Club Cobra - Paypal Scams - How they do it...

Club Cobra (http://www.clubcobra.com/forums/)

- ALL COBRA TALK (http://www.clubcobra.com/forums/all-cobra-talk/)

- - Paypal Scams - How they do it... (http://www.clubcobra.com/forums/all-cobra-talk/53103-paypal-scams-how-they-do.html)

Paypal Scams - How they do it...

With all the talk about the stolen eBay and Paypal accounts, I thought I would show you how it's done.... sinister and simple.

First, you receive an e-mail that looks something like this:

http://www.427sc.info/files/paypal/web-origmsg.jpg

Note ..remember that Paypal and eBay and others never send out e-mails like this

You see, in the middle of the message, is a link to Paypal for logging in and updating your account.

Here is the first key to this scam... although the link DISPLAYS as a Paypal link, the redirction is to another system. When we take the code apart in the message, it shows the displayed link as well as the real destination you will be hooked to...

http://www.427sc.info/files/paypal/web-url-reroute.jpg

..it really sends you to another IP address.

When we trace that IP address...

http://www.427sc.info/files/paypal/web-tracert.jpg

..we come up with a domain name that will be the ACTUAL server you are being re-directed to.

When we go check that domain name...

http://www.427sc.info/files/paypal/web-whois.jpg

...lo and behold, we are logging into a public server in Taiwan!

At that point, you are presented with a very official looking fill-in-the-blank form, asking for your credit card info, etc.

The bogus server doesn't last long...usually it's gone in 24 hours.

Moral - just be alert if you get a message like this.

Ron

Thanks.... I feel very fortunate to have folks like your self keeping us aware of what's going on....cause I don't have a clue about this computer stuff....and would fall right into a hole and not even know it.....

Thanks again

Morris

Ron - thanks for the explanation - that is unbelieveable.

1 question - how will I ever know again if I am receiving a legitimate email from ebay or Paypal?:confused: :confused:

Both E-Bay and PayPal will address you by your full name as you regestered with them.... and NOT "Dear PayPal Costomer".

Thanks Ron,

I sent this to my kids who are active ebayers. Maybe you have saved them some grief and mis-fortune.

Clois

Thanks Ron for that imformation, we will be careful.

Thanks Ron,

I have gotten the PayPal notices and also Citi bank "requests"
for credit card and PIN confirmations - probably the same deal.
Thought they were bogus - thanks for showing how they do it.
(I did NOT respond!)

Flip