It looks like Canadians need to watch out for fake parking ticket spam this Christmas season. We have gotten reports that once again, (see http://spamauditor.org/2017/05/parkingspeeding-…geting-canadians/) spam originating from a large Russian Hosting company is targeting Canadians.
For one, just look at these ‘domains’:
220.127.116.11 1 cafederalcourt.loan 18.104.22.168 1 federalcourt.win 22.214.171.124 1 federalcourt.gdn 126.96.36.199 2 cafederalcourt.download 188.8.131.52 1 cafederalcourt.gdn 184.108.40.206 1 canadafederalcourt.loan 220.127.116.11 1 cafederal.download 18.104.22.168 1 canadafederalcourt.gdn 22.214.171.124 1 canadacourt.download 126.96.36.199 1 canadacourt.bid 188.8.131.52 1 canadacourt.loan 184.108.40.206 1 canadacourt.gdn 220.127.116.11 1 cacourt.bid 18.104.22.168 1 cacourt.loan 22.214.171.124 1 cacourt.win 126.96.36.199 1 cacourt.gdn 188.8.131.52 1 cafederal.loan 184.108.40.206 1 cafederal.win 220.127.116.11 1 courtcafederal.bid 18.104.22.168 1 courtcafederal.gdn 22.214.171.124 1 courtcafederal.win
These domains were registered not more than a week or two ago from today. We dug deeper and sure enough, these IPs are sending (to Canadian inboxes) emails of the fake parking ticket variety and possibly others.
Here is a quick example:
From: "CA Parking Control" <email@example.com> Subject: Notice of Fine and Due Date Parking tickets
Pаrking tiсket notifiсation In our reсords indicate thаt a parking tiсkets issuеd to thе vеhicle dеscribed belоw has not bееn paid. This рenaltiеs and aрplicаblе рenalty chаrgеs аrea past due аnd must bе pаid within thе nеxt 10 businеss dаys. Driving Rесоrds shоw thаt yоu are/were the rеgistеred owner аt the time this vеhiсlе was сited. Therеfоre yоu are rightfully responsible fоr respоnding to this nоticе. Tickеt Numbеr: 476378678CA Viоlation: Pаrk faсing wrong direсtiоn - rаisеd сurb Paymеnt recеivеd: 0 $ Fine: 76 $ Viеw photоs tаkеn by the bylaw оfficer whо issued your tiсket hеre.
Our Canadian friends, please be extra vigilant this Christmas and keep your eyes open for suspicious domains in parking ticket emails. Remember, we suggest that you spread the word, especially to the older and more vulnerable users of the Internet, NOT to believe these tickets and NOT to click on any links contained in the messages.