Google Anaytics spoof email.

[Peter]

The following spoof email seems to be doing the rounds at the moment:-

Renew Your Account Now!

Dear Member,

This is your official notification from Google Inc. that the service(s) listed below will be deactivated and deleted if not renewed immediately.

As the Primary Contact, you must renew the service(s) listed below or it will be deactivated and deleted.

Renew Now your Google AdWords services.

SERVICE: Google AdWords
EXPIRATION: Wed, 5 Nov 2008 08:12:00 -0500

Thank you for using Google Inc service.
We appreciate your business and the opportunity to serve you.

Google AdWords Service .


Note : Your Google AdWords Password is NOT your Google Email password!


© 2008 Google

------------------------------------------------------------------
This message was sent from a notification-only email address that does not accept incoming email. Please do not reply to this message. If you have any questions, please visit the Google AdWords Help Centre at https://adwords.google.com/support/?hl=en_GB to find answers to frequently asked questions and a 'contact us' link near the bottom of the page. ----------------------------------------------------------------

The text "Renew Now your Google AdWords services." is linked to a domain made to look like a google URL:-

adwords.google.com.session-10638518903829513563.81051357156093419216.ssl97.ru

As you can see the actual domain is ssl97.ru and the subdomain is made to look like a google session id.

 

[intheflow]

crazy

Wow, thanks for the 'heads up'! Nice work deciphering the URI and determining the actual domain. They could do a ton of damage to a persons bank account if they phished the adwords info.

 

[Peter]

Wow, thanks for the 'heads up'! Nice work deciphering the URI and determining the actual domain. They could do a ton of damage to a persons bank account if they phished the adwords info.

Adsense and adwords accounts get hacked regularly unfortunately usually because of these types of things but there has been speculation that there are glitches in adwords that allows hackers into your account as there are a few well versed adwords users who have had their accounts accessed and used to promote other sites with high click prices and are adamant they never fell for such spoofs.

 

[weblord]

reported it to http://www.google.com/safebrowsing/report_phish/
sites down now.

 

[youbetcha1018]

Thanks for informing us here.Everybody should have a knowledge on this.