New Facebook Phishing Scams: Beware of .at and .be Domain Names
Posted on May 25th, 2009 in fake account, phishing scams | No Comments »
There is a new wave of phishing scams that targeted Facebook users for the past few days and probably you’ve heard of this. It started with the phishing sites that registered under .at (Austria) and later the .be (Belgium) domain names. For this purpose, I’ve compiled a list of these phishing sites, and whenever you came across it in your Facebook email messages, do not click on the URL links.
A common trick is that all of these phishing scams start from a Facebook message with an aim to trick Facebook users to click on the URL links. In order to lure users to click on these links, all the subject line of the emails is either “Look at This”, “Hello” or “Check” following by one of the .at or .be domain names listed below.
This wave of phishing scams garnered much attention in Facebook since there are users who fail for the scam, lost their Facebook login details as well as the new cycle continues as the cybercriminals started using their accounts to send emails to their friends.
Picture: Phishing site; noticed that there is no Facebook logo in the header of the site

WARNING: DO NOT click links to the following sites:
Areps.at
Bests.at
Brunga.at
Kirgo.at
Nutpick.at
Atomclub.be
Bestspace.be
Bitclan.be
Databus.be
Dynasale.be
Goldbase.be
Greenbuddy.be
Indigoline.be
Linkteria.be
Mymarket.be
Orangefan.be
Picoband.be
Pinkamigo.be
Redbuddy.be
Redfriend.be
Silvertag.be
Sweeter.be
Vispace.be
Whiteflash.be
Whitemart.be
Nevertheless, the good news is that Facebook has taken action and blocked all of the outgoing links to the aforementioned phishing sites, while Firefox browser has also blocked its users from accessing to the above sites as well.
