Beware: Fake Website

Mike · 02-28-2007

Hi,
Recently I was hit with many emails on some email address which I need added for eBay or Paypal accounts. The email contained an complete clone of eBay with a fake url to login. I knew it was fake but I thought of having a look on the sites.

.. The fake site looked completely like the original site without https:// remember to check the mails carefully and look over the security certificate too.

dasha101 · 03-01-2007

Thanks for giving us this information. Scams and fraud keep on coming with different and new ways to fool people.

Mike · 03-01-2007

Yes dasha101, Its correct. Scams and frauds are the best way for scammer to get free cash. Also https:// provides you security and your login and password is encrypted into 128 bit encryption.

etali · 03-01-2007

The scammers are getting clever these days. Glad you didn't get caught out.

I just advise people to ignore emails they get from places like eBay or their bank. If you think its a real message, open your browser and type in the URL of the place that emailed you manually, then check your 'message center' on that site to see if they really did contact you.

swapnil90 · 03-02-2007

hey...this post is already there in some other category or Forum...dat means some1 else got it too...man...PayPal...b careful

swapnil90 · 03-02-2007

Quote:

From: PayPal <paypal-paymant@paypal.com>

Subject: Dispute Transaction

Header:

Microsoft Mail Internet Headers Version 2.0
Received: by mail99-dub (MessageSwitch) id 117261372464694_24431; Tue, 27 Feb 2007 22:02:04 +0000 (UCT)
Received: from 2000SERVER.NHFA (64-205-157-222.client.dsl.net [64.205.157.222])
by mail99-dub.bigfish.com (Postfix) with ESMTP id 0A1DEE1008B;
Tue, 27 Feb 2007 22:02:02 +0000 (UTC)
Received: from User ([24.80.109.196]) by 2000SERVER.NHFA with Microsoft SMTPSVC(5.0.2195.5329);
Tue, 27 Feb 2007 16:52:19 -0500
Reply-To: <paypal-paymant@paypal.com>
From: "PayPal"<paypal-paymant@paypal.com>
Subject: Dispute Transaction
Date: Tue, 27 Feb 2007 14:01:58 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <2000SERVERqBsJFHOda00000733@2000SERVER.NHFA>
X-OriginalArrivalTime: 27 Feb 2007 21:52:19.0484 (UTC) FILETIME=[8D9F85C0:01C75AB9]
To: undisclosed-recipients:;
Return-Path: paypal-paymant@paypal.com

Message:

Dear PayPal Member,

This email confirms that you have sent an eBay payment of $47.85 USD to
harris2727@aol.com for an eBay item.

-----------------------------------
Payment Details
-----------------------------------

Amount: $47.85 USD
Transaction ID: 2LC956793J776333Y
Subject: Digimax 130

Note:
If you haven't authorized this charge ,click the link below to dispute transaction and get full refund

Dispute transaction (Encrypted Link ) http://www.selbynightlife.co.uk/login/

*SSL connection:
PayPal automatically encrypts your confidential information in transit from your computer to ours using the Secure Sockets Layer protocol (SSL) with an encryption key length of 128-bits (the highest level commercially available)

-----------------------------------
Item Information
-----------------------------------

eBay User ID: scratchandgnaw2

----------------------------------------------------------------
Edward Harrell's UNCONFIRMED Address
----------------------------------------------------------------

Edward Harrell
211 David St.
Springtown, TX 76082
United States

Important Note: Edward Harrell has provided an Unconfirmed Address. If you are planning on shipping items to Edward Harrell, please check the Transaction Details page of this payment to find out whether you will be covered by the PayPal Seller Protection Policy.

----------------------------------------------------------------
This payment was sent using your bank account.

By using your bank account to send money, you just:

- Paid easily and securely
- Sent money faster than writing and mailing paper checks
- Paid instantly -- your purchase won't show up on bills at the end of the month.

Thanks for using your bank account!

----------------------------------------------------------------

Thank you for using PayPal!
The PayPal Team
PayPal Email ID PP118

This is the thing...

etali · 03-02-2007

It would be interesting to see the full headers from the phish that Mike recieved. I don't think they will necessarilly be the same email.

Tons of scammers spoof ebay and paypal emails - they're the most commonly used so easiest targets.

swapnil90 · 03-04-2007

It would not be the same e-mail but the format would be the same...only the amount would be different...PayPal should not allow users to make usernames that include PayPal ... What do you think ?

mercury2k5 · 03-13-2007

Thanks for sharing this valuabe infornation with all of us here..
Scams in different faces are seen in our daily lives...
This is one of it..So beware!!

**rant** · 03-16-2007

Can internet browsers with protections from malicious web sites be able to detect these scams? Thanks for the tips guys. I know different types of phishing activities are out there and everyone should always be careful not to caught in their lure.