Sunday, May 24, 2009
I received a message today which had "wwww whiteflash be". Its a phishing scam to extract Facebook login information. Searched twitter and found out multiple domains being used for the scam. Beware of entering any information on the following sites:
whiteflash.be
mymarket.be
vispace.be
goldbase.be
greenbuddy.be
silvertag.be
picoband.be
Google and other anti-phising services are yet not updated with these URL's to warn users. In general beware of any links that end with .be. The pages look like this:
These sites are hosted in China on IP: 211.95.78.98, with the following Whois record:
Domain: picoband
Status: REGISTERED
Registered: Fri May 22 2009
Licensee:
Not shown, please visit www.dns.be for webbased whois.
Agent:
Name: 1API GmbH
Website: www.1api.net
Nameservers:
ns1.everydns.net
ns2.everydns.net
ns3.everydns.net
ns4.everydns.net
If you have already entered your login information in any of these websites, I would suggest that you change your passwords immediately. Have a safe browsing experience!