Help required

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Tue Dec 16, 2008 1:05 pm

Hi,

Can one of our resident experts have a look at the payment page on http://www.freebiegifts.co.uk/ for me please and confirm what I suspect. It appears that there is no encryption what so ever which means anyone putting their details on there are taking a big chance.

A fair few of my friends have been ordering stuff from there and I am a wee bit concerned.

Ta muchly Smile

Posted: Tue Dec 16, 2008 1:30 pm

no security at all.

I guess you order your free gift, pay the P&P and .............

Nothing.

Posted: Tue Dec 16, 2008 1:35 pm

Thanks hitch, thats what I thought.

The site is full of tat basically but a couple of people I know have actually recieved the stuff they requested.

My worry is a couple of months down the line these peoples cards start getting some random charges. Sad

Posted: Tue Dec 16, 2008 1:44 pm

FWIW, and in case it disappears:

Quote:

Domain name:
freebiegifts.co.uk

Registrant:
Expansive Media

Registrant type:
Unknown

Registrant's address:
The Basement Woodlands 79 High Street
Greenhithe
DA9 9RD
GB

Registrar:
Fibranet Services Ltd [Tag = FIBRANET]

Relevant dates:
Registered on: 03-Sep-2008
Renewal date: 03-Sep-2010

Registration status:
Registered until renewal date.

Name servers:
ns3.ukdnsservers.co.uk
ns4.ukdnsservers.co.uk

http://www.expansivemedia.com appear to be a PR/advertising agency. They brand USB sticks and the like with their client's names then give it out to promote the brands. Seems legit, but they have been bollocked by the Advertising Standards people: LINK

Quote:

The ad must not appear again in its current form. We told Expansive Media and the Mirror not to describe products as "free" if the ad did not include a route by which readers would pay no more than the genuine minimum unavoidable cost of delivery.

I would be careful we don't libel the company by declaring them scammers.

Posted: Tue Dec 16, 2008 1:47 pm

I think this may possibly be dodgy.

Worldpay are a very secure method of payment, so you'd normally have no worries with them. However, when you click on a payment page with an authorised merchant, the page will redirect to the worldpay site while you enter your details. Your address bar will contain something like this:
https://select.worldpay.com/wcc/purchase
Once your payment is complete, you get redirected back to the merchant's site.
Notice how, on the freebie site, the URL does not change from their site.

It definately needs a close look...

Edited to avoid any possible slander.

Posted: Tue Dec 16, 2008 1:53 pm

Mugatu,

I noticed that too, I tried having a look at the page scource to see if I could see any clues in there but its all just double dutch to me Embarassed

Posted: Tue Dec 16, 2008 1:55 pm

Posted 10 days ago on the moneysavingexpert forums:

Quote:

Has anyone actually received anything from Freebiegifts AKA expansive media?? They took payment for p&p on 18th October but I still havent received my USB. I have now emailed them 4 times but no replies!

http://forums.moneysavingexpert.com/showthread.html?p=15939619

Looking at various other bits on the web, they're not scammers, and they're not exactly fly by night, but they also don't seem the most scrupulous company. They remind me of something you might see on "Watchdog" or "Rogue traders".

Personally, I would avoid it, because I'm not sure enough. Sorry I can't be more definate than that.

Edited slightly to remove anything which could be construed as slanderous nastiness! Smile

Posted: Tue Dec 16, 2008 2:08 pm

Thanks for that Mugatu.

I think the main issue for me really is the un-encrypted card details, they could very easily be intercepted by a third-party.

Posted: Tue Dec 16, 2008 2:17 pm

^^ Worldpay do use SSL encryption, I'm just not convinced either way at this stage as to whether "freebies" are using an up to date / authorised worldpay login. I'm looking into it at the moment.

Posted: Tue Dec 16, 2008 2:26 pm

Thanks m8, your a star Smile

I'll stay tooned for updates

Posted: Tue Dec 16, 2008 2:38 pm

Just spoken with Worldpay, Expansive media are a confirmed customer of theirs and user of their services.

This from Worldpay's security FAQs:

https://worldpay.com/about_us/index.php?page=security&c=UK

Quote:

Security is probably one of the most significant concerns for both the shopper and the retailer during an online transaction. In reality, an online transaction is probably more secure than a card transaction in a shop or conducted over the telephone or by fax, as the information transmitted online is strongly encrypted using complicated logarithm combinations.

The WorldPay payment system uses a combination of both established and innovative techniques to ensure the security and integrity of all sensitive data. Furthermore, our public web servers are certified by Thawte, a public Certificate Authority, ensuring that both the shopper and retailer can have confidence that nobody can impersonate WorldPay to obtain confidential information.

Transaction Encryption
The transfer of the purchase details from the retailers site to Worldpay are encapsulated using our own encrypted and digitally-signed protocol. This uses a combination of standard methods such as PGP, RSA and MD5 to ensure that the information passed is secure and tamper-proof via SSL.

Security for the Shopper
Any communication between the shopper and WorldPay is also encrypted to the maximum strength supported by the shopper's browser using 128 Bit SSL. Shoppers are also protected from fraudulent use of their card in a "card not present" environment, by their card issuers. The card issuers provide the right for shopper to dispute a transaction if the goods/services did not arrive or if the card was used fraudulently.

I'd say that your card details are safe.... I just wouldn't necessarily bank on recieving your USB stick! Laughing

Posted: Tue Dec 16, 2008 2:43 pm

Seems even more strange that both Firefox and IE show no encryption whatsoever for that page then. Rolling Eyes