Hola:
hoy he recibido en mi buzón un correo en html supuestamente desde "security@paypal.com" que dice que ha habido intentos de logearse en mi cuenta (no tengo cuenta para empezar) de una IP desconocida. Os lo pego la cabecera donde parece que se pueden sacar datos interesantes:
X-Gmail-Received: be80313e00effed1571634d9074b71ae95f61d3d
Delivered-To: (yo)@gmail.com
Received: by 10.38.207.3 with SMTP id e3cs726rng;
Fri, 22 Apr 2005 18:27:16 -0700 (PDT)
Received: by 10.54.43.6 with SMTP id q6mr793564wrq;
Fri, 22 Apr 2005 18:27:16 -0700 (PDT)
Return-Path:
Received: from web11.manitu.net (web11.manitu.net [217.11.48.111])
by mx.gmail.com with ESMTP id d61si209106wra.2005.04.22.18.27.15;
Fri, 22 Apr 2005 18:27:16 -0700 (PDT)
Received-SPF: pass (gmail.com: best guess record for domain of httpd@web11.manitu.net designates 217.11.48.111 as permitted sender)
Received: (from httpd@localhost)
by web11.manitu.net (8.10.2-SOL3/8.10.2) id j3N1RBx10485;
Sat, 23 Apr 2005 03:27:11 +0200
Date: Sat, 23 Apr 2005 03:27:11 +0200
Message-Id:
To: (yo)@gmail.com
Subject: PayPal® Security Center
X-PHP-Mail-Script-Filename: /home/sites/site8/users/pascal/web/mailer/index.php
X-PHP-Mail-Remote-Addr: 80.97.159.235
X-PHP-Mail-Remote-Port: 33989
From: PayPal® Security Center Advisory!
Reply-To: security@paypal.com
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Status: R
X-Status: NC
X-KMail-EncryptionState:
X-KMail-SignatureState:
X-KMail-MDN-Sent:
Y dice:
Security Center Advisory!
We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address and we have reasons to belive that your account was hijacked by a third party without your authorization. If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you.
If you are the rightful holder of the account you must click the link below and then complete all steps from the following page as we try to verify your identity.
Click here to verify your account (enlace que lleva hasta (link roto)
If you choose to ignore our request, you leave us no choice but to temporaly suspend your account.
Thank you for using PayPal! The PayPal Team
En la dirección encontramos una web similar a la de paypal que pongas la contraseña que pongas te dice de cambiar los datos. Pero lo mejor es que si vamos a (link roto) vemos que pertenece a una empresa española
Espero que os sirva por lo menos para que no piquéis ;)
¿Se puede denunciar en algún sitio para se que tomen cartas en el asunto?
Un saludo
