Phishing Scam With Orkut Lookalike

Today, I got a crap ... oops ... scrap, in my Orkut account which read as follows:

^nk!t@...:
Hey im really apreciate yor work..!!!
will u moderate my community??
Just put yor request in moderator required topic!!
Hope to hear frm u soon!!

http://orkutfriend.freeweb7.com/community.aspx/orkut.html

Being, the curious cat I am, I clicked on the link and voila I was looking at a Phishing Site designed to make you feel you are looking at a real Orkut Site.

Here is a detailed description of what raised the alarm:



So here is what is wrong with this site and some telltale signs you should look for:

1. When I clicked on the link that asked me to go to the community from my Orkut page, I was prompted for my username and password on the above screen.
2. Why was Orkut asking me to enter my username and password again to look at one of its communities? That raised a flag.
3. I looked at the URL and found http://orkutfriend.freeweb7.com/community.aspx/orkut.html and the first half in red raised an eyebrow. As a security professional, I could right away tell that the site was being hosted at an external hosting space and was being used to collect usernames and passwords.
   4. Another thing to notice is Orkut written in various Hindi dialects. That was odd for an international site.
   5. Finally the ? before Google confirmed my suspicion that this was a Phishing site. On the real site Google it says ©2007 Google.

Lesson Learnt: If you are at all suspicious of the site you are looking at, please close the browser and start again. Do not enter your username and password on a site that you do not trust or looks fake or suspicious. If you think that you have by mistake entered your username and password on such a site, please change your password immediately.