Anti-Phishing Working Group - Stop Phishing and Email Scams

Anti-Phishing Working Group

Phishing Archive

Report Phishing

APWG Member Site

APWG Sponsors:

Wells Fargo Bank "Please verify your Wells Fargo account"
9-Mar-2004

Summary

Email title:	"Please verify your Wells Fargo account"
Scam target:	Wells Fargo account holders
Email format:	HTML email
Sender:	Wells Fargo Customers Support [wells@WellsFargo.com]
Sender spoofed?	Yes
Scam call to action:	"Please note that if you don't verify your ownership of account in 24 hours we will block it to protect your money."
Scam goal:	Capture bank account information.
Call to action format:	URL link
Visible link:	http://www.wellsfargo.com/verify/
Called link :	http://68.104.255.61:82/verify/
Resolved URL:	http://68.104.255.61:82/verify/ (Site inactive as of 10-Mar-04)

E-mail

This is not a particularly sophisticated attack, as it does not include any Wells Fargo branding to fool the recipient.

Web/Call to Action

Website resolved link:	http://68.104.255.61:82/verify/ (Site inactive as of 10-Mar-04)
Reverse DNS Lookup:	IP Address 68.104.255.61 resolves to: ip68-104-255-61.ph.ph.cox.net
WHOIS results:	No match for domain "IP68-104-255-61.PH.PH.COX.NET".

About Us | Contact Us