PayPal Phishing Spoof E-mail - BE CAREFUL!!
Discussion
I just received this, and thought I would warn any potential victims on here:
E-mail I got:
The header information that came with the e-mail was (after removing my own e-mail address!!!!):
Just a warning!
Cheers
The Moose
E-mail I got:
E-mail said:
Dear PayPal Member,
This email confirms that you have paid LWP ELECTRONICS (sales@lwpelectronics.com) $374.99 USD using PayPal.
This credit card transaction will appear on your bill as "PAYPAL LWPELECTRONICS*".
____________________________________
PayPal Shopping Cart Contents
Item Name:
BRAND NEW NOKIA 3250 CELL PHONE
Quantity:
1
Total:
$374.99 USD
Cart Subtotal:
$254.99 USD
Shipping Charge:
$20.00 USD
Cart Total:
$374.99 USD
____________________________________
Shipping Information
Shipping Info:
Bill Chang
202 N Magnolia Dr.
Saco, ME 04072
United States
Address Status:
Unconfirmed
____________________________________
If you haven't authorized this charge, click the link below to cancel the payment and get a full refund.
Dispute Transaction
____________________________________
Thank you for using PayPal!
The PayPal Team
Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the footer of any page.
PayPal Email ID PP924
(there were some pics etc, but I can't be arsed to include them here!!!)This email confirms that you have paid LWP ELECTRONICS (sales@lwpelectronics.com) $374.99 USD using PayPal.
This credit card transaction will appear on your bill as "PAYPAL LWPELECTRONICS*".
____________________________________
PayPal Shopping Cart Contents
Item Name:
BRAND NEW NOKIA 3250 CELL PHONE
Quantity:
1
Total:
$374.99 USD
Cart Subtotal:
$254.99 USD
Shipping Charge:
$20.00 USD
Cart Total:
$374.99 USD
____________________________________
Shipping Information
Shipping Info:
Bill Chang
202 N Magnolia Dr.
Saco, ME 04072
United States
Address Status:
Unconfirmed
____________________________________
If you haven't authorized this charge, click the link below to cancel the payment and get a full refund.
Dispute Transaction
____________________________________
Thank you for using PayPal!
The PayPal Team
Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the footer of any page.
PayPal Email ID PP924
The header information that came with the e-mail was (after removing my own e-mail address!!!!):
Header said:
Return-path: <fly2@snakedance.ebay.sun.com>
Envelope-to: [My E-mail]
Delivery-date: Mon, 29 Dec 2008 09:06:33 +0000
Received: from 88-139-75-235.adslgp.cegetel.net ([88.139.75.235] helo=tele2.lan)
by mail11.extendcp.com with esmtp (Exim 4.63)
id 1LHE50-0003Tj-0b
for [My E-mail]; Mon, 29 Dec 2008 09:06:33 +0000
Received: from [88.139.75.235] by mx3.sun.com; Mon, 29 Dec 2008 10:06:29 +0100
Date: Mon, 29 Dec 2008 10:06:29 +0100
From: service@support-paypal.com
X-Mailer: The Bat! (v2.00.0) Educational
Reply-To: fly2@snakedance.ebay.sun.com
X-Priority: 3 (Normal)
Message-ID: <408664945.03386827890513@snakedance.ebay.sun.com>
To: [My E-mail]
Subject: Customer Service: Security Measures
MIME-Version: 1.0
Content-Type: text/html;
charset=us-ascii
Content-Transfer-Encoding: 7bit
Don't click it. If you want to report it, forward it unedited to: spoof@paypal.com (dont know what they are going to do about it though!!!)Envelope-to: [My E-mail]
Delivery-date: Mon, 29 Dec 2008 09:06:33 +0000
Received: from 88-139-75-235.adslgp.cegetel.net ([88.139.75.235] helo=tele2.lan)
by mail11.extendcp.com with esmtp (Exim 4.63)
id 1LHE50-0003Tj-0b
for [My E-mail]; Mon, 29 Dec 2008 09:06:33 +0000
Received: from [88.139.75.235] by mx3.sun.com; Mon, 29 Dec 2008 10:06:29 +0100
Date: Mon, 29 Dec 2008 10:06:29 +0100
From: service@support-paypal.com
X-Mailer: The Bat! (v2.00.0) Educational
Reply-To: fly2@snakedance.ebay.sun.com
X-Priority: 3 (Normal)
Message-ID: <408664945.03386827890513@snakedance.ebay.sun.com>
To: [My E-mail]
Subject: Customer Service: Security Measures
MIME-Version: 1.0
Content-Type: text/html;
charset=us-ascii
Content-Transfer-Encoding: 7bit
Just a warning!
Cheers
The Moose
Gassing Station | The Pie & Piston Archive | Top of Page | What's New | My Stuff




