I just got this email... I suppose I ought to follow its instructions.

aphex

Moderator<br>All Things Apple
Moderator
Jul 19, 2001
38,572
2
91
Originally posted by: minendo
I filled that info out just this morning.

uhm, so did i. Should we not have?
 

Jzero

Lifer
Oct 10, 1999
18,834
1
0
Fill out the form with realistic-looking information, but preface everything with "the" as was done in the e-mail.
Firstname: The Wingznut
Lastname: The Pez
SSN: THE-99-1234
 

Wingznut

Elite Member
Dec 28, 1999
16,968
2
0
Originally posted by: Jzero
Fill out the form with realistic-looking information, but preface everything with "the" as was done in the e-mail.
Firstname: The Wingznut
Lastname: The Pez
SSN: THE-99-1234
"The Pez"... It's touching when someone else remembers your roots. ;)
 

dquan97

Lifer
Jul 9, 2002
12,010
3
0
TommyVercetti, the when you move the mouse over the link, it may show an authentic URL, but the page that it brings up is a fake
 

Wingznut

Elite Member
Dec 28, 1999
16,968
2
0
Originally posted by: TommyVercetti
https://web.da-us.citibank.com/signin/scripts/login2/user_setup.jsp

I asked this before too, I don't see where the trick is. citibank.com is a valid website, and web.da-us. is it's subdomain. I don't get it.
I should've mentioned that the entire body of the email is a hyperlinked image... So, I highly doubt it actually goes to the URL shown.

How do I see where it truly routes without actually following it?
 

cronos

Diamond Member
Nov 7, 2001
9,380
26
101
Originally posted by: TommyVercetti
https://web.da-us.citibank.com/signin/scripts/login2/user_setup.jsp

I asked this before too, I don't see where the trick is. citibank.com is a valid website, and web.da-us. is it's subdomain. I don't get it.

you're not serious are you?

heck, whatever.
in the actual e-mail, the link shown is not really a link, it's a graphic carefully designed to fool people into believing that they actually are going to that link. if you right click on the message and choose 'copy link', it will show you the real address that your click is going to.
 

loup garou

Lifer
Feb 17, 2000
35,132
1
81
Originally posted by: Wingznut
Originally posted by: TommyVercetti
https://web.da-us.citibank.com/signin/scripts/login2/user_setup.jsp

I asked this before too, I don't see where the trick is. citibank.com is a valid website, and web.da-us. is it's subdomain. I don't get it.
I should've mentioned that the entire body of the email is a hyperlinked image... So, I highly doubt it actually goes to the URL shown.

How do I see where it truly routes without actually following it?
View the source.
 

Wingznut

Elite Member
Dec 28, 1999
16,968
2
0
When I right click and "View Source", I see:
<html><p><font face="Arial"><A HREF="https://web.da-us.citibank.com/signin/scripts/Iogin2/user_setup.jsp"><map name="FPMap0"><area coords="0, 0, 610, 275" shape="rect" href="http://%31%39%38%2E%37%38%2E%31%33%35%2E%38%32:%34%39%30%33/%63%69%74/%69%6E%64%65%78%2E%68%74%6D"></map><img SRC="cid:part1.00030109.00060209@user-support04@citibank.com" border="0" usemap="#FPMap0"></A></a></font></p><p><font color="#FFFFFF">Barbie Internet Tattoos in 1815 U.S. Postal Service </font></p></html>
 

rh71

No Lifer
Aug 28, 2001
52,844
1,049
126
besides... "confirming" data means validating prepopulated fields, not having to free-form type in our info... what if what we now type doesn't match what we had before eh ?
 

cronos

Diamond Member
Nov 7, 2001
9,380
26
101
Originally posted by: Jzero
Fill out the form with realistic-looking information, but preface everything with "the" as was done in the e-mail.
Firstname: The Wingznut
Lastname: The Pez
SSN: THE-99-1234

dude, you clicked on it?
i think they also have some trojan or browser hijacker or whatever going on. you'd better check your computer, pronto.
 

TommyVercetti

Diamond Member
Jan 4, 2003
7,623
1
0
Originally posted by: Wingznut
When I right click and "View Source", I see:
<html><p><font face="Arial"><A HREF="https://web.da-us.citibank.com/signin/scripts/Iogin2/user_setup.jsp"><map name="FPMap0"><area coords="0, 0, 610, 275" shape="rect" href="http://%31%39%38%2E%37%38%2E%31%33%35%2E%38%32:%34%39%30%33/%63%69%74/%69%6E%64%65%78%2E%68%74%6D"></map><img SRC="cid:part1.00030109.00060209@user-support04@citibank.com" border="0" usemap="#FPMap0"></A></a></font></p><p><font color="#FFFFFF">Barbie Internet Tattoos in 1815 U.S. Postal Service </font></p></html>

Oooooooooooooh! Makes sense now.
 

Jzero

Lifer
Oct 10, 1999
18,834
1
0
Originally posted by: saxguy
Originally posted by: Jzero
Fill out the form with realistic-looking information, but preface everything with "the" as was done in the e-mail.
Firstname: The Wingznut
Lastname: The Pez
SSN: THE-99-1234

dude, you clicked on it?
i think they also have some trojan or browser hijacker or whatever going on. you'd better check your computer, pronto.

Uh oh. I found WINLOGON.EXE running in my task manager. I better delete it.