It looks like Canadians need to watch out for fake parking ticket spam this Christmas season. We have gotten reports that once again, (see http://spamauditor.org/2017/05/parkingspeeding-…geting-canadians/) spam originating from a large Russian Hosting company is targeting Canadians.
For one, just look at these ‘domains’:
18.104.22.168 1 cafederalcourt.loan 22.214.171.124 1 federalcourt.win 126.96.36.199 1 federalcourt.gdn 188.8.131.52 2 cafederalcourt.download 184.108.40.206 1 cafederalcourt.gdn 220.127.116.11 1 canadafederalcourt.loan 18.104.22.168 1 cafederal.download 22.214.171.124 1 canadafederalcourt.gdn 126.96.36.199 1 canadacourt.download 188.8.131.52 1 canadacourt.bid 184.108.40.206 1 canadacourt.loan 220.127.116.11 1 canadacourt.gdn 18.104.22.168 1 cacourt.bid 22.214.171.124 1 cacourt.loan 126.96.36.199 1 cacourt.win 188.8.131.52 1 cacourt.gdn 184.108.40.206 1 cafederal.loan 220.127.116.11 1 cafederal.win 18.104.22.168 1 courtcafederal.bid 22.214.171.124 1 courtcafederal.gdn 126.96.36.199 1 courtcafederal.win
These domains were registered not more than a week or two ago from today. We dug deeper and sure enough, these IPs are sending (to Canadian inboxes) emails of the fake parking ticket variety and possibly others.
Here is a quick example:
From: "CA Parking Control" <email@example.com> Subject: Notice of Fine and Due Date Parking tickets
Pаrking tiсket notifiсation In our reсords indicate thаt a parking tiсkets issuеd to thе vеhicle dеscribed belоw has not bееn paid. This рenaltiеs and aрplicаblе рenalty chаrgеs аrea past due аnd must bе pаid within thе nеxt 10 businеss dаys. Driving Rесоrds shоw thаt yоu are/were the rеgistеred owner аt the time this vеhiсlе was сited. Therеfоre yоu are rightfully responsible fоr respоnding to this nоticе. Tickеt Numbеr: 476378678CA Viоlation: Pаrk faсing wrong direсtiоn - rаisеd сurb Paymеnt recеivеd: 0 $ Fine: 76 $ Viеw photоs tаkеn by the bylaw оfficer whо issued your tiсket hеre.
Our Canadian friends, please be extra vigilant this Christmas and keep your eyes open for suspicious domains in parking ticket emails. Remember, we suggest that you spread the word, especially to the older and more vulnerable users of the Internet, NOT to believe these tickets and NOT to click on any links contained in the messages.