An
Email with the Subject "Important information regarding your account." was
received in one of Scamdex's honeypot email accounts on Mon, 09 May 2011 10:55:03 -0700
and has been classified as a Generic Scam Email.
The sender shows as =?X-EUROPA?B?UGF5UGFs?= <security@onlineupdate.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
paypalpaypal.combanklog increditebaychecksafeaccountnotificationprojectserviceinc.fundsentsellonlinemailbank accountshareeurouserreferencerespect will spamsecuritydearhttps://www.paypal.com/pr...fs
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => paypal@o7e.net
[delivery-date:] => Mon, 09 May 2011 10:55:03 -0700
[received:] => Array
(
[0] => from i121-119-167-137.s30.a048.ap.plala.or.jp ([121.119.167.137] helo=mail.up-stair.jp)by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1QJUfc-0008LP-VVfor paypal@o7e.net; Mon, 09 May 2011 10:55:03 -0700
[1] => (qmail 16750 invoked from network); 9 May 2011 19:52:51 +0900
[2] => from unknown (HELO onlineupdate.com) (admin@206.221.225.226) by mail.up-stair.jp with SMTP; 9 May 2011 19:52:51 +0900
)
[from:] => =?X-EUROPA?B?UGF5UGFs?=
[to:] => paypal@o7e.net
[subject:] => =?X-EUROPA?B?SW1wb3J0YW50IGluZm9ybWF0aW9uIHJlZ2FyZGluZyB5b3VyIGFjY291bnQu?=
[date:] => 09 May 2011 06:55:48 -0400
[message-id:] => <20110509065548.76D79790BB244D36@onlineupdate.com>
[mime-version:] => 1.0
[content-type:] => text/html;charset="iso-8859-1"
[content-transfer-encoding:] => base64
[x-spam-status:] => No, score=0.8
[x-spam-score:] => 8
[x-spam-bar:] => /
[x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: PayPal May 2011 Dear users of PayPal services, Due to recentchanges in PayPal's Service Agreement you need to submit additional detailson your PayPal account. Starting from 2011 all PayPal accounts will comewith complete detailed information! Identity protection matters. And PayPalworks day and night to help keep your identity safe. [...] Content analysis details: (0.8 points, 4.5 required)pts rule name description---- ---------------------- --------------------------------------------------0.0 DNS_FROM_RFC_DSN RBL: Envelope sender in dsn.rfc-ignorant.org-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%[score: 0.0000]0.0 HTML_MESSAGE BODY: HTML included in message0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts1.0 RDNS_DYNAMIC Delivered to internal network by host withdynamic-looking rDNS0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Dear users of PayPal services,
Due to recent changes in PayPal's Service Agreement you need to submit additional details on your PayPal account. Starting from 2011 all PayPal accounts will come with complete detailed information!
Identity protection matters. And PayPal works day and night to help keep your identity safe.
Identity protection matters. Get Verified!
According the new changes in Service Agreement any unverified account will be deleted from the system in 72 hours after receiving this letter.
Your Account
Tips to Protect Your Account
PayPal's world class fraud investigators share
5 important actions you can take to help prevent identity theft and protect your account.
Update Your Profile
If you've closed a credit card or bank account recently, remember to go to PayPal's website
to update your profile.
Identity Protection Highlights
New spoof tutorial
Learn how to spot and avoid fraudulent "spoof" emails and websites with PayPal's handy
5-step spoof tutorial.
Protect yourself with tools
Guard yourself against "spoof" emails with the SafetyBar, and against fraudulent websites
with the eBay Toolbar.
Checklist if you are a victim...
When you suspect a problem with your identity, you have to act fast. Use PayPal's checklist
for what you should do.
Merchant Offers
FREE Norton AntiSpam download with purchase of Norton AntiVirus.
Unlimited listening and downloading. All the music you want. FREE trial.
Learn about and fund locally run social and environmental projects.
Thank You for using PayPal!
This notification was sent to you by PayPal. To modify your notification preferences,
log in to your PayPal account, click the Profile sub-tab, then click the Notifications link under
Account Information. Changes may take up to 10 days to be reflected in our mailings. PayPal will
not sell or rent any of your personally identifiable information to third parties. For more information
about the security of your information, read our Privacy Policy at
https://www.paypal.com/privacy.
