PDA

View Full Version : 網上銀行.biz (InternetBank.biz) Fraudulent website alert

MDM
13th August 2010, 06:02 PM
The subject domain name is reported today by Hong Kong Monetary Authority to be a fraudulent website which is similar to a bank website http://www.winglungbank.com. The fradulent site even 'gives advice' on how to avoid being scammed e.g. not to login the 'bank' site thru email link.

http://www.info.gov.hk/gia/general/201008/13/P201008130258.htm

網上銀行.biz xn--fhqs57ixwgrsk.biz

The owner per whois looks familir to us, any idea of who he/she is?
MDM
13th August 2010, 06:09 PM
Same thread posted twice, mod pls remove this one thanks.

http://www.idnforums.com/forums/26918-%E7%B6%B2%E4%B8%8A%E9%8A%80%E8%A1%8C-biz-internetbank-biz-fraudulent-website-alert.html
tee1
13th August 2010, 06:51 PM
no idea on the whois. not a good way for .biz to get publicity.:down:
alpha
13th August 2010, 07:56 PM
The owner per whois looks familir to us, any idea of who he/she is?

look here (http://www.idnforums.com/forums/7688-%E6%9D%B1%E5%A4%A7%E5%92%8C-com-higashi-yamato.html), same email address quoted in the thread as on the whois record (http://www.idntools.com/%E7%B6%B2%E4%B8%8A%E9%8A%80%E8%A1%8C.biz) of the domain in the title of this thread
alexd
13th August 2010, 08:43 PM
If you look at the source code for that .biz domain - you will see that it actually loads the real site up inside a frame.

The source code is as follows....
<head><title>Min seje side!</title><meta name="Keywords" content="keyword,keyword2,keyword3"><meta name="Description" content="Min seje side!"></head><frameset cols="100%"><frame name="gratisdns" frameborder="0" framespacing="0" framepadding="0" src="https://www.winglungbank.com/html/CnNbMain.html"></frameset>

The page that loads up in the frame can be found at - https://www.winglungbank.com/CnNbMain.html

No idea if the IDN site was set up for scamming purposes, or for an honest reason - such as to show the bank site for anyone typing in the term. The fact that the domain is with a .biz extension does give that "Suspicious" look to it - but it would be interesting if the owner of that site is indeed a member here and they can share an explanation with us.

Alex
MDM
14th August 2010, 03:33 AM
No idea if the IDN site was set up for scamming purposes, or for an honest reason .... but it would be interesting if the owner of that site is indeed a member here and they can share an explanation with us.

Alex

That's the main purpose we post the news here.