Just want to warn and suggest people might consider putting up manual
blocks. Last few days I gotten a few supposedly "Urgent Paypal account
update" notices. However this is NOT coming from PayPal network.
They want you to login and update your account info because supposedly
a server of paypals caused corruption. Their is a link posted in this
html message that looks like it points to paypal.com's login page
HOWEVER the link in the html code points to
http://www.paypalsys.com/cgibin/webscr/?cmd=_login-run
not the additional SYS in the domain name.
Also when you look at the headers of the e-mail it comes from
ehost.com and this site IS listed with spews.
http://spews.org/html/S1519.html
What scares me the most is now I gotten this e-mail to THREE of my
e-mail addresses on file with paypal. They have been spread out over
the last 2 days.
And they try to "sweeten" the deal and really get the customer to go
and login by claiming
"Because of the inconvenience this causes we are giving all users that
repair their missing data their next two incoming transfers for free!
You will pay no fees for your next two incoming transfers*"
Received: from eweb16.ehost.com [65.212.149.23] by imail.fament.com with ESMTP
(SMTPD32-7.12) id A50A19BC00C6; Wed, 11 Sep 2002 22:07:54 -0500
Received: (from nobody@localhost)
by eweb16.ehost.com (8.11.2/8.11.2) id g8C34bJ28468;
Wed, 11 Sep 2002 20:04:37 -0700
Date: Wed, 11 Sep 2002 20:04:37 -0700
From: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Subject: URGENT: PayPal Account Update
is part of the headers.
Do your clients and customers a favour block this person from the look
of it this scum bag (pardon my language but this is the works of a con
artists that seems to been around for a longer time).
Best regards,
Eje Gustafsson mailto:[EMAIL PROTECTED]
---
The Family Entertainment Network http://www.fament.com
Phone : 620-231-7777 Fax : 620-231-4066
eBay UserID : macahan
- Your Full Time Professionals -
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
