Facebook has announced the launch of their “Friend Connection” targeting filter which allows advertisers “target friends of people already connected to their Facebook page, Application, Group or Event.

In addition to harnessing the social graph by targeting your connections’ friends, every “Friends of connection” targeted ad promoting a Page or Event includes social content about a friend’s interaction with your business, amplifying the relevancy of your ad. For example, Priya is a fan of the Nordstrom, Inc. Page. When Nordstrom, Inc. promotes their Facebook Page, they can choose to target ads to Priya’s friends by selecting the “Friends of connection” filter. Priya’s friends will receive the Nordstrom, Inc. ad with the following sentence: “Priya Gupta is a fan of this Page.” Priya’s friends are naturally more interested because Priya’s interaction with Nordstrom, Inc. is showcased directly in the ad.

A couple of minutes ago I received an email Titled “Important notice – please cooperate.” The email appeared to be sent from Google, as the name in the FROM field read “Google Adwords <AdWords@google.com>”

For some strange reason though, Thunderbird- my default email client, warned that the message might be a SCAM .

Needless to say that I was completely shocked, because I have never known Google to send SCAM messages. As a matter of fact Google, just like many other leading web companies, frowns on SCAM.

But you see, I have come to develop a lot of confidence in Thunderbird, ever since it saved me from making a terrible mistake some years ago.

Now, the body of the message read;

We detected irregular activity on your Google AdWords Account.

Please use the link below to verify your account immediately:

https://www.google.com/accounts/ServiceLogin?service=adwords

Sincerley, Google AdWords

:

At this point, I was totally confused.  This was the first time I had ever received anything like this from Google. I then decided to investigate the matter, albeit cautiously, so I proceeded to click on the link..

What happened next left me completely and utterly stupefied- clicking on the link took me to the following  URL, and what I saw there shocked the life out of me.

http://www.google-lg.com/accounts/?ServiceLogin?service=adwords&cd=null&hl=EN&ltmpl=adwords&passive=false&ifr=false&alwf=true
&continue=https%3A%2F%2Fadwords.google.com%2Fselect%2Fgaiaauth%3Fapt%
3DNone%26ugl%3Dtrue

The landing page for that URL was so similar to the actual Google page, that it was almost impossible to notice any  discrepancy at first.

:

At this point, as you can imagine, I didn’t know what to think anymore.

Had it not been for the fact that trusty old Thunderbird warned me about the impending doom, I just might have fallen for this SCAM hook, line and sinker.

A closer look at the URL in the address bar revealed all I needed to know about this fraudulent move. Let’s do a very simple comparison;

First of all, the original Google Adwords login URL;

:
Next, the pseudo Google Adwords URL;

:

1. The first thing you’ll notice is that the domain name “google-lg.com” as seen above is completely different from the “google.com” domain we have all come to be so acquainted with
2. Secondly, the original Google Adwords login page at http://adwords.google.com/ is built over the Hypertext Transfer Protocol Secure (HTTPS)- basically a combination of the Hypertext Transfer Protocol with the SSL/TLS protocol to provide encryption over a secure login interface

:

In a bid to try to determine the source of this SCAM, and be absolutely certain of my assertions; I  went on to do a whois lookup on the pseudo domain. The results only went to allay my fears;

:

Surprise (not so) Surprise! The domain name was actually created this morning

Have you fallen for a similar scam in the past, or maybe you received the same email I did. Share your thoughts below.

:

:

: