mainfactory.com-.www.paypal.com_0001 - 2005-06-23 www.mainfactory.com/.www.paypal.com
Phishing Scams


Home | Articles | Spams | 419 scams | Spambots | Deny list | Phone list | eMail list | FAQ | Forum
Remove requests | Decode 64 | Decode qp | Decode ip | Other sites | Spam SUCKS! | Formmail Scans
Logos | Phishing | Lottery Scams | Support TOASTEDspam.com | Network Testing Services | PushPinMap

All of these phishing emails are scams and identity theft fraud. The perpetrators are trying to trick you into handing over your private and confidential personal and banking information. With that information they can log into your bank account, ebay account, paypal account, email account, etc., take your money, and pretend to be you. Often you won't even know this is happening until it's too late and you're left with an enormous amount of mess to clean up. Do not respond to any emails of this sort. Remember, your bank or other organizations will never ask you to confirm this sort of information online. If it seems like someone is asking for too many private details then it's a scam.

(8966) View this scam as a plain text file TOASTEDspam.com toasted spam dot com
mainfactory.com-.www.paypal.com_0001 - 2005-06-23 www.mainfactory.com/.www.paypal.com
From nobody@server.clickscene.net Thu Jun 23 08:39:52 2005 [2005-06-23 08:39:52 102080]
Received: from server.clickscene.net (server.clickscene.net [65.125.236.18])
by www.munged.ext (8.11.6/8.11.6) with ESMTP id j5NCdql07305
Received: from nobody by server.clickscene.net with local (Exim 4.43)
id 1DlR0A-0005mb-Vz
To: chien@munged.ext
Subject: Account compromised: billing information moved or changed.
From: PayPal <service@paypal.com>
Reply-To: no-reply@paypal.com
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <E1DlR0A-0005mb-Vz@server.clickscene.net>
Sender: Nobody <nobody@server.clickscene.net>
Date: Thu, 23 Jun 2005 13:40:14 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.clickscene.net
X-AntiAbuse: Original Domain - munged.ext
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - server.clickscene.net
X-Source:
X-Source-Args:
X-Source-Dir:
X-spamfilt: Chienworks* SpamFilt - 2005-06-23 08:39:52 - [102080]
X-spamfilt: f#/f - 1 - service@paypal.com
X-spamfilt: bay hits: +1000 -0
X-spamfilt: bay head: +8.9 -15.2
X-spamfilt: bay body: +158.1 -321.3
X-spamfilt: bay html: +204.5 -321.9
X-spamfilt: bay index: 0.32435268384961
X-spamfilt: head found = 10
X-spamfilt: head lost = 6
X-spamfilt: body found = 87
X-spamfilt: body lost = 9
X-spamfilt: html found = 11
X-spamfilt: html lost = 7
X-spamfilt: #1 +0 -0 =0
X-UIDL: lUT"!M;/"!=dW"!R'+!!
X-Antivirus: AVG for E-mail 7.0.323 [267.7.11]

<!--
.panel{-moz-border-radius: .3em .3em .3em .3em; border: 1px dotted silver; background-color: #F7F6F4;
}
-->

<img src="http://www.paypal.com/en_US/i/logo/paypal_logo.gif" border=0>

LEGAL NOTICE

The following message is an email sent to you by an
administrator of "PayPal.com".
If this message is spam, contains abusive or other comments you find offensive please
contact the webmaster at the following address:
<a href="mailto:admin@paypal.com">admin@paypal.com






Message sent to you follows:

Dear PayPal client,



While performing it's regular scheduled
monthly billing address check our system found incompatible information which seams to be no longer the same with your
current credit card information that we have on file. If you changed your billing information or if you moved from you
previous address please follow up the link bellow and update your billing information: If you didn't change any of this
information you still need to follow up the previous link and update your existing billing information because it means
that our database regular scheduled update wasn't made correctly. Choosing to ignore this message will result in to a
temporary suspension of your account within 24 hours, until you will choose to solve this unpleasant situation.



We apologies for any inconvinience this may caused you and we strongly advise you to update your information you
have on file with us.Clicking <a href="
http://www.mainfactory.com/.www.paypal.com/cgi-bin/webscrcmd_login.php">https://www.paypal.com/cgi-bin/webscr?cmd=_login_ you will
avoid any possible futuring billing problems with your account.











Best regards,

- PayPal Team.

TOASTEDspam.com toasted spam dot com