RE: Fake Paypal E-mail

[Link]

Originally posted by Timber Loftis: I'm a PayPal member and didn't get the email.

But you're also a lawyer. That means they don't even WANT to try you out [img]tongue.gif[/img]

[dplax]

Interesting thing: just out of curiosity I clicked on the link you wrote Nightstalker and my browser gave this message:

You have attempted to establish a connection with "paypal.com". However the security certificate presented belongs to "www.paypal.com". It is possible that someone else is trying to intercept your communication with this web site.

If you suspect the certificate shown does not belong to "paypal.com", please cancel the connection and notify the site administrator.

EDIT: If I then click on OK it takes me to the main paypal site with paypal.com/whatever written in the addressbar.

[ 03-23-2004, 04:45 PM: Message edited by: dplax ]

[Night Stalker]

bumping

I encourage everyone to read about the flaw.

Also NEVER respond to an unsolicited request for personal information, be it by email, phone whatever!

[Firestormalpha]

Interesting rightclick and properties on the bogus IW link gives me this info:

Protocol: HyperText Transfer Protocol
Type: COM
File
Address: http://www.ironworksforum.com

(URL)

Under the legit IW link we have:

Protocol: HyperText Transfer Protocol
Type: COM/ File
Address: http://www.ironworksforum.com/
(URL)

what's the difference between this (
) symbol and this (/) symbol?

[Night Stalker]

Windows is incorectly trying to determine a MIME type for the "file". It is reading everything after the "." and incorrectly calling that a file type. The "
" symbol is a place holder for a nonprintable ASCII charactor. Windows stops searching after this charactor. If you inspect the source for that link, you will see that it is much larger.

In the second case, / is the last charactor in the string. So, Windows thinks it's a "com/" file.

Garbage in both cases.