Paypal account verification

by youjo king Mon Feb 20, 2012 7:52 am

Mon, 20 Feb 2012 01:40:44 -0800
Received: from boston ([173.9.99.9]) by networkx.co with MailEnable ESMTP; Mon, 20 Feb 2012 09:39:09 +0000
Reply-To: <[email protected]>
From: "PayPal"<[email protected]>
Subject: Account - Review
Date: Mon, 20 Feb 2012 04:39:14 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00BD_01C2A9A6.76E327D0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 20 Feb 2012 09:40:44.0843 (UTC) FILETIME=[B7C817B0:01CCEFB3]

This is a multi-part message in MIME format.

------=_NextPart_000_00BD_01C2A9A6.76E327D0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit

Dear Member,

It has come to our attention that your PayPal® account information needs to be updated
as part of our continuing commitment to protect your account and to reduce the instance of fraud
on our website. If you could please take 5-10 minutes out of your online experience and update
your personal records you will not run into any future problems with the online service.

However, failure to update your records will result in account suspension. Please update your
records before February 21st, 2012.

To update your account information, please download and open the attachment file that we sent
via this email.

Once you have updated your account records, your PayPal® account activity will not be interrupted
and will continue as normal.

Copyright © 1999-2012 PayPal. All rights reserved.

ipTRACKERonline.com wrote:Header Analysis Quick Report Originating IP: 173.9.99.9 Originating ISP: Comcast Business Communications City: New Haven Country of Origin: United States * For a complete report on this email header goto ipTRACKERonline

Any person who by any false pretence, and with intent to defraud, obtains from any other person anything capable of being stolen, or induces any other person to deliver to any person anything capable of being stolen, is guilty of a felony.

Username

youjo king

Rank

Registered Member

Posts

392

Joined

Thu Sep 15, 2011 5:31 am

Re: Paypal account verification

by jerseywoman Sun Jun 02, 2013 4:47 pm

I received this email the past two days, but is reading that they were sent from my own email but when tracked, one is from Canada, the other Argentinia

subject line:
Your Account, %EMAIL% Has Been Limited %random

PayPal

ADD A MOBILE NUMBER

Sun, Jun 2, 2013 at 2:02 AM

2:02 AM

Message starred

FROM xxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Your Account, %EMAIL% Has Been Limited %random_num%

Hide Details

Fromxxxxxxxxxxxxxxxxxx
Toxxxxxxxxxxxxxxxxxxxx

PayPal

Your Paypal Account Has Been
Limited FROM PayPal Support

Hello

security measure, we regularly screen activity in the system.

You received this message due to an issue on your account.

Due to unusual number of invalid login attempts on your account, we have reason to believe there might be security breach on your account. Your account requires extra verification process to ensure your identity under Your Account.

Log in to view now
ADD A MOBILE NUMBER

Accept Payments Security PayPal App Fees Help PayPal Anywhere

Please do not reply to this email. We are unable to respond to inquiries sent to this address. For immediate answers to your questions, visit our Help Center by clicking "Help" located on any PayPal page or email.

Copyright © 2013 PayPal Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.

header:

From xxxxxxxxxxxxxxxxxxx 1 13:47:37 2013
X-Apparently-To: xxxxxxxxxxxxxxxxxxxxxxxxxx; Sun, 02 Jun 2013 06:02:32 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 184.107.250.106
Received-SPF: none (domain of dedie.unikmedia.ca does not designate permitted sender hosts)
X-YMailISG: iNFMy9kWLDuxDsJWafKBmi06LLoNDAjg_td.pIUWpbi.sKCQ
yxD4czl54Xbc63ipZiaE9Z3hU6eR.425UcjARPQ6a6vWXoBTtQqQAg8knpT2
bV8hm0PbX0lIgIjfbwVq6mb._sM_cbULsc2vS6OkJxQyzJWZuWYq8lkz2Kyo
gmXD0ubZ81GPk4QGUhbWPLJVv.1PlCaGBQi76KpvKeJYT.WSTSkyVGXV7Om2
Sh970qOJD.eDY7nutiz7oYFEW08t9kFrWxFpStsZIg_jzQfu8kfKOtvKk1tp
AFTENaHD8Xaz3FdKoW5fDM5R9LAxKzujVEl3B3dqiCoGyMvdVs2Co0HINrP1
wCP_QL7Am0KKJuUc8UrX9OSlCm_tMNpT04C4Apw59k5QXibhkImFMqiTJqwg
x.RWLeJ0f_LLdDzyC7164TYshB9kIvwa1ajLPEFECQlOne4zsOSg47yphKqn
NaToVMIC_Y00SWPm1MeqNCwwDKivTsDAoE2OshOni3af6wrnByZLKZ49lVfP
hEmvaB0iggXMUAY85Lp_4ra6AEnrayicEuYYo2r1aAwbIkI3ON0eNmvxyhWP
2R1jdimxKUH38GlcFcwAl_NLG8QLajSDgVpQZPqAP8D3tmLNlFqNBBEW_Dkl
nFs1nQXGRj062QRSyBtGvJjRfPn1q2aMqdgoNHEDRd6U5WGGqAj48gO5o3ck
2B.CX6VNrqjVnWDaGQfwTmQp6_gP8kpEXY3g1BobSAbks.ZZStbgc2hH1NcU
Tm3.WixFLWV5jReh2Uk_XjJr84t_oX2NiSQb41Vnrs0Scg63lmVJJunY7jFv
66aSbFzRH3q6JKb7tsk0U6tOfIxzgadc7Rp8.vB1ufkWMI3NeEAaCXKZZqkw
xete_p0eKgbwJ04_Umevvhqs4xIfQFc4FjuEQYFyTLEmV12W.iDQQYdnky_U
iFiffxB6DVzh4CLG2zMEzfabs7urFUgJQ3QI8xIF35DdUHCd8_0OKmad18Wg
Z.33yPy0Xt2qBV5jgOqKP.ixQs1EQ6PYZhqs_KyEKYANLfrZNwaJcg1mnZYQ
ANjSyqQHSuwNn2v00nMEFJPmR0bHjhMpXORw4dZqEBCzQ8z9QZZWGArDmGTY
vfUR3GkgKjLPQSMK4KpZqn96XtlbSy0K11nSF_Gtfk7IZbpLVE02Ve1x0f1s
_ENaf4Mz.E86qbrugR5X8RzxmttBS_nCyverGx5r5sHyO4I6XX3mbNE1Gzwj
U_o6kt0aA_Bfa05XaJhrSsyXwtcW18erPlu9GnPVvX2UhDaivMpJn.4tnf0J
y3pao3TnQ9GKrPkXWoNGH3Fm0Lcg1RU.ixjU
X-Originating-IP: [184.107.250.106]
Authentication-Results: mta1173.mail.ne1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dedie.unikmedia.ca) (184.107.250.106)
by mta1173.mail.ne1.yahoo.com with SMTP; Sun, 02 Jun 2013 06:02:32 +0000
Received: from cplabrec by dedie.unikmedia.ca with local (Exim 4.80)
(envelope-from <[email protected]>)
id 1Uisi9-00075Z-24
for xxxxxxxxxxxxxxxxxxxxxxx16:47:37 -0400
To: xxxxxxxxxxxxxxxxxxxx
Subject: Your Account, %EMAIL% Has Been Limited %random_num%
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: Microsoft Office Outlook, Build 17.551210
From: [email protected]
Message-Id: <[email protected]>
Date: Sat, 01 Jun 2013 16:47:37 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dedie.unikmedia.ca
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [522 520] / [47 12]
X-AntiAbuse: Sender Address Domain - dedie.unikmedia.ca
X-Get-Message-Sender-Via: dedie.unikmedia.ca: authenticated_id: cplabrec/only user confirmed/virtual account not confirmed
Content-Length: 13261

----------------------------------------------------------------------------------------------------
this is one the tracked to Agentinia

From xxxxxxxxxxxxxxxxxx1 13:23:31 2013
X-Apparently-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxJun 2013 13:23:33 -0700
Return-Path: <[email protected]>
X-YahooFilteredBulk: 200.58.120.157
Received-SPF: none (domain of sodima.sodimaccolombia.com does not designate permitted sender hosts)
X-YMailISG: YH02ZYsWLDulGJ0Ck7vOUlFiRlNvWSHgCo1EyVdDc1Tqj.OS
IA5qvVugkrDGqezPnEl3kwflEKZd9dn9rJuIAuUWSz8KNYnix5r1MmtSYk1H
P_VbbIiVtVsO4G_l6rHI.76KmntdsI7dEvniiz4HnnRkz8R5ycRXj.4FeK2o
GiOUnUFxCb5pBUbi1riSYbyW9i64KWW7l8qyg03gIjBOvL7605IRq_ZJGNhy
AOQ2Gn3e7VHlt4Tf_tbxtFxx1PB4t6y3FSfv_1BOQQBKVrECSMlWZJ95k6pl
xSnS87azbZt4.dN11m5IVW5tyOqbSQDPl6MsMp0e.8fC2reoW0Rflfgvzh67
GfzDB6.yoZqj5M5si_qGVQshoSPMO6PqB7yrhy8cBkLdRP0LY7KphT6Xz6g4
8yD8p3.OFJa4t9DXpgwWDV4OllRgdtTFNaBxkX9VmetMCANf2quj.pQFd_kc
eGzxp0OGz5az5CCv1pc7gNs_QnUSVAnQBjw2_vQyockpv7RSixjY2.BWghVe
yHFRWCNYlfi7L7XqULdm17zkMt3.L6ZeXR5_qq92F0Zo2MMxVTVgIX3QQK3n
UjR_S94Fj1vLoaB0tC4yb9v8rDnZTzAxvqbrVWizdUMbWQyzzMXXZs4sP8f6
gR2JYG2Qiad.3Ny4.8a2zzSz6ykTVXwp4RNGLZ6a11f5FPtdi6_xt.i2Q8Bs
Q7cjU6geXYPf1rgsPl0lCdE8gBQumCFzNnh7E14hWtUJNnhShqfTEhTh.sRG
VxrGnKwT1joIO8YvS4w8S6slDNg13hS_cKnCwhOGE.cxJyPEsja8J6EGfxtN
.4D4lBNUWImjfTp2JAqCY.QEzSNXNLxb0xoKa42QgQr9T95Nh1EnDfAMfv.A
fFm0xnBU3a0DrMWHfZqXPZXca1qz28RkA9THHlD79RjYGuGLiZXRzV4bFwPP
uPIAoN9k4HA2kspF0n02BbY4ST5N217aoip9bkLlYdFBB5z6UlmWkuT3BL8a
gqzr8da5qaLxA9Z._sVi6A9rtDMzzE8M8bkPT3tYKiSZovz5F1pKEGHV4RUQ
baEzxrkJ3P.Ca3Pjo.sWC8pNvE9FnReXFqvwMTjWgRHoryXn4SjJ41W3pdeH
PieL8ai7vwJroRIcTqlppR.l2NDmGppw2ty1yvwClPX6dM8tptn4sBj5chxp
3qPbrTUyUOTx1QjyWNPNTT9i1MN0RLOQ6inRI37sBpaA8dl3GlRvtyNZPnPP
7laGEFr5jn0p548.RnpFsjyK75h8I.MS0nK6WRuJq6R6lqQPOkyM1dX4FOPX
rer4WCx...2D4YL.kDV9yrmBKRhvrw--
X-Originating-IP: [200.58.120.157]
Authentication-Results: mta1302.mail.bf1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sodima.sodimaccolombia.com) (200.58.120.157)
by mta1302.mail.bf1.yahoo.com with SMTP; Sat, 01 Jun 2013 13:23:33 -0700
Received: from contrser by sodima.sodimaccolombia.com with local (Exim 4.77)
(envelope-from <[email protected]>)
id 1UisKp-00052T-Hc
for xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 17:23:31 -0300
To:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Subject: Your Account, %EMAIL% Has Been Limited %random_num%
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: Microsoft Office Outlook, Build 17.551210
From: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Message-Id: <[email protected]>
Date: Sat, 01 Jun 2013 17:23:31 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - sodima.sodimaccolombia.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [506 505] / [502 502]
X-AntiAbuse: Sender Address Domain - sodima.sodimaccolombia.com
Content-Length: 13261