Showing posts with label phishing email. Show all posts
Showing posts with label phishing email. Show all posts

Monday, May 19, 2008

WARNING: From the I.R.S.--NOT!!!

On Sunday, I received the following piece of email purporting to be from the I.R.S.:



Over 130 million Americans will receive refunds as part of President Bush program to jumpstart the economy.

Our records indicate that you are qualified to receive the 2008 Economic Stimulus Refund.

The fastest and easiest way to receive your refund is by direct deposit to your checking/savings account.

Please click on the link and fill out the form and submit before May 19th, 2008 to ensure that your refund will be processed as soon as possible.

Submitting your form on May 19th, 2008 or later means that your refund will be delayed due to the volume of requests we anticipate for the Economic Stimulus Refund.

To access Economic Stimulus Refund, please click here.

[Link removed--should you click on this link, you would be directed to this site: www.smfarms.com/catalog/images/hewlett_packard/.refund.php--definitely not the I.R.S.


Gmail also removed the URL from "click here."]

© Copyright 2008, Internal Revenue Service U.S.A. All rights reserved.
__________________________________________

Despite some of the grammatical errors, this email is very convincing because the sent info specified "service@irs.gov" as the actual sender. To give gmail its just due, the message contained the following warning (Highlighted in bold red):

Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more. [This link shows how you can check your gmails for validity.]

Here is the code I found when I clicked on to "Show original":

Delivered-To: [Deleted]
Received: by [Deleted] with SMTP id u1cs271976wfu;
Sun, 18 May 2008 10:23:31 -0700 (PDT)
Received: by [Deleted] with SMTP id [deleted];
Sun, 18 May 2008 10:23:30 -0700 (PDT)
Return-Path:
Received: from dollman-enterprises.com (mail.dollman-enterprises.com [68.105.207.240])
by mx.google.com with ESMTP id h8si9853846wxd.26.2008.05.18.10.23.29
;
Sun, 18 May 2008 10:23:30 -0700 (PDT)
Received-SPF: fail (google.com: domain of service@irs.gov does not designate 68.105.207.240 as permitted sender) client-ip=68.105.207.240;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of service@irs.gov does not designate 68.105.207.240 as permitted sender) smtp.mail=service@irs.gov
Received: from User ([76.202.29.82]) by dollman-enterprises.com with Microsoft SMTPSVC(6.0.3790.211);
Sun, 18 May 2008 13:23:28 -0400
From: "service@irs.gov"
Subject: 2008 Economic Stimulus Refund ( $1800 )
Date: Sun, 18 May 2008 12:24:23 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: service@irs.gov
Message-ID:
X-OriginalArrivalTime: 18 May 2008 17:23:28.0887 (UTC) FILETIME=[E3464070:01C8B90B]
_______________________________

When it comes to phishing and other email scams, domainers tend to be a fairly savvy group. But I must admit, this particular scam message caught my eye, although I did NOT fall for it.

Just remember: you need only to file your U.S. Federal tax return to receive your economic stimulus check.

Saturday, March 1, 2008

“Anti-Phishing Consumer Protection Act of 2008” (APCPA): The Uncle Lyle and Aunt Colleen Test

"We may be middle America, but we aren't stupid!"
____________________________________

Yesterday's post was total snark--I admit it, but I don't apologize for it. ICA's motives are pretty transparent and not in a good way, either. And the power mongers should realize that not all domainers are going to follow the party line. I'm just more outspoken about it.

However, today I'm setting a different kind of tone by discussing "The Uncle Lyle and Aunt Colleen Test" as it relates to the “Anti-Phishing Consumer Protection Act of 2008” (APCPA).

Background

Uncle Lyle and Aunt Colleen are real people; however, they also represent a cross section of American folks who use computers in their everyday lives. They know nothing about domaining, parking, web design, web marketing, etc.; for them, computers are a necessary part of modern life, not something that comes naturally to them. They are grandparents, after all, and sometimes their grandchildren have to help them set up their hardware and download their software.

In other words, for the average user, using a computer is like driving a car; one can still drive a car or surf the net without having to know the inner workings of either.

Uncle Lyle loves playing around on the internet; he checks out various financial sites, and he also sells and buys on eBay; he's fairly savvy and knows how to work a search engine. He never does direct navigation in his searches and actually scoffs at the idea.

"I Google or Yahoo," he says. "I use keywords, and I would never type in a URL."

I believe that Uncle Lyle represents the beginning of the end of direct navigation, especially now that Yahoo has begun applying fuzzy logic to its searches. (Can Google be far behind?). Another post for another time.

Lyle also loves emailing the family--in fact, he is the glue that keeps the scattered branches together, although he is sometimes guilty of forwarding "cute" spam. Nothing dangerous, though. Had Uncle Lyle been born 40 years later, he might even be a domainer or involved in some kind of web development field. He has that kind of impulsive and curious personality, which can be both good and bad.

On the other hand, Aunt Colleen came to the Computer Age, kicking and screaming; she wanted nothing to do with the new technology. However, Aunt Colleen is a real estate agent (darn good at it, too), and if she wanted to retain her edge, she would need to learn and embrace technology, so she has learned just what she needs to know to conduct business. Even so, Uncle Lyle sometimes has to help her through minor glitches. But when she's not working, she's not on the computer. For her, the computer = business, not pleasure.

“Anti-Phishing Consumer Protection Act of 2008” (APCPA)

Both Uncle Lyle and Aunt Colleen will have a vested interest in seeing this bill passed. Every time they boot up and check their emails, they have to wade through a bunch of spam, much of it smutty and embarrassing. Moreover, they keep getting urgent messages from phishers pretending to be their bank, credit union, etc., thus wasting precious minutes trying to figure what is legit or not.

If a message does look legit, and they link onto the site, they may not see that the URL is a typo of an actual TM business and might inadvertently give out their password to a scammer. These phishers are getting more sophisticated, and actual businesses do email their customers and do provide links for their customers, which, of course, muddies the waters.

I don't know if Uncle Lyle has ever fallen for the El Gordo Lotto type of scheme, but judging from the number of Lotto scam emails I receive, I suspect that plenty of people still fall for this old con game.

Anyone who has lost a lot of money because of an internet scam would praise the “Anti-Phishing Consumer Protection Act of 2008,” busily writing to his or her legislators to pass the bill ASAP. People are just suffering from information overload and want it to stop; this bill seems to offer that possibility.

Here's another thing: Uncle Lyle hates parking pages. Landing on one p*sses him off. At first, he thought they were just an extension of Google or Yahoo!, but he soon discovered that some of the links in these pages led him to some pretty pushy sales sites, complete with pop-ups and pop-unders. When Lyle does a search, he is looking for (1) a company that he knows and trusts or (2) actual content from a reliable source. He is NOT looking for a parking page.

Uncle Lyle still equates domaining with cybersquatting, even after I tried explaining the difference. He gives me a "pass" because he knows and loves me, but I suspect he wonders if I, too, will end up on the dark side. Like it or not, this is the perception.

Uncle Lyle and Aunt Colleen are not even going going to be aware of "the establishment of a parallel domain name infringement enforcement scheme that is more expansive and more onerous than the existing, highly effective remedies available to trademark owners through ICANN’s UDRP process and U.S. trademark law" (ICA page) being slipped into the language of the bill. Even if they did know, their attitude might be, "So what?"

They won't care if you lose your million-dollar domains. Furthermore, they won't care if the value of your domains drops dramatically.

You want to know why? You never gave the Uncle Lyles and Aunt Colleens of the world a reason to care; you have spent the last 15-20 years working and lurking in the shadows. You have ignored obvious problems: the cybersquatters, the phishers, the scammers. Your auction houses continued to auction off TM typo domains, and ICANN has turned a blind eye to the way the domain deletion process has morphed into a cash cow for aftermarket sellers.

You have built your business model on pure greed, ethics be damned.

But now, when your cushy position has been threatened, you have decided to act for the greater good.

Really?

And you really expect support from the average computer user, who, by the way, includes your legislators?

What's more, YOU, yes, YOU have opened a notch for Big Business to sneak in through the legislative back door, and, so they have. They will probably succeed.

I doubt very much if middle America is going to buy into your plight.

Even a few months ago, you might have garnered some outside support for the goals of ICA, before the takeover threat was a reality to your own pricey cyber properties.

But now, ICA just looks like another huge lobbying group, looking out for its own special interests, not for the greater good of the internet.

Uncle Lyle and Aunt Colleen will be able to see through that.

And Big Business will win because the bill, as it stands, will have the support it needs, from both Big Business, who is richer and greedier than domainers, and from middle America who just wants the spam and scams to stop.

To whom do you think your legislators will listen?

Kumbaya.

Thursday, February 14, 2008

WARNING! WARNING! WARNING!

UPDATE! (2-15-2008)

I emailed Snapnames directly from a URL that was on my Snapname account to ask about this email. The suspect email I posted on 2/14 was legit. I received the following email from Snapnames:

Dear Jennifer,

Thank you for contacting Manage.SnapNames.com!

The email was sent to you by SnapNames.com, which is a separate company. I did, however, verify that they did send the email and that it is legit.

I have also forwarded a copy of your email to their marketing department so that they can be aware of your concerns.

If you have any other questions, please let us know.


Sincerely,


Dorothy Placencio
Manage.SnapNames.com Support
Manage@SnapNames.com

Again, thanks to Snapnames for clarifying this so that I could set the record straight here; I don't want to cast a dark cloud on a company doing a legitimate marketing campaign for a client.

Best,
Ms Domainer



BEWARE!

I have just received the following email from what I suspect takes a user to a scam site! Some of the links look real, but the link to make changes is not:

Your SnapNames Account Email Preferences

Dear SnapNames Client [Snapnames would know my name] :

As we continue to grow our services and provide important business tools for you, we continue to expand choices for email notifications.

We respect your privacy and understand that your time is valuable. Therefore, to ensure you receive only email notifications that interest you, please review the available email subscription lists below.

If you choose to be added or removed from a list, please modify your preferences from the email subscription center.


[This takes you to a strange URL, not at all related to Snapnames or Oversee.net. The domain URL is d.exct.net/--To protect readers of this blog, I have deleted the very lengthy subdirectory. exct.net is a marketing firm; the site shows as being "clear," but evidently someone is spamming and scamming from the site.]

Live and Silent Auction Alerts and Announcements.

The two pioneering leaders in domain name auctions, SnapNames and Moniker, have recently joined forces as subsidiaries of Oversee.net. As a result, you now have an unprecedented inside track in the buying and selling of premium domain names.

SnapNames Product and Service Announcements.

SnapNames is the largest daily resale marketplace for domain names, closing over 10,000 auctions a month at price points for all budgets. Search SnapNames inventory daily to find investment to business quality domains.

Moniker Product and Service Announcements.

Moniker offers a full range of services to help you manage your domain name assets. From registration and renewals, to appraisals and escrow services, Moniker is committed to your satisfaction.

DOMAINfest Event Announcements.

DOMAINfest is the industry's premier conference and marketplace, held two to three times per year. With attendees from all over the world, and from all experience levels, these events are the perfect place to network and learn.

DomainSponsor Product and Service Announcements.

DomainSponsor is an industry leader in domain name monetization, providing cutting-edge, patented optimization technology to maximize your domain earnings.

Thank you for your business!

The SnapNames Team

support@snapnames.com [If you're not sure, type this email address directly into your sender box. Do NOT follow the link]

SnapNames, Moniker, DomainSponsor and DOMAINfest are members of the Oversee.net family of companies. Oversee.net is a technology-driven leader serving domain name customers at all levels and at all steps in the life cycle of domain name management, from procurement to monetization to sales.

This email was sent to: [deleted]

This email was sent by: SnapNames

1600 SW Fourth St. Suite 400 Portland, OR 97201 USA


We respect your right to privacy - view our policy


Please be careful when linking to sites embedded in emails.

If, by chance, this is a bonafide site, then Oversee/Snapnames need to do a better job of writing email messages to their consumers.

Best,

Ms Domainer