cancel
Showing results for 
Search instead for 
Did you mean: 

Phishing emails from PN email addresses

Community Veteran
Posts: 1,229
Thanks: 1
Registered: 30-07-2007

Phishing emails from PN email addresses

I've just received a (crude) phish into my hotmail address; the header shows relayed via ptb-cgirelay01.plus.net (which of course may well be be spoofed) and a return path to a PN user email address.

Would anyone at PN like the header info? (I'm forwarding it to the bank's security dept anyway)

paul
5 REPLIES
Mand
Grafter
Posts: 5,560
Thanks: 1
Registered: 05-04-2007

Phishing emails from PN email addresses

Hi there,

If you could drop me a PM with all the headers I'd be happy to look into this.
Community Veteran
Posts: 1,229
Thanks: 1
Registered: 30-07-2007

Phishing emails from PN email addresses

I've received another of these, apparently originating from the same PN user as before but relating to a different bank and pointing to a different fake website.

Does someone want to pick this up?
Or should I be forwarding the offending items to abuse@plusnet, or raising a ticket?

(already forwarded to the bank concerned but it does look as though a PN user's website & address is compromised)

Paul
Community Veteran
Posts: 26,442
Thanks: 688
Fixes: 8
Registered: 10-04-2007

Phishing emails from PN email addresses

It's highly probable that the sender etc. are spoofed. If you post the headers here (replace Plusnet user names with xxx.plus.com, yyy.plus.com etc so we can tell which were different) we can advise.
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£13/month)
Mobile: iD mobile (£4/month)
Mand
Grafter
Posts: 5,560
Thanks: 1
Registered: 05-04-2007

Phishing emails from PN email addresses

Hi there,

I've raised a ticket on your account with the previous example, if you could add the headers of the new one onto there I'd appreciate it. It's with networks to contact the user and get this resolved directly.
Community Veteran
Posts: 1,229
Thanks: 1
Registered: 30-07-2007

Phishing emails from PN email addresses

Added to ticket 22045494 as requested Mand.
@elvin -- as PN networks team are dealing with this I'm not sure it's worth posting further details here
thanks
paul