***WARNING*** on fake PayPal Request

[I_W]

Yes, it's not an Online Deal or Coupon BUT people here are most apt to get dragged into this -- more likely with naive relatives and friends.

Received a FAKE request from Pay Pal this morning. Nicely done and looks like it is real. Leads you to:

http://202.44.12.83/%70%70/%70%72%6F...67%2E%68%74%6D

An obvious attempt to get credit card and personal information.

YES, I've sent the info to PayPal where I canceled my account a long, long, time ago when I realized they were getting unreasonable with their demands on information and started to escalate fees.

-------------------------------------------------
EDIT
I had done an WHOIS on it and the info request page was coming from AUSTRALIA. I received a reply from PayPal and a request to forward the original to them at an address they gave me.

As much as I dislike PayPal and refuse to deal with them when I use eBay, I sure don't want others sucked into this nonsense.

Make sure your naive friends and relatives don't get fooled into this. I think most of us here are too savy to bite but I know a lot of my "friends" who used to bombard me with fake virus warnings until I finally clued them in would bite in an instant!

[osprey4]

Looks to me like they're sending you to the real Paypal.

Can you determine the origin of the sender or details about this site? Someone recently posted a program you can use to track down the sender from the message.

Good thing you turned it in.

SamSpade.org

Just to elaborate a little further.

Whoever made the fake page, just copied it from here . You'll notice the security lock down in the status bar.

The fake page has no security.

And if you look at the source on the page . . .

'<!-- saved from url=(0059)https://www.paypal.com/cgi-bin/websc...gistration-run -->'

[peterwilkes]

The http://202.44.12.83/%70%70/%70%72%6...%67%2E%68%74%6D is fake!!!!!!

If you look at the bottom of the page there is not even a padlock symbol in the browser that says the page is going to be encrypted. Also there is no 'type the code in' box and the copyright is dated 2002 which is now out of date.

Compare this with the real paypal signup page located at http://202.44.12.83/%70%70/%70%72%6...%67%2E%68%74%6D

I have also just noticed the the (r) symbol on the paypal in the fake page is in a different location to the real page. There are lots of differences between the page.

I didn't fill out any info exept for my name 'You R ADumbass' and it sent me to this page.

I hope everybody w/ PayPal sees this thead.

Thanks for the heads-up I_W!

[Droppyale]

WOw!

Nice to know this... since I use paypal...

Thanks a bunch.

[MrPsychoGreaser]

I'm not sure if this is a direct copy. For instance...compare the paypal logos from the fake to the real one (click contact or help to see the real site logo). The "Registered" symbol on the paypal logo switches from top to bottom...fake to real. Fake has it on the lower right hand corner..the real has it on the the upper right hand corner. Looks like somebody actually put in a lot of time into this...yet left this mistake.

[rastorize]

Yeah...check 'view source'...
<!-- saved from url=(0059)https://www.paypal.com/cgi-bin/websc...gistration-run -->

All the pages have it.

Pretty bold whoever's doing this.

Good catch.

[Raydeo]

There is also a clue in the address:

Paypal cautions users to look for https in the address "box" of their site. This one is just http...Now I think I know why Paypal mentions this on their signup info...
Thanx for the heads-up.