Facebook Phishing Scam with Canadian Connection
One of today's widely distributed junk emails is a Facebook phishing scam - Subject: Facebook Update Tool - claims that "Facebook will be implementing a new login system that will affect all Facebook users." and directs recipients to a supposed Facebook login page:
http://www.facebook.com.oooxzkli.eu/(and so on)
While a quick look might suggest this is really pointing to Facebook, in reality the domain name is oooxzkli.eu - and is supposedly registered as of Nov 3, 2009, to one Mauricette Gagnot of Charavines, France.
The registrar is DomainPeople.com of Vancouver, BC, and the registration was done by Hostway.com on behalf of one of their customers. And this is where the misdirection begins.
DomainPeople.com claimed the domain wasn't working. "It's deleted," the unnamed customer service rep told me.
"Um, no it isn't," I told her. "It's very much alive here. Are you confused or lying?"
"I'll transfer you to our customer service department. They can give you that information."
Loud music. Finally, another unnamed customer service rep. But this one's from Hostway. In Bulgaria.
"I can't find that domain name in my system," he says.
"Well, I can sure find it online and it's leading me right back to you," I tell him. He puts me on hold again to, he claims, have another look.
Meantime, I look up Hostway.com and find their media relations contacts:
Hostway Media Relations 866-467-8929 publicity@hostway.com
While I'm hold, I call that number. Turns out it's their main customer service and billing number and a sales rep will be with me in 10 minutes.
The Bulgarian customer service rep comes back and tells me the domain has been deleted.
"Then why can I see it live from here? Are you confused or not telling the truth? This is one of your customers, correct?"
"I cannot provide you with that information," he says.
"So connect me with your media relations department please."
"I am not aware of this department."
"It's on your web site. I'm looking at it. You are either confused or not being truthful. I would like to speak to your supervisor."
"I am afraid my supervisor is not going to take your call."
"So what's your name?"
"That website was closed for forgery," he says.
"Then why am I still looking at it?"
"I can't see it from here."
Click...line goes dead.
Great. No wonder we're awash in spam, online fraud, phishing attacks and the like. With friends like Hostway.com & DomainPeople.com, don't expect much improvement in the slimefest that much of the online world is becoming.
-G
PS - More than half an hour since this was first posted and, despite their claims to the contrary, the site is still alive and well thanks to Hostway.com and DomainPeople.com
