Topic: Dwolla E-mails (Read 2860 times)

Stop being so pedantic...  (first thing I noticed too)

I sent a support email to Dwolla and they confirmed they did indeed send that email.

I got it too

I got it.

I sent a support ticket to dwolla and they sorted out my password issue. Turns out you can't copy/paste your new password from their email because some goofy formatting information gets inserted as well. Oh, and the email from MailChimp was legitimate, if ill-advised.

I got this email from dwolla. My email linked to mtgox was not the same as the one that I had linked to dwolla, so that made me think that it probably wasn't a phishing attempt.
It still looks really suspect though.

Didn't you look it up?


[Querying whois.nic.uk]
[whois.nic.uk]

    Domain name:
        mcsv.co.uk

    Registrant:
        MailChimp.com

    Registrant type:
        Unknown

    Registrant's address:
        512 Means St.
        Suite 404
        Atlanta
        GA
        30 318
        United States

    Registered through:
        GoDaddy.com, Inc.
        URL: http://www.godaddy.com

    Registrar:
        Key-Systems GmbH [Tag = KEY-SYSTEMS-DE]
        URL: http://www.Key-Systems.net

    Relevant dates:
        Registered on: 08-Mar-2010
        Renewal date:  08-Mar-2012
        Last updated:  02-Jun-2010

    Registration status:
        Registered until renewal date.

    Name servers:
        udns1.ultradns.net
        udns2.ultradns.net

    WHOIS lookup made at 04:11:06 19-Jul-2011

--
This WHOIS information is provided for free by Nominet UK the central registry
for .uk domain names. This information and the .uk WHOIS are:

    Copyright Nominet UK 1996 - 2011.

You may not access the .uk WHOIS or use any data from it except as permitted
by the terms of use available in full at http://www.nominet.org.uk/whois, which
includes restrictions on: (A) use of the data for advertising, or its
repackaging, recompilation, redistribution or reuse (B) obscuring, removing
or hiding any or all of this notice and (C) exceeding query rate or volume
limits. The data is provided on an 'as-is' basis and may lag behind the
register. Access may be withdrawn or restricted at any time.

The e-mail was sent via "mail3.uk1.mcsv.co.uk "

So... definitely suspicious

We were able to identify and catch two dwolla hackers last week. The hackers had used the leaked Mt.Gox passwords. 

Nope, they mass mailed everyone via MailChimp instead of directly.

I assumed it was phishing and actually reported it to their phishing report email address. It seemed impossible that it was really from Dwolla since the URL in the email was not pointing to dwolla.com

I can't imagine why they would set up a redirect like that. Maybe the phishing attempt was reported to the hosting company and they neutralized it by redirecting to the dwolla site?

Actually, hmm - I just checked where the link actually went, and it was a 302 redirect that does land at a Dwolla https page. So maybe it was legit. I still don't recommend following links like that; if you do reset your password, you should do so by typing https://www.dwolla.com into the address bar directly.

Some people got a phishing email, maybe. The one I got was legit. The link redirected to https://www.dwolla.com/default.aspx. Not that I used it, but I did check it.

Definitely phishing. If you reset your password by following the link in this email, change it again if you can, then check your history and notify Dwolla immediately. Do not ever follow links from emails that supposedly lead to financial institutions.

I got the same email and realized that the 'Login here' link doesn't point to dwolla.com or dwolla.org. It may be on the up-and-up, but certainly looks like a phishing email. Be careful.

i got the email too, but i already changed my password to a much stronger one ever since the mtgox database leak

Ha. I changed my password, and the new password they emailed me doesn't work. Good job!

I got one, and realized my existing Dwolla password was horribly weak, so I changed to something much better.

Same here.  I got the email and have only used it with MtGox and my bank.

Got one.