|
newphotoid.com - Phishing or Joe Job?We were alerted to the following spam by a concerned reader. Someone sent a bogus order confirmation for goods the recipient never ordered and then ask him/her to visit a website and enter his credit card details if he/she wants get the order cancelled. Variants of this have been seen with bogus eBay purchase completion notifications used for credit card data theft.However, in this case the company website seems to exist since 2003 already. We think a more likely explanation is that some vigilante, who does not like the idea of of US residents being able to buy fake photo IDs in Canada is trying to get this website shut down by making it appear that it is involved in credit card fraud.
Message example: From: <billing@newphotoid.com> WHOIS details for domain "newphotoid.com": Request: newphotoid.com connected to whois.opensrs.net [216.40.33.170:43] ... Registrant: Hc Graphics #322 916 W. Broadway Vancouver, BC V5Z 1K7 ca Domain name: NEWPHOTOID.COM Administrative Contact: Robinson, Dale drobin@coppervalley.bc.ca #322 916 W. Broadway Vancouver, BC V5Z 1K7 ca +1.2504539525 Technical Contact: Support, Technical techsupport@homepageuniverse.com Coppull Enterprise Centre Coppull, Lancashire PR7 5BW UK +44.1257794911 Fax: +44.1257794911 Registration Service Provider: HomepageUniverse, support@homepageuniverse.com +44.8457606128 +44.8457606128 (fax) http://HomepageUniverse.com HomepageUniverse may be contacted for domain login, DNS changes, and all general domain support questions. Registrar of Record: TUCOWS, INC. Record last updated on 23-Jun-2004. Record expires on 18-Feb-2006. Record created on 18-Feb-2003. Domain servers in listed order: NS.HOMEPAGENAMES.NET 216.127.78.156 NS2.HOMEPAGENAMES.NET 67.18.182.34 Domain status: ACTIVE |