• In case most of you have not noticed, I made changes to the donation amounts as well as the durations for all of the paid membership levels. Things are winding down here, and this seems to be the most prudent way to deal with the "end of life" period of this site.

    Contributor level members - $10 per 30 days
    Sponsors - Eliminated
    Benefactor level members - $25 per 30 days
    Endowment level members - $50 per 30 days

    Account Upgrades Page
  • Responding to email notices you receive.
    **************************************************
    In short, DON'T! Email notices are to ONLY alert you of a reply to your private message or your ad on this site. Replying to the email just wastes your time as it goes NOWHERE, and probably pisses off the person you thought you replied to when they think you just ignored them. So instead of complaining to me about your messages not being replied to from this site via email, please READ that email notice that plainly states what you need to do in order to reply to who you are trying to converse with.

--WormMan-- Paypal Account Fraud (Inquiry)

Dennis Hultman said:
Question-
Dennis, I understand you can spoof the email address. I'm curious to know how they might know to spoof the email address of someone you are already waiting payment from?
Click to expand...

It's easy. A computer at wormman.com's office has a virus, in this case a worm (described here:http://en.wikipedia.org/wiki/Computer_worm ). The worm harvests the infected computer's email address and name, then uses that info to send out fake emails posing as Paypal. It's all done in the background and the infected computer's owner has no idea that it's happening. The below link explains the scam pretty well:

http://news.zdnet.co.uk/security/0,1000000189,2080344,00.htm
Scroll down to the bottom of the article and you will see that the fake email sent by the worm looks just like the email sent to the OP.

If a wormman.com computer is infected with this worm, then the fact that this person received this email, while waiting for payment, is just a huge coincidence. If it wasn't a worm, then wormman.com is in some serious trouble.

Regards,
Edward Kestel
 
I understand. Like a lot of others, I have received the bogus emails stating someone sent money to my PayPal account. I just never had one come from a email address that I recognized or would have been expecting a payment from.
 
Dennis Hultman said:
I understand. Like a lot of others, I have received the bogus emails stating someone sent money to my PayPal account. I just never had one come from a email address that I recognized or would have been expecting a payment from.
Click to expand...

I agree
Sorry if I jumped the gun

It really wouldn't make sense that they(WormMan) would jeopardize their company like that

I apologize to Ken and WormMan

Sandy
 
Laura, please tell us your real name. Bogus registrations and accounts here are frowned upon. I'm sure wormman.com doesn't have an order from a "Laura Larkin" from BC, Canada.
 
I'll be gone for a bit. Dennis H., if you want to post what I found, be my guest.
 
LadyGecko said:
I agree
Sorry if I jumped the gun

It really wouldn't make sense that they(WormMan) would jeopardize their company like that

I apologize to Ken and WormMan

Sandy
Click to expand...


No, Please don't apologize about that! He, also, through his "wormman" technical support, admitted to sending me that email, he just was hoping I wouldn't realize that is was HIM trying to get my person information here is the conversation....


12/6/2007 10:34:21 AM (Customer Support)
I had tried to issue you a refund for the one order but for some reason I cant find the payment on paypal did you use a different name to pay with.

12/6/2007 1:39:52 PM (Me)
the email I used to purchase was ***insert my paypal email address""", as of now there is no refund in my account.

12/6/2007 1:50:44 PM (Customer Support)
I issued you the refund to the email you had placed on the order... You should see it in your email to tell you how to complete it thank you.

Funny this "email I used to place the order" was not an email I use with paypal, it was an email address that was added to my account without my permission, one that I do not use.

Also, that first reply was at 10:34, that was 2 minutes AFTER HE ADDED A NEW EMAIL TO MY PAYPAL ACCOUNT. The reason I knew it was unauthorized was that Paypal, the real paypal([email protected]), sent me an email asking me if I had added the new email address... so that was when I made the phone call to them, and that was when they traced everything back, and saw this activity going on with several other accounts also.

also, R&K TRADING COMPANY, that is what shows up on your paypal account when you purchase from him, Wormman, ken, anything like that doesn't show up.

I hope this clears some things up.
 
geckoluvr

IP address for all posts - 24.219.28.218
This IP belongs to ygnition.net. They do not provide service to BC, Canada. They do however provide service to California.

Registered IP Address - 69.239.249.254
This IP belongs to El Camino Hospital. This hospital is just outside of San Jose, Ca.



SouthBayGeckos

IP Address for all posts - 24.219.28.218
Registered IP Address - 24.219.28.218

Profile lists San Jose, Ca
 
deborahbroadus said:
So this is a Soap Opera?
Click to expand...
No, but if someone is going to accuse anyone on the BOI of something this serious, they better have the intestinel fortitude to use their real name. Lying about who you are seriously damages the credibility of the claim being made. Lie about one thing, lie about some thing else.

Admittely, wormman.com has had several issues in the past regarding customer service. They do not have an outstanding track record. However, this is a very serious issue the OP is claiming and she really has no idea how the phishing scam works. This scam has been around many, many years and counts on an existing business relationship between the target and the spoofed business to work.
 
I believe people need to know that he was trying to be fraudulent through paypal, I didn't see this anywhere else, so I thought I'd try and be helpful.

also, El Camino Hospital is where I work, I am a Registered Nurse. I moved here with Brittney earlier this year. I find is GREATLY offensive that you guys are turning this back at me, I'm really just trying to be helpful and let people know that Wormman could quite possibly have done this to someone else on here.
 
DThomas said:
geckoluvr

IP address for all posts - 24.219.28.218
This IP belongs to ygnition.net. They do not provide service to BC, Canada. They do however provide service to California.

Registered IP Address - 69.239.249.254
This IP belongs to El Camino Hospital. This hospital is just outside of San Jose, Ca.



SouthBayGeckos

IP Address for all posts - 24.219.28.218
Registered IP Address - 24.219.28.218

Profile lists San Jose, Ca
Click to expand...

Just to note I did a search on the registered email address and came back with a profile from myspace that lists a Lora-Lee moving from Canada to California. She is a R.N. and is the same age as this Laura.
http://profile.myspace.com/index.cfm?fuseaction=user.viewprofile&friendID=53649349
 
geckoluvr said:
I believe people need to know that he was trying to be fraudulent through paypal, I didn't see this anywhere else, so I thought I'd try and be helpful.

also, El Camino Hospital is where I work, I am a Registered Nurse. I moved here with Brittney earlier this year. I find is GREATLY offensive that you guys are turning this back at me, I'm really just trying to be helpful and let people know that Wormman could quite possibly have done this to someone else on here.
Click to expand...

Don't be offended. If someone was making a claim against you, I'm sure you would appreciate us making sure the person was who they claimed to be.
 
geckoluvr said:
I believe people need to know that he was trying to be fraudulent through paypal, I didn't see this anywhere else, so I thought I'd try and be helpful.

also, El Camino Hospital is where I work, I am a Registered Nurse. I moved here with Brittney earlier this year. I find is GREATLY offensive that you guys are turning this back at me, I'm really just trying to be helpful and let people know that Wormman could quite possibly have done this to someone else on here.
Click to expand...
Thank you for the explanation. Having BC in your profile as your location throws up red flags when your IP address clearly shows you are in Ca. It would not be the first time someone has registered a bogus account to hide their identity to attack another. It's more common than you might think and we are very vigilant here about that sort of thing.

Now back to the topic at hand. I'll ask again for you to post the entire header of the original phish email so we can see the ip address it came from . If you are using outlook or thunderbird it is quite simple. Open the email, go to View, Headers, then all. It will then show the entire header. Copy and paste that here. If you are using web based email, they also have an option to show the entire header info. You'll just have to look around for the option to display it. Putting that info here will help get to the bottom of this.
 
Back
Top