The latest Paypal scam site

[VaG]

http://www.paypalupdate.da.ru

 

[PsychoAndy]

nice, and they cant even erase the www.da.ru banner on the bottom

 

[bmacd]

what an ass. He's the reason people get discouraged about buying things off the internet. I sent fake information with an fbi email addy with a PW of "you'regonnagetarrested".

-=bmacd=-

 

[Lucky]

Originally posted by: bmacd
what an ass. He's the reason people get discouraged about buying things off the internet. I sent fake information with an fbi email addy with a PW of "you'regonnagetarrested".

-=bmacd=-

haha, i did that before you even posted

 

[PushHands]

If you click on "secure website" link, you get this:

Protect Your Password

Always check that the URL in your browser's address bar begins with https://www.paypal.com/ (note the 's' after 'http').

Never enter your PayPal password into a page that does not begin with https://www.paypal.com/.

Following these tips will help you keep your account information safe, secure, and private.

now if I wasn't a moron, I'd redesign the site

 

[dakata24]

* To help us update servers faster, please provide us with an estimate of how much money your paypal holds currently.

morons.. hope this get's shutdown asap.. :disgust:

 

[Squisher]

This is just getting stupid. How many morons out there think they are going to get away with this?

 

[bmacd]

Originally posted by: dakata24
morons.. hope this get's shutdown asap.. :disgust:

like it makes a difference...there's another two hundred of these sites out there...BUT..the ATOT effect IMO has caused several sites to shut down (read: ebay p00p auction).

-=bmacd=-

 

[dakata24]

has anyone PM'd Paypaldamon yet?

like it makes a difference...there's another two hundred of these sites out there...BUT..the ATOT effect IMO has caused several sites to shut down (read: ebay p00p auction).

you're probably right.. wasnt it just a week or so ago that paypaldamon had a warning that the mods stickied.. personally, it doesnt affect me at all since i dont use paypal.. not a big seller/buyer (that's what it's used for mostly, right?). just hope no-one is dumb enough to believe it's real.

 

[Shanteli]

Traced them....they are in Moskva, Russia. I dunno what laws apply there.

 

[bmacd]

Originally posted by: Shanteli
Traced them....they are in Moskva, Russia. I dunno what laws apply there.

traced them?? wasn't it the .ru suffix that gave it away?

-=bmacd=-

 

[Electrode]

You'd be amazed how many people fall for this stuff. The same people that fall for the obvious scams on eBay are the ones that would give their paypal info to one of these scams. And there are a lot of them.

This site will be shut down, but not before they get acces to a lot of accounts, and knowing PayPal's track record, those who fell for it are screwed big time.

 

[bunker]

email: busted@fbi.gov
password: You_Guys_Are_Toast

Amount in account $1,000,000

Heh heh

 

[dakata24]

here's the whois info:

domain: DA.RU
type: CORPORATE
descr: domain for internet project
admin-o: NL-ORG-RIPN
nserver: ns1.incru.net.
nserver: ns2.incru.net.
nserver: ns3.incru.net.
nserver: ns4.incru.net.
created: 1998.03.28
state: Delegated till 2003.04.01
changed: 2001.05.27
mnt-by: NET-MNT-RIPN
source: RIPN


org: NET Limited
nic-hdl: NL-ORG-RIPN
admin-c: NLORG-RIPN
bill-c: NLORG-RIPN
phone: +7 812 1430914
fax-no: +7 812 1430914
e-mail: ripn@income.inc.ru
changed: 2002.01.04
mnt-by: NET-MNT-RIPN
state: RIPN NCC check completed OK
source: RIPN


person: NET LTD CONTACT GROUP
nic-hdl: NLORG-RIPN
address: Russia, Saint-Petersburg
phone: +7 812 1230450
e-mail: ripn-org@income.inc.ru
changed: 2001.09.12
mnt-by: NET-MNT-RIPN
source: RIPN

 

[bunker]

This is nuts!!! I'm leaving IE now!!

No one else uses my 'puter so I have IE remember ID's and passwords for me, well, I click on login on this page and IE fills in the name!!! WTF? :|

Of course I didn't submit it so no problems, but christ, the site's not even the right URL.

 

[bmacd]

I was just thinking...what if the site can read a cookie that Paypal uses? NOW some of us may be screwed.

-=bmacd=-

 

[Electrode]

The actual URL of the page is http://liquid2k.com/jiggydude

Someone lookup liquid2k.com, which will bring us one step closer to the scammer.

 

[datalink7]

login: fvck you
password: fvck you
money in account: fvck you

 

[bunker]

Registrant:
Smith, Adam (LIQUID2K2-DOM)
27 West 20th Street. #401
New York, NY 10011
US

Domain Name: LIQUID2K.COM

Administrative Contact, Technical Contact:
Smith, Adam (EMOKAUQFOI) likwidkool@AOL.COM

27 West 20th Street. #401
New York, NY 10011
US
2128765734

Record expires on 29-Jul-2004.
Record created on 29-Jul-1999.
Database last updated on 10-Jun-2002 22:47:08 EDT.

Domain servers in listed order:

NS5.LIQUID2K.COM 128.241.245.11
NS6.LIQUID2K.COM 128.241.245.13

 

[Electrode]

<< Smith, Adam (EMOKAUQFOI) likwidkool@[b]AOL.COM[/b] >>

I KNEW IT!

Now, what we need to find out next is if Mr. Adam Smith is the scammer, or simply providing an account to the scammer, and if the latter is true, knowingly or unknowingly?

Wannabe cyber-detectives, have at it.

 

[Damon]

Hi,

The site has been brought down (from what I have been advised). As always, please be sure to log in at www.paypal.com ONLY.

We do have a claims process for these issues, but users can avert having to go through the headache by not following the directions in an email like that.

 

[edro]

Originally posted by: bmacd
I was just thinking...what if the site can read a cookie that Paypal uses? NOW some of us may be screwed.

-=bmacd=-

Yeah, that would suck. But I highly doubt your password is in the cookie. Your login name maybe, but definately not your password.