Search our Spoof Library...
Another Spoof Email and Phishing Scam report by MillerSmiles.co.uk - click this image to go to our home page.

Paypal Member Accounts Cleanup
1st April 2004

please forward any scams you've received to spoof@millersmiles.co.uk

 

Report Summary
Date Reported
1st April 2004
Apparent Sender
Paypal
Return Address
service@paypal.com
Subject
Paypal Member Accounts Cleanup
Format
HTML
Method
disguised link leads to bogus web content
Bogus Web Content?
Yes
URL of web content
vulnerable browsers will see http://www.paypal.com but the true URL is http://tranced1.u31.euclidsimaging.com/pp/
RISK LEVEL
Medium
WARNINGS

1. Exploits URL Spoofing (canonicalisation) in Internet Explorer browsers - run Windows Update to ensure your browser is patched.

 

Unpatched Internet Explorer browsers are the target of this Phishing Scam...

 

This spoofed Paypal email is aimed at unpatched versions of Internet Explorer with its crafted HTML link to "https://www.paypal.com/accountcleanup/". That link is actually coded to exploit the URL Spoofing (canonicalisation) vulnerability that exists in unpatched browsers (Microsoft issued a patch at the beginning of February, use the URL Spoofing Vulnerability Check link on the right of this page to test your browser for this vulnerability).

Browsers that are vulnerable to this exploit, will see http://www.paypal.com in their address bar, whereas the URL of the bogus page is actually http://tranced1.u31.euclidsimaging.com/pp/ which resolves to Hurricane Electric Internet Services in the USA.

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

 

The Spoof Email ...

Paypal Member Accounts Cleanup spoofed email.

 

The bogus web page ...

Paypal Member Accounts Cleanup forged web page.

 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Email Alerts
Add your email address to our email alert service...
Subscribe

Privacy Policy

RSS News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including My Yahoo!).
Scam Alert News Feed

You can even put the latest alerts on your own web site.

Click here to learn more about RSS News Feeds and our Scam Alert Service!

Resources links - use one of the links below to access more information on Spoof Email & Phishing Scams.

Library of Spoof Email Phishing Scams

Brief guide to Phishing

Full article on spoof email scams

Spoof URL Checker

Link Checker

Browser URL Spoofing Vulnerability Check

Latest browser bug aids Phishing Scams - beware!

Destinations - other resources available on the MillerSmiles.co.uk web site.

Click the arrow to return to previous page

Home

Guides...

Book Terminology

How to identify a first edition book

Auction Watcher

List of the main Auction Sites world wide