{"id":286,"date":"2013-04-17T21:53:55","date_gmt":"2013-04-17T21:53:55","guid":{"rendered":"http:\/\/zaneyclicks.com\/Blog\/?p=286"},"modified":"2013-04-17T21:59:11","modified_gmt":"2013-04-17T21:59:11","slug":"pfishing-emails-what-to-look-for-and-do-with-them","status":"publish","type":"post","link":"http:\/\/zaneyclicks.com\/Blog\/2013\/04\/pfishing-emails-what-to-look-for-and-do-with-them\/","title":{"rendered":"Pfishing emails &#8211; what to look for and do with them"},"content":{"rendered":"<h1><span style=\"color: #008000;\">Well while I have a fresh one here I thought I would show you what a Pfishing email looks like &#8211; what to do when you get one and what to do with them when you get them.<\/span><\/h1>\n<h3 class=\"details hidefocus\" id=\"yui_3_7_2_1_1366213089592_27358\" tabindex=\"-1\"><a class=\"subanchor\" id=\"yui_3_7_2_1_1366213089592_27357\" style=\"max-width: 599px;\" tabindex=\"0\" title=\"Click to search for messages with same subject\" href=\"http:\/\/mail.yahoo.com\/\" data-action=\"search\">Payza: Important Notice Account Holder<\/a><\/h3>\n<div class=\"header-expand\" id=\"yui_3_7_2_1_1366213089592_27651\"><a class=\"toggle-details\" id=\"yui_3_7_2_1_1366213089592_27650\" title=\"Hide details\" role=\"button\" href=\"http:\/\/us-mg6.mail.yahoo.com\/neo\/launch?.rand=bm49ja4fjq79a#\" data-action=\"toggle-msg-header\">Hide Details<\/a><\/div>\n<div class=\"info expanded twolines\" id=\"msg_details\">\n<dl class=\"details\" id=\"yui_3_7_2_1_1366213089592_27647\">\n<dt class=\"hdr-info\" id=\"hdr-from\">From<\/dt>\n<dd class=\"hdr-info\" id=\"yui_3_7_2_1_1366213089592_27649\">\n<ul class=\"inline-items\" id=\"yui_3_7_2_1_1366213089592_27648\">\n<li><span class=\"lozengeContainer\"> <span class=\"btn lozenge small left \" data-name=\"Payza\" data-address=\"noreply@payza.com\" data-action=\"contact-card-menu\"> <a dir=\"\" tabindex=\"0\" title=\"noreply@payza.com\" role=\"button\" href=\"http:\/\/us-mg6.mail.yahoo.com\/neo\/launch?.rand=bm49ja4fjq79a#\">Payza<\/a> <\/span><span class=\"btn lozenge lozengeadd right small btn-kiosk-addcontact\" data-action=\"modal\" data-name=\"Payza\" data-address=\"noreply@payza.com\"> <a tabindex=\"0\" title=\"Add noreply@payza.com to your Contacts [Shift+A]\" role=\"button\">\u00a0<\/a> <\/span> <\/span><\/li>\n<\/ul>\n<\/dd>\n<dt class=\"hdr-info\" id=\"hdr-to\">To<\/dt>\n<dd class=\"hdr-info\" id=\"yui_3_7_2_1_1366213089592_27646\">\n<ul class=\"inline-items\" id=\"msg-header-to\">\n<li><span class=\"lozengeContainer\"> <span class=\"btn lozenge small left right \" data-name=\"wisgrandma@yahoo.com\" data-address=\"wisgrandma@yahoo.com\" data-action=\"contact-card-menu\"> <a dir=\"\" tabindex=\"0\" title=\"wisgrandma@yahoo.com\" role=\"button\" href=\"http:\/\/us-mg6.mail.yahoo.com\/neo\/launch?.rand=bm49ja4fjq79a#\">wisgrandma@yahoo.com<\/a> <\/span> <\/span><\/li>\n<\/ul>\n<\/dd>\n<\/dl>\n<\/div>\n<div class=\"msg-body inner  undoreset\" id=\"yui_3_7_2_1_1366213089592_27363\" role=\"main\">\n<div id=\"yiv538658695\">\n<p>This is an automated email, please do not reply\u00a0 <img decoding=\"async\" id=\"yiv538658695yui_3_7_2_1_1363639620166_2404\" alt=\"\" src=\"https:\/\/www.payza.com\/emails\/images\/bar.png\" width=\"100%\" height=\"3\" \/><\/p>\n<h1 id=\"yiv538658695yui_3_7_2_1_1363639620166_2189\" style=\"font-family: Arial, Helvetica, sans-serif; color: #66aa1e; font-weight: normal; font-size: 24px; padding-left: 0px; padding-right: 0px; padding-top: 10px; padding-bottom: 0px;\">Dear Member<\/h1>\n<p id=\"yiv538658695yui_3_7_2_1_1363639620166_2433\" style=\"font-family: Arial, Helvetica, sans-serif; color: #7ebd41; font-weight: normal; font-size: 19px; line-height: 24px; padding: 0px;\">Accepting our terms of service during the account registration is considered as your digital signature and is a legally binding agreement between you and Payza. You need validate before you can use full access your Payza account.<\/p>\n<p id=\"yiv538658695yui_3_7_2_1_1363639620166_2434\" style=\"font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 21px; color: #545454;\">Please click on the following link to validate your account:<\/p>\n<p id=\"yiv538658695yui_3_7_2_1_1363639620166_2439\" style=\"font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 21px; color: #545454;\"><b id=\"yiv538658695yui_3_7_2_1_1363639620166_2438\"> <span class=\"yiv538658695yshortcuts\" id=\"yiv538658695lw_1363639649_1\"> <span class=\"yshortcuts\" id=\"lw_1366233402_0\">Click here to validate your account.\u00a0 (this was clickable and I broke the link for this blog post example)<br \/>\n<\/span><\/span><\/b><\/p>\n<p id=\"yiv538658695yui_3_7_2_1_1363639620166_2440\" style=\"font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 21px; color: #545454;\">If you not validate, your account will temporary frozen with unknown period.<\/p>\n<div style=\"float: right;\"><span class=\"yiv538658695social\" style=\"font-family: Arial, Helvetica, sans-serif; color: #3366cc; font-size: 15px;\"> Follow Us <\/span> <a style=\"text-decoration: none;\" href=\"https:\/\/blog.payza.com\/\" target=\"_blank\" rel=\"nofollow\"> <img loading=\"lazy\" decoding=\"async\" alt=\"on our Blog\" src=\"https:\/\/www.payza.com\/emails\/images\/blogger.png\" width=\"16\" height=\"16\" border=\"0\" \/> <\/a> <a style=\"text-decoration: none;\" href=\"http:\/\/www.facebook.com\/payzaglobal\" target=\"_blank\" rel=\"nofollow\"> <img loading=\"lazy\" decoding=\"async\" alt=\"on Facebook\" src=\"https:\/\/www.payza.com\/emails\/images\/facebook.png\" width=\"16\" height=\"16\" border=\"0\" \/> <\/a> <a style=\"text-decoration: none;\" href=\"https:\/\/twitter.com\/#%21\/payzaofficial\" target=\"_blank\" rel=\"nofollow\"> <img loading=\"lazy\" decoding=\"async\" alt=\"on Twitter\" src=\"https:\/\/www.payza.com\/emails\/images\/twitter.png\" width=\"16\" height=\"16\" border=\"0\" \/><\/a><\/div>\n<p><span id=\"yiv538658695yui_3_7_2_1_1363639620166_2442\" style=\"font-family: Arial, Helvetica, sans-serif; font-size: 17px; color: #66aa1e;\"> Thanks for choosing Payza (formerly <span class=\"yshortcuts\" id=\"lw_1366233402_1\">AlertPay<\/span>),<br \/>\nThe Payza Team <\/span> <img decoding=\"async\" id=\"yiv538658695yui_3_7_2_1_1363639620166_2443\" alt=\"\" src=\"https:\/\/www.payza.com\/emails\/images\/bar.png\" width=\"100%\" height=\"3\" \/><\/p>\n<p id=\"yiv538658695yui_3_7_2_1_1363639620166_2444\" style=\"font-family: Arial, Helvetica, sans-serif; font-size: 12px; color: #545454; padding-left: 0px; padding-right: 0px; padding-top: 10px; padding-bottom: 0px;\"><span style=\"font-family: Arial, Helvetica, sans-serif; font-size: 14px; font-weight: bold;\"> Need Assistance?<\/span><br \/>\nWe&#8217;re happy to help <a href=\"https:\/\/www.payza.com\/support\" target=\"_blank\" rel=\"nofollow\">by phone<\/a> Monday to <span class=\"yiv538658695yshortcuts\" id=\"yiv538658695lw_1363639649_2\"><span class=\"yshortcuts\" id=\"lw_1366233402_2\">Friday 8:00am to 7:00 pm EST<\/span><\/span>, or <a id=\"yiv538658695yui_3_7_2_1_1363639620166_2445\" href=\"https:\/\/www.payza.com\/support\" target=\"_blank\" rel=\"nofollow\"> by email<\/a><br \/>\nCopyright 2013 Payza (formerly AlertPay). All rights reserved.<\/p>\n<h1 style=\"font-family: Arial, Helvetica, sans-serif; font-size: 12px; color: #545454; padding-left: 0px; padding-right: 0px; padding-top: 10px; padding-bottom: 0px;\"><span style=\"color: #008000;\">Ok this is an example that I got today and get lot of these and never, never, never click on the links in these emails as someone is using this email for fish for your info.\u00a0 The biggest clue here for me is when it says Dear Member &#8211; Paypal, Payza, Ebay all these companies use your first name and never will start off their emails with Dear Member.<\/span><\/h1>\n<h1 style=\"font-family: Arial, Helvetica, sans-serif; font-size: 12px; color: #545454; padding-left: 0px; padding-right: 0px; padding-top: 10px; padding-bottom: 0px;\"><span style=\"color: #008000;\">What do you do when you get one &#8211; well here is what I do as I click on actions and click on show header and I copy all that info and forward this email and the header info to phishing@payza.com and if you don&#8217;t remember the address to send it to &#8211; then just type in Google and search where to send phishing emails to Paypal, Payza, Ebay, etc.\u00a0 where ever you got the email from.\u00a0 Don&#8217;t know what a header looks like &#8211; here is what the header looked like to this one.<\/span><\/h1>\n<p style=\"font-family: Arial, Helvetica, sans-serif; font-size: 12px; color: #545454; padding-left: 0px; padding-right: 0px; padding-top: 10px; padding-bottom: 0px;\"><span id=\"yui_3_7_2_1_1366213089592_28122\">From Payza Wed Apr 17 12:32:46 2013<br \/>\nX-Apparently-To: <a id=\"yui_3_7_2_1_1366213089592_28124\" href=\"mailto:wisgrandma@yahoo.com\" target=\"_blank\" rel=\"nofollow\"><span class=\"yshortcuts\" id=\"lw_1366234906_0\">wisgrandma@yahoo.com<\/span><\/a> via 72.30.237.10; Wed, 17 Apr 2013 12:38:00 -0700<br \/>\nReturn-Path: &lt;<a id=\"yui_3_7_2_1_1366213089592_28123\" href=\"mailto:anonymous@maiil.manukinvest.net\" target=\"_blank\" rel=\"nofollow\"><span class=\"yshortcuts\" id=\"lw_1366234906_1\">anonymous@maiil.manukinvest.net<\/span><\/a>&gt;<br \/>\nReceived-SPF: none (domain of <a id=\"yui_3_7_2_1_1366213089592_28328\" href=\"http:\/\/maiil.manukinvest.net\" target=\"_blank\"><span class=\"yshortcuts\" id=\"lw_1366234906_2\">maiil.manukinvest.net<\/span><\/a> does not designate permitted sender hosts)<br \/>\nb3QgcmVwbHnCoCBEZWFyIE1lbWJlciBBY2NlcHRpbmcgb3VyIHRlcm1zIG9m<br \/>\nIHNlcnZpY2UgZHVyaW5nIHRoZSBhY2NvdW50IHJlZ2lzdHJhdGlvbiBpcyBj<br \/>\nb25zaWRlcmVkIGFzIHlvdXIgZGlnaXRhbCBzaWduYXR1cmUgYW5kIGlzIGEg<br \/>\nbGVnYWxseSBiaW5kaW5nIGFncmVlbWVudCBiZXR3ZWVuIHlvdSBhbmQgUGF5<br \/>\nemEuIFlvdSBuZWVkIHZhbGlkYXRlIGJlZm9yZSB5b3UgY2FuIAEwAQEBAQ&#8211;<br \/>\nX-YMailISG: 5YLxIfoWLDtpzvUE8CqAtOMOit_ptKSWUXZK73Z_zcBxus7N<br \/>\nr0TMv6rpym2tHLWn1zzZUb0hcDZdx8A6j3OH57TOwKCbhU74s9VHxi_0APFz<br \/>\noYo6qAE9zsPZD.YIVDVuF2_O7UZWx0ehD0Fa8q_QtJnQf90KP55amW7wDgCW<br \/>\nd.EFvulIVoP2i_Mo72YqzIxl3lwsdMv9yGK7pv9jpESlE.6pmnGdiyeOD27R<br \/>\n7jHARS0APESguc8MNjNxipZUm.eLsX0UwrXnGw.NdRZo_uhE9Imr5CkTs_Qi<br \/>\nrdZdAZggu4Up7GL54uAAPu2JZ0dL37y3KH1UYlv.hIosImpZZlI8XdrvANgV<br \/>\nO2k3nUpuKMUV8AXYG4.eI9HZNbDxgXTZUBF.MtP6ck6o9Acqdv6d.B7KXNcC<br \/>\nEEdov0JVMMJ0YuCv3EJ2P_4f3CXrkC0T_DCeBtZ4MDliDHLRaw_lzaekQJdf<br \/>\nh7UX4Sq4EamAeN8VUU_7G_Etf4xIvjmPYtj2qzy0nrEqLuQvriAyAQsgK0TO<br \/>\nyDPeJw2boQEv2P5yePCSHWFUpPBKse_hg3NEBUnhWRgg_tGOAlJCYmIvDZ5n<br \/>\nipm9TtfUeBCE2cO89ySa1gUh.2myz7v74sbRVAIOIcVfpBC0Oipjl8f.DRdY<br \/>\nbitYslMVu0yx29Ps2LqNo98vExcoyXh7iGyzTNn7KOZafdGYV7wHIL.J9eEy<br \/>\nbJ0LVaMwd0dj1wnukmOBXfkVrO0LQ7nR.KnL5zppkSyOnQZJvjId947mxy9E<br \/>\nTBnjX1Yoa_QdfsUHsfS9VQk2EljDlpCTgC50FKcB8ax2XSoQlhAfQUm6KMpI<br \/>\n&amp;nbs p;Coy.42ZLkc072pOaGHxHG_jkVgZb1qda.e_ezdm43CR5RzLBMSlUNttB_XS1<br \/>\nFhEJ61xRS.CcYUYehk04xBvqZWrHhm9xPq0So8m7Bo8t2jFJCfTqDXESQF2d<br \/>\n9W2uOQutVYmFPVbrxdKzismia85wZlFTs.frBmMQxDR4LdxB5QymEiEFOASY<br \/>\nF2kMUPK6jmlhS6.XtgEW1V0K5LUoStYJbUfL83xXjhWtiVL9Y5083cgkU4bd<br \/>\nkcTtZEjNx.QRdvd6.dPwbv1jER5zre.zn0tWZC7MqmKfLU87RtXcU.beaKeR<br \/>\nHMFOFJ3MvpXSJFWiQVc9GC29Z7HaYYcBtOsZIZXJMGAVSwIUCP4oczpSnA1o<br \/>\n3rX6yiJ.C0UZXEdT0sERL4FjHZ9bZyJCqwp0UqwT0S1DsqCD1BdOY6O1mWVh<br \/>\nispfwblqthyR4b_gc0y7vlyy2.qYJRcRNnzX16g3Eo2bkS6ohH56KkZPL_Oa<br \/>\nxBSPpnJBG6w.yYS5P4gh63Jirg.23u4EXkvDGvhwOHHQGsCVLlgMBeh_hnlK<br \/>\nQXju_Tqs.yJCY3jWaX1349zdqC3H9rD0HwJMFcMpXTV2DWAbLHdLfxJp85US<br \/>\nQQcG9YCQpih_UbJCqKF88K.8RIWCT4c-<br \/>\nX-Originating-IP: [199.19.116.218]<br \/>\nAuthentication-Results: mta1253.mail.sk1.yahoo.com\u00a0 from=payza.com; domainkeys=neutral (no sig);\u00a0 from=payza.com; dkim=neutral (no sig)<br \/>\nReceived: from 127.0.0.1\u00a0 (EHLO maiil.manukinvest.net) (199.19.116.218)<br \/>\nby mta1253.mail.sk1.yahoo.com with SMTP; Wed, 17 Apr 2013 12:38:00 -0700<br \/>\nReceived: (qmail 25999 invoked by uid 48); 17 Apr 2013 19:32:46 -0000<br \/>\nDate: 17 Apr 2013 19:32:46 -0000<br \/>\nMessage-ID: &lt;<a href=\"mailto:20130417193246.25996.qmail@maiil.manukinvest.net\" target=\"_blank\" rel=\"nofollow\"><span class=\"yshortcuts\" id=\"lw_1366234906_3\">20130417193246.25996.qmail@maiil.manukinvest.net<\/span><\/a>&gt;<br \/>\nTo: wisgrandma@yahoo.com<br \/>\nSubject:\u00a0 Payza: Important Notice Account Holder<br \/>\nX-PHP-Script: daguruinside.com\/dag.php for 180.214.233.35<br \/>\nFrom: Payza &lt;<a id=\"yui_3_7_2_1_1366213089592_28322\" href=\"mailto:noreply@payza.com\" target=\"_blank\" rel=\"nofollow\"><span class=\"yshortcuts\" id=\"lw_1366234906_4\">noreply@payza.com<\/span><\/a>&gt;<br \/>\nReply-To:<br \/>\nMIME-Version: 1.0<br \/>\nContent-Type: text\/html<br \/>\nContent-Transfer-Encoding: 8bit<br \/>\nContent-Length: 3697<\/span><\/p>\n<h1 style=\"font-family: Arial, Helvetica, sans-serif; font-size: 12px; color: #545454; padding-left: 0px; padding-right: 0px; padding-top: 10px; padding-bottom: 0px;\"><span style=\"color: #008000;\">This info is important to these departments as it helps them track down these people faster. Most of the time you will get an automated letter back from that department that they got your email and will answer it soon.\u00a0 You will get\u00a0 an answer back from who you sent the email to that will look like this.<\/span><\/h1>\n<p style=\"font-family: Arial, Helvetica, sans-serif; font-size: 12px; color: #545454; padding-left: 0px; padding-right: 0px; padding-top: 10px; padding-bottom: 0px;\">Dear Nancy Radlinger,<\/p>\n<p>Thank you for contacting Payza.<\/p>\n<p>We would like to thank you for forwarding this information to us.<\/p>\n<p>As you know, Payza is not associated in any way with the email you have received. Please be aware that some individuals send emails using Payza &#8216;s branding and logo to defraud members and\/or gain access to sensitive personal information.<\/p>\n<p>If you receive an email that claims to be from Payza but was sent from a different domain or an email asking you to provide your password, transaction PIN, or to verify your account information, this email was not sent from Payza.<\/p>\n<p>You can visit our Security Center if you would like more information. <a id=\"yui_3_7_2_1_1366213089592_28755\" href=\"https:\/\/www.payza.com\/security\" target=\"_blank\">https:\/\/www.payza.com\/security<\/a>. We place these warnings on our site for the protection of our Payza members.<\/p>\n<p>Sincerely,<\/p>\n<p>The Account Security Team<br \/>\n<a href=\"http:\/\/Payza.com\" target=\"_blank\"><span class=\"yshortcuts\" id=\"lw_1366233401_0\">Payza.com<\/span><\/a><\/p>\n<p>Ticket Details<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;<br \/>\nTicket ID: CUY-459-48773<br \/>\nDepartment: Phishing Reports<br \/>\nType: Issue<br \/>\nStatus: Closed<br \/>\nPriority: High<\/p>\n<p>Support Center: <a id=\"yui_3_7_2_1_1366213089592_28756\" href=\"https:\/\/helpdesk.payza.com\/index.php\" target=\"_blank\">https:\/\/helpdesk.payza.com\/index.php<\/a>?<\/p>\n<h1 style=\"font-family: Arial, Helvetica, sans-serif; font-size: 12px; color: #545454; padding-left: 0px; padding-right: 0px; padding-top: 10px; padding-bottom: 0px;\"><span style=\"color: #008000;\">So please be aware of all this as they can come from many different companies and as I&#8217;m writing\u00a0 up this email &#8211; I got another one from Payza &#8211; be on the alert and report so that these people can be caught.\u00a0 Thanks<\/span><\/h1>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Well while I have a fresh one here I thought I would show you what a Pfishing email looks like &#8211; what to do when you get one and what to do with them when you get them. Payza: Important &hellip; <a href=\"http:\/\/zaneyclicks.com\/Blog\/2013\/04\/pfishing-emails-what-to-look-for-and-do-with-them\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,1],"tags":[66,6,65,64,63,67,5],"class_list":["post-286","post","type-post","status-publish","format-standard","hentry","category-internet-marketing","category-rambling","tag-ebay","tag-nancy-radlinger","tag-paypal","tag-payza","tag-pfishing-emails","tag-report-pfishing-emails","tag-zaney-clicks"],"_links":{"self":[{"href":"http:\/\/zaneyclicks.com\/Blog\/wp-json\/wp\/v2\/posts\/286","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/zaneyclicks.com\/Blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/zaneyclicks.com\/Blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/zaneyclicks.com\/Blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/zaneyclicks.com\/Blog\/wp-json\/wp\/v2\/comments?post=286"}],"version-history":[{"count":5,"href":"http:\/\/zaneyclicks.com\/Blog\/wp-json\/wp\/v2\/posts\/286\/revisions"}],"predecessor-version":[{"id":290,"href":"http:\/\/zaneyclicks.com\/Blog\/wp-json\/wp\/v2\/posts\/286\/revisions\/290"}],"wp:attachment":[{"href":"http:\/\/zaneyclicks.com\/Blog\/wp-json\/wp\/v2\/media?parent=286"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/zaneyclicks.com\/Blog\/wp-json\/wp\/v2\/categories?post=286"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/zaneyclicks.com\/Blog\/wp-json\/wp\/v2\/tags?post=286"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}