[Declude.JunkMail] FW: PayPal Account Confirmation

[Tom Baker | Netsmith Inc]

Title: PayPal

Sorry for posting HTML, but I wanted to preserve the original message at the bottom.

I received this fraudulent attempt at retrieving my paypal username and password from a bellsouth ADSL customer who is probably trying to steal money and probably having much success.

This email comes directly from his DSL modem into your mail server, he has his own SMTP engine.

all the images Link from paypal's official site, however the HTML FORM posts to a port5.com server, which appears to be based in the UK.

 

Received: from 3t1y8s.yahoo.com (adsl-34-73-158.mia.bellsouth.net [67.34.73.158])
 by fw1.netsmith.net (Postfix) with SMTP id 5135E7C07
 for <[EMAIL PROTECTED]>; Fri,  1 Nov 2002 20:27:57 -0600 (CST)
Date: Fri, 01 Nov 2002 18:27:42 -0800
To: [EMAIL PROTECTED]
Subject: PayPal Account Confirmation

 

I have already attempted to pass this message on to paypal, but anyone who has better communications with any authority please report this.

 

I urge everyone to block this in their junkmail rules to protect their users.

This is what I have done

 

[global.cfg]

PAYPALFAKE filter d:\imail\declude\filters\paypal.txt x 0 0
PAYPALFAKE2 filter d:\imail\declude\filters\paypal.txt x 0 0

[paypal.txt]

HEADERS 100  CONTAINS PayPal Account Confirmation

[$default$.junkmail]

PAYPALFAKE SUBJECT [PAYPAL FRAUD! THIS IS FAKE]
PAYPALFAKE2 ROUTETO [your_address_to watch thse get caught]

 

Original Message Below!

 

Thank you,

Tom Baker

MCSE, CCNP

Network Administrator

Netsmith, Inc.

 

 

-----Original Message-----
From: Service PayPal [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 01, 2002 8:28 PM
To: [EMAIL PROTECTED]
Subject: PayPal Account Confirmation

Dear PayPal Customer

This e-mail is the notification of recent innovations taken by PayPal to detect inactive customers and non-functioning mailboxes. The inactive customers are subject to restriction and removal in the next 3 months. Please confirm your email address by logging in to your PayPal account using the form below:

Email Address: Password: This notification expires November 1, 2002

Thanks for using PayPal!

This PayPal notification was sent to your mailbox. Your PayPal account is set up to receive the PayPal Periodical newsletter and product updates when you create your account. To modify your notification preferences and unsubscribe, go to https://www.paypal.com/PREFS-NOTI and log in to your account. Changes to your preferences may take several days to be reflected in our mailings. Replies to this email will not be processed. If you previously asked to be excluded from Providian product offerings and solicitations, they apologize for this e-mail. Every effort was made to ensure that you were excluded from this e-mail. If you do not wish to receive promotional e-mail from Providian, go to http://removeme.providian.com/. Copyright� 2002 PayPal Inc. All rights reserved. Designated trademarks and brands are the property of their respective owners.