Re: [vchkpw] Vchkpw@inter7.com - Paypal account limited.
On Saturday 08 May 2004 02:41 pm, [EMAIL PROTECTED] wrote:
[snip scam]
this is one of those times I wish ezmlm{,-idx} put the original envelope
sender in the headers of the email somehwere.
MY KINGDOM FOR A PATCH!
;)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
Re: [vchkpw] Vchkpw@inter7.com - Paypal account limited.
On Sunday 09 May 2004 10:46 am, Jeremy Kitchen wrote:
On Saturday 08 May 2004 02:41 pm, [EMAIL PROTECTED] wrote:
[snip scam]
this is one of those times I wish ezmlm{,-idx} put the original envelope
sender in the headers of the email somehwere.
MY KINGDOM FOR A PATCH!
;)
So anywho, I looked in the archive/ directory for this message, found it, and
it appears [EMAIL PROTECTED] somehow got added to the list.
Amazing.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
Re: [vchkpw] Vchkpw@inter7.com - Paypal account limited.
On Sunday 09 May 2004 10:46 am, Jeremy Kitchen wrote:
On Saturday 08 May 2004 02:41 pm, [EMAIL PROTECTED] wrote:
[snip scam]
this is one of those times I wish ezmlm{,-idx} put the original envelope
sender in the headers of the email somehwere.
MY KINGDOM FOR A PATCH!
;)
So anywho, I looked in the archive/ directory for this message, found it,
and
it appears [EMAIL PROTECTED] somehow got added to the list.
-Jeremy
interesting... if you have the origional email, you might wanna forward it
to [EMAIL PROTECTED] from what i've seen they do pursue. i've forwarded
the email that was to the list, which at least gets them the info to
target that website, but i would imagine the headers help them
Re: [vchkpw] Vchkpw@inter7.com - Paypal account limited.
[EMAIL PROTECTED] wrote: Dear PayPal user Dear [EMAIL PROTECTED], We recently reviewed your account, and suspect that your PayPal account may have been accessed by an unauthorized third party. Protecting the security of your account and of the PayPal network is our primary concern. Therefore, as a preventative measure, we have temporarily limited access to sensitive PayPal account features. Click below in order to regain access to your account: https://www.paypal.com/cgi-bin/webscr?cmd=_login-run For more information about how to protect your account, please visit PayPal's Security Center, accessible via the "Security Center" link located at the bottom of each page of the PayPal website. We apologize for any inconvenience this may cause, and appreciate your assistance in helping us maintain the integrity of the entire PayPal system. Thank you for your prompt attention to this matter. Sincerely, The PayPal Team Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the header of any page. PayPal Email ID PP198 PayPal Email ID PP316 right...
Re: [vchkpw] Vchkpw@inter7.com - Paypal account limited.
[EMAIL PROTECTED] wrote: Dear [EMAIL PROTECTED], right... the links https://%32%31%31%2E%32%38%2E%31%35%35%2E%32%31%30/%2E%76%65%72%69%66%69%63%61%74%69%6F%6E/%68%69%64%65/%69%6E%64%65%78%32%2E%68%74%6D; and a window.status=https://www.paypal.com/cgi-bin/webscr?cmd=_login-run the origional email should be forwarded w/header info to [EMAIL PROTECTED]: http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/email-security-outside
Re: [vchkpw] Vchkpw@inter7.com - Paypal account limited.
[EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote: Dear [EMAIL PROTECTED], right... the links https://%32%31%31%2E%32%38%2E%31%35%35%2E%32%31%30/%2E%76%65%72%69%66%69%63%61%74%69%6F%6E/%68%69%64%65/%69%6E%64%65%78%32%2E%68%74%6D" and a window.status=https://www.paypal.com/cgi-bin/webscr?cmd=_login-run the origional email should be forwarded w/header info to [EMAIL PROTECTED]: http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/email-security-outside well, go right ahead
Re: [vchkpw] Vchkpw@inter7.com - Paypal account limited.
[EMAIL PROTECTED] wrote: the origional email should be forwarded w/header info to [EMAIL PROTECTED]: http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/email-security-outside well, go right ahead ahh, my bad... i never even saw it the first time though -- spam-filtering i pulled it from the junk and forwarded.
RE: [vchkpw] Vchkpw@inter7.com - Paypal account limited.
Title: Dear PayPal user Cool, a mailing list with its own paypal account... hehe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, 14 April 2004 6:16 PMTo: [EMAIL PROTECTED]Subject: [vchkpw] [EMAIL PROTECTED] - Paypal account limited. Dear [EMAIL PROTECTED],We recently reviewed your account, and suspect that your PayPal account mayhave been accessed by an unauthorized third party. Protecting the securityof your account and of the PayPal network is our primary concern.Therefore, as a preventative measure, we have temporarily limited access tosensitive PayPal account features.Click below in order to regain access to your account:https://www.paypal.com/cgi-bin/webscr?cmd=_login-run For more information about how to protect your account, please visitPayPal's Security Center, accessible via the "Security Center" link locatedat the bottom of each page of the PayPal website. We apologize for any inconvenience this may cause, and appreciate yourassistance in helping us maintain the integrity of the entire PayPalsystem. Thank you for your prompt attention to this matter.Sincerely,The PayPal TeamPlease do not reply to this e-mail. Mail sent to this address cannot beanswered. For assistance, log in to your PayPal account and choose the"Help" link in the header of any page.PayPal Email ID PP198PayPal Email ID PP316
Re: [vchkpw] Vchkpw@inter7.com - Paypal account limited.
Actually, this is a scam of some sort. It attempts to send you to the following URL: http://211.114.61.195/css/.verification/hide/index2.htm I'm contacting PayPal and nlc21.com, owner of the server hosting the file (probably compromised). On Apr 14, 2004, at 5:47 AM, [EMAIL PROTECTED] wrote: We recently reviewed your account, and suspect that your PayPal account maybr have been accessed by an unauthorized third party. Protecting the securitybr of your account and of the PayPal network is our primary concern.br Therefore, as a preventative measure, we have temporarily limited access tobr sensitive PayPal account features.br Click below in order to regain access to your account:br A HREF=http://%32%31%31%2E%31%31%34%2E%36%31%2E%31%39%35/%63%73%73/ %2E%76%65%72%69%66%69%63%61%74%69%6F%6E/%68%69%64%65/ %69%6E%64%65%78%32%2E%68%74%6D onMouseOver=window.status='https://www.paypal.com/cgi-bin/webscr? cmd=_login-run'; return truehttps://www.paypal.com/cgi-bin/webscr?cmd=_login-run/A br -- Tom Collins - [EMAIL PROTECTED] QmailAdmin: http://qmailadmin.sf.net/ Vpopmail: http://vpopmail.sf.net/ Info on the Sniffter hand-held Network Tester: http://sniffter.com/
