Forum Home
PC World Chat
 
Thread ID: 118303 2011-05-28 22:38:00 Suspicious.. Phishing mail leonidas5 (2306) PC World Chat
Post ID Timestamp Content User
1205462 2011-05-28 22:38:00 I've sent the following to PayPal. I suspect the whole thing. It, if it is phishing mail, is would seem to be getting rather sophisticated!



May 28, 2011 17:24:23 PDT
Transaction ID: 6DR682947P3939243

Dear Customer,

You sent a payment of $137.38 USD to surfermom2 (craig.lister@yahoo.com)
Thanks for using PayPal. To see all the transaction details, log in to your PayPal account.
It may take a few moments for this transaction to appear in your account.

Seller Note to seller
surfermom2 You haven't included a note.
craig.lister@yahoo.com



Shipping address - unconfirmed Shipping details
Tina Duff USPS First Class Mail International
407 1st Ave N
RR2
Chesley ON N0G 1L0
Canada
--------------------------------------------------------------------------------------------------------
Description Unit price Qty Amount
--------------------------------------------------------------------------------------------------------
New Fotomax Digital
Item# 140517603050 $124.99 USD 1 $124.99 USD
--------------------------------------------------------------------------------------------------------
Shipping and handling $12.39 USD
Insurance - not offered ----
Total $137.38 USD

Payment $137.38 USD
Charge will appear on your credit card statement as “PAYPAL *CRAIGLISTER"
Payment sent to craig.lister@yahoo.com
>From amount $137.02 CAD
To amount $137.38 USD
Exchange rate: 1 Canadian Dollar = 1.00972 U.S. Dollars

Note: If you haven't authorized this transaction ,click the link below to dispute transaction and get full refund.
Go to the Help Center at: www.paypal.com/nz/help.

Get verified Pay with your bank and you're 100% protected against unauthorized payments sent from your PayPal account. Log
in and click the Unverified link below your name.
Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in
to your PayPal account and click Help in the top right corner of any PayPal page.
To change your email notifications, log in to your PayPal account and go to your Profile to update your settings.

Copyright 1999-2011 PayPal. All rights reserved.

PayPal Email ID PP843
leonidas5 (2306)
1205463 2011-05-28 22:41:00 Do you actually have a PayPal account?

:pf1mobmini:
Erayd (23)
1205464 2011-05-28 22:48:00 Yes, but nothing there relates to me. Why suspicious... the NZ element of the reply url for a Canadian purchase by a Canadian?

Definitely not my account or my purchase.
leonidas5 (2306)
1205465 2011-05-28 22:59:00 I got the same one at 2.30am this morning. Sent it to the Spam folder.

I removed my linked credit card from Paypal. maybe someone has had access to their customer database?

I don't use Paypal anymore. A debit card suffices now for online purchases

Ken
kenj (9738)
1205466 2011-05-28 23:27:00 What are the actual unmasked links in the email?

That eBay item number is for a "New Disney Tinkerbell & Fairies Twin Bed Tent W/Bonus", and check out the address on Googlemaps -

maps.google.co.nz Ave+N,+Chesley,+ON+N0G+1L0,+Canada&gl=nz&ei=8nXhTbL7L4-isQPdtay_Bg&sa=X&oi=geocode_result&ct=title&resnum=1&ved=0CBcQ8gEwAA
Renegade (16270)
1205467 2011-05-29 00:56:00 Got the same this morning .... never used Paypal. The link to Paypal nz does seem to be legit though ... but wasn't game enough to try it on my comp ... just in case !! SP8's (9836)
1205468 2011-05-29 00:56:00 I received this email twice this morning (I am in NZ). A content search brought me here.

The masked link...

www.paypal.com/nz/help

actually points to

pool-71-164-130-174.dllstx.fios.verizon.net pyorxp4xDjvhNoCpUoV0JW4Vwl9WChkw48dispatch05885d80 a13c0d/index.html

I haven't clicked it (and I would not advise it either) its just what comes up in my status bar when I mouse over it.
smartcooky (16394)
1205469 2011-05-29 01:21:00 I received this email twice this morning (I am in NZ). A content search brought me here.

The masked link...

www.paypal.com/nz/help

actually points to

pool-71-164-130-174.dllstx.fios.verizon.net pyorxp4xDjvhNoCpUoV0JW4Vwl9WChkw48dispatch05885d80 a13c0d/index.html

I haven't clicked it (and I would not advise it either) its just what comes up in my status bar when I mouse over it.

I don't see that when I mouse over it.
I clicked on it and it actually goes to www.paypal.com/nz/help as far as I can see and that is what shoes in the address bar.
Safari (3993)
1205470 2011-05-29 01:25:00 Firefox is onto it:

Reported Web Forgery!

This web page at pool-71-164-130-174.dllstx.fios.verizon.net has been reported as a web forgery and has been blocked based on your security preferences.
Renegade (16270)
1205471 2011-05-29 01:27:00 Chrome reports it too... johcar (6283)
1 2