topic Re: Reward card site issues possible fraud. in Everything else

Reward card site issues possible fraud.

mazie2020 — Tue, 05 Oct 2021 10:30:08 GMT

We received an email seemingly from Plusnet to advise that we could now claim our reward card but, when we clicked on the link, we got a warning to say that the sites certificate had expired and we should close the web page as someone may be trying to steal our information. There was another link in email but following that gave the same result.

My question is; is the site compromised, or is it okay to ignore the warning and go ahead?

Thanks,

Tony

Re: Reward card site issues possible fraud.

pjmarsh — Tue, 05 Oct 2021 12:46:55 GMT

Is the link to purecard.com? That's who Plusnet use for the reward cards.

Are you using a Mac? There is another report on here about someone having certificate issues with a number of sites, to which someone has posted a link to there being an issue with some older mac versions and a root certificate having expired the other day.

Re: Reward card site issues possible fraud.

mazie2020 — Tue, 05 Oct 2021 13:31:40 GMT

The error message cites plusnetrewards.com as being the problem site. I am using a mac, and also tried on an iphone.
“Your connection is not private
Attackers might be trying to steal your information from www.plusnetrewards.com (for example, passwords, messages or credit cards). Learn more
NET::ERR_CERT_DATE_INVALID”

Re: Reward card site issues possible fraud.

pjmarsh — Tue, 05 Oct 2021 15:13:38 GMT

That's interesting. I can access it from some devices but not others. On one I can't I can see lets encrypt is being used, which I think was mentioned in the article on the other post I mentioned. I wonder if it's related

Re: Reward card site issues possible fraud.

pjmarsh — Tue, 05 Oct 2021 15:16:05 GMT

The article I was referring to is this one: https://mjtsai.com/blog/2021/09/24/some-web-sites-will-stop-working-with-el-capitan-and-older/

And this came from this thread: https://community.plus.net/t5/Tech-Help-Software-Hardware-etc/Privacy-Error-Won-t-Go-Away/m-p/1831869#M92042

Re: Reward card site issues possible fraud.

mazie2020 — Tue, 05 Oct 2021 17:15:55 GMT

After reading the info posted above I decided to try to access the page using a Chrome browser on a Linux box, got straight in, no problems, card on it's way!f

Thanks for the help pjmarsh

Re: Reward card site issues possible fraud.

EvilDan — Wed, 13 Oct 2021 05:49:56 GMT

The issue is that the certificate for the website is expired hence the security warning. You can bypass this on any web browser - even one that warns you. However this means the website does not log the website as being secure and you are required to input your personal details on an unsecured website.

Has anyone at Plusnet actually seen this thread and passed on this issue with the website certificate so that it can be used securely?