Web Hosting Talk : Other Forums : Web Hosting Lounge : Fake PayPal Emails

[sjau]

Hiya,

I just received this email

Please verify your information today!
Dear Paypal Member.

Your account has been randomly flagged in our system as a part of our routine security measures. This is a must to ensure that only you have access and use of your paypal account and to ensure a safe Paypal experience. We require all flagged accounts to verify their information on file with us. To verify your information, click here and enter the details requested. After you verify your information, your account shall be returned to good standing and you will continue to have full use of your account.

Thank you for using PayPal!

Please do not reply to this e-mail. Mail sent to this address cannot be answered.

The URL submitted in the Email is this:

http://www.paypal.com/@211.113.186.42/pp/processing.htm

Note the "@" sing!!!!

You can access password protected webpages and ftp servers through your browser like this:

http://USERNAME:PASSWORD@domain.com
ftp://USERNAME:PASSWORD@domain.com

So the given URL will go to this IP address: 211.113.186.42 and the www.paypal.com before the @ is there just to trick people into believing it's a paypal.com site!


wsjb78

[SilveR_Pixel]

I wouldnt answer that with any details.

If you are unsure if that is a legit email from paypal, either send them and email or call them up and ask them.

I think they issued a warning a few days ago about thos kinds of emails.

[anon-e-mouse]

There are probably dozens of threads on this scam. I believe there is a legitimate paypal address to report it to in one of the longer threads.

[Luke]

Yup, got that one aswell, the address you need to forward the message to is:

spoof@paypal.com

The trick with these is to just be careful, and think about why they would need the details. I also received one from "eBay" recently saying that they needed to confirm my details. Its a tricky world out there .

Luke

[Loon]

http://211.113.186.42 <-- obviously not a paypal website lol

It's scary though to think how many "less clued up" people fall for these scams, i bet there's quite a few.

[Tazzman]

inetnum: 211.113.186.0 - 211.113.186.255
netname: SHINBIRO-CATV-HAENAMKWANGJU-KR
descr: Onse Telecom
descr: 192-2 Kumi-dong Bundang-ku Sungnam-si
descr: KYONGGI
descr: 453-500
country: KR
admin-c: SK4792-KR
tech-c: SK4793-KR
remarks: This IP address space has been allocated to KRNIC.
remarks: For more information, using KRNIC Whois Database
remarks: whois -h whois.nic.or.kr
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: hostmaster@nic.or.kr 20030811
source: KRNIC

And then they wonder why hosting companies block Asian IP blocks...

query: 211.113.186.42

# ENGLISH

KRNIC is not ISP but National Internet Registry similar with APNIC.
Please see the following end-user contacts for IP address information.

IP Address : 211.113.186.0-211.113.186.255
Network Name : SHINBIRO-CATV-HAENAMKWANGJU
Connect ISP Name : SHINBIRO
Connect Date : 20020402
Registration Date : 20020402

[ Organization Information ]
Orgnization ID : ORG235378
Org Name : Onse Telecom
State : KYONGGI
Address : 192-2 Kumi-dong Bundang-ku Sungnam-si
Zip Code : 453-500

[ Admin Contact Information]
Name : Sungin Kim
Org Name : Onse Telecom
State : KYONGGI
Address : 192-2 Kumi-dong Bundang-ku Sungnam-si
Zip Code : 453-500
Phone : +82-31-738-6411
Fax : +82-31-738-6607
E-Mail : ip@mgate.shinbiro.com

[ Technical Contact Information ]
Name : Sungin Kim
Org Name : Onse Telecom
State : KYONGGI
Address : 192-2 Kumi-dong Bundang-ku Sungnam-si
Zip Code : 453-500
Phone : +82-31-738-6411
Fax : +82-31-738-6607
E-Mail : ip@mgate.shinbiro.com

--------------------------------------------------------------------------------

If the above contacts are not rechable, please see the following ISP contacts
for relevant information or network abuse complaints.

[ ISP IP Admin Contact Information ]
Name : Sungin Kim
Phone : +82-31-738-6411
Fax : +82-31-738-6430
E-Mail : ipadm@mgate.shinbiro.com

[ ISP IP Tech Contact Information ]
Name : Sungin Kim
Phone : +82-31-738-6411
Fax : +82-31-738-6430
E-Mail : ipadm@mgate.shinbiro.com

[ ISP Network Abuse Contact Information ]
Name : Sungin Kim
Phone : +82-31-738-6411
Fax : +82-31-738-6430
E-Mail : abuse@shinbiro.com