?

Log in

No account? Create an account
 
 
19 November 2005 @ 05:33 pm
SPOOF: You've received a greeting from a family member!  
From: Spoofs & Phishers

You've just received a message in your mailbox saying that:

You've received a greeting from a family member!


You're excited and eager to find out who would be so kind enough to send you such an nice gesture. WARNING: it's anything but nice. In the email it states:

You have just received a virtual postcard from a family member!

You can pick up your postcard at the following web address:

http://www2.postcards.org/?a91-valets-cloud-31337


The reality of it is that the link you're about to click on is not really taking you to postcards.org, instead it's going to download a EXE (executable) file on your PC and maybe even activate it:

http://www.staydownphones.com/postcards.gif.exe


Things to pick up on when you see such an email: 1) the "FROM" field states it's coming from egreetings.com yet the e-mail body itself states it's coming from postcards.org and 2) the format and style of the e-mail looks like someone just whipped up the e-mail and didn't bother taking the time to design and such; any such organization such as egreetings.com would have done everything to make the e-mail looks special.

I give this e-mail a rating of 2 out of 10 on believability.

Here's what we do know about the owner of the domain: staydownphones.com

   Domain Name: STAYDOWNPHONES.COM
   Registrar: NETFIRMS, INC.
   Whois Server: whois.netfirms.com
   Referral URL: http://www.netfirms.com
   Name Server: NS1.NETFIRMS.COM
   Name Server: NS2.NETFIRMS.COM
   Status: REGISTRAR-LOCK
   Updated Date: 02-nov-2005
   Creation Date: 02-nov-2005
   Expiration Date: 02-nov-2006

Registrant: Staydown Scheeres, Ysbrand 104Marti Court Oxford, OH 45056 US
Domain name: staydownphones.com
Administrative Contact: Staydown ceckmeinthissecol@yahoo.com Scheeres, Ysbrand 104Marti Court Oxford, OH 45056 US 513 524 9309 Fax:
Technical Contact: Netfirms Inc. support@netfirms.com Manager, Domains 5160 Yonge St., 1800 Toronto, ON M2N6L9 CA 4166612100 Fax: 4166610700
Registrar of Record: Netfirms Inc. Record expires on 2006-11-02. Record created on 2005-11-02. Database last updated on 2005-11-19 15:50:01.


So, beware what you click in the e-mail that you get.