PAYPAL Scam Going on Read This.

EliteForces

Banned
Jun 19, 2001
681
0
0
I saw this on another site and thought it was interesting link to that thread

--------------------------------------------------------------------------------
Suspicious PayPal E-Mail!! Fraud!

I just received the following e-mail from somebody claiming to be from PayPal. I looked it up and I am quite certain it is fraud. Please be careful:
______________________________________________________________________________
Dear PayPal customers,

We would like to inform You about our new services which are available at http://paypal-login.com.
Use your paypal account to log in and explore the great opportunities that we are giving You.
Don't underestimate the chance to update your paypal account, checkout the new statistics that are
available or activate a few more online services.

From now on You can use your paypal online more effectively than before, just login into your account
and activate the services.


Please do not reply to this e-mail. Mail sent to this address
cannot be answered. For assistance, login to your PayPal
account and choose the "Help" link in the footer of any page.

Thank you for using PayPal!

Best regards,
The PayPal Team
______________________________________________________________________________

I looked up the domain name and paypal-login.com is owned by an individual, not PayPal!! I also examined how this login operates carefully. What it does is capturing your e-mail and password, and then probably store them somewhere, and then log you into the real PayPal site, which means you would never know that your ID and password have been stolen. (Trying not to get too technical here. That's the general idea.)

Please do not log onto your account using this e-mail.


also if a link takes you to http://www.paypal-login.com its fraud never login to a site that does not have https next to it because it means its not secured.

---

This was also posted in several forums by our member, Paypaldamon, but it is worth sticking to the top of the forum for a few days as a reminder.

AnandTech Moderator
 

Gillbot

Lifer
Jan 11, 2001
28,830
17
81
I logged in through the "http://paypal-login.com" site and it went to paypal just fine. :Q

DON'T FLAME YET!!!!

I'm sure they will be disappointed with the Login Email and Password used, heheheheheh

Notonyourlife@F*CKYOU.A$$
Morons

oops, my login was incorrect :Q;)
 

solo

Member
Oct 9, 2001
148
0
0
FYI

This is what I get from Whois:

Domain name you searched for is not registered through Melbourne IT.
Following is the information we gathered for paypal-login.com

-----
Whois Server Version 1.3
Domain names in the .com, .net, and .org domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: PAYPAL-LOGIN.COM
Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Whois Server: whois.inww.com
Referral URL: http://www.inww.com
Name Server: NS19A.NAMESERVERS.NET
Name Server: NS19B.NAMESERVERS.NET
Updated Date: 19-jan-2002


Not much useful info...

-Solo
 

EliteForces

Banned
Jun 19, 2001
681
0
0
I Didnt run the whois i just copied it from the site i found the topic.. i am really interested in this because recently i have sent payment via paypal.



Regular PayPal is in Palo Alto California. For these bozos, who registered the domain today:

Whois from VeriSign:

Domain Name.......... paypal-login.com
Creation Date........ 2002-01-20
Registration Date.... 2002-01-20
Expiry Date.......... 2003-01-20
Organisation Name.... System-Mail.net
Organisation Address. 3300 West Florida
Organisation Address.
Organisation Address. Denver
Organisation Address. 80219
Organisation Address. CO
Organisation Address. UNITED STATES

Admin Name........... Sinhai Kai
Admin Address........ 3300 West Florida
Admin Address........
Admin Address........ Denver
Admin Address........ 80219
Admin Address........ CO
Admin Address........ UNITED STATES
Admin Email.......... dsystem.com@usa.net
Admin Phone.......... (303)935-1444
Admin Fax............

Tech Name............ Verio Hostmaster
Tech Address......... 5050 Blue Lake Dr.
Tech Address.........
Tech Address......... Boca Raton
Tech Address......... 33431
Tech Address......... FL
Tech Address......... UNITED STATES
Tech Email........... hostmaster@VERIO-HOSTING.COM
Tech Phone........... 888-663-6648
Tech Fax.............
Name Server.......... ns19a.nameservers.net
Name Server.......... ns19b.nameservers.net

 

solo

Member
Oct 9, 2001
148
0
0
I checked Whois on Network Solutions - no info, guess I shoulda used Verisign instead.

-Solo
 

artaphishul

Junior Member
Jul 27, 2001
16
0
0
I just called Verio hosting and sent an email to their abuse dept. They said this would be taken care of ASAP.
Nice work people, Anandtech always helps the public in more ways then one!
louis
 

XFreebie

Banned
Dec 12, 2000
1,414
0
0
somebody should develop a bot to flood the database of future scammers. dont these guys get caught and put behind jail? how come we never hear what happens, it'd be nice to know
 

Jdog

Senior member
Oct 14, 1999
792
0
71
Paypal reason #1 of why you should use c2it instead: paypal doesn't care if people get scammed, as long as they get paid.
 

solo

Member
Oct 9, 2001
148
0
0
The copyright at the bottom of the fake page says "2001". The copyright on the real page says "2002".
Apart from that they're identical!


-Solo
 

nekote

Senior member
May 22, 2001
693
0
0
EliteForces:
#1: Fantastic job on this paypal-login.com apparent scam - thanks!
#2: I tried to track down info on paypal-login.com and had some luck, but not real good.

In particular the most recent post that starts:

Whois from VeriSign:

Domain Name.......... paypal-login.com
Creation Date........ 2002-01-20
Registration Date.... 2002-01-20
Expiry Date.......... 2003-01-20
Organisation Name.... System-Mail.net
Organisation Address. 3300 West Florida
Organisation Address.
Organisation Address. Denver
Organisation Address. 80219
Organisation Address. CO
Organisation Address. UNITED STATES



For my (our) future reference, how did you get that info?
I tried a bunch of different whois, including VeriSign, but didn't get that level of detail.
Gotta' secret you can share?
Or has the Registrar (inww.com of Australia) already closed down access to the finer detail?

Thanks, muchly!
 

Ziptar

Platinum Member
Jul 7, 2001
2,077
0
86
Looks like its dead.... I bet he pops up again..... he may even have a host ready....
 

rag15

Banned
Jan 7, 2002
84
0
0


<< theses guys should go to jail and have to paypal their way out haha >>




I think he would rather stay in jail than pay 3% to these greedy a$$holez.
 

DUKAT1

Golden Member
Mar 16, 2001
1,543
0
0
Good job.:D

Hey scammers, this is the anandtech effect at work.:p

String 'em up by their jewels, the family kind.
 

Phoenix15

Golden Member
Aug 9, 2001
1,587
3
81
I dropped a email to there host. here is the reply I recieved.


Dear Mr. xxxxxxx

Thanks for notifying us of your discovery and concern. The system had been isolated and a security investigation is under way.

Thanks again,

Kevin D. Lees
Director, System Operations
USA.NET
303.865.1256
kevin.lees@corp.usa.net