Howdy!

The scams continue...

This one is an e-Gold phishing scheme. It tries to get the reader to click on the link in the email, which in turn allows the scammer your e-Gold ID and password.

Although I always report these type of emails to the appropriate authorities, I thought I would share what e-Gold had to say in response to my abuse report.


Be safe!

Toodles,

Lisa :)

The original email header:

Return-Path: <nobody@s2.ya-hosting.com> Received: from s2.ya-hosting.com (s2.ya-hosting.com [72.232.196.186])      by svr6.marketrends.net (8.13.6/8.12.7) with ESMTP id k7TC6Wnr063623      for <lisa@lisareddell.com>; Tue, 29 Aug 2006 05:06:32 -0700 (PDT)      (envelope-from nobody@s2.ya-hosting.com) Received: from nobody by s2.ya-hosting.com with local (Exim 4.52)      id 1GI2Mg-0003m8-Lt      for lisa@lisareddell.com; Tue, 29 Aug 2006 16:06:46 +0400 To: lisa@lisareddell.com Subject: ***** E-gold account verification ***** From: "Accountrobot_donotreply@e-gold.com" <Accountrobot_donotreply@e-gold.com> Reply-To: MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: 8bit Message-Id: <E1GI2Mg-0003m8-Lt@s2.ya-hosting.com> Date: Tue, 29 Aug 2006 16:06:46 +0400 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - s2.ya-hosting.com X-AntiAbuse: Original Domain - lisareddell.com X-AntiAbuse: Originator/Caller UID/GID - [99 32002] / [47 12] X-AntiAbuse: Sender Address Domain - s2.ya-hosting.com X-Source: X-Source-Args: /usr/local/apache/bin/httpd -DSSL X-Source-Dir: gyzity.com:/public_html

The email itself:


***** e-gold message ID: YFG8IL981 *****

Dear e-gold user,

E-gold is currently conducting constant security-related verifications of all of the member accounts registered with the e-gold service. This measure is an integral part of the e-gold Security Policy which has been developed with the purpose of ensuring the highest level of security to all members of the e-gold community. You will need to verify your account by clicking on the weblink, provided below and following the instructions presented on the Secure e-gold Account Verification webpage. Verifications will be accepted until 30th August 2006 . If you fail to verify your account before this date, your account will be rendered inactive and will be a subject of termination. We are sorry for the inconvenience and thank you for your business.

https://www.e-gold.com/acct/verify.html?user=jjUiO96JmkOKoKAjjanhAJRweWePlNAm

e-gold Account Department

The email I sent to e-Gold:

-----Original Message-----
From: editor@lisareddell.com [mailto:editor@lisareddell.com] 
Sent: Tuesday, August 29, 2006 8:47 AM
To: 55m60E6X_abuse@e-gold.com
Subject: [e-gold-abuse] Hello, I received this email ... [PR: XWDBWEDU]

Submitter IP: 70.169.116.74
CATEGORY: ABUSE
Customer Name: Lisa Reddell
Email: editor@lisareddell.com
Phone: 
Fax: 
e-gold Batch: 
e-gold Account: 215719
Question: Hello,

I received this email this morning. Obviously it is not from e-Gold. And
also, it shows it originated from my domain. This email was not sent by me.


Sincerely,

Lisa Reddell
User #215719

And e-Gold's reply:

Lisa, 

Thank you for bringing this to our attention.  As you know the email you
received was not sent by e-gold Ltd. It was a fraudulent attempt to
compromise e-gold accounts through a scam known as "Phishing". e-gold will
never send you an unsolicited email asking you to access your account from a
link in an email or click on a link in an email. Please review the security
alert on the e-gold site for more information. If you clicked on the link or
if you opened the attachment, there is a strong possibility you may have a
Trojan virus on your computer!

Regards,
e-gold Abuse 

And I got this one today from "Paypal" (bogus) It looks very professional and could be convincing to the unwary (seems the scammers are making good money and can afford better programmers than many of the programs we end up joining) (Are we in the wrong business>>?? lol) (KIDDING OF COURSE) NEVER act on the email or click on the link provided. ALWAYS go directly to the site by entering the proper URL and when logged in make sure that the site is secured (look for the lock in your taskbar). If there are any problems or requirements, those will be listed on the site. Never follow the link in an email. ___________________________________________________________ BOGUS PAYPAL EMAIL Your account will be suspended ! Dear Paypal User, In accordance with our major database relocation, we are currently having major adjustments and updates of user accounts to verify that the informations you have provided with us during the sign-up process are true and correct. However, we have noticed some discrepancies regarding your account at Paypal. Possible causes are inaccurate contact information and invalid logout process. We require you to complete an account verification procedure as part of our security measure. You must click the link below to securely login and complete the process. Click here to activate your account Choosing to ignore this message will result in a temporary suspension of your account within 24 hours, until you will choose to solve this unpleasant situation. Thank you for using PayPal! The PayPal Team -------------------------------------------------------------------------------- Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the footer of any page. To receive email notifications in plain text instead of HTML, update your preferences here. PayPal Email ID PP8210 Protect Your Account Info Make sure you never provide your password to fraudulent websites: To safely and securely access the PayPal website or your account, be sure to verify the link found in the address bar. This must be https://www.paypal.com/. Don't share personal information via email: We will never ask you to enter your password or financial information in an email or send such information in an email. You should only share information about your account once you have logged in to https://www.paypal.com/. Protect Your Password Never share your PayPal password: PayPal representatives will never ask you for your password. If you believe someone has learned your password, please change it immediately and contact us. Keep your PayPal password unique: Don't use the same password for PayPal and other online services such as AOL, eBay, MSN, or Yahoo. Using the same password for multiple websites increases the likelihood that someone could learn your password and gain access to your account. For more information on protecting yourself from fraud, please review our Security Tips at https://www.paypal.com/us/securitytips.

Thanks Lisa for another great alert.