Hard Light Productions Forums

Off-Topic Discussion => General Discussion => Topic started by: Fineus on July 14, 2005, 06:20:48 pm

Title: Paypal Email / Spoof ?
Post by: Fineus on July 14, 2005, 06:20:48 pm: I just got this through to my email account and needless to say.. I'm a tad worried. I haven't made any such payment as the email suggests but don't want to log in to the account just incase it's not real. I dont use Paypal often so I thought I'd open to this to you guys..

Am I being pranked, or has someone genuinely taken $67 that I never paid out?

I took the liberty of replacing my email details with "MY EMAIL" to avoid anyone else getting hold of it who shouldn't have it...

Quote

From : PayPal
Sent : 15 July 2005 00:14:36
To : MY EMAIL
Subject : Receipt for your Payment MY EMAIL - Your Account Successfully Charged

Dear MY EMAIL

This email confirms that you sent $67.00 USD to [email protected].

------------------------------
Payment Details
------------------------------

Amount: $67.00 USD
Transaction ID: 3FS8711Xsg44FFfF67

View the details or cancel this transaction online at:
http://www.paypal.com\.webrsc.us/login/?cmd=usr-ntf&customer=MYEMAIL
&sts=nrm&emr=y

Thank you for using PayPal!
The PayPal Team

Your monthly account statement is available anytime; just log in to your
account at
http://www.paypal.com\.webrsc.us/login/?cmd=usr-ntf&customer=MYEMAIL
&sts=nrmHISTORY
To correct any errors,
please contact us through our Help Center at
http://www.paypal.com\.webrsc.us/login/?cmd=usr-ntf&customer=MYEMAIL
&sts=nrmHELP&emr=y

Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the 'Help' link in the header of any page.

PayPal Email ID FF627
Title: Paypal Email / Spoof ?
Post by: Martinus on July 14, 2005, 06:26:31 pm: [color=66ff00]The paypal protection scheme should save you any loss of cash. If I were you I'd do a scan for viruses/spyware and then go to the paypal site. (It keeps a record of your past transactions)

I'm only thinking this because IIRC there are a number of the malicious programs that hijack browser input and redirect you to a site of their choosing.
[/color]
Title: Paypal Email / Spoof ?
Post by: aldo_14 on July 14, 2005, 06:28:14 pm: If you're concerned, just log in via the regular paypal website (i.e. by typing in the correct url manually rather than clicking any link).

However, it appears to be a standard scam email; http://www.redsugar.com/muse/archives/007438.html

EDIT; see the link - http://www.paypal.com\.webrsc.us - note the erroneous backwards slash.
Title: Paypal Email / Spoof ?
Post by: karajorma on July 14, 2005, 06:29:12 pm: It's a scam.

Whois for this site

Code: [Select]
Domain Name: WEBRSC.US Domain ID: D8171826-US Sponsoring Registrar: .US REGISTRAR L.L.C. Domain Status: clientTransferProhibited Registrant ID: 39685360 Registrant Name: Lynn Jillions Registrant Address1: 16820 Storey Road Registrant City: Monmouth Registrant State/Province: OR Registrant Postal Code: 97361 Registrant Country: United States Registrant Country Code: US Registrant Phone Number: +1.5038388341 Registrant Email: [email][email protected][/email]

Whois for Paypal.com

Code: [Select]
Registrant: Make this info private PayPal Inc. 2211 North First Street San Jose, CA 95131 US Phone: 408-967-9100 Fax: 408-376-7517

Notice the difference? That's not just from using a different whois provider.

Look at the domain name. Notice the slash after paypal.com is facing the wrong way round? :D
Title: Paypal Email / Spoof ?
Post by: Fineus on July 14, 2005, 06:37:20 pm: Got it, thanks guys :)

Any idea how I can set about ***** slapping these good people? Would forwarding the details to Paypal be enough?
Title: Paypal Email / Spoof ?
Post by: aldo_14 on July 14, 2005, 06:39:21 pm: Really the question is twofold;
1/ how much does a mafia heavy (or Ross Kemp*) cost?
2/ how much does sending them to 16820 Storey Road, Monmoth cost?

*because he's always bald and angry
Title: Paypal Email / Spoof ?
Post by: Martinus on July 14, 2005, 06:39:53 pm: Quote
Originally posted by Kalfireth
Got it, thanks guys :)

Any idea how I can set about ***** slapping these good people? Would forwarding the details to Paypal be enough?

[color=66ff00]Nah, a lot of them are based in eastern europe, they simply pack up, register a new domain and start all over again.
[/color]
Title: Paypal Email / Spoof ?
Post by: karajorma on July 14, 2005, 06:40:28 pm: From their (real) website.

Quote
Forward suspicious emails to: [email protected]
Title: Paypal Email / Spoof ?
Post by: achtung on July 14, 2005, 06:47:07 pm: yea make sure to help catch those bastards.
Title: Paypal Email / Spoof ?
Post by: Inquisitor on July 14, 2005, 07:39:39 pm: Download the ebay toolbar, there is a button to "report a site"

It will also tell you if a site is legit.

And it's darn handy if you use IE and eBay.
Title: Paypal Email / Spoof ?
Post by: WMCoolmon on July 14, 2005, 08:52:45 pm: If I had a nickel for every Paypal scam email I've gotten, I'd have a good $20-$50 or so.
Title: Paypal Email / Spoof ?
Post by: Scuddie on July 14, 2005, 10:58:28 pm: If I had a nickel for every PayPal scam e-mail I've ever gotten, I'd be $0.00 richer.
Title: Paypal Email / Spoof ?
Post by: achtung on July 14, 2005, 11:27:59 pm: I've never received a paypal one but I did get an Ebay scam e-mail once.
Title: Paypal Email / Spoof ?
Post by: aldo_14 on July 15, 2005, 05:24:33 am: Hello firend

You can have a nickel for every receive email scam you do. My formerly living client President Mtumbe Uwagwa was killed died in a accidentally tragic plane crash in Zaire with no descendents. He secretly covertly didn't set up a $450,000,000,000.01 account to pay for email, and you can access gain this for a simple transaction lubrication payment of $5,000.

Yours sincereley
Barrister Molabe Jackson Senior
Title: Re: Paypal Email / Spoof ?
Post by: ZylonBane on July 15, 2005, 11:56:21 am: Quote
Originally posted by Kalfireth
I just got this through to my email account and needless to say.. I'm a tad worried. I haven't made any such payment as the email suggests but don't want to log in to the account just incase it's not real. I dont use Paypal often so I thought I'd open to this to you guys..

Seriously, what rock have you been living under?

Welcome to last year (http://www.theregister.co.uk/2004/03/21/phishing_attacks_on_the_rise/).