How Do I Report An Email Allegedly From Plusnet?

[#1]

I received the below email allegedly from PN. The senders email address is: jdrrb@cira.ca

 Unusual Login Attempt

Dear (my email address),

Security notification.

Date	IP Address	IP Address 2	Browser
8/8/2018 4:32:43 p.m.	81.83.255.11	81.83.255.12	Mozzila Firefox

8/8/2018 4:32:43 p.m. IP address of your previous login differs from current IP address.

Previously you logged in from United States.

Now you`re trying to logon from 81.83.255.122, (Antwerpen , Belgium).

If previous login was yours, then ignore this message.
If it was not, then it means that someone tries to access your account.

Please confirm your identity in order to avoid account suspension.

Thanks,

Plusnet

[#2]

I received the same, the page the link goes to looks legit, but the addresses are all phoney looking, and located in Canada, it certainly looks like a phishing message, though I've never had one claiming to be from Plusnet before. Looks like a lot of us are receiving these, has Plusnet been hacked I wonder?

Registrant Contact

Name:

Organization: SCI Inc.

Mailing Address: , Ontario CA

Phone:

Ext:

Fax:

Fax Ext:

[#3]

I have also received this email. The sender’s email address is zwriaaf@cira.ca

[#4]

Hi Annie,

Mine was: <ymje@cira.ca> looks like they're using a lot of Canadian addresses.

Definitely bogus I reckon, hope no one has been taken in by them.

[#5]

Hi @windypics @Annie2 @bazzer

Thanks for informing us you have received this email.

We have had some similar reports of emails which came through this evening -  we are currently looking into it internally.

Could you please forward the email to "abuse@plus.net" and then delete the it for us?

Kind Regards,

Alisdair 

[#6]

Thank you, Alisdair. Just forwarded the email. 

[#7]

I'd say they are spam. I got one also from wgiprqle at cira.ca

Always best to notify as many friends or family as possible. Ok, maybe I am a bit overly protective but I do IT Support for elderly in my community and we find that this sort of thing always catches them out.

..oops, sorry, it seems a member of the team has already answered..

[#8]

Hi Alisdair,

Just sent mine too, with full header info.

The page their links take you to is an almost identical page to the real Plusnet webmail login page, the fraud only becomes obvious when you put your mouse over the buttons or links and you get shown ones that are definitely not from Plusnet.

Alan.

[#9]

Hi,

I also received this - and have forwarded it to: abuse@plus.net

It would be very helpful if this address was available on the Help and Support page, I was holding on for telephone support (online chat not available!) when I found this forum.

I presume that passwords should be changed.

[#10]

I have received the email too.    Mine was pzhz@cira.ca

Will forward to abuse@plus.net

[#11]

“Could you please forward the email to "abuse@plus.net" and then delete the it for us?

Note these emails need to be forwarded as an attachment.

[#12]

Topic locked in favour of this one.