A RW organization that steals?

[Cassandra]

I know, that's redundant but a phishing email arrived in my inbox with this link to click:
http://mail.thebelieffoundation.org/images/nafc.htm
From this organization out of Texas?
http://www.thebelieffoundation.org/Index.html

Is there anyone in the Federal government I could report this to? Or would Bushco just give them an additional grant because they're so obviously hard up?

[hobbit709]

1. I have fun with phishers

I fill in the blanks with made up numbers, for name I list george bush, expiration date is 01/2009, mother's maiden name I say demonspawn, etc. Make up your own and have fun. I believe in drowning the phishers with enough phony data that it makes it harder for them to find the real data from the gullible that send it in.

Added-the first link is phony(the phisher) the second one real.

[Cassandra]

2. I did that...

and also decided to alert the NAFCU, since they have an abuse contact email. I think I said to the phisher that God knows you're a thief and used 666 and fuck you. That part's fun but who are these scummy Belief Foundation people that they're sending out that email?
Filling in the form and submitting, BTW, sends you to the first page of the NAFCU site, supposedly so you won't know you've been scammed but also gives you access to NAFCU's abuse email. Dummies. Whenever I get one of those emails I run my cursor over the links to see where it goes.

[hobbit709]

3. I doubt the belief people had anything to do with it

If you look at the links, the belieffoundation.org is the real one. The other link goes to mail.belieffoundation.org-different domain and just a front for the scammer.

[Tandalayo_Scheisskopf]

4. It might be a server hijack.

That said, "mail.belieffoundation.org" is not a different domain, but a sub-domain. Which probably resides on their mail server. Unless, of course there has been some DNS hijacking.

Whoever their Administrator is, he or she is either incredibly lazy or mind-roastingly incompetent. Or, they have identified, as an organization, a new revenue stream opportunity.

Hmmm...Trace stops at OpenDNS. No whois. Very fishy indeed.

On edit, rechecked. Hosted from Broadwing Communications in Austin TX. Both the domain and sub-domain come back to the same IP address, 67.97.244.244

Broadwing is a pretty well regarded hosting company http://www.broadwing.com/ Who is now owned by Level3, one of the biggest players out there.

My opinion is that there is a real possibility that this phishing site is no accident. Or server hack.

[Cassandra]

5. A pious organization out of Texas...

even Austin, always makes me wonder.