[Gearcraft]

http://66.34.17.190/productimages/1/...sscode/webscr/


got my first one. just want to remind everybody to be careful.

always type the address on a fresh browser yourself.






almost fooled me. entered with my password and the next page was asking

me to enter card numbers including PIN code. what a dumb scheme to ask

for an ATM pin code. then i noticed the above address. changed my

password right away. whew... almost.

the address was named alerts@paypal.com

[BMW F22]

whoa good looking out man.
I really gotta be careful from now on. Phishing is a bitch!!

[shragon]

consider using firefox 2.

[Gearcraft]

i use firefox but i have msn for my email. i hate microsoft browsers.

[742]

>>>always type the address on a fresh browser yourself.<<<

Don't even do that. Nothing important comes via e-mail. Nothing.

[Ninjaneer]

+1 for Firefox!

Legit websites never email you asking you to go back in and update crap, so that should always be an indicator. What happens when a system is updated requiring new info is that they'll simply ask you for your info on YOUR next visit, whenever that is.

I don't type the address out. If it's not picked up as spam then I just place my mouse over the link and see what the address is in the status bar... if it's not legit then I junk it. Usually I already know, based on what I said above, that the email is fake, but I check it to see how they attempted to mask the address... like for ebay you get login.ebay.westeelpasswords.com it's pretty obvious that the domain name is bogus and their use of subdomains is their poor attempt at masking it.

[txusa03]

what going on? what is phishing? this sounds too dangerous? so you move the cursor over the link to see what is the real address? pls shed more light onto this, I hate scams....

[Ninjaneer]

Originally Posted by txusa03

what going on? what is phishing? this sounds too dangerous? so you move the cursor over the link to see what is the real address? pls shed more light onto this, I hate scams....

From Wikipedia: "phishing is a criminal activity using social engineering techniques. Phishers attempt to fraudulently acquire sensitive information, such as passwords and credit card details, by masquerading as a trustworthy person or business in an electronic communication."

I'll spare you the Wikipedia post haha but in plain English phishing is when someone attempts to get your information by appearing to look like a reputable and legit source... happens a lot with emails asking you to login and update your information or verify it, such as sites masquerading to look like eBay, Paypal, Chase and many other banks etc.

When you visit the site, it looks legit since they've copied the layout of the real site... but if you look closely the URL address isn't the real site's address, it's something else with extra names but will usually contain the name of the site they're trying to act as to make it look real. Then whoever falls into the trap has essentially provided their information (login id, password) to them, then if they ask you for more information like (birthdate, credit card, SSN, etc.) you've essentially given them all they'd need to do things as if they were you... in short phishing leads to identity theft.

edit: that's why you should note whether the site you're visiting is trusted and is using a valid signed certificate during transactions... you know like the lock icon or similar icons that appear in the browser when you visit bank sites, merchant sites etc. for SSL protection (https:// etc.)

[txusa03]

hey, this is a great community and great folks for sharing this info. I hope everyone take a look at this thread. I am really concerns for folks who are not very familiar with internet and start typing in confidential info online on a page that is not legit. ppl needs to use common senses when they do online banking.

we had a person on this forum posting a link that gives out free ipod nano. It asked for birth date and stuff like that. I think either jason or mark deleted that thread in the market place.