Pswbilling Fuckin Scam
 

Here I am checking my emails and I get an email about me having to update my info with my credit card pin number or mastercard and visa will limit access to my card?

WTF
Dear Sirs!

We have to check your credit card because of increased numbers of fraudulent transactions. This an ordinary procedure which every cardholder is subjected by Visa and MC.

Here is information about your success payment:

******BLANKED OUT PRIVATE INFO*****


Please fill in this form http://www.pswbilling-cs.com/cgi-bin...=show&ID=32324 otherwise your credit card is to be temporarily blocked by Visa or MasterCard to clear up further conditions. We ask you to fill this form as soon as possible. Sorry for time constraints but such are the rules of Visa and MasterCard.

--------------------------
Kind regards,

PSW, Incorporated
1201 SW 10th Street
Deerfield Beach, FL 33403
1-866-854-4956
1-212-320-9384

*************************************


First time I hear of a credit card companyt asking for your atm pincode.

Anyone from pswbilling want to let me know what's happening. Before you bash me I tried calling their number and it's disconnected. I called international number and I got a blank no nothing. Not even a please wait, I hung up after 10min.

??? :eek7

SMELL SCAM :ak47: :ak47:

:eek7

pswbilling-cs.com is registered at whois.directnic.com:

Registration and WHOIS Service Provided By: directNIC.com

Intercosmos Media Group, Inc. provides the data in the directNIC.com
Registrar WHOIS database for informational purposes only. The information
may only be used to assist in obtaining information about a domain name's
registration record.

directNIC makes this information available "as is," and does not guarantee
its accuracy.

Registrant:
Gary Elliott
65 Woodshire Road
Dagenham, Essex RM10 7DH
GB
02052521115x01
Fax:02052521115


Domain Name: PSWBILLING-CS.COM

Administrative Contact:
Elliott, Gary [email protected]
65 Woodshire Road
Dagenham, Essex RM10 7DH
GB
02052521115x01
Fax:02052521115


Technical Contact:
Elliott, Gary [email protected]
65 Woodshire Road
Dagenham, Essex RM10 7DH
GB
02052521115x01
Fax:02052521115


Record expires on 11-20-2003
Record created on 11-20-2002 <------------------

Domain servers in listed order:
NS1.4PH.COM 66.197.0.2
NS2.4PH.COM 66.197.0.3
NS3.4PH.COM 128.121.6.253
NS4.4PH.COM 216.142.48.6

??

Hmm Ibill,

Mailing Address and Phone Numbers
Internet Billing Company, Ltd.
2200 SW 10th Street
Deerfield Beach, FL 33442-7622 USA
954-363-4400
888-371-7800
954-363-4407 (fax)



PSW?
--------------------------
Kind regards,

PSW, Incorporated
1201 SW 10th Street
Deerfield Beach, FL 33403
1-866-854-4956
1-212-320-9384

*************************************

Why a 212 area code for Deerfield Bch?

I live 5 min away may have to go for a drive?

Very weird?

Dude, look at the URL... pswbilling-cs.com ... I seriously doubt it's them and you should notify them asap. Most likely some hacker got a hold of their customer list or something and is trying to get peoples card numbers and pin numbers to try and defraud the customers.

sounds very scammy

the real domain:

Registrant:
PSW Inc. (PSWBILLING2-DOM)
1150 New London Ave.
Cranston
RI,02910
US

Domain Name: PSWBILLING.COM

Administrative Contact, Technical Contact:
Lombardi, John (CT622) [email protected]
1st American Cigar Emporium
788 Reservoir Ave.Suite 155
Cranston, RI 02910
401-943-1970 (FAX) 401-943-1480

Record expires on 09-Jun-2005.
Record created on 09-Jun-2000.
Database last updated on 22-Nov-2002 18:24:07 EST.

Domain servers in listed order:

FIRE.RIDA.NET 216.41.17.166
CAKE.RIDA.NET 216.41.17.167


obviously a scammer. Prohosters stuff could give you more details about this and take his site instantly down.

Whats weird is that they had the name and everything right.

:(

it's a scam..I received the same exact email but from some paypal buggus domain. Something like paypalebay or something. They wanted me to update my infos as well etc...bullshit...I trashed it..and so you should :)

This isnt just one of those cc stealing pages, these guys had my actual info. Which is what's fishy about it. i suspect some insiders had something to do with this.
:321GFY

Fucking hell... I'm wondering how many people actually fill out that form with their cc info...

I left a message for Gabe from PSW on his cell phone referring him to this thread and giving him the details on it... hopefully one of the PSW people can get in here and explain it's not them :D

PSW = pswbilling.com
pswbilling-cs.com != PSW

At least as far as I can tell :)

And no, I'm not affiliated with PSW, other then being a happy client of theirs...

CGI

Gabe from PSW billing just called me back.

He said they are not associted in any way what-so-ever with pswbilling-cs.com and are working on talking to the hosting company to get this guy shut down, then taking it all the way up the line to Visa/MC (who have full departments to deal with this crap lol).

Just thought I'd post an update... he's not in front of a computer so he asked me to post that for him.

CGI

I don't use PSW but I have dealt with Gabe and PSW they are a trust worthy company, but this is not good that someone has access to user info, hope they get the person that is doing this scam.

Regards,

Kevin

What would the last 8 digits of a cc # and a pincode do for you?

with that info you can make a card with $850 worth of software and equiment. just blank card like hotel room keys and take it to an atm and withdrawl your cash...

ask your local russian for more info

Edit: the last 8 digit thing is only used to legitimize the scam... the have a database of complete numbers that they can match the last 8 digits with.

Funny how the idiots are hosted with prohosters. Im sure they have their contact info.

I want to see these fucks in jail.

I dont like people having my info around, especially pswbilling for having a leak in their system allowing these guys to get name and all.

:BangBang: :BangBang:

Asking for pin codes? Yeh that's the ticket. I'm closeby also. About 15 minute drive. Let me know, I'll be down that way anyway tomorrow if you want a digital pic of what's at that address :).

ME WANT PICS :)

I've thought about this I wonder if it's possible that they run a legitimate site using PSW? That would at least give them your name and such, if you were to join... you join any sites using PSW (I know there are some script sales, etc... so not just porn :D)?

Best way to track these fucks would be to find out who got the mails and try to corrolate them to a common thread.. could be a possibility, at least.

Hell, it actually only takes one person who's only joined one site and you got it nailed down (except, of course, if someone got another webmaster's password -- then I'm sure PSW can track it by logs of logins).

I haven't been affected by this crap, but I'd love to see these scamming fucks get nailed to the wall by their nuts :)

Also, Kudos to PSW and anyone else who contacted prohosters... http://www.pswbilling-cs.com/ comes up 403 now :D

And prohosters -- you care to post IP addresses from the FTP logs to that site?

If they already have a database of complete numbers... can't they do something with that instead of pulling this pin shit... it just seems weird.

do something with it? I dont know about you... but Id be much safer going from atm to atm and withdrawling 400 bucks than I would be de-frauding some Gay site out of a membership... hence the PIN request

Yeah, if they get your PIN they can make a replica card and then go to an ATM and withdraw plenty of money from your account.

thanks captain obvious:thumbsup just j/k

damn that's a phrase!!!:Graucho :Graucho :Graucho
my regards!

TO PRADALOVER:

Very important and urgent. Please contact me on ICQ 43432801.
That's about this case.

Hamburger!

Who are you??

He's incognito, Russian AND he wants you..

I think you better go offline for while..

:1orglaugh

Hmmmm.... veeeeery strange...

What did the Russian want? Trying to sell you your PIN # back to you?

(nothing against the former Soviet Unionites :winkwink: )

Hey guys! Just wanted to let you know this was a former PSW client exploiting his own subscriber database. Our statistics previously listed partial credit card numbers (the first 8 digits). Thus, this fraud attempt was immediately connected to his account via the corresponding Subscriber IDs.

Thanks to the quick response of our friends at Prohosting, we had the domain locked down, accounts shut off, and logs seized immediately. To minimize any further exploitation a notice has been sent to the exact subscribers he contacted.

If you received the original email, please attach and send it to the email address listed on this page. The Prohosting staff wants to examine the header information.

Thanks guys! :winkwink:

PS: pradalover, sorry for the confusion, he had accurate information because it was his subscriber database (no information was leaked). Soul_Rebel, thanks for checking the DNS. Cyber3, funny that he didn?t use our address eh? JB, less than 2% filled it out the form, and maybe a third of that did it accurately (we?ve got the output file and email addresses of those exact people). CGI thanks for getting in touch and your assumptions were right on! PureMeds, that statement is surprisingly fitting. KRL, thanks for the Florida pics, we?re in Rhode Island and Virginia (it?s cold and rainy).

Sorry man.
Had a short ICQ but it was bought already.

What subscriber database? You mean pradalover is a member of one of the scammers porn sites?

I dying to see who really is at 1201 SW 10th Street
Deerfield Beach, FL. I live about 15 min away! They must be getting a shitload of mail! :1orglaugh

Damm straight

:1orglaugh :1orglaugh