| 
 |  | newphotoid.com - Phishing or Joe Job?We were alerted to the following spam by a concerned reader. Someone sent a bogus order confirmation for goods the recipient never ordered and then ask him/her to visit a website and enter his credit card details if he/she wants get the order cancelled. Variants of this have been seen with bogus eBay purchase completion notifications used for credit card data theft.
However, in this case the company website seems to exist since 2003 already. We think a more likely explanation is that some vigilante, who does not like the idea of of US residents being able to buy fake photo IDs in Canada is trying to get this website shut down by making it appear that it is involved in credit card fraud.
 
 
Message example:
 From: <billing@newphotoid.com>To: <emailaddress>
 Sent: Thursday, 10 February, 2005 8:45
 Subject: Order Completed
 
 Customer,
 
 Your Credit Card has been billed for 2 novelty ids.
 
 Quantity: 2 Arizona novelty ids
 
 Price: $95.00 each
 $15.00 US for express handling
 
 Total: $205.00
 
 Shipment in 3 business days to your billing address.
 
 If you did not make this purchase with your credit card, reply to this email filling out the details below for verification purposes and your purchase will be canceled.
 
 Credit Card Billing information’s:
 
 Billing Name:
 Billing Address:
 Credit Card#:
 Expiration:
 
 billing@newphotoid.com
 http://www.newphotoid.com
 
 
 
WHOIS details for domain "newphotoid.com":
 Request: newphotoid.com
connected to whois.opensrs.net [216.40.33.170:43] ... 
Registrant:
 Hc Graphics
 #322 916 W. Broadway
 Vancouver, BC V5Z 1K7
 ca
 Domain name: NEWPHOTOID.COM
 Administrative Contact:
    Robinson, Dale  drobin@coppervalley.bc.ca
    #322 916 W. Broadway
    Vancouver, BC V5Z 1K7
    ca
    +1.2504539525
 Technical Contact:
    Support, Technical  techsupport@homepageuniverse.com
    Coppull Enterprise Centre
    Coppull, Lancashire PR7 5BW
    UK
    +44.1257794911    Fax: +44.1257794911
 Registration Service Provider:
    HomepageUniverse, support@homepageuniverse.com
    +44.8457606128
    +44.8457606128 (fax)
    http://HomepageUniverse.com
    HomepageUniverse may be contacted for domain login, DNS changes, and
    all general domain support questions.
 Registrar of Record: TUCOWS, INC.
 Record last updated on 23-Jun-2004.
 Record expires on 18-Feb-2006.
 Record created on 18-Feb-2003.
 Domain servers in listed order:
    NS.HOMEPAGENAMES.NET   216.127.78.156
    NS2.HOMEPAGENAMES.NET   67.18.182.34
 Domain status: ACTIVE
 
 |