[sdiy] OT: Possible Pay Pal Third Party Scam(?)

Batz Goodfortune batzman at all-electric.com
Thu Sep 5 19:13:37 CEST 2002


Y-ellow Scott.
         Just quickly because I really need sleep.


> > "http://www.paypal.com@ussr.to/All/xconfirm">


What's wrong with this URL? PayPal is not the URL. something called 
<ussr.to> is . ".TO" is the country code for Tonga. Who make a shit-load of 
cash by selling redirection domains because of their unique "TO" code. So 
you'll see, jump.to or go.to or flip.to. And a zillion others.

This is as close an IP as I can resolve it to. 193.124.133.54
This is the next node back and the details it returns.

Name: kiae-alef-1.relcom.net
IP Address: 193.125.190.41
Location: Unknown
Network: RU-RELCOM-193-124-125

Registrant:
Relcom joint-stock Company (RELCOM2-DOM)
    korp. 5 d. 3v, Raspletina ul
    Moscow, Russia 123060
    RU

I'm too tired to figure it out properly but they seem to be hosted by a 
company called Telia
Telia AB (TELIA-DOM)
    Telia Network Services
    Router Networks / Internet
    Farsta, SE-12386
    SE
Swedish or Scandinavian. But! The whole thing is really hosted out of a box 
in New York.

Are we thinking "SCAM" yet?

None of this leads you to the actual purps. You're probably looking at a 
stolen account or a hacked ISP. And sense none of these useless scumbags 
give a shit, the chances of you hitting the jackpot and springing these 
guys are pretty slim. But! PayPal are supposed to have their own secret 
police for this kind of thing. On the other hand, since they only have 
about 5 people in the world dealing with it, and they get thousands of such 
scam reports a day, They probably don't give a monkey's-mister either.

I forget how the "@" thing works. Terry Bowman might be able to remember 
because he keeps us all laughing with weekly reports on this kinda stuff. 
But I'm pretty sure that in some cases, this will cause outlock to 
automatically use IE to go look up the site and dump information or 
whatever. It's just a matter of how the scam is constructed.

Hope this helps.

Be absolutely Icebox.

  _ __        _       ____Happiness is a warm penguin____
| "_ \      | |
| |_)/  __ _| |_ ____       ALL ELECTRIC KITCHEN
|  _ \ / _` | __|___ |  Yeti music by Yetis for Yetis
| |_) | (_| | |_  / /
|_,__/ \__,_|\__|/ /    BS    -----> http://all-electric.com
                 / ,__   Music -----> http://mp3.com/electrickitchen
Goodfortune    |_____|  cult  -----> http://www.subgenius.com




More information about the Synth-diy mailing list