Dwolla E-mails

[jimrandomh]

Definitely phishing. If you reset your password by following the link in this email, change it again if you can, then check your history and notify Dwolla immediately. Do not ever follow links from emails that supposedly lead to financial institutions.

[1713504464]

1713504464

[1713504464]

1713504464

[error]

Definitely phishing. If you reset your password by following the link in this email, change it again if you can, then check your history and notify Dwolla immediately. Do not ever follow links from emails that supposedly lead to financial institutions.

Some people got a phishing email, maybe. The one I got was legit. The link redirected to https://www.dwolla.com/default.aspx. Not that I used it, but I did check it.

[jimrandomh]

Actually, hmm - I just checked where the link actually went, and it was a 302 redirect that does land at a Dwolla https page. So maybe it was legit. I still don't recommend following links like that; if you do reset your password, you should do so by typing https://www.dwolla.com into the address bar directly.

[dacoinminster]

I assumed it was phishing and actually reported it to their phishing report email address. It seemed impossible that it was really from Dwolla since the URL in the email was not pointing to dwolla.com

I can't imagine why they would set up a redirect like that. Maybe the phishing attempt was reported to the hosting company and they neutralized it by redirecting to the dwolla site?

[error]

I assumed it was phishing and actually reported it to their phishing report email address. It seemed impossible that it was really from Dwolla since the URL in the email was not pointing to dwolla.com

I can't imagine why they would set up a redirect like that. Maybe the phishing attempt was reported to the hosting company and they neutralized it by redirecting to the dwolla site?

Nope, they mass mailed everyone via MailChimp instead of directly.

[Jered Kenna (TradeHill)]

They might figure that some people use the same password for both Dwolla and Mt Gox. It's probably just a precaution.

We were able to identify and catch two dwolla hackers last week. The hackers had used the leaked Mt.Gox passwords. 

[TKE406]

The e-mail was sent via "mail3.uk1.mcsv.co.uk "

So... definitely suspicious

[error]

The e-mail was sent via "mail3.uk1.mcsv.co.uk "

So... definitely suspicious

Didn't you look it up?


[Querying whois.nic.uk]
[whois.nic.uk]

    Domain name:
        mcsv.co.uk

    Registrant:
        MailChimp.com

    Registrant type:
        Unknown

    Registrant's address:
        512 Means St.
        Suite 404
        Atlanta
        GA
        30 318
        United States

    Registered through:
        GoDaddy.com, Inc.
        URL: http://www.godaddy.com

    Registrar:
        Key-Systems GmbH [Tag = KEY-SYSTEMS-DE]
        URL: http://www.Key-Systems.net

    Relevant dates:
        Registered on: 08-Mar-2010
        Renewal date:  08-Mar-2012
        Last updated:  02-Jun-2010

    Registration status:
        Registered until renewal date.

    Name servers:
        udns1.ultradns.net
        udns2.ultradns.net

    WHOIS lookup made at 04:11:06 19-Jul-2011

--
This WHOIS information is provided for free by Nominet UK the central registry
for .uk domain names. This information and the .uk WHOIS are:

    Copyright Nominet UK 1996 - 2011.

You may not access the .uk WHOIS or use any data from it except as permitted
by the terms of use available in full at http://www.nominet.org.uk/whois, which
includes restrictions on: (A) use of the data for advertising, or its
repackaging, recompilation, redistribution or reuse (B) obscuring, removing
or hiding any or all of this notice and (C) exceeding query rate or volume
limits. The data is provided on an 'as-is' basis and may lag behind the
register. Access may be withdrawn or restricted at any time.

[Denicen]

I got this email from dwolla. My email linked to mtgox was not the same as the one that I had linked to dwolla, so that made me think that it probably wasn't a phishing attempt.
It still looks really suspect though.

[error]

I sent a support ticket to dwolla and they sorted out my password issue. Turns out you can't copy/paste your new password from their email because some goofy formatting information gets inserted as well. Oh, and the email from MailChimp was legitimate, if ill-advised.

[DrKennethNoisewater]

I got it.

[MagicalTux]

I got it too

[geek-trader]

I sent a support email to Dwolla and they confirmed they did indeed send that email.

[gnaget]

I

"effecting"

Stop being so pedantic...  (first thing I noticed too)