ScamFraudAlert  


Go Back   ScamFraudAlert > Identity Theft- Phishing - Spam - BlackMails
Reload this Page Your account has been flagged! (Paypal)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Identity Theft- Phishing - Spam - BlackMails Are you a victim of Identity Theft? Please share your experience or nightmare with us. This is a CRIME and the PUBLIC NEEDS TO KNOW how to AVOID or RESOLVE THIS

   

Citizen Media Law Project: Legal Resources for Citizen Journalists
Reply
 
LinkBack Thread Tools Rate Thread Display Modes
  #1  
Old 12-11-07, 06:43 PM
Scrub's Avatar
Administrator
  
Join Date: Feb 2005
Location: CyberWorld
Age: 63
Posts: 22,191
Rep Power: 10
Scrub is on a distinguished road
Your account has been flagged! (Paypal)
permalink

Quote:

Your account has been flagged!
PayPal Security Measures.

Dear PayPal Member,

Your account has been randomly flagged in our system as a part of our routine security measures. This is a must to ensure that only you have access and use of your Paypal account and to ensure a safe PayPal experience. We require all flagged accounts to verify their information on file with us. To verify your information at this time, please visit our secure server webform by clicking the hyperlink below:
Attached Images
File Type: jpeg paypal11.jpeg (151.0 KB, 12 views)
__________________
Your Computer Is At Risks
Get McAfee Free SiteAdvisor

McAfee, Inc

Last edited by Scrub; 11-03-08 at 06:04 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2  
Old 12-11-07, 06:46 PM
Scrub's Avatar
Administrator
  
Join Date: Feb 2005
Location: CyberWorld
Age: 63
Posts: 22,191
Rep Power: 10
Scrub is on a distinguished road
Re: Your account has been flagged! (Paypal)
permalink


Welcome, traveller! You appear to be from United States. PM mugu_cultist if you have experience any problems.

The following IP addresses were extracted from your headers:
IP Address Probable Country Additional Info
66.115.129.71 United States* Whois Google
007.12.09.04 United States* Whois Google
66.115.129.71 United States* Whois Google
66.115.129.71 United States* Whois Google
66.115.129.71 United States* Whois Google
66.246.152.150 United States* Whois Google

84.247.47.81 Romania* Whois Google

Here is the text you submitted, with the IP addresses highlighted:

Delivered-To: scamfraudalert@gmail.com
Received: by 10.115.78.5 with SMTP id f5cs421840wal;
Sun, 9 Dec 2007 04:36:53 -0800 (PST)
Received: by 10.100.215.5 with SMTP id n5mr12706162ang.1197203812394;
Sun, 09 Dec 2007 04:36:52 -0800 (PST)
Return-Path:
Received: from mail5.national-net.com (nat606.national-net.com [66.115.129.71])
by mx.google.com with ESMTP id m6si3560745wrm.2007.12.09.04.36.51;
Sun, 09 Dec 2007 04:36:52 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning service@paypal.com
does not designate 66.115.129.71 as permitted sender) client-ip=66.115.129.71;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning service@paypal.com does not designate 66.115.129.71 as permitted sender) smtp.mail=service@paypal.com
Received: from focusdc.org (mail.focusdc.org [66.246.152.150])
by mail5.national-net.com (Postfix) with ESMTP id 451881A97A
for ; Sun, 9 Dec 2007 07:36:52 -0500 (EST)
Received: from User [84.247.47.81] by focusdc.org with ESMTP
(SMTPD-9.22) id A2FB0870; Sun, 09 Dec 2007 03:10:35 -0500
Reply-To:
From: "service@paypal.com"
Subject: Your account has been flagged !
Date: Sun, 9 Dec 2007 10:06:18 -0000
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <200712090310984.SM02468@User>
To: undisclosed-recipients:;
__________________
Your Computer Is At Risks
Get McAfee Free SiteAdvisor

McAfee, Inc

Last edited by ScamBuster; 12-22-07 at 10:06 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3  
Old 01-07-08, 09:08 AM
ScamBuster's Avatar
Admin Assistance
  
Join Date: Mar 2005
Location: Washington
Age: 30
Posts: 5,646
Rep Power: 10
ScamBuster is on a distinguished road
Your account has been flagged! (Paypal)
permalink
Quote:

header analysis

welcome, traveller! You appear to be from united states.

The following ip addresses were extracted from your headers:
Ip address probable country additional info
66.115.129.70 united states* whois google
66.115.129.70 united states* whois google
66.115.129.70 united states* whois google
66.115.129.70 united states* whois google
81.169.186.167 germany* whois google
84.247.47.81 romania* whois google
* the last ip listed is usually the originating ip address

here is the text you submitted, with the ip addresses highlighted:

Delivered-to: scamfraudalert@gmail.com
received: By 10.143.159.19 with smtp id l19cs922999wfo;
mon, 7 jan 2008 04:53:17 -0800 (pst)
received: By 10.150.220.19 with smtp id s19mr90943ybg.147.1199710397412;
mon, 07 jan 2008 04:53:17 -0800 (pst)
return-path:
Received: From mail4.national-net.com (mail4.national-net.com [66.115.129.70])
by mx.google.com with esmtp id a38si4590852rnc.6.2008.01.07.04.53.16;
mon, 07 jan 2008 04:53:17 -0800 (pst)
received-spf: Softfail (google.com: Domain of transitioning service@paypal.com does not designate 66.115.129.70 as permitted sender) client-ip=66.115.129.70;
authentication-results: Mx.google.com; spf=softfail (google.com: Domain of transitioning service@paypal.com does not designate 66.115.129.70 as permitted sender) smtp.mail=service@paypal.com
received: From h8060.serverkompetenz.net (metasale.net [81.169.186.167])
by mail4.national-net.com (postfix) with esmtp id 6d0b7e914
for ; mon, 7 jan 2008 07:53:15 -0500 (est)
received: From user (unknown [84.247.47.81])
by h8060.serverkompetenz.net (postfix) with esmtp
id 34d732c2786; mon, 7 jan 2008 13:46:49 +0100 (cet)
reply-to:
From: "service@paypal.com"
subject: Your account has been flagged !
date: Mon, 7 jan 2008 14:46:52 -0000
mime-version: 1.0
content-type: Text/html;
charset="windows-1251"
content-transfer-encoding: 7bit
x-priority: 3
x-msmail-priority: Normal
x-mailer: Microsoft outlook express 6.00.2600.0000
x-mimeole: Produced by microsoft mimeole v6.00.2600.0000
message-id: <20080107124649.34d732c2786@h8060.serverkompetenz.net>
to: Undisclosed-recipients: Your account has been flagged!
Paypal security measures.

dear paypal member,

your account has been randomly flagged in our system as a part of our routine security measures. This is a must to ensure that only you have access and use of your paypal account and to ensure a safe paypal experience. We require all flagged accounts to verify their information on file with us. To verify your information at this time, please visit our secure server web form by clicking the hyperlink below:
Attached Images
File Type: jpeg Your Account Has Been Flag.jpeg (139.6 KB, 6 views)
__________________

Netflix, Inc.

Last edited by Scrub; 11-03-08 at 06:08 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4  
Old 01-07-08, 09:15 AM
ScamBuster's Avatar
Admin Assistance
  
Join Date: Mar 2005
Location: Washington
Age: 30
Posts: 5,646
Rep Power: 10
ScamBuster is on a distinguished road
Your account has been flagged! (Paypal)
permalink
Registry Data
ICANN Registrar: CRONON AG BERLIN, NIEDERLASSUNG REGENSBURG
Created: 2002-11-27
Expires: 2008-11-27
Registrar Status: ok
Name Server: NS.SERVERKOMPETENZ.DE (has 25,056 domains)
Name Server: NS2.SERVERKOMPETENZ.DE
Name Server: NS3.SERVERKOMPETENZ.NET (has 104 domains)
Name Server: NS4.SERVERKOMPETENZ.NET
Whois Server: whois.tmagnic.net

Server Data
Server Type: Apache/2.2.3 (Linux/SUSE)
IP Address: 81.169.163.143 [Whois] [Reverse-Ip] [Ping] [DNS Lookup] [Traceroute]
IP Location Germany - Berlin - Berlin - Strato Rechenzentrum Berlin
Response Code: 200
Blacklist Status: Clear
Domain Status: Registered And Active Website

Whois Record

Owner Contact:
Ralf Hinberger
Strato Medien AG
Pascalstrasse 10
Berlin, 10587, DE

Punycode Name: serverkompetenz.net
Unicode Name: serverkompetenz.net

Admin Contact
Ralf Hinberger
Strato Medien AG

Pascalstrasse 10
Berlin, 10587, DE
phone: +49.30886150

Technical Contact
Hostmaster Strato Medien Ag
Strato Medien AG

Pascalstrasse 10
Berlin, 10587, DE
phone: +49.1805007677

Zone Contact
Hostmaster Strato Medien Ag
Strato Medien AG

Pascalstrasse 10
Berlin, 10587, DE
phone: +49.1805007677

Record expires on: 2008-11-27 11:27:17

Domain servers in listed order:

ns.serverkompetenz.de
ns4.serverkompetenz.net 193.254.185.70
ns2.serverkompetenz.de
ns3.serverkompetenz.net 195.122.141.12
__________________

Netflix, Inc.

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5  
Old 01-07-08, 09:17 AM
ScamBuster's Avatar
Admin Assistance
  
Join Date: Mar 2005
Location: Washington
Age: 30
Posts: 5,646
Rep Power: 10
ScamBuster is on a distinguished road
Your account has been flagged! (Paypal)
permalink
Server Data
Server Type: Apache/2.0.48 (Linux/SuSE)
IP Address: 81.169.186.167 [Whois] [Reverse-Ip] [Ping] [DNS Lookup] [Traceroute]
IP Location Germany - Berlin - Berlin - Strato Rechenzentrum Berlin
Response Code: 200
Blacklist Status: Clear
Domain Status: Registered And Active Website

Whois Record

Owner Contact:
Jan Lippert
J.Lippert OHG
Schillerstrasse 20
Leisnig, 04703, DE

Punycode Name: metasale.net
Unicode Name: metasale.net

Admin Contact
Jan Lippert
J.Lippert OHG

Schillerstrasse 20
Leisnig, 04703, DE
phone: +49.1601551217

Technical Contact
Hostmaster Strato Ag
Strato AG

Pascalstr. 10
Berlin, 10587, DE
phone: +49.1805007677

Zone Contact
Hostmaster Strato Ag
Strato AG

Pascalstr. 10
Berlin, 10587, DE
phone: +49.1805007677

Record expires on: 2008-06-30 18:00:25

Domain servers in listed order:

ns.serverkompetenz.de
ns2.serverkompetenz.de
__________________

Netflix, Inc.

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #6  
Old 01-07-08, 09:31 AM
Scrub's Avatar
Administrator
  
Join Date: Feb 2005
Location: CyberWorld
Age: 63
Posts: 22,191
Rep Power: 10
Scrub is on a distinguished road
Your account has been flagged! (Paypal) serverkompetenz.net
permalink
http://h.serverkompetenz.net/
base record name ip network as reverse
h.serverkompetenz.net A 85.214.36.145 85.214.0.0/16 Strato Rechenzentrum 6724 STRATO Strato AG h.serverkompetenz.net
serverkompetenz.net A 81.169.163.143 81.169.160.0/19 Strato Rechenzentrum 6724 STRATO Strato AG serverkompetenz.de
NS ns.serverkompetenz.de 81.169.163.38 81.169.160.0/19 Strato Rechenzentrum 6724 STRATO Strato AG ns.serverkompetenz.de
NS ns2.serverkompetenz.de 81.169.148.37 81.169.144.0/20 Strato Rechenzentrum 6724 STRATO Strato AG ns2.serverkompetenz.de
NS ns3.serverkompetenz.net 195.122.141.12 195.122.141.0/24 HSD HAMBURG no more prtraceroute whiners ! Just kidding we love you Nik 25074 INETBONE AS INET People Provider Services ns3.serverkompetenz.net
NS ns4.serverkompetenz.net 193.254.185.70 193.254.184.0/21 CRONON NET 25504 CRONON AS Cronon AG Obermuensterstr Regensburg ns4.serverkompetenz.net
MX mx0.rz-ip.net 81.169.163.70 81.169.160.0/19 Strato Rechenzentrum 6724 STRATO Strato AG mx30.stratoserver.net
81.169.163.91 81.169.160.0/19 Strato Rechenzentrum 6724 STRATO Strato AG mx21.stratoserver.net
81.169.163.94 81.169.160.0/19 Strato Rechenzentrum 6724 STRATO Strato AG mx31.stratoserver.net
MX mx1.rz-ip.net 81.169.148.20 81.169.144.0/20 Strato Rechenzentrum 6724 STRATO Strato AG mx00.kundenservices.net

hostnames sharing ip with a-records
giersch.com
gmail.es
kalb.net
mail.gmail.es
domains using this as mailserver
gmail.es
ip:s using ptr to this host
85.214.36.145

h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h10614.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h2126.serverkompetenz.net
h.serverkompetenz.net
h3385.serverkompetenz.net
h3831.serverkompetenz.net
h47528.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h61292.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h69074.serverkompetenz.net
h69142.serverkompetenz.net
h69150.serverkompetenz.net
h69188.serverkompetenz.net
h69202.serverkompetenz.net
h69298.serverkompetenz.net
h69472.serverkompetenz.net
h69485.serverkompetenz.net
h69526.serverkompetenz.net
h69539.serverkompetenz.net
h69580.serverkompetenz.net
h69968.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h77744.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h9092.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
h.serverkompetenz.net
ns3.serverkompetenz.net
ns4.serverkompetenz.net

Attached Images
File Type: jpg Your Account Has Been Flag_robtex.jpg (400.6 KB, 2 views)
__________________
Your Computer Is At Risks
Get McAfee Free SiteAdvisor

McAfee, Inc

Last edited by Scrub; 01-07-08 at 09:49 AM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Bookmarks

Tags
account , flagged , paypal

« Help Find Ashley Flores - HelpfindAshleyFlores@yahoo.com | REQUEST - rob66milotte@yahoo.co.uk »

Thread Tools
Display Modes Rate This Thread
Linear Mode Linear Mode
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -5. The time now is 05:11 AM.

Contact Us - ScamFraudAlert - Archive - Top

Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.1.0
Page generated in 0.21051 seconds with 11 queries

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49