Paypal phishing attempt

I got this today in my spamfolder at gmail. I must say that they are good. When I followed the link netcraft toolbar and spoofstick reported that I was on Paypal.com I had the certificate lock and could check that the certificate was valid.
Noscript blocked a script from something called paypalobjects.com (valid?)
I am not that good at this kind of stuff, I wonder how they made it through netcraft and spoofstick... and how they got my gmail adress that I use in paypa) If I havent known that no serious buisness sends out this kind of messages, gmail´s anti-phishing filter warning me and the fact that it was in gmail´s spam folder, I might have got scared and done what they wanted.

But this shows that common sense is the only defence against this kind of ****

*edit* edited the link with *** just in case it violated some forum rules.

 

Hi,Well unless I'm mistaken but www.paypal.com is the actual website and if it refers you exacly to the website more then likely it's legit. From the very few information I've seen in your post, it all looks legit.If you could provide the exact link in a PM It would be great.Regards,fluxgfx.com**I am a user of paypal and it's not the first time I get a message from them to update my information* By loggin onto the paypal website (not using the link) you will get a notice to update your information... it happens about every 6months or so, when you haven't used it in a while.**

 

Hmm... I have been using paypal for more than three years, I have never got an email from them where they ask me to login to anything. (or maybe I have but deleted them instantly thinking they were phishing attempts..) It has been times when I have not used their service for more than 6 months. (I did use paypal for a transfer of money two weeks ago btw)
So you mean that Paypal actually sends out emails to their customers where they provide a link asking the customers to login to verify things? Just like any phishing con artist?
If so I could not imagine that in my wildest dreams I thought they knew that is exactly how the phishers do their dirty deeds. Or does the language barrier make me misread your post?

Unfortunately my security setup/behaviour strikes back at me I did delete the email with all the other spam messages in the spam folder and I have firefox setup to erease all the history when I close firefox so I dont have the link anymore. sorry, I should have anticipated that someone should want it, my bad. But since the bad guys seems to have my email adress that I use at Paypal they will send new attempts and I will save the link as whole next time and send it to anyone interrested.

Thanks Ronjor for the link. Now I see what was wrong with it :

Https//www.paypal.com but I still wonder how I could check the certificate if it only was a http://

 

It is attempted fraud - Forward to abuse@paypal.com or abuse@paypal.co.uk etc. depending upon which country you are in and what branch of paypal you usually deal with.

Go for the abusers throats!

Pilli

 

The link of Paypal starts with "https:" not with "http:"
If Paypal asks for updating or to verify your personal info, Paypal will do this when you login. They never send emails for this.
At our Free Lotto Forum every member received those emails, even the members who didn't have a PayPal Account LOL.

 

Its not funny.