another attempt through Paypal

I got an email today, supposedly from Paypal, saying there's been some suspicious activity on my account and that one of the cards associated with my account has been identified as lost or stolen.

The email looked really authentic - it even had sidebars about protecting yourself from fraud - in very small print - but the button to click to go to paypal and confirm your account info. was HUGE!!

On closer examination the email came from "paypal@service.com" rather than "service@paypal.com" and the URL that the link led to is http://biomeditech.com.tw/manual/.cg...msg/login.html

interestingly enough, when I clipped the URL down to just the ...biomeditech.com.tw it goes to an open webmail login page.
Add /manual/ on the end and it goes to an apache server portal page.

All this being said - what are the initial steps one would take to start researching and tracing the origins of scams like these??

Thanks to all respondants, Be careful everyone ...


Blessings,
F.

I missed that timeframe

if anyones interested, here's a screenshot of that email (though I've just noticed that the site the above link referred to has been abolished).

Submit the site to PIRT.

Here is the link.
http://www.castlecops.com/pirt


They will research it and post the results for you as they do here.
http://www.castlecops.com/modules.ph...Phish&fp=phish

--TH13

Hey Hey,

I've been following interesting ones that I recieve here -- http://www.computerdefense.org/?cat=31

You can also watch SpamMailBag.com for intersting emails (I have started to remove ones related to child porn however... it just doesn't seem right to leave them up) but everything else is uncensored.

Peace,
HT

The PayPal phish you just posted on that site has been around for a little while. In fact, I received one only the guy wasn't named Bill Chang and instead of a cell phone, it was a digital camera. Sneaky indead, AND 24 hours later I received a follow up phish that made it appear that the transaction actually went through. Keep an eye out for that one.

--TH13

I got one to from paypal the funny thing about it was that it came to my gmail account which isn't the one I used for paypal so it immediately through a red flag when I seen that.

Haha, Price

That's the other thing that I forgot to mention in the original post ... It didn't even come to the email address that is associated with my real paypal account.

I should know better than to post to an old thread, I know...

I also got one of those authentic-looking emails this week at the address I use to conduct PayPal-related business. Sent it over to abuse@paypal.com but I'll definitely use the link provided by thehorse13.

Thanks for pointing it out.