ohare-airport.org link scam: phishing for pagerank
Friday, May 22nd, 2009I discovered an interesting link scam in my inbox this morning, with the subject line “New Chicago O’Hare International Airport website”. The message informed me that Chicago O’Hare Airport has a new website at ohare-airport.org, and asked me to update my link to the airport. The link points to a pretty credible looking site, with arrivals and departures information, ground transportation, and even a privacy policy (!) The only clue that something’s wrong is the very vague copyright information (”© Airport Administration Services”) and the lack of a phone number or mailing address on the contact page.
I run a community airport website named OurAirports, so it’s not unusual for me to get e-mail from smaller airports and flying clubs with updates, but big airports have never bothered with me.
As one would expect, O’Hare Airport’s existing web site makes no mention of a new, updated site. In this scam the scammer is not phishing for personal information or trying to scam money, but instead, is trying to get pagerank over the official O’Hare site by tricking thousands of sites into providing links.
What are they looking for? Given that the e-mail traces back to a site called huntparking.com, I’ll guess that they want to use the web traffic either to sell ads for airport parking or to sell their own parking.
The e-mail and whois info are below. Nicely done, by the way — the fake site is much better designed than O’Hare’s real site, and even the markup snippet in the e-mail is XHTML-compatible. Perhaps O’Hare Airport should consider hiring the designer instead of bringing charges.
The message
Message-ID: <D81A47BF68444410B84578142FC73DED@UserPC> From: "Chicago O'Hare Airport"To: [removed] Subject: New Chicago O’Hare International Airport website MIME-Version: 1.0 Content-Type: text/plain; charset=”iso-8859-1″ Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - host.huntparking.com X-AntiAbuse: Original Domain - ourairports.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ohare-airport.org To whom it may concern: We are proud to announce the launch of the new Chicago O’Hare = International Airport website www.ohare-airport.org. It provides = comprehensive real time flight information on arrivals, departures and = delays, terminals and maps, parking, transportation, directions, food = and shopping, hotels, etc. If you find our website to be of value to you and your readers, we would = appreciate it if you could add a link to us at your URL = http://www.ourairports.com/airports/KORD/ where, in our opinion, it = would be the most relevant.=20 Alternatively, you can utilize the customized link code provided below = (just cut and paste): <p><a href=3D”http://www.ohare-airport.org”>Chicago O’Hare = airport</a></p> If you have any questions, please, do not hesitate to contact us. Thank = you for your time and consideration. Kind regards, Natalia Klimovich Website Administrator www.ohare-airport.org
Whois Information for ohare-airport.org
Domain ID:D155295366-LROR Domain Name:OHARE-AIRPORT.ORG Created On:07-Feb-2009 08:45:01 UTC Last Updated On:09-Apr-2009 03:54:26 UTC Expiration Date:07-Feb-2010 08:45:01 UTC Sponsoring Registrar:GoDaddy.com, Inc. (R91-LROR) Status:CLIENT DELETE PROHIBITED Status:CLIENT RENEW PROHIBITED Status:CLIENT TRANSFER PROHIBITED Status:CLIENT UPDATE PROHIBITED Registrant ID:GODA-059235088 Registrant Name:Alexei Pavlovitch Registrant Street1:240 E Illinois Registrant Street2:apt 1202 Registrant Street3: Registrant City:Chicago Registrant State/Province:Illinois Registrant Postal Code:60611 Registrant Country:US Registrant Phone:+1.3125936015 Registrant Phone Ext.: Registrant FAX: Registrant FAX Ext.: Registrant Email:alex.pavlovitch@gmail.com Admin ID:GODA-259235088 Admin Name:Alexei Pavlovitch Admin Street1:240 E Illinois Admin Street2:apt 1202 Admin Street3: Admin City:Chicago Admin State/Province:Illinois Admin Postal Code:60611 Admin Country:US Admin Phone:+1.3125936015 Admin Phone Ext.: Admin FAX: Admin FAX Ext.: Admin Email:alex.pavlovitch@gmail.com Tech ID:GODA-159235088 Tech Name:Alexei Pavlovitch Tech Street1:240 E Illinois Tech Street2:apt 1202 Tech Street3: Tech City:Chicago Tech State/Province:Illinois Tech Postal Code:60611 Tech Country:US Tech Phone:+1.3125936015 Tech Phone Ext.: Tech FAX: Tech FAX Ext.: Tech Email:alex.pavlovitch@gmail.com Name Server:NS07.DOMAINCONTROL.COM Name Server:NS08.DOMAINCONTROL.COM Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: