IF you get an email from email with subject
Your order has been paid! Parcel NR:41766-777
DO not bother opening the zip file, as I got one today and i never shop at Amazon , so come to conclude its a virus being sent out. Maybe amazon might look into it ?
Copy of email with headers below :
|X-YMailISG:||too big to display here|
|Authentication-Results:||mta1001.mail.mud.yahoo.com from=royalhuisman.com; domainkeys=neutral (no sig); from=royalhuisman.com; dkim=neutral (no sig)|
|Received:||from 127.0.0.1 (EHLO ) by mta1001.mail.mud.yahoo.com with SMTP; Fri, 14 May 2010 08:54:51 -0700|
|Received:||from ppp-70-128-253-154.dsl.ksc2mo.swbell.net ([184.108.40.206] helo=ppp-70-245-177-72.dsl.ksc2mo.swbell.net) by with esmtp (Exim 4.69) (envelope-from <email@example.com>) id 1OCxDq-00043Z-2d for ; Fri, 14 May 2010 10:54:51 -0500|
|Received:||from 220.127.116.11 by mail.royalhuisman.com; Fri, 14 May 2010 10:52:54 -0600|
“Amazon Manager Alexis Delarosa” <firstname.lastname@example.org>
|Subject:||Your order has been paid! Parcel NR:41766-777|
|Date:||Fri, 14 May 2010 10:52:54 -0600|
|X-Mailer:||Microsoft Office Outlook, Build 11.0.6353|
|X-MimeOLE:||Produced By Microsoft MimeOLE V6.00.2800.1158|
|X-AntiAbuse:||This header was added to track abuse, please include it with any abuse report|
|X-AntiAbuse:||Primary Hostname –|
|X-AntiAbuse:||Original Domain – a1whs.com|
|X-AntiAbuse:||Originator/Caller UID/GID – [47 12] / [47 12]|
|X-AntiAbuse:||Sender Address Domain – royalhuisman.com|
Thank you for shopping at Amazon.com!
We have successfully received your payment.
Your order has been shipped to your billing address.
You have ordered ” Sony Bravia S6266 ”
You can find your tracking number in attached to the e-mail document.
Print the postal label to get your package.
We hope you enjoy your order!
Alexis Delarosa, Amazon