I just got a stupid phishing attemp email!

[Pursuer]

I just got a stupid email for a phishing attempt and thought I should share it here and warn!

it was claiming to be from paypal and said $50 was sent from my account and I should click on the link provided to confirm a charge back.

the stupid parts are these:
- it contained a shortened URL, with t.co !
- the email address was not even similar to paypal.com it was something like information.somthing.com!!
- the shortened URL lead to paypal[dot]com[dot]customer-summary-limited[dot]com/signin/ as you can see the domain name is customer-summary-limited[dot]com and it has a sub with paypal in it trying to fool others!

p.s. you can always open short URLs with an online tool, just google open short URL (I used http://checkshorturl.com/)
p.p.s. my antivirus warned me that this URL is phishing I love Eset
p.p.p.s. I reported that email to yahoo as phishing, and you should always do this too, it helps with the filtering of these type of Emails.

[1713996053]

1713996053

[1713996053]

1713996053

[1713996053]

1713996053

[jacktheking]

Awesome! Thank you for sharing this with us. I remember also receiving some phishing emails but I don't actually share it with others - I do however mark it as a phishing email to my email provider (I use Outlook.com and Gmail). .

[bL4nkcode]

Thanks for the warning but I guess only careless people can be hook on that kind of trap. Its really obvious of phishing attempt. It should be reported and someone should send nukes on that site until it down

[stomachgrowls]

Its not really surprising anymore but thank you for the warning regarding on this on which i do recieve this kind of emails and actually there are lots of them like blockchain investments,amounts that are credited on my payeer,paypal accounts which is trully unbelievable and very suspicious.First of seeing on the senders email you will directly tell that its a total scam or phishing attempt.

[darklus123]

I receive a separate one yesterday It is about an online money making site if i am not mistaken but i decided to ignore things that comes to my email that is also the reason why i do love separate emails. I would only open mails on my business email if i do remember that i have an interaction with it, tho i think you are promoting your antivirus haha nice one btw was that antivirus licensed?

[Bitcoinsummoner]

Well for me i am always receive many phishing in my email and put it in spam and ignore .. many email marketers there are doing same fake.
But any way thanks to let us know about it if i encounter like you said.. much better to share it here to know those emails are scammers and fake..

[avatar_kiyoshi]

Thanks for the warning. But AFAIK if you got an email from PayPal usually have an icon on their avatar (I used mobile app).
I also got same email which I have received some amount, as far as I not deal with my money or do a transaction, I always ignore it and mark as spam.

[Strongkored]

Thanks you cause you want to share your experience, this is should be warned for all member to more carefull click link we got in to our email, and sometimes when people got email who says get reward didn't check again the source only click and you know the result that's a phishing and we lose our paypal balance.
Until now i never got phishing email like this, just a notification in my email some HYIP site sent money to my Perfect Money account.

[jaceefrost]

One thing I don't get with these phishing attempts is where do they get my email? I've been receiving these kinds of phishing emails from both the email I used and linked only in trusted sites and I never uses them or share my email publicly yet I continue receiving useless ads and phishing attempts to scam. 

[harizen]

Thanks for the warning but I guess only careless people can be hook on that kind of trap. Its really obvious of phishing attempt. It should be reported and someone should send nukes on that site until it down

I somehow agree as it was an obvious fraud attempt. Even a newbie one can think of it as an phishing attempt even it was the first time they encountered that  kind of email.

One should look at the content. Some of them are:

-Email used
-Message layout (simple email message style aren't the usual way of some big companies e.g Paypal)
-Using short url
-Email message that is quite far beyond the reality

There are really lots of fraud attempts on the web since then so people are being used to it.

[sunsilk]

That's the beauty of ESET and that's why I'm loving it and it is really aware of something that is malicious.

Actually this type of emails are not even new to me, I've receiving those type of emails in my inbox and spam folder, but I'm just ignoring them.

And I hope that yahoo is going to do something with those types of modus operandi. Btw, Thanks for sharing.

[target]

I just got a stupid email for a phishing attempt and thought I should share it here and warn!

it was claiming to be from paypal and said $50 was sent from my account and I should click on the link provided to confirm a charge back.

the stupid parts are these:
- it contained a shortened URL, with t.co !
- the email address was not even similar to paypal.com it was something like information.somthing.com!!
- the shortened URL lead to paypal[dot]com[dot]customer-summary-limited[dot]com/signin/ as you can see the domain name is customer-summary-limited[dot]com and it has a sub with paypal in it trying to fool others!

p.s. you can always open short URLs with an online tool, just google open short URL (I used http://checkshorturl.com/)
p.p.s. my antivirus warned me that this URL is phishing I love Eset
p.p.p.s. I reported that email to yahoo as phishing, and you should always do this too, it helps with the filtering of these type of Emails.

Phishing still is being used by hackers even at 2017, probably the newer ones in the industry or script kiddies as they call it.

Checkshorturl.com seem like a useful tool. I receive several of those emails when I was still using paypal and I could have been a victim is it weren't for the tutorials from people who teaches us to avoid clicking links in the emails. Every time I receive emails even form legit, I go type the url or search google about it and click the first result just to make sure I am in the right website.

[mbuk81]

I have had a few even using my name  most don't but a couple have thats what makes me think how they name but thanks op for the info I hope you did send a copy to PayPal for them to investergate

[Pursuer]

One thing I don't get with these phishing attempts is where do they get my email? I've been receiving these kinds of phishing emails from both the email I used and linked only in trusted sites and I never uses them or share my email publicly yet I continue receiving useless ads and phishing attempts to scam. 

there are many ways that your Email address is leaked to these scammers. for example when you use your email address on a service online which you think is trusted but they are not so much and then end up selling your email address with thousands of others in a list of say bitcoin user's email list.
or even the service may be trusted but it gets hacked, and it is unavoidable. so your information such as email address and other stuff gets leaked and then sold.

that is why sometimes it is suggested to separate your personal email, or the email address that you use for sensitive stuff from the email address that you use to sign up in online services, website, forums,...

[MFahad]

I have had a few even using my name  most don't but a couple have thats what makes me think how they name but thanks op for the info I hope you did send a copy to PayPal for them to investergate

These types of attempts by scammers to get your bank account or in this case paypal info , is not new.  Paypal and banks give your clear instructions to follow the basic rules and precations and don't be fooled by any offer or something like that. And the best way to avoid this is to call their helpline and get some advise before performing any action. 

[darklus123]

One thing I don't get with these phishing attempts is where do they get my email? I've been receiving these kinds of phishing emails from both the email I used and linked only in trusted sites and I never uses them or share my email publicly yet I continue receiving useless ads and phishing attempts to scam. 

there are many ways that your Email address is leaked to these scammers. for example when you use your email address on a service online which you think is trusted but they are not so much and then end up selling your email address with thousands of others in a list of say bitcoin user's email list.
or even the service may be trusted but it gets hacked, and it is unavoidable. so your information such as email address and other stuff gets leaked and then sold.

that is why sometimes it is suggested to separate your personal email, or the email address that you use for sensitive stuff from the email address that you use to sign up in online services, website, forums,...

Same here because before i do love to use one email account to all my site  transactions and good thing i grow in this industry and fully understood why do i have to separate things out after doing so you could determine things easily

[royalfestus]

If we notice any similar phising email sent to the members of this forum, one can suspect a member of the forum. I think the idea of notifying others can help members to be careful but I dont think it is so

[RhodaGila]

Always be careful when opening emails or there is a shipment of someone who is not known to us before, especially with the lure of gifts and so forth, it is suspect and do not try to open it. Especially if you read above, when antivirus already warned that
So, be careful, phishing is one powerful way to steal your account or your data.

[mobnepal]

I have never got any similar phishing email for paypal but recently got many phishing email in the name of blockchain investment and unocoin investment program.

Fake Escrow payment is also one of the new type of scam email many are getting including me. All of this goes directly to my spam folder in gmail.

[neochiny]

Thanks for sharing and the warning.

This is why it's always a MUST to check double check everything before clicking a link or
entering sensitive info anywhere.
For me, I usually just ignore emails like these and don't even bother to read them at all. I only open emails that I'm expecting or those I know well. Everything else is just deleted.
Will definitely start reporting them to my mail provider in the future.