Paypal phishing site at:
http://www.rahme-lade.ch/data/.m4/.us/refund_jewelryinc/Wmin-id327823/cmd_run/ssl_secure_encrypted/login.htm
Active as of Feb 6th at 10:30 pm PST
--
Steve
panic: can't find /
---------- Forwarded message ----------
Return-Path: <[EMAIL PROTECTED]>
Received: from dante.beglobal.com (ev1s-67-15-192-32.ev1servers.net
[67.15.192.32] (may be forged))
by mail.pirk.com (8.13.7/8.12.0.Beta19) with ESMTP id l175vkot014819
for <[EMAIL PROTECTED]>; Tue, 6 Feb 2007 21:57:46 -0800
Received: from localhost ([127.0.0.1] helo=localhost.localdomain)
by dante.beglobal.com with esmtp (Exim 4.63)
(envelope-from <[EMAIL PROTECTED]>)
id 1HEfoJ-0007Zz-OE
for [EMAIL PROTECTED]; Tue, 06 Feb 2007 23:57:39 -0600
Date: Tue, 6 Feb 2007 23:57:39 -0600
To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
From: [EMAIL PROTECTED]
Subject: Receipt for your payment to [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
X-Priority: 3
X-Mailer: PHPMailer [version 1.72]
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-AntiAbuse: This header was added to track abuse,
please include it with any abuse report
X-AntiAbuse: Primary Hostname - dante.beglobal.com
X-AntiAbuse: Original Domain - gypsywind.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - paypal.com
X-Source:
X-Source-Args:
X-Source-Dir:
PayPal
[pixel.gif]
[pixel.gif]
Dear PayPal Member,
This email confirms that you have paid DIAMONDJEWELRY Inc.
([EMAIL PROTECTED]) $325.00 USD using PayPal.
This credit card transaction will appear on your bill as "PAYPAL
DIAMONDJEWELRY*".
________________________________________________________________________________
PayPal Shopping Cart Contents
Item Name: [pixel.gif] 14kt yellow and white gold necklace
Quantity: [pixel.gif] 1
[pixel.gif]
Total: [pixel.gif] $305.00 USD
[pixel.gif]
[pixel.gif] [pixel.gif] [pixel.gif]
Cart Subtotal: [pixel.gif] $305.00 USD
Shipping Charge: [pixel.gif] $20.00 USD
Cart Total: [pixel.gif] $325.00 USD
[pixel.gif] [pixel.gif] [pixel.gif]
________________________________________________________________________________
Shipping Information
Shipping Info: [pixel.gif] Charles Edwards
1015 Pleasant St
Rehoboth, MA 02769
United States
Address Status: [pixel.gif] Unconfirmed [scr_symQuestion.gif]
________________________________________________________________________________
If you haven't authorized this charge, click the link below to cancel the
payment and get a full refund.
Dispute Transaction
________________________________________________________________________________
Thank you for using PayPal!
The PayPal Team
Please do not reply to this e-mail. Mail sent to this address cannot be
answered. For assistance, log in to your PayPal account and choose the
"Help" link in the footer of any page.
[pixel.gif]
PayPal Email ID PP120
[pixel.gif]
_______________________________________________
phishing mailing list
[email protected]
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing
