A new message that came to our mobile phone this afternoon caught our attention. It was from an unknown user and he urged us to go to the website smsfoto.net to see a new photo. As you may have guessed, of course it's another phishing message.
The sms arrived from the sender INFOmessage and had as text the following: "You received - (1) - new photo: http://smsfoto.net/c/d?i=Fwi614DG3a". The lack of the name of the real sender as well as the text of the message which was not usual, made us suspicious and so we tried the link not from the mobile phone, but from a pc.
Opening our page, an advertisement of the Sklavenitis super market appeared, which stated in a bad translation that we can claim an award if we declare our age. Knowing now that this is one phishing page we began to wonder about her, looking for who might be hiding behind her.
The page after 4 seconds flew us to a second, http://apple2win.com/page?cam=10274&country=gr&pub=129&aff_id=1170&click_id=5Fw614DG3a, which now asked us to fill in our mobile phone offering us 500 euros in a gift certificate from Sklavenitis.
Of course we did not move forward. Both websites are hosted in the Netherlands, on the servers of Leaseweb, a well-known server rental company that has been active in the market for over 15 years. Both domains are from GoDaddy. The 1st domain, smsfoto.net without the rest of the original URL, gave us a blank page, while the domain apple2win.com gave us that behind it is the company LS Solutions which in Greece is represented (??) by DIMOCO Greece SOLE SHAREHOLDER IKE by phone 2111982818.
A simple Google search of this phone showed that the number belongs simultaneously to the companies Cellyobi of PINICO BV, Cytech Ltd, cooliyobi of Sur.ly, Slickly and several others. All of them manage the domains celllyobi.com, www.sur.ly, slick.ly, www.cooliyobi.com, www.apple2win.com, http://halocell.com (watch out for porn), and of course smsfoto.net
It seems that these people once sold sms through the internet, before engaging in more lucrative activities. With the name INFOmessage in sms messages, we found a Greek company that does this job and specifically sells packages of sms messages in which the sender does not appear but only the name INFOmessage. Because we are not sure if they are involved, we do not name them.
Conclusion. Always be suspicious when you receive messages, sms, emails from people you either do not know or who do not show who they are. Be aware that if something sounds too improbable, then it is almost certain that it is not true.