Paypal Security Scam from email add: fshcuo@westernunion.com
Beware Paypal account holders! Some of you might received this so-called “Paypal Security” mail. This is a spam or scam mail and never ever entertain it.
Below is the body of the mail which I just copied and pasted here. Normally if you click “Click here to resolve the problem”, you will be redirected to below site,
http://www.cutesense.com/template/serv.html
It is the same if you click “PayPal Center, All Rights Reserved.” You will be again redirected to below URL.
http://www.cutesense.com/template/serv.html
I just removed the HTML codes of the body of the mail.
BODY OF THE MAIL:
From: PayPal Security fshcuo@westernunion.com
To: planet.psc@planet.psc.com
Sent: Thursday, July 21, 2011 3:35 AM
Subject: 1 unread Message!
Dear PayPal Customer,
You have 1 unread Message!
Your PayPal Account is currently locked.
Click here to resolve the problem
PayPal Center, All Rights Reserved.
FULL HEADER OF THE MESSAGE: (I put XXX in the “To” field here because that is my email add)
From PayPal Security Thu Jul 21 02:35:43 2011
X-Apparently-To: XXXXXXXXX@yahoo.de via 87.248.110.187; Thu, 21 Jul 2011 01:37:57 +0000
Return-Path: fshcuo@westernunion.com
X-YahooFilteredBulk: 68.99.120.44
Received-SPF: none (domain of westernunion.com does not designate permitted sender hosts)
X-YMailISG: F7yL72gWLDtuJiIVf67BjokC8u.ad7w9mCYG2ZORRKxQzkcI
7gLVGypxk1nBEukAmN5fsE9C5MQ3XjnGDIe9sGvfNeMlXq4ev4hzxLuv.O06
v4WmmAACQ0sLRgli.NvKpf3NMULth74onEwQVXvhLFaCv0iDvcQUW.DyXDQl
45hlAOOeSPl1Zom7dDqTQxP_ktPK2TYIwJ5wR7tjqrVF1GAxGWf6jno0tGFo
E4VvsutYgX8r.U25ZxmQRtnid6zbajvnXKe1.alye_jIGIxHFPX3hsl.u_Qt
yjUI0Of4o5VxJ3qnCVduiLbMkBQm3l0yb8Vm8FvUNX8uGFC38sYfRH4SKb3W
hkEjdfe2q7M0ACiGJyRqXUS8gXCoDoAx1yJclyh1Gf5g427Y7XpCz55xcB85
V8NAstUwKxfY1pk5q57G34cGPe_dGVGCDGvq.cC_9RGiupWQx8MV_Nijk4UD
lJuNjtfN8DJPQNdnQQdmG30n15QLuEIEZD1ZVbFVRSAON3drdN0g.H21RQ4g
XslP.Y8R9O1tQo4MyWHLTeqtVoAsPY5Bbh_cyp057P3hiFtNNW7SRCeyvmXI
bm8z_RTDl3IwDbIxER5_nru7dhF.gGyT50PHCqh2_ywGcx7XcCIDEmSDN5.s
4jdKkINFSLRJ.czF_vHfKp2pMevnSRj5KXw7AhNQsAio_vTRkAZ1rQL.PMFS
i9zo4adw.OngUFCoXjMwd405d8QHGlR12dbjS98t9jq2w_hm0zFFmLryobPq
0x3LnuAeyEAEG2F2f3D5B43a_mnb1kR7CQ6AbqslF6FjIburbdro2UWDUv0O
KUjTK8YhA4UcxE7N1H6Cn7XT8jXHrYFU6CB3WHM433nQOvx6duRUJCNlTl_F
K9WfjLY4i0XFQsaCUZFS9Ffo.xLhy7FuSsx0yH8GP6llHksVKpRcp.0utmzO
YP_7b28YPtIvGlxSYisHPwCcUBb2xSWe_vetPL3C5vTvZBMDrJNV9ci605CH
2Sv4tGAX0RE-
X-Originating-IP: [68.99.120.44]
Authentication-Results: mta1064.mail.ird.yahoo.com from=westernunion.com; domainkeys=neutral (no sig); from=westernunion.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dukecmmtar03.coxmail.com) (68.99.120.44)
by mta1064.mail.ird.yahoo.com with SMTP; Thu, 21 Jul 2011 01:37:57 +0000
Received: from dukecmimpo01.coxmail.com ([68.99.120.134])
by dukecmmtar03.coxmail.com
(InterMail vM.7.08.02.01 201-2186-121-102-20070209) with ESMTP
id <20110721013756.XILR16168.dukecmmtar03.coxmail.com@dukecmimpo01.coxmail.com>;
Wed, 20 Jul 2011 21:37:56 -0400
Received: from cxxc ([70.182.3.59])
by dukecmimpo01.coxmail.com with bizsmtp
id ARdv1h0041GPnWE01Rdvvt; Wed, 20 Jul 2011 21:37:55 -0400
Reply-To: fshcuo@westernunion.com
From: PayPal Security
To: planet.psc@planet.psc.com
Subject: 1 unread Message!
Date: Wed, 20 Jul 2011 21:35:43 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset=”koi8-u”
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: 20110721013756.XILR16168.dukecmmtar03.coxmail.com@dukecmimpo01.coxmail.com
Content-Length: 381
