REPORT SUMMARY
Date Reported
4th January 2004
Apparent Sender
Paypal
Subject
Notification of
Paypal Limited
Account
Access
Senders Address
(spoofed)
service
@paypal.com
Content
text and a
link to a forged
Paypal web form
(see images)
Spoofed Web page/site?
Yes
Web page/site
content
forged Paypal web
page with web form
requiring
email user
name & password,
name & address
details, credit or
debit card and ATM
PIN numbers, etc
Web page/site origin
URL
http://
dedicated.europe.
webmatrixhosting.
net/
Identity Theft method
Web form
information
is captured by the
scammers while you
are sent to a
genuine paypal.com
page
More...
Latest
phishing
scam
Another
Bank Email Scam
See our guide to
phishing scams
Other
Resources...
See our guides to
Free Utilities...
List of
Auction Sites
Notification of Paypal Limited Account Access - Email Scam
4th January 2004
Has your Paypal account been accessed by an unauthorised 3rd party? - Not this time, its a scam ...
This spoof email (as eBay and Paypal like to call these email scams) takes the form of a text email with a cloaked link (see images below).
The email text states that there is suspicion 'that your PayPal account may have been accessed by an unauthorized third party' and urges you to use the link provided to restore your now limited access to your Paypal account. This is of-course, a complete fabrication, and using the disguised link will result in a forged Paypal web form appearing in your browser (see images below).
The cloaking of this link utilises a known bug in Internet Explorer browsers which will cause the incorrect URL to be displayed in the address bar. See our article on cloaked links and use our Link Checker to test links within emails or our Spoof URL Checker to check address bar entries. While you may see http://www.paypal.com, this is NOT the web site that you will be viewing in this scam. The true address of that forged Paypal web form is dedicated.europe.webmatrixhosting.net/ (which would be displayed correctly in unaffected browsers).
Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Email
Alerts
Add your email address to our email alert service...
Subscribe
Privacy Policy
RSS
News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including
My Yahoo!).
Scam Alert News Feed
You can even put the latest alerts on your own web site.
FORWARD
YOUR EMAIL SCAMS
TO KU.OC.SELIMSRELLIM@FOOPS
and help us to
build awareness and
help others
This forged web form asks for several pieces of private information including
your email address and password, credit or debit card number and ATM
PIN number. Any information submitted into this form would be collected
by the scammers and used to commit acts of fraud.
If you have received this hoax email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.
Take a good look at the following images, because this hoax email scam may be coming to an inbox near you!
The Email ...
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|||
The fake web page...
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
|||
 |
||||
Also see our brief guide to Phishing
