1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

New Paypal scam

Discussion in 'General' started by yodasarmpit, 30 Aug 2005.

  1. yodasarmpit

    yodasarmpit Modder

    Joined:
    27 May 2002
    Posts:
    11,415
    Likes Received:
    231
    Just got this email, looks a lot like a scam, as the link directs to an ip address rather than paypal.com etc
    And it's not a secure address
     
  2. hitman012

    hitman012 Minimodder

    Joined:
    6 May 2005
    Posts:
    4,877
    Likes Received:
    19
    Looks false. PayPal wouldn't send out an email with "You're" instead of "Your", a mistake on the very first word of the whole mail. Unless, of course, you are their billing information? :p
     
  3. yodasarmpit

    yodasarmpit Modder

    Joined:
    27 May 2002
    Posts:
    11,415
    Likes Received:
    231
    Yeah I did realise, just thought I'd post it as a warning, you never know someone might fall for it.
    It looks a lot better than a lot of the fake Halifax and TSB one's doing the rounds.

    [​IMG]
     
  4. hitman012

    hitman012 Minimodder

    Joined:
    6 May 2005
    Posts:
    4,877
    Likes Received:
    19
    Yeah, my parents got one of those the other day and it looks ridiculous. If they're going to try and trick people out of their bank details, you'd think that they'd at least make an effort...
     
  5. Godboy_g

    Godboy_g What's a Dremel?

    Joined:
    13 Aug 2004
    Posts:
    396
    Likes Received:
    0
    Here's the Whois info from that IP:

    % This is the RIPE Whois query server #1.
    % The objects are in RPSL format.
    %
    % Note: the default output of the RIPE Whois server
    % is changed. Your tools may need to be adjusted. See
    % http://www.ripe.net/db/news/abuse-proposal-20050331.html
    % for more details.
    %
    % Rights restricted by copyright.
    % See http://www.ripe.net/db/copyright.html
    % Note: This output has been filtered.
    % To receive output for a database update, use the "-B" flag.
    % Information related to '217.219.163.0 - 217.219.163.255'
    inetnum: 217.219.163.0 - 217.219.163.255
    netname: MMSU_SARI
    descr: Mazandaran Medical Science University
    country: IR
    admin-c: FR260-RIPE
    tech-c: FR260-RIPE
    status: ASSIGNED PA
    mnt-by: AS12880-MNT
    source: RIPE # Filtered
    person: Farrokh Rahimzadeh
    address: Sari-Mazandran-Moalem Square
    address: Moalem Square -Pajooheshi Moavenat
    phone: +98 151 3241906
    fax-no: +98 151 3257231
    e-mail: MMSU_Sari@yashoo.com
    e-mail: alaeddink@yahoo.com
    nic-hdl: FR260-RIPE
    source: RIPE # Filtered
    % Information related to '217.218.0.0/15AS12880'
    route: 217.218.0.0/15
    descr: DCI-Route
    origin: AS12880
    mnt-by: AS12880-MNT
    source: RIPE # Filtered


    I'm not sure if there is somewhere we could report them, but I'm sure someone will probably know.
     
  6. Arien

    Arien What's a Dremel?

    Joined:
    22 Jun 2003
    Posts:
    1,024
    Likes Received:
    0
    PayPal will never e-mail you without either introducing the e-mail with your username or real name, they never do "Dear PayPal Member" or "Dear Member"
     
  7. bloodcar

    bloodcar Minimodder

    Joined:
    1 Sep 2002
    Posts:
    2,191
    Likes Received:
    6
    do you YASHOO!? YA-SHOOOOOOOOOOOOOOOOOOOOOOOO!
    sorry...i couldn't help myself.

    personally, i don't even look at my spam, i just look at the senders and occasionally the subjects but it's very rarely that i even bother to open them... unless they amuse me somehow.
     
  8. RTT

    RTT #parp

    Joined:
    12 Mar 2001
    Posts:
    14,120
    Likes Received:
    74
    If you see this:

    it's a scam.
     
  9. MrWillyWonka

    MrWillyWonka Chocolate computers galore!

    Joined:
    25 Jul 2004
    Posts:
    5,892
    Likes Received:
    12
    I put in some fake rude email address and password in, the connection was refused!

    And if it was authentic, paypal would direct you to their homepage, rather than just an ip. But yes, a novice internet user would fall for it, although the connection was refused when I tried to send the fakes.
     
  10. Godboy_g

    Godboy_g What's a Dremel?

    Joined:
    13 Aug 2004
    Posts:
    396
    Likes Received:
    0
    Checked the page source, and picked up this neat little line:

    META content="Microsoft FrontPage 5.0" name=GENERATOR

    Call me crazy, but I don't think that Paypal designs it's we pages in FrontPage LOL

    They do however load the logos and such on the page directly from Paypal. I guess they are trying to make it look at least a bit legal.
     
  11. Constructacon

    Constructacon Constructing since 1978

    Joined:
    12 Oct 2004
    Posts:
    2,651
    Likes Received:
    97
    Oh noes! Hottlinking images. That's bad. (completely overlooks the fact they are trying to defraud people of money)
     
  12. Shadowed_fury

    Shadowed_fury Minimodder

    Joined:
    21 Nov 2003
    Posts:
    7,506
    Likes Received:
    21
    Ohhh something to look out for when i'm tired and online :/
     
  13. Highland3r

    Highland3r Minimodder

    Joined:
    25 Jul 2003
    Posts:
    7,558
    Likes Received:
    16
    Yea had the same, deleted the email.... If you check the links it doesnt quite add up...
     
  14. orb

    orb satisfying.

    Joined:
    23 Dec 2003
    Posts:
    1,105
    Likes Received:
    0
    I got through to the actual account update and they spelt mastercard "mastecard"
     
  15. Guest-2867

    Guest-2867 Guest

    guys, this isn't a new scam, i've been getting this email for about 5 months now (in my spam tray) , hella annoying, besides,anyone dumb enouh to go through with it deserves what they get . . .
     
  16. woof82

    woof82 What's a Dremel?

    Joined:
    18 Jul 2005
    Posts:
    2,223
    Likes Received:
    58
    Its called "phishing."

    However I completely disagree with Mr. dire wolf, there are people who arent computer geeks and dont know about phishing, there not dumb they are just un-informed.
     
  17. MrWillyWonka

    MrWillyWonka Chocolate computers galore!

    Joined:
    25 Jul 2004
    Posts:
    5,892
    Likes Received:
    12
    True. My nan got a new computer last christmas, having never used a computer before she struggled using a mouse properly!

    People could go through with this scam without realising because at the end the scam site enters the username and password at the real paypal site, making the victim think they are safe.
     
  18. woof82

    woof82 What's a Dremel?

    Joined:
    18 Jul 2005
    Posts:
    2,223
    Likes Received:
    58
    I think that somone should call the internet police. What, first i think somone should invent the internet police. then call them.
     
  19. MrWillyWonka

    MrWillyWonka Chocolate computers galore!

    Joined:
    25 Jul 2004
    Posts:
    5,892
    Likes Received:
    12
    Why don't we?
     
  20. tm36usa

    tm36usa What's a Dremel?

    Joined:
    21 Jan 2004
    Posts:
    1,593
    Likes Received:
    0
    i just put 1234@bit.com with a password of 123456789 and it took me to an account update page lol, it even had the silly processing login thing too. So fake its funny

    edit: heres all the crap they want you to tell them:

    http://217.219.163.3:280/update.php?login=1234@bit.com&password=123456789


    EDIT 2: opon clicking the save and go to my account with all the feilds blank it took me right back to the real paypal page and had my fake eamil sitting in the box ready for my password. THis is just tooo funny
     

Share This Page