Sponsored by..

Wednesday 26 September 2007

Savings Pioneer (savingspioneer.com) Spam


"Savings Pioneer" (savingspioneer.com) is a persistent spammer who constantly shifts between privacy protected domains and sending IP addresses to avoid blocking. They do not honour unsubcribe requests.

They are an affiliate of Media Breakaway LLC (formerly known as OptInRealBig run by spammer Scott Richter) which in turn directs traffic through other very low quality affiliate programs such as vcmedia.com (a ValueClick domain), websponsors.com, inteletrack.com, gratisnetwork.com, swmark.com, zanox.com, atdmt.com, clash-media.net, monetizeit.net and others. In some cases the click is passed from company to company in what appears to be a fairly grubby series of business relationships.

Savings Pioneer is most likely just an affiliate of Media Breakway LLC, but Richter's outfit doesn't give any guidance on how to report affiliate abuse.

Two of Savings Pioneer's key parterns are Hurricane Electric (he.net) and Exist Hosting (existhosting.com). This latter appears to be a two-bit outfit with astoundingly bad reviews and are responsible for much of the mail handling.

The following 1,937 domains are used in rotation by Savings Pioneer to try to overcoming people blocking them. They tend to change to a new domain every day. There may be more!

If you get one of these, send a copy of the email to abuse -at- he.net.

Added 1-Nov-07: Theoretically you can also try emailing unsubscribe -at- mediabreakaway.com who seem to provide the mailing list. Unsubscribing at savingspioneer.com seems to be ignored.

Spam sites hosted on 216.218.214.250:

  • Abouttheinsect.com
  • Absolutelyimpressive.com
  • Absolutelyuncanny.com
  • Activegift.com
  • Administrativeexpert.com
  • Administrativeexpertscentral.com
  • Administrativeexpertsonline.com
  • Advancedbusinessonline.com
  • Advancedgraphicsonline.com
  • Advancedhealthtech.com
  • Advancedhomedesigns.com
  • Advancedlivingonline.com
  • Advancedprogramguide.com
  • Advancedwellnessonline.com
  • Afriendonline.com
  • Afriendsite.com
  • Airdataonline.com
  • Airmanagementonline.com
  • Airwireonline.com
  • Alarmmanagementgroup.com
  • Allboatonline.com
  • Alldigitalwork.com
  • Allfreshnews.com
  • Allnewinventions.com
  • Allpartsunlimited.com
  • Alltimedigital.com
  • Alphamanagementonline.com
  • Aluminumyacht.com
  • Amazingworldsports.com
  • Americannaturecenter.com
  • Americathewonderful.com
  • Animalhealthsite.com
  • Animalnewsonline.com
  • Antiqueautoonline.com
  • Antiqueboatauction.com
  • Appointedexecutive.com
  • Areasontogive.com
  • Areasontogiveonline.com
  • Arthropodcontrol.com
  • Arthropodculture.com
  • Arthropodencyclopedia.com
  • Arthropodfacts.com
  • Arthropodofcanada.com
  • Askhealthsource.com
  • Atlantiscrew.com
  • Authorityanswers.com
  • Badgerstatefloors.com
  • Badkarmasquad.com
  • Bakingsalts.com
  • Baymanagementsystems.com
  • Bestadvancedinfo.com
  • Bestairsystems.com
  • Bestbetdirect.com
  • Bestbusinessprogram.com
  • Bestcarpetsource.com
  • Bestcitytech.com
  • Bestdistrict.com
  • Bestfluid.com
  • Bestfriendgame.com
  • Bestfriendhost.com
  • Bestgreenhousesupplies.com
  • Bestinsectbite.com
  • Bestlabmanagement.com
  • Bestlearnenglish.com
  • Bestmarinaproperty.com
  • Bestmarmotbasin.com
  • Bestofsmoothjazz.com
  • Bestopengolf.com
  • Bestopenrates.com
  • Bestpenguins.com
  • Bestposse.com
  • Bestpowerball.com
  • Bestproducebox.com
  • Bestproductsunlimited.com
  • Bestsharingsite.com
  • Bestsmoothskin.com
  • Bestsodapop.com
  • Bestsupernet.com
  • Bestthemeparties.com
  • Bestwholeness.com
  • Bestwonderfulthings.com
  • Bigcityvisit.com
  • Biggreenbet.com
  • Biggreendirect.com
  • Biggreendream.com
  • Biggreenpalm.com
  • Biggreenventures.com
  • Bigpowerful.com
  • Bigproduce.com
  • Bigrealfruit.com
  • Bigwaxfruit.com
  • Bionatureonline.com
  • Bluemanagementgroup.com
  • Boatmotorsales.com
  • Bodyfreefitness.com
  • Bottomlessonline.com
  • Bottomlessusa.com
  • Breakmegadisco.com
  • Brightideasbulb.com
  • Brightlightbulb.com
  • Buildyourbuttons.com
  • Businessconvert.com
  • Businessdare.com
  • Businessenterprisesoa.com
  • Businessestablishmentonline.com
  • Businessgalaxies.com
  • Businessmanagementdirect.com
  • Bysecondnature.com
  • Calciumfactorsupreme.com
  • Canadaboatsales.com
  • Carsnonstop.com
  • Cedargardengreenhouse.com
  • Centercondo.com
  • Centipedearmy.com
  • Centipededirect.com
  • Centipedehouse.com
  • Centipedeleg.com
  • Centipederecords.com
  • Centipedesite.com
  • Centipedesoftware.com
  • Centipedesolutions.com
  • Centipedeworld.com
  • Centralinnovation.com
  • Centralinnovationonline.com
  • Centralinvention.com
  • Cheekymarmot.com
  • Chewymarmot.com
  • Choicemanagementservices.com
  • Choiceproductsunlimited.com
  • Citrusparkarea.com
  • Cleanairfun.com
  • Cleanpowerworld.com
  • Cliqueaway.com
  • Cliquedirect.com
  • Collegeextend.com
  • Collegegive.com
  • Collegeoffersonline.com
  • Colormanagementonline.com
  • Commercechange.com
  • Commercecreation.com
  • Commerceembark.com
  • Commerceexperience.com
  • Commercematters.com
  • Commerceobstacle.com
  • Commerceobstacles.com
  • Commercerelations.com
  • Commercestart.com
  • Commerceventure.com
  • Commercialnurseries.com
  • Concerncommerce.com
  • Concerncreation.com
  • Concernmatter.com
  • Concerntrade.com
  • Connectionunit.com
  • Cosmicdancerecords.com
  • Cosmiceggradio.com
  • Cosmiceggtest.com
  • Cosmicspacecadet.com
  • Cosmicwaterdevice.com
  • Countlesscreation.com
  • Cowsunlimitedusa.com
  • Creationsinventions.com
  • Creativemanagementonline.com
  • Creativeprotectiononline.com
  • Daswonderlandsite.com
  • Daygreensite.com
  • Dealingconnection.com
  • Dealingcreations.com
  • Dealingobstacles.com
  • Dealingrelations.com
  • Dealingventures.com
  • Defyhumannature.com
  • Dentalvisitonline.com
  • Describeamollusk.com
  • Digitalbigworld.com
  • Digitalliquidsite.com
  • Digitalmanagementonline.com
  • Digitalmediaforum.com
  • Digitalsodapop.com
  • Digitalstarworld.com
  • Digitalworldbenefits.com
  • Dimlightbulb.com
  • Directbestonline.com
  • Directioncreations.com
  • Directionpros.com
  • Directlinenow.com
  • Directmailserve.com
  • Discopunkmusic.com
  • Discothee.com
  • Dosomethingwonderful.com
  • Drinkingliquid.com
  • Dynamicgiftsonline.com
  • Dynamicleave.com
  • Dynamicoutcome.com
  • Dynamicresultonline.com
  • Dynamicsgifts.com
  • Dynamicsresult.com
  • Earthmarvel.com
  • Easyfamilyfitness.com
  • Easyfastfitness.com
  • Easygroupfitness.com
  • Easylivinghealthy.com
  • Easyonlinefitness.com
  • Easystreetfitness.com
  • Easystrong.com
  • Ecrewonline.com
  • Electricmotorsource.com
  • Embarkenterprise.com
  • Energysupersite.com
  • Enginevehicle.com
  • Enteraries.com
  • Enteryourbirthday.com
  • Entrepreneurscreations.com
  • Esharingnetwork.com
  • Esmoothjazz.com
  • Eventsunlimitedusa.com
  • Everbestfriend.com
  • Executiveappointed.com
  • Executivecreation.com
  • Executivenetworksofamerica.com
  • Executivestart.com
  • Executiveunity.com
  • Exoticwildlifeart.com
  • Expertconclusion.com
  • Expertiseknowledge.com
  • Expertmanagementsystem.com
  • Extrasmoothguide.com
  • Extremethemeparks.com
  • Factcampaign.com
  • Factorydirectguide.com
  • Familyfitnesssite.com
  • Fantasticbirthdaygifts.com
  • Fantasticcoffeesguide.com
  • Fantastichomebuys.com
  • Fantastichomesolutions.com
  • Fantasticswonderful.com
  • Fastknowledgesharing.com
  • Financestarter.com
  • Findanyshow.com
  • Findthetheme.com
  • Findyourimage.com
  • Firmcommerce.com
  • Firstfitnessclub.com
  • Fiscalfitnesscenter.com
  • Fitnessclubpro.com
  • Fitnessfindsite.com
  • Floridamaximum.com
  • Flyinginsectsite.com
  • Flyingtigersmusic.com
  • Fortunatecentral.com
  • Fortunatesite.com
  • Fortunateworld.com
  • Freegiftcentralonline.com
  • Freegiftgame.com
  • Freehabit.com
  • Freeinsect.com
  • Freepresentcards.com
  • Freepresentcentral.com
  • Freshnewstyle.com
  • Freshrootsproduce.com
  • Friendsondemand.com
  • Fromtheclique.com
  • Fromthegreenhouse.com
  • Fundentry.com
  • Fundmanagementonline.com
  • Fundmanagementsite.com
  • Fungiftcardsonline.com
  • Furrycuddleparty.com
  • Gamecentipede.com
  • Gardeninsectguide.com
  • Generalcosmiccooperation.com
  • Generalvast.com
  • Getsproduce.com
  • Getsupergreen.com
  • Giftgreatgiver.com
  • Giftsunlimitedusa.com
  • Givecardcentral.com
  • Globalbeginning.com
  • Globalbestfriend.com
  • Globalchannelone.com
  • Globalfitnessclub.com
  • Glorioussilverstallion.com
  • Goodkarmaimports.com
  • Gradelearn.com
  • Granddesignsunlimited.com
  • Greatamericanbuttons.com
  • Greatantiquecars.com
  • Greatastgiftstore.com
  • Greatcentipedebite.com
  • Greatchemists.com
  • Greatcityradio.com
  • Greatcosmicgate.com
  • Greatcrewonline.com
  • Greatdigitaldesign.com
  • Greatdiscoinferno.com
  • Greateventmanagement.com
  • Greatgamesunlimited.com
  • Greatgeneratorpro.com
  • Greatgiftscards.com
  • Greatgloriousstallion.com
  • Greatgolfdirect.com
  • Greatgreenhousekit.com
  • Greatisle.com
  • Greatkeen.com
  • Greatmanagementcompany.com
  • Greatprogressive.com
  • Greatsmoothjazz.com
  • Greattechsystems.com
  • Greatthingsunlimited.com
  • Greatvitaminguide.com
  • Greatwatertreatment.com
  • Greatwondercrew.com
  • Greatwonderland.com
  • Greenboxdirect.com
  • Greendotguide.com
  • Greenlightwebsite.com
  • Greennetworld.com
  • Greenproworld.com
  • Greensheetsonline.com
  • Greenstarworld.com
  • Greenstoreonline.com
  • Greenvalleypartners.com
  • Greenworldcall.com
  • Greenworldcom.com
  • Haydirectonline.com
  • Healthsourceworld.com
  • Highererlearninganovel.com
  • Higherlearn.com
  • Higherlearningcentral.com
  • Higherlearnings.com
  • Higherlearningstudents.com
  • Highersee.com
  • Highertake.com
  • Homefitnessfun.com
  • Homefitnessltd.com
  • Honestcontent.com
  • Honesteducationonline.com
  • Honesteducationstudents.com
  • Honestfurther.com
  • Honestlearning.com
  • Humannatureconsulting.com
  • Humannaturegifts.com
  • Ideasunlimitedusa.com
  • Ifarmproduce.com
  • Ilookfantastic.com
  • Incentiveresult.com
  • Incorporatecrew.com
  • Infoaboutpenguins.com
  • Inquirecrew.com
  • Insectcontrolzone.com
  • Insectdirect.com
  • Integratedcrew.com
  • Integrateddealing.com
  • Integratedindustry.com
  • Integratedunit.com
  • Inventivecommerce.com
  • Inventivecommerceonline.com
  • Iprofitsharing.com
  • Iskimarmot.com
  • Itsyourdisco.com
  • Iwonderonline.com
  • Justlearnonline.com
  • Karmadogonline.com
  • Kidpowerworld.com
  • Kidslearndirect.com
  • Kidslearnflash.com
  • Kidslearnnow.com
  • Kidsunlimitedonline.com
  • Kidsunlimitedusa.com
  • Knowledgedealing.com
  • Latestmedicalinventions.com
  • Learnaboutkids.com
  • Learndirectlondon.com
  • Learnenglishclub.com
  • Learnmorelinux.com
  • Learnmoreweb.com
  • Learnphonicsonline.com
  • Learnworldmusic.com
  • Legalpowerline.com
  • Letslearnmath.com
  • Letslearnsite.com
  • Letsvisitdirect.com
  • Lifesharingcenter.com
  • Lightbulbbay.com
  • Lightbulblink.com
  • Lightbulbmountain.com
  • Limitlesscommerce.com
  • Limitlesstrade.com
  • Liquidbrandonline.com
  • Liquidworldrecords.com
  • Littlegreenonline.com
  • Littlesunshineschool.com
  • Littlewebwonder.com
  • Littlewondercrew.com
  • Looksharpmodels.com
  • Looksharpusa.com
  • Lovesupremeonline.com
  • Lovetheisland.com
  • Loveyournature.com
  • Lowerlearn.com
  • Lowersee.com
  • Lowerstudy.com
  • Loyaldealing.com
  • Loyalindustry.com
  • Mammothmarmot.com
  • Managementcreations.com
  • Marinearthropod.com
  • Marmotdirect.com
  • Marmotsupreme.com
  • Marvelvast.com
  • Mediaunlimitedonline.com
  • Megaprotech.com
  • Mendeleevchemists.com
  • Mendeleevworld.com
  • Microtechguide.com
  • Minisodapop.com
  • Molluskgrins.com
  • Molluskshells.com
  • Molluskworld.com
  • Monetaryfundportal.com
  • Moralforceresult.com
  • Mostadvancedproduct.com
  • Mostwonderfullife.com
  • Mostwonderfulonline.com
  • Moveyourbuttons.com
  • Moviechanneldirect.com
  • Mrsunshineonline.com
  • Myadministrativeexperts.com
  • Myamazingfruit.com
  • Myareasontogive.com
  • Mybestisland.com
  • Mybigcreation.com
  • Mybusinessassociates.com
  • Mybusinesscommerce.com
  • Mybusinesscreations.com
  • Mybusinessdare.com
  • Mybusinessdemand.com
  • Mybusinessinvention.com
  • Mybusinessmap.com
  • Mybusinesstrade.com
  • Mycentralinnovation.com
  • Mycollegeoffers.com
  • Mycommercechange.com
  • Mycommerceconnection.com
  • Mycommercecreations.com
  • Mycommercedeals.com
  • Mycommerceobstacles.com
  • Mycommercerelations.com
  • Mycommerceventures.com
  • Mycosmicdance.com
  • Mycreativebusiness.com
  • Mycreativeprotection.com
  • Mydynamicgifts.com
  • Mydynamicresult.com
  • Myexecutivebranch.com
  • Myexecutivebusiness.com
  • Myexecutivecreations.com
  • Myexecutiveexchange.com
  • Myexecutiveone.com
  • Myexecutiveworks.com
  • Myexpertdecisions.com
  • Myfreegiftcentral.com
  • Myfruitstore.com
  • Myfungiftcards.com
  • Mygiftacard.com
  • Mygiftsindemand.com
  • Mygiveagift.com
  • Myglaciergifts.com
  • Myglobalcreation.com
  • Mygreatestpals.com
  • Mygreatgiver.com
  • Myintegratedcommerce.com
  • Myintegratedcrew.com
  • Myinventivecommerce.com
  • Mykeyproduction.com
  • Myknowledgecommerce.com
  • Mylimitlesscommerce.com
  • Mymanagementcreations.com
  • Mymanagementpros.com
  • Mynewcommerce.com
  • Myoptimalanswers.com
  • Myoptimalpartners.com
  • Myprofessionalanswers.com
  • Myprofessionalnetworks.com
  • Myprofessionscrew.com
  • Mysmartgrowth.com
  • Mysupercrew.com
  • Mysuperiorbusiness.com
  • Mytreasuregifts.com
  • Myuniversalcommerce.com
  • Myvalleycommerce.com
  • Myventureembark.com
  • Mywinagiftcard.com
  • Mywinaprize.com
  • Mywondercrewonline.com
  • Mywonderworks.com
  • Myworldwonder.com
  • Naturalfitnessguide.com
  • Nesteggentry.com
  • Nesteggportal.com
  • Netgiftsunlimited.com
  • Netmanagementservices.com
  • Netpowergenerator.com
  • Newcommerceonline.com
  • Newcoproductions.com
  • Newcrosstech.com
  • Newdigitalcity.com
  • Newmoonfruit.com
  • Newportboatrental.com
  • Nonstoplink.com
  • Nothingaboutpenguins.com
  • Novelcommerce.com
  • Noviewgreenhouse.com
  • Nycantiqueguide.com
  • Oldantiqueonline.com
  • Oldantiqueshow.com
  • Omxexchange.com
  • Onegreatgreenhouse.com
  • Onesmoothbagel.com
  • Onlinemotorsite.com
  • Openseaonline.com
  • Optimalpartnersonline.com
  • Optimalquestions.com
  • Optimalreply.com
  • Optimalrespond.com
  • Optimalwork.com
  • Originativeassets.com
  • Originativebusiness.com
  • Originativecommerce.com
  • Originativeearth.com
  • Originativeglobe.com
  • Originativeuniverse.com
  • Originativeworld.com
  • Originmanagementgroup.com
  • Ourfantasticfamilies.com
  • Ourpowerline.com
  • Outislandmarina.com
  • Papermanagementgroup.com
  • Partsunlimitedinc.com
  • Penguinproductionsonline.com
  • Peoplecanlearn.com
  • Perkinpals.com
  • Perklove.com
  • Perkluv.com
  • Peruviancentipede.com
  • Plasticfantasticsurf.com
  • Pokethepenguins.com
  • Pontoonship.com
  • Portfitness.com
  • Possemachine.com
  • Powerlinenow.com
  • Powersupplytech.com
  • Presentacard.com
  • Professionalcloth.com
  • Professionalrespond.com
  • Professioncrew.com
  • Professionscrew.com
  • Professionsunit.com
  • Publicradionetworks.com
  • Publicschoolrugby.com
  • Purenatureonline.com
  • Q2result.com
  • Radiantbulbguide.com
  • Razorsharpminds.com
  • Razorsharponline.com
  • Realsupersite.com
  • Rednotginger.com
  • Repairsourceonline.com
  • Rexdigitalmedia.com
  • Rightcamps.com
  • Savingsentrance.com
  • Savingsentree.com
  • Savingsentry.com
  • Savingsportalonline.com
  • Schoolintellect.com
  • Schoolmind.com
  • Schoolprovide.com
  • Schooluniformdisco.com
  • Secondnatureprograms.com
  • Secondoutdoors.com
  • Sharingourmoment.com
  • Sharingoursouls.com
  • Sharingyourblessings.com
  • Sharpedgetools.com
  • Sharpshoponline.com
  • Sharpsolutionsonline.com
  • Sharpworldimport.com
  • Sharpworldtravel.com
  • Shopdirectguide.com
  • Silentthemesite.com
  • Simplysmoothflavor.com
  • Simplyvelvet.com
  • Simplywonderfulscents.com
  • Sitesvalley.com
  • Smackthepenguins.com
  • Smoothgroovesonline.com
  • Smoothjazzarchives.com
  • Smoothjazzinfo.com
  • Smoothmovebenefits.com
  • Smoothmovesonline.com
  • Smoothsailingbeverages.com
  • Smoothskincompany.com
  • Smoothtransitionsonline.com
  • Smoothworldpromotion.com
  • Snailsdirect.com
  • Snailsstore.com
  • Softbodyfitness.com
  • Solutionsunlimitednow.com
  • Spacecosmic.com
  • Speedysnails.com
  • Sportsmanagementonline.com
  • Stateinsectonline.com
  • Stickworms.com
  • Stoptheinsect.com
  • Stopthepenguins.com
  • Strategicalgroup.com
  • Strategicalmethod.com
  • Strategicalsystem.com
  • Strategicsystemsonline.com
  • Stuffedwildlife.com
  • Sunriseharbormarina.com
  • Sunshinecruisesonline.com
  • Sunshinegrouponline.com
  • Sunshinestateflowers.com
  • Sunshinestatemagazine.com
  • Sunshinestatesupply.com
  • Superairco.com
  • Superantiqueappraisals.com
  • Superantiquedealers.com
  • Superarthropodsite.com
  • Superchannelone.com
  • Superdirectonline.com
  • Superdistrict.com
  • Superfanunlimited.com
  • Superfitnessequipment.com
  • Superfoodsupreme.com
  • Superfriendclub.com
  • Superfunddirect.com
  • Superginger.com
  • Supergreenhousekit.com
  • Supergreenlife.com
  • Supermanagementservices.com
  • Supermolluskworld.com
  • Superopenhomes.com
  • Superpenguinsfan.com
  • Superpowersupply.com
  • Superseekandfind.com
  • Supersharingfiles.com
  • Supersharingsite.com
  • Supersmoothmove.com
  • Supersoftwareunlimited.com
  • Supersuperdeal.com
  • Supersupervision.com
  • Superuncanny.com
  • Supervitaminman.com
  • Superwaterbed.com
  • Superwondercrew.com
  • Superwonderland.com
  • Supremeautobiz.com
  • Supremeautoshop.com
  • Supremecouncilonline.com
  • Suprememotorworld.com
  • Supremeplusonline.com
  • Supremetrustonline.com
  • Supremewheelsonline.com
  • Supremeworldwrestling.com
  • Surrealdesignsunlimited.com
  • Sweepsbest.com
  • Techworldlink.com
  • Terraviewgreenhouse.com
  • Theadministrativeexperts.com
  • Theairsite.com
  • Theairzone.com
  • Theanimalkids.com
  • Theanimalmob.com
  • Theanimalpeople.com
  • Theantiquearchives.com
  • Theantiquegame.com
  • Theareasontogive.com
  • Thearthropodguide.com
  • Thebigcreation.com
  • Thebirthdayinvitation.com
  • Thebirthdayking.com
  • Thebirthdayworks.com
  • Thebodysupreme.com
  • Thebusinessassociates.com
  • Thebusinesscommerce.com
  • Thebusinesscreations.com
  • Thebusinessdare.com
  • Thebusinessdemand.com
  • Thebusinessestablishment.com
  • Thebusinessinvention.com
  • Thebusinesstrade.com
  • Thebutterflygifts.com
  • Thecentipedeonline.com
  • Thecentralinnovation.com
  • Thecitrusfactor.com
  • Thecitruszone.com
  • Thecitymart.com
  • Thecollegeintellect.com
  • Thecollegeoffers.com
  • Thecommercechange.com
  • Thecommerceconnection.com
  • Thecommercecreations.com
  • Thecommercedeals.com
  • Thecommerceobstacles.com
  • Thecommercerelations.com
  • Thecommerceventures.com
  • Theconecrew.com
  • Thecoolgiftcards.com
  • Thecosmicbagel.com
  • Thecosmicblues.com
  • Thecosmiceye.com
  • Thecosmicgoose.com
  • Thecosmicrim.com
  • Thecosmicvoid.com
  • Thecosmicwok.com
  • Thecosmicwow.com
  • Thecreativeprotection.com
  • Thecrewcab.com
  • Thecrewproductions.com
  • Thecrunchcrew.com
  • Thedatagenerator.com
  • Thedigitalnow.com
  • Thedirectleads.com
  • Thediscokid.com
  • Thedotgenerator.com
  • Thedowntownhub.com
  • Thedowntownmap.com
  • Thedynamicgifts.com
  • Thedynamicresult.com
  • Theexecutivebusiness.com
  • Theexecutivecreations.com
  • Theexecutiveone.com
  • Theexecutivesolutions.com
  • Theexecutiveworks.com
  • Theexpertdecisions.com
  • Thefantasticbargains.com
  • Thefantasticplastic.com
  • Thefavoritegiftcards.com
  • Thefinancestarter.com
  • Thefitnessenthusiast.com
  • Thefreegiftcentral.com
  • Thefreshside.com
  • Thefreshstory.com
  • Thefreshword.com
  • Thefrugalfriend.com
  • Thefruitypenguins.com
  • Thegiftacard.com
  • Thegiftcardcentral.com
  • Thegiftingseason.com
  • Thegiftsindemand.com
  • Thegingerquestion.com
  • Thegiveagift.com
  • Thegiveareason.com
  • Theglaciergifts.com
  • Theglobalcreation.com
  • Thegreatgiver.com
  • Thegreenbroom.com
  • Thegreencouch.com
  • Thegreenhousebiz.com
  • Thegreenhousecafes.com
  • Thegreenhousecentre.com
  • Thegreenhouseguy.com
  • Thegreenhouseltd.com
  • Thehigherlearning.com
  • Theinfinitecreation.com
  • Theinsectdude.com
  • Theinsectflies.com
  • Theinsectmuseum.com
  • Theintegratedcommerce.com
  • Theintegratedcrew.com
  • Theinventionscompany.com
  • Theinventionsportal.com
  • Thekarmaarmy.com
  • Thekarmacup.com
  • Thekarmadetectives.com
  • Thekeyproduction.com
  • Theknowledgecatalyst.com
  • Theknowledgecommerce.com
  • Theknowledgeportal.com
  • Thelearninggreenhouse.com
  • Thelearnmachine.com
  • Thelearnnet.com
  • Thelimitlesscommerce.com
  • Theliquidband.com
  • Themagnificentcrocodile.com
  • Themanagementcreations.com
  • Themarinahouse.com
  • Themastercrew.com
  • Themepartiesplus.com
  • Themepartydepot.com
  • Themolluskguide.com
  • Themostwonderful.com
  • Themotorport.com
  • Thenaturetours.com
  • Thenetglobe.com
  • Theoldgreenhouse.com
  • Theonlyantique.com
  • Theoptimalanswers.com
  • Theoptimalpartners.com
  • Thepapertigers.com
  • Thepenguinsauctio.com
  • Thepenguinsrock.com
  • Thepenguinsrule.com
  • Thepowerchannel.com
  • Theprocrew.com
  • Theproduceking.com
  • Theprofessionalanswers.com
  • Thepublicbean.com
  • Thepurplepenguins.com
  • Therealvitamin.com
  • Therootcrew.com
  • Thesarcasticbadger.com
  • Thescreamingvegan.com
  • Thesharingangel.com
  • Thesharingcommunity.com
  • Thesharinglens.com
  • Thesharingpatrol.com
  • Thesharingprogram.com
  • Thesharingring.com
  • Thesharingsites.com
  • Thesharingsoftware.com
  • Thesharpdesign.com
  • Thesharpguide.com
  • Thesmoothcharacter.com
  • Thesmoothmovers.com
  • Thesmoothmoves.com
  • Thesmoothpursuit.com
  • Thesmoothsite.com
  • Thesmoothtransition.com
  • Thesmoothworks.com
  • Thesoftwaregenerator.com
  • Thesonicchannel.com
  • Thestonetigers.com
  • Thestrategicsystems.com
  • Thesunshinecommerce.com
  • Thesunshinekids.com
  • Thesuperiorbusiness.com
  • Thesuperkit.com
  • Thesuprememeal.com
  • Thetablesaw.com
  • Theteamtheme.com
  • Thetigersroar.com
  • Thetinyisland.com
  • Thetreasuregifts.com
  • Theultimatefitness.com
  • Theunitedexecutives.com
  • Theuniversalcommerce.com
  • Theunlimitednetwork.com
  • Theunlimitedoutlet.com
  • Theunlimitedpotential.com
  • Thevalleycommerce.com
  • Theventureembark.com
  • Thevirtualgreenhouse.com
  • Thewaterheater.com
  • Thewebclique.com
  • Thewildisland.com
  • Thewildlifecenter.com
  • Thewildlifepark.com
  • Thewinagiftcard.com
  • Thewinaprize.com
  • Thewirelessmarina.com
  • Thewonderbay.com
  • Thewondercrew.com
  • Thewonderdome.com
  • Thewonderfullife.com
  • Thewonderfulpeople.com
  • Thewonderfulshoppe.com
  • Thewonderfulsixties.com
  • Thewonderguys.com
  • Thewonderlandclubs.com
  • Thewonderlandexchange.com
  • Thewonderlandonline.com
  • Thewonderlandparty.com
  • Thewondernet.com
  • Theworldcrew.com
  • Theworldknowledge.com
  • Theworldmanagement.com
  • Thezodiacconnection.com
  • Thezodiacdolls.com
  • Thezodiaczoo.com
  • Thisamazingworld.com
  • Thisoldantique.com
  • Thunderbaymarina.com
  • Tigerseyegraphics.com
  • Tinyemperorpenguins.com
  • Totalfitnessdirect.com
  • Tothegreenhouse.com
  • Tradeembark.com
  • Tradeobstacles.com
  • Trovegift.com
  • Truthrace.com
  • Tuxthepenguins.com
  • Ultimatesupreme.com
  • Ultrasmoothsurfaces.com
  • Uncountedcreation.com
  • Unfastenedair.com
  • Unitedexecutivesonline.com
  • Uniteexecutives.com
  • Universalchamber.com
  • Universalcommerceonline.com
  • Universaldealing.com
  • Universewonder.com
  • Universityintellect.com
  • Unlimitedcareusa.com
  • Unlimitedgraphicsonline.com
  • Unlimitedsoundsonline.com
  • Uptownreal.com
  • Usalimitededitions.com
  • Valleydealing.com
  • Valleyscommerce.com
  • Vastegg.com
  • Veganinfurs.com
  • Venturebegin.com
  • Ventureembark.com
  • Ventureembarkonline.com
  • Ventureendeavor.com
  • Ventureinitiative.com
  • Videomailgenerator.com
  • Viewthemarina.com
  • Virtualvisitonline.com
  • Visitusafirst.com
  • Webadministrativeexperts.com
  • Webbusinessassociates.com
  • Webbusinessboard.com
  • Webbusinesscommerce.com
  • Webbusinessdeals.com
  • Webbusinessdemand.com
  • Webbusinessestablishment.com
  • Webbusinessexperience.com
  • Webbusinessinvention.com
  • Webbusinesstrade.com
  • Webcollegeintellect.com
  • Webcollegeoffers.com
  • Webcommerceconnection.com
  • Webcommercedeals.com
  • Webcommercerelations.com
  • Webcommerceventures.com
  • Webcoolgiftcards.com
  • Webcreativeprotection.com
  • Webcrewonline.com
  • Webdynamicgifts.com
  • Webdynamicresult.com
  • Webexecutivebranch.com
  • Webexecutiveone.com
  • Webexecutiveworks.com
  • Webfavoritegiftcards.com
  • Webfortunate.com
  • Webfreegiftcentral.com
  • Webgiftcardcentral.com
  • Webgiftingseason.com
  • Webgiveareason.com
  • Webglaciergifts.com
  • Webglobalbusiness.com
  • Webglobalcreation.com
  • Webglobaltrust.com
  • Webhigherlearning.com
  • Webintegratedcommerce.com
  • Webintegratedcrew.com
  • Webkeyproduction.com
  • Webknowledgecommerce.com
  • Webnewcommerce.com
  • Webnewcommerceonline.com
  • Weboptimalanswers.com
  • Weboptimalpartners.com
  • Webprofessionalanswers.com
  • Websavingsportal.com
  • Webstrategicsystems.com
  • Webuniversalcommerce.com
  • Webventureembark.com
  • Webwondercrew.com
  • Whitetigerscreation.com
  • Whitetigerssecurity.com
  • Whoismendeleev.com
  • Wideopengolf.com
  • Wildanimalhealth.com
  • Wildanimaltours.com
  • Wildlifephotoindex.com
  • Winagiftcardonline.com
  • Wisconsinbadgersport.com
  • Wisecentipede.com
  • Wondercrew.com
  • Wondercrewonline.com
  • Wondercrewproductions.com
  • Wondercrewworld.com
  • Wonderdirect.com
  • Wonderfulthingsdirect.com
  • Wonderposse.com
  • Wonderworldgroup.com
  • Wonderworldradio.com
  • Wonderworldweb.com
  • Woollymarmot.com
  • Workenterprise.com
  • Worldbeginning.com
  • Worldvitaminsource.com
  • Worldwildlifeclub.com
  • Worldwonderonline.com
  • Wowcrewonline.com
  • Yourairsupply.com
  • Youramazingsuccess.com
  • Youranimalcare.com
  • Youranimallink.com
  • Yourantiquecar.com
  • Yourboatshows.com
  • Yourbulbman.com
  • Yourcentipede.com
  • Yourcosmiccoach.com
  • Yourcosmicegg.com
  • Yourdigitalinfo.com
  • Yourdirectline.com
  • Yourdirectsupply.com
  • Yourfantastichome.com
  • Yourfavouritebuttons.com
  • Yourfindonline.com
  • Yourfinecity.com
  • Yourglobalaccess.com
  • Yourglobespan.com
  • Yourgreenhouseeffect.com
  • Yourgreenhouseflorist.com
  • Yourinsect.com
  • Yourinsectbites.com
  • Yourknowledgeonline.com
  • Yourlifewonderful.com
  • Yourlimitededition.com
  • Yourlivingair.com
  • Yourmanagementgroup.com
  • Yourmotorcenter.com
  • Yourowngreen.com
  • Yourpenguins.com
  • Yourpuppyfind.com
  • Yoursecondnature.com
  • Yoursharingnetwork.com
  • Yoursmoothmoves.com
  • Yoursodafountain.com
  • Yoursunlight.com
  • Yourtechdirect.com
  • Yourthemesongs.com
  • Yourtradesource.com
  • Yourunlimitedfuture.com
  • Yourunlimitedgrowth.com
  • Yourunlimitedvoice.com
  • Yourwaterparks.com
  • Yourwatertreatment.com
  • Yourwayunlimited.com
  • Yourwondercrew.com
  • Yourzonemanagement.com
  • Youthunlimitedonline.com
  • Zipsbuttonsonline.com
  • Zonefitnessonline.com

Spam sites hosted on 64.62.194.78:

  • Acceptpartners.com
  • Accuratedirection.com
  • Accuratemanagementonline.com
  • Accurateorganization.com
  • Activitygrowth.com
  • Agreeoverview.com
  • Aheadmotion.com
  • Aheadmotion.net
  • Alwaysthebestperks.com
  • Amelioratedfriends.com
  • Artisticexhibition.com
  • Artisticgeography.com
  • Artistichistory.com
  • Artisticpast.com
  • Artisticstory.com
  • Ascendancynow.com
  • Attainmentnow.com
  • Authenticdirection.com
  • Authoritativestandards.com
  • Bestelementaryscience.com
  • Bestforwardthinking.com
  • Bestforwardthinking.net
  • Bigstepforward.com
  • Boompioneer.com
  • Borntoloveperks.com
  • Bridgeoverview.com
  • Carefuldirection.com
  • Certainfact.com
  • Chillyweather.com
  • Classicalcriterion.com
  • Classicalpost.com
  • Classicalstandard.com
  • Classicalstandardssybase.com
  • Clearblind.com
  • Clearupsight.com
  • Closedirection.com
  • Clothesstandards.com
  • Comparefact.com
  • Concretedirection.com
  • Concretefact.com
  • Confirmedfact.com
  • Consistentaction.com
  • Consistentbeginning.com
  • Consistentdocument.com
  • Consistentriver.com
  • Consistentsource.com
  • Continuinginstruction.com
  • Coveroverview.com
  • Crossoverview.com
  • Crosssummary.com
  • Defindeddirection.com
  • Definitedirection.com
  • Definitefact.com
  • Definitivestandards.com
  • Deftdirection.com
  • Delicioustrends.com
  • Delightfulcourse.com
  • Delightfultrend.com
  • Delightfultrends.com
  • Delightfultrendsonline.com
  • Dependablecommunication.com
  • Detaileddirection.com
  • Developmentgrowth.com
  • Directchoiceusa.com
  • Directsolutionsonline.com
  • Directwayonline.com
  • Discriminatingdirection.com
  • Discriminitivedirection.com
  • Doyouloveourperks.com
  • Doyoulovetheperks.com
  • Earthtravelfun.com
  • Educationandinstruction.com
  • Educationnetworld.com
  • Electricmotorinc.com
  • Eminencenow.com
  • Employablewealth.com
  • Establishcare.com
  • Establishwant.com
  • Exactestate.com
  • Examinationhistory.com
  • Exceptionalpals.com
  • Existingfact.com
  • Expanseeducation.com
  • Extrahomeperks.com
  • Factualdirection.com
  • Fantasticfable.com
  • Fashioncriterion.com
  • Fashionstandards.com
  • Fashionstandardsonline.com
  • Fastforwardink.com
  • Favoritepals.com
  • Firstblueplanet.com
  • Firstcontrols.com
  • Firstthinking.com
  • Firstthinking.net
  • Floppyboots.com
  • Floppyfootwear.com
  • Floppyshoes.com
  • Focalizecompany.com
  • Focuseddate.com
  • Fortunepioneer.com
  • Forwardworldtour.com
  • Founddeal.com
  • Fringebuds.com
  • Fringefella.com
  • Fringe-friends.com
  • Fruitionpioneer.com
  • Fundmagician.com
  • Gainpioneer.com
  • Getablewealth.com
  • Getfastforward.com
  • Givestrength.com
  • Globetravelfun.com
  • Goodharbour.com
  • Goofypresent.com
  • Goofypresents.com
  • Gotta-have-my-perk.com
  • Greatdirectlink.com
  • Greatfables.com
  • Greekstandards.com
  • Happinesspioneer.com
  • Helpfulanomaly.com
  • Helpfuleccentric.com
  • Helpfuloddball.com
  • Helpfulvolunteers.com
  • Helpoverview.com
  • Helpoverviews.com
  • Higherinstruction.com
  • Holdoverview.com
  • Honestserve.com
  • Hugeeducation.com
  • Immenseeducation.com
  • Impactnext.com
  • Indesputablefact.com
  • Inquiryhistory.com
  • Instructionservices.com
  • Justdirection.com
  • Kindgeek.com
  • Kindgeeks.com
  • Launchcaring.com
  • Liquidsoaplive.com
  • Lookingfront.com
  • Makeintelligence.com
  • Makesight.com
  • Makestandards.com
  • Manageagree.com
  • Managehelp.com
  • Managehold.com
  • Masterypioneer.com
  • Maturationgrowth.com
  • Maturationincrease.com
  • Maturationnow.com
  • Maturationobject.com
  • Maturationpioneer.com
  • Maturationprocess.com
  • Memorizinghistory.com
  • Mobileachieve.com
  • Mobilesomeone.com
  • Mobilesuccessonline.com
  • Modestandards.com
  • Monitorfitness.com
  • Monitorreport.com
  • Monitorwealth.com
  • Moreperksthananyone.com
  • Musehistory.com
  • Myaccuratemanagement.com
  • Mybestamigos.com
  • Mybetterperks.com
  • Mybuddiesperks.com
  • Mybuddysperks.com
  • Myclassicalstandards.com
  • Myclearsight.com
  • Myconsistentsource.com
  • Mycoolpals.com
  • Mycreateintelligence.com
  • Mydelightfultrends.com
  • Myfantasticfables.com
  • Myfashionstandards.com
  • Myfavoriteamigo.com
  • Myfavoritefringe.com
  • Myfloppyshoes.com
  • Myfocusedcompany.com
  • Myfriendlyshare.com
  • My-friends-forever.com
  • Myfundswizard.com
  • Mygoofygifts.com
  • Myhelpfulgeek.com
  • Myhonestservice.com
  • Mykindmates.com
  • Mykindpals.com
  • Mylongvacation.com
  • Mymaintainhealth.com
  • Mymanagesupport.com
  • Mymobileachieve.com
  • Mymobilesuccess.com
  • Mymonitorhealth.com
  • Mynicepals.com
  • Myonyxsparkles.com
  • Myownbestpals.com
  • Mypalsyourpals.com
  • My-perk-buddies.com
  • My-perk-buddy.com
  • Myprovidestrength.com
  • Myreliablecommunication.com
  • Myrestorehistory.com
  • Mysecuretoday.com
  • Myspanningoverview.com
  • Mysupervisedreport.com
  • Myvasteducation.com
  • Myworldtravelfun.com
  • Nicetrend.com
  • Oldsoapfactory.com
  • Onyxspark.com
  • Onyxsparkle.com
  • Onyxsparkles.com
  • Operativewealth.com
  • Orderedsource.com
  • Originalperks.com
  • Originativesolution.com
  • Overseereport.com
  • Palsformyperks.com
  • Passsight.com
  • Peopletravelfun.com
  • Perkbooster.com
  • Perkboosters.com
  • Perkboss.com
  • Perkbrother.com
  • Perkbrothers.com
  • Perkbuddies.com
  • Perkbuddy.com
  • Perkchamp.com
  • Perkchamps.com
  • Perkchief.com
  • Perkchoice.com
  • Perkchoices.com
  • Perkchum.com
  • Perkchums.com
  • Perkclass.com
  • Perkfellow.com
  • Perkfellows.com
  • Perkforever.com
  • Perk-for-ever.com
  • Perkinggoodtime.com
  • Perkinggreattime.com
  • Perkmate.com
  • Perksaregreat.com
  • Perksarenice.com
  • Perks-for-ever.com
  • Perksforeverybody.com
  • Perksforpeople.com
  • Perksforthemasses.com
  • Perkyeah.com
  • Planetearthnow.com
  • Planetearthsystems.com
  • Ponderinghistory.com
  • Poweredguitar.com
  • Poweredmotor.com
  • Preparesucceed.com
  • Progresspioneer.com
  • Propitiouspals.com
  • Propitiousperks.com
  • Provideforce.com
  • Provideintensity.com
  • Providestrength.com
  • Pushuptheperk.com
  • Questioninghistory.com
  • Readysucceed.com
  • Realizationpioneer.com
  • Reflectionhistory.com
  • Reliableact.com
  • Reliablecommunicationonline.com
  • Renewhistory.com
  • Renewstatus.com
  • Renewwealth.com
  • Replacewealth.com
  • Reporteddirection.com
  • Respectedperson.com
  • Respectpartners.com
  • Restorefresh.com
  • Revivefresh.com
  • Savingspioneer.com
  • Screenhealth.com
  • Secureyesterday.com
  • Sensationpioneer.com
  • Shapemap.com
  • Soaringcontributions.com
  • Somanyawesomeperks.com
  • Soughtcaring.com
  • Spanningbridge.com
  • Spanningoverview.com
  • Spanningoverviewonline.com
  • Spanningoverviews.com
  • Spanningsummary.com
  • Spanoverview.com
  • Strongtoday.com
  • Stylestandards.com
  • Substantivefact.com
  • Successfulactivity.com
  • Successfulbeginning.com
  • Successfulcreation.com
  • Successfulcreationsonline.com
  • Superahead.com
  • Superahead.net
  • Superliteratureonline.com
  • Superviseaccount.com
  • Supervisedaccount.com
  • Supervisedinform.com
  • Supervisedpaper.com
  • Supervisedschool.com
  • Superviseinform.com
  • Supervisereport.com
  • Supplystrength.com
  • Supportoverview.com
  • Supportoverviews.com
  • Sweepoverview.com
  • Tangiblefact.com
  • Theaccuratemanagement.com
  • Thebargainsbasement.com
  • Thebestchum.com
  • Thebetterchums.com
  • Theclassicalstandards.com
  • Theconsistentsource.com
  • Thecoolestpals.com
  • Thecoolpals.com
  • Thecreateintelligence.com
  • Thedelightfultrends.com
  • Theelectricpage.com
  • Theelectricworks.com
  • Thefantasticfables.com
  • Thefashionstandards.com
  • Thefastforward.com
  • Thefloppyshoes.com
  • Thefocusedcompany.com
  • Thehonestservice.com
  • Thejupitergroups.com
  • Thejupitergroups.net
  • Themanagesupport.com
  • Themobileachieve.com
  • Themobilesuccess.com
  • Themonitorhealth.com
  • Theperkbuddies.com
  • The-perk-buddies.com
  • Theperksforever.com
  • Theprovidestrength.com
  • Thereliablecommunication.com
  • Therenewhealth.com
  • Therespectedpartners.com
  • Thesecuretoday.com
  • Thesoapcafe.com
  • Thesoapcafe.net
  • Thespanningoverview.com
  • Thesuccessfulcreations.com
  • Thesupervisedreport.com
  • Thetuxhop.com
  • Thetuxpenguin.com
  • Thewebdelight.com
  • Theworldtravelfun.com
  • Thriftreport.com
  • Toomanyperks.com
  • Triumphpioneer.com
  • Universetravelfun.com
  • Unrestrictedwealth.com
  • Vasteducation.com
  • Victorypioneer.com
  • Voiphonestservice.com
  • Wayfirst.com
  • Wayfirst.net
  • Weallloveperks.com
  • Wearewelcoming.com
  • Webaccuratemanagement.com
  • Webclassicalstandards.com
  • Webdelightfultrends.com
  • Webfashionstandards.com
  • Webfocusedcompany.com
  • Webhonestservice.com
  • Webimpactfuture.com
  • Webmobilesuccess.com
  • Webprovidestrength.com
  • Webreliablecommunication.com
  • Websecuretoday.com
  • Webspanningoverview.com
  • Websuccessfulcreations.com
  • Websupervisedreport.com
  • Welovetheperks.com
  • Willyoubemypal.com
  • Willyoubeourpal.com
  • Wonderfulfables.com
  • Worldjourneyfun.com
  • Worldtravelhumour.com
  • Worldtravelplay.com
  • Worldtravelsport.com
  • Yodudebemypal.com
  • Yoletsbepals.com
  • Youandiloveperks.com
  • Yourbestperks.com
  • Yourbetterperks.com
  • Youreducationsystem.com
  • Yourforwardvision.com
  • Yourpalsmypals.com
  • Yourplanetmedia.com

Spam sites hosted on 64.71.191.226 (added 28-9-07)

  • Aboutworlds.com
  • Aboutworlds.net
  • Acedeliveryonline.com
  • Affableallies.com
  • Affablebuds.com
  • Affectionatedeals.com
  • Affectionatefriend.com
  • Alliedhealthprofessions.com
  • Alliedhelp.com
  • Allprofessionsguide.com
  • Amelioratedpal.com
  • Amfreepress.com
  • Animalfriendlyproducts.com
  • Animalrescuestore.com
  • Animalsupplysite.com
  • Antpowersystems.com
  • Aquapetsupply.com
  • Authenticsreliable.com
  • Automaticdeliverysite.com
  • Badgerstatesurplus.com
  • Benchpaper.com
  • Benevolentbenefactor.com
  • Bestbadger.com
  • Bestcanopyswing.com
  • Bestdealsdelivery.com
  • Bestelephant.com
  • Bestelephant.net
  • Bestelephantseal.com
  • Bestelephantseal.net
  • Bestfashiondirect.com
  • Bestmeddelivery.com
  • Bestplanets.com
  • Bestplanets.net
  • Bestplanmanagement.com
  • Bestpresskit.com
  • Bestpresskit.net
  • Bestreliable.com
  • Bestwebcollections.com
  • Bestwebcollections.net
  • Blueelephantny.com
  • Blueelephantny.net
  • Brownpaperonline.com
  • Brownpaperonline.net
  • Brownpapertop.net
  • Businessfindonline.com
  • Businessprotectionguide.com
  • Canadasbestprofessionals.com
  • Cashcropcaptain.com
  • Cashcropcowboy.com
  • Casperdirect.com
  • Casperdirect.net
  • Casperhomesinfo.com
  • Casperhomesinfo.net
  • Casperhomesonline.com
  • Casperreal.com
  • Casperreal.net
  • Casperstart.com
  • Casperstart.net
  • Casperwebguide.com
  • Casperwebguide.net
  • Checksconcord.com
  • Checksconcord.net
  • Chummychums.com
  • Citiescasper.com
  • Citiescasper.net
  • Clutchbase.com
  • Collegedegreecareer.com
  • Companionsupplysite.com
  • Computerrodent.com
  • Concordnew.com
  • Concordnew.net
  • Concreteprotectionplan.com
  • Contractcharter.com
  • Contractcharter.net
  • Cookingfruit.com
  • Coolestsidekick.com
  • Coolestsidekicks.com
  • Coraldeposit.com
  • Cordialcouple.com
  • Corporatemain.com
  • Cosmicmusicspace.com
  • Dataprotectionanswers.com
  • Deliverystoreonline.com
  • Depthealthprofessions.com
  • Depthealthprofessions.net
  • Desertratonline.com
  • Designsconsulting.com
  • Designssystems.com
  • Dogfriendlypress.com
  • Ecofriendlyfish.com
  • Ecofriendlytimes.com
  • Educatedstate.com
  • Educationdonation.com
  • Emblemselephant.com
  • Emblemselephant.net
  • Estateentry.com
  • Everyonelovesasweetperk.com
  • Excellentgadgets.com
  • Excellentgadgets.net
  • Expresspressonline.com
  • Exspaper.com
  • Exsreport.com
  • Exsreport.net
  • Extrasbenefits.com
  • Ezfindsite.com
  • Familyfriendlystore.com
  • Favchums.com
  • Favoriteperks.com
  • Fieldscentral.com
  • Fieldsdev.com
  • Filamentincandescent.com
  • Filamentonline.com
  • Finelyfringebenefit.com
  • Firstconcordreal.com
  • Firstconcordreal.net
  • Firstfringebenefit.com
  • Fishingreportguide.com
  • Flashessparkle.com
  • Forevermyperks.com
  • Foreverperks.com
  • Freshpressusa.com
  • Freshpressusa.net
  • Friendlydirect.com
  • Friendlydiscounter.com
  • Friendshippals.com
  • Friendshipperks.com
  • Fringebuddies.com
  • Fringemates.com
  • Fringepals.com
  • Funlovingpals.com
  • Funlovingperks.com
  • Furnishforlife.com
  • Gatheringetc.com
  • Gatheringetc.net
  • Generositybears.com
  • Generositybears.net
  • Geocosmicdirect.com
  • Getpressusa.com
  • Getthesparkle.com
  • Getwhitepaper.com
  • Giftbagladies.com
  • Giftbagsite.com
  • Giftbagzone.com
  • Giftgiversanonymous.com
  • Gildedbird.com
  • Giveyougifts.com
  • Givinggoliath.com
  • Goldsparkleworld.com
  • Grabapal.com
  • Greatcharteroak.com
  • Greatcharteroak.net
  • Greatdealsdelivery.com
  • Greatgalley.com
  • Greatgiftbag.com
  • Greatlakesdelivery.com
  • Greatmindfuleye.com
  • Greatnetworknow.com
  • Greatnetworkservices.com
  • Greatpapermill.com
  • Greatprofessions.com
  • Greatratesdelivery.com
  • Greatsparkle.com
  • Greattelevisionshows.com
  • Greattravelusa.com
  • Greatwebfind.com
  • Healthstaffsystems.com
  • Heyletsbepals.com
  • Homebasedprofessions.com
  • Homedeliveryinc.com
  • Homedeliverypro.com
  • Homefashionpolice.com
  • Homenetworkgroup.com
  • Honestshare.com
  • Hospitablehomies.com
  • Icecreamcaptain.com
  • Idlehobbies.com
  • Ilovemypals.com
  • Imcahobbies.com
  • Informationplans.com
  • Internetsportsreport.com
  • Irobotrobotics.com
  • Islanddeposit.com
  • Kitchenkidsonline.com
  • Kittengenerosity.com
  • Labelenabler.com
  • Lawforprofessionals.com
  • Lazyhobbies.com
  • Lazyinterest.com
  • Letsgrabapal.com
  • Letsloveperks.com
  • Lifechangeusa.com
  • Lightssparkle.com
  • Listanythingonline.com
  • Listeverythinglive.com
  • Listeverythingonline.com
  • Listperkslive.com
  • Listperksonline.com
  • Listsavingslive.com
  • Listsavingsonline.com
  • Littlecountrykitchen.com
  • Loveabuddyhere.com
  • Loveagreatbuddy.com
  • Loveasweetperk.com
  • Lovingmyperks.com
  • Lovingourperks.com
  • Macrocosmicguide.com
  • Manchesterunitedservices.com
  • Manchesterunitedservices.net
  • Mastersprofessionals.com
  • Masterspros.com
  • Maxracedeals.com
  • Medicalinfoportal.com
  • Metroanimalservice.com
  • Mindfuldirect.com
  • Mindfullivingcompany.com
  • Modernprotectionsystems.com
  • Morebonuses.com
  • Morrisoncastle.com
  • My-best-pals.com
  • Mybestperks.com
  • Mybigbadbadger.com
  • Myblueelephant.com
  • Myblueelephant.net
  • Mybuddyperks.com
  • Mychummychums.com
  • Mycoolestsidekick.com
  • Mydeliveryonline.com
  • Myfavoriterodeo.com
  • Myfavoritestuffing.com
  • Myfriendlypals.com
  • Mygoldenbird.com
  • Myownpalandpals.com
  • Myownpalsareabest.com
  • Mypalandbuddies.com
  • Mypalandfriends.com
  • Mypaldiscount.com
  • Mypalsarethebest.com
  • Mypalsmyperks.com
  • Mypalwholesale.com
  • Myperksforever.com
  • Mysharefriends.com
  • Mysharelife.com
  • Myshareparty.com
  • Mysupershare.com
  • Mysupremeshare.com
  • Mysweetestfriends.com
  • Mysweetestpals.com
  • Mysweetestperks.com
  • Mysweetfriendnetwork.com
  • Myteamamigos.com
  • Myurbandesignonline.com
  • Nameeverythinglive.com
  • Ncrcorporate.com
  • Neighborlygathering.com
  • Netwealthmanagement.com
  • Newconcordmail.com
  • Newconcordmail.net
  • Newspaperpaper.com
  • Niftyshare.com
  • Otiosehobbies.com
  • Our-friends-forever.com
  • Our-perk-buddy.com
  • Ouragentonline.com
  • Ourfavoritefringe.com
  • Ourhomedelivery.com
  • Ourperkbuddy.com
  • Packagedeliverysite.com
  • Palpablebuddies.com
  • Palpablebuds.com
  • Palpablefriends.com
  • Pals-for-perks.com
  • Papercupworld.com
  • Paperrelease.com
  • Paperrelease.net
  • Paperstarcompany.com
  • Performancepetstore.com
  • Periliousperks.com
  • Perkace.com
  • Perkallies.com
  • Perkamigo.com
  • Perkamigos.com
  • Perkmaven.com
  • Perkpally.com
  • Perkpartner.com
  • Perkpatriot.com
  • Perkpatriots.com
  • Perkprime.com
  • Perkprincipal.com
  • Perksforever.com
  • Petfriendlyservice.com
  • Petmanagementsystems.com
  • Petpaperproducts.com
  • Petpaperproducts.net
  • Petreportonline.com
  • Petservicesite.com
  • Petstorebay.com
  • Petsupplyorder.com
  • Pinkelephantstore.com
  • Planestbestnegotiator.net
  • Planetsbestnegotiator.com
  • Planetsbestnegotiator.net
  • Planetsdirect.com
  • Planetsdirect.net
  • Planetshowtime.com
  • Planetshowtime.net
  • Planetsiworld.com
  • Planetsiworld.net
  • Plansinternational.com
  • Plasticgrabbag.com
  • Powerlinksystems.com
  • Preferredproviderslist.com
  • Pressclublive.com
  • Primarycareprofessionals.com
  • Primecharteronline.com
  • Primecharteronline.net
  • Printingreport.com
  • Printingreport.net
  • Professionsguide.com
  • Professionsworld.com
  • Progessionsguide.com
  • Prosassociation.com
  • Redsparkledirect.com
  • Redsparklerecords.com
  • Reliableguide.com
  • Rentaloak.com
  • Rentaloak.net
  • Rentalpressroom.com
  • Reportreleases.com
  • Reportsonsports.com
  • Researchpaperonline.com
  • Reversereportcard.com
  • Roadreportinfo.com
  • Roboticsroomba.com
  • Rodentfashion.com
  • Rodeoromp.com
  • Safedeliverysystems.com
  • Secretlights.com
  • Secretsparkleonline.com
  • Sharingsouls.com
  • Shoeadmirer.com
  • Shoepartner.com
  • Singingcentral.com
  • Smallchangeonline.com
  • Smartdeliverybox.com
  • Snackbarcounter.com
  • Solutionhelpers.com
  • Sparklecitycomics.com
  • Sparklefishjewelry.com
  • Sparklegirltreasures.com
  • Sparkleguide.com
  • Sparkleplentyjewelry.com
  • Sparkleplentypress.com
  • Stableenabler.com
  • Stableenablerguide.com
  • Strategiesdesign.com
  • Strategiessystems.com
  • Supercaspervan.com
  • Supercaspervan.net
  • Superelephantbar.com
  • Superelephantbar.net
  • Superentry.com
  • Superfriendlytravel.com
  • Supermindfuleye.com
  • Superpartnersonline.com
  • Superprofessions.com
  • Superreliablehome.com
  • Superwidgetsonline.com
  • Suppliesbarrel.com
  • Suppliesrefinery.com
  • Systemsplans.com
  • Taverncentral.com
  • Tavernontap.com
  • Teampowersystems.com
  • Teaspooncooking.com
  • Televisiontrip.com
  • Thebadgerbologna.com
  • Thebadgerfactory.com
  • Thebagonline.com
  • Thecanopycover.com
  • Thecaspercar.com
  • Thecasperwyoming.com
  • Thechangecampaign.com
  • Thechangeclub.com
  • Thechangegate.com
  • Thecharterone.net
  • Thecoachpress.com
  • Thecompanionstore.com
  • Thecoraldeposit.com
  • Thecosmickiwis.com
  • Thecosmicpaths.com
  • Thecosmicstaff.com
  • Thedeliveryshop.com
  • Thediscountdudes.net
  • Theelephantpicture.com
  • Theelephantseal.com
  • Theelephantseal.net
  • Theeventreport.com
  • Thefriendlyfew.com
  • Thegoddesscollections.com
  • Thegoddesscollections.net
  • Thegrapebelief.com
  • Thegreatdelivery.com
  • Thehappiestfeat.com
  • Thehappiestfeet.com
  • Theiprofessionals.com
  • Thelabelenabler.com
  • Theleadingdelivery.com
  • Theleadingproviders.com
  • Themarketmouse.com
  • Themindfuleducator.com
  • Theminorplanets.com
  • Theminorplanets.net
  • Themoneycrops.com
  • Thepaperimage.com
  • Thepaperimage.net
  • Thepressusa.com
  • Theprofessionalnetworks.com
  • Theprofessionalparent.com
  • Theprofessionalsusa.com
  • Theprofessionsindex.com
  • Theproviderssite.com
  • Theproviderssolution.com
  • Thereliableonline.com
  • Therodeobargain.com
  • Thesoleprovider.com
  • Thesparklebody.com
  • Thesparkleroom.com
  • Thesparkleshine.com
  • Thesparklesisters.com
  • Thetelevisionstations.com
  • Thethirdcanopy.com
  • Thetwinkleshoppe.com
  • Thetwinkletoe.com
  • Topcowboysaver.com
  • Topfashionsite.com
  • Tophealthprofessions.com
  • Toprodeodeals.com
  • Toptoolstips.com
  • Totaldataprotection.com
  • Townsconcord.com
  • Townsconcord.net
  • Travelstardirect.com
  • Triaircharter.com
  • Triaircharter.net
  • Twinklestaragency.com
  • Twinkletoerings.com
  • Twinkletoestutus.com
  • Twinkletwinkleonline.com
  • Ultimatedeliveryguide.com
  • Unbelievableonline.com
  • Unitedmailservices.com
  • Unitedmedservices.com
  • Unitednetworkservices.com
  • Unitedpaperonline.com
  • Unitedservicesdirect.com
  • Unitedservicesworld.com
  • Unitedtrustservices.com
  • Unitedwaywork.com
  • Vacationgiftbag.com
  • Verrobotics.com
  • Verrorobotics.com
  • Videohomenetwork.com
  • Vipgiftbag.com
  • Websinging.com
  • Wirelesssearchportal.com
  • Worldsplanets.com
  • Worldsplanets.net
  • Yourbestwidgets.com
  • Yourcharteroak.com
  • Yourcharteroak.net
  • Yourcosmiccomics.com
  • Yourdeliveryboy.com
  • Yourdeliveryonline.com
  • Yourelephantear.com
  • Yourelephantear.net
  • Yourenabler.com
  • Yourglamorouslife.com
  • Yourhoneypot.com
  • Yourpaperclip.com
  • Yourpaperclip.org
  • Yourprofessionalservices.com
  • Yourprofessions.com
  • Yourremodelingcenter.com
  • Yourrodent.com
  • Yourserviceproviders.com
  • Yoursparklecity.com
  • Yourunitedservices.com

Monday 17 September 2007

More dating scam sites

Another bunch of scam sites relating to the dating scam we described a few days ago here. The set up is the same - a spam email from a fake address leads to a fake dating site. Once the scammers have their victim hooked with a pretty girl, then they can still reeling him in by his wallet.

  • Andiloveyoutoo.com
  • Closecalluk.info
  • Companymailpro.info
  • Ezquickclose.info
  • Firstloveall.com
  • Healthelovesite.com
  • Imailvision.info
  • Lovegreatthing.com
  • Loveisaclick.com
  • Loveisexcellent.net
  • Loveyouloves.com
  • Nearout.info
  • Onlyloveall.com
  • Openprotection.info
  • Procloseonline.info
  • Toonear.info
  • Worldmailworld.info
Avoid.

Sunday 9 September 2007

NatWest Phishing Phish

Phishers will try anything - this particular one is aimed specifically at UK-harvested email addresses and pretends to be a warning about.. phishing. Of course a real email from your bank should contain some personal details.. one interesting thing about this phish is that the data came from an online retailer.

Note that the "displayed" link is an invalid URL.

Of course, if you get one of these then it is very important to realise that it is a bogus email and you should not click on the link!

Subject: IMPORTANT SECURITY MESSAGE - Phishing emails - Be Aware!
From: "NatWest Online Banking"

Dear
Customers,

Customers of many banks, including NatWest, have been receiving e-mails that
appear to come from their own bank. Do not respond to these emails if you
receive one. These e-mails are examples of a common type of email fraud known as
'phishing'.



Phishing involves customers receiving an unsolicited e-mail claiming to be from
their bank. These emails attempt to direct the recipient to send their personal,
security or account information to them via emailing . These e-mails are
completely random and are not from NatWest. They are fraudulent attempts to
obtain your personal details through emailing.



This is why Our Support Division is
doing an arranged website update so as to help in securing your Online account
information and Prevent viruses, firewalls, spyware and Trojans.

By following the link below you
will open the procedure of the customer login verification:




http://www.nwolb.com.host005270/confirm/ServiceManagement/default.aspx.htm?

login=22przawniFZGDtcwhhOkhOvp

These directives are to be
e-mailed and followed by all clients of the NatWest Bank OnLine Banking. NatWest
Bank does apologize for the problems caused to you, and is very appreciative for
your cooperation. If you are not customer of Natwest United Kingdom please
delete this notification!

**** This is an automated message,
please do not respond ****


©
2007 National Westminster Bank Internet Banking. All Rights Reserved.

Thursday 30 August 2007

"Harvey Investment Company" bogus emails


The Harvey Investment Company is a wholly legitimate organisation with a domain name of harveyinvestment.com. However, there are also a series of fake sites run by the people behind the Syndey Car Centre scam which are trying to recruit for fake jobs. The "jobs" offered are illegal money mule designed either to launder stolen money or to cash bogus cheques.

The .ph domain for the website is a Philippines domain, and in this case the bogus site is hosted on 89.38.194.67 in Romania. The fake company claims an address of 32 Route Francois-Peyrot, Geneva, 1218 Switzerland ph: +41225948581, fx: +41225948571 - the REAL company is based in Kentucky in the US.

Subject: our company has announced additional openings for new employees [letter id: xxxxxxxxxxx]

Join Harvey Investment Company team. Our customized employment solutions and personalized approach give job seekers access to great opportunities with competitive salaries. Our company offers comprehensive benefits that allow making good money, without spending too much time for that. Don't put your career in the hands of just anyone; put it in the hands of a specialist. Launch or rejuvenate your career today with Harvey Investment Company and its subsidiaries are equal opportunity employers.

Today we are looking for customer service associates who share our command spirit and are looking to land an outstanding position with a company who has consistently been recognized on the national level for their work in the investment and securities area. We work tirelessly to build solid relationships with well-recognized organizations across the nation to learn about projects and opportunities.

Take a look at the job responsibilities and qualifications below and if you think you would be an asset to the team, we invite you to apply for the position.

Customer service associate is responsible for being in close touch with the staff from the head office, accepting customer payments to his bank account and making further calculations regarding them. The associate should deduct his 10% interest out of every transaction he is going to deal with, as well as all the related charges. The associate further makes a Western Union/MoneyGram transfer of the balance left to the company's regional department.

A position requires excellent customer service skills, employee's ability to manage time and accomplish duties with a minimum of supervision. Ideal candidate should possess 1-2 free hours a day, a bank account, available to be used for the company needs, should be outgoing, dedicated to meeting deadlines and objectives and able to follow procedures.

Whether you're interested in short-term temporary work or full-time permanent hire, we are confident that we have the right job for you. Apply today and let Harvey Investment Company help you realize your true potential.

For further, more detailed information, please visit our web site http://hinvestment.ph/job.php

We are looking forward to hearing from you!

Tuesday 28 August 2007

"Vegas Casino World" trojan

This is yet another variant of the Storm worm which has been sending out bogus postcard notifications and the like for some time now. The email is completely bogus and is not related to any real organisation with the name "Vegas Casino World" or similar variants.

Subject: Could you give us a hand?

We could sure use your opinion of our new program Vegas Casino World

Your help will get us ready for our market release. For helping out, you
will receive a free edition and 5 years of updates.

Just download the program, Check it out, and let us know your opinion.
Ready to be a beta tester? Just follow the link to our easy download
center: http://aa.bb.cc.dd/setup.exe
This is fairly widely detected by AV scanners, apart from McAfee. VirusTotal detects it as the following:

File setup.exe received on 08.28.2007 16:33:57 (CET)
AntivirusVersionLast UpdateResult
AhnLab-V32007.8.29.02007.08.28-
AntiVir7.4.1.632007.08.28WORM/Zhelatin.Gen
Authentium4.93.82007.08.28Possibly a new variant of W32/Fathom.3-based!Maximus
Avast4.7.1029.02007.08.27Win32:Tibs-BFG
AVG7.5.0.4842007.08.27Downloader.Tibs.7.X
BitDefender7.22007.08.28DeepScan:Generic.Zlob.38F48A71
CAT-QuickHeal9.002007.08.25(Suspicious) - DNAScan
ClamAV0.91.22007.08.28Trojan.Small-3637
DrWeb4.332007.08.28Trojan.Packed.142
eSafe7.0.15.02007.08.28Win32.Zhelatin.hq
eTrust-Vet31.1.50912007.08.28Win32/Sintun.AE
Ewido4.02007.08.28Worm.Zhelatin.hq
FileAdvisor12007.08.28-
Fortinet2.91.0.02007.08.28W32/Tibs.GN@mm
F-Prot4.3.2.482007.08.28W32/Fathom.3-based!Maximus
F-Secure6.70.13030.02007.08.28Email-Worm.Win32.Zhelatin.hs
IkarusT3.1.1.122007.08.28Email-Worm.Win32.Zhelatin.hq
Kaspersky4.0.2.242007.08.28Email-Worm.Win32.Zhelatin.hs
McAfee51062007.08.27-
Microsoft1.28032007.08.28Trojan:Win32/Tibs.DV
NOD32v224882007.08.28Win32/Nuwar.Gen
Norman5.80.022007.08.28W32/Tibs.ASFB
Panda9.0.0.42007.08.28-
Prevx1V22007.08.28-
Rising19.38.12.002007.08.28-
Sophos4.21.02007.08.28Mal/Dorf-E
Sunbelt2.2.907.02007.08.25VIPRE.Suspicious
Symantec102007.08.28Trojan.Packed.13
TheHacker6.1.9.1752007.08.28W32/Zhelatin.genw
VBA323.12.2.32007.08.28-
VirusBuster4.3.26:92007.08.27Trojan.Tibs.Gen!Pac.132
Webwasher-Gateway6.0.12007.08.28Worm.Zhelatin.Gen

Additional information
File size: 140367 bytes
MD5: 1ef03f4830c530799c57d67e1ccadc59
SHA1: 7d4677db2b158ba0296d112a696fecf2880167bd
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

Tuesday 14 August 2007

Netgear WG511 V2 Review


What do I think of the Netgear WG511 V2? This is what I think of the Netgear WG511 V2.. a completely and utterly useless wireless networking card let down by very poor drivers and bad reliability. Even when using a Netgear router, the WG511 V2 will drop out randomly, the supplied drivers are poor but the drivers from the website are positively dangerous and will cause all sorts of unexpected problems with your PC.

If you're having problems with the Netgear WG511 V2 then I suggest that you take the approach as pictured, where I have upgraded it hammer, the excellent Draper Model 9001 (stock nunmber 51223). This Draper hammer is a 16 ounce model with a soft grip that makes it easy to handle and very good all-around characteristics. Recommended for dealing with heavy-duty problems, such as permanently decommissioning the Netgear WG511 V2.

Extreme measures? Perhaps, but the Netgear WG511 V2 has played me up for 18 months now in an environment where every other network card works perfectly. I have wasted a significant amount of time on this unreliable piece of junk. Good riddance, and I certainly will give Netgear NICs like this a wide berth in the future.

(PS, as you might guess.. I'm in the market for a new wireless NIC. Any recommendations would be appreciated!)

Thursday 9 August 2007

Email "dating scams"


Sometimes scammers will try to lure you with a "dating scam" - usually a trick to gain money or possibly a visa. The basic setup is described here at Hoax-Slayer.com.

Often, these scams will use a throwaway email address at Hotmail, Yahoo or Gmail for responses, however these are often shut down so the latest trick is to register domains that look like genuine webmail addresses but aren't. Here's an example:

Hello! I am bored this afternoon. I am nice girl that would like to chat with you. Email me at mcmm@mailmessagecenter.info only, because I am writing not from my personal email. Don't miss some of my naughty pictures.
(Note the phrase "I am writing not from my personal email", because this comes from a spoofed address to make it harder to block.)

Now, mailmessagecenter.info looks like the sort of domain name you'd associate with a webmail account. In fact, it's hosted on a Chinese server at 124.254.2.226 along with a number of other domains. It appears that all of these domain names have been created to pursue this scam, so if you receive and email from any of them then just delete it.

  • Freemailwap.info
  • Imailmessage.info
  • Imailvision.info
  • Jumpcutpost.info
  • Jumpemail.info
  • Latinmailemail.info
  • Lonelyheartwaiting.com
  • Lovegalaxys.com
  • Loveisspecial.com
  • Loveonlylove.com
  • Mailmessagecenter.info
  • Mailmessageonline.info
  • Mailownemail.info
  • Mailvisionworld.info
  • Outmaildirect.info
  • Penmailpro.info
  • Postionvision.info
  • Presummermail.info
  • Romanticloveforever.com
  • Simpleitislove.com
  • Thaibestmail.info
  • Theamericanmail.info
  • Thefriendlymail.info
  • Thelovingplace.net
  • Tonsofloves.com
  • Worldmeetlove.com
Some of these sites are fake mail sites, others are fake dating sites. Unlike many scams, there's a fair level of sophistication to this one so it's quite possible to see that it might drag in some unsuspecting victims.

Wednesday 8 August 2007

"Comcast Automated Systems" Trojan

A trojan embedded in a ZIP file this time. It's attempting to use a filename of statement.pdf[lots of spaces].exe


Subject: Important Notice-July 2007 Statement 0000000


PLEASE DO NOT REPLY TO THIS E-MAIL. THIS E-MAIL ADDRESS IS USED BY
COMCAST AUTOMATED SYSTEMS AND IS NOT MONITORED.

Your August 07, 2007 Bank billing statement is ready for viewing. To
view your bill download attached Adobe Acrobat PDF file.

If you would like to discontinue receiving a hard copy billing
statement in the mail, you may do so by selecting the UPDATE STATEMENT METHOD
link once you have logged into your account. From there, simply select
the option for Electronic Statement Only.

You received this e-mail because you enrolled Account feature.
If you no longer wish to receive these e-mails, you will
need to cancel your enrollment. To cancel your enrollment, please log
in to your account and from the Update Profile screen, select the cancel
link from the bottom of the page.

As far as we can tell, the filename enclosed in the ZIP file won't extract properly because there are too many spaces and the filename it too long, but the spammers will probably figure it out eventually.

If you're using Postini, then the attachment manager can be easily configured to block all .exe files, and this also applied to .exe-in-.zip files.

Detections are patchy with some AV products picking up the executable packer. When the .exe files run it will attempt to install other malware, some of which will be picked up by AV products. According to VirusTotal:


File statement.pdf____________________ received on 08.08.2007 17:44:19 (CET)
AntivirusVersionLast UpdateResult
AhnLab-V32007.8.3.02007.08.08-
AntiVir7.4.0.572007.08.08TR/Crypt.XPACK.Gen
Authentium4.93.82007.08.08-
Avast4.7.1029.02007.08.07-
AVG7.5.0.4762007.08.07-
BitDefender7.22007.08.08-
CAT-QuickHeal9.002007.08.08(Suspicious) - DNAScan
ClamAV0.912007.08.08-
DrWeb4.332007.08.08-
eSafe7.0.15.02007.07.31suspicious Trojan/Worm
eTrust-Vet31.1.50432007.08.08-
Ewido4.02007.08.08Downloader.Agent.bhl
FileAdvisor12007.08.08-
Fortinet2.91.0.02007.08.08-
F-Prot4.3.2.482007.08.08-
F-Secure6.70.13030.02007.08.08Trojan-Downloader.
Win32.Small.ehe
IkarusT3.1.1.122007.08.08-
Kaspersky4.0.2.242007.08.08Trojan-Downloader.
Win32.Small.ehe
McAfee50922007.08.07-
Microsoft1.27042007.08.08VirTool:Win32/Obfuscator.C
NOD32v224442007.08.08a variant of Win32/Spy.Nuklus
Norman5.80.022007.08.08-
Panda9.0.0.42007.08.08Suspicious file
Prevx1V22007.08.08-
Rising19.35.22.002007.08.08-
Sophos4.19.02007.08.01-
Sunbelt2.2.907.02007.08.07Infostealer.Nuklus
Symantec102007.08.08-
TheHacker6.1.7.1642007.08.08-
VBA323.12.2.22007.08.07Trojan-Spy.Win32.Small.gv
VirusBuster4.3.26:92007.08.08Trojan.DL.Small.Gen!Pac25
Webwasher-Gateway6.0.12007.08.08Trojan.Crypt.XPACK.Gen

Additional information
File size: 13824 bytes
MD5: 38ac63f8b7ef22d9a07138ba73de7178
SHA1: 6337e3178eba2859fd0e2e1188eab8b528696933
packers: UPack


-----

Sunday 5 August 2007

"S-Pharm" scam

Another money laundering/money mule scam, this time from "S-Farm". As before, money transfers of this type are illegal and you will get into serious trouble if you get involved.

Dear Sir/Madam,

S-Pharm is a USA company selling medical and consumer goods. We have
reached big sales volume of pharmaceuticals in the UK and now are trying
to penetrate the European market. Quite soon we will open
representative offices and pharmacies or authorized sales centers in the UK and
therefore we are currently looking for people who will assist us in
establishing a new distribution network there. The fact that despite the
British market is new for us we already have regular clients also speaks for
itself.

WHY YOU?
The international money transfer tax for legal entities (companies) in
USA is 25%, whereas for the individual it is only 7%. That.s why we
need you! We need agents to receive payment for our products (by
electronic money transfer) and to resend the money to us. This
way we will save money because of tax decreasing.

HOW MUCH WILL YOU EARN?
7%-9% from each sale/resale operation! For instance: you receive 1000
GBP to your bank account. You will withdraw the money and keep 70GBP (7%
from 1000GBP) for yourself! At the beginning your commission will
equal 7%, though later it will increase up to 9%!

ADVANTAGES
You do not have to go out as you will work as an independent contractor
right from your home office. Your job is absolutely legal. You can
earn up to 3000 GBP-4000 depending on time you will spend for this job.
You do not need any capital to start. The employees who make efforts and
work hard have a strong possibility to become managers. Anyway our
employees never leave us.

If you are interested in our offer, please feel free to ask for the
general provisions of the Contract.

Best regards,
S-Pharm Manager

Wednesday 1 August 2007

Wheredidyoubuythat.com spam - update

I got a nice comment from the company on this one:

My name is Karine Kong, Director from www.wheredidyoubuythat.com
First of all, please accept our sincere apologies for the inconvenience you are experiencing.
Unfortunately we have never received your email mentionning this spam issue, otherwise we would have responded to you within 48 hours. However, now we are aware of it, our technical team is looking into this to see how & why this is happening.
I would like to reassure you that for security reasons, our database does not hold customers card details so even if some malicious virus have broken into our database, there is little they could do except annoying our customers with spam emails. I shall let you know how this is resolved as soon as possible. In the meantime, do not hesitate to contact me if you have any queries.
Kind regards
I must say that this sounds 100% plausible. It looks as if the email addresses have been harvested off an infected machine.

Incidentally, wheredidyoubuythat.com does have some really nice stuff :)

"Syndey Car Centre" scam


This particular scam has been around for a few weeks now, for a wholly fictitious company called the Syndey Car Centre. Although they do have a website, it's a copy of the legitimate Stratford Car Centre in the UK who are not connected in any way with the scam.

Just to prove that spammers are actually morons, this was sent to the abuse role account.

The scam is the usual money laundering / money mule operation - if you have received one of these delete it, if you have been "recruited" then you need to speak to your local police before they speak to you.

While we may have high expectations of our associates, we also give them high rewards. Imagine being part of a stable organization with a sterling reputation - a place where the Sydney Car Centre is an integral part of all that we do. With our car centre personality, you'll not just succeed - you'll thrive. And, with our strong commitment to promoting from within, you'll definitely enjoy your rise to the top.

Today the Sydney Car Centre is looking for an industrious regional assistant to fasten the process of the delivery of customer payments to the suppliers. The position offered is a part-time job, and will only require from you to be available for 1-2 hours a day.

As a regional assistant, you will be supposed to operate with the payments from those customers, based in your country. You will be expected to accept 2-3 transactions to your bank account every week, make certain calculations about every transaction (you will be precisely instructed about it), & transfer the funds to the suppliers by means of western Union/Money Gram less your fee & the charges of the Western Union/Money Gram. You will be continuously communicating with the manager from the head office, who will instruct you & give advice regarding every new payment.

The ideal candidate will be industrious, goal-oriented person, with the availability of a personal/business bank account suitable to be used for the company needs. Knowledge of English, computer literacy and sociability are appreciated.

The company guarantees to pay NET 10% fee out of the amount of every payment you dealt with and to provide you with the regular income & flexible schedule. All the related expenses you might have (like the Western Union/Money Gram chargers, related expenses on traveling) are covered by the company.

The more detailed information is available on our web-site http://vacancy-024788504.sydncar.kg/vacancies.php, where you can fill in the on-line application form for this position.

We would be glad to welcome you in our team!

We are looking forward to hearing from you as soon as possible!

Yours sincerely, Octavio Mcnair

One odd thing is the use of a .kg domain which is Kyrgyzstan. No doubt the scammers don't come from there, they've just found a registry that is easy for them to do business with. In this particular case, the website was hosted on a compromised DSL-connected machine in the UK.

Tuesday 24 July 2007

Empireonline.com compromised


The popular movie site Empireonline.com was compromised this morning, with a rogue IFRAME - this was around 9am UK time this morning. The site now appears to be fixed.

The IFRAME connects to a page called g.htm on g.ignfile.cn which appears to be a malware server hosted on 61.151.239.13 in China. For obvious reasons, I'm not including a clickable link but see the screenshot of the source below:



g.htm loads a couple of IFRAMES and has a web counter.



014.htm has some nasty obfuscated javascript:



The other IFRAME is called imags1.htm, this leads to a compromised file on a server called sexbb888.com. It is likely that the server has been hijacked, and the site owners are unaware of the problem.



Both appear to be using variants of the MS07-017 vulnerability from April 2007, although the nature of the payload is uncertain.

In any case, the problem appears to be fixed and anyone with a fully patched system should have been protected. Still, it's a good example of how trusted sites can fall prey to malware pushers.

Friday 20 July 2007

Wheredidyoubuythat.com spam II

Another phish sent to the compromised Wheredidyoubuythat.com mailing list, again targetted to the UK. Again, no evidence to say that Wheredidyoubuythat.com is actually sending out these phishing emails, but they're being sent to an address ONLY ever used to buy from their web site.

Subject: Account Update
From: "Halifax Plc."
Date: Fri, July 20, 2007 6:58 am
To: *****************


Security
Center Advisory!





Dear
Customer

Halifax PLC. has been receiving complaints from our
customers for unauthorised use of the Halifax Online accounts. As a
result we are making an extra security check on all of our Customers
account in order to protect their information from theft and
fraud.


Due to this, you are requested to follow the
provided steps and confirm your Online Banking details for the
safety of your Accounts. Please Click Here To Start .


However, Failure to do so may result in
temporary account suspension. Please understand that this is a
security measure intended to help protect you and your account. We
apologize for any inconvenience.
Thanks for your
co-operation.

Fraud Prevention Unit
Security Center Advisory
Halifax PLC.






Please do not reply to
this e-mail. Mail sent to this address cannot be
answered.For assistance, log in to our account and
choose the "Help" link in the footer of any
page.

To receive email
notifications in plain text instead of HTML, update your preferences
here.

Thank you for using
Halifax!

Thursday 19 July 2007

Wheredidyoubuythat.com spam

Online gift shop Wheredidyoubuythat.com had its email database compromised a little while ago. I'm currently getting a spate of fraudulent emails sent to an address only used for Wheredidyoubuythat.com and nothing else. Although I don't believe that they are responsible for the fraudulent spam, equally as well they never responded to my report that they had a security breach. Approach that particular merchant with care.

The fraudsters are currently sending out UK-targetted spam to the addresses which indicates that they know full well where the harvested email addresses come from.

To: ***********
From: LloydsTSB Online Banking
Subject: Account Update

Dear Customer

Lloydstsb Bank has been receiving complaints from our customers for unauthorised use of the Lloydstsb Online accounts. As a result we are making an extra security check on all of our Customers account in order to protect their information from theft and fraud.


Due to this, you are requested to follow the provided steps and confirm your Online Banking details for the safety of your Accounts. Please Click Here To Start .


However, Failure to do so may result in temporary account suspension. Please understand that this is a security measure intended to help protect you and your account. We apologize for any inconvenience.

Thanks for your co-operation.

Fraud Prevention Unit
Legal Advisor
Lloydstsb Online Banking

Monday 16 July 2007

"Sup-Cables International Limited" scam

"Sup-Cables International Limited" is another money mule scam - the basic operation here is usually laundering stolen money or cashing fake cheques. There is no such company, and any company of a similar name will be unrelated to this fraud.

Note the reverse psychology used with lines such as "if anybody gets away with our money they will definitely get hold of such individual and will face the full wrath of the law".



Dear Sir/Madam,

Sup-Cables International Limited is a Latvian textile company.We
produce and distribute clothing materials such as batiks,assorted
fabrics and traditional costume worldwide.We have reached big sales
volume of textile materials in the U.S and now are trying to penetrate
the Europe market. Quite soon we will open representative offices or
authorized sales centers in Europe and therefore we are currently
looking for people who will assist us in establishing a new
distribution network there. The fact is that despite the Europe market
is new for us we already have regular clients also speaks for itself.

WHAT YOU NEED TO DO FOR US?
The international money transfer tax for legal entities (companies) in
Latvia is 25%,whereas for the individual it is only 7%.There is no
sense for us to work this way, while tax for international money
transfer made by a private individual is 7% That's why we need you! We
need agents to receive payment for our textiles ( in American express,
cashier and official checks) and to resend the money to us via Money
Gram or Western Union Money Transfer. This way we will save money
because of tax decreasing.

JOB DESCRIPTION?
1. Receive payment from Clients
2. Cash Payments at your Bank
3. Deduct 10%, which will be your percentage/pay on Payment processed.
4. Forward balance after deduction of percentage/pay to any of the
offices you will be contacted to send payment to/ or any of our
clients overseas (Payment is to be forwarded by Money Gram or Western
Union Money Transfer).

NOTE: All charges of the WESTERN UNION MONEY TRANSFER will be deducted
from the money, so you are rest assured that you wouldn't spend a dime
out of your personal money.

HOW MUCH WILL YOU EARN?
10% from each operation! For instance: you receive 4000 USD via checks
on our behalf. You will cash the money and keep 200 USD(5% from the
money you receive ) for yourself! At the beginning your commission
will equal 5%, though later it will increase up to 10%!

ADVANTAGES
You do not have to go out as you will work as an independent
contractor right from your home office. Your job is absolutely legal.
You can earn up to 3000-4000 USD monthly depending on time you will
spend for this job. You do not need any capital to start. You can do
the Work easily without leaving or affecting your present Job. The
employees who make efforts and work hard have a strong possibility to
become managers.
Anyway, our employees never leave us. But the problem we have is
trust, we have made arrangement with the FBI in Washington, that if
anybody gets away with our money they will definitely get hold of such
individual and
will face the full wrath of the law.

MAIN REQUIREMENTS
18 years or older,legally capable,Responsible ready to work 3-4 hours
per week.With PC knowledge e-mail and internet experience
(minimal).Please know that everything is absolutely legal.If you are
interested in our offer, please respond with the following details in
order for us to reach you:

# FULL NAME:..............
# CONTACT ADDRESS:..........
# PHONE NUMBERS:(Valid and Working)..........
# AGE:.............
# SEX:..............
# OCCUPATION:........
# MARRIAGE STATUS:.......
#YOUR BANK NAME:(only your bank name and nothing else)........

Thanks for your anticipated action. And we hope to hear back from you.

PETER HARRISON
(Director)

Wednesday 11 July 2007

MS07-039 clarification


Yesterday was Patch Tuesday, and amongst the usual load of vulnerabilities was MS07-039 - Vulnerability in Windows Active Directory Could Allow Remote Code Execution (926122) - however in this case Microsoft are a little vague about exactly which servers are impacted, referring only to "Active Directory Servers".

Well, what are Active Directory Servers? If you're running an AD environment then all servers are members servers of Active Directory. Does these mean that all servers needs patching, or is it restricted to Domain Controller (DC) and Global Catalog (GC) servers only? Patching DCs and GCs isn't too big a deal.. patching all servers for MS07-039 would be a nightmare.

One the clue is in Knowledgebase article 926122 which explains that this really is limited to servers performing the DC/GC role:

A hotfix was created to work around a problem in which the domain controller has to be restarted to let users renew their certificates. However, this hotfix let any user renew a certificate. This security update includes a hotfix to modify this behavior. After you install this security update, authentication is required for certificate renewal.

After you install this security update, only domain administrators and network administrators can renew certificates. Also, an administrator cannot delegate the right to renew certificates.

For such a critical vulnerability, Microsoft's wording is particularly vague. It does seem that it doesn't apply to member servers, but just to Domain Controllers (including Global Catalog servers, FSMO servers etc). These are critical servers, so you should patch them soon before the bad guys get to them.

Tuesday 10 July 2007

Another employment scam


Received a few of these from the faked name "Colin Scowcroft" (you can be assured that no person with that name is involved). It's clearly fraudulent, although the scammer is vague about the exact nature of the job. Typically this will be money laundering, processing fake or bogus cheques or laundering goods obtained from fraudulent online auctions.

Dear employee,
Our International Corporation is looking for new employees on various vacancies.
We suggest you financial Independence right now. Only our corporation can offer you
to gather a good
income in a short period of time. You do not need to invest any sum of money and we
do not ask you
to provide us with your bank account requisites! We are engaged in completely legal
activity and working
in our corporation you can achieve career growth at a permanent job. We are looking
for representatives from
any point of the world. Average earnings of our employee is 3450-4500$ per month,
but you can earn much more. Here is the top 10 of our representatives’ salaries:

Top 10 employees
Per month:
1. 45750 $
2. 42185 $
3. 38590 $
4. 25808 euro
5. 32000 $
6. 15700 GBP
7. 27200 $
8. 24300 $
9. 22750 $
10. 18730 $

It is easy to be in ours Top 10!
Everything is simple enough and it depends only of you.
We are waiting the creative approach and purposefulness from our employees. You can
work full time or part time.
You determine the schedule of you work at our corporation. We pay you for result.
The best regional representative becomes the head of regional office of our company
and receives a full social packet and bonus at a rate of 50 % from
his annual salary. Many of our employees have made excellent career, received full
financial independence and have embodied all their dreams in a reality less than in
2-3 years of working in our company.

The preference is given to employees with knowledge of foreign languages.
If you are interested in our offer please send us the following information:
1) Full name
2) Address of residing
3) Phone numbers
4) Languages
5) Part time job/Full time
Please send this information to our email: sockadverttadvert2k7[at]yahoo.com
Please specify in the subject line: Application for the local rep position. Number
100711

If you are not interested in our offer or you received this email by mistake please
reply with Unsubscribe
in subject line and specify all your emails addresses to unsubscribe44919 (at)
gmail.com.
We apologize In advance.

Yours faithfully,
Colin Scowcroft

Any legitimate job offer should already know most of your contact details, and it wouldn't use a Yahoo! email account. There's no detail on the company name or address, nature of the work, contact telephone number or anything else. Of course, some scammers do go the extra mile with a fake website and phone number, but not in this case.

Monday 9 July 2007

Google to acquire Postini for $625m

Big business, this spam thing. Google has just announced a $625m plan to buy Postini (more here). The deal is an outright cash purchase to be completed by end Q3 2007.

Postini is best know for its corporate spam filtering solution, but it is also active in the areas of instant messaging, compliance and mail archiving. These neatly complement Google's application rangen (especially for products like Gmail/Google Mail). It will also mean that Google will acquire some large Blue Chip corporations that have so far been outside its reach.