According to investigations done, I’ve found that the email was sent from a company in the USA. It’s too quick to jump to conclusions since black hat hackers could easily hijack an email server to use for spamming. But some investigation of the email has given away clear signs of it’s non-existent authenticity.
This email was one of those sent out as a disguise for a Paypal member to verify their account and when they’ve arrived at the spoof website, they’ll be asked to enter their personal details. Then after that it’ll be doomsday if you aren’t careful.
It is learnt from this screenshot that even the logo in the header beside the Paypal logo must be fake. Just like the previous Fake ebay Email Loose we assess the worksmanship of the design elements involved in the Paypal email. It’s noticeable that the Paypal logo was a mere cutout from somewhere and pasted on this email.
It’s also obvious and hard to mistake the low quality in presentation of the image on the top right corner. As I said, there’s no way a professional body like eBay or Paypal can allow such horrid graphics in their email.
The copy of this email as usual is formal and very deceptive to anyone who’s not aware of the graphical flaws. The culprit of this phishing scam has made a simple link to be clicked on that’ll bring you to the phishing website.
A little sniffing in the Hypertext Markup Language (HTML) revealed that the link doesn’t go to an authentic Paypal address that should start with:
http://www.paypal.com/…
But an IP address to some website or someone else’s computer server. I did some prodding and found the IP to be coming from a GLX website or some sort.
Anyway, that’s another phishing email busted and investigated.