- Impact
- 4,269
Just received this in my email - looking at the Source it looks like they were
after the Contact List and the Browser Hijack
Strange thing is they even had my secondary email listed within the body of this one,
not sure how they got it as it is not a public one.
Anyways, just letting you guys be aware, as well as publishing the scammers info
maybe someone can make heads or tales of the gobble de gook :tu:
This is the email:
whois on the domain named on the link is:
and the View Source on the actual email is:
after the Contact List and the Browser Hijack
Strange thing is they even had my secondary email listed within the body of this one,
not sure how they got it as it is not a public one.
Anyways, just letting you guys be aware, as well as publishing the scammers info
maybe someone can make heads or tales of the gobble de gook :tu:
This is the email:
PayPaI (PayPaI . @ . gmail.com)
Add to contacts
High priority
11:31 AM
[Keep this message at the top of your inbox]
To: removed
Picture of PayPaI
Notice of Policy Updates
Dear Customer,
Some information on your account appears to be missing or incorrect.
Please update your information promptly so that you can continue to enjoy
all the benefits of your PayPal account.
If you don't update your information within 37 days, we'll limit what you can do with your PayPal account.
update : http :// . dijitalbaskiankara. . org/fra/ner/
If you need help logging in, go to our Help Center by clicking the Help link located in the upper right-hand corner of any PayPal page. .
Sincerely,
PayPal
Please do not reply to this email. We are unable to respond to inquiries sent to this address. For immediate answers to your questions, visit our Help Center by clicking "Help" at the top of any PayPal page.
Copyright © 2013 PayPal Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
whois on the domain named on the link is:
Domain ID:D165211749-LROR
Domain Name:DIJITALBASKIANKARA.ORG
Created On:05-Apr-2012 20:27:29 UTC
Last Updated On:11-Jul-2013 16:03:37 UTC
Expiration Date:05-Apr-2014 20:27:29 UTC
Sponsoring Registrar:Cloud Group Limited (R123-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:DI_14618828
Registrant Name:MEHMET AYDIN
Registrant Organization:TEKNOBiL
Registrant Street1:Kecioren Ankara
Registrant Street2:
Registrant Street3:
Registrant City:Ankara
Registrant State/Province:Kecioren
Registrant Postal Code:06280
Registrant Country:TR
Registrant Phone:+90.05422239239
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:teknobil .@. hotmail.com
Admin ID:DI_14618828
Admin Name:MEHMET AYDIN
Admin Organization:TEKNOBiL
Admin Street1:Kecioren Ankara
Admin Street2:
Admin Street3:
Admin City:Ankara
Admin State/Province:Kecioren
Admin Postal Code:06280
Admin Country:TR
Admin Phone:+90.05422239239
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:teknobil .@. hotmail.com
Tech ID:DI_14618828
Tech Name:MEHMET AYDIN
Tech Organization:TEKNOBiL
Tech Street1:Kecioren Ankara
Tech Street2:
Tech Street3:
Tech City:Ankara
Tech State/Province:Kecioren
Tech Postal Code:06280
Tech Country:TR
Tech Phone:+90.05422239239
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:teknobil . @ . hotmail.com
Name Server:NS3.FIBERSERVER.COM
Name Server:NS4.FIBERSERVER.COM
and the View Source on the actual email is:
