An
Email with the Subject "TR: Notification of Limited Account Access" was
received in one of Scamdex's honeypot email accounts on Fri, 23 May 2008 16:29:33 -0700
and has been classified as a Generic Scam Email.
The sender shows as "Bernard Teyssou" <bernard.teyssou@orange.fr>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
0paypalpaypal.comlog inloginmicrosoftpasswordwinsafeaccountnotificationminderinternetaccesssecuremailuserreferencesincerely will security(mwinf2007.orange.fr)(smtp server)(localhost [127.0.0.1])(cest)[217.125.135.76])[mailto:paypal@alerts.com](e.g. internet explorer o...(http://paypal.com/)dearhttps://www.paypal.com/us>http://images.paypal.com/...http://paypol-alert.co.cc...http://images.paypal.com/...http://paypal.com/)https://www.paypal.com/us...fs
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => JS_SUBMISSIONS@scamdex.com
[delivery-date:] => Fri, 23 May 2008 16:29:33 -0700
[received:] => Array
(
[0] => from smtp21.orange.fr ([80.12.242.46])by gogol.o7e.net with esmtp (Exim 4.68)(envelope-from )id 1JzghR-0004Ub-Gkfor JS_SUBMISSIONS@scamdex.com; Fri, 23 May 2008 16:29:33 -0700
[1] => from me-wanadoo.net (localhost [127.0.0.1])by mwinf2126.orange.fr (SMTP Server) with ESMTP id 99A751C00084;Sat, 24 May 2008 01:29:28 +0200 (CEST)
[2] => from maisoncfe2676d (APoitiers-157-1-100-20.w86-196.abo.wanadoo.fr [86.196.139.20])by mwinf2126.orange.fr (SMTP Server) with ESMTP id CE5861C00081;Sat, 24 May 2008 01:29:26 +0200 (CEST)
)
[x-me-uuid:] => 20080523232926845.CE5861C00081@mwinf2126.orange.fr
[from:] => "Bernard Teyssou"
[to:] => "Bernard Teyssou"
[subject:] => TR: Notification of Limited Account Access
[date:] => Sat, 24 May 2008 01:29:32 +0200
[x-mailer:] => Array
(
[0] => <4EE6417083BB4530853E17D448F0160A@maisoncfe2676d>
[1] => Microsoft Office Outlook 11
)
[mime-version:] => 1.0
[content-type:] => text/plain;charset="iso-8859-1"
[content-transfer-encoding:] => quoted-printable
[x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2900.5512
[thread-index:] => Aci7ce6rrtJTJneNTuW/iNZAk26W3gButa1Q
[x-spam-status:] => No, score=1.3
[x-spam-score:] => 13
[x-spam-bar:] => +
[x-spam-flag:] => NO
[x-o7e-flag:] => J-3509981-042508::smtp21.orange.fr [80.12.242.46]
[message-id:] => REIDs3x1239839788.M830060P32690V-S3X
[x-scamdex-scores:] => S:57 P:62 A:63 L:53 E:58 G:50
[x-scamdex-classtype:] => A
[x-scamdex-classscore:] => 63
[x-scamdex-totscore:] => 343
[x-scamdex-kw:] => access,account,activity,card,contact,credit,ended,inc.,internet,log in,login,ltd,notification,password,paypal,safe
[x-scamdex-em:] => CE5861C00081@mwinf2126.oran,F08861C00151@mwinf2007.oran,paypal@alerts.com
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1239839788.M830060P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Return-Path: <paypal@alerts.com>
Received: from mwinf2007.orange.fr (mwinf2007.orange.fr)
by mwinb0k01 (SMTP Server) with LMTP; Wed, 21 May 2008 20:38:59
+0200
X-Sieve: Server Sieve 2.2
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2007.orange.fr (SMTP Server) with ESMTP id D12AE1C000A6;
Wed, 21 May 2008 20:38:59 +0200 (CEST)
Received: from User (76.Red-217-125-135.staticIP.rima-tde.net
[217.125.135.76])
by mwinf2007.orange.fr (SMTP Server) with ESMTP id F08861C00151;
Wed, 21 May 2008 20:38:45 +0200 (CEST)
X-ME-UUID: 20080521183845985.F08861C00151@mwinf2007.orange.fr
Reply-To: <paypal@alerts.com>
From: "PayPal Alert" <paypal@alerts.com>
Subject: Notification of Limited Account Access
Date: Wed, 21 May 2008 20:38:38 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20080521183845.F08861C00151@mwinf2007.orange.fr>
To: undisclosed-recipients: ;
-----Message d'origine-----
De : PayPal Alert [mailto:paypal@alerts.com]
Envoyé : mercredi 21 mai 2008 20:39
À : undisclosed-recipients:
Objet : Notification of Limited Account Access
PayPal <https://www.paypal.com/us>
<http://images.paypal.com/images/pixel.gif>
Information Regarding Your account:
Dear PayPal Member:
Attention! Your PayPal account has been limited!
As part of our security measures, we regularly screen activity in the PayPal
system.We recently contacted you after noticing an issue on your account.We
requested information from you for the following reason:
Our system detected unusual charges to a credit card linked to your PayPal
account.
Reference Number: PP-259-187-991
This is the Last reminder to log in to PayPal as soon as possible. Once you
log in, you will be provided with steps to restore your account access.
Once you log in, you will be provided with steps to restore your account
access. We appreciate your understanding as we work to ensure account
safety.
Click here to activate your account
<http://paypol-alert.co.cc/paypal/cgi-bin/webscrcmd=_login-run/webscrcmd=_ac
count-run/updates-paypal/confirm-paypal/pp/>
We thank you for your prompt attention to this matter. Please understand
that this is a security measure intended to help protect you and your
account. We apologise for any inconvenience..
Sincerely,
PayPal Account Review Department
________________________________
Copyright 1999-2008 PayPal. All rights reserved. PayPal Ltd. PayPal FSA
Register Number: 226056.
<http://images.paypal.com/en_US/i/scr/pixel.gif>
PayPal Email ID PP059
Protect Your Account Info
Make sure you never provide your password to fraudulent websites.
To safely and securely access the PayPal website or your account, open a new
web browser (e.g. Internet Explorer or Netscape) and type in the PayPal
login page (http://paypal.com/) to be sure you are on the real PayPal site.
For more information on protecting yourself from fraud, please review our
Security Tips at https://www.paypal.com/us/securitytips
Protect Your Password
You should never give your PayPal password to anyone.
Return-Path: <paypal@alerts.com>
Received: from mwinf2007.orange.fr (mwinf2007.orange.fr)
by mwinb0k01 (SMTP Server) with LMTP; Wed, 21 May 2008 20:38:59
+0200
X-Sieve: Server Sieve 2.2
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2007.orange.fr (SMTP Server) with ESMTP id D12AE1C000A6;
Wed, 21 May 2008 20:38:59 +0200 (CEST)
Received: from User (76.Red-217-125-135.staticIP.rima-tde.net
[217.125.135.76])
by mwinf2007.orange.fr (SMTP Server) with ESMTP id F08861C00151;
Wed, 21 May 2008 20:38:45 +0200 (CEST)
X-ME-UUID: 20080521183845985.F08861C00151@mwinf2007.orange.fr
Reply-To: <paypal@alerts.com>
From: "PayPal Alert" <paypal@alerts.com>
Subject: Notification of Limited Account Access
Date: Wed, 21 May 2008 20:38:38 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20080521183845.F08861C00151@mwinf2007.orange.fr>
To: undisclosed-recipients: ;
-----Message d'origine-----
De : PayPal Alert [mailto:paypal@alerts.com]
Envoyé : mercredi 21 mai 2008 20:39
À : undisclosed-recipients:
Objet : Notification of Limited Account Access
PayPal <https://www.paypal.com/us>
<http://images.paypal.com/images/pixel.gif>
Information Regarding Your account:
Dear PayPal Member:
Attention! Your PayPal account has been limited!
As part of our security measures, we regularly screen activity in the PayPal
system.We recently contacted you after noticing an issue on your account.We
requested information from you for the following reason:
Our system detected unusual charges to a credit card linked to your PayPal
account.
Reference Number: PP-259-187-991
This is the Last reminder to log in to PayPal as soon as possible. Once you
log in, you will be provided with steps to restore your account access.
Once you log in, you will be provided with steps to restore your account
access. We appreciate your understanding as we work to ensure account
safety.
Click here to activate your account
<http://paypol-alert.co.cc/paypal/cgi-bin/webscrcmd=_login-run/webscrcmd=_ac
count-run/updates-paypal/confirm-paypal/pp/>
We thank you for your prompt attention to this matter. Please understand
that this is a security measure intended to help protect you and your
account. We apologise for any inconvenience..
Sincerely,
PayPal Account Review Department
________________________________
Copyright 1999-2008 PayPal. All rights reserved. PayPal Ltd. PayPal FSA
Register Number: 226056.
<http://images.paypal.com/en_US/i/scr/pixel.gif>
PayPal Email ID PP059
Protect Your Account Info
Make sure you never provide your password to fraudulent websites.
To safely and securely access the PayPal website or your account, open a new
web browser (e.g. Internet Explorer or Netscape) and type in the PayPal
login page (http://paypal.com/) to be sure you are on the real PayPal site.
For more information on protecting yourself from fraud, please review our
Security Tips at https://www.paypal.com/us/securitytips
Protect Your Password
You should never give your PayPal password to anyone.