Spoof/Phish alert on Namebright Privacy screen- weareborg . info

Discussion in 'Warnings and Alerts' started by offthehandle, Nov 26, 2017.

Replies:
0
Views:
145

  1. offthehandle

    offthehandle Nunca creer sin informar de todo. Business Account VIP

    Joined:
    Jul 30, 2016
    Posts:
    1,403
    Likes Received:
    2,326
    nb-spoofer.jpg
    For those of you using Namebright privacy, as emails accumulate from all the SEO and other crap, you get periodic courtesy emails notifying you to check them from Namebright. Normally they are just junk and spam, I have not seen anything like this yet.

    weareborg . info ---- is the domain which the link if clicked is redirected.

    However, I found a new one started a few days ago- which is I believe malicious. I have advised [email protected]

    I found on their spam screening link that someone is attempting to fool you into clicking on a link about email connectivity being changed and spoofing their system.

    The email header origin is this:

    Email Security Team <[email protected]> Servermail.com registered at Dynadot and using Uniregistry Nameservers.link.

    If you examine this malware/phishing or whatever link location it resolves to we are borg dot info:

    http://www. weareborg. info/De-Activation/ De-Activation/ English/open/[email protected]

    Billing is Hosted at BlueHost

    We are Borg dot info: is listed as this email: [email protected]

    Registry Registrant ID: C152507780-LRMS

    Admin Name: Kristoffer Avaldsnes Gilje
    Admin Organization: We Are BORG
    Admin Street: JOACHIM LAMPES VEI 16A
    Admin City: Bergen
    Admin State/Province:
    Admin Postal Code: -
    Admin Country: NO
    Admin Phone: +47.95555043


    CM Capture 218.jpg

    CM Capture 219.jpg
     
    Last edited: Nov 26, 2017
    The views expressed on this page by users and staff are their own, not those of NamePros.

Want to reply or ask your own question?

It only takes a minute to sign up – and it's free!
Topics / Tags:

Share This Page

Loading...