• The TUGBBS forums are completely free and open to the public and exist as the absolute best place for owners to get help and advice about their timeshares for more than 30 years!

    Join Tens of Thousands of other Owners just like you here to get any and all Timeshare questions answered 24 hours a day!
  • TUG started 31 years ago in October 1993 as a group of regular Timeshare owners just like you!

    Read about our 31st anniversary: Happy 31st Birthday TUG!
  • TUG has a YouTube Channel to produce weekly short informative videos on popular Timeshare topics!

    Free memberships for every 50 subscribers!

    Visit TUG on Youtube!
  • TUG has now saved timeshare owners more than $24,000,000 dollars just by finding us in time to rescind a new Timeshare purchase! A truly incredible milestone!

    Read more here: TUG saves owners more than $24 Million dollars
  • Sign up to get the TUG Newsletter for free!

    Tens of thousands of subscribing owners! A weekly recap of the best Timeshare resort reviews and the most popular topics discussed by owners!
  • Our official "end my sales presentation early" T-shirts are available again! Also come with the option for a free membership extension with purchase to offset the cost!

    All T-shirt options here!
  • A few of the most common links here on the forums for newbies and guests!

Alert-Phishing mail with TUG member in title

momeason

TUG Review Crew: Veteran
TUG Member
Joined
Mar 28, 2007
Messages
1,655
Reaction score
21
Location
Emerald Isle, NC
I received an email in my Spam folder supposedly from a Tug member asking about a resort I have visited....Monarch in Las Vegas. It did not go through my PM folder. Directly to me. The spammers email had tug2 in his email address.
Watch out. It did not look authentic..pretty sure it was bad news.
 
are you sure these are not messages thru the bbs?

one can send you an email thru the forums if you have that option selected in your settings.
 
One must have a TUGBBS account and be logged in to send email via the bbs. Any email sent via the bbs will be identified thusly:

From: [sender's bbs user name] @ Timeshare Users Group Forums <sender's email address as listed in sender's bbs profile>

tug2.net would not be indicated in the From address unless the sender actually has a tug2.net address listed in his/her bbs profile. (And the only such accounts belong to Brian Rogers)

The actual message text will be the following:

This is a message from [sender's name] at Timeshare Users Group Forums ( http://www.tugbbs.com/forums/index.php ). The Timeshare Users Group Forums owners cannot accept any responsibility for the contents of the email.

The sending of this message did not reveal your email address to [sender's name].

To email [sender's name], you can use this online form:
http://www.tugbbs.com/forums/sendmessage.php?do=mailmember&u=[sender's user number]

OR, by email:
mailto:[sender's email address]

Any reply you send will reveal your email address to [sender's name].

This is the message:

[text from the message sender]
 
If you indicated in a Monarch review that you were willing to answer questions about the resort, you (along with the other volunteers) can be emailed via the Monarch review page. Not sure what email address would show on such an email.
 
Paranoid?

George

I would say, "careful," which isn't a bad thing when it comes to email, and it certainly doesn't hurt to ask.

Now based on Brian's and Doug's responses, TUGger momeason may realize that the email notification is probably legitimate and she can choose whether to read it or not.
 
oh absolutely...just because it says its from TUG (even valid looking TUG emails)...dont click on random links...especially if the post is asking you to go somewhere random.

you can usually hover your mouse over a link and most modern browsers will display the ACTUAL url the link is pointing to...because its very easy for me to make a url that looks like a perfectly valid site...but instead send you to somewhere malicious.

also note that urls are read BACKWARDS...not forwards...lots of folks will use creative urls to make you think you are going to a legitimate site.

like I could easily create a link called http://www.paypal.com.payment.legitimate.looking.wording.here.tug2.net

you will find these common with very long strings at the front to make it seem like a legitimate site because most folks dont read right to left.

most people seeking to do you harm are sadly..more creative than you can imagine.
 
Last edited:
I have received many emails legitimately through the TUG site from TUG members. This is no way looked legit.
I also constantly receive phishing emails. This definitely looked like phishing and the email address was very strange including tug2.
Better safe than sorry. He said he was a TUG member. He can contact me through TUG if he is real. I deleted it. It is gone.
I am not paranoid.
 
...This definitely looked like phishing and the email address was very strange including tug2....
Anyone can have "tug2" in the name part of their address. For example, I have "myname.com" as the last part of my email address, and then when I sign up for a new site, I use that site's name as the first part of my email address. So, if I sign up for an account at Macy's, I would use the email macys@judysmith.com. Then, if I signed up for an account on the New York Tiems website, I would use nyt@judysmith.com as my email (My last name isn't actually Smith, but you get the picture.) This way, if a site starts to spam me, or sells my email address to spammers, I can easily block them.

None of this says the email was actually legitimate, but having "Tug2" in the address isn't necessarily a red flag.
 
yea....i clearly need more coffee =)
 
Top