ATOT Effect request: Paypal-Lookalike Phisher's Website Needs Some Abuse

Jeff7

Lifer
Jan 4, 2001
41,596
20
81
******%20cgi-bin%20webscr%20cmd--secure-amp-sh-u%20%20.userid.jsp.krblrice.com/.https//.www.paypal.com/webscr_cmd=_login-run/
Huh, well, appears that they've done up the parser or something to prevent an unsecured Paypal link. Replace the asterisks with the appropriate Paypal link, including http:// - not https. Yeah, I'm making you all work for this. First time, remember?

It seems to only work with IE though.
Go ahead, flood them with all kinds of crappy passwords and such. Just to give them something do to.:) Have fun.
It will take whatever username and password you give, and then ask for your credit card number, expiration date, and PIN - "For fraud protection" it says.:D
I have forwarded the e-mail to the Spoof at Paypal.com address provided on Paypal's website. Good hunting.