  | No Name Cricklewood, Brent, United Kingdom 2012-11-29 11:01:17 Identity Theft |  PAYPAL Scam Email; Subject: (PayPal) Important Message ; From: PayPal Online <mode.ppl@ppl.on.com> Scammer Information Email from source host ppl.on.com (unknown [81.12.234.242])with ESMTP id 23EB39E679E. ISP: Vodafone Romania S.A. IP/Host Name: 81.12.234.242 Organization: MobiFon S.A. Location: Bucharest,Bucuresti 10,Romania (NB do not click on Link below) ------------------ Received: from mail.familydar.com ([113.39.89.245]) by COL0-MC4-F14.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Wed, 28 Nov 2012 10:52:04 -0800 Received: from ppl.on.com (unknown [81.12.234.242]) by mail.familydar.com (Postfix) with ESMTP id 23EB39E679E for <*******>; Thu, 29 Nov 2012 03:20:39 +0900 (JST) From: PayPal Online <mode.ppl@ppl.on.com> To: ************ Subject: (PayPal) Important Message Date: 28 Nov 2012 20:20:36 +0200 Message-ID: <2******2@ppl.on.com> MIME-Version: 1.0 Content-Type: text/html; charset=\"iso-8859-1\" Content-Transfer-Encoding: quoted-printable Return-Path: mode.ppl@ppl.on.com X-OriginalArrivalTime: 28 Nov 2012 18:52:04.0796 (UTC) FILETIME=[7575D7C0:01CDCD99] Dear valued <b>PayPaI=AE</b> Customer,<br><br> We\'ve temporarily limited what you can do with your account until the issue = is resolved. <br> <br> What\'s the problem? <br> <br> We noticed some unusual activity on the credit card linked to your=20 <b>PayPaI=AE</b> account. <br> <br> Case ID Number: PP-101-212-055-398 <br> <br> How you can help <br> <br> It\'s usually pretty easy to take care of things like this. Most of the time, we just need a little more information about your account. <br> <br> <b>To help us with this and to find out what you can and can\'t do with your account until the issue is resolved, please proceed to our secure webform by= =20 <a rel=3D\"nofollow\" target=3D\"_blank\" href=3D\"http://www.amhmedia.net/uid/\">= clicking here.</a></b> <br> <br>Thanks,<br> <b>PayPaI=AE</b></font> </p> |