Phishing de Cuentas Gmail y Google en general
Mayo 9, 2008
Si te ha llegado un mail diciendo que google te dará hosting gratis de su nuevo servicio “google-webs.com”
NO Introduscas tu contraseña ya que esto es falso.
El mail me llegó hace como una hora, estuve apunto de dar click y enterarme de qué se traba. lo bueno es que apesar de la falta de dormir, justo apunto de escribir mi contraseña pensé… -mmmm. ¿po rqué google usaría un dominio con un guión? ¿ por qué no lo llamaría “webs.google.com” en fín mil cosas, así que decidi escribir una contraseña incorrecta, y el sistema como si me hubiera reconocido me redireccionó a https://www.google.com/a/help/intl/en/admins/editions_spe.html el sistema de servicios de google, en el cual no existe ningun servicio de hosting gratuito. Después investigué el propietario del dominio google-webs.com y oh sopresa… ¡Sí ! adivinaron. “malditos chinos spamers”
Bueno, son las 5:39 am, muero de sueño y mañana terminaré este posts con imagenes y todo… y porsupuesto una revisada a la ortografía. Les dejo el “whois” del dominio , una imágen de como se ve el mail y el e-mail original.
Record created:2008/5/1
Record expired:2009/5/1
Domain servers in listed order:
ns1.dns-diy.net ns2.dns-diy.net
Administrat:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– go3259749318001@absolutee.com
Technical Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– go3259749639402@absolutee.com
Billing Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– go3259749961403@absolutee.com
Registrant Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– go3259749834004@absolutee.com
Received: by 10.140.135.8 with SMTP id i8cs96783rvd;
Thu, 1 May 2008 02:45:46 -0700 (PDT)
Received: by 10.64.53.7 with SMTP id b7mr3802901qba.1.1209635144923;
Thu, 01 May 2008 02:45:44 -0700 (PDT)
Return-Path: <projetg@explorer.websitewelcome.com>
Received: from gateway11.websitewelcome.com (gateway11.websitewelcome.com [69.93.164.12])
by mx.google.com with SMTP id q14si3630954qbq.33.2008.05.01.02.45.44;
Thu, 01 May 2008 02:45:44 -0700 (PDT)
Received-SPF: pass (google.com: domain of projetg@explorer.websitewelcome.com designates 69.93.164.12 as permitted sender) client-ip=69.93.164.12;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of projetg@explorer.websitewelcome.com designates 69.93.164.12 as permitted sender) smtp.mail=projetg@explorer.websitewelcome.com
Received: (qmail 20379 invoked from network); 1 May 2008 09:46:58 -0000
Received: from explorer.websitewelcome.com (70.85.145.130)
by gateway11.websitewelcome.com with SMTP; 1 May 2008 09:46:58 -0000
Received: from projetg by explorer.websitewelcome.com with local (Exim 4.68)
(envelope-from <projetg@explorer.websitewelcome.com>)
id 1JrVME-0004eS-Fl
for oscar.rovira@gmail.com; Thu, 01 May 2008 04:45:42 -0500
To: oscar.rovira@gmail.com
Subject: Google FREE Webhosting !
From: Google Team <mail-noreply@googlemail.com>
Reply-To: mail-noreply@googlemail.com
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <E1JrVME-0004eS-Fl@explorer.websitewelcome.com>
Date: Thu, 01 May 2008 04:45:42 -0500
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - explorer.websitewelcome.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [36194 36198] / [47 12]
X-AntiAbuse: Sender Address Domain - explorer.websitewelcome.com
Hello,
Dear Gmail customer
After our free email services we offer you to sing up for our free hosting services.
This service currently is in beta test.
And we choose you to test this services and report us any bug you may find.We give you unlimited webspace on your own domain name you must only change your dns services to ns1.google.com and ns2.google.com and enter your domain name in our special control panel.
Our servers are linux based and we support PHP, SSL (Secure Shell),FTP,Stats,CGI,Perl,Unlimited email address and finaly 500 MySQL Database.
Notice :
Dont sell this invitation code in auction website that may cause we disable your account in the future.
Your invitation code :
http://google-webs.com/cvw2p99ah7dtV1bFJyacSHUQcdROroysWeaIkkATEXaZUJ7n6wwXjzlyFVEYfJyB74Y66qln8VSP1Njjbp4zW/
Need help ? Hosting-Support@google.com
Google Webhosting Team
Archivado en: Uncategorized |