topic Re: How Do I Report An Email Allegedly From Plusnet? in Plusnet Feedback

How Do I Report An Email Allegedly From Plusnet?

bazzer — Wed, 08 Aug 2018 17:41:17 GMT

I received the below email allegedly from PN. The senders email address is: jdrrb@cira.ca

Unusual Login Attempt

Dear (my email address),

Security notification.

Date	IP Address	IP Address 2	Browser
8/8/2018 4:32:43 p.m.	81.83.255.11	81.83.255.12	Mozzila Firefox

8/8/2018 4:32:43 p.m. IP address of your previous login differs from current IP address.

Previously you logged in from United States.

Now you`re trying to logon from 81.83.255.122, (Antwerpen , Belgium).

If previous login was yours, then ignore this message.
If it was not, then it means that someone tries to access your account.

Please confirm your identity in order to avoid account suspension.

Thanks,

Plusnet

Re: How Do I Report An Email Allegedly From Plusnet?

windypics — Wed, 08 Aug 2018 17:59:26 GMT

I received the same, the page the link goes to looks legit, but the addresses are all phoney looking, and located in Canada, it certainly looks like a phishing message, though I've never had one claiming to be from Plusnet before. Looks like a lot of us are receiving these, has Plusnet been hacked I wonder?

Registrant Contact

Name:

Organization: SCI Inc.

Mailing Address: , Ontario CA

Phone:

Ext:

Fax:

Fax Ext:

Re: How Do I Report An Email Allegedly From Plusnet?

Annie2 — Wed, 08 Aug 2018 18:21:19 GMT

I have also received this email. The sender’s email address is zwriaaf@cira.ca

Re: How Do I Report An Email Allegedly From Plusnet?

windypics — Wed, 08 Aug 2018 18:28:39 GMT

Hi Annie,

Mine was: <ymje@cira.ca> looks like they're using a lot of Canadian addresses.

Definitely bogus I reckon, hope no one has been taken in by them.

Re: How Do I Report An Email Allegedly From Plusnet?

MasterOfReality — Wed, 08 Aug 2018 18:30:56 GMT

Hi @windypics @Annie2 @bazzer

Thanks for informing us you have received this email.

We have had some similar reports of emails which came through this evening - we are currently looking into it internally.

Could you please forward the email to "abuse@plus.net" and then delete the it for us?

Kind Regards,

Alisdair

Re: How Do I Report An Email Allegedly From Plusnet?

Annie2 — Wed, 08 Aug 2018 18:36:14 GMT

Thank you, Alisdair. Just forwarded the email.

Re: How Do I Report An Email Allegedly From Plusnet?

GioC — Wed, 08 Aug 2018 18:38:48 GMT

I'd say they are spam. I got one also from wgiprqle at cira.ca

Always best to notify as many friends or family as possible. Ok, maybe I am a bit overly protective but I do IT Support for elderly in my community and we find that this sort of thing always catches them out.

..oops, sorry, it seems a member of the team has already answered..

Re: How Do I Report An Email Allegedly From Plusnet?

windypics — Wed, 08 Aug 2018 18:56:39 GMT

Hi Alisdair,

Just sent mine too, with full header info.

The page their links take you to is an almost identical page to the real Plusnet webmail login page, the fraud only becomes obvious when you put your mouse over the buttons or links and you get shown ones that are definitely not from Plusnet.

Alan.

Re: How Do I Report An Email Allegedly From Plusnet?

D3B3 — Wed, 08 Aug 2018 19:08:23 GMT

Hi,

I also received this - and have forwarded it to: abuse@plus.net

It would be very helpful if this address was available on the Help and Support page, I was holding on for telephone support (online chat not available!) when I found this forum.

I presume that passwords should be changed.

Re: How Do I Report An Email Allegedly From Plusnet?

Willian — Wed, 08 Aug 2018 19:09:00 GMT

I have received the email too. Mine was pzhz@cira.ca

Will forward to abuse@plus.net

Re: How Do I Report An Email Allegedly From Plusnet?

Townman — Thu, 09 Aug 2018 07:04:14 GMT

“Could you please forward the email to "abuse@plus.net" and then delete the it for us?

Note these emails need to be forwarded as an attachment.

Re: How Do I Report An Email Allegedly From Plusnet?

Strat — Thu, 09 Aug 2018 10:39:54 GMT

Topic locked in favour of this one.