warning about JunkySpot .. possibly hacked

[theodoric]

this is a heads up about JunkySpot ... and I will parallel this post into the feedback section

it looks like their site has been hacked

yesterday I ordered an item from them ... and got a confirmation message from them about it

THIS MORNING when I was going through my emails I got a very "authentic" looking email from the "USPS"

the USPS email looked very "PHISHY"

it had actual information about my oder from JunkySpot but my mailing address was listed "wrong" ... it had several clickable "buttons" ... none of which I used

I have never ever gotten an email from the "USPS Shipping Services" about any package I have ever gotten shipped by the postal service ... that is was made me immediately suspicious

I would have thought it was only a random "Phishing" email except for the fact that it had actual real info about the order I had made

the bank acct I used to order stuff online is a separate acct just for that ... that I never keep much more in it than it will take to pay for what I have ordered ... so even if they do hit that acct I wont loose more than a few dollars

I will be closing that acct and dropping it from my PayPal acct listing on monday



since JunkySpot does not list a phone number on their website that I could find ... and it their site has been hacked trying to contact them by email about it is useless ... I will no longer do business with JunkySpot

[landwhale]

I get USPS notifications telling me that the item is a delivery confirmation package. It's not a problem. It happens becuase the sender requests that the info about shipping be sent to the addressee. This is nice on Emory's part because it lets you know what is going on.

No need to freak out. It's ok.

[AlmySidaKay]

They always send out a confirmation email from USPS after your order is shipped so you can track it. Did you check to make sure your Paypal and your order from JS had an updated address?

[Greyhaunt]

This is normal - Emory does his postage online which generates this notification to you. If it looked like the following (I edited out my personal info) then it's normal.

Dear ***************,

This ship notification is being sent to you by the U.S. Postal Service® at the request of EMORY SUNG. If the "Shipped To" address information is not correct, please contact the Shipper.

A package with a Click-N-Ship® label created on usps.com containing the following information is scheduled to be shipped on 06/15/2011.

From:
EMORY SUNG
THE JUNKY SPOT
***************
***************

Shipped to: Greyhaunt
*******
*******
*******

Type of Service: Delivery Confirmation™
Label Number: 9405 ********

To check on the delivery status of your package, please go to Track and Confirm at http://www.usps.com.

Thank you,
United States Postal Service®

**Please do not respond to this email. Any reply will not be received by the USPS or the shipper. This email was sent to you at the shipper's request to notify you that the information above has been electronically sent to the USPS.

This is an email I got when I bought my 11cms. It's normal when he uses the USPS to ship. And my address was 'wrong" too - for some reason one line was repeated. It happens.

[victoriavictrix]

Alarm about nothing. Jspot has not been hacked, and your account is safe. I've gotten the same notifications since Emory started using the USPS software to create the postage and the labels. People were complaining that they wouldn't get shipping notices from him so he went to this system.

I *think* this may be a relatively "new" thing the USPS started that allows you to pay for and print flat rate postage at the USPS website without using one of those ridiculously expensive Pitney-Bowes setups. I know when I went to buy postage a couple months ago at the site, this system wasn't there, and last time I went, it was. That may be why you've never gotten a notification like this before.

[maywong]

I got one too but I knew that USPS does this.

[SetsunaKou]

I buy most everything online and that USPS tracking/confirmation email is a common normal thing. ^^ It's definitely legitimate and Junkyspot hasn't been hacked. Many businesses (and even non-businesses who sell occasionally only) use this USPS service to confirm to their customers the items are on their way and the tracking number. (I use it, too, everyday, when I ship out my commissioned items to customers. ^^) It's really helpful and informative to the buyer. ^^

[theodoric]

I understand what everyone is saying

in my entire life ... I have never ever gotten notification from the postal service about anything ... nor have I ever gotten advanced notice that I have a package coming from ANY shipping agent in my life ... not even when it was a package requiring me to sign for it to even get it ... like the package I just got from IpleHouse (that Mio was waiting for )
... what I am used to getting is a notice from the business sending me the package with a tracking number in it

I have also noticed over the past few weeks a large increase in emails from UPS, FedEx, etc ... some with shipping order numbers in the subject line ... usually to my spam folders ... but not always
... most of them I find amusing ... kind of like the "Manhood Enlargement Pills" emails ... and I dont even bother opening them because they come to emails of mine that I have never used for any business transactions of any sort ... so I know they are Phishing emails
... the only reason I even opened this one was because it was to the only email I do use for online business transactions ... and I just did have a package come to me in the mail ... and I just made an order that was going to come by the postal service

Greyhaunt
I understand what you are saying about incorrect addresses .... what raised a red flag to me was that there were 3 different versions of my street address listed one after the other
... the transaction notice I got from PayPal had the correct street address
... and the confirmation email I got from JS had the correct street address

... if that is the best the post office software can do ... I wonder what the percentage of lost packages is for businesses using that software

[Greyhaunt]

I would really like to stress to people that if you feel there is a potential problem at Junkyspot, before posting it to other forums PLEASE contact one of the mods either there or here. In fact, all of the mods at junkyspot are members of this forum - we will be happy to investigate potential problems and let you know if they are legit or not.

Emory states:

I intentionally repeat the street address, sometimes up to 3 times.
Why? because there's still a seperate section for the city, state, and zip.
Repeating the street address isn't something i consider a "wrong" address. Since the other info is on there, it's not like mr. postman is going to say "geeeee this is all wrong, i'm not going to deliver it".

USPS has a nasty habit of "standardizing" their address...which means that it'll autocorrect without letting me know. Which sometimes completely changes the address.

For people that have dashes in their address, such as 11-49 Main Street, it'll change it. To 1149. There's been other issues as well with their autocorrection.
In case i don't catch some of those nice little autocorrections, i repeat it on the lines it doesn't try to change: company, and line 2 of the street address.

So let's say youre a postal worker. And you get this package. One line says 11-49 Main Street. Another line says 1149 Main Street. Which one will you go with? Hell if I know. But if I see TWO lines with 11-49 Main Street and 1 line 1149 Main Street, chances are that I'm going to roll with the 11-49 Main Street since it's repeated twice...and I'll going to guess that it was indeed repeated to try to override the standardization.

Hence why you see packages from us often come with the street address repeated up to three lines. I could just leave it at 1, but I think I might be a little overly paranoid?

As usual he is practicing ultra customer service for us Unfortunately, by having this "alert" posted in multiple places Emory is now being bombarded by emails from customers and vendors wanting to know if it is true. Checking with a mod would have answered the question very quickly and lessened the drama he is now dealing with.

For reference, Mods at JS are: Greyhaunt, K2, Mlatch, Victoria Victrix, Kiki-chan78, ZirconMermaid, Resu, JanetT, Cirquemom...probably some others I can't remember off the top of my head. We are all happy to answer questions since between the lot of us we've probably paid for Emory's car and probably part of a house hahahahaha so we've probably been there/done that already

[theodoric]

...

For reference, Mods at JS are: Greyhaunt, K2, Mlatch, Victoria Victrix, Kiki-chan78, ZirconMermaid, Resu, JanetT, Cirquemom...probably some others I can't remember off the top of my head. We are all happy to answer questions since between the lot of us we've probably paid for Emory's car and probably part of a house hahahahaha so we've probably been there/done that already

I understand

part of the problem with me was except for you ... and Mlatch (who very childishly pronounced his "awesome" moderator powers when he shut down a thread because HE though there had been enough discussion in it) ... there is no way to identify the mods in here

most boards use a special color for their names to identify them as mods ... like victoriavictrix .. she uses the same name color as any other member
... or a title under their name

I also now understand about the JS mods also being members in here


and LOL as for THIS little comment

...
No need to freak out. It's ok.

being cautious is not "freaking out"

I stopped freaking out about just about anything when one of my jobs in the Navy was to practice sending the authorization codes to start a nuclear war ... and I am not joking about that ... I still get nightmares from it occasionally