Account Notification (PayPal Phishing)

PayPal Case ID: PP-799-230-585-604

Dear Valued Customer,

Our account review team have currently set a limitation on your account. This may mean someone has used your PayPal account without your knowledge or approval. From time to time, limitations may be placed on accounts when unusual or suspicious activities are detected, to safeguard you from potential losses. We know this can be frustrating, but limitations were set to protect you and your account. To lift the limitations, please download the attached material that we have provided in this email. You may then fill in the form that we have supplied. After PayPal verifies your information, the limitations will be lifted. However, if we request more information, continue to respond promptly to speed up the resolution process. Please do understand that this is a security measure intended to protect your account.

Thank you,
PayPal Security Team

Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, you may download the attachment and follow the steps.

Email analysis :

NOTE : Mime-Version : 1.0
NOTE : Return-Path : < staff2@reports.com >
NOTE : X-Remote : 173.244.162.229

NOTE : (e5.a2.f4.static.xlhost.com)
NOTE : (HELO WIN-38GA3HC4B51.domain.com)
NOTE : Received : from 173.244.162.229 ([140.117.156.191])

NOTE : Account Notification

Phishing analysis :

- The phishing was an html page.
- The page is available here : http://pastebin.com/raw/1BsLNUUu

This Is For Real

For Your Attention

I know you will be skeptical to reply my email base on what is happening in the internet world today. One have to be very careful as scam has taken over the internet today to defraud innocent citizens, this has made it very difficult for people to believe anything that comes through the internet. I got your contact from your Email domain hence the desire to contact you is for partner with me. If you are honest and can be trusted, I think we can work together on this project. I am an American and you should be rest assured that I cannot be involved in scam in any way. I am Gen.Raymond Odierno, from the U.S. Army; Among those deployed from Iraq in the beginning of the war in 2003.I really need your help in assisting me with the safe keeping of my funds which was moved to a private Security Company from Iraq. I hope you can be trusted? Though, I would like to hold back some information for security reasons for now until you have found time to visit the BBC website stated below to enable you have an insight of what I intend sharing with you, believing that it would be of your desired interest one-way or the other.

http://news.bbc.co.uk/2/hi/middle_east/2988455.stm

I wait to hear from you having visited the above website to enable us discuss on a more clarifying manner to the best of your understanding. I must say that I am very uncomfortable sending this message to you without knowing truly if you would misconstrue the importance and decides to go public. In this regards, I will not hold back to say that the essence of this message is strictly for mutual benefit between you and I and nothing more. I will be vivid and coherent in my next message. meanwhile, could you send me an email confirming that you have visited the site. Reply to this e-mail for security reasons; (generalrayodierno@qq.com)

Best Regards
Gen.Ray.

Email analysis :

NOTE : officebox00@angelsbaseball.com
NOTE : X-Originating-Ip : [192.121.113.65]

€950,000.00 Euro-

Good day,

(€950,000.00 Euro) has been assigned to you by the Qatar Foundation Endowment 2016. Kindly contact the Chief Executive Officer of the Qatar Foundation for more info. Contact e-mail for more information: qf59625@gmail.com

Yours sincerely,
Mr Rashid Al-Naimi.

Chief Executive Officer of Qatar Foundation Endowment 2016.

Email analysis :

NOTE : qf59625@gmail.com
NOTE : Qatar@qatar.qa
NOTE : Received : from srv-sbs01.HMPTSFirm.local (unknown [122.3.235.125])

NOTE : by mail.philrice.gov.ph

Mr. David Mark

WESTERN UNION MONEY TRANSFER. UNDER WARD BANK. P.L.C. DEPARTMENT

I am contacting you because I've sent you the first payment of $5,000.00 today from your winning funds total amount of $7.5Million USD, Therefore you need to contact Western Union agent Mr. David Mark for him to give you the transfer payment information and MTCN.

W.U Agent: Mr. David Mark
Email:mr.davidmark34@hotmail.com
Phone: (+229)-98753623

Please try to contact him today for him to furnish you with the payment information also remember to indicate the registration code of EB-2520 to him when e-mailing or calling him, perhaps he will be sending you $5,000.00 daily as per my discussion with him. Fill your details below for reference purposes:

NAME OF CUSTOMER::::::::::::::::::::::::::::::::::::::::::
ADDRESS:::::::::::::::::::::::::::::::::::::::::::::
COUNTRY::::::::::::::::::::::::::::::::
TELPHONE:::::::::::::::::::::::::::::
YOUR PHONE THAT IS RECEIVING SMS::::::::::::::::::::::::::
OCCUPATION::::::::::::::::::::::
SECOND EMAIL ADDRESS :::::::::::::::::::::::::

Sincerely
Mr. William Anthony
IMF Managing Director Benin

Email analysis :

NOTE : mr.davidmark34@hotmail.com
NOTE : MR.@bridge.ocn.ne.jp
NOTE : X-Originating-Ip : [41.86.234.165]

WORK FROM HOME

Katsuo Industries Ltd
Saito Corporation
2-6, Kita-Shinagawa 5-chome,
Shinagawa-ku, Tokyo 141-8688, Japan
Tel: 00813-45781499

Greetings,

My Name is Mr. Marcus Yen, I am the Recruitment Manager of Katsuo Industries Ltd Japan We are in need of a Reputable Company/Individual in Canada/USA that can act as our Company Sales Representative (Intermediary between Katsuo Industries Ltd and its clients in Canada and USA regions). If interested, kindly indicate your interest

by replying to this email: katsuoindu@job4u.com

Note: The job will only take few minutes of your time daily. You can Earn Extra dollar while doing your normal job/Business.

Mr. Marcus Yen
Recruitment Manager
Katsuo Industries Ltd

Email analysis :

NOTE : katsuindu@outlook.com
NOTE : mecanicajoaquim@mksnet.com.br
NOTE : Organization : Katsuo Industries Ltd
NOTE : client-ip=177.70.66.23;

QATAR FOUNDATION OF £1,000,000GBP!!!

QATAR FOUNDATION
Address: Qatar Foundation Building
Al Wajba Area,P.O. Box 5825 Doha,Qatar.

Qatar Foundation is a government-funded organization here in Qatar,founded 1995 by decree of Sheikh Hamad bin Khalifa Al Thani, Emir of Qatar.Qatar Foundation in conjunction with the European Union(UK),These Donations are freely given to individuals for their business,educational and personal development.Congratulation,You were among the lucky beneficiary selected to receive this donations award sum of 1,000,000GBP(One Million Great Britain pounds Sterly)each as charity donations/aid from the Qatar Foundation to promote your business and personal developments.

For more details on how to receive your Donation Bank Draft,please contact the President of Qatar Foundation with your pin numbers(QF-999-9814),Full Names,Sex,Contact Address, country,Nationality, Occupation, date of birth and your Valid Phone Number via contact details below.

Yours Sincerely,
President of Qatar Foundation:
Dr Mohammad Fathy Saoud.

Email analysis :

NOTE : qutarfoundation33@qq.com
NOTE : info@mail.com
NOTE : client-ip=132.248.54.29;