Sunday, April 25, 2010

Craigslist account holders beware - Phishing Alert!

If you have a craigslist account you may have received an email notification about your account suspension. The subject line may read as follows: Account Suspension Notice.

It seems to come from Craigslist.org (accounts@craigslist.org) where in fact it's a spoofed email.



























If you click on the link in email you will be taken to a phishing site: http://www.craigslisites.org/mycc/accounts/myclacc=/index.htm


Not surprisingly the screen you're looking at, seemingly resembles craigslist's account log in page.

DON'T enter your craiglist account info, as it will most likely be compromised!


































The real craigslist account log in page has a valid SSL certificate present on the page:


































Further, if you look up whois info on: www.craigslisites.org you get the following info.
The domain registered at Tucows appears t short-lived, as it was just registered yesterday - see below:

Domain ID:D158970743-LROR
Domain Name:CRAIGSLISITES.ORG
Created On:24-Apr-2010 14:23:28 UTC
Last Updated On:24-Apr-2010 14:23:29 UTC
Expiration Date:24-Apr-2011 14:23:28 UTC
Sponsoring Registrar:Tucows Inc. (R11-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Status:ADDPERIOD
Registrant ID:tuuErU8rzJ0f7Ftt
Registrant Name:John Davie
Registrant Organization:John Davie
Registrant Street1:Yarmouth St, 20
Registrant Street2:
Registrant Street3:
Registrant City:boston
Registrant State/Province:US
Registrant Postal Code:02108
Registrant Country:IT
Registrant Phone:+39.16179876617
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:ardisfragmin318cw@hotmail.com
Admin ID:tubljOcclTkGd8g1
Admin Name:John Davie
Admin Organization:John Davie
Admin Street1:Yarmouth St, 20
Admin Street2:
Admin Street3:
Admin City:boston
Admin State/Province:US
Admin Postal Code:02108
Admin Country:IT
Admin Phone:+39.16179876617
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:ardisfragmin318cw@hotmail.com
Tech ID:tu5dx2oY82l8wI3t
Tech Name:John Davie
Tech Organization:John Davie
Tech Street1:Yarmouth St, 20
Tech Street2:
Tech Street3:
Tech City:boston
Tech State/Province:US
Tech Postal Code:02108
Tech Country:IT
Tech Phone:+39.16179876617
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:ardisfragmin318cw@hotmail.com
Name Server:DNS2.TECHNORAIL.COM
Name Server:DNS.TECHNORAIL.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned













Enough said?