November 19th, 2005

Morgan Webb 2

SPOOF: You've received a greeting from a family member!

From: Spoofs & Phishers

You've just received a message in your mailbox saying that:

You've received a greeting from a family member!

You're excited and eager to find out who would be so kind enough to send you such an nice gesture. WARNING: it's anything but nice. In the email it states:

You have just received a virtual postcard from a family member!

You can pick up your postcard at the following web address:

The reality of it is that the link you're about to click on is not really taking you to, instead it's going to download a EXE (executable) file on your PC and maybe even activate it:

Things to pick up on when you see such an email: 1) the "FROM" field states it's coming from yet the e-mail body itself states it's coming from and 2) the format and style of the e-mail looks like someone just whipped up the e-mail and didn't bother taking the time to design and such; any such organization such as would have done everything to make the e-mail looks special.

I give this e-mail a rating of 2 out of 10 on believability.

Here's what we do know about the owner of the domain:

   Registrar: NETFIRMS, INC.
   Whois Server:
   Referral URL:
   Name Server: NS1.NETFIRMS.COM
   Name Server: NS2.NETFIRMS.COM
   Updated Date: 02-nov-2005
   Creation Date: 02-nov-2005
   Expiration Date: 02-nov-2006

Registrant: Staydown Scheeres, Ysbrand 104Marti Court Oxford, OH 45056 US
Domain name:
Administrative Contact: Staydown Scheeres, Ysbrand 104Marti Court Oxford, OH 45056 US 513 524 9309 Fax:
Technical Contact: Netfirms Inc. Manager, Domains 5160 Yonge St., 1800 Toronto, ON M2N6L9 CA 4166612100 Fax: 4166610700
Registrar of Record: Netfirms Inc. Record expires on 2006-11-02. Record created on 2005-11-02. Database last updated on 2005-11-19 15:50:01.

So, beware what you click in the e-mail that you get.