Dynamoo's Blog

Malware, spam, scams and random stuff, by Conrad Longmore.

Friday, 29 April 2011

Fake jobs: wug-newhire.com and wug-consulting.net

›
Two more fake " Lapatasker " domains, registered on 27/4/11 but otherwise the same as these . wug-consulting.net wug-newhire.co...
Thursday, 28 April 2011

infernomag.com / gtracking.org nastiness

›
Some sort of .htaccess hack is going on, redirecting users to infernomag.com and then on to a malicious site that looks like it's downl...
1 comment:

Fake "Lapatasker" job domains 28/4/11

›
This particular scam has been around for a couple of years and is so common now that I've christened this group of scam domains " L...
Tuesday, 26 April 2011

Some German scam sites

›
These are allegedly German companies, but: They are all very recently registered (4th and 17th April 2011) The registrar is in China (BIZC...
1 comment:

Evil network: Leksim Ltd / RELNET-NET AS5577 (62.122.72.0/21)

›
Implicated in malware distribution, botnet C&Cs and spam, the network range 62.122.72.0/21 (62.122.72.0 - 62.122.79.255) is currently qu...
1 comment:
Friday, 22 April 2011

Fake job domains 22/4/11

›
Another list of fake job domains relating to this long running scam and in addition to these recent ones . Solicitations are sent by spam a...

ygnetwork-ltd.com domain scam

›
This scam has been around for years - basically, you get an unsolicited email from a company claiming to be a domain registrar in China (it...
13 comments:
Friday, 15 April 2011

"Cake Decoration Lesson" spam

›
I can only assume that this is some sort of strange scam. The email originates from 74.55.158.162 which is flagged as being quite spammy . ...
Sunday, 10 April 2011

More fake job domains

›
Another list of fake job domains, almost identical to this one . Avoid. 1best-position.com 1consulting-online.com allweb-consulting.com ...

wug-hire.com fake job offer

›
Yet another installment in this endless series of fake job offers, the domain wug-hire.com is being used as a reply-to address for this par...
2 comments:
Saturday, 2 April 2011

alisa-carter.com, lizamoon.com and worid-of-books.com

›
The injection attacks from lizamoon.com and other domains continue.. and they link back to a popular blog post about a very different atta...
Thursday, 31 March 2011

alleurope-consult.com job scam

›
Another fake job offer in this long running job scam , alleurope-consult.com is probably another money mule operation. The email is pretty ...
Monday, 28 March 2011

Wanna buy an aircraft carrier?

›
Because we British have decided that we don't need to have aircraft carriers, because we're not bombing anywhere in particular at th...
Saturday, 26 March 2011

Mango Ideas / gsid.net is now clean

›
Just a quick note to say that Mango Ideas cleaned up their network from this incident which was possibly due to a reseller or perhaps a com...
1 comment:
Thursday, 24 March 2011

west-ugroup.net (and other) fake job offers

›
Another fake job offer in this very long running scam , the job involved is actually in support of organised crime and may involve such thin...
Monday, 21 March 2011

Evil network: Intermedia Top SRL / INTERMEDIA-TOP AS49873 (95.64.8.0/24)

›
Intermedia Top SRL is a Romanian host operating a network in the 95.64.8.0/24 range. This range appears to contain nothing but malicious si...
Tuesday, 8 March 2011

"Debt Advice UK" Sussex

›
You know when you are dealing with a dodgy outfit when they robo-call your mobile from a supressed number with a recorded message that start...
1 comment:
Monday, 7 March 2011

Evil network: Sagade Latvia AS52055 (46.252.130.0/23) and traff4you.info

›
I've covered Sagade before , which appears to be a completely black hat web host with no legitimate domains at all. Sagade appear to hav...
Tuesday, 15 February 2011

Scam: "North American Program Planning and Policy Academy (NAPPPA)"

›
NOTE: You can find out who was operating NAPPPA here Fake seminars are an unusual way of scamming money from people, but this one appears ...
34 comments:
Thursday, 10 February 2011

Evil network: Voejkova Nadezhda / VOEJNA-NET AS51441 (91.217.162.0/24) aka tirexhost.com

›
Voejkova Nadezhda, aka VOEJNA-NET and also known as tirexhost.com is a netblock allegedly based in the Ukraine, but apparently operated out ...
‹
›
Home
View web version
Powered by Blogger.