by youjo king
Tue Oct 25, 2011 9:12 am
Hi, can anyone tell me if this is a scam,or just phishing/spam.
It's obviously not from paypal,so the only thing I can think of is that it could be a virus if you clicked on the link.
Here's the header followed by the actual e-mail because it's all in code on the message source page:-"in red"
IP tracker gave the location as canada ?
x-store-info:sbevkl2QZR7OXo7WID5ZcVBK1Phj2jX/
Authentication-Results: hotmail.com; sender-id=temperror (sender IP is 64.59.128.220) header.from="[email protected]"; dkim=none header.d=jaewu.com; x-hmca=none
X-Message-Status: s1:0:n
X-SID-PRA: PayPal <"[email protected]">
X-DKIM-Result: None
X-AUTH-Result: NONE
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0xO1NDTD0w
X-Message-Info: fvEDN+PP/adSkw0HpDVhS+GL+OIZzoO12Ge/64EsjT05seujYk9wtRzvxcQ2A/KpUHtq3YYhWOLelujk3OvnZ6BTcV+2bPO+bT5vbLt4PX+SiUTr+TxFSijwoN+qxcodjlybVRK10UE=
Received: from mail.shawcable.com ([64.59.128.220]) by BAY0-MC1-F28.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Tue, 25 Oct 2011 01:38:11 -0700
Received: from bpd2mi4no-svcs.prod.shawcable.com ([10.0.184.123])
by bpd2mo2no-ssvc.prod.shawcable.com with ESMTP; 25 Oct 2011 02:38:10 -0600
X-Cloudmark-SP-Filtered: true
X-Cloudmark-SP-Result: v=1.1 cv=W1EbViUdRLrB3xZls61b9cpNy9JNgdRUyrcMJe3sx/g= c=1 sm=1
a=rH84kQiSErgA:10 a=agipIe6nfVIA:10 a=BLceEmwcHowA:10
a=ixi/RUt4qe4/nAz59+xmgw==:17 a=BZSrzMhrAAAA:8 a=DMHPztQIAAAA:8
a=Ns6vSmXSAAAA:8 a=lYbs_pd_-U4XloBtXlYA:9 a=c3aBy2ymZiP80P9ARKsA:7
a=Ft8UYL4EG9YA:10 a=LXVtS5FyAXoA:10 a=p-tSeneR-ZIA:10 a=mrOPWzfv4oEA:10
a=im0JbPrwGzoA:10 a=qiWi7Edwir4A:10 a=NWVoK91CQyQA:10 a=WQlkmcFWk3gTssnZ:21
a=u51Bv9dE4xsHotkM:21 a=HpAAvcLHHh0Zw7uRqdWCyQ==:117
X-IronPort-AV: E=Sophos;i="4.69,403,1315202400";
d="scan'208,217";a="390157903"
Received: from unknown (HELO bpd2mi4no-cmts.prod.shawcable.com) ([192.168.183.123])
by bpd2mi4no-cmts.prod.shawcable.com with ESMTP; 25 Oct 2011 02:37:58 -0600
Message-Id: <[email protected]>
X-reinject: true
Received: from unknown (HELO User) ([174.7.120.89])
by bpd2mi4no-dmz.prod.shawcable.com with SMTP; 25 Oct 2011 02:37:43 -0600
From: "PayPal"<"[email protected]">
Subject: Receipt for Your Payment to Skype
Date: Tue, 25 Oct 2011 15:44:00 +0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C2A9A6.0CCE0B40"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: "[email protected]"
X-OriginalArrivalTime: 25 Oct 2011 08:38:11.0236 (UTC) FILETIME=[6DB69E40:01CC92F1]
Receipt for Your Payment to Skype?
08:38
Reply ?
PayPal
Add to contacts
Attachments, pictures and links in this message have been blocked for your safety.
Show content | Always show content from "[email protected]"
You sent a payment of 45.99 GBP to Skype "[email protected]"
Thanks for using PayPal. To see all the transaction details, log in to your PayPal account.
It may take a few moments for this transaction to appear in your account.
Merchant
Skype
"[email protected]"
Instructions to merchant
You haven't entered any instructions.
Shipping address - Unconfirmed
United Kingdom
Postage details
The seller hasn’t provided any postage details yet.
Description Unit price Qty Amount
Online Number, 3 month subscription
45.99 GBP 1 45.99 GBP
Subtotal 45.99 GBP
Total 45.99 GBP
Payment 45.99 GBP
Payment sent to "[email protected]"
Issues with this transaction?
If you haven't authorized this charge, open a dispute at:
"https://www.paypal.co.uk/helpcenter/claimrefunds" and get a full refund.
It's obviously not from paypal,so the only thing I can think of is that it could be a virus if you clicked on the link.
Here's the header followed by the actual e-mail because it's all in code on the message source page:-"in red"
IP tracker gave the location as canada ?
x-store-info:sbevkl2QZR7OXo7WID5ZcVBK1Phj2jX/
Authentication-Results: hotmail.com; sender-id=temperror (sender IP is 64.59.128.220) header.from="[email protected]"; dkim=none header.d=jaewu.com; x-hmca=none
X-Message-Status: s1:0:n
X-SID-PRA: PayPal <"[email protected]">
X-DKIM-Result: None
X-AUTH-Result: NONE
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0xO1NDTD0w
X-Message-Info: fvEDN+PP/adSkw0HpDVhS+GL+OIZzoO12Ge/64EsjT05seujYk9wtRzvxcQ2A/KpUHtq3YYhWOLelujk3OvnZ6BTcV+2bPO+bT5vbLt4PX+SiUTr+TxFSijwoN+qxcodjlybVRK10UE=
Received: from mail.shawcable.com ([64.59.128.220]) by BAY0-MC1-F28.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Tue, 25 Oct 2011 01:38:11 -0700
Received: from bpd2mi4no-svcs.prod.shawcable.com ([10.0.184.123])
by bpd2mo2no-ssvc.prod.shawcable.com with ESMTP; 25 Oct 2011 02:38:10 -0600
X-Cloudmark-SP-Filtered: true
X-Cloudmark-SP-Result: v=1.1 cv=W1EbViUdRLrB3xZls61b9cpNy9JNgdRUyrcMJe3sx/g= c=1 sm=1
a=rH84kQiSErgA:10 a=agipIe6nfVIA:10 a=BLceEmwcHowA:10
a=ixi/RUt4qe4/nAz59+xmgw==:17 a=BZSrzMhrAAAA:8 a=DMHPztQIAAAA:8
a=Ns6vSmXSAAAA:8 a=lYbs_pd_-U4XloBtXlYA:9 a=c3aBy2ymZiP80P9ARKsA:7
a=Ft8UYL4EG9YA:10 a=LXVtS5FyAXoA:10 a=p-tSeneR-ZIA:10 a=mrOPWzfv4oEA:10
a=im0JbPrwGzoA:10 a=qiWi7Edwir4A:10 a=NWVoK91CQyQA:10 a=WQlkmcFWk3gTssnZ:21
a=u51Bv9dE4xsHotkM:21 a=HpAAvcLHHh0Zw7uRqdWCyQ==:117
X-IronPort-AV: E=Sophos;i="4.69,403,1315202400";
d="scan'208,217";a="390157903"
Received: from unknown (HELO bpd2mi4no-cmts.prod.shawcable.com) ([192.168.183.123])
by bpd2mi4no-cmts.prod.shawcable.com with ESMTP; 25 Oct 2011 02:37:58 -0600
Message-Id: <[email protected]>
X-reinject: true
Received: from unknown (HELO User) ([174.7.120.89])
by bpd2mi4no-dmz.prod.shawcable.com with SMTP; 25 Oct 2011 02:37:43 -0600
From: "PayPal"<"[email protected]">
Subject: Receipt for Your Payment to Skype
Date: Tue, 25 Oct 2011 15:44:00 +0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C2A9A6.0CCE0B40"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: "[email protected]"
X-OriginalArrivalTime: 25 Oct 2011 08:38:11.0236 (UTC) FILETIME=[6DB69E40:01CC92F1]
Receipt for Your Payment to Skype?
08:38
Reply ?
PayPal
Add to contacts
Attachments, pictures and links in this message have been blocked for your safety.
Show content | Always show content from "[email protected]"
You sent a payment of 45.99 GBP to Skype "[email protected]"
Thanks for using PayPal. To see all the transaction details, log in to your PayPal account.
It may take a few moments for this transaction to appear in your account.
Merchant
Skype
"[email protected]"
Instructions to merchant
You haven't entered any instructions.
Shipping address - Unconfirmed
United Kingdom
Postage details
The seller hasn’t provided any postage details yet.
Description Unit price Qty Amount
Online Number, 3 month subscription
45.99 GBP 1 45.99 GBP
Subtotal 45.99 GBP
Total 45.99 GBP
Payment 45.99 GBP
Payment sent to "[email protected]"
Issues with this transaction?
If you haven't authorized this charge, open a dispute at:
"https://www.paypal.co.uk/helpcenter/claimrefunds" and get a full refund.
Any person who by any false pretence, and with intent to defraud, obtains from any other person anything capable of being stolen, or induces any other person to deliver to any person anything capable of being stolen, is guilty of a felony.