New Neteller phishing scam (a fraudulent email)

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Data
    SBR MVP
    • 11-27-07
    • 2236

    #1
    New Neteller phishing scam (a fraudulent email)
    A heads up. I received the following email last night. That email is an attempt to steal my Neteller account info. The link in this email leads to neteller-support.com website. That website was set up just yesterday, see info below.
    ________________________________________ _____
    HTML clipboard
    p { font-family: Arial; } NETELLER
    Dear Neteller Customers,
    Our Technical Service department has recently updated our online services, and due to this upgrade we sincerely call your attention to follow below link and reconfirm your online account details. Failure to confirm your NETELLER account details will permanently suspend you from accessing your account online.
    https://www.neteller.com/account/index.jsp?action=update
    We use the latest security measures to ensure that your NETELLER account is safe and secure. The administration asks you to accept our apologies for the inconvenience caused and expresses gratitude for cooperation.
    Thanks for choosing NETELLER
    NETELLER Customer Service
    support@neteller.com
    --------------------------------------------------
    This is an automatic message. Please do not reply.


    ________________________________________ ____


    WHOIS information for neteller-support.com :
    [Querying whois.internic.net]
    [Redirected to whois.nic.ru]
    [Querying whois.nic.ru]
    [whois.nic.ru]
    % By submitting a query to RU-CENTER's Whois Service
    % you agree to abide by the following terms of use:
    % http://www.nic.ru/about/servpol.html (in Russian)
    % http://www.nic.ru/about/en/servpol.html (in English).

    Domain name: NETELLER-SUPPORT.COM
    Name Server: ns1.neteller-support.com 94.75.233.1
    Name Server: ns2.neteller-support.com 94.75.233.1
    Creation Date: 2009.12.12
    Expiration Date: 2010.12.12

    Status: DELEGATED

    Registrant ID: JDQXUB9-RU
    Registrant Name: Stefan Kurth
    Registrant Organization: Stefan Kurth
    Registrant Street1: 38 Avenue Street
    Registrant City: New York
    Registrant State: NY
    Registrant Postal Code: 10023
    Registrant Country: DE

    Administrative, Technical Contact
    Contact ID: JDQXUB9-RU
    Contact Name: Stefan Kurth
    Contact Organization: Stefan Kurth
    Contact Street1: 38 Avenue Street
    Contact City: New York
    Contact State: NY
    Contact Postal Code: 10023
    Contact Country: DE
    Contact Phone: +1 800 3043002
    Contact E-mail: Stefan@hanwells.net

    Registrar: ANO Regional Network Information Center dba RU-CENTER
  • JerseyShop101
    Restricted User
    • 09-04-08
    • 2704

    #2
    This guy uses the same Stefan Kurth name in other scams:

    Hi All,
    I don't know if others have encountered this or not but there is an email doing the rounds that claims to be from Adobe & offers a new pdf reader.
    Beware – this is malware. Do not click the link, download or install anything from this email.
    The email:
    Reply-To:
    PDF Reader 2009 – New Version for Windows and Mac
    The latest PDF Reader: Open, Edit & Create PDF Files

    What's new in this version :
    -Open, edit and view all PDF files.
    -Enhanced performance with faster loading and zooming.
    -Collect your data and combine it into a high quality document.

    Thank you for choosing us, the worldwide leader in PDF Reader Solutions.
    Best Regards,
    Adam King
    PDF Reader 2009
    PDF Reader| local #7 | NY | 10023 | USA
    For any further information please contact us at:

    This is definitely NOT from Adobe. Adobe does not have a .info domain.
    *****
    From whois:
    Domain ID29680403-LRMS
    Domain Name:ADOBE-PDF-TODAY.INFO
    Created On:13-Sep-2009 17:22:05 UTC
    Last Updated On:13-Sep-2009 17:22:11 UTC
    Expiration Date:13-Sep-2010 17:22:05 UTC
    Sponsoring Registrar:ANO Regional Network Information Center dba RU-CENTER (R383-LRMS)
    Status:CLIENT TRANSFER PROHIBITED
    Status:TRANSFER PROHIBITED
    Registrant ID:JDQXUB9-RU
    Registrant Name:Stefan Kurth
    Registrant Organization:Stefan Kurth
    Registrant Street1:38 Avenue Street
    Registrant Street2:
    Registrant Street3:
    Registrant City:New York
    Registrant State/Province:NY
    Registrant Postal Code:10023
    Registrant CountryE
    Registrant Phone:+1.8003043002
    Name Server:NS1.ADOBE-PDF-TODAY.COM
    Name Server:NS2.ADOBE-PDF-TODAY.COM
    *****
    Adobe's whois:
    Registrant:
    Adobe Systems Incorporated
    345 Park Avenue
    San Jose, CA 95110
    US
    Domain Name: ADOBE.COM
    Administrative Contact:
    Admin, DNS
    345 Park Avenue
    San Jose, CA 95110
    US
    +1.4085366777 fax: +1.4085374000
    Technical Contact:
    Adobe Systems Incorporated
    345 Park Avenue
    San Jose, CA 95110
    US
    408-536-6000
    Record expires on 16-May-2012.
    Record created on 14-Nov-2003.
    Database last updated on 28-Sep-2009 04:18:09 EDT.
    Domain servers in listed order:
    ADOBE-DNS-3.ADOBE.COM 192.150.22.30
    ADOBE-DNS.ADOBE.COM 192.150.11.30
    ADOBE-DNS-2.ADOBE.COM 192.150.11.247
    Comment
    • JerseyShop101
      Restricted User
      • 09-04-08
      • 2704

      #3
      Data,

      You should, should take the links out in case someone clicks it accidentally.
      Comment
      • 1st and Ten
        SBR Hall of Famer
        • 11-13-09
        • 5131

        #4
        Got the same thing...not a Neteller user so I knew it was a scam.Link they provided was dead.
        Comment
        • aceking
          SBR MVP
          • 09-07-05
          • 4782

          #5
          thanks , low life scums from Nigeria.
          Comment
          • stevek173
            BARRELED IN @ SBR!
            • 03-29-08
            • 27598

            #6
            Its interesting to see sometimes what they prey on and what they don't - I pretty much don't use my yahoo accounts anymore but I see them bombed with this Nigerian crap; I have never seen their garbage in my Gmail accounts.

            They tend to get sneakier and sneakier.

            Jerkoffs.
            Comment
            • hhsilver
              SBR Hall of Famer
              • 06-07-07
              • 7380

              #7
              thanks for posting this
              Comment
              • DiggityDaggityDo
                SBR Aristocracy
                • 11-30-08
                • 81450

                #8
                pure scum, boys.
                Comment
                • wtf
                  SBR Posting Legend
                  • 08-22-08
                  • 12983

                  #9
                  got it myself, entered in password field; pleasesuckmycock

                  looks legit, i am sure they will get some poor unsuspecting users with empty accounts
                  Comment
                  • username474
                    SBR Sharp
                    • 01-09-09
                    • 480

                    #10
                    I got a similar email from paypal two weeks ago.
                    Comment
                    • blueghost
                      SBR MVP
                      • 09-11-09
                      • 1715

                      #11
                      thx for the post..probably saved a couple people like me a big headache thx
                      Comment
                      • Irish Lumberjack
                        SBR MVP
                        • 12-04-07
                        • 2086

                        #12
                        thanks for the heads up
                        Comment
                        • Brock Landers
                          SBR Aristocracy
                          • 06-30-08
                          • 45359

                          #13
                          neteller LOL
                          Comment
                          Search
                          Collapse
                          SBR Contests
                          Collapse
                          Top-Rated US Sportsbooks
                          Collapse
                          Working...