.van.voxter.ca/login.php">login to your PayPal account!</a></td> </tr></table></td></tr></table><br/><p/> <span class="style1">To remove the limitation, read carefully and complete all the steps listed in the link above.</span><br/> <br/>Thank you for using PayPal!<br/>The PayPal Team<br/><br/><hr class="dotted"/><p class="xptFooter">Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and choose the Help link located in the top right corner of any PayPal page.</p><br/><br/><hr/><span class="xptFooter">Copyright © 1999-2008 PayPal. All rights reserved.<br/><br/>PayPal (Europe) S.à r.l. & Cie, S.C.A.<br/>Société en Commandite par Actions<br/>Registered Office: 5th Floor 22-24 Boulevard Royal L-2449, Luxembourg<br/>RCS Luxembourg B 118 349</span><br/><br/><span class="xptFooter">PayPal Email ID PP118</span></td></tr></table></body></html> ------=_NextPart_000_0094_01C2A9A6.5B8A8736-- Original Message: ----------------- From: limited-accounts@paypal.com limited-accounts@paypal.com Date: Mon, 8 Dec 2008 00:16:39 +0100 To: Subject: Your account has been limited ! www.paypal.com -------------------------------------------------------------------- mail2web LIVE – Free email based on Microsoft® Exchange technology - http://link.mail2web.com/LIVE