|
06-03-2006, 03:18 AM
|
#1
|
Moderator
1968 17' Caravel
Battle Ground
, Washington
Join Date: Dec 2002
Posts: 12,253
|
Beware phishing scams!
I know we've talked about this before, but just a refresher...
I recieved an email this evening that said it was from an eBay member, a question about an item, and it looked just like an eBay email.
It said it was from "John with the Camera. you picked up my check 2 weeks ago and still haven't shipped my item! Are you scamming me? Respond immediately or I'm turning you in to eBay!" And since it looked just like an eBay email, it had a button that said click here to respond now. They're hoping you'll panic and click on that button to straighten out this misunderstanding, log in, and hand over your password. Then they're going to go list a $5000 Bambi on your account.
But of course if you do a 'view source' on that button, it's not from eBay, it's from:
Quote:
OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU
ReferralServer: whois://whois.apnic.net
NetRange: 61.0.0.0 - 61.255.255.255
CIDR: 61.0.0.0/8
NetName: APNIC3
NetHandle: NET-61-0-0-0-1
Parent:
NetType: Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: NS-SEC.RIPE.NET
NameServer: TINNIE.ARIN.NET
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://www.apnic.net/apnic-bin/whois2.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/info/faq/abuse
Comment:
RegDate: 1997-04-25
Updated: 2005-05-20
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3100
OrgTechEmail: search-apnic-not-arin@apnic.net
# ARIN WHOIS database, last updated 2006-06-02 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
|
I've gotten a ton of these lately, supposedly from eBay or
Paypal or Chase bank, none of which would be emailing me on
the account I receive these emails at. And they're always
going back to the same IP address - this dang Asian Pacific
Network. So what, we don't have a treaty with Australia to shut
B$^#&* like this down? Isn't there anyone to turn them in to?
It ticks me off. You know they catch unsuspecting people everyday.
__________________
Stephanie
|
|
|
06-03-2006, 05:25 AM
|
#2
|
Rivet Master
, Minnesota
Join Date: Aug 2003
Posts: 7,721
|
Another refresher:
Yesterday I recieved a very offical notice from NCUA, National Credit Union Association, Billing Departament; with the usual request to update my account or it would be restricted.
Very well done, with a link to an update form. Other than one misspelled word, it looked perfect.
It's been around before, and is making a return appearance at a computer near you!
|
|
|
06-03-2006, 05:54 AM
|
#3
|
Rivet Master
Massachusetts
Join Date: Oct 2002
Location: 1964 17' Bambi II
Posts: 4,282
|
Quote:
Originally Posted by Stefrobrts
It ticks me off. You know they catch unsuspecting people everyday.
|
I receive phishing emails daily (e.g., PayPal, eBay, banks I don't do business with, etc.) but also know how to check the IP information. I am concerned about the unsuspecting people. I think about people like my parents or retired neighbors, or anyone who is new to computers, the internet and email. Those are the people who are getting caught which further fuels these nefarious scammers.
__________________
WBCCI Region One
Attitude is the only difference between ordeal and adventure
|
|
|
06-03-2006, 05:58 AM
|
#4
|
4 Rivet Member
1977 Argosy Minuet 6.0 Metre
schaumburg
, confusion
Join Date: Feb 2003
Posts: 285
|
If you are not sure of the email. Instead of using the link they supply, open probbly get 10 a month. I noup a new internet explorer and go to the site and see if anything is wrong. I w just ignor them
|
|
|
06-03-2006, 06:08 AM
|
#5
|
Rivet Master
Massachusetts
Join Date: Oct 2002
Location: 1964 17' Bambi II
Posts: 4,282
|
Information for reporting these scammers
For those interested in further IP address sleuthing, here are two websites I use to decode the email address header. I can usually find out what US network is routing the scammer email so I can forward their email to the network website administrator to report the incident. It takes a few minutes to go through the whole process to decode and report them, but it makes me feel good with the hope that I have made life difficult for a spammer scammer.
1) Arin whois database search: http://ws.arin.net/whois
2) IP address locater: http://www.geobytes.com/IpLocator.htm?GetLocation
If anyone knows any more or better ways to go about this, please let me know.
__________________
WBCCI Region One
Attitude is the only difference between ordeal and adventure
|
|
|
06-03-2006, 06:15 AM
|
#6
|
Rivet Master
1966 22' Safari
1979 30' Argosy
Armada
, Michigan
Join Date: May 2004
Posts: 950
|
When I get these, first thing I do is hold my cursor over the link. At the bottom of the window in Firefox it will tell where that link goes to. If it isn't paypaldotcom or ebaydotcom I know it's a scam. I then forward that email to either spoof@paypal or spoof@ebay. Those are the addresses they have set up for you to do that. At least you can make them aware of what's going on for them to take action if they can.
|
|
|
06-03-2006, 08:14 AM
|
#7
|
Rivet Master
1956 16' Bubble
Rose Lodge
, Oregon
Join Date: Dec 2003
Location: 1961 26' Overlander
Posts: 921
|
The one that startled me most was an official-looking paypal email that purported to confirm a payment of $358.29 to some unfamiliar name, which of course made me think my account & had been hijacked & drained. There were lots of links like "if you believe this payment was made in error, click here."
But a quick look at paypal showed no payments made to anybody & the same balance as from the day before, so that was that (after i forwarded the email to spoof@paypal)
__________________
Of course I'm an elitist. Look around you.
|
|
|
06-03-2006, 08:17 AM
|
#8
|
Rivet Master
1956 22' Safari
2015 27' Flying Cloud
Vintage Kin Owner
Conifer/Evergreen
, Colorado
Join Date: Feb 2002
Posts: 12,701
|
Hey, steph...I "sold" that same camera!
The funny thing is I've received that email at each of my 6 accounts, except my eBay one. That's my first clue it's not real to me...and one of the reasons I have multiple email mailboxes set-up, I can prescreen where mail comes from based on which mailbox it's received in. If I only have time ti deal with ebay, or WBCCI/VAC, or family, etc.I only go to that mailbox.
Works for me and is an immediate clue if something is out of line...wrong mail in the wrong box.
Shari
|
|
|
06-03-2006, 08:32 AM
|
#9
|
Rivet Master
Massachusetts
Join Date: Oct 2002
Location: 1964 17' Bambi II
Posts: 4,282
|
Quote:
Originally Posted by InsideOut
...That's my first clue it's not real to me...and one of the reasons I have multiple email mailboxes set-up, I can prescreen where mail comes from based on which mailbox it's received in. If I only have time ti deal with ebay, or WBCCI/VAC, or family, etc.I only go to that mailbox.
Works for me and is an immediate clue if something is out of line...wrong mail in the wrong box.
|
I do the same thing! Nice to hear that I'm not the only one.
__________________
WBCCI Region One
Attitude is the only difference between ordeal and adventure
|
|
|
06-03-2006, 08:42 AM
|
#10
|
3 Rivet Member
1965 20' Globetrotter
Yakima
, Washington
Join Date: Apr 2005
Posts: 182
|
here are some government addys that you can send them to as well.
spam@uce.gov for spam and
reportphishing@antiphishing.org for phishing emails
and it is best if you forward them with full headers, with yahoo scroll to the bottom of the email and click on show full headers
|
|
|
06-03-2006, 09:08 AM
|
#11
|
3 Rivet Member
2005 22' Safari
Santa Ana
, California
Join Date: May 2006
Posts: 167
|
Saved someone a headache.
About a month or so ago a buddy was looking for a navigation unit for his sailboat. He came across a deal, "Buy It Now" for $750. (normally a $3500 unit or so) He sent me the link to check it out. The seller had a 327 feedback, been a member for 5 or so years and had a ton of stuff for sale, including hi end audio, photography, video...After I bid on a few items myself,
I kind of came to realize something is off. They are either hot or he'd been planning this scam for a long time.
After reviewing the page I had realized the seller had been phished. The listing were all three day listings. The listings all had an email address to arrainge payment that was not the actual owner of the accounts email address and he would only take "western union"
I figured I'd give the seller a call. With ebay, if you are bidding on someones item, or someone is bidding on items your selling you may request a limited email of personal information, including phone number.
After about 10 minutes of explaining to him what happened he hung up the phone and notified ebay, which in turn shut his account down temporarily, changed his password and canceled all the fradulent listings. He called about an hour or so later thanking me.
Since I had a little free time, I thought I'd email the criminal and make him think he got somewhere (yes, I have a little evil in me) First I told him, "I paypal'd the monies to you, when will you be shipping my items?" at which time he told me, "sorry, you will have to get your money back and western union me" I basically emailed him back and forth basically acting like I was mentally incompatent and hopefully frustrating the heck out of him.
As a side note, he wanted the monies Western Union'd to Romainia.
__________________
Alan
2005 22ft Safari
2003 Chevrolet Suburban Z71 5.3l
"Life is like a box of chocolates..." Forrest Gump
|
|
|
06-03-2006, 10:16 AM
|
#12
|
Moderator
1968 17' Caravel
Battle Ground
, Washington
Join Date: Dec 2002
Posts: 12,253
|
I read a webpage about a most excellent prank a few years ago with one of those scammers who pops up wanting to buy your item for full price no questions asked. Mostly you hear about them wanting to send a cashiers check for too much and have you send back the difference. But this scammer had set up his own fake Escrow website, so he wanted to pay for a laptop using the escrow site. The guy getting scammed caught on and instead sent the guy a three ring notbook with keyboard keys glued on it to look like a fake keyboard and all kinds of funny stuff drawn on it to make it look like a laptop - and sent it to the scammer with a huge value on the customs form so he'd have to pay big taxes in England to claim his package. I love seeing scammers get scammed!
I agree, I'm pretty good at spotting the scams, but a friend of mine (an old hot rodder who's 60+ and not quite as sharp on computers) got one of those ebay ones, and fell for it, THEN emailed me to ask if I thought it was legit. He got lucky and didn't lose any money because we helped him change all his passwords and contact his bank (he'd even given up his SS#). But they're so realistic looking, you can't hardly blame people for falling for them.
__________________
Stephanie
|
|
|
06-03-2006, 03:53 PM
|
#13
|
We can tow it!
1996 28' Excella
Where the water tastes like wine
, Michigan
Join Date: Jan 2005
Posts: 1,625
|
Thanks for creating this thread!
Wow I didn't realize about the view source feature, thanks for sharing it Stephanie. Thanks to all for sharing the tips and info about where to forward this stuff! Kudos!
|
|
|
06-03-2006, 08:52 PM
|
#14
|
Retired.
Currently Looking...
.
, At Large
Join Date: Jun 2003
Posts: 21,276
|
Quote:
Originally Posted by Stefrobrts
I read a webpage about a most excellent prank a few years ago with one of those scammers who pops up wanting to buy your item for full price no questions asked. Mostly you hear about them wanting to send a cashiers check for too much and have you send back the difference. But this scammer had set up his own fake Escrow website, so he wanted to pay for a laptop using the escrow site. The guy getting scammed caught on and instead sent the guy a three ring notbook with keyboard keys glued on it to look like a fake keyboard and all kinds of funny stuff drawn on it to make it look like a laptop - and sent it to the scammer with a huge value on the customs form so he'd have to pay big taxes in England to claim his package. I love seeing scammers get scammed!
|
The website is www.scamorama.com
It was a G4 powerbook that was supposedly sold, and the guy declared full retail value plus $$$.
I just got an official-looking email purporting to be from PayPal wanting me to update my account by clicking on a link, and my account would be restricted until I did. The web address was even wwwdotpaypaldotcom, but the suffix was way different. I forwarded it to Paypal, they said it was a very elaborate scam with multiple pages that looked just like paypal, but none of it was.
Anytime you get one of these, go to that website by opening a new browser window, not by clicking a link. Also, Paypal will address you by name in an email, not just "dear paypal user". Same with Ebay, they will address you by your user ID, not a generic "dear Ebay user".
__________________
Meddle not in the affairs of dragons, for you are crunchy, and taste good with ketchup.
Terry
|
|
|
06-03-2006, 08:59 PM
|
#15
|
Retired Moderator
1992 29' Excella
madison
, Wisconsin
Join Date: Aug 2002
Posts: 4,644
|
anyone who wants to have a good laugh, see what this guy did to a bunch of unsuspecting nigerian 419 scammers.
http://www.ebolamonkeyman.com/
warning! some of the content contained above is not for the easily offended, or for those with no sense of humor!
john
__________________
you call them ferrets, i call them weasels.
|
|
|
06-04-2006, 06:24 AM
|
#16
|
Rivet Master
Massachusetts
Join Date: Oct 2002
Location: 1964 17' Bambi II
Posts: 4,282
|
Quote:
Originally Posted by john hd
anyone who wants to have a good laugh, see what this guy did to a bunch of unsuspecting nigerian 419 scammers.
http://www.ebolamonkeyman.com/
warning! some of the content contained above is not for the easily offended, or for those with no sense of humor!
john
|
OMG! Too funny! I wonder why the scammers always send emails using uppercase?!
__________________
WBCCI Region One
Attitude is the only difference between ordeal and adventure
|
|
|
06-04-2006, 08:20 AM
|
#17
|
Retired Moderator
1992 29' Excella
madison
, Wisconsin
Join Date: Aug 2002
Posts: 4,644
|
number 2 on the list is my personal favorite, the guy pretends to be an aldult film star and gets the scammer to repeatedly show up at the airport waiting for "tiffany" to arrive!
yuk yuk!
john
__________________
you call them ferrets, i call them weasels.
|
|
|
06-04-2006, 11:33 AM
|
#18
|
Rivet Master
Massachusetts
Join Date: Oct 2002
Location: 1964 17' Bambi II
Posts: 4,282
|
Quote:
Originally Posted by john hd
number 2 on the list is my personal favorite, the guy pretends to be an aldult film star and gets the scammer to repeatedly show up at the airport waiting for "tiffany" to arrive!
yuk yuk!
john
|
I took a real quick peek and found the profanity and porn a bit much for my tastes (no reflection on you, of course, as you did warn us in advance).
For the more conservative types like myself, I would recommend this website: http://www.419eater.com/index.htm
__________________
WBCCI Region One
Attitude is the only difference between ordeal and adventure
|
|
|
06-04-2006, 12:04 PM
|
#19
|
Moderator
1968 17' Caravel
Battle Ground
, Washington
Join Date: Dec 2002
Posts: 12,253
|
You know, the best thing about these scambaiters (beyond being funny) is that at least they're keeping them occupied so they aren't scamming anyone else for a bit. They deserve every bit of it.
__________________
Stephanie
|
|
|
06-04-2006, 12:26 PM
|
#20
|
New Member
Join Date: Feb 2004
Posts: 4
|
If you suspect a scam, you can report it to the FBI's internet crime center at:
http://www.ic3.gov/
...Love you all, Barry
|
|
|
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
|
|
Thread Tools |
Search this Thread |
|
|
Display Modes |
Linear Mode
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
|
Recent Discussions |
|
|
|
|
|
|
|
|
|
|
|