This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

I believe I was spoofed using my GMAIL

riskitdreams
riskitdreams
more options

I was checking my EMAIL the same way I always do: open new tab, click the Gmail button on the new tab. Well once it opened, I then opened my second GMAIL account, and noticed that the two were different. Which forced me to check the URL of my main account and I noticed that they were different. "?zx=s0wp4i3jcokr" was sandwhiched between the number zero and the word "inbox" in the URL. Was I spoofed, and if so, what course of action should I take?

  • NOTE*

Prior to noticing the strange URL my key had been malfunctioning intermittently. Went into inspector to check code, and every word was just random letters. Is this related?

I was checking my EMAIL the same way I always do: open new tab, click the Gmail button on the new tab. Well once it opened, I then opened my second GMAIL account, and noticed that the two were different. Which forced me to check the URL of my main account and I noticed that they were different. "?zx=s0wp4i3jcokr" was sandwhiched between the number zero and the word "inbox" in the URL. Was I spoofed, and if so, what course of action should I take? *NOTE* Prior to noticing the strange URL my key had been malfunctioning intermittently. Went into inspector to check code, and every word was just random letters. Is this related?

All Replies (1)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

If you think your credentials might have been stolen, presumably by now you logged in in a trusted way and change your password. If not, do that now.

For research purposes:

The critical part of the URL is the host name. If you were using https://mail.google.com/ then you were on the real site. However, the garbage in the URL is suspicious and it's possible that you were phished on the way to Google. You could check your history (Ctrl+Shift+H) to see the sequence of events. Be careful not to load any of the URLs on the list that could possibly be suspicious.