|
| |
newphotoid.com - Phishing or Joe Job?
We were alerted to the following spam by a concerned reader. Someone sent a bogus order confirmation for goods the recipient never ordered and then ask him/her to visit a website and enter his credit card details if he/she wants get the order cancelled. Variants of this have been seen with bogus eBay purchase completion notifications used for credit card data theft.
However, in this case the company website seems to exist since 2003 already. We think a more likely explanation is that some vigilante, who does not like the idea of of US residents being able to buy fake photo IDs in Canada is trying to get this website shut down by making it appear that it is involved in credit card fraud.
Message example:
From: <billing@newphotoid.com>
To: <emailaddress>
Sent: Thursday, 10 February, 2005 8:45
Subject: Order Completed
Customer,
Your Credit Card has been billed for 2 novelty ids.
Quantity: 2 Arizona novelty ids
Price: $95.00 each
$15.00 US for express handling
Total: $205.00
Shipment in 3 business days to your billing address.
If you did not make this purchase with your credit card, reply to this email filling out the details below for verification purposes and your purchase will be canceled.
Credit Card Billing information’s:
Billing Name:
Billing Address:
Credit Card#:
Expiration:
billing@newphotoid.com
http://www.newphotoid.com
WHOIS details for domain "newphotoid.com":
Request: newphotoid.com
connected to whois.opensrs.net [216.40.33.170:43] ...
Registrant:
Hc Graphics
#322 916 W. Broadway
Vancouver, BC V5Z 1K7
ca
Domain name: NEWPHOTOID.COM
Administrative Contact:
Robinson, Dale drobin@coppervalley.bc.ca
#322 916 W. Broadway
Vancouver, BC V5Z 1K7
ca
+1.2504539525
Technical Contact:
Support, Technical techsupport@homepageuniverse.com
Coppull Enterprise Centre
Coppull, Lancashire PR7 5BW
UK
+44.1257794911 Fax: +44.1257794911
Registration Service Provider:
HomepageUniverse, support@homepageuniverse.com
+44.8457606128
+44.8457606128 (fax)
http://HomepageUniverse.com
HomepageUniverse may be contacted for domain login, DNS changes, and
all general domain support questions.
Registrar of Record: TUCOWS, INC.
Record last updated on 23-Jun-2004.
Record expires on 18-Feb-2006.
Record created on 18-Feb-2003.
Domain servers in listed order:
NS.HOMEPAGENAMES.NET 216.127.78.156
NS2.HOMEPAGENAMES.NET 67.18.182.34
Domain status: ACTIVE
|