Re: Spam, phishing pretending to be PayPal
Thanks for this Geoff I've been having a bit of a play around with your whois info and discovered that 33478 Domain(s) Use creativedreams...@gmail.com As Whois Email. See http://www.webboar.com/whois-email/page:1/creativedreams365%40gmail.com;. That's quite a lot. Here's the streetview of the address 20 WEST 87TH STREET NY: http://goo.gl/maps/3EKoK. Quite a business! Reg On 09/10/2013, at 12:46 pm, Geoff and Kaye k...@kgweb.org.au wrote: Reg On 09/10/2013, at 12:10 PM, Reg Whitely wrote: Hi WAMUGgers I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you think? There has been no recent transaction movements in my account. A whois on the domain name png.com returns: --- Domain name: png.com Administrative Contact: - DHARSHINEE NAIDU (creativedreams...@gmail.com) +1.9173101384 Fax: - 20 WEST 87TH STREET NEW YORK, NY 10024 US - You would think that Mr Naidu is unlikely to be in the palm oil business in Papua New Guinea. Regards Geoff -- Geoff and Kaye k...@kgweb.org.au -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug Reg Whitely Home: 08 9921 7272 Mob: 04 8899 7313 Email: rwhit...@internode.on.net -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug
Re: Spam, phishing pretending to be PayPal
Reg I have just received a duplicate which you have, same amount etc. I'm now uneasy going to the paypal link, so will try on my existing links to cancel Thanks for posting Jewels On 09/10/2013, at 12:10 PM, Reg Whitely wrote: This is the plain text version. Please delete the previous one from your mailbox: From: PayPal refunds.serv...@admin.net Subject: Receipt for your PayPal payment to administrat...@png.com Date: 9 October 2013 11:14:40 am AWST To: rwhit...@internode.on.net X-Default-Received-Spf: pass (skip=trusted (res=PASS)) x-ip-name=150.101.137.143; Received: from ipmail05.adl6.internode.on.net (unverified [150.101.137.143]) by mail.internode.on.net (SurgeMail 5.3i) with ESMTP id 175089352-1927428 for rwhit...@internode.on.net; Wed, 09 Oct 2013 13:45:00 +1030 (CDT) Received: from icp-osb-irony-out8.external.iinet.net.au ([203.59.1.225]) by ipmailmx05.adl6.internode.on.net with ESMTP; 09 Oct 2013 13:44:53 +1030 Received: from unknown (HELO server-PC) ([203.59.132.147]) by icp-osb-irony-out8.iinet.net.au with ESMTP; 09 Oct 2013 11:14:40 +0800 Return-Path: refunds.serv...@admin.net X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Result: AsoHAIzJVFLLOwHhnGdsb2JhbAAURQECCAKCNnyGW6kAAQGJYoh3chYOAQEBAQEGDQkJFCiCdAR1KWCIBQ2HCIc5iUCTPCqEJ4k6gliLIwoFAYFKhBkDgSuIDYg1AYdDhS6MXjeBP4FbBQQXgR0 X-Ironport-Anti-Spam-Result: AjMZAGjJVFLLO4ST/2dsb2JhbAAURQECCAKCNkQ4gxKDSakAAQGJYolpFnSCdARFECCBCYgFDYcIhzmJQJM8KoQnlzUKBQGBSoJugSsDgSuIDYg1AYdDhS6LI4E7N4E/L4EsBQQXgR0 X-Ironport-Av: E=Sophos;i=4.90,1060,1371047400; d=scan'208,217;a=717520853 X-Ironport-Av: E=Sophos;i=4.90,1060,1371052800; d=scan'208,217;a=160731105 Message-Id: 834e33$4p9...@icp-osb-irony-out8.iinet.net.au Content-Type: multipart/alternative; boundary=JlTFDpWU5=_4P1gkjxRixDTFAZ4ipDGjCo0 Mime-Version: 1.0 X-Rcpt-To: rwhit...@internode.on.net X-Spamdetect: : -8.30 IronPort SPAM scanned=-10.0, Content Clean match=-1.0, From3consonants=0.7, Possible url forgery/scam=2.0 X-Urlforgery: (http://worldtrans.com.cn) (http://www.paypal.com.au) X-Spamcontent: Clean X-Langguess: English X-Ip-Stats: Incoming Last 0, First 497, in=29956, out=0, spam=0 ip=203.59.1.225 Status: U X-Uidl: 91694 9 Oct 2013 06:19:34 AEST Transaction ID: 71PN116NA799763R Hello rwhit...@internode.on.net, You sent a payment of 427.00 AUD to administrat...@png.com We've asked the seller to ship. Thanks for using PayPal. To view the transaction details, log in to your PayPal account. It may take a few moments for this transaction to appear in the Recent Activity list in your Account Overview. Seller administrat...@png.com Note to seller You haven't included a note. Sender address Papua New Guinea's Palm Oil, PNG Shipping details The seller hasn’t provided any shipping details yet. Description Unit price Qty Amount Oil recipients ( Papua New Guinea's) Item number 17393949551 $427.00 AUD 1 $427.00 AUD Shipping and handling $5.00 AUD Insurance - not offered Total $432.00 AUD Payment $432.00 AUD Payment sent to administrat...@png.com Issues with this transaction? If you haven't authorized this transaction ,click the link below to get full refund. Go to the Help Centre at: http://www.paypal.com.au/AUD/RefundForm This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page. To receive emails as plain text instead of HTML, change your Notifications preferences. Just log in to your PayPal account, go to your Profile and click My Settings. Copyright © 1999-2013 PayPal, Inc. All rights reserved. PayPal Australia Pty Limited ABN 93 111 195 389 (AFSL 304962). Any general financial product advice provided in this site has not taken into account your objectives, financial situations or needs. PayPal Email ID PP1120 On 09/10/2013, at 11:53 am, Reg Whitely rwhit...@internode.on.net wrote: Hi WAMUGgers I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you think? There has been no recent transaction movements in my account. Here is a plain text copy of the email Reg -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings
Re: Spam, phishing pretending to be PayPal
Don't click on any of the links in the Email Jewels... Just delete the email. Cheers, Ronni Sent from Ronni's iPad4 On 9 Oct 2013, at 5:47 pm, Julie Bedford jew...@iinet.net.au wrote: Reg I have just received a duplicate which you have, same amount etc. I'm now uneasy going to the paypal link, so will try on my existing links to cancel Thanks for posting Jewels On 09/10/2013, at 12:10 PM, Reg Whitely wrote: This is the plain text version. Please delete the previous one from your mailbox: From: PayPal refunds.serv...@admin.net Subject: Receipt for your PayPal payment to administrat...@png.com Date: 9 October 2013 11:14:40 am AWST To: rwhit...@internode.on.net X-Default-Received-Spf: pass (skip=trusted (res=PASS)) x-ip-name=150.101.137.143; Received: from ipmail05.adl6.internode.on.net (unverified [150.101.137.143]) by mail.internode.on.net (SurgeMail 5.3i) with ESMTP id 175089352-1927428 for rwhit...@internode.on.net; Wed, 09 Oct 2013 13:45:00 +1030 (CDT) Received: from icp-osb-irony-out8.external.iinet.net.au ([203.59.1.225]) by ipmailmx05.adl6.internode.on.net with ESMTP; 09 Oct 2013 13:44:53 +1030 Received: from unknown (HELO server-PC) ([203.59.132.147]) by icp-osb-irony-out8.iinet.net.au with ESMTP; 09 Oct 2013 11:14:40 +0800 Return-Path: refunds.serv...@admin.net X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Result: AsoHAIzJVFLLOwHhnGdsb2JhbAAURQECCAKCNnyGW6kAAQGJYoh3chYOAQEBAQEGDQkJFCiCdAR1KWCIBQ2HCIc5iUCTPCqEJ4k6gliLIwoFAYFKhBkDgSuIDYg1AYdDhS6MXjeBP4FbBQQXgR0 X-Ironport-Anti-Spam-Result: AjMZAGjJVFLLO4ST/2dsb2JhbAAURQECCAKCNkQ4gxKDSakAAQGJYolpFnSCdARFECCBCYgFDYcIhzmJQJM8KoQnlzUKBQGBSoJugSsDgSuIDYg1AYdDhS6LI4E7N4E/L4EsBQQXgR0 X-Ironport-Av: E=Sophos;i=4.90,1060,1371047400; d=scan'208,217;a=717520853 X-Ironport-Av: E=Sophos;i=4.90,1060,1371052800; d=scan'208,217;a=160731105 Message-Id: 834e33$4p9...@icp-osb-irony-out8.iinet.net.au Content-Type: multipart/alternative; boundary=JlTFDpWU5=_4P1gkjxRixDTFAZ4ipDGjCo0 Mime-Version: 1.0 X-Rcpt-To: rwhit...@internode.on.net X-Spamdetect: : -8.30 IronPort SPAM scanned=-10.0, Content Clean match=-1.0, From3consonants=0.7, Possible url forgery/scam=2.0 X-Urlforgery: (http://worldtrans.com.cn) (http://www.paypal.com.au) X-Spamcontent: Clean X-Langguess: English X-Ip-Stats: Incoming Last 0, First 497, in=29956, out=0, spam=0 ip=203.59.1.225 Status: U X-Uidl: 91694 9 Oct 2013 06:19:34 AEST Transaction ID: 71PN116NA799763R Hello rwhit...@internode.on.net, You sent a payment of 427.00 AUD to administrat...@png.com We've asked the seller to ship. Thanks for using PayPal. To view the transaction details, log in to your PayPal account. It may take a few moments for this transaction to appear in the Recent Activity list in your Account Overview. Seller administrat...@png.com Note to seller You haven't included a note. Sender address Papua New Guinea's Palm Oil, PNG Shipping details The seller hasn’t provided any shipping details yet. Description Unit price Qty Amount Oil recipients ( Papua New Guinea's) Item number 17393949551 $427.00 AUD 1 $427.00 AUD Shipping and handling $5.00 AUD Insurance - not offered Total $432.00 AUD Payment $432.00 AUD Payment sent to administrat...@png.com Issues with this transaction? If you haven't authorized this transaction ,click the link below to get full refund. Go to the Help Centre at: http://www.paypal.com.au/AUD/RefundForm This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page. To receive emails as plain text instead of HTML, change your Notifications preferences. Just log in to your PayPal account, go to your Profile and click My Settings. Copyright © 1999-2013 PayPal, Inc. All rights reserved. PayPal Australia Pty Limited ABN 93 111 195 389 (AFSL 304962). Any general financial product advice provided in this site has not taken into account your objectives, financial situations or needs. PayPal Email ID PP1120 On 09/10/2013, at 11:53 am, Reg Whitely rwhit...@internode.on.net wrote: Hi WAMUGgers I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you think? There has been no recent transaction movements in my account. Here is a plain text copy of the email Reg -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe -
Re: Spam, phishing pretending to be PayPal
I agree, report it to PayPal but as it already has been, so delete the email then separately go to PayPal and just check your balance, you will find no unauthorised transactions have been made so you don't have to do anything. I have had three very different emails over the last year like this. Rick. On 09/10/2013, at 5:56 PM, Ronda Brown ro...@mac.com wrote: Don't click on any of the links in the Email Jewels... Just delete the email. Cheers, Ronni Sent from Ronni's iPad4 On 9 Oct 2013, at 5:47 pm, Julie Bedford jew...@iinet.net.au wrote: Reg I have just received a duplicate which you have, same amount etc. I'm now uneasy going to the paypal link, so will try on my existing links to cancel Thanks for posting Jewels On 09/10/2013, at 12:10 PM, Reg Whitely wrote: This is the plain text version. Please delete the previous one from your mailbox: From: PayPal refunds.serv...@admin.net Subject: Receipt for your PayPal payment to administrat...@png.com Date: 9 October 2013 11:14:40 am AWST To: rwhit...@internode.on.net X-Default-Received-Spf: pass (skip=trusted (res=PASS)) x-ip-name=150.101.137.143; Received: from ipmail05.adl6.internode.on.net (unverified [150.101.137.143]) by mail.internode.on.net (SurgeMail 5.3i) with ESMTP id 175089352-1927428 for rwhit...@internode.on.net; Wed, 09 Oct 2013 13:45:00 +1030 (CDT) Received: from icp-osb-irony-out8.external.iinet.net.au ([203.59.1.225]) by ipmailmx05.adl6.internode.on.net with ESMTP; 09 Oct 2013 13:44:53 +1030 Received: from unknown (HELO server-PC) ([203.59.132.147]) by icp-osb-irony-out8.iinet.net.au with ESMTP; 09 Oct 2013 11:14:40 +0800 Return-Path: refunds.serv...@admin.net X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Result: AsoHAIzJVFLLOwHhnGdsb2JhbAAURQECCAKCNnyGW6kAAQGJYoh3chYOAQEBAQEGDQkJFCiCdAR1KWCIBQ2HCIc5iUCTPCqEJ4k6gliLIwoFAYFKhBkDgSuIDYg1AYdDhS6MXjeBP4FbBQQXgR0 X-Ironport-Anti-Spam-Result: AjMZAGjJVFLLO4ST/2dsb2JhbAAURQECCAKCNkQ4gxKDSakAAQGJYolpFnSCdARFECCBCYgFDYcIhzmJQJM8KoQnlzUKBQGBSoJugSsDgSuIDYg1AYdDhS6LI4E7N4E/L4EsBQQXgR0 X-Ironport-Av: E=Sophos;i=4.90,1060,1371047400; d=scan'208,217;a=717520853 X-Ironport-Av: E=Sophos;i=4.90,1060,1371052800; d=scan'208,217;a=160731105 Message-Id: 834e33$4p9...@icp-osb-irony-out8.iinet.net.au Content-Type: multipart/alternative; boundary=JlTFDpWU5=_4P1gkjxRixDTFAZ4ipDGjCo0 Mime-Version: 1.0 X-Rcpt-To: rwhit...@internode.on.net X-Spamdetect: : -8.30 IronPort SPAM scanned=-10.0, Content Clean match=-1.0, From3consonants=0.7, Possible url forgery/scam=2.0 X-Urlforgery: (http://worldtrans.com.cn) (http://www.paypal.com.au) X-Spamcontent: Clean X-Langguess: English X-Ip-Stats: Incoming Last 0, First 497, in=29956, out=0, spam=0 ip=203.59.1.225 Status: U X-Uidl: 91694 9 Oct 2013 06:19:34 AEST Transaction ID: 71PN116NA799763R Hello rwhit...@internode.on.net, You sent a payment of 427.00 AUD to administrat...@png.com We've asked the seller to ship. Thanks for using PayPal. To view the transaction details, log in to your PayPal account. It may take a few moments for this transaction to appear in the Recent Activity list in your Account Overview. Seller administrat...@png.com Note to seller You haven't included a note. Sender address Papua New Guinea's Palm Oil, PNG Shipping details The seller hasn’t provided any shipping details yet. Description Unit price Qty Amount Oil recipients ( Papua New Guinea's) Item number 17393949551 $427.00 AUD 1 $427.00 AUD Shipping and handling $5.00 AUD Insurance - not offered Total $432.00 AUD Payment $432.00 AUD Payment sent to administrat...@png.com Issues with this transaction? If you haven't authorized this transaction ,click the link below to get full refund. Go to the Help Centre at: http://www.paypal.com.au/AUD/RefundForm This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page. To receive emails as plain text instead of HTML, change your Notifications preferences. Just log in to your PayPal account, go to your Profile and click My Settings. Copyright © 1999-2013 PayPal, Inc. All rights reserved. PayPal Australia Pty Limited ABN 93 111 195 389 (AFSL 304962). Any general financial product advice provided in this site has not taken into account your objectives, financial situations or needs. PayPal Email ID PP1120 On 09/10/2013, at 11:53 am, Reg Whitely rwhit...@internode.on.net wrote: Hi WAMUGgers I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you
Re: Spam, phishing pretending to be PayPal
I'm a bit more cautious as such things are worrisome. I've changed my PayPal email address and password, even though there has been no activity in my account for over a month. Reg On 09/10/2013, at 6:08 pm, Rick Armstrong a...@iinet.net.au wrote: I agree, report it to PayPal but as it already has been, so delete the email then separately go to PayPal and just check your balance, you will find no unauthorised transactions have been made so you don't have to do anything. I have had three very different emails over the last year like this. Rick. On 09/10/2013, at 5:56 PM, Ronda Brown ro...@mac.com wrote: Don't click on any of the links in the Email Jewels... Just delete the email. Cheers, Ronni Sent from Ronni's iPad4 On 9 Oct 2013, at 5:47 pm, Julie Bedford jew...@iinet.net.au wrote: Reg I have just received a duplicate which you have, same amount etc. I'm now uneasy going to the paypal link, so will try on my existing links to cancel Thanks for posting Jewels On 09/10/2013, at 12:10 PM, Reg Whitely wrote: This is the plain text version. Please delete the previous one from your mailbox: From: PayPal refunds.serv...@admin.net Subject: Receipt for your PayPal payment to administrat...@png.com Date: 9 October 2013 11:14:40 am AWST To: rwhit...@internode.on.net X-Default-Received-Spf: pass (skip=trusted (res=PASS)) x-ip-name=150.101.137.143; Received: from ipmail05.adl6.internode.on.net (unverified [150.101.137.143]) by mail.internode.on.net (SurgeMail 5.3i) with ESMTP id 175089352-1927428 for rwhit...@internode.on.net; Wed, 09 Oct 2013 13:45:00 +1030 (CDT) Received: from icp-osb-irony-out8.external.iinet.net.au ([203.59.1.225]) by ipmailmx05.adl6.internode.on.net with ESMTP; 09 Oct 2013 13:44:53 +1030 Received: from unknown (HELO server-PC) ([203.59.132.147]) by icp-osb-irony-out8.iinet.net.au with ESMTP; 09 Oct 2013 11:14:40 +0800 Return-Path: refunds.serv...@admin.net X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Result: AsoHAIzJVFLLOwHhnGdsb2JhbAAURQECCAKCNnyGW6kAAQGJYoh3chYOAQEBAQEGDQkJFCiCdAR1KWCIBQ2HCIc5iUCTPCqEJ4k6gliLIwoFAYFKhBkDgSuIDYg1AYdDhS6MXjeBP4FbBQQXgR0 X-Ironport-Anti-Spam-Result: AjMZAGjJVFLLO4ST/2dsb2JhbAAURQECCAKCNkQ4gxKDSakAAQGJYolpFnSCdARFECCBCYgFDYcIhzmJQJM8KoQnlzUKBQGBSoJugSsDgSuIDYg1AYdDhS6LI4E7N4E/L4EsBQQXgR0 X-Ironport-Av: E=Sophos;i=4.90,1060,1371047400; d=scan'208,217;a=717520853 X-Ironport-Av: E=Sophos;i=4.90,1060,1371052800; d=scan'208,217;a=160731105 Message-Id: 834e33$4p9...@icp-osb-irony-out8.iinet.net.au Content-Type: multipart/alternative; boundary=JlTFDpWU5=_4P1gkjxRixDTFAZ4ipDGjCo0 Mime-Version: 1.0 X-Rcpt-To: rwhit...@internode.on.net X-Spamdetect: : -8.30 IronPort SPAM scanned=-10.0, Content Clean match=-1.0, From3consonants=0.7, Possible url forgery/scam=2.0 X-Urlforgery: (http://worldtrans.com.cn) (http://www.paypal.com.au) X-Spamcontent: Clean X-Langguess: English X-Ip-Stats: Incoming Last 0, First 497, in=29956, out=0, spam=0 ip=203.59.1.225 Status: U X-Uidl: 91694 9 Oct 2013 06:19:34 AEST Transaction ID: 71PN116NA799763R Hello rwhit...@internode.on.net, You sent a payment of 427.00 AUD to administrat...@png.com We've asked the seller to ship. Thanks for using PayPal. To view the transaction details, log in to your PayPal account. It may take a few moments for this transaction to appear in the Recent Activity list in your Account Overview. Seller administrat...@png.com Note to seller You haven't included a note. Sender address Papua New Guinea's Palm Oil, PNG Shipping details The seller hasn’t provided any shipping details yet. Description Unit price Qty Amount Oil recipients ( Papua New Guinea's) Item number 17393949551 $427.00 AUD 1 $427.00 AUD Shipping and handling $5.00 AUD Insurance - not offered Total $432.00 AUD Payment $432.00 AUD Payment sent to administrat...@png.com Issues with this transaction? If you haven't authorized this transaction ,click the link below to get full refund. Go to the Help Centre at: http://www.paypal.com.au/AUD/RefundForm This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page. To receive emails as plain text instead of HTML, change your Notifications preferences. Just log in to your PayPal account, go to your Profile and click My Settings. Copyright © 1999-2013 PayPal, Inc. All rights reserved. PayPal Australia Pty Limited ABN 93 111 195 389 (AFSL 304962). Any general financial product advice provided in this site has not taken into account your objectives, financial situations or needs. PayPal Email ID PP1120 On 09/10/2013, at 11:53 am, Reg Whitely rwhit...@internode.on.net wrote: Hi WAMUGgers I've just received this email, purported to be from
Re: Spam, phishing pretending to be PayPal
On 09/10/2013, at 5:56 PM, Ronda Brown ro...@mac.com wrote: Don't click on any of the links in the Email Jewels... Just delete the email. Cheers, Ronni Sent from Ronni's iPad4 I agree with Ronni. the golden rule is NEVER click on links in emails of this sort. If in doubt, always go to the site in question, be it PayPal, iTunes, your bank or anyone else, and login to your account, assuming you actually have one, and check things out for yourself. And, of course, delete the email. It also pays to have a close look at the sending and recipient email addresses at the top of the message. You'll find that the sending address often resolves to somewhere in Russia or Romania or similar, and of course if the recipient address is Undisclosed recipients or similar you can be absolutely certain the message is not intended for you at all. Above all, if you know for a fact that you have no dealings at all with the organisation in question, you need spend no further time over it. Just delete and move on. Peter HinchliffeApwin Computer Services FileMaker Pro Solutions Developer Perth, Western Australia Phone (618) 9332 6482Mob 0403 046 948 Mac because I prefer it -- Windows because I have to. -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug
Re: Spam, phishing pretending to be PayPal
Thanks Ronni, I didn't click on any of the email links, I just independently went to Paypal, advised them and then deleted the email from the In and Trash. Thanks for your concern. Cheers jewels On 10/10/2013, at 7:57 AM, Peter Hinchliffe wrote: On 09/10/2013, at 5:56 PM, Ronda Brown ro...@mac.com wrote: Don't click on any of the links in the Email Jewels... Just delete the email. Cheers, Ronni Sent from Ronni's iPad4 I agree with Ronni. the golden rule is NEVER click on links in emails of this sort. If in doubt, always go to the site in question, be it PayPal, iTunes, your bank or anyone else, and login to your account, assuming you actually have one, and check things out for yourself. And, of course, delete the email. It also pays to have a close look at the sending and recipient email addresses at the top of the message. You'll find that the sending address often resolves to somewhere in Russia or Romania or similar, and of course if the recipient address is Undisclosed recipients or similar you can be absolutely certain the message is not intended for you at all. Above all, if you know for a fact that you have no dealings at all with the organisation in question, you need spend no further time over it. Just delete and move on. Peter HinchliffeApwin Computer Services FileMaker Pro Solutions Developer Perth, Western Australia Phone (618) 9332 6482Mob 0403 046 948 Mac because I prefer it -- Windows because I have to. -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug
Spam, phishing pretending to be PayPal
Hi WAMUGgers I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you think? There has been no recent transaction movements in my account. Here is a plain text copy of the email Reg _ From: PayPal refunds.serv...@admin.net Subject: Receipt for your PayPal payment to administrat...@png.com Date: 9 October 2013 11:14:40 am AWST To: rwhit...@internode.on.net X-Default-Received-Spf: pass (skip=trusted (res=PASS)) x-ip-name=150.101.137.143; Received: from ipmail05.adl6.internode.on.net (unverified [150.101.137.143]) by mail.internode.on.net (SurgeMail 5.3i) with ESMTP id 175089352-1927428 for rwhit...@internode.on.net; Wed, 09 Oct 2013 13:45:00 +1030 (CDT) Received: from icp-osb-irony-out8.external.iinet.net.au ([203.59.1.225]) by ipmailmx05.adl6.internode.on.net with ESMTP; 09 Oct 2013 13:44:53 +1030 Received: from unknown (HELO server-PC) ([203.59.132.147]) by icp-osb-irony-out8.iinet.net.au with ESMTP; 09 Oct 2013 11:14:40 +0800 Return-Path: refunds.serv...@admin.net X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Result: AsoHAIzJVFLLOwHhnGdsb2JhbAAURQECCAKCNnyGW6kAAQGJYoh3chYOAQEBAQEGDQkJFCiCdAR1KWCIBQ2HCIc5iUCTPCqEJ4k6gliLIwoFAYFKhBkDgSuIDYg1AYdDhS6MXjeBP4FbBQQXgR0 X-Ironport-Anti-Spam-Result: AjMZAGjJVFLLO4ST/2dsb2JhbAAURQECCAKCNkQ4gxKDSakAAQGJYolpFnSCdARFECCBCYgFDYcIhzmJQJM8KoQnlzUKBQGBSoJugSsDgSuIDYg1AYdDhS6LI4E7N4E/L4EsBQQXgR0 X-Ironport-Av: E=Sophos;i=4.90,1060,1371047400; d=scan'208,217;a=717520853 X-Ironport-Av: E=Sophos;i=4.90,1060,1371052800; d=scan'208,217;a=160731105 Message-Id: 834e33$4p9...@icp-osb-irony-out8.iinet.net.au Content-Type: multipart/alternative; boundary=JlTFDpWU5=_4P1gkjxRixDTFAZ4ipDGjCo0 Mime-Version: 1.0 X-Rcpt-To: rwhit...@internode.on.net X-Spamdetect: : -8.30 IronPort SPAM scanned=-10.0, Content Clean match=-1.0, From3consonants=0.7, Possible url forgery/scam=2.0 X-Urlforgery: (http://worldtrans.com.cn) (http://www.paypal.com.au) X-Spamcontent: Clean X-Langguess: English X-Ip-Stats: Incoming Last 0, First 497, in=29956, out=0, spam=0 ip=203.59.1.225 Status: U X-Uidl: 91694 9 Oct 2013 06:19:34 AEST Transaction ID: 71PN116NA799763R Hello rwhit...@internode.on.net, You sent a payment of 427.00 AUD to administrat...@png.com We've asked the seller to ship. Thanks for using PayPal. To view the transaction details, log in to your PayPal account. It may take a few moments for this transaction to appear in the Recent Activity list in your Account Overview. Seller administrat...@png.com Note to seller You haven't included a note. Sender address Papua New Guinea's Palm Oil, PNG Shipping details The seller hasn’t provided any shipping details yet. Description Unit price Qty Amount Oil recipients ( Papua New Guinea's) Item number 17393949551 $427.00 AUD 1 $427.00 AUD Shipping and handling $5.00 AUD Insurance - not offered Total $432.00 AUD Payment $432.00 AUD Payment sent to administrat...@png.com Issues with this transaction? If you haven't authorized this transaction ,click the link below to get full refund. Go to the Help Centre at: http://www.paypal.com.au/AUD/RefundForm This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page. To receive emails as plain text instead of HTML, change your Notifications preferences. Just log in to your PayPal account, go to your Profile and click My Settings. Copyright © 1999-2013 PayPal, Inc. All rights reserved. PayPal Australia Pty Limited ABN 93 111 195 389 (AFSL 304962). Any general financial product advice provided in this site has not taken into account your objectives, financial situations or needs. PayPal Email ID PP1120 Reg Whitely Home: 08 9921 7272 Mob: 04 8899 7313 Email: rwhit...@internode.on.net -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug
Re: Spam, phishing pretending to be PayPal
Oops that wasn't the plain text version. Sorry, don't click on any links! Reg On 09/10/2013, at 11:53 am, Reg Whitely rwhit...@internode.on.net wrote: Hi WAMUGgers I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you think? There has been no recent transaction movements in my account. Here is a plain text copy of the email Reg -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug
Re: Spam, phishing pretending to be PayPal
This is the plain text version. Please delete the previous one from your mailbox: From: PayPal refunds.serv...@admin.net Subject: Receipt for your PayPal payment to administrat...@png.com Date: 9 October 2013 11:14:40 am AWST To: rwhit...@internode.on.net X-Default-Received-Spf: pass (skip=trusted (res=PASS)) x-ip-name=150.101.137.143; Received: from ipmail05.adl6.internode.on.net (unverified [150.101.137.143]) by mail.internode.on.net (SurgeMail 5.3i) with ESMTP id 175089352-1927428 for rwhit...@internode.on.net; Wed, 09 Oct 2013 13:45:00 +1030 (CDT) Received: from icp-osb-irony-out8.external.iinet.net.au ([203.59.1.225]) by ipmailmx05.adl6.internode.on.net with ESMTP; 09 Oct 2013 13:44:53 +1030 Received: from unknown (HELO server-PC) ([203.59.132.147]) by icp-osb-irony-out8.iinet.net.au with ESMTP; 09 Oct 2013 11:14:40 +0800 Return-Path: refunds.serv...@admin.net X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Result: AsoHAIzJVFLLOwHhnGdsb2JhbAAURQECCAKCNnyGW6kAAQGJYoh3chYOAQEBAQEGDQkJFCiCdAR1KWCIBQ2HCIc5iUCTPCqEJ4k6gliLIwoFAYFKhBkDgSuIDYg1AYdDhS6MXjeBP4FbBQQXgR0 X-Ironport-Anti-Spam-Result: AjMZAGjJVFLLO4ST/2dsb2JhbAAURQECCAKCNkQ4gxKDSakAAQGJYolpFnSCdARFECCBCYgFDYcIhzmJQJM8KoQnlzUKBQGBSoJugSsDgSuIDYg1AYdDhS6LI4E7N4E/L4EsBQQXgR0 X-Ironport-Av: E=Sophos;i=4.90,1060,1371047400; d=scan'208,217;a=717520853 X-Ironport-Av: E=Sophos;i=4.90,1060,1371052800; d=scan'208,217;a=160731105 Message-Id: 834e33$4p9...@icp-osb-irony-out8.iinet.net.au Content-Type: multipart/alternative; boundary=JlTFDpWU5=_4P1gkjxRixDTFAZ4ipDGjCo0 Mime-Version: 1.0 X-Rcpt-To: rwhit...@internode.on.net X-Spamdetect: : -8.30 IronPort SPAM scanned=-10.0, Content Clean match=-1.0, From3consonants=0.7, Possible url forgery/scam=2.0 X-Urlforgery: (http://worldtrans.com.cn) (http://www.paypal.com.au) X-Spamcontent: Clean X-Langguess: English X-Ip-Stats: Incoming Last 0, First 497, in=29956, out=0, spam=0 ip=203.59.1.225 Status: U X-Uidl: 91694 9 Oct 2013 06:19:34 AEST Transaction ID: 71PN116NA799763R Hello rwhit...@internode.on.net, You sent a payment of 427.00 AUD to administrat...@png.com We've asked the seller to ship. Thanks for using PayPal. To view the transaction details, log in to your PayPal account. It may take a few moments for this transaction to appear in the Recent Activity list in your Account Overview. Seller administrat...@png.com Note to seller You haven't included a note. Sender address Papua New Guinea's Palm Oil, PNG Shipping details The seller hasn’t provided any shipping details yet. Description Unit price Qty Amount Oil recipients ( Papua New Guinea's) Item number 17393949551 $427.00 AUD 1 $427.00 AUD Shipping and handling $5.00 AUD Insurance - not offered Total $432.00 AUD Payment $432.00 AUD Payment sent to administrat...@png.com Issues with this transaction? If you haven't authorized this transaction ,click the link below to get full refund. Go to the Help Centre at: http://www.paypal.com.au/AUD/RefundForm This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page. To receive emails as plain text instead of HTML, change your Notifications preferences. Just log in to your PayPal account, go to your Profile and click My Settings. Copyright © 1999-2013 PayPal, Inc. All rights reserved. PayPal Australia Pty Limited ABN 93 111 195 389 (AFSL 304962). Any general financial product advice provided in this site has not taken into account your objectives, financial situations or needs. PayPal Email ID PP1120 On 09/10/2013, at 11:53 am, Reg Whitely rwhit...@internode.on.net wrote: Hi WAMUGgers I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you think? There has been no recent transaction movements in my account. Here is a plain text copy of the email Reg -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug
Re: Spam, phishing pretending to be PayPal
Reg On 09/10/2013, at 12:10 PM, Reg Whitely wrote: Hi WAMUGgers I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you think? There has been no recent transaction movements in my account. A whois on the domain name png.com returns: --- Domain name: png.com Administrative Contact: - DHARSHINEE NAIDU (creativedreams...@gmail.com) +1.9173101384 Fax: - 20 WEST 87TH STREET NEW YORK, NY 10024 US - You would think that Mr Naidu is unlikely to be in the palm oil business in Papua New Guinea. Regards Geoff -- Geoff and Kaye k...@kgweb.org.au -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug
Re: Spam, phishing pretending to be PayPal
Reg On 09/10/2013, at 12:10 PM, Reg Whitely wrote: I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you think? There has been no recent transaction movements in my account. If the seller is not phishy enough, a whois on the domain of the return address provides: - Domain Name: ADMIN.NET Registrar URL: http://www.godaddy.com Updated Date: 2013-01-03 21:17:44 Creation Date: 1996-02-29 00:00:00 Registrar Expiration Date: 2018-03-02 00:00:00 Registrar: GoDaddy.com, LLC Registrant Name: Francois Normant Registrant Organization: Registrant Street: BP 22672 Registrant City: Dakar Ponty Registrant State/Province: Registrant Postal Code: 0 Registrant Country: Senegal - They produce a lot of palm oil in Senegal, but this person (with no stated organisation) is probably not in the business, and is even less likely to be associated with palm oil in PNG. More to the point, he clearly has nothing to do with Paypal. Regards Geoff -- Geoff and Kaye k...@kgweb.org.au -- The WA Macintosh User Group Mailing List -- Archives - http://www.wamug.org.au/mailinglist/archives.shtml Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml Settings Unsubscribe - http://lists.wamug.org.au/listinfo/wamug.org.au-wamug
Re: Spam, phishing pretending to be PayPal
Reg, I have had several of these and advised PayPal who confirmed that it is a Phishing scam to get your banking details. Regs, Kevin On 9/10/13 2:53 PM, Reg Whitely wrote: Hi WAMUGgers I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au mailto:phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you think? There has been no recent transaction movements in my account. Here is a plain text copy of the email Reg _ From: PayPal refunds.serv...@admin.net mailto:refunds.serv...@admin.net Subject: Receipt for your PayPal payment to administrat...@png.com mailto:administrat...@png.com Date: 9 October 2013 11:14:40 am AWST To: rwhit...@internode.on.net mailto:rwhit...@internode.on.net X-Default-Received-Spf: pass (skip=trusted (res=PASS)) x-ip-name=150.101.137.143; Received: from ipmail05.adl6.internode.on.net http://adl6.internode.on.net (unverified [150.101.137.143]) by mail.internode.on.net http://mail.internode.on.net (SurgeMail 5.3i) with ESMTP id 175089352-1927428 for rwhit...@internode.on.net mailto:rwhit...@internode.on.net; Wed, 09 Oct 2013 13:45:00 +1030 (CDT) Received: from icp-osb-irony-out8.external.iinet.net.au http://external.iinet.net.au ([203.59.1.225]) by ipmailmx05.adl6.internode.on.net http://adl6.internode.on.net with ESMTP; 09 Oct 2013 13:44:53 +1030 Received: from unknown (HELO server-PC) ([203.59.132.147]) by icp-osb-irony-out8.iinet.net.au http://icp-osb-irony-out8.iinet.net.au with ESMTP; 09 Oct 2013 11:14:40 +0800 Return-Path: refunds.serv...@admin.net mailto:refunds.serv...@admin.net X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Result: AsoHAIzJVFLLOwHhnGdsb2JhbAAURQECCAKCNnyGW6kAAQGJYoh3chYOAQEBAQEGDQkJFCiCdAR1KWCIBQ2HCIc5iUCTPCqEJ4k6gliLIwoFAYFKhBkDgSuIDYg1AYdDhS6MXjeBP4FbBQQXgR0 X-Ironport-Anti-Spam-Result: AjMZAGjJVFLLO4ST/2dsb2JhbAAURQECCAKCNkQ4gxKDSakAAQGJYolpFnSCdARFECCBCYgFDYcIhzmJQJM8KoQnlzUKBQGBSoJugSsDgSuIDYg1AYdDhS6LI4E7N4E/L4EsBQQXgR0 X-Ironport-Av: E=Sophos;i=4.90,1060,1371047400; d=scan'208,217;a=717520853 X-Ironport-Av: E=Sophos;i=4.90,1060,1371052800; d=scan'208,217;a=160731105 Message-Id: 834e33$4p9...@icp-osb-irony-out8.iinet.net.au http://icp-osb-irony-out8.iinet.net.au Content-Type: multipart/alternative; boundary=JlTFDpWU5=_4P1gkjxRixDTFAZ4ipDGjCo0 Mime-Version: 1.0 X-Rcpt-To: rwhit...@internode.on.net mailto:rwhit...@internode.on.net X-Spamdetect: : -8.30 IronPort SPAM scanned=-10.0, Content Clean match=-1.0, From3consonants=0.7, Possible url forgery/scam=2.0 X-Urlforgery: (http://worldtrans.com.cn) (http://www.paypal.com.au) X-Spamcontent: Clean X-Langguess: English X-Ip-Stats: Incoming Last 0, First 497, in=29956, out=0, spam=0 ip=203.59.1.225 Status: U X-Uidl: 91694 9 Oct 2013 06:19:34 AEST Transaction ID: 71PN116NA799763R Hello rwhit...@internode.on.net mailto:rwhit...@internode.on.net, You sent a payment of 427.00 AUD to administrat...@png.com mailto:administrat...@png.com We've asked the seller to ship. Thanks for using PayPal. To view the transaction details, log in to your PayPal account. It may take a few moments for this transaction to appear in the Recent Activity list in your Account Overview. Seller administrat...@png.com mailto:administrat...@png.com Note to seller You haven't included a note. Sender address Papua New Guinea's Palm Oil, PNG Shipping details The seller hasn't provided any shipping details yet. Description Unit price Qty Amount Oil recipients ( Papua New Guinea's) Item number 17393949551 $427.00 AUD 1 $427.00 AUD Shipping and handling $5.00 AUD Insurance - not offered Total $432.00 AUD Payment $432.00 AUD Payment sent to administrat...@png.com mailto:administrat...@png.com Issues with this transaction? If you haven't authorized this transaction ,click the link below to get full refund. Go to the Help Centre at: http://www.paypal.com.au/AUD/RefundForm This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page. To receive emails as plain text instead of HTML, change your Notifications preferences. Just log in to your PayPal account, go to your Profile and click My Settings. Copyright © 1999-2013 PayPal, Inc. All rights reserved. PayPal Australia Pty Limited ABN 93 111 195 389 (AFSL 304962). Any general financial product advice provided in this site has not taken into account your objectives, financial situations or needs. PayPal Email ID PP1120 /Reg Whitely/ / / / /Home: 08 9921 7272/ /Mob: 04 8899 7313/ /Email: rwhit...@internode.on.net mailto:rwhit...@internode.on.net/ / / / -- The WA Macintosh User
Re: Spam, phishing pretending to be PayPal
Same here with PayPal, I usually screen capture the email then go to the PayPal site and report it, PayPal always respond and are sometimes aware and sometimes not and always request you to delete the email and not to respond to PayPal from the email. The good thing with PayPal is that you are protected against any fraudulent activity. Rick. On 09/10/2013, at 11:00 AM, Kevin Lock kal...@iinet.net.au wrote: Reg, I have had several of these and advised PayPal who confirmed that it is a Phishing scam to get your banking details. Regs, Kevin On 9/10/13 2:53 PM, Reg Whitely wrote: Hi WAMUGgers I've just received this email, purported to be from PayPal. I've not had any transactions with the png palm oil people, whoever they are, and have sent a copy to phish...@paypal.com.au as requested by Paypal (see https://www.paypal.com/au/webapps/mpp/security/antiphishing-ppphishingreport) What do you think? There has been no recent transaction movements in my account. Here is a plain text copy of the email Reg _ From: PayPal refunds.serv...@admin.net Subject: Receipt for your PayPal payment to administrat...@png.com Date: 9 October 2013 11:14:40 am AWST To: rwhit...@internode.on.net X-Default-Received-Spf: pass (skip=trusted (res=PASS)) x-ip-name=150.101.137.143; Received: from ipmail05.adl6.internode.on.net (unverified [150.101.137.143]) by mail.internode.on.net (SurgeMail 5.3i) with ESMTP id 175089352-1927428 for rwhit...@internode.on.net; Wed, 09 Oct 2013 13:45:00 +1030 (CDT) Received: from icp-osb-irony-out8.external.iinet.net.au ([203.59.1.225]) by ipmailmx05.adl6.internode.on.net with ESMTP; 09 Oct 2013 13:44:53 +1030 Received: from unknown (HELO server-PC) ([203.59.132.147]) by icp-osb-irony-out8.iinet.net.au with ESMTP; 09 Oct 2013 11:14:40 +0800 Return-Path: refunds.serv...@admin.net X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Filtered: true X-Ironport-Anti-Spam-Result: AsoHAIzJVFLLOwHhnGdsb2JhbAAURQECCAKCNnyGW6kAAQGJYoh3chYOAQEBAQEGDQkJFCiCdAR1KWCIBQ2HCIc5iUCTPCqEJ4k6gliLIwoFAYFKhBkDgSuIDYg1AYdDhS6MXjeBP4FbBQQXgR0 X-Ironport-Anti-Spam-Result: AjMZAGjJVFLLO4ST/2dsb2JhbAAURQECCAKCNkQ4gxKDSakAAQGJYolpFnSCdARFECCBCYgFDYcIhzmJQJM8KoQnlzUKBQGBSoJugSsDgSuIDYg1AYdDhS6LI4E7N4E/L4EsBQQXgR0 X-Ironport-Av: E=Sophos;i=4.90,1060,1371047400; d=scan'208,217;a=717520853 X-Ironport-Av: E=Sophos;i=4.90,1060,1371052800; d=scan'208,217;a=160731105 Message-Id: 834e33$4p9...@icp-osb-irony-out8.iinet.net.au Content-Type: multipart/alternative; boundary=JlTFDpWU5=_4P1gkjxRixDTFAZ4ipDGjCo0 Mime-Version: 1.0 X-Rcpt-To: rwhit...@internode.on.net X-Spamdetect: : -8.30 IronPort SPAM scanned=-10.0, Content Clean match=-1.0, From3consonants=0.7, Possible url forgery/scam=2.0 X-Urlforgery: (http://worldtrans.com.cn) (http://www.paypal.com.au) X-Spamcontent: Clean X-Langguess: English X-Ip-Stats: Incoming Last 0, First 497, in=29956, out=0, spam=0 ip=203.59.1.225 Status: U X-Uidl: 91694 9 Oct 2013 06:19:34 AEST Transaction ID: 71PN116NA799763R Hello rwhit...@internode.on.net, You sent a payment of 427.00 AUD to administrat...@png.com We've asked the seller to ship. Thanks for using PayPal. To view the transaction details, log in to your PayPal account. It may take a few moments for this transaction to appear in the Recent Activity list in your Account Overview. Seller administrat...@png.com Note to seller You haven't included a note. Sender address Papua New Guinea's Palm Oil, PNG Shipping details The seller hasn’t provided any shipping details yet. Description Unit price Qty Amount Oil recipients ( Papua New Guinea's) Item number 17393949551 $427.00 AUD 1 $427.00 AUD Shipping and handling $5.00 AUD Insurance - not offered Total $432.00 AUD Payment $432.00 AUD Payment sent to administrat...@png.com Issues with this transaction? If you haven't authorized this transaction ,click the link below to get full refund. Go to the Help Centre at: http://www.paypal.com.au/AUD/RefundForm This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page. To receive emails as plain text instead of HTML, change your Notifications preferences. Just log in to your PayPal account, go to your Profile and click My Settings. Copyright © 1999-2013 PayPal, Inc. All rights reserved. PayPal Australia Pty Limited ABN 93 111 195 389 (AFSL 304962). Any general financial product advice provided in this site has not taken into account your objectives, financial situations or needs. PayPal Email ID PP1120 Reg Whitely Home: 08 9921 7272 Mob: 04 8899 7313 Email: rwhit...@internode.on.net -- The WA Macintosh User Group Mailing List -- Archives -
