I used to receive a lot email disguised as an official email from a bank, attempts to trick the me into giving away my account information by “confirming” it at the phisher’s linked website. Usually I will just delete it away because banks or any service providers don’t ask you to confirm your sensitive and private information through a website.
Just yesterday, someone from Slovakia (I traced the IP address), or maybe he was using a proxy, posted a comment saying “If you have an premium account and you login http://www.rapidshare.xxxxxxx.xx/ then you get 10 000 premium pionts (= 30 day account).”
Immediately I sensed that it might be fake because there is no such news in Rapidshare.com. Still feeling curious, I decided to check out the website because who knows it might be a hack or trick that can really give me 10,000 free points. When I click on the site, it is IDENTICAL as Rapidshare.com Premium-Zone login page.
If the link is different from the original website but looks exactly the same, chances are 99.99% the website is fake and it’s trying to cheat you to enter your private information.
I noticed 2 differences if compared the fake website with the original Rapidshare.com website.
1. POST submission link
I checked the source code and found out that when you hit the “SSL-encrypted Login” button, it will submit to http://www.ncore_n.extra.hu/premiumpoints.php while the original link should be https://ssl.rapidshare.com/cgi-bin/premiumzone.cgi
I believe that the premiumpoints.php will either send your information to an email or log it on the server.
2. SSL
The fake website did mention SSL-encrypted Login, but the URL only uses HTTP and not HTTPS.
RapidShare Premium account is already so cheap and I find it hard to believe that there are people so desperate to have a RapidShare Premium account which made them go all the way to create a fake website. If my RapidShare premium account is being stolen, I’d immediately report it to RapidShare and have that account terminated.
Important note: If you own a RapidShare Premium account, please do not believe all these fake rewards and make sure you login from the original RapidShare.com website.
Related posts: