BoobieCootie 0 #1 May 7, 2003 I just got an email from service@paypal.com. The mail says: Please verify your information today! Dear Paypal Member. Your account has been randomly flagged in our system as a part of our routine security measures. This is a must to ensure that only you have access and use of your paypal account and to ensure a safe Paypal experience. We require all flagged accounts to verify their information on file with us. To verify your information, click here and enter the details requested. After you verify your information, your account shall be returned to good standing and you will continue to have full use of your account. Thank you for using PayPal! Please do not reply to this e-mail. Mail sent to this address cannot be answered. Well, clicking on the link provided brought up a page with http://www.paypal.com%2f@%32%31%31%2e%37%35%2e%35%38%2e%31%30%38/%70%70/%75%70%64%61%74%65%2E%68%74%6D on the address title. And tha page asks for your SSN and credit card #, on top of your mother's maiden name, and driver's license info. I suspect this is a scam and I want you all to be aware. I hope I'm wrong, but I ain't taking any chances. edit: Title. It is a scam Quote Share this post Link to post Share on other sites
SkydiveMonkey 0 #2 May 7, 2003 If it doesn't start with httpS// ignore it ____________________ Say no to subliminal messages Quote Share this post Link to post Share on other sites
Opie 0 #3 May 7, 2003 Definately looks like a scam to me. If you want post all that info here and we will see if anyone can do anything with it Quote Share this post Link to post Share on other sites
CrazyIvan 0 #4 May 7, 2003 No 'respetable' service asks for such info (unless is SECURE and ENCRIPTED), that's a scam. If you still have the email, read the header, you shoud see an IP address, I'm pretty sure is bogus, if you see it, try ping it and check the results.__________________________________________ Blue Skies and May the Force be with you. Quote Share this post Link to post Share on other sites
QuickDraw 0 #5 May 7, 2003 And just to confirm that go here. Btw i got Taiwan on the ping. -- Hope you don't die. -- I'm fucking winning Quote Share this post Link to post Share on other sites
BoobieCootie 0 #6 May 7, 2003 Quote If it doesn't start with httpS// ignore it The lack of https was the 2nd giveaway on top of asking me for my billing address ++. I mean if it was really PayPal, why can't I just log in using my ID right? But this definitely cannot and should not be ignored. People are going to take the bait. It's sad that I can't even find a number to call PayPal and talk to a live carbon based lifeform Quote Share this post Link to post Share on other sites
CrazyIvan 0 #7 May 7, 2003 Quote And just to confirm that go here. Your honor....I rest my case. __________________________________________ Blue Skies and May the Force be with you. Quote Share this post Link to post Share on other sites
flyer299 0 #8 May 7, 2003 The URL that you clicked was URL Encoded to make it look alright. Once deCoded (what the browser sees) is: http://www.paypal.com/@211.75.58.108/pp/update.htm Edit: (Please, no one make this a Clicky thing. IT SHOULD NOT be clicked on) As you can see, it hides the fact that you are actually going to an IP address and not PayPal. I bet if you look at the email you will see that it wasn't sent from PayPals Servers. This is 100% a SCAM! Don't give them your info. (I know the person who first posted this message didn't, but no one else do it) Ken Quote Share this post Link to post Share on other sites
indyz 1 #9 May 7, 2003 This is a trick. Your browser really goes to 211.75.58.108/pp/update.htm. A creative person could go and find out who owns the netblock that the IP is part of. I'm guessing it's a compromised personal computer. Quote Share this post Link to post Share on other sites
Jimbo 0 #10 May 7, 2003 QuoteWell, clicking on the link provided brought up a page with http://www.paypal.com%2f@%32%31%31%2e%37%35%2e%35%38%2e%31%30%38/%70%70/%75%70%64%61%74%65%2E%68%74%6D on the address title. And tha page asks for your SSN and credit card #, on top of your mother's maiden name, and driver's license info. See that "@" sign in there? That's a sure sign that the URL will redirect you somewhere that isn't PayPal. Look what happens when I do this: http://www.dropzone.com@www.cnn.com/. Nice catch. - Jim"Like" - The modern day comma Good bye, my friends. You are missed. Quote Share this post Link to post Share on other sites
QuickDraw 0 #11 May 7, 2003 This is what i got through the symantec site. -- Hope you don't die. -- I'm fucking winning Quote Share this post Link to post Share on other sites
SkydiveMonkey 0 #12 May 7, 2003 see attached trace route. ____________________ Say no to subliminal messages Quote Share this post Link to post Share on other sites
CrazyIvan 0 #13 May 7, 2003 This is the origin: http://www.naweekly.com.tw/index.php Translating the IP to DNS, in other words, just put the IP on your browser, it will link you to that web site. As you can see, is a chinese site, you better check your PC for SARS now. __________________________________________ Blue Skies and May the Force be with you. Quote Share this post Link to post Share on other sites
BoobieCootie 0 #14 May 7, 2003 So it is a scamShit! You know that fear about calling 911? Well... I'm feeling it. I'm going to forward the email to the real PayPal. Then who else shall I alert? Quote Share this post Link to post Share on other sites
CrazyIvan 0 #15 May 7, 2003 QuoteI'm going to forward the email to the real PayPal. Then who else shall I alert? Friends who use the service, that'd be helpful.__________________________________________ Blue Skies and May the Force be with you. Quote Share this post Link to post Share on other sites
BoobieCootie 0 #16 May 7, 2003 I think PayPal's been hacked or something. Their "Security Center" page seems to have the links under "Report a Problem" blocked. Quote Share this post Link to post Share on other sites
SkydiveMonkey 0 #17 May 7, 2003 Works fine for me____________________ Say no to subliminal messages Quote Share this post Link to post Share on other sites
CrazyIvan 0 #18 May 7, 2003 No problem here__________________________________________ Blue Skies and May the Force be with you. Quote Share this post Link to post Share on other sites
Skymonkey13 0 #19 May 7, 2003 Thanks for the Heads Up. Quote Share this post Link to post Share on other sites
BoobieCootie 0 #20 May 7, 2003 I guess my computer's been bugged. So I sneaker-netted over to my other computer and sent a message to alert PayPal. Think I'll make the evening news? Quote Share this post Link to post Share on other sites
BoobieCootie 0 #21 May 7, 2003 Not a problem. Incidentally, I went to CERT and from there got a live person @ the Dept. of Homeland Security. He's going to call me back in 5 minutes. I guess to verify that this is a legitimate phone call? Send vibes guys. I'm scared as hell now. Quote Share this post Link to post Share on other sites
cuchulinn 0 #22 May 7, 2003 I got it too. HUGE SCAM... Lets see, they want you to give them every number and name required to get credit damn near anywhere in the world! SMA#18 Quote Share this post Link to post Share on other sites
BoobieCootie 0 #23 May 7, 2003 I just got disconnected from the guy at FCIRC. He was going to patch me in to the local sheriff's dept. I hope I don't get into any more trouble than I need. Quote Share this post Link to post Share on other sites
BoobieCootie 0 #24 May 7, 2003 Back on the phone w/ the federal agent and I've got a case number of the incident. I was told that the local authorities are going to get in touch w/ me. Send vibes guys. This is scarier than my first jump Quote Share this post Link to post Share on other sites
BoobieCootie 0 #25 May 7, 2003 Bump. Waiting for either the the local Seattle PD or the agent from http://www.fedcirc.gov/generalInfo/contactUs.html I ain't kidding here guys Quote Share this post Link to post Share on other sites
