Tip: Fraudulent look alike websites - how to tell

[richz123]

This is my first post and more of a tip about fraudulent websites. I got a certain error (which I'll explore in other posts) but in searching for the error I came upon a particular website that looked like 123.hp.com. First tip off that something is not quite right in a form for a call back it starts out

"Agents are not available at this time. Please leave a message along with your contact number. We will contact you back within 15 minutes through phone."

First of all not available and call back in 15 minutes is a contradiction (and then there's a glaring grammar error at the end of the sentence). Well it is 11 pm MT so I would think it is after hours, but a call back in 15 minutes? 15 minutes from when they become available? What time? OK something is "phishy"

So I googled is XXXXXX (not revealing the URL here) legit? I came upon this thread

https://h30434.www3.hp.com/t5/Mobile-Printing-Cloud-Printing/I-was-scammed-by-someone-when-I-entered...

It discussed not disclosing actual look alike fraud sites. I'll attach a screenshot (that doesn't reveal the actual site)

I will say on the topic of "phishy" URLs this forum URL isn't much better who picked "h30434.www3.hp.com"? Yeah on close inspection we can see it ends in .hp.com but what if a site eneded in .w3hp.com? probably suspect but easily confused. and h30434? Why? I guess this probably isn't the place for feedback to HP but, come on!

While I have an HP "account" I needed a screen name to get started so RICHZ123 is kind of a play on this whole "phishy" theme. (I'm not "phishy")

Thanks, and here's to more posts in the community. -Rich

Here's the screenshot (hopefully I'm allowed to post):

[richz123]

Now I am working on my actual error and this thread has a suspect link in it.

https://h30434.www3.hp.com/t5/Printing-Errors-or-Lights-Stuck-Print-Jobs/Error-Printer-Validation-Fa...

It refers me to  http://hp.care/2bZ9w2q for the  HP Print and Scan Doctor (PSDR)

Good news it is appears to be some kind of **bleep** (had to change it so I could post) domain and redirects to

https://support.hp.com/in-en/topic/printscandoctor

We'll have to try it out. 

But really, is hp.care as a domain helping?