Web security breach? Fraud opportunity?

[Anonymous]

Hello,

My PC is so slow, that when signing in to "My O2", on entering my info and hitting enter, I noticed an intermediate webaddress which forwarded me on to "My O2". Using 'Alt' and 'Print Screen' I managed to capture this intermediate blank page which had the address https://zharkov.shop.o2.co.uk/login/mblogin ...

Does anyone else get this forwarding address popping up?
Is this a security breach?

As I'm pay & go, I only wanted to top up, but am not prepared to enter my debit card details into the system until O2 advise me it's OK.

Is this someone trying to capture card details?
Is someone trying to gather peoples O2 login name and password?

I have tried to contact support by phone, but they're backed up at the moment, so I emailed them.
I hoped the forum might be quicker with an answer.

Alan
PS I tried Gooogle but got nothing, but then maybe this is a new security breach attempt, and not out in the ether yet ...

[perksie]

It's normal, and always comes up.

[Anonymous]

Hello perksie

Thank you for your response, you certainluy post loads of good replies.

I don't suppose you know why O2 would use such an unconventional address?

I see they have https://shop.O2.co.uk and this is https://forum.o2.co.uk etc, so why stick an unusual name in front?

Is this a programmer looking for some fame?

And am I convinced yet of its safety ... ?

Alan
PS I've now found a 'web of trust' website that suggests zharkov.shop.02.co.uk is OK.

[perksie]

You're welcome.

It's a reasonably large company so I feel most bases will be covered.

Over 20 million mobile customers in the UK alone:


http://www.o2.com/about/telefonica_o2_uk.asp

[Anonymous]

The same thing always happens to me too, it's probably a name of one of their servers. The name was probably given to it years and years ago and it's simply the case that to update it and change all of the links from connected systems would be more trouble than it's worth.

The thing to remember is that any prefix of the *.o2.co.uk domain is still sitting within O2's servers.

If you're not happy with it, you can always phone and give your card details over the phone, but personally I prefer to provide card details online rather than by phone - there's always a risk that the call centre employee could write down your card details on a piece of paper.

[perksie]

If you're not happy with it, you can always phone and give your card details over the phone, but personally I prefer to provide card details online rather than by phone - there's always a risk that the call centre employee could write down your card details on a piece of paper.

That's a very valid point markle, I have always believed that on-line banking is much safer than by phone or over the counter for that reason.

[Anonymous]

The same thing always happens to me too, it's probably a name of one of their servers. The name was probably given to it years and years ago and it's simply the case that to update it and change all of the links from connected systems would be more trouble than it's worth.
The thing to remember is that any prefix of the *.o2.co.uk domain is still sitting within O2's servers.
If you're not happy with it, you can always phone and give your card details over the phone, but personally I prefer to provide card details online rather than by phone - there's always a risk that the call centre employee could write down your card details on a piece of paper.

Markle is spot on. Zarkov is the name of one of o2's severs from the days that o2 online was Genie. It's perfectly safe to use.