[This is the reply from PayPal, I also sent it to the FTC.gov site, to send use this address:
spam@uce.gov
Below is the answer from PayPal and it came in a very few minutes..
granny]
RE: I do not have an account with you:::Fw: [Your payment has been initiated] (KMM1971479I15977L0KM)
Tuesday, June 30, 2009 10:09 AM
From:
This sender is DomainKeys verified
“spoof@paypal.com” spoof@paypal.com
Add sender to Contacts
To:
“Ruth
Hello Ruth
Thanks for forwarding that suspicious-looking email. You’re right - it
was a phishing attempt, and we’re working on stopping the fraud. By
reporting the problem, you’ve made a difference!
Identity thieves try to trick you into revealing your password or other
personal information through phishing emails and fake websites. To learn
more about online safety, click “Security Center” on any PayPal webpage.
Every email counts. When you forward suspicious-looking emails to
spoof@paypal.com, you help keep yourself and others safe from identity
theft.
Your account security is very important to us, so we appreciate your
extra effort.
Thanks,
PayPal
This email is sent to you by the contracting entity to your User
Agreement, either PayPal Ince, PayPal Pte. Ltd or PayPal (Europe) S.à
r.l. & Cie, S.C.A. Société en Commandite par Actions, Registered Office:
5th Floor 22-24 Boulevard Royal L-2449, Luxembourg RCS Luxembourg B 118
349.
Original Message Follows:
————————————r
To Pay Pal:
I do not have an account with you and have never used PayPal.
I have not ordered anything in nine years on the internet.
Ruth
-— On Tue, 6/30/09, services@paypal-web.com services@paypal-web.com
wrote:
From: services@paypal-web.com services@paypal-web.com
Subject: [Your payment has been initiated]
To: 72990@paypal.com
Date: Tuesday, June 30, 2009, 9:19 AM
You have initiated a payment for $35.00 USD to billing@1and1.com.
This payment will be completed once the recipient has accepted the
payment.
Payment details
Amount: $35.00 USD
Transaction ID: 5L21054G472835T
Because the payment was made from an foreign internet address, we put an
Exception Payment on
transaction ID 5L21054G472835T.
To cancel this payment, please follow the link below:
Cancel Transaction ID 5L21054G472835T.
Email ID:833
DICCCBBFXPOPYEVMXUCEUUWYIZWYWKGBEHYSCU
Opened heading:
Flag this message[Your payment has been initiated]
Tuesday, June 30, 2009 9:19 AM
From services@paypal-web.com Tue Jun 30 09:19:21 2009
Return-Path:
services@paypal-web.com
Authentication-Results:
mta348.mail.mud.yahoo.com from=paypal-web.com;
domainkeys=neutral (no sig); from=paypal-web.com; dkim=neutral (no sig)
Received:
from 166.102.165.177 (EHLO ispmxfep08-srv.windstream.net)
(166.102.165.177)
by mta348.mail.mud.yahoo.com with SMTP; Tue, 30 Jun 2009 09:19:30
-0700
Received:
from User ([72.38.52.103]) by ispmxfep08-srv.windstream.net
with ESMTP
id
20090630161929.YHGI7009.ispmxfep08-srv.windstream.net@User
Tue, 30 Jun 2009 11:19:29 -0500
Reply-To:
services@paypal-web.com
From:
services@paypal-web.com
Add sender to Contacts
To:
Subject:
[Your payment has been initiated]
Date:
Tue, 30 Jun 2009 12:19:21 -0400
MIME-Version:
1.0
Content-Type:
text/html;
charset=”Windows-1251”
Content-Transfer-Encoding:
7bit
Message-Id:
20090630161929.YHGI7009.ispmxfep08-srv.windstream.net@User
Content-Length:
622 Compact Headers
You have initiated a payment for $35.00 USD to billing@1and1.com.
This payment will be completed once the recipient has accepted the
payment.
Payment details
Amount: $35.00 USD
Transaction ID: 5L21054G472835T
Because the payment was made from an foreign internet address, we put an
Exception Payment on
transaction ID 5L21054G472835T.
To cancel this payment, please follow the link below:
Cancel Transaction ID 5L21054G472835T.
Email ID:833
DICCCBBFXPOPYEVMXUCEUUWYIZWYWKGBEHYSCU
Complaints on the hosting company for the fraud letter:
>>> This is the reply from PayPal, <<<
Jeez granny I would have figured you bid on the b/c ?
HAW ! just kiddin .. been out in sun to long.
thanks for the heads up .. con’s are popping up everywhere!!
Thanks for the truffle research!