escrow.com fraud?

[hjms_itf]

hi is anyone know about escrow.com
well I got transaction going on..and now this site is dead.
anyone know whatz going on?????

[JaxHot]

https://www.escrow.com/index.asp
is the real site.

You more than likely clicked a link or downloaded a file from a scammer to hijack your web browser.

Who have you been doing business with on eBay?
I need details and the scammer's email address.

Here is the fix for your problem.

Using the Windows Explorer (as opposed to the Internet Explorer), navigate to the hosts file located with-in the c:\windows directory folder.

Here are several versions of Windows and where the hosts file can usually be found:

c:\windows\system32\drivers\hosts

Windows 95/98/Me c:\windows\hosts

Windows NT/2000/XP Pro c:\winnt\system32\drivers\etc\hosts

Windows XP Home c:\windows\system32\drivers\etc\hosts



The only mandatory line in this file is the line that reads:

127.0.0.1 localhost

Any other entry (not preceeded by a "#" which indicates a comment) is not needed for normal windows operation and can normally be removed without consequence. As always, making a back-up copy of the file is a HIGHLY RECOMMENDED practice.

References/Links:

http://www.pcmag.com/article2/0,1759,1649060,00.asp
http://practice.chatserve.com/hosts.html
http://en.wikipedia.org/wiki/Hosts_file

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

[flip360]

does anybody aany experiences with this company ?
Is it safe ?
Thanks in advance

[peg]

Broken Record time again:


Just to be ABSOLUTELY clear on this for anyone who reads this post. ESCROW.COM is NOT a fake company.

People are using an exploit that modifies a HOSTS file on the local machine to "Re-Direct" you to a fake site when you enter http://escrow.com in your browser.

To verify IF you have been victimized using this exploit you can do one of the following:

Open a command window (START -> RUN -> type in the dialog box command -> Press OK)
Then in the command window type ping escrow.com <enter>
You should see something like

Code: Select all

   Pinging escrow.com [216.154.246.76] with 32 bytes of data:

   Reply from 216.154.246.76: bytes=32 time<1ms TTL=255
   Reply from 216.154.246.76: bytes=32 time<1ms TTL=255
   Reply from 216.154.246.76: bytes=32 time<1ms TTL=255
   Reply from 216.154.246.76: bytes=32 time<1ms TTL=255

Ping statistics for 10.201.128.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms



Even if you get

Code: Select all

Pinging escrow.com [216.154.246.76] with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 216.154.246.76:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),


The important part is the IP Address in the first line. YOURS should say 216.154.246.76 and you should be able to type that number sequence directely in the web browser address bar and be taken to Escrow.com (The real one). IF NOT... Suspect fraud.

Alternative (and perhaps easier) is to CHECK the HOSTS file directly (It's just a plain text file and can be opened in any text editor such as notepad) Info on this can be found at http://forum.escrow-fraud.com/viewtopic.php?p=1635#1635 (Thanks Jaxhot).

As a final note, many of the scammers choose NOT to seek the SSL certificate (as it requires some level of verification of identity)... SO since escrow.com IS legit, and they DO have an SSL. If you cannot not navigate to https://escrow.com (Note S in the https) then you are likely at a scam site as well.