Home  |  Forums  |  914 Info  |  Blogs
 
914World.com - The fastest growing online 914 community!
 
Porsche, and the Porsche crest are registered trademarks of Dr. Ing. h.c. F. Porsche AG. This site is not affiliated with Porsche in any way.
Its only purpose is to provide an online forum for car enthusiasts. All other trademarks are property of their respective owners.
 

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Paypal phishing scam, Almost identical web site too
Pugbug
post Jun 16 2005, 11:27 PM
Post #1


Member
**

Group: Members
Posts: 449
Joined: 14-February 05
From: Victoria, BC
Member No.: 3,604



Be careful... This thing had me fooled, but luckily I don't have a Paypal account.
Below is the web site I was directed to....Sorry I haven't figured out how to post a link yet.
The link in the e-mail was "paypal.com/xxxxxxxxxx..(I deleted the e-mail, and don't remember the full address)
When I checked my history this is the address that gets you there.....What ever you do if you go to the site. Warning DO NOT LOGIN

http://www.hymca.or.kr/bbs/ver.ph
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
skline
post Jun 16 2005, 11:29 PM
Post #2


Born to Drive
*****

Group: Members
Posts: 7,910
Joined: 26-December 02
From: Costa Mesa, CA
Member No.: 17
Region Association: Southern California



Not Found
The requested URL /bbs/ver.ph was not found on this server.

Apparently they already caught it and removed it
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Pugbug
post Jun 16 2005, 11:29 PM
Post #3


Member
**

Group: Members
Posts: 449
Joined: 14-February 05
From: Victoria, BC
Member No.: 3,604



Well I'll be damned....I guess I can post a link!
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Pugbug
post Jun 16 2005, 11:35 PM
Post #4


Member
**

Group: Members
Posts: 449
Joined: 14-February 05
From: Victoria, BC
Member No.: 3,604



For some reason there is a "p" missing from the end of the address in my first attempt .

http://www.hymca.or.kr/bbs/ver.php

WARNING THIS IS A PHISHING SITE.....DO NOT LOG IN!
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Brando
post Jun 16 2005, 11:38 PM
Post #5


BUY MY SPARE KIDNEY!!!
****

Group: Members
Posts: 3,935
Joined: 29-August 04
From: Santa Ana, CA
Member No.: 2,648
Region Association: Southern California



If you're using Mozilla or Mozilla Firefox, to avoid phishing websites do the following:

1) in the address bar type in "about:config"

2) look for the entry "network.enableIDN", double-click the entry to change it to "false".

3) close your browser and re-open it. Phishing websites that use international domain names (show up as &somethingsomething; or %2F %83 in the address bar) will not work.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
skline
post Jun 16 2005, 11:40 PM
Post #6


Born to Drive
*****

Group: Members
Posts: 7,910
Joined: 26-December 02
From: Costa Mesa, CA
Member No.: 17
Region Association: Southern California



Hey, it worked this time............

I logged in and everything......................

Username: GoFuc#yourselves
Password: Youlittlechickenshits

It went to a blank page. I wonder if they will like that? (IMG:http://www.914world.com/bbs2/html/emoticons/laugh.gif)
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
skline
post Jun 16 2005, 11:42 PM
Post #7


Born to Drive
*****

Group: Members
Posts: 7,910
Joined: 26-December 02
From: Costa Mesa, CA
Member No.: 17
Region Association: Southern California



Good tip Brandon, most people should know to look for the lock at the bottom and verify it is the correct site by looking at the address bar, but for a lot of people, they dont do that so this would be good for them.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Brando
post Jun 16 2005, 11:44 PM
Post #8


BUY MY SPARE KIDNEY!!!
****

Group: Members
Posts: 3,935
Joined: 29-August 04
From: Santa Ana, CA
Member No.: 2,648
Region Association: Southern California



Another good point skline... Always check the certificate if you're connecting to a site through SSL (https:// in the addy bar).
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Pugbug
post Jun 17 2005, 12:12 AM
Post #9


Member
**

Group: Members
Posts: 449
Joined: 14-February 05
From: Victoria, BC
Member No.: 3,604



The link in the e-mail was "paypal.com/bin....Don't remember the rest, but the address in the browser address bar matched it. I called Paypal using the phone number I got from the fake site to find out what was going on.
I was a bit paranoid because when I was on vacation in California in April someone got my Visa number and charged up $800 to my account gambling online, and it was billed through paypal.
The text of the e-mail said that someone was trying to access my Paypal account using a different ip address. I was worried that someone somehow got ahold of my new Visa number again, and had set up a Paypal account with it.
Man....This world is full of thieves!
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
SirAndy
post Jun 17 2005, 12:20 AM
Post #10


Resident German
*************************

Group: Admin
Posts: 41,641
Joined: 21-January 03
From: Oakland, Kalifornia
Member No.: 179
Region Association: Northern California



gawd, these kidz are soooos stupid these days ...

here's the server your login information will be send to, and guess what, they didn't turn off directory browsing ...

hahahahahaha

http://216.69.161.136/

happy snooping guys ...
(IMG:http://www.914world.com/bbs2/html/emoticons/biggrin.gif) Andy
User is online!Profile CardPM
Go to the top of the page
+Quote Post
redshift
post Jun 17 2005, 12:24 AM
Post #11


Bless the Hell out of you!
**********

Group: Members
Posts: 10,926
Joined: 29-June 03
Member No.: 869



lol

I am creating some new DBs, thanks ANDY!!

http://216.69.161.136/admin/

M
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
redshift
post Jun 17 2005, 12:28 AM
Post #12


Bless the Hell out of you!
**********

Group: Members
Posts: 10,926
Joined: 29-June 03
Member No.: 869



OH DEAR! I AM NOT A DBA! I JUST DELETED ALL THEIR TRAFFIC TABLES!

HELP!


M
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
SirAndy
post Jun 17 2005, 12:28 AM
Post #13


Resident German
*************************

Group: Admin
Posts: 41,641
Joined: 21-January 03
From: Oakland, Kalifornia
Member No.: 179
Region Association: Northern California



QUOTE (redshift @ Jun 16 2005, 11:24 PM)
I am creating some new DBs, thanks ANDY!!

just be careful, there are some *.exe in some of the subdirectories that you *SHOULD NOT* click on ...

(IMG:http://www.914world.com/bbs2/html/emoticons/wink.gif) Andy
User is online!Profile CardPM
Go to the top of the page
+Quote Post
redshift
post Jun 17 2005, 12:35 AM
Post #14


Bless the Hell out of you!
**********

Group: Members
Posts: 10,926
Joined: 29-June 03
Member No.: 869



Yes, well aware!

Question: Can I log on, and upload with my FTP program? I have something I'd like to leave there... (IMG:http://www.914world.com/bbs2/html/emoticons/stromberg.gif)



M
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
redshift
post Jun 17 2005, 12:52 AM
Post #15


Bless the Hell out of you!
**********

Group: Members
Posts: 10,926
Joined: 29-June 03
Member No.: 869



Password... I need a password.

Hmm... userid:admin

(IMG:http://www.914world.com/bbs2/html/emoticons/poke.gif)


M
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
morph
post Jun 17 2005, 05:29 AM
Post #16


quality parts builder
***

Group: Members
Posts: 1,828
Joined: 25-November 03
From: oregon coast
Member No.: 1,389
Region Association: Pacific Northwest



One good tip from Paypal is that they will always address you by name, and most of the phishing sites will address you by email. Now I just forward to spoof@paypal.com and delete. If I feel there is any issue with my account then I log in to my account from Paypals website and I double check.

HIEDI
User is offlineProfile CardPM
Go to the top of the page
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



- Lo-Fi Version Time is now: 17th May 2024 - 09:39 PM