Sponsored by..

Tuesday 23 October 2007

Yourmusic.com ad banners sering up malware

For at least a week, Virgin Media (and probably other sites) have been serving up compromised ads for Yourmusic.com that direct their users to a fake anti-spyware site called MalwareAlarm.com (via malware-scan.com) - which is actually a trojan designed to scare people into parting with their cash, while infecting their machines at the same time.

How the banners got compromised is a mystery, but it's clearly the work of a third party. More here.

Tuesday 2 October 2007

Yet more dating scam sites

Another set of dating scam domains related to these and these. The email follows a similar pattern to:
Hello! I am tired tonight. I am nice girl that would like to chat with you. Email me
at np@SuperOnset.info only, because I am writing not from my personal email. Don't
miss some of my naughty pictures.

See this post for more information on how the scam works. This batch of bogus domains are:

  • Closecallusa.info
  • Closecallworld.info
  • Closemorehomes.info
  • Closemoreplus.info
  • Closeopenwave.info
  • Greatnear.info
  • Mailvisionworld.info
  • Nearencounters.info
  • Onsetcombat.info
  • Quickclosepa.info
  • Superonset.info
  • Youclosemore.info
  • Youronset.info
For techies, the nameservers for all these domains are DNSREAL.COM which appears to be used exclusively for this type of scam. This is registered to what is almost definitely a bogus name and address, but does use the email dnzmazter@yahoo.com.

Wednesday 26 September 2007

Savings Pioneer (savingspioneer.com) Spam


"Savings Pioneer" (savingspioneer.com) is a persistent spammer who constantly shifts between privacy protected domains and sending IP addresses to avoid blocking. They do not honour unsubcribe requests.

They are an affiliate of Media Breakaway LLC (formerly known as OptInRealBig run by spammer Scott Richter) which in turn directs traffic through other very low quality affiliate programs such as vcmedia.com (a ValueClick domain), websponsors.com, inteletrack.com, gratisnetwork.com, swmark.com, zanox.com, atdmt.com, clash-media.net, monetizeit.net and others. In some cases the click is passed from company to company in what appears to be a fairly grubby series of business relationships.

Savings Pioneer is most likely just an affiliate of Media Breakway LLC, but Richter's outfit doesn't give any guidance on how to report affiliate abuse.

Two of Savings Pioneer's key parterns are Hurricane Electric (he.net) and Exist Hosting (existhosting.com). This latter appears to be a two-bit outfit with astoundingly bad reviews and are responsible for much of the mail handling.

The following 1,937 domains are used in rotation by Savings Pioneer to try to overcoming people blocking them. They tend to change to a new domain every day. There may be more!

If you get one of these, send a copy of the email to abuse -at- he.net.

Added 1-Nov-07: Theoretically you can also try emailing unsubscribe -at- mediabreakaway.com who seem to provide the mailing list. Unsubscribing at savingspioneer.com seems to be ignored.

Spam sites hosted on 216.218.214.250:

  • Abouttheinsect.com
  • Absolutelyimpressive.com
  • Absolutelyuncanny.com
  • Activegift.com
  • Administrativeexpert.com
  • Administrativeexpertscentral.com
  • Administrativeexpertsonline.com
  • Advancedbusinessonline.com
  • Advancedgraphicsonline.com
  • Advancedhealthtech.com
  • Advancedhomedesigns.com
  • Advancedlivingonline.com
  • Advancedprogramguide.com
  • Advancedwellnessonline.com
  • Afriendonline.com
  • Afriendsite.com
  • Airdataonline.com
  • Airmanagementonline.com
  • Airwireonline.com
  • Alarmmanagementgroup.com
  • Allboatonline.com
  • Alldigitalwork.com
  • Allfreshnews.com
  • Allnewinventions.com
  • Allpartsunlimited.com
  • Alltimedigital.com
  • Alphamanagementonline.com
  • Aluminumyacht.com
  • Amazingworldsports.com
  • Americannaturecenter.com
  • Americathewonderful.com
  • Animalhealthsite.com
  • Animalnewsonline.com
  • Antiqueautoonline.com
  • Antiqueboatauction.com
  • Appointedexecutive.com
  • Areasontogive.com
  • Areasontogiveonline.com
  • Arthropodcontrol.com
  • Arthropodculture.com
  • Arthropodencyclopedia.com
  • Arthropodfacts.com
  • Arthropodofcanada.com
  • Askhealthsource.com
  • Atlantiscrew.com
  • Authorityanswers.com
  • Badgerstatefloors.com
  • Badkarmasquad.com
  • Bakingsalts.com
  • Baymanagementsystems.com
  • Bestadvancedinfo.com
  • Bestairsystems.com
  • Bestbetdirect.com
  • Bestbusinessprogram.com
  • Bestcarpetsource.com
  • Bestcitytech.com
  • Bestdistrict.com
  • Bestfluid.com
  • Bestfriendgame.com
  • Bestfriendhost.com
  • Bestgreenhousesupplies.com
  • Bestinsectbite.com
  • Bestlabmanagement.com
  • Bestlearnenglish.com
  • Bestmarinaproperty.com
  • Bestmarmotbasin.com
  • Bestofsmoothjazz.com
  • Bestopengolf.com
  • Bestopenrates.com
  • Bestpenguins.com
  • Bestposse.com
  • Bestpowerball.com
  • Bestproducebox.com
  • Bestproductsunlimited.com
  • Bestsharingsite.com
  • Bestsmoothskin.com
  • Bestsodapop.com
  • Bestsupernet.com
  • Bestthemeparties.com
  • Bestwholeness.com
  • Bestwonderfulthings.com
  • Bigcityvisit.com
  • Biggreenbet.com
  • Biggreendirect.com
  • Biggreendream.com
  • Biggreenpalm.com
  • Biggreenventures.com
  • Bigpowerful.com
  • Bigproduce.com
  • Bigrealfruit.com
  • Bigwaxfruit.com
  • Bionatureonline.com
  • Bluemanagementgroup.com
  • Boatmotorsales.com
  • Bodyfreefitness.com
  • Bottomlessonline.com
  • Bottomlessusa.com
  • Breakmegadisco.com
  • Brightideasbulb.com
  • Brightlightbulb.com
  • Buildyourbuttons.com
  • Businessconvert.com
  • Businessdare.com
  • Businessenterprisesoa.com
  • Businessestablishmentonline.com
  • Businessgalaxies.com
  • Businessmanagementdirect.com
  • Bysecondnature.com
  • Calciumfactorsupreme.com
  • Canadaboatsales.com
  • Carsnonstop.com
  • Cedargardengreenhouse.com
  • Centercondo.com
  • Centipedearmy.com
  • Centipededirect.com
  • Centipedehouse.com
  • Centipedeleg.com
  • Centipederecords.com
  • Centipedesite.com
  • Centipedesoftware.com
  • Centipedesolutions.com
  • Centipedeworld.com
  • Centralinnovation.com
  • Centralinnovationonline.com
  • Centralinvention.com
  • Cheekymarmot.com
  • Chewymarmot.com
  • Choicemanagementservices.com
  • Choiceproductsunlimited.com
  • Citrusparkarea.com
  • Cleanairfun.com
  • Cleanpowerworld.com
  • Cliqueaway.com
  • Cliquedirect.com
  • Collegeextend.com
  • Collegegive.com
  • Collegeoffersonline.com
  • Colormanagementonline.com
  • Commercechange.com
  • Commercecreation.com
  • Commerceembark.com
  • Commerceexperience.com
  • Commercematters.com
  • Commerceobstacle.com
  • Commerceobstacles.com
  • Commercerelations.com
  • Commercestart.com
  • Commerceventure.com
  • Commercialnurseries.com
  • Concerncommerce.com
  • Concerncreation.com
  • Concernmatter.com
  • Concerntrade.com
  • Connectionunit.com
  • Cosmicdancerecords.com
  • Cosmiceggradio.com
  • Cosmiceggtest.com
  • Cosmicspacecadet.com
  • Cosmicwaterdevice.com
  • Countlesscreation.com
  • Cowsunlimitedusa.com
  • Creationsinventions.com
  • Creativemanagementonline.com
  • Creativeprotectiononline.com
  • Daswonderlandsite.com
  • Daygreensite.com
  • Dealingconnection.com
  • Dealingcreations.com
  • Dealingobstacles.com
  • Dealingrelations.com
  • Dealingventures.com
  • Defyhumannature.com
  • Dentalvisitonline.com
  • Describeamollusk.com
  • Digitalbigworld.com
  • Digitalliquidsite.com
  • Digitalmanagementonline.com
  • Digitalmediaforum.com
  • Digitalsodapop.com
  • Digitalstarworld.com
  • Digitalworldbenefits.com
  • Dimlightbulb.com
  • Directbestonline.com
  • Directioncreations.com
  • Directionpros.com
  • Directlinenow.com
  • Directmailserve.com
  • Discopunkmusic.com
  • Discothee.com
  • Dosomethingwonderful.com
  • Drinkingliquid.com
  • Dynamicgiftsonline.com
  • Dynamicleave.com
  • Dynamicoutcome.com
  • Dynamicresultonline.com
  • Dynamicsgifts.com
  • Dynamicsresult.com
  • Earthmarvel.com
  • Easyfamilyfitness.com
  • Easyfastfitness.com
  • Easygroupfitness.com
  • Easylivinghealthy.com
  • Easyonlinefitness.com
  • Easystreetfitness.com
  • Easystrong.com
  • Ecrewonline.com
  • Electricmotorsource.com
  • Embarkenterprise.com
  • Energysupersite.com
  • Enginevehicle.com
  • Enteraries.com
  • Enteryourbirthday.com
  • Entrepreneurscreations.com
  • Esharingnetwork.com
  • Esmoothjazz.com
  • Eventsunlimitedusa.com
  • Everbestfriend.com
  • Executiveappointed.com
  • Executivecreation.com
  • Executivenetworksofamerica.com
  • Executivestart.com
  • Executiveunity.com
  • Exoticwildlifeart.com
  • Expertconclusion.com
  • Expertiseknowledge.com
  • Expertmanagementsystem.com
  • Extrasmoothguide.com
  • Extremethemeparks.com
  • Factcampaign.com
  • Factorydirectguide.com
  • Familyfitnesssite.com
  • Fantasticbirthdaygifts.com
  • Fantasticcoffeesguide.com
  • Fantastichomebuys.com
  • Fantastichomesolutions.com
  • Fantasticswonderful.com
  • Fastknowledgesharing.com
  • Financestarter.com
  • Findanyshow.com
  • Findthetheme.com
  • Findyourimage.com
  • Firmcommerce.com
  • Firstfitnessclub.com
  • Fiscalfitnesscenter.com
  • Fitnessclubpro.com
  • Fitnessfindsite.com
  • Floridamaximum.com
  • Flyinginsectsite.com
  • Flyingtigersmusic.com
  • Fortunatecentral.com
  • Fortunatesite.com
  • Fortunateworld.com
  • Freegiftcentralonline.com
  • Freegiftgame.com
  • Freehabit.com
  • Freeinsect.com
  • Freepresentcards.com
  • Freepresentcentral.com
  • Freshnewstyle.com
  • Freshrootsproduce.com
  • Friendsondemand.com
  • Fromtheclique.com
  • Fromthegreenhouse.com
  • Fundentry.com
  • Fundmanagementonline.com
  • Fundmanagementsite.com
  • Fungiftcardsonline.com
  • Furrycuddleparty.com
  • Gamecentipede.com
  • Gardeninsectguide.com
  • Generalcosmiccooperation.com
  • Generalvast.com
  • Getsproduce.com
  • Getsupergreen.com
  • Giftgreatgiver.com
  • Giftsunlimitedusa.com
  • Givecardcentral.com
  • Globalbeginning.com
  • Globalbestfriend.com
  • Globalchannelone.com
  • Globalfitnessclub.com
  • Glorioussilverstallion.com
  • Goodkarmaimports.com
  • Gradelearn.com
  • Granddesignsunlimited.com
  • Greatamericanbuttons.com
  • Greatantiquecars.com
  • Greatastgiftstore.com
  • Greatcentipedebite.com
  • Greatchemists.com
  • Greatcityradio.com
  • Greatcosmicgate.com
  • Greatcrewonline.com
  • Greatdigitaldesign.com
  • Greatdiscoinferno.com
  • Greateventmanagement.com
  • Greatgamesunlimited.com
  • Greatgeneratorpro.com
  • Greatgiftscards.com
  • Greatgloriousstallion.com
  • Greatgolfdirect.com
  • Greatgreenhousekit.com
  • Greatisle.com
  • Greatkeen.com
  • Greatmanagementcompany.com
  • Greatprogressive.com
  • Greatsmoothjazz.com
  • Greattechsystems.com
  • Greatthingsunlimited.com
  • Greatvitaminguide.com
  • Greatwatertreatment.com
  • Greatwondercrew.com
  • Greatwonderland.com
  • Greenboxdirect.com
  • Greendotguide.com
  • Greenlightwebsite.com
  • Greennetworld.com
  • Greenproworld.com
  • Greensheetsonline.com
  • Greenstarworld.com
  • Greenstoreonline.com
  • Greenvalleypartners.com
  • Greenworldcall.com
  • Greenworldcom.com
  • Haydirectonline.com
  • Healthsourceworld.com
  • Highererlearninganovel.com
  • Higherlearn.com
  • Higherlearningcentral.com
  • Higherlearnings.com
  • Higherlearningstudents.com
  • Highersee.com
  • Highertake.com
  • Homefitnessfun.com
  • Homefitnessltd.com
  • Honestcontent.com
  • Honesteducationonline.com
  • Honesteducationstudents.com
  • Honestfurther.com
  • Honestlearning.com
  • Humannatureconsulting.com
  • Humannaturegifts.com
  • Ideasunlimitedusa.com
  • Ifarmproduce.com
  • Ilookfantastic.com
  • Incentiveresult.com
  • Incorporatecrew.com
  • Infoaboutpenguins.com
  • Inquirecrew.com
  • Insectcontrolzone.com
  • Insectdirect.com
  • Integratedcrew.com
  • Integrateddealing.com
  • Integratedindustry.com
  • Integratedunit.com
  • Inventivecommerce.com
  • Inventivecommerceonline.com
  • Iprofitsharing.com
  • Iskimarmot.com
  • Itsyourdisco.com
  • Iwonderonline.com
  • Justlearnonline.com
  • Karmadogonline.com
  • Kidpowerworld.com
  • Kidslearndirect.com
  • Kidslearnflash.com
  • Kidslearnnow.com
  • Kidsunlimitedonline.com
  • Kidsunlimitedusa.com
  • Knowledgedealing.com
  • Latestmedicalinventions.com
  • Learnaboutkids.com
  • Learndirectlondon.com
  • Learnenglishclub.com
  • Learnmorelinux.com
  • Learnmoreweb.com
  • Learnphonicsonline.com
  • Learnworldmusic.com
  • Legalpowerline.com
  • Letslearnmath.com
  • Letslearnsite.com
  • Letsvisitdirect.com
  • Lifesharingcenter.com
  • Lightbulbbay.com
  • Lightbulblink.com
  • Lightbulbmountain.com
  • Limitlesscommerce.com
  • Limitlesstrade.com
  • Liquidbrandonline.com
  • Liquidworldrecords.com
  • Littlegreenonline.com
  • Littlesunshineschool.com
  • Littlewebwonder.com
  • Littlewondercrew.com
  • Looksharpmodels.com
  • Looksharpusa.com
  • Lovesupremeonline.com
  • Lovetheisland.com
  • Loveyournature.com
  • Lowerlearn.com
  • Lowersee.com
  • Lowerstudy.com
  • Loyaldealing.com
  • Loyalindustry.com
  • Mammothmarmot.com
  • Managementcreations.com
  • Marinearthropod.com
  • Marmotdirect.com
  • Marmotsupreme.com
  • Marvelvast.com
  • Mediaunlimitedonline.com
  • Megaprotech.com
  • Mendeleevchemists.com
  • Mendeleevworld.com
  • Microtechguide.com
  • Minisodapop.com
  • Molluskgrins.com
  • Molluskshells.com
  • Molluskworld.com
  • Monetaryfundportal.com
  • Moralforceresult.com
  • Mostadvancedproduct.com
  • Mostwonderfullife.com
  • Mostwonderfulonline.com
  • Moveyourbuttons.com
  • Moviechanneldirect.com
  • Mrsunshineonline.com
  • Myadministrativeexperts.com
  • Myamazingfruit.com
  • Myareasontogive.com
  • Mybestisland.com
  • Mybigcreation.com
  • Mybusinessassociates.com
  • Mybusinesscommerce.com
  • Mybusinesscreations.com
  • Mybusinessdare.com
  • Mybusinessdemand.com
  • Mybusinessinvention.com
  • Mybusinessmap.com
  • Mybusinesstrade.com
  • Mycentralinnovation.com
  • Mycollegeoffers.com
  • Mycommercechange.com
  • Mycommerceconnection.com
  • Mycommercecreations.com
  • Mycommercedeals.com
  • Mycommerceobstacles.com
  • Mycommercerelations.com
  • Mycommerceventures.com
  • Mycosmicdance.com
  • Mycreativebusiness.com
  • Mycreativeprotection.com
  • Mydynamicgifts.com
  • Mydynamicresult.com
  • Myexecutivebranch.com
  • Myexecutivebusiness.com
  • Myexecutivecreations.com
  • Myexecutiveexchange.com
  • Myexecutiveone.com
  • Myexecutiveworks.com
  • Myexpertdecisions.com
  • Myfreegiftcentral.com
  • Myfruitstore.com
  • Myfungiftcards.com
  • Mygiftacard.com
  • Mygiftsindemand.com
  • Mygiveagift.com
  • Myglaciergifts.com
  • Myglobalcreation.com
  • Mygreatestpals.com
  • Mygreatgiver.com
  • Myintegratedcommerce.com
  • Myintegratedcrew.com
  • Myinventivecommerce.com
  • Mykeyproduction.com
  • Myknowledgecommerce.com
  • Mylimitlesscommerce.com
  • Mymanagementcreations.com
  • Mymanagementpros.com
  • Mynewcommerce.com
  • Myoptimalanswers.com
  • Myoptimalpartners.com
  • Myprofessionalanswers.com
  • Myprofessionalnetworks.com
  • Myprofessionscrew.com
  • Mysmartgrowth.com
  • Mysupercrew.com
  • Mysuperiorbusiness.com
  • Mytreasuregifts.com
  • Myuniversalcommerce.com
  • Myvalleycommerce.com
  • Myventureembark.com
  • Mywinagiftcard.com
  • Mywinaprize.com
  • Mywondercrewonline.com
  • Mywonderworks.com
  • Myworldwonder.com
  • Naturalfitnessguide.com
  • Nesteggentry.com
  • Nesteggportal.com
  • Netgiftsunlimited.com
  • Netmanagementservices.com
  • Netpowergenerator.com
  • Newcommerceonline.com
  • Newcoproductions.com
  • Newcrosstech.com
  • Newdigitalcity.com
  • Newmoonfruit.com
  • Newportboatrental.com
  • Nonstoplink.com
  • Nothingaboutpenguins.com
  • Novelcommerce.com
  • Noviewgreenhouse.com
  • Nycantiqueguide.com
  • Oldantiqueonline.com
  • Oldantiqueshow.com
  • Omxexchange.com
  • Onegreatgreenhouse.com
  • Onesmoothbagel.com
  • Onlinemotorsite.com
  • Openseaonline.com
  • Optimalpartnersonline.com
  • Optimalquestions.com
  • Optimalreply.com
  • Optimalrespond.com
  • Optimalwork.com
  • Originativeassets.com
  • Originativebusiness.com
  • Originativecommerce.com
  • Originativeearth.com
  • Originativeglobe.com
  • Originativeuniverse.com
  • Originativeworld.com
  • Originmanagementgroup.com
  • Ourfantasticfamilies.com
  • Ourpowerline.com
  • Outislandmarina.com
  • Papermanagementgroup.com
  • Partsunlimitedinc.com
  • Penguinproductionsonline.com
  • Peoplecanlearn.com
  • Perkinpals.com
  • Perklove.com
  • Perkluv.com
  • Peruviancentipede.com
  • Plasticfantasticsurf.com
  • Pokethepenguins.com
  • Pontoonship.com
  • Portfitness.com
  • Possemachine.com
  • Powerlinenow.com
  • Powersupplytech.com
  • Presentacard.com
  • Professionalcloth.com
  • Professionalrespond.com
  • Professioncrew.com
  • Professionscrew.com
  • Professionsunit.com
  • Publicradionetworks.com
  • Publicschoolrugby.com
  • Purenatureonline.com
  • Q2result.com
  • Radiantbulbguide.com
  • Razorsharpminds.com
  • Razorsharponline.com
  • Realsupersite.com
  • Rednotginger.com
  • Repairsourceonline.com
  • Rexdigitalmedia.com
  • Rightcamps.com
  • Savingsentrance.com
  • Savingsentree.com
  • Savingsentry.com
  • Savingsportalonline.com
  • Schoolintellect.com
  • Schoolmind.com
  • Schoolprovide.com
  • Schooluniformdisco.com
  • Secondnatureprograms.com
  • Secondoutdoors.com
  • Sharingourmoment.com
  • Sharingoursouls.com
  • Sharingyourblessings.com
  • Sharpedgetools.com
  • Sharpshoponline.com
  • Sharpsolutionsonline.com
  • Sharpworldimport.com
  • Sharpworldtravel.com
  • Shopdirectguide.com
  • Silentthemesite.com
  • Simplysmoothflavor.com
  • Simplyvelvet.com
  • Simplywonderfulscents.com
  • Sitesvalley.com
  • Smackthepenguins.com
  • Smoothgroovesonline.com
  • Smoothjazzarchives.com
  • Smoothjazzinfo.com
  • Smoothmovebenefits.com
  • Smoothmovesonline.com
  • Smoothsailingbeverages.com
  • Smoothskincompany.com
  • Smoothtransitionsonline.com
  • Smoothworldpromotion.com
  • Snailsdirect.com
  • Snailsstore.com
  • Softbodyfitness.com
  • Solutionsunlimitednow.com
  • Spacecosmic.com
  • Speedysnails.com
  • Sportsmanagementonline.com
  • Stateinsectonline.com
  • Stickworms.com
  • Stoptheinsect.com
  • Stopthepenguins.com
  • Strategicalgroup.com
  • Strategicalmethod.com
  • Strategicalsystem.com
  • Strategicsystemsonline.com
  • Stuffedwildlife.com
  • Sunriseharbormarina.com
  • Sunshinecruisesonline.com
  • Sunshinegrouponline.com
  • Sunshinestateflowers.com
  • Sunshinestatemagazine.com
  • Sunshinestatesupply.com
  • Superairco.com
  • Superantiqueappraisals.com
  • Superantiquedealers.com
  • Superarthropodsite.com
  • Superchannelone.com
  • Superdirectonline.com
  • Superdistrict.com
  • Superfanunlimited.com
  • Superfitnessequipment.com
  • Superfoodsupreme.com
  • Superfriendclub.com
  • Superfunddirect.com
  • Superginger.com
  • Supergreenhousekit.com
  • Supergreenlife.com
  • Supermanagementservices.com
  • Supermolluskworld.com
  • Superopenhomes.com
  • Superpenguinsfan.com
  • Superpowersupply.com
  • Superseekandfind.com
  • Supersharingfiles.com
  • Supersharingsite.com
  • Supersmoothmove.com
  • Supersoftwareunlimited.com
  • Supersuperdeal.com
  • Supersupervision.com
  • Superuncanny.com
  • Supervitaminman.com
  • Superwaterbed.com
  • Superwondercrew.com
  • Superwonderland.com
  • Supremeautobiz.com
  • Supremeautoshop.com
  • Supremecouncilonline.com
  • Suprememotorworld.com
  • Supremeplusonline.com
  • Supremetrustonline.com
  • Supremewheelsonline.com
  • Supremeworldwrestling.com
  • Surrealdesignsunlimited.com
  • Sweepsbest.com
  • Techworldlink.com
  • Terraviewgreenhouse.com
  • Theadministrativeexperts.com
  • Theairsite.com
  • Theairzone.com
  • Theanimalkids.com
  • Theanimalmob.com
  • Theanimalpeople.com
  • Theantiquearchives.com
  • Theantiquegame.com
  • Theareasontogive.com
  • Thearthropodguide.com
  • Thebigcreation.com
  • Thebirthdayinvitation.com
  • Thebirthdayking.com
  • Thebirthdayworks.com
  • Thebodysupreme.com
  • Thebusinessassociates.com
  • Thebusinesscommerce.com
  • Thebusinesscreations.com
  • Thebusinessdare.com
  • Thebusinessdemand.com
  • Thebusinessestablishment.com
  • Thebusinessinvention.com
  • Thebusinesstrade.com
  • Thebutterflygifts.com
  • Thecentipedeonline.com
  • Thecentralinnovation.com
  • Thecitrusfactor.com
  • Thecitruszone.com
  • Thecitymart.com
  • Thecollegeintellect.com
  • Thecollegeoffers.com
  • Thecommercechange.com
  • Thecommerceconnection.com
  • Thecommercecreations.com
  • Thecommercedeals.com
  • Thecommerceobstacles.com
  • Thecommercerelations.com
  • Thecommerceventures.com
  • Theconecrew.com
  • Thecoolgiftcards.com
  • Thecosmicbagel.com
  • Thecosmicblues.com
  • Thecosmiceye.com
  • Thecosmicgoose.com
  • Thecosmicrim.com
  • Thecosmicvoid.com
  • Thecosmicwok.com
  • Thecosmicwow.com
  • Thecreativeprotection.com
  • Thecrewcab.com
  • Thecrewproductions.com
  • Thecrunchcrew.com
  • Thedatagenerator.com
  • Thedigitalnow.com
  • Thedirectleads.com
  • Thediscokid.com
  • Thedotgenerator.com
  • Thedowntownhub.com
  • Thedowntownmap.com
  • Thedynamicgifts.com
  • Thedynamicresult.com
  • Theexecutivebusiness.com
  • Theexecutivecreations.com
  • Theexecutiveone.com
  • Theexecutivesolutions.com
  • Theexecutiveworks.com
  • Theexpertdecisions.com
  • Thefantasticbargains.com
  • Thefantasticplastic.com
  • Thefavoritegiftcards.com
  • Thefinancestarter.com
  • Thefitnessenthusiast.com
  • Thefreegiftcentral.com
  • Thefreshside.com
  • Thefreshstory.com
  • Thefreshword.com
  • Thefrugalfriend.com
  • Thefruitypenguins.com
  • Thegiftacard.com
  • Thegiftcardcentral.com
  • Thegiftingseason.com
  • Thegiftsindemand.com
  • Thegingerquestion.com
  • Thegiveagift.com
  • Thegiveareason.com
  • Theglaciergifts.com
  • Theglobalcreation.com
  • Thegreatgiver.com
  • Thegreenbroom.com
  • Thegreencouch.com
  • Thegreenhousebiz.com
  • Thegreenhousecafes.com
  • Thegreenhousecentre.com
  • Thegreenhouseguy.com
  • Thegreenhouseltd.com
  • Thehigherlearning.com
  • Theinfinitecreation.com
  • Theinsectdude.com
  • Theinsectflies.com
  • Theinsectmuseum.com
  • Theintegratedcommerce.com
  • Theintegratedcrew.com
  • Theinventionscompany.com
  • Theinventionsportal.com
  • Thekarmaarmy.com
  • Thekarmacup.com
  • Thekarmadetectives.com
  • Thekeyproduction.com
  • Theknowledgecatalyst.com
  • Theknowledgecommerce.com
  • Theknowledgeportal.com
  • Thelearninggreenhouse.com
  • Thelearnmachine.com
  • Thelearnnet.com
  • Thelimitlesscommerce.com
  • Theliquidband.com
  • Themagnificentcrocodile.com
  • Themanagementcreations.com
  • Themarinahouse.com
  • Themastercrew.com
  • Themepartiesplus.com
  • Themepartydepot.com
  • Themolluskguide.com
  • Themostwonderful.com
  • Themotorport.com
  • Thenaturetours.com
  • Thenetglobe.com
  • Theoldgreenhouse.com
  • Theonlyantique.com
  • Theoptimalanswers.com
  • Theoptimalpartners.com
  • Thepapertigers.com
  • Thepenguinsauctio.com
  • Thepenguinsrock.com
  • Thepenguinsrule.com
  • Thepowerchannel.com
  • Theprocrew.com
  • Theproduceking.com
  • Theprofessionalanswers.com
  • Thepublicbean.com
  • Thepurplepenguins.com
  • Therealvitamin.com
  • Therootcrew.com
  • Thesarcasticbadger.com
  • Thescreamingvegan.com
  • Thesharingangel.com
  • Thesharingcommunity.com
  • Thesharinglens.com
  • Thesharingpatrol.com
  • Thesharingprogram.com
  • Thesharingring.com
  • Thesharingsites.com
  • Thesharingsoftware.com
  • Thesharpdesign.com
  • Thesharpguide.com
  • Thesmoothcharacter.com
  • Thesmoothmovers.com
  • Thesmoothmoves.com
  • Thesmoothpursuit.com
  • Thesmoothsite.com
  • Thesmoothtransition.com
  • Thesmoothworks.com
  • Thesoftwaregenerator.com
  • Thesonicchannel.com
  • Thestonetigers.com
  • Thestrategicsystems.com
  • Thesunshinecommerce.com
  • Thesunshinekids.com
  • Thesuperiorbusiness.com
  • Thesuperkit.com
  • Thesuprememeal.com
  • Thetablesaw.com
  • Theteamtheme.com
  • Thetigersroar.com
  • Thetinyisland.com
  • Thetreasuregifts.com
  • Theultimatefitness.com
  • Theunitedexecutives.com
  • Theuniversalcommerce.com
  • Theunlimitednetwork.com
  • Theunlimitedoutlet.com
  • Theunlimitedpotential.com
  • Thevalleycommerce.com
  • Theventureembark.com
  • Thevirtualgreenhouse.com
  • Thewaterheater.com
  • Thewebclique.com
  • Thewildisland.com
  • Thewildlifecenter.com
  • Thewildlifepark.com
  • Thewinagiftcard.com
  • Thewinaprize.com
  • Thewirelessmarina.com
  • Thewonderbay.com
  • Thewondercrew.com
  • Thewonderdome.com
  • Thewonderfullife.com
  • Thewonderfulpeople.com
  • Thewonderfulshoppe.com
  • Thewonderfulsixties.com
  • Thewonderguys.com
  • Thewonderlandclubs.com
  • Thewonderlandexchange.com
  • Thewonderlandonline.com
  • Thewonderlandparty.com
  • Thewondernet.com
  • Theworldcrew.com
  • Theworldknowledge.com
  • Theworldmanagement.com
  • Thezodiacconnection.com
  • Thezodiacdolls.com
  • Thezodiaczoo.com
  • Thisamazingworld.com
  • Thisoldantique.com
  • Thunderbaymarina.com
  • Tigerseyegraphics.com
  • Tinyemperorpenguins.com
  • Totalfitnessdirect.com
  • Tothegreenhouse.com
  • Tradeembark.com
  • Tradeobstacles.com
  • Trovegift.com
  • Truthrace.com
  • Tuxthepenguins.com
  • Ultimatesupreme.com
  • Ultrasmoothsurfaces.com
  • Uncountedcreation.com
  • Unfastenedair.com
  • Unitedexecutivesonline.com
  • Uniteexecutives.com
  • Universalchamber.com
  • Universalcommerceonline.com
  • Universaldealing.com
  • Universewonder.com
  • Universityintellect.com
  • Unlimitedcareusa.com
  • Unlimitedgraphicsonline.com
  • Unlimitedsoundsonline.com
  • Uptownreal.com
  • Usalimitededitions.com
  • Valleydealing.com
  • Valleyscommerce.com
  • Vastegg.com
  • Veganinfurs.com
  • Venturebegin.com
  • Ventureembark.com
  • Ventureembarkonline.com
  • Ventureendeavor.com
  • Ventureinitiative.com
  • Videomailgenerator.com
  • Viewthemarina.com
  • Virtualvisitonline.com
  • Visitusafirst.com
  • Webadministrativeexperts.com
  • Webbusinessassociates.com
  • Webbusinessboard.com
  • Webbusinesscommerce.com
  • Webbusinessdeals.com
  • Webbusinessdemand.com
  • Webbusinessestablishment.com
  • Webbusinessexperience.com
  • Webbusinessinvention.com
  • Webbusinesstrade.com
  • Webcollegeintellect.com
  • Webcollegeoffers.com
  • Webcommerceconnection.com
  • Webcommercedeals.com
  • Webcommercerelations.com
  • Webcommerceventures.com
  • Webcoolgiftcards.com
  • Webcreativeprotection.com
  • Webcrewonline.com
  • Webdynamicgifts.com
  • Webdynamicresult.com
  • Webexecutivebranch.com
  • Webexecutiveone.com
  • Webexecutiveworks.com
  • Webfavoritegiftcards.com
  • Webfortunate.com
  • Webfreegiftcentral.com
  • Webgiftcardcentral.com
  • Webgiftingseason.com
  • Webgiveareason.com
  • Webglaciergifts.com
  • Webglobalbusiness.com
  • Webglobalcreation.com
  • Webglobaltrust.com
  • Webhigherlearning.com
  • Webintegratedcommerce.com
  • Webintegratedcrew.com
  • Webkeyproduction.com
  • Webknowledgecommerce.com
  • Webnewcommerce.com
  • Webnewcommerceonline.com
  • Weboptimalanswers.com
  • Weboptimalpartners.com
  • Webprofessionalanswers.com
  • Websavingsportal.com
  • Webstrategicsystems.com
  • Webuniversalcommerce.com
  • Webventureembark.com
  • Webwondercrew.com
  • Whitetigerscreation.com
  • Whitetigerssecurity.com
  • Whoismendeleev.com
  • Wideopengolf.com
  • Wildanimalhealth.com
  • Wildanimaltours.com
  • Wildlifephotoindex.com
  • Winagiftcardonline.com
  • Wisconsinbadgersport.com
  • Wisecentipede.com
  • Wondercrew.com
  • Wondercrewonline.com
  • Wondercrewproductions.com
  • Wondercrewworld.com
  • Wonderdirect.com
  • Wonderfulthingsdirect.com
  • Wonderposse.com
  • Wonderworldgroup.com
  • Wonderworldradio.com
  • Wonderworldweb.com
  • Woollymarmot.com
  • Workenterprise.com
  • Worldbeginning.com
  • Worldvitaminsource.com
  • Worldwildlifeclub.com
  • Worldwonderonline.com
  • Wowcrewonline.com
  • Yourairsupply.com
  • Youramazingsuccess.com
  • Youranimalcare.com
  • Youranimallink.com
  • Yourantiquecar.com
  • Yourboatshows.com
  • Yourbulbman.com
  • Yourcentipede.com
  • Yourcosmiccoach.com
  • Yourcosmicegg.com
  • Yourdigitalinfo.com
  • Yourdirectline.com
  • Yourdirectsupply.com
  • Yourfantastichome.com
  • Yourfavouritebuttons.com
  • Yourfindonline.com
  • Yourfinecity.com
  • Yourglobalaccess.com
  • Yourglobespan.com
  • Yourgreenhouseeffect.com
  • Yourgreenhouseflorist.com
  • Yourinsect.com
  • Yourinsectbites.com
  • Yourknowledgeonline.com
  • Yourlifewonderful.com
  • Yourlimitededition.com
  • Yourlivingair.com
  • Yourmanagementgroup.com
  • Yourmotorcenter.com
  • Yourowngreen.com
  • Yourpenguins.com
  • Yourpuppyfind.com
  • Yoursecondnature.com
  • Yoursharingnetwork.com
  • Yoursmoothmoves.com
  • Yoursodafountain.com
  • Yoursunlight.com
  • Yourtechdirect.com
  • Yourthemesongs.com
  • Yourtradesource.com
  • Yourunlimitedfuture.com
  • Yourunlimitedgrowth.com
  • Yourunlimitedvoice.com
  • Yourwaterparks.com
  • Yourwatertreatment.com
  • Yourwayunlimited.com
  • Yourwondercrew.com
  • Yourzonemanagement.com
  • Youthunlimitedonline.com
  • Zipsbuttonsonline.com
  • Zonefitnessonline.com

Spam sites hosted on 64.62.194.78:

  • Acceptpartners.com
  • Accuratedirection.com
  • Accuratemanagementonline.com
  • Accurateorganization.com
  • Activitygrowth.com
  • Agreeoverview.com
  • Aheadmotion.com
  • Aheadmotion.net
  • Alwaysthebestperks.com
  • Amelioratedfriends.com
  • Artisticexhibition.com
  • Artisticgeography.com
  • Artistichistory.com
  • Artisticpast.com
  • Artisticstory.com
  • Ascendancynow.com
  • Attainmentnow.com
  • Authenticdirection.com
  • Authoritativestandards.com
  • Bestelementaryscience.com
  • Bestforwardthinking.com
  • Bestforwardthinking.net
  • Bigstepforward.com
  • Boompioneer.com
  • Borntoloveperks.com
  • Bridgeoverview.com
  • Carefuldirection.com
  • Certainfact.com
  • Chillyweather.com
  • Classicalcriterion.com
  • Classicalpost.com
  • Classicalstandard.com
  • Classicalstandardssybase.com
  • Clearblind.com
  • Clearupsight.com
  • Closedirection.com
  • Clothesstandards.com
  • Comparefact.com
  • Concretedirection.com
  • Concretefact.com
  • Confirmedfact.com
  • Consistentaction.com
  • Consistentbeginning.com
  • Consistentdocument.com
  • Consistentriver.com
  • Consistentsource.com
  • Continuinginstruction.com
  • Coveroverview.com
  • Crossoverview.com
  • Crosssummary.com
  • Defindeddirection.com
  • Definitedirection.com
  • Definitefact.com
  • Definitivestandards.com
  • Deftdirection.com
  • Delicioustrends.com
  • Delightfulcourse.com
  • Delightfultrend.com
  • Delightfultrends.com
  • Delightfultrendsonline.com
  • Dependablecommunication.com
  • Detaileddirection.com
  • Developmentgrowth.com
  • Directchoiceusa.com
  • Directsolutionsonline.com
  • Directwayonline.com
  • Discriminatingdirection.com
  • Discriminitivedirection.com
  • Doyouloveourperks.com
  • Doyoulovetheperks.com
  • Earthtravelfun.com
  • Educationandinstruction.com
  • Educationnetworld.com
  • Electricmotorinc.com
  • Eminencenow.com
  • Employablewealth.com
  • Establishcare.com
  • Establishwant.com
  • Exactestate.com
  • Examinationhistory.com
  • Exceptionalpals.com
  • Existingfact.com
  • Expanseeducation.com
  • Extrahomeperks.com
  • Factualdirection.com
  • Fantasticfable.com
  • Fashioncriterion.com
  • Fashionstandards.com
  • Fashionstandardsonline.com
  • Fastforwardink.com
  • Favoritepals.com
  • Firstblueplanet.com
  • Firstcontrols.com
  • Firstthinking.com
  • Firstthinking.net
  • Floppyboots.com
  • Floppyfootwear.com
  • Floppyshoes.com
  • Focalizecompany.com
  • Focuseddate.com
  • Fortunepioneer.com
  • Forwardworldtour.com
  • Founddeal.com
  • Fringebuds.com
  • Fringefella.com
  • Fringe-friends.com
  • Fruitionpioneer.com
  • Fundmagician.com
  • Gainpioneer.com
  • Getablewealth.com
  • Getfastforward.com
  • Givestrength.com
  • Globetravelfun.com
  • Goodharbour.com
  • Goofypresent.com
  • Goofypresents.com
  • Gotta-have-my-perk.com
  • Greatdirectlink.com
  • Greatfables.com
  • Greekstandards.com
  • Happinesspioneer.com
  • Helpfulanomaly.com
  • Helpfuleccentric.com
  • Helpfuloddball.com
  • Helpfulvolunteers.com
  • Helpoverview.com
  • Helpoverviews.com
  • Higherinstruction.com
  • Holdoverview.com
  • Honestserve.com
  • Hugeeducation.com
  • Immenseeducation.com
  • Impactnext.com
  • Indesputablefact.com
  • Inquiryhistory.com
  • Instructionservices.com
  • Justdirection.com
  • Kindgeek.com
  • Kindgeeks.com
  • Launchcaring.com
  • Liquidsoaplive.com
  • Lookingfront.com
  • Makeintelligence.com
  • Makesight.com
  • Makestandards.com
  • Manageagree.com
  • Managehelp.com
  • Managehold.com
  • Masterypioneer.com
  • Maturationgrowth.com
  • Maturationincrease.com
  • Maturationnow.com
  • Maturationobject.com
  • Maturationpioneer.com
  • Maturationprocess.com
  • Memorizinghistory.com
  • Mobileachieve.com
  • Mobilesomeone.com
  • Mobilesuccessonline.com
  • Modestandards.com
  • Monitorfitness.com
  • Monitorreport.com
  • Monitorwealth.com
  • Moreperksthananyone.com
  • Musehistory.com
  • Myaccuratemanagement.com
  • Mybestamigos.com
  • Mybetterperks.com
  • Mybuddiesperks.com
  • Mybuddysperks.com
  • Myclassicalstandards.com
  • Myclearsight.com
  • Myconsistentsource.com
  • Mycoolpals.com
  • Mycreateintelligence.com
  • Mydelightfultrends.com
  • Myfantasticfables.com
  • Myfashionstandards.com
  • Myfavoriteamigo.com
  • Myfavoritefringe.com
  • Myfloppyshoes.com
  • Myfocusedcompany.com
  • Myfriendlyshare.com
  • My-friends-forever.com
  • Myfundswizard.com
  • Mygoofygifts.com
  • Myhelpfulgeek.com
  • Myhonestservice.com
  • Mykindmates.com
  • Mykindpals.com
  • Mylongvacation.com
  • Mymaintainhealth.com
  • Mymanagesupport.com
  • Mymobileachieve.com
  • Mymobilesuccess.com
  • Mymonitorhealth.com
  • Mynicepals.com
  • Myonyxsparkles.com
  • Myownbestpals.com
  • Mypalsyourpals.com
  • My-perk-buddies.com
  • My-perk-buddy.com
  • Myprovidestrength.com
  • Myreliablecommunication.com
  • Myrestorehistory.com
  • Mysecuretoday.com
  • Myspanningoverview.com
  • Mysupervisedreport.com
  • Myvasteducation.com
  • Myworldtravelfun.com
  • Nicetrend.com
  • Oldsoapfactory.com
  • Onyxspark.com
  • Onyxsparkle.com
  • Onyxsparkles.com
  • Operativewealth.com
  • Orderedsource.com
  • Originalperks.com
  • Originativesolution.com
  • Overseereport.com
  • Palsformyperks.com
  • Passsight.com
  • Peopletravelfun.com
  • Perkbooster.com
  • Perkboosters.com
  • Perkboss.com
  • Perkbrother.com
  • Perkbrothers.com
  • Perkbuddies.com
  • Perkbuddy.com
  • Perkchamp.com
  • Perkchamps.com
  • Perkchief.com
  • Perkchoice.com
  • Perkchoices.com
  • Perkchum.com
  • Perkchums.com
  • Perkclass.com
  • Perkfellow.com
  • Perkfellows.com
  • Perkforever.com
  • Perk-for-ever.com
  • Perkinggoodtime.com
  • Perkinggreattime.com
  • Perkmate.com
  • Perksaregreat.com
  • Perksarenice.com
  • Perks-for-ever.com
  • Perksforeverybody.com
  • Perksforpeople.com
  • Perksforthemasses.com
  • Perkyeah.com
  • Planetearthnow.com
  • Planetearthsystems.com
  • Ponderinghistory.com
  • Poweredguitar.com
  • Poweredmotor.com
  • Preparesucceed.com
  • Progresspioneer.com
  • Propitiouspals.com
  • Propitiousperks.com
  • Provideforce.com
  • Provideintensity.com
  • Providestrength.com
  • Pushuptheperk.com
  • Questioninghistory.com
  • Readysucceed.com
  • Realizationpioneer.com
  • Reflectionhistory.com
  • Reliableact.com
  • Reliablecommunicationonline.com
  • Renewhistory.com
  • Renewstatus.com
  • Renewwealth.com
  • Replacewealth.com
  • Reporteddirection.com
  • Respectedperson.com
  • Respectpartners.com
  • Restorefresh.com
  • Revivefresh.com
  • Savingspioneer.com
  • Screenhealth.com
  • Secureyesterday.com
  • Sensationpioneer.com
  • Shapemap.com
  • Soaringcontributions.com
  • Somanyawesomeperks.com
  • Soughtcaring.com
  • Spanningbridge.com
  • Spanningoverview.com
  • Spanningoverviewonline.com
  • Spanningoverviews.com
  • Spanningsummary.com
  • Spanoverview.com
  • Strongtoday.com
  • Stylestandards.com
  • Substantivefact.com
  • Successfulactivity.com
  • Successfulbeginning.com
  • Successfulcreation.com
  • Successfulcreationsonline.com
  • Superahead.com
  • Superahead.net
  • Superliteratureonline.com
  • Superviseaccount.com
  • Supervisedaccount.com
  • Supervisedinform.com
  • Supervisedpaper.com
  • Supervisedschool.com
  • Superviseinform.com
  • Supervisereport.com
  • Supplystrength.com
  • Supportoverview.com
  • Supportoverviews.com
  • Sweepoverview.com
  • Tangiblefact.com
  • Theaccuratemanagement.com
  • Thebargainsbasement.com
  • Thebestchum.com
  • Thebetterchums.com
  • Theclassicalstandards.com
  • Theconsistentsource.com
  • Thecoolestpals.com
  • Thecoolpals.com
  • Thecreateintelligence.com
  • Thedelightfultrends.com
  • Theelectricpage.com
  • Theelectricworks.com
  • Thefantasticfables.com
  • Thefashionstandards.com
  • Thefastforward.com
  • Thefloppyshoes.com
  • Thefocusedcompany.com
  • Thehonestservice.com
  • Thejupitergroups.com
  • Thejupitergroups.net
  • Themanagesupport.com
  • Themobileachieve.com
  • Themobilesuccess.com
  • Themonitorhealth.com
  • Theperkbuddies.com
  • The-perk-buddies.com
  • Theperksforever.com
  • Theprovidestrength.com
  • Thereliablecommunication.com
  • Therenewhealth.com
  • Therespectedpartners.com
  • Thesecuretoday.com
  • Thesoapcafe.com
  • Thesoapcafe.net
  • Thespanningoverview.com
  • Thesuccessfulcreations.com
  • Thesupervisedreport.com
  • Thetuxhop.com
  • Thetuxpenguin.com
  • Thewebdelight.com
  • Theworldtravelfun.com
  • Thriftreport.com
  • Toomanyperks.com
  • Triumphpioneer.com
  • Universetravelfun.com
  • Unrestrictedwealth.com
  • Vasteducation.com
  • Victorypioneer.com
  • Voiphonestservice.com
  • Wayfirst.com
  • Wayfirst.net
  • Weallloveperks.com
  • Wearewelcoming.com
  • Webaccuratemanagement.com
  • Webclassicalstandards.com
  • Webdelightfultrends.com
  • Webfashionstandards.com
  • Webfocusedcompany.com
  • Webhonestservice.com
  • Webimpactfuture.com
  • Webmobilesuccess.com
  • Webprovidestrength.com
  • Webreliablecommunication.com
  • Websecuretoday.com
  • Webspanningoverview.com
  • Websuccessfulcreations.com
  • Websupervisedreport.com
  • Welovetheperks.com
  • Willyoubemypal.com
  • Willyoubeourpal.com
  • Wonderfulfables.com
  • Worldjourneyfun.com
  • Worldtravelhumour.com
  • Worldtravelplay.com
  • Worldtravelsport.com
  • Yodudebemypal.com
  • Yoletsbepals.com
  • Youandiloveperks.com
  • Yourbestperks.com
  • Yourbetterperks.com
  • Youreducationsystem.com
  • Yourforwardvision.com
  • Yourpalsmypals.com
  • Yourplanetmedia.com

Spam sites hosted on 64.71.191.226 (added 28-9-07)

  • Aboutworlds.com
  • Aboutworlds.net
  • Acedeliveryonline.com
  • Affableallies.com
  • Affablebuds.com
  • Affectionatedeals.com
  • Affectionatefriend.com
  • Alliedhealthprofessions.com
  • Alliedhelp.com
  • Allprofessionsguide.com
  • Amelioratedpal.com
  • Amfreepress.com
  • Animalfriendlyproducts.com
  • Animalrescuestore.com
  • Animalsupplysite.com
  • Antpowersystems.com
  • Aquapetsupply.com
  • Authenticsreliable.com
  • Automaticdeliverysite.com
  • Badgerstatesurplus.com
  • Benchpaper.com
  • Benevolentbenefactor.com
  • Bestbadger.com
  • Bestcanopyswing.com
  • Bestdealsdelivery.com
  • Bestelephant.com
  • Bestelephant.net
  • Bestelephantseal.com
  • Bestelephantseal.net
  • Bestfashiondirect.com
  • Bestmeddelivery.com
  • Bestplanets.com
  • Bestplanets.net
  • Bestplanmanagement.com
  • Bestpresskit.com
  • Bestpresskit.net
  • Bestreliable.com
  • Bestwebcollections.com
  • Bestwebcollections.net
  • Blueelephantny.com
  • Blueelephantny.net
  • Brownpaperonline.com
  • Brownpaperonline.net
  • Brownpapertop.net
  • Businessfindonline.com
  • Businessprotectionguide.com
  • Canadasbestprofessionals.com
  • Cashcropcaptain.com
  • Cashcropcowboy.com
  • Casperdirect.com
  • Casperdirect.net
  • Casperhomesinfo.com
  • Casperhomesinfo.net
  • Casperhomesonline.com
  • Casperreal.com
  • Casperreal.net
  • Casperstart.com
  • Casperstart.net
  • Casperwebguide.com
  • Casperwebguide.net
  • Checksconcord.com
  • Checksconcord.net
  • Chummychums.com
  • Citiescasper.com
  • Citiescasper.net
  • Clutchbase.com
  • Collegedegreecareer.com
  • Companionsupplysite.com
  • Computerrodent.com
  • Concordnew.com
  • Concordnew.net
  • Concreteprotectionplan.com
  • Contractcharter.com
  • Contractcharter.net
  • Cookingfruit.com
  • Coolestsidekick.com
  • Coolestsidekicks.com
  • Coraldeposit.com
  • Cordialcouple.com
  • Corporatemain.com
  • Cosmicmusicspace.com
  • Dataprotectionanswers.com
  • Deliverystoreonline.com
  • Depthealthprofessions.com
  • Depthealthprofessions.net
  • Desertratonline.com
  • Designsconsulting.com
  • Designssystems.com
  • Dogfriendlypress.com
  • Ecofriendlyfish.com
  • Ecofriendlytimes.com
  • Educatedstate.com
  • Educationdonation.com
  • Emblemselephant.com
  • Emblemselephant.net
  • Estateentry.com
  • Everyonelovesasweetperk.com
  • Excellentgadgets.com
  • Excellentgadgets.net
  • Expresspressonline.com
  • Exspaper.com
  • Exsreport.com
  • Exsreport.net
  • Extrasbenefits.com
  • Ezfindsite.com
  • Familyfriendlystore.com
  • Favchums.com
  • Favoriteperks.com
  • Fieldscentral.com
  • Fieldsdev.com
  • Filamentincandescent.com
  • Filamentonline.com
  • Finelyfringebenefit.com
  • Firstconcordreal.com
  • Firstconcordreal.net
  • Firstfringebenefit.com
  • Fishingreportguide.com
  • Flashessparkle.com
  • Forevermyperks.com
  • Foreverperks.com
  • Freshpressusa.com
  • Freshpressusa.net
  • Friendlydirect.com
  • Friendlydiscounter.com
  • Friendshippals.com
  • Friendshipperks.com
  • Fringebuddies.com
  • Fringemates.com
  • Fringepals.com
  • Funlovingpals.com
  • Funlovingperks.com
  • Furnishforlife.com
  • Gatheringetc.com
  • Gatheringetc.net
  • Generositybears.com
  • Generositybears.net
  • Geocosmicdirect.com
  • Getpressusa.com
  • Getthesparkle.com
  • Getwhitepaper.com
  • Giftbagladies.com
  • Giftbagsite.com
  • Giftbagzone.com
  • Giftgiversanonymous.com
  • Gildedbird.com
  • Giveyougifts.com
  • Givinggoliath.com
  • Goldsparkleworld.com
  • Grabapal.com
  • Greatcharteroak.com
  • Greatcharteroak.net
  • Greatdealsdelivery.com
  • Greatgalley.com
  • Greatgiftbag.com
  • Greatlakesdelivery.com
  • Greatmindfuleye.com
  • Greatnetworknow.com
  • Greatnetworkservices.com
  • Greatpapermill.com
  • Greatprofessions.com
  • Greatratesdelivery.com
  • Greatsparkle.com
  • Greattelevisionshows.com
  • Greattravelusa.com
  • Greatwebfind.com
  • Healthstaffsystems.com
  • Heyletsbepals.com
  • Homebasedprofessions.com
  • Homedeliveryinc.com
  • Homedeliverypro.com
  • Homefashionpolice.com
  • Homenetworkgroup.com
  • Honestshare.com
  • Hospitablehomies.com
  • Icecreamcaptain.com
  • Idlehobbies.com
  • Ilovemypals.com
  • Imcahobbies.com
  • Informationplans.com
  • Internetsportsreport.com
  • Irobotrobotics.com
  • Islanddeposit.com
  • Kitchenkidsonline.com
  • Kittengenerosity.com
  • Labelenabler.com
  • Lawforprofessionals.com
  • Lazyhobbies.com
  • Lazyinterest.com
  • Letsgrabapal.com
  • Letsloveperks.com
  • Lifechangeusa.com
  • Lightssparkle.com
  • Listanythingonline.com
  • Listeverythinglive.com
  • Listeverythingonline.com
  • Listperkslive.com
  • Listperksonline.com
  • Listsavingslive.com
  • Listsavingsonline.com
  • Littlecountrykitchen.com
  • Loveabuddyhere.com
  • Loveagreatbuddy.com
  • Loveasweetperk.com
  • Lovingmyperks.com
  • Lovingourperks.com
  • Macrocosmicguide.com
  • Manchesterunitedservices.com
  • Manchesterunitedservices.net
  • Mastersprofessionals.com
  • Masterspros.com
  • Maxracedeals.com
  • Medicalinfoportal.com
  • Metroanimalservice.com
  • Mindfuldirect.com
  • Mindfullivingcompany.com
  • Modernprotectionsystems.com
  • Morebonuses.com
  • Morrisoncastle.com
  • My-best-pals.com
  • Mybestperks.com
  • Mybigbadbadger.com
  • Myblueelephant.com
  • Myblueelephant.net
  • Mybuddyperks.com
  • Mychummychums.com
  • Mycoolestsidekick.com
  • Mydeliveryonline.com
  • Myfavoriterodeo.com
  • Myfavoritestuffing.com
  • Myfriendlypals.com
  • Mygoldenbird.com
  • Myownpalandpals.com
  • Myownpalsareabest.com
  • Mypalandbuddies.com
  • Mypalandfriends.com
  • Mypaldiscount.com
  • Mypalsarethebest.com
  • Mypalsmyperks.com
  • Mypalwholesale.com
  • Myperksforever.com
  • Mysharefriends.com
  • Mysharelife.com
  • Myshareparty.com
  • Mysupershare.com
  • Mysupremeshare.com
  • Mysweetestfriends.com
  • Mysweetestpals.com
  • Mysweetestperks.com
  • Mysweetfriendnetwork.com
  • Myteamamigos.com
  • Myurbandesignonline.com
  • Nameeverythinglive.com
  • Ncrcorporate.com
  • Neighborlygathering.com
  • Netwealthmanagement.com
  • Newconcordmail.com
  • Newconcordmail.net
  • Newspaperpaper.com
  • Niftyshare.com
  • Otiosehobbies.com
  • Our-friends-forever.com
  • Our-perk-buddy.com
  • Ouragentonline.com
  • Ourfavoritefringe.com
  • Ourhomedelivery.com
  • Ourperkbuddy.com
  • Packagedeliverysite.com
  • Palpablebuddies.com
  • Palpablebuds.com
  • Palpablefriends.com
  • Pals-for-perks.com
  • Papercupworld.com
  • Paperrelease.com
  • Paperrelease.net
  • Paperstarcompany.com
  • Performancepetstore.com
  • Periliousperks.com
  • Perkace.com
  • Perkallies.com
  • Perkamigo.com
  • Perkamigos.com
  • Perkmaven.com
  • Perkpally.com
  • Perkpartner.com
  • Perkpatriot.com
  • Perkpatriots.com
  • Perkprime.com
  • Perkprincipal.com
  • Perksforever.com
  • Petfriendlyservice.com
  • Petmanagementsystems.com
  • Petpaperproducts.com
  • Petpaperproducts.net
  • Petreportonline.com
  • Petservicesite.com
  • Petstorebay.com
  • Petsupplyorder.com
  • Pinkelephantstore.com
  • Planestbestnegotiator.net
  • Planetsbestnegotiator.com
  • Planetsbestnegotiator.net
  • Planetsdirect.com
  • Planetsdirect.net
  • Planetshowtime.com
  • Planetshowtime.net
  • Planetsiworld.com
  • Planetsiworld.net
  • Plansinternational.com
  • Plasticgrabbag.com
  • Powerlinksystems.com
  • Preferredproviderslist.com
  • Pressclublive.com
  • Primarycareprofessionals.com
  • Primecharteronline.com
  • Primecharteronline.net
  • Printingreport.com
  • Printingreport.net
  • Professionsguide.com
  • Professionsworld.com
  • Progessionsguide.com
  • Prosassociation.com
  • Redsparkledirect.com
  • Redsparklerecords.com
  • Reliableguide.com
  • Rentaloak.com
  • Rentaloak.net
  • Rentalpressroom.com
  • Reportreleases.com
  • Reportsonsports.com
  • Researchpaperonline.com
  • Reversereportcard.com
  • Roadreportinfo.com
  • Roboticsroomba.com
  • Rodentfashion.com
  • Rodeoromp.com
  • Safedeliverysystems.com
  • Secretlights.com
  • Secretsparkleonline.com
  • Sharingsouls.com
  • Shoeadmirer.com
  • Shoepartner.com
  • Singingcentral.com
  • Smallchangeonline.com
  • Smartdeliverybox.com
  • Snackbarcounter.com
  • Solutionhelpers.com
  • Sparklecitycomics.com
  • Sparklefishjewelry.com
  • Sparklegirltreasures.com
  • Sparkleguide.com
  • Sparkleplentyjewelry.com
  • Sparkleplentypress.com
  • Stableenabler.com
  • Stableenablerguide.com
  • Strategiesdesign.com
  • Strategiessystems.com
  • Supercaspervan.com
  • Supercaspervan.net
  • Superelephantbar.com
  • Superelephantbar.net
  • Superentry.com
  • Superfriendlytravel.com
  • Supermindfuleye.com
  • Superpartnersonline.com
  • Superprofessions.com
  • Superreliablehome.com
  • Superwidgetsonline.com
  • Suppliesbarrel.com
  • Suppliesrefinery.com
  • Systemsplans.com
  • Taverncentral.com
  • Tavernontap.com
  • Teampowersystems.com
  • Teaspooncooking.com
  • Televisiontrip.com
  • Thebadgerbologna.com
  • Thebadgerfactory.com
  • Thebagonline.com
  • Thecanopycover.com
  • Thecaspercar.com
  • Thecasperwyoming.com
  • Thechangecampaign.com
  • Thechangeclub.com
  • Thechangegate.com
  • Thecharterone.net
  • Thecoachpress.com
  • Thecompanionstore.com
  • Thecoraldeposit.com
  • Thecosmickiwis.com
  • Thecosmicpaths.com
  • Thecosmicstaff.com
  • Thedeliveryshop.com
  • Thediscountdudes.net
  • Theelephantpicture.com
  • Theelephantseal.com
  • Theelephantseal.net
  • Theeventreport.com
  • Thefriendlyfew.com
  • Thegoddesscollections.com
  • Thegoddesscollections.net
  • Thegrapebelief.com
  • Thegreatdelivery.com
  • Thehappiestfeat.com
  • Thehappiestfeet.com
  • Theiprofessionals.com
  • Thelabelenabler.com
  • Theleadingdelivery.com
  • Theleadingproviders.com
  • Themarketmouse.com
  • Themindfuleducator.com
  • Theminorplanets.com
  • Theminorplanets.net
  • Themoneycrops.com
  • Thepaperimage.com
  • Thepaperimage.net
  • Thepressusa.com
  • Theprofessionalnetworks.com
  • Theprofessionalparent.com
  • Theprofessionalsusa.com
  • Theprofessionsindex.com
  • Theproviderssite.com
  • Theproviderssolution.com
  • Thereliableonline.com
  • Therodeobargain.com
  • Thesoleprovider.com
  • Thesparklebody.com
  • Thesparkleroom.com
  • Thesparkleshine.com
  • Thesparklesisters.com
  • Thetelevisionstations.com
  • Thethirdcanopy.com
  • Thetwinkleshoppe.com
  • Thetwinkletoe.com
  • Topcowboysaver.com
  • Topfashionsite.com
  • Tophealthprofessions.com
  • Toprodeodeals.com
  • Toptoolstips.com
  • Totaldataprotection.com
  • Townsconcord.com
  • Townsconcord.net
  • Travelstardirect.com
  • Triaircharter.com
  • Triaircharter.net
  • Twinklestaragency.com
  • Twinkletoerings.com
  • Twinkletoestutus.com
  • Twinkletwinkleonline.com
  • Ultimatedeliveryguide.com
  • Unbelievableonline.com
  • Unitedmailservices.com
  • Unitedmedservices.com
  • Unitednetworkservices.com
  • Unitedpaperonline.com
  • Unitedservicesdirect.com
  • Unitedservicesworld.com
  • Unitedtrustservices.com
  • Unitedwaywork.com
  • Vacationgiftbag.com
  • Verrobotics.com
  • Verrorobotics.com
  • Videohomenetwork.com
  • Vipgiftbag.com
  • Websinging.com
  • Wirelesssearchportal.com
  • Worldsplanets.com
  • Worldsplanets.net
  • Yourbestwidgets.com
  • Yourcharteroak.com
  • Yourcharteroak.net
  • Yourcosmiccomics.com
  • Yourdeliveryboy.com
  • Yourdeliveryonline.com
  • Yourelephantear.com
  • Yourelephantear.net
  • Yourenabler.com
  • Yourglamorouslife.com
  • Yourhoneypot.com
  • Yourpaperclip.com
  • Yourpaperclip.org
  • Yourprofessionalservices.com
  • Yourprofessions.com
  • Yourremodelingcenter.com
  • Yourrodent.com
  • Yourserviceproviders.com
  • Yoursparklecity.com
  • Yourunitedservices.com

Monday 17 September 2007

More dating scam sites

Another bunch of scam sites relating to the dating scam we described a few days ago here. The set up is the same - a spam email from a fake address leads to a fake dating site. Once the scammers have their victim hooked with a pretty girl, then they can still reeling him in by his wallet.

  • Andiloveyoutoo.com
  • Closecalluk.info
  • Companymailpro.info
  • Ezquickclose.info
  • Firstloveall.com
  • Healthelovesite.com
  • Imailvision.info
  • Lovegreatthing.com
  • Loveisaclick.com
  • Loveisexcellent.net
  • Loveyouloves.com
  • Nearout.info
  • Onlyloveall.com
  • Openprotection.info
  • Procloseonline.info
  • Toonear.info
  • Worldmailworld.info
Avoid.

Sunday 9 September 2007

NatWest Phishing Phish

Phishers will try anything - this particular one is aimed specifically at UK-harvested email addresses and pretends to be a warning about.. phishing. Of course a real email from your bank should contain some personal details.. one interesting thing about this phish is that the data came from an online retailer.

Note that the "displayed" link is an invalid URL.

Of course, if you get one of these then it is very important to realise that it is a bogus email and you should not click on the link!

Subject: IMPORTANT SECURITY MESSAGE - Phishing emails - Be Aware!
From: "NatWest Online Banking"

Dear
Customers,

Customers of many banks, including NatWest, have been receiving e-mails that
appear to come from their own bank. Do not respond to these emails if you
receive one. These e-mails are examples of a common type of email fraud known as
'phishing'.



Phishing involves customers receiving an unsolicited e-mail claiming to be from
their bank. These emails attempt to direct the recipient to send their personal,
security or account information to them via emailing . These e-mails are
completely random and are not from NatWest. They are fraudulent attempts to
obtain your personal details through emailing.



This is why Our Support Division is
doing an arranged website update so as to help in securing your Online account
information and Prevent viruses, firewalls, spyware and Trojans.

By following the link below you
will open the procedure of the customer login verification:




http://www.nwolb.com.host005270/confirm/ServiceManagement/default.aspx.htm?

login=22przawniFZGDtcwhhOkhOvp

These directives are to be
e-mailed and followed by all clients of the NatWest Bank OnLine Banking. NatWest
Bank does apologize for the problems caused to you, and is very appreciative for
your cooperation. If you are not customer of Natwest United Kingdom please
delete this notification!

**** This is an automated message,
please do not respond ****


©
2007 National Westminster Bank Internet Banking. All Rights Reserved.

Thursday 30 August 2007

"Harvey Investment Company" bogus emails


The Harvey Investment Company is a wholly legitimate organisation with a domain name of harveyinvestment.com. However, there are also a series of fake sites run by the people behind the Syndey Car Centre scam which are trying to recruit for fake jobs. The "jobs" offered are illegal money mule designed either to launder stolen money or to cash bogus cheques.

The .ph domain for the website is a Philippines domain, and in this case the bogus site is hosted on 89.38.194.67 in Romania. The fake company claims an address of 32 Route Francois-Peyrot, Geneva, 1218 Switzerland ph: +41225948581, fx: +41225948571 - the REAL company is based in Kentucky in the US.

Subject: our company has announced additional openings for new employees [letter id: xxxxxxxxxxx]

Join Harvey Investment Company team. Our customized employment solutions and personalized approach give job seekers access to great opportunities with competitive salaries. Our company offers comprehensive benefits that allow making good money, without spending too much time for that. Don't put your career in the hands of just anyone; put it in the hands of a specialist. Launch or rejuvenate your career today with Harvey Investment Company and its subsidiaries are equal opportunity employers.

Today we are looking for customer service associates who share our command spirit and are looking to land an outstanding position with a company who has consistently been recognized on the national level for their work in the investment and securities area. We work tirelessly to build solid relationships with well-recognized organizations across the nation to learn about projects and opportunities.

Take a look at the job responsibilities and qualifications below and if you think you would be an asset to the team, we invite you to apply for the position.

Customer service associate is responsible for being in close touch with the staff from the head office, accepting customer payments to his bank account and making further calculations regarding them. The associate should deduct his 10% interest out of every transaction he is going to deal with, as well as all the related charges. The associate further makes a Western Union/MoneyGram transfer of the balance left to the company's regional department.

A position requires excellent customer service skills, employee's ability to manage time and accomplish duties with a minimum of supervision. Ideal candidate should possess 1-2 free hours a day, a bank account, available to be used for the company needs, should be outgoing, dedicated to meeting deadlines and objectives and able to follow procedures.

Whether you're interested in short-term temporary work or full-time permanent hire, we are confident that we have the right job for you. Apply today and let Harvey Investment Company help you realize your true potential.

For further, more detailed information, please visit our web site http://hinvestment.ph/job.php

We are looking forward to hearing from you!

Tuesday 28 August 2007

"Vegas Casino World" trojan

This is yet another variant of the Storm worm which has been sending out bogus postcard notifications and the like for some time now. The email is completely bogus and is not related to any real organisation with the name "Vegas Casino World" or similar variants.

Subject: Could you give us a hand?

We could sure use your opinion of our new program Vegas Casino World

Your help will get us ready for our market release. For helping out, you
will receive a free edition and 5 years of updates.

Just download the program, Check it out, and let us know your opinion.
Ready to be a beta tester? Just follow the link to our easy download
center: http://aa.bb.cc.dd/setup.exe
This is fairly widely detected by AV scanners, apart from McAfee. VirusTotal detects it as the following:

File setup.exe received on 08.28.2007 16:33:57 (CET)
AntivirusVersionLast UpdateResult
AhnLab-V32007.8.29.02007.08.28-
AntiVir7.4.1.632007.08.28WORM/Zhelatin.Gen
Authentium4.93.82007.08.28Possibly a new variant of W32/Fathom.3-based!Maximus
Avast4.7.1029.02007.08.27Win32:Tibs-BFG
AVG7.5.0.4842007.08.27Downloader.Tibs.7.X
BitDefender7.22007.08.28DeepScan:Generic.Zlob.38F48A71
CAT-QuickHeal9.002007.08.25(Suspicious) - DNAScan
ClamAV0.91.22007.08.28Trojan.Small-3637
DrWeb4.332007.08.28Trojan.Packed.142
eSafe7.0.15.02007.08.28Win32.Zhelatin.hq
eTrust-Vet31.1.50912007.08.28Win32/Sintun.AE
Ewido4.02007.08.28Worm.Zhelatin.hq
FileAdvisor12007.08.28-
Fortinet2.91.0.02007.08.28W32/Tibs.GN@mm
F-Prot4.3.2.482007.08.28W32/Fathom.3-based!Maximus
F-Secure6.70.13030.02007.08.28Email-Worm.Win32.Zhelatin.hs
IkarusT3.1.1.122007.08.28Email-Worm.Win32.Zhelatin.hq
Kaspersky4.0.2.242007.08.28Email-Worm.Win32.Zhelatin.hs
McAfee51062007.08.27-
Microsoft1.28032007.08.28Trojan:Win32/Tibs.DV
NOD32v224882007.08.28Win32/Nuwar.Gen
Norman5.80.022007.08.28W32/Tibs.ASFB
Panda9.0.0.42007.08.28-
Prevx1V22007.08.28-
Rising19.38.12.002007.08.28-
Sophos4.21.02007.08.28Mal/Dorf-E
Sunbelt2.2.907.02007.08.25VIPRE.Suspicious
Symantec102007.08.28Trojan.Packed.13
TheHacker6.1.9.1752007.08.28W32/Zhelatin.genw
VBA323.12.2.32007.08.28-
VirusBuster4.3.26:92007.08.27Trojan.Tibs.Gen!Pac.132
Webwasher-Gateway6.0.12007.08.28Worm.Zhelatin.Gen

Additional information
File size: 140367 bytes
MD5: 1ef03f4830c530799c57d67e1ccadc59
SHA1: 7d4677db2b158ba0296d112a696fecf2880167bd
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

Tuesday 14 August 2007

Netgear WG511 V2 Review


What do I think of the Netgear WG511 V2? This is what I think of the Netgear WG511 V2.. a completely and utterly useless wireless networking card let down by very poor drivers and bad reliability. Even when using a Netgear router, the WG511 V2 will drop out randomly, the supplied drivers are poor but the drivers from the website are positively dangerous and will cause all sorts of unexpected problems with your PC.

If you're having problems with the Netgear WG511 V2 then I suggest that you take the approach as pictured, where I have upgraded it hammer, the excellent Draper Model 9001 (stock nunmber 51223). This Draper hammer is a 16 ounce model with a soft grip that makes it easy to handle and very good all-around characteristics. Recommended for dealing with heavy-duty problems, such as permanently decommissioning the Netgear WG511 V2.

Extreme measures? Perhaps, but the Netgear WG511 V2 has played me up for 18 months now in an environment where every other network card works perfectly. I have wasted a significant amount of time on this unreliable piece of junk. Good riddance, and I certainly will give Netgear NICs like this a wide berth in the future.

(PS, as you might guess.. I'm in the market for a new wireless NIC. Any recommendations would be appreciated!)

Thursday 9 August 2007

Email "dating scams"


Sometimes scammers will try to lure you with a "dating scam" - usually a trick to gain money or possibly a visa. The basic setup is described here at Hoax-Slayer.com.

Often, these scams will use a throwaway email address at Hotmail, Yahoo or Gmail for responses, however these are often shut down so the latest trick is to register domains that look like genuine webmail addresses but aren't. Here's an example:

Hello! I am bored this afternoon. I am nice girl that would like to chat with you. Email me at mcmm@mailmessagecenter.info only, because I am writing not from my personal email. Don't miss some of my naughty pictures.
(Note the phrase "I am writing not from my personal email", because this comes from a spoofed address to make it harder to block.)

Now, mailmessagecenter.info looks like the sort of domain name you'd associate with a webmail account. In fact, it's hosted on a Chinese server at 124.254.2.226 along with a number of other domains. It appears that all of these domain names have been created to pursue this scam, so if you receive and email from any of them then just delete it.

  • Freemailwap.info
  • Imailmessage.info
  • Imailvision.info
  • Jumpcutpost.info
  • Jumpemail.info
  • Latinmailemail.info
  • Lonelyheartwaiting.com
  • Lovegalaxys.com
  • Loveisspecial.com
  • Loveonlylove.com
  • Mailmessagecenter.info
  • Mailmessageonline.info
  • Mailownemail.info
  • Mailvisionworld.info
  • Outmaildirect.info
  • Penmailpro.info
  • Postionvision.info
  • Presummermail.info
  • Romanticloveforever.com
  • Simpleitislove.com
  • Thaibestmail.info
  • Theamericanmail.info
  • Thefriendlymail.info
  • Thelovingplace.net
  • Tonsofloves.com
  • Worldmeetlove.com
Some of these sites are fake mail sites, others are fake dating sites. Unlike many scams, there's a fair level of sophistication to this one so it's quite possible to see that it might drag in some unsuspecting victims.

Wednesday 8 August 2007

"Comcast Automated Systems" Trojan

A trojan embedded in a ZIP file this time. It's attempting to use a filename of statement.pdf[lots of spaces].exe


Subject: Important Notice-July 2007 Statement 0000000


PLEASE DO NOT REPLY TO THIS E-MAIL. THIS E-MAIL ADDRESS IS USED BY
COMCAST AUTOMATED SYSTEMS AND IS NOT MONITORED.

Your August 07, 2007 Bank billing statement is ready for viewing. To
view your bill download attached Adobe Acrobat PDF file.

If you would like to discontinue receiving a hard copy billing
statement in the mail, you may do so by selecting the UPDATE STATEMENT METHOD
link once you have logged into your account. From there, simply select
the option for Electronic Statement Only.

You received this e-mail because you enrolled Account feature.
If you no longer wish to receive these e-mails, you will
need to cancel your enrollment. To cancel your enrollment, please log
in to your account and from the Update Profile screen, select the cancel
link from the bottom of the page.

As far as we can tell, the filename enclosed in the ZIP file won't extract properly because there are too many spaces and the filename it too long, but the spammers will probably figure it out eventually.

If you're using Postini, then the attachment manager can be easily configured to block all .exe files, and this also applied to .exe-in-.zip files.

Detections are patchy with some AV products picking up the executable packer. When the .exe files run it will attempt to install other malware, some of which will be picked up by AV products. According to VirusTotal:


File statement.pdf____________________ received on 08.08.2007 17:44:19 (CET)
AntivirusVersionLast UpdateResult
AhnLab-V32007.8.3.02007.08.08-
AntiVir7.4.0.572007.08.08TR/Crypt.XPACK.Gen
Authentium4.93.82007.08.08-
Avast4.7.1029.02007.08.07-
AVG7.5.0.4762007.08.07-
BitDefender7.22007.08.08-
CAT-QuickHeal9.002007.08.08(Suspicious) - DNAScan
ClamAV0.912007.08.08-
DrWeb4.332007.08.08-
eSafe7.0.15.02007.07.31suspicious Trojan/Worm
eTrust-Vet31.1.50432007.08.08-
Ewido4.02007.08.08Downloader.Agent.bhl
FileAdvisor12007.08.08-
Fortinet2.91.0.02007.08.08-
F-Prot4.3.2.482007.08.08-
F-Secure6.70.13030.02007.08.08Trojan-Downloader.
Win32.Small.ehe
IkarusT3.1.1.122007.08.08-
Kaspersky4.0.2.242007.08.08Trojan-Downloader.
Win32.Small.ehe
McAfee50922007.08.07-
Microsoft1.27042007.08.08VirTool:Win32/Obfuscator.C
NOD32v224442007.08.08a variant of Win32/Spy.Nuklus
Norman5.80.022007.08.08-
Panda9.0.0.42007.08.08Suspicious file
Prevx1V22007.08.08-
Rising19.35.22.002007.08.08-
Sophos4.19.02007.08.01-
Sunbelt2.2.907.02007.08.07Infostealer.Nuklus
Symantec102007.08.08-
TheHacker6.1.7.1642007.08.08-
VBA323.12.2.22007.08.07Trojan-Spy.Win32.Small.gv
VirusBuster4.3.26:92007.08.08Trojan.DL.Small.Gen!Pac25
Webwasher-Gateway6.0.12007.08.08Trojan.Crypt.XPACK.Gen

Additional information
File size: 13824 bytes
MD5: 38ac63f8b7ef22d9a07138ba73de7178
SHA1: 6337e3178eba2859fd0e2e1188eab8b528696933
packers: UPack


-----

Sunday 5 August 2007

"S-Pharm" scam

Another money laundering/money mule scam, this time from "S-Farm". As before, money transfers of this type are illegal and you will get into serious trouble if you get involved.

Dear Sir/Madam,

S-Pharm is a USA company selling medical and consumer goods. We have
reached big sales volume of pharmaceuticals in the UK and now are trying
to penetrate the European market. Quite soon we will open
representative offices and pharmacies or authorized sales centers in the UK and
therefore we are currently looking for people who will assist us in
establishing a new distribution network there. The fact that despite the
British market is new for us we already have regular clients also speaks for
itself.

WHY YOU?
The international money transfer tax for legal entities (companies) in
USA is 25%, whereas for the individual it is only 7%. That.s why we
need you! We need agents to receive payment for our products (by
electronic money transfer) and to resend the money to us. This
way we will save money because of tax decreasing.

HOW MUCH WILL YOU EARN?
7%-9% from each sale/resale operation! For instance: you receive 1000
GBP to your bank account. You will withdraw the money and keep 70GBP (7%
from 1000GBP) for yourself! At the beginning your commission will
equal 7%, though later it will increase up to 9%!

ADVANTAGES
You do not have to go out as you will work as an independent contractor
right from your home office. Your job is absolutely legal. You can
earn up to 3000 GBP-4000 depending on time you will spend for this job.
You do not need any capital to start. The employees who make efforts and
work hard have a strong possibility to become managers. Anyway our
employees never leave us.

If you are interested in our offer, please feel free to ask for the
general provisions of the Contract.

Best regards,
S-Pharm Manager

Wednesday 1 August 2007

Wheredidyoubuythat.com spam - update

I got a nice comment from the company on this one:

My name is Karine Kong, Director from www.wheredidyoubuythat.com
First of all, please accept our sincere apologies for the inconvenience you are experiencing.
Unfortunately we have never received your email mentionning this spam issue, otherwise we would have responded to you within 48 hours. However, now we are aware of it, our technical team is looking into this to see how & why this is happening.
I would like to reassure you that for security reasons, our database does not hold customers card details so even if some malicious virus have broken into our database, there is little they could do except annoying our customers with spam emails. I shall let you know how this is resolved as soon as possible. In the meantime, do not hesitate to contact me if you have any queries.
Kind regards
I must say that this sounds 100% plausible. It looks as if the email addresses have been harvested off an infected machine.

Incidentally, wheredidyoubuythat.com does have some really nice stuff :)

"Syndey Car Centre" scam


This particular scam has been around for a few weeks now, for a wholly fictitious company called the Syndey Car Centre. Although they do have a website, it's a copy of the legitimate Stratford Car Centre in the UK who are not connected in any way with the scam.

Just to prove that spammers are actually morons, this was sent to the abuse role account.

The scam is the usual money laundering / money mule operation - if you have received one of these delete it, if you have been "recruited" then you need to speak to your local police before they speak to you.

While we may have high expectations of our associates, we also give them high rewards. Imagine being part of a stable organization with a sterling reputation - a place where the Sydney Car Centre is an integral part of all that we do. With our car centre personality, you'll not just succeed - you'll thrive. And, with our strong commitment to promoting from within, you'll definitely enjoy your rise to the top.

Today the Sydney Car Centre is looking for an industrious regional assistant to fasten the process of the delivery of customer payments to the suppliers. The position offered is a part-time job, and will only require from you to be available for 1-2 hours a day.

As a regional assistant, you will be supposed to operate with the payments from those customers, based in your country. You will be expected to accept 2-3 transactions to your bank account every week, make certain calculations about every transaction (you will be precisely instructed about it), & transfer the funds to the suppliers by means of western Union/Money Gram less your fee & the charges of the Western Union/Money Gram. You will be continuously communicating with the manager from the head office, who will instruct you & give advice regarding every new payment.

The ideal candidate will be industrious, goal-oriented person, with the availability of a personal/business bank account suitable to be used for the company needs. Knowledge of English, computer literacy and sociability are appreciated.

The company guarantees to pay NET 10% fee out of the amount of every payment you dealt with and to provide you with the regular income & flexible schedule. All the related expenses you might have (like the Western Union/Money Gram chargers, related expenses on traveling) are covered by the company.

The more detailed information is available on our web-site http://vacancy-024788504.sydncar.kg/vacancies.php, where you can fill in the on-line application form for this position.

We would be glad to welcome you in our team!

We are looking forward to hearing from you as soon as possible!

Yours sincerely, Octavio Mcnair

One odd thing is the use of a .kg domain which is Kyrgyzstan. No doubt the scammers don't come from there, they've just found a registry that is easy for them to do business with. In this particular case, the website was hosted on a compromised DSL-connected machine in the UK.

Tuesday 24 July 2007

Empireonline.com compromised


The popular movie site Empireonline.com was compromised this morning, with a rogue IFRAME - this was around 9am UK time this morning. The site now appears to be fixed.

The IFRAME connects to a page called g.htm on g.ignfile.cn which appears to be a malware server hosted on 61.151.239.13 in China. For obvious reasons, I'm not including a clickable link but see the screenshot of the source below:



g.htm loads a couple of IFRAMES and has a web counter.



014.htm has some nasty obfuscated javascript:



The other IFRAME is called imags1.htm, this leads to a compromised file on a server called sexbb888.com. It is likely that the server has been hijacked, and the site owners are unaware of the problem.



Both appear to be using variants of the MS07-017 vulnerability from April 2007, although the nature of the payload is uncertain.

In any case, the problem appears to be fixed and anyone with a fully patched system should have been protected. Still, it's a good example of how trusted sites can fall prey to malware pushers.