I recently got a phishing email purporting to be from paypal. I will reproduce most of it below but before you read it, please visit the link above to learn how to recognize phishing emails.
Note: all links have been disabled but the information is still in place so you can check it via Whois yourself. Please be careful as many of these spam sites will infect your computer with a virus or Trojan if you aren't well protected.
From - Sun Feb 24 10:08:49 2008
X-Account-Key: account5
X-UIDL: 1203840973.99466.pctalkin.ipower.com
X-Mozilla-Status: 1000
X-Mozilla-Status2: 00010000
X-Mozilla-Keys:
Return-Path: <SRS0=foJ3H3=TN=paypal.com=reactivate@yourhostingaccount.com>
Delivered-To: ***spock@***
Received: (qmail 99453 invoked from network); 24 Feb 2008 08:16:12 -0000
Received: from unknown (HELO mailout08.yourhostingaccount.com) (65.254.253.233)
by pctalkin.ipower.com with SMTP; 24 Feb 2008 08:16:12 -0000
Received: from mailscan06.yourhostingaccount.com ([10.1.15.6] helo=mailscan06.yourhostingaccount.com)
by mailout08.yourhostingaccount.com with esmtp (Exim)
id 1JTC2W-0008Kk-QH
for spock@***; Sun, 24 Feb 2008 03:16:52 -0500
Received: from impinc03.yourhostingaccount.com ([10.1.13.103] helo=impinc03.yourhostingaccount.com)
by mailscan06.yourhostingaccount.com with esmtp (Exim)
id 1JTC2W-0005WD-MT
for spock@***; Sun, 24 Feb 2008 03:16:52 -0500
Received: from mailout03.dsvr.x-isp.net ([213.253.179.7])
by impinc03.yourhostingaccount.com with NO UCE
id tLGr1Y06W09yK0d0000000; Sun, 24 Feb 2008 03:16:52 -0500
X-EN-CM: 1
X-EN-OrigIP: 213.253.179.7
X-EN-IMPSID: tLGr1Y06W09yK0d0000000
Received: from [212.69.198.194] (helo=triangle.dsvr.co.uk)
by mailout03.dsvr.x-isp.net with esmtp id 1JTC2O-0007CF-FN; Sun, 24 Feb 2008 08:16:44 +0000
Received: from [60.229.250.149] (helo=User)
by triangle.dsvr.co.uk with esmtpa (Exim 4.62)
(envelope-from <reactivate@paypal.com>)
id 1JTC14-0003zg-EW; Sun, 24 Feb 2008 08:15:23 +0000
Reply-To: <no.reply@paypal.com>
From: "PayPal Inc. Security Center"<reactivate@paypal.com>
Subject: Reactivate Your PayPal Account ,
Date: Sun, 24 Feb 2008 19:15:22 +1100
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam: True
X-Antivirus: AVG for E-mail 7.5.516 [269.20.9/1295]
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=Windows-1251
This email confirms that you have sent an eBay payment of $47.85 USD to
achad13@yahoo.com for an eBay item.
-----------------------------------
Payment Details
-----------------------------------
Amount: $47.85 USD
Transaction ID: 2LC956793J776333Y
Subject: Digimax 130
Note:
If you haven't authorized this charge ,click the link below to dispute transaction
and get full refund
Click on the link bellow to dispute transaction
http:// lpy1.gs-ys.com /www.paypal.com /cgi-bin /webscr=cmd=p /index.php
Note: The above link has been broken by adding spaces. Please do not actually visit this site!
*SSL connection:
PayPal automatically encrypts your confidential information
in transit from your computer to ours using the Secure
Sockets Layer protocol (SSL) with an encryption key length
of 128-bits (the highest level commercially available)
-----------------------------------
Item Information
-----------------------------------
eBay User ID: scratchandgnaw2
----------------------------------------------------------------
Edward Harrell's UNCONFIRMED Address
----------------------------------------------------------------
Edward Harrell
211 David St.
Springtown, TX 76082
United States
Important Note: Edward Harrell has provided an Unconfirmed Address. If
you are planning on shipping items to Edward Harrell, please check the
Transaction Details page of this payment to find out whether you will
be covered by the PayPal Seller Protection Policy.
----------------------------------------------------------------
This payment was sent using your bank account.
By using your bank account to send money, you just:
- Paid easily and securely
- Sent money faster than writing and mailing paper checks
- Paid instantly -- your purchase won't show up on bills at the end of
the month.
Thanks for using your bank account!
----------------------------------------------------------------
Thank you for using PayPal!
The PayPal Team
PayPal Email ID PP118
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.516 / Virus Database: 269.20.9/1295 - Release Date: 2/23/2008 9:35 PM