[PLUG] Is this a scam?

[Scott Van Hoosen]

That link didn't work in Mozilla 1.2.1 under Red Hat 9, it just dropped
me back to the same non-secure page. I tried this in Mozilla 1.5 and IE
on Windows XP, and it did work.

I would think that a big financial company would have logins default to
SSL for SSN's and passwords...

-Scott

--- chris <linux at chrisroberts.org> wrote:
> if you look click the "secure login" link, you get a link to this
> site with 
> the actual login:
> 
> https://www.manageyourloans.com/MYL
> 
> chris
> 
> On Tuesday 03 February 2004 10:45 am, Scott Van Hoosen wrote:
> > A co-worker has a student loan through Sallie Mae, but received an
> > email that seemed suspicious to me.
> >
> > She was asked to sign in to the following web page, using her
> social
> > security number as a password, which first caught my attention:
> >
> > http://www.salliemae.com
> >
> > I can see a student load using SSN, but what seemed strange is that
> the
> > login screen boldly proclaims "SSL" and shows an image of a locked
> > padlock. However the URL is http, not https, and the browser's lock
> > icon is of course unlocked.
> >
> > I did a "whois salliemae.com" and also a whois on
> "salliemaenews.com"
> > which was the address from some other emails she's received and
> > believed to be legit. The whois shows the same contact info.
> Browsing
> > to salliemaenews.com brings up some other page, epigraphx.com.
> >
> > Any of you security experts have any thoughts on this? If it is a
> scam,
> > it looks like a lot of effort was put into it.
> >
> > -Scott
> >
> > __________________________________
> > Do you Yahoo!?
> > Yahoo! SiteBuilder - Free web site building tool. Try it!
> > http://webhosting.yahoo.com/ps/sb/
> >
> > _______________________________________________
> > PLUG mailing list
> > PLUG at lists.pdxlinux.org
> > http://lists.pdxlinux.org/mailman/listinfo/plug
> 
> 
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/