Paypal email hoax and web page scam
in distribution from 26th October 2003 to Present

This hoax Paypal email was distributed from 26th October 2003 and is STILL ACTIVE and we an image of the hoax email and bogus web Paypal web page that it sends you to. These are just images of the originals, so there is absolutely no code included and the links or buttons will not work. The images shown have been reduced to 80% of the original size.

Images - Hoax Email - Bogus Web Page

The hoax email...

The hoax email requests that you verify your account information as part of a routine security request. The email contains a link, which has been disguised to look like a genuine Paypal link, which it is NOT...

The bogus web page...

When you click on the link provided in the hoax email, you are sent to a bogus Paypal 'processing log in...' page and then a bogus web page which contains a web form to enter your information. This page sends any information given to the 'scammers' using php script.

The web pages...

(IP address 211.113.186.42)

resolves to an ISP (Onse Telecom) in Korea and the information was to be processed through an online mail service offered by a "Squirrel Mail" whose IP resolves to KMITT.net (King Mongkut's Institute of Technology Thonburi in Bangkok, Thailand)....

If you provide this information and submit it, it is captured by the scammers with the use of PHP script (which is a common process in recent hoaxes) while you are sent to an error page.