• Home
  • Domains
  • Internet & Tech
  • Security & Privacy
  • Google & Search
  • Editorial Praise
  • Contact

Strategic Revenue - Domain and Internet News

Internet news authored by John Colascione

Register Domain Names

  • Isn’t Print Dead?
  • Killer Acquisition
  • New gTLD Death
  • Online Censorship
  • Semantic Indexing
  • You’re A Loser
You are here: Home / Privacy Issues / Amazingly Convincing Facebook Phishing Scam Takes Place on Facebook.com Itself

Amazingly Convincing Facebook Phishing Scam Takes Place on Facebook.com Itself

February 8, 2021 By John Colascione Leave a Comment

*** Here Is A List Of Some Of The Best Domain Name Resources Available ***

Register Domain Names

PALM BEACH, FL – I have been reviewing and writing about email phishing scams for years and I have seen a ton of them, from outright laughable in their easy discoverability to incredibly convincing, but this latest one I must write about because its one of the most convincing I have ever seen, and it has been happening for over a year now.

I know it well as I once fell for it.

The reason this is one of the most convincing I’ve ever seen is because unlike most phishing schemes which A) originate in email and B) bring you to a fake website, this one brings you to an authentic site, Facebook.com, and tricks you through a secondary landing page (part C – the third phase) which is only displayed after your guard has already been let down by evaluating you are on the authentic site, where, unfortunately, you are receiving the ‘third-stage’ of the scam. Why Facebook continues to allow these ‘notes’ sections to be used is beyond me.

Here is how it goes.

You receive an email with a link to Facebook regarding a copyright violation on one of your pages. Copyright notifications are a good way to get people’s attention because they could bring legal troubles and people will rarely ignore and delete them, especially business owners who may have valuable Facebook advertising accounts with credit cards assigned to pages – a golden target for scammers who will rack up advertising ad spend.

Hovering over the link shows that you will be redirected to Facebook. Many scams cloak these links to hide the true destination, through a variety of means, so you always need to make sure you indeed land on an authentic Facebook page.

When you click that link, you indeed arrive on the authentic site, Facebook.com (the actual link target / destination matches).

The authentic page will look something like this below, which is actually hosted on Facebook.com itself, somehow using its notes feature.

Everything is working as it should be… Popup notification and all.

Everything is working as you would expect when logged into the authentic Facebook.com site. Messages, icons, pop-ups. It’s all there.

This is when your guard goes down.

Domain is valid, SSL is valid. Everything is legit.

It appears you are looking at an authentic message from Facebook.com, case number and all.

PHASE THREE OF THE SCAM.

Now back to the real page on Facebook. That link, the one that now looks like it has to be fine is not. Hovering over that link will review the true location of the next page.

The next page will bring you to this URL.

“com-100045882614029.com” is the true domain you are actually on. “Support” and “Facebook” are just sub domains of com-100045882614029 and its all on the .com top level domain URL.

Now that you arrived at the fake site, hosted at com-100045882614029.com, none of the ordinary logged in features are working anymore, but you tend to not notice this, since you have already gone through your own subconscious evaluation process – being directed here from an authentic Facebook.com page.

To complete your Copyright Appeal you will be asked to login and verify your identity by text message. The site, while sending all of your entries to its scammer developer, then asks you to enter the code received by text message.

This is your 2FA code. The scammers will then login as you and bypass your two factor security.

John Colascione
John Colascione

About The Author: John Colascione is Chief Executive Officer of Internet Marketing Services Inc. He specializes in Website Monetization, is a Google AdWords Certified Professional, authored a ‘how to’ book called ”Mastering Your Website‘, and is a key player in several Internet related businesses through his search engine strategy brand Searchen Networks®

Filed Under: Privacy Issues, Security Issues Tagged With: Authentic, Authentication, Authenticity, Copyright, Copyright Infringement, Copyright Infringements, Copyright Law, Copyrights, Destinations, Email Phishing, Email Scams, Facebook, Facebook ID, Facebook Login, Facebook Verification, Facebook.com, Illegal Scam, Phishing, Phishing Scam, Phishing Scams, Phishing Sites, Pop-ups, Scam, Scammers, Scams, Target, Text Message, URL, URLs

*** Here Is A List Of Some Of The Best Domain Name Resources Available ***

Register Domain Names

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Search This Site

by: John Colascione

John Colascione

Logo
John Colascione is Chief Executive of Internet Marketing Services Inc. He specializes in Website Monetization, authored a book called Mastering Your Website, and is a key player in several Internet businesses through his brand SEARCHEN®

The Published Reporter

The Published Reporter

Fellow Me

Twitter

In The News

  • DNJournal: New Book From Veteran Domainer
  • From Brandable to Exact-Match Geo Domain
  • InnovateLI: Two Deals, One Very Interesting Digital
  • Internet Commerce Association: John Colascione
  • NamesCon: Featured Attendee: John Colascione
  • Long Island Media Inc, SmartCEO, Future 50
  • Speakers, Name Summit, John Colascione
  • Speakers, Real Estate Summit, John Colascione
  • 24 Leading Domain Experts Analyze 2017

Popular Stories

New gTLD? Not So Fast; History Suggests New ‘Right of the Dots’ Could = Total Failure

Could Domain Investing Industry End with Legal Provision for Domain “Hoarding”

Does the Domain Industry Suffer From Own Versions of Trumpted “Fake News” Stories?

Websites and Domain Names to Become Insignificant within 20 Years or Less

List of 300+ Cryptocurrency Domain Name Sales and Sale Prices [All Time] (NameBio)

Quotes to Follow

quote icon The domain name is equivalent to Gold. It is the only packaged item which is globally tax-free, portable, with value that is universal across different cultures. quote icon – Frank Schilling

quote icon Domains have and will continue to go up in value faster than any other commodity ever known to man. quote icon – Rick Schwartz

quote icon  Google knows you, your friends, your likes, what entertains you, where you are in the world at any given time. Google will soon predict your next action, your next thought, based on a collaboration of thoughts past. quote icon – John Colascione

Like These Headlines?

Enter your email address:

Delivered by FeedBurner

T.L.D. Brokerage

Domain Brokers

Domain Reseller

Leaving Cash On The Table? Join The Best Domain Reseller Program (discounts + revenue)

Recent SEDO Weekly Sales List Includes “LLL.org” Domain Name Sale for $35,000

PALM BEACH, FL – According to the latest SEDO.com weekly domain sales report, the three letter “LLL” web address "FTP.org" just sold for $35,000.00. Other recent sales of “LLL.org” … [Read More...]

GOOG To Follow FB With Restrictions On Housing, Employment, and Credit Ads

WEST PALM BEACH, FL - Usually Google is a leader in all things advertising, however, a recent update to policy by GOOG (NASDAQ) will have it following Facebook (FB) where the ad giant will implement … [Read More...]

Data Breach: Unauthorized Party Accessed DoorDash Customer Information

SAN FRANCISCO, CA - According to recent reports, a new data security incident has surfaced. DoorDash, a popular food delivery app, detected suspicious activity from the computer network of a … [Read More...]

Domaining blog recommended by Domaining.com
Copyright © 2010-2021 StrategicRevenue.com - Property of Internet Marketing Services Inc.   FeedBurner: RSS   RSS
By using this site you agree to our Terms of Service and Privacy Policy. If you do not agree, please exit the service.