Elea Dora/Lyssa Calleigh phishing via outlook.com

Post scam emails to warn other rental owners, or if you are not sure if an enquiry is genuine, put it up here and see what others think.
Phoebe
Posts: 17
Joined: Mon Jul 01, 2013 9:19 pm
Location: cortona, tuscany

Elea Dora/Lyssa Calleigh phishing via outlook.com

Post by Phoebe »

"We are interested in one week in September. Can you please let me know which week you have available and how much is it. Also, can you please let me know the exact location where the villa is?"

rest of enquiry apart from name and e-mail address (as in title) not specified. Thought it was a scam, but english near perfect and I had free weeks in September so I replied from my spam e-mail account.

Today received;

"Hi,

Thank you for your reply!
I am glad that is available.
Please find attached the Enquiry Form where you can find all the information you need (our full names - 4 persons, address, phone number contact, email address and the period that interests us.
I hope everything is in order and I wait to inform me the next step to reserve the villa.
Kindest Regards,
Sent from my iPhone"

along with a smart looking "Booking.pdf" attachment. I hovered over it to reveal a very long "address" with manningmotorinn.com in it and did not open. I presume it is nasty- please what should I do to get this closed down?

Thanks,

Phoebe
Looking for an easy life
User avatar
kevsboredagain
Posts: 3207
Joined: Sat Jan 20, 2007 9:32 am
Location: France
Contact:

Post by kevsboredagain »

Strange one. The domain was first created in 2009. It uses Korean/Canadian servers so my first step would be to contact the site below and say you have a suspected phishing attempt from a domain using their servers.
http://www.nbtus.com/?language=en

Seems to ring alarm bells already here:
http://sitecheck.sucuri.net/results/www ... torinn.com

and can be also reported here
http://www.phishtank.com/phish_detail.p ... id=3056886


Domain Name: MANNINGMOTORINN.COM
Registrar: TUCOWS DOMAINS INC.
Sponsoring Registrar IANA ID: 69
Whois Server: whois.tucows.com
Referral URL: http://www.tucowsdomains.com
Name Server: NS1.NBTUS.COM
Name Server: NS2.NBTUS.COM
Status: ok http://www.icann.org/epp#OK
Updated Date: 16-may-2014
Creation Date: 12-jun-2009
Expiration Date: 12-jun-2015
Post Reply