Phishing - The BlueMountain.com Ecard Email Scam
Redirects to spoofed (Fake) website: LACNIC
You may have received an email like the one below that looks very authentic,
like it came from BlueMountain.com. This email was not sent by BlueMountain.com; BlueMountain.com is a victim as well. If you receive
an email similar to the one below, DO NOT click on the link, and do not enter
any information on the forms there. There is no ecard greeting card waiting for
you - just a scam!
The website that the link leads to is a spoof; a fake website, not created by
BlueMountain.com. It goes to LACNIC, not BlueMountain.com! When you enter the information they ask for, you will simply be
handing the thieves the keys to your bank accounts. That is how spoofing
and phishing works.
Remember, no reputable business would send you
an email requesting your personal account information. Any such email you
receive asking for this information should be considered phony and brought to
the attention of the business being 'phished'.
Anytime you need to go to a website for your bank, credit card companies or
other personal, financial or confidential information; do not follow a link in
an email; just type their address in your browser directly (such as
www.BlueMountain.com.com )
Below are actual phishing emails that started circulating in early 2007.
We have put a warning over the links to the phisher's website.
Subject: You've received a greeting ecard from a friend!
From: bluemountain.com [
bvyri@gerotron.com ]
Good day.
Your friend has sent you a greeting ecard from bluemountain.com.
Send free ecards from bluemountain.com with your choice of colors, words
and music.
Your ecard will be available with us for the next 30 days. If you wish to
keep
the ecard longer, you may save it on your computer or take a print.
To view your ecard, choose from any of the following options:
--------
OPTION 1
--------
Click on the following Internet address or
copy & paste it into your browser's address box.
http://190.11.0.44/?713076a3db573383e1a7a85955ab65e8517a32e
--------
OPTION 2
--------
Copy & paste the ecard number in the "View Your Card" box at
http://190.11.0.44/
Your ecard number is
713076a3db573383e1a7a85955ab65e8517a32e
Best wishes,
Webmaster,
bluemountain.com
The IP address resolves to:
OrgName: Latin American and Caribbean IP address Regional Registry
OrgID: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
You can be pretty certain that the real BlueMountainCards has nothing to do
with this and doesn't operate out of the carribean!
For more information about phishing, see
this page.
| 
