Phishing from the Ghetto
I got yet another phishing email today:
Strange thing about this one though, the "click here" linked to a site hosted by an American company; Global Net Access, LLC. I ran another whois search of the bogus site linked in the email, and got this info:
Domain Name:BRAVESOULCOLLECTIVE.ORG
Created On:24-Feb-2006 04:34:44 UTC
Registrant Name:Monte Wolfe
Registrant Organization:[empty]
Registrant Street1:422 Butternut Street NW Apt #13
Registrant City:Washington
Registrant State/Province:DC
Registrant Postal Code:20012
Registrant Country:US
Registrant Phone:+1.2022914599
Registrant Phone Ext.:1111
Registrant FAX:+1.2022914599
Registrant FAX Ext.:
Registrant Email:mjw_mjb@yahoo.com
Admin Name:Monte Wolfe
Admin Email:mjw_mjb@yahoo.com
Due to the wonders of the Interwebs, we can see this:
Sho' nuff looks like da' hood to me. Maybe I'm being too judgmental though, and maybe Banko de America has changed the location of their corporate offices to better underrrrstaaaaand their new customer base?
I decided to send an email to GNAX about this:
-T.M.
Strange thing about this one though, the "click here" linked to a site hosted by an American company; Global Net Access, LLC. I ran another whois search of the bogus site linked in the email, and got this info:
Domain Name:BRAVESOULCOLLECTIVE.ORG
Created On:24-Feb-2006 04:34:44 UTC
Registrant Name:Monte Wolfe
Registrant Organization:[empty]
Registrant Street1:422 Butternut Street NW Apt #13
Registrant City:Washington
Registrant State/Province:DC
Registrant Postal Code:20012
Registrant Country:US
Registrant Phone:+1.2022914599
Registrant Phone Ext.:1111
Registrant FAX:+1.2022914599
Registrant FAX Ext.:
Registrant Email:mjw_mjb@yahoo.com
Admin Name:Monte Wolfe
Admin Email:mjw_mjb@yahoo.com
Due to the wonders of the Interwebs, we can see this:
Sho' nuff looks like da' hood to me. Maybe I'm being too judgmental though, and maybe Banko de America has changed the location of their corporate offices to better underrrrstaaaaand their new customer base?
I decided to send an email to GNAX about this:
To Whom It May Concern:
If you wish additional information, I would be happy to forward you this email, or send you the HTML source.
Regards,
Thomas Masterson
-T.M.
posted by Venjanz at 6:52 AM
1 Comments:
It's amazing to me, these bogus bank emails. They obviously put a lot of effort into making them seem legit, but EVERY single one I've seen has typos. This one is no exception:
"Your account might be place on restricted status."
"...meaning that you may no longer send money from your account until you have reactive your billing information on file."
Its unbelievable. If you are going to try to pull something like this off, the LEAST you could do is proof read.
Post a Comment
<< Home