Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

Dingbat PSA: "New" PayPal email scam

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » The DU Lounge Donate to DU
 
Robb Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Feb-05-05 06:14 PM
Original message
Dingbat PSA: "New" PayPal email scam
Variation on an older theme...

Comes as an email "please update your account information"...with a seemingly PayPal.com return address:

Dear valued PayPal¨ member:

It has come to our attention that your PayPal¨ account information needs to be
updated as part of our continuing commitment to protect your account and to
reduce the instance of fraud on our website. If you could please take 5-10 minutes
out of your online experience and update your personal records you will not run into
any future problems with the online service.


However, failure to update your records will result in account suspension.
Please update your records on or before February 10, 2005.
Once you have updated your account records, your PayPal¨ session will not be
interrupted and will continue as normal.

To update your PayPal¨ records click on the following link:
http://www.paypal.com/cgi-bin/webscr?cmd=_login-run



Thank You.
PayPal¨ UPDATE TEAM

Accounts Management As outlined in our User Agreement, PayPal¨ will
periodically send you information about site changes and enhancements.

Visit our Privacy Policy and User Agreement if you have any questions.
http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside


...Now here's the giggle: the embedded link that appears blue as if you're going to PayPal, actually goes to www.woxuz.info/, where a fishing program goes to work. Here's the internic whois:


Domain ID:D9576953-LRMS
Domain Name:WOXUZ.INFO
Created On:05-Feb-2005 01:11:29 UTC
Last Updated On:05-Feb-2005 01:11:32 UTC
Expiration Date:05-Feb-2006 01:11:29 UTC
Sponsoring Registrar:R139-LRMS
Status:CLIENT LOCK
Status:OK
Registrant ID:C8881794-LRMS
Registrant Name:CARL CUMMINGS
Registrant Organization:CARL CUMMINGS
Registrant Street1:929 MAURY RIVER RD
Registrant City:LEXINGTON
Registrant State/Province:VA
Registrant Postal Code:24450
Registrant Country:US
Registrant Phone:+001.5404633432
Registrant Email:yassinez@gmail.com
Admin ID:C8881794-LRMS
Admin Name:CARL CUMMINGS
Admin Organization:CARL CUMMINGS
Admin Street1:929 MAURY RIVER RD
Admin City:LEXINGTON
Admin State/Province:VA
Admin Postal Code:24450
Admin Country:US
Admin Phone:+001.5404633432
Admin Email:yassinez@gmail.com
Billing ID:C8881794-LRMS
Billing Name:CARL CUMMINGS
Billing Organization:CARL CUMMINGS
Billing Street1:929 MAURY RIVER RD
Billing City:LEXINGTON
Billing State/Province:VA
Billing Postal Code:24450
Billing Country:US
Billing Phone:+001.5404633432
Billing Email:yassinez@gmail.com
Tech ID:C8881795-LRMS
Tech Name:Network Admin
Tech Organization:EasyHosting.com
Tech Street1:8250 Lawson Road
Tech City:Milton
Tech State/Province:ON
Tech Postal Code:L9T5C6
Tech Country:CA
Tech Phone:+1.8774145665
Tech Email:postmaster@easyhosting.com
Name Server:CNS1.LOOK.CA
Name Server:CNS2.LOOK.CA

DON'T BE FOOLED,KIDS!!
Printer Friendly | Permalink |  | Top
MrScorpio Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Feb-05-05 06:16 PM
Response to Original message
1. Let's all call Carl and ask him for a some money
He should be good for it
Printer Friendly | Permalink |  | Top
 
HeyManThatsCool Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Feb-05-05 06:24 PM
Response to Reply #1
2. I keep getting a PayPal email to become a Power Seller
but the one time I clicked on the link it went to a backdoor ebay page.

So I logged off & later checked at work- the email was a scam.

I got it again 2 times yesterday
Printer Friendly | Permalink |  | Top
 
Robb Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Feb-06-05 11:51 AM
Response to Reply #2
3. kick nt
:kick:
Printer Friendly | Permalink |  | Top
 
Name removed Donating Member (0 posts) Send PM | Profile | Ignore Sun Feb-06-05 12:00 PM
Response to Original message
4. Deleted message
Message removed by moderator. Click here to review the message board rules.
 
derby378 Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Feb-06-05 12:07 PM
Response to Original message
5. Super Bowl Kick! (n/t)
Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Thu May 02nd 2024, 07:56 PM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » The DU Lounge Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC