Dingbat PSA: "New" PayPal email scam

[Robb]

Variation on an older theme...

Comes as an email "please update your account information"...with a seemingly PayPal.com return address:

Dear valued PayPal¨ member:

It has come to our attention that your PayPal¨ account information needs to be
updated as part of our continuing commitment to protect your account and to
reduce the instance of fraud on our website. If you could please take 5-10 minutes
out of your online experience and update your personal records you will not run into
any future problems with the online service.


However, failure to update your records will result in account suspension.
Please update your records on or before February 10, 2005.
Once you have updated your account records, your PayPal¨ session will not be
interrupted and will continue as normal.

To update your PayPal¨ records click on the following link:
http://www.paypal.com/cgi-bin/webscr?cmd=_login-run



Thank You.
PayPal¨ UPDATE TEAM

Accounts Management As outlined in our User Agreement, PayPal¨ will
periodically send you information about site changes and enhancements.

Visit our Privacy Policy and User Agreement if you have any questions.
http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside


...Now here's the giggle: the embedded link that appears blue as if you're going to PayPal, actually goes to www.woxuz.info/, where a fishing program goes to work. Here's the internic whois:


Domain ID:D9576953-LRMS
Domain Name:WOXUZ.INFO
Created On:05-Feb-2005 01:11:29 UTC
Last Updated On:05-Feb-2005 01:11:32 UTC
Expiration Date:05-Feb-2006 01:11:29 UTC
Sponsoring Registrar:R139-LRMS
Status:CLIENT LOCK
Status:OK
Registrant ID:C8881794-LRMS
Registrant Name:CARL CUMMINGS
Registrant Organization:CARL CUMMINGS
Registrant Street1:929 MAURY RIVER RD
Registrant City:LEXINGTON
Registrant State/Province:VA
Registrant Postal Code:24450
Registrant Country:US
Registrant Phone:[phone]
Registrant Email:[e-mail]
Admin ID:C8881794-LRMS
Admin Name:CARL CUMMINGS
Admin Organization:CARL CUMMINGS
Admin Street1:929 MAURY RIVER RD
Admin City:LEXINGTON
Admin State/Province:VA
Admin Postal Code:24450
Admin Country:US
Admin Phone:[phone]
Admin Email:[e-mail]
Billing ID:C8881794-LRMS
Billing Name:CARL CUMMINGS
Billing Organization:CARL CUMMINGS
Billing Street1:929 MAURY RIVER RD
Billing City:LEXINGTON
Billing State/Province:VA
Billing Postal Code:24450
Billing Country:US
Billing Phone:[phone]
Billing Email:[e-mail]
Tech ID:C8881795-LRMS
Tech Name:Network Admin
Tech Organization:EasyHosting.com
Tech Street1:8250 Lawson Road
Tech City:Milton
Tech State/Province:ON
Tech Postal Code:L9T5C6
Tech Country:CA
Tech Phone:[phone]
Tech Email:[e-mail]
Name Server:CNS1.LOOK.CA
Name Server:CNS2.LOOK.CA

DON'T BE FOOLED,KIDS!!

[MrScorpio]

1. Let's all call Carl and ask him for a some money

He should be good for it

[HeyManThatsCool]

2. I keep getting a PayPal email to become a Power Seller

but the one time I clicked on the link it went to a backdoor ebay page.

So I logged off & later checked at work- the email was a scam.

I got it again 2 times yesterday

[Robb]

3. kick nt

:kick:

[Name removed]

4. Deleted message

Message removed by moderator. Click here to review the message board rules.

[derby378]

5. Super Bowl Kick! (n/t)