Forged email uses a bogus Compuserve domain
name and forged web content to Phish for users' login and personal details
The use of a bogus Compuserve domain name is of serious concern
here - activation-compuserve.com resolves to web space hosted by Everyone's Internet
and has supernetsolution.com in its registrant and contact information. http://confirmation-compuserve.org
is frame forwarded to http://draftshow.com/confirmation.php which resolves to
hungarian web space. Clearly neither have anything to do with Compuserve,
these domains have been created for the sole purpose of conning users into giving
up their personal and Compuserve account information through a series of forged
web forms (see images below).
Any information submitted is
processed through a script located on the same server as the bogus content.
If you have received this email, please remember that it is very
common for these email scams to be redistributed at a later date with only slightly
different content or the same but with the fake page(s) hosted by a different
provider. Also, once you have received one of these hoaxes, it is also common
place to receive at least another one and usually a day or two after the first,
although not necessarily from the same apparent sender.
The Spoof Email ...
Dear CompuServe member:
It has come to our attention that your CompuServe Billing information's records
are out of date.
This requires an update of your billing information. Please take several minutes
of your online experience and update your billing records. You will not run into
problems with our online services.
However, failure to update your records will result in your account termination.
your records right now.
Once you have updated your account records your CompuServe session will not be
Please click here to update your
Thank you for your time.
CompuServe Billing Dept team.
bogus web pages (the URL in the address bar may also show http://confirmation-compuserve.org)