Paypal Scam: Subject: Multiple invalid attempts... ; from h4.d2.pl ([5.9.75.114]); X-Sender: /home/pzhgp/public_html/wordpress - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
Scam Report Type: at  


Scam ReporterScam Tips Received
No Name
GB
2013-03-07 12:02:06
Identity Theft
Paypal (paypal.com)
Paypal Scam: Subject: Multiple invalid attempts... ; from h4.d2.pl ([5.9.75.114]); X-Sender: /home/pzhgp/public_html/wordpress
 Scammer
  Information
Email Address:
   pzhgp@h4.d2.pl
Scam Website:
   http://crosspointlife.com/wp-content/index.php
Paypal phishing scam supposedly from service@ppal.com, actually sent by authenticated User pzhgp@h4.d2.pl ; with redirect URL at phishing website, crosspointlife.com
---------------
Source IP: 5.9.75.114 (This IP address belongs to a High Risk Hosting Provider -refer http://www.abuseipdb.com/check/5.9.75.114).
ISP: Hetzner Online AG
Host Name: h4.d2.pl
Location: Germany.
-------------------------------------
Received: from h4.d2.pl ([5.9.75.114]) by COL0-MC1-F36.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Thu, 7 Mar 2013 07:41:57 -0800
Received: from pzhgp by h4.d2.pl with local (Exim 4.80)
(envelope-from )
id 1UDcxA-0000a1-Eu
for*****; Thu, 07 Mar 2013 16:41:56 +0100
X-Sender: /home/pzhgp/public_html/wordpress
To: ******
Subject: Multiple invalid attempts...
From: support
**********
Message-Id:
Date: Thu, 07 Mar 2013 16:41:56 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - h4.d2.pl
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [956 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - h4.d2.pl
X-Get-Message-Sender-Via: h4.d2.pl: authenticated_id: pzhgp/only user confirmed/virtual account not confirmed
X-Source: /bin/bash
X-Source-Args: /bin/sh -p /usr/sbin/sendmailphp -t -i
X-Source-Dir: pzhgp-oddzial-alwernia-spytkowice.xon.pl:/public_html/wordpress
Return-Path: mailto:pzhgp@h4.d2.pl
X-OriginalArrivalTime: 07 Mar 2013 15:41:58.0249 (UTC) FILETIME=[4D862590:01CE1B4A]

Your account access has been restricted.

Dear member,
After our screening process this month, we\'ve discovered some invalid entries on your account that got our attention. It seems like someone
else then you tried to access your PayPal account. We need you to work
with us and make sure this doesn\'t happend.

We need to confirm some of your account information.
Please update your profile with your current address and provide some
documentation to help confirm your identity.

To solve this issue, go to our Resolution Center:



\"\"

\"\"
Resolution Center
 Got more information on this Scam? Add to Report