Thursday, 10 April 2008

ezBay.me.uk - or how NOT to start an online business

Sometimes, people make mistakes with their online marketing. Newbies can accidentally buy a "millions of email addresses CD" with a load of scraped email addresses and spam away. Sometimes they are not aware of trademark laws. But sometimes they are just plain stupid in so many ways that there is no excuse for not ripping into them.

Mistake One - Trademark Violation
In this case, the budding entrepreneur has gone for the name ezBay.me.uk - confusingly similar to a well-known auction company called eBay. Sure, there are other users of the "ezbay" name, but the closeness of the name and even the "camel case" capitalisation are asking for trouble, possibly some years down the line.. but trouble nonetheless.

Mistake Two - Choose a stupid domain name.
Not only does "ezbay.me.uk" possibly violate trademarks, but it uses the ".me.uk" namespace which is designed for personal use only. That could well lead to the name being revoked by the registrar. Worse, the name doesn't make sense in British English - "Ee Zed Bay"? In American English it's "Easy Bay" which *does* makes sense.. but not in conjunction with a .me.uk domain name.

Mistake Three - Spam
There's no excuse for sending out unsolicited bulk email to scraped email address, but ezBay.me.uk have done exactly that. That tends to lead to a very short life expectancy for the new auction site that you have just created.






EZBAY
24/7 online Auction Site

This is our new 24/7 on line auction please feel free to take a look if you like what you find please register and we will give you £20.00 sellers fee completely free there is no listing fee for items that you may want to sell so what are you waiting for sign up to day for your £20.00 and start selling at www.ezbay.me.uk feel free to take a look around at all the bargins
we have many less than 50% cheaper than the high street price so come on see
how easy it is with ezbay happy shopping

BRAND NEW AUCTION

Car DVD player starting bid 50p buy now price £139.00

MP4 player with 1.3m pixels digital camera 2.5in TFT screen starting bid 50p buy now price £32.90

12mp digital video camera with MP3/MP4 starting bid 50p buy now price £76.00

1.1 inch screen clip MP3 player starting bid 50p buy now price £8.50

12.1-inch with 4:3 display roof mount TFT-LCD monitor Starting bid 50p buy now price £62.50

MP3 player sunglasses with FM super-plastic frame and build-in 1 GB flash
memory starting bid 50p buy now price

best regards

mr a m dick
ezbay world

Mistake Four - Be offensive
Signing off an email with a name of "Mr A M Dick" is always likely to annoy people (unless that is the person's name in which case.. oh dear).

Mistake Five - Read Receipts
Not only is this spam, but it also sent out with a read receipt in a clumsy way to confirm the recipient's email address. Not only will the muppet sending out the spam be overwhelmed with receipts, but many people regard them as invasive of privacy.




The forensics..
The headers indicate that the mail comes from 75.125.202.82 which is also the IP address of www.ezbay.me.uk, so that's pretty much a smoking gun.

The domain name is registered to:

     Domain name:
ezbay.me.uk

Registrant:
Ezbay

Registrant type:
UK Individual

Registrant's address:
8 Calle Las Encines
Fuenta De Piedra
Malaga
295 30
ES

Last time I checked, Malaga wasn't in the UK. This address is connected with an Alibaba operation called Murrays Discount.

There's no evidence that this is a scam, but it is almost a textbook example of how to kill a business before it starts. It is notable that despite the spam run, the only person actually selling is "Murray" himself.

Labels: ,

Tuesday, 8 April 2008

419 Scams and Social Engineering

One key element that scammers use when carrying out their business is social engineering. Usually, the approach is to make the victim believe that they are getting something for nothing.. it's even better when they can persuade the victim that the VICTIM is actually scamming someone else.

Take this recent example:




Subject: COMPENSATION,
From: eze_john1@aol.in
Date: Tue, April 8, 2008 9:15 am

My Dear Friend,
This is to thank you for your effort.I understood that your hands were tied.But Not
to worry.

I have succeeded,the money has been transfered into the account provided by a newly
found friend of mine in Australia. To compensate for your past assistance and
commitments,i have droped an International Certifie Bank Draft cheque worth of
$1,200,000,00 for you.
?
I am in London with my family presently.I do intend to establish some business
concerns here,and possibly buy some properties.Contact my Secretary in
benin-Republic? job_mike20@yahoo.fron his email below ( job_mike20@yahoo.fr) Forward
my mail to him,then ask him to send the cheque to you.Take good care of your self.
?
Best Regards,
EZE JOHN



Even though the English is very poor, the concept here is a bit more sophisticated than your average 419 scam. The email has been designed to look as though it has been misdelivered in some way - so the victim thinks that this should have been sent to someone else. But there's a dangling carrot of $1.2m here, and some people will see an opportunity to try to bilk "Eze John" out of the money.

Of course, there is no money.. but there will be a whole set of mysterious "fees" and expenses to try to get the money out, that at least is standard for a 419 scam. The twist is here that the VICTIM is also attempting to perpetrate a fraud, and this makes it very unlikely that the victim will ever go to the police to report it. It is also possible that the scammer might try to blackmail the victim to keep it quiet.

This approach offers a great deal of protection for the fraudsters. The original email is rather vague and might not be obvious to law enforcement. And if anyone takes the hook, then the victim too appears guilty.

This attempt is a bit of a lame one, but a truly successful con artist can use these techniques with a great deal more polish. So although you would never follow up on a misdirected email like this, it is easy to see how people can fall for it.

Labels: ,

Monday, 7 April 2008

"uslegaljobs.net" Money Mule Scam

Money mule scams are usually associated with Eastern European criminals, but this one is slightly different originating from an IP address of 41.219.194.90 in Nigeria.




HILTON FINANCE HOME Inc.
Industrial & Personal Financier's
Our Ref: FMF-117-212.
MEMO: 2008-2nd Quarter-Online Search Recruitment Exercise.

HILTON FINANCE HOME Inc in-support of Magnum Building Company Int (Interior
Furniture Experts) will be opening this offer to Interested Individuals/Corporate
bodies in the United States, Canada, Australia and the Entire Europe to enable them
make an extra 10.05% commission based earning right from the convenience of their
home or office apartment and without affecting their primary occupation.

WHAT WE DO:-
We issue and help to secure loans on behalf of customers who make purchases from our
partner company Magnum Building Company Int which we also process and monitor to
make sure that our loans are used for the sole reason of financing our customer
purchases with our parent company.

ABOUT THIS JOB:-
Since most of our customers make payments in large Instrumental fractions after
securing a finance loan for them, our mother company became faced with the task of
receiving loan payments from Magnum Building Company Int customers through our
conventional method of payments remittance due to delays in processing time. Hence,
we decided to advertise and search for Individuals of GOOD STANDING who will assist
the company receive these finance payments directly from our finance houses/banks as
on behalf of our customers and then forward on to the company on a weekly/monthly
basis. Some little amounts however will come from our customers directly

YOUR EARNING:-
You will be accredited as our legal Payment representative in the United States,
Canada, Australia and the Entire Europe and will be in charge of all payments from
within your region, for this you will be paid a 10.05% of all payments you receive,
and forward on a weekly/monthly basis.

To get more Information about this Business arrangement, you should reply to our
e-mail providing the Information listed below and we will either respond by regular
mail or Fax providing you with our business prospectus.

First Name:
Last Name:
Contact Address:
Phone:
Fax Numbers:
Best Time to Call:

Please send your correspondence and Information to.
Recruit Department.
David Benson.
E-mail: register@uslegaljobs.net
IMPORTANT NOTICE:- Please be advised that this is a 100% legal business endeavor and
that it is only a contract based employment program and that it will not in any way
affect your primary employment.

Copyright 2008-2009 Hilton Finance Home Inc © All right reserved




This is soliciting replies to a domain of uslegaljobs.net, registered in January 2008 - this appears to be registered to a real address and possibly with genuine contact details. Usually in these cases, the contact details are false, so I've attached this as an image rather than something indexable.



The domain is hosted by Microsoft, and although there's no web site there is an MX record:
uslegaljobs.net mail is handled by 25 pamx1.hotmail.com

So, on a first inspection the domain looks legitimate.. it might even be that it is legitimately registered but has been hijacked. Nonetheless, this is a classic money mule scam where the victim thinks they are getting 10.05% commission for next to no work.. the Nigerian IP address is a clincher too. And you've got to love the phrase please be advised that this is a 100% legal business endeavor which is always another sure sign of a scam.

Labels: ,

Friday, 28 March 2008

A 419 spam with a twist

419 scams often involve pandering to human greed. In this case, the email is clearly designed to make you think that you have lucked into $800,000 through mistaken identity. Of course, the internal logic doesn't bear close scrutiny.

What's interesting about this email is that it has a calendar invitation on the bottom - clicking on it confirms your email address and presumably is designed to give the message an authentic twist.

Of course, there isn't $800,000 sitting around for you and you can guarantee that "Eze Ike" will try and bilk you out of some money along the way.



Vous êtes invité ::
Dear Friend,
Par votre hôte:
Eze Ike

Message:
Dear Friend,

I didnot forgot your past effort and attemps to assist me, now I'm
happy to inform you that i have suceeded in getting those funds
transferred under the cooperation of a new partner from Japan.

Now Contact my secretary ask him for ($800.000.00)for your compensation
his,name is Mr,Mike Bello, and his E-mail:(ifeany_eze01@yahoo.co.uk)
1,Your Full Name___ 2,Delivery address___ 3,phone number____ 4,email
address___
Thanks and God Bless You.
REGARDS
Dr,Eze Ike.

Date:
vendredi, 28 mars 2008
Heure:
10 h 00 - 11 h 00 (GMT+00:00)

Viendrez-vous ?

Répondre à cette invitation

Labels: , ,

Thursday, 27 March 2008

Lazy 419 spam

Is it me, or is the quality of scam spam going down these days? This fake lottery notification doesn't even try to look convincing.

Subject: Easter Notification(You have won 953,000:00gbp)
From: "UK THUNDERBALL LOTTERY" delroyclarke@nf.sympatico.ca
Date: Thu, March 27, 2008 11:50 am


You won 953,000:00Pounds in the Uk thunderball online Lottery held on
25th of
March 2008.
Contact Person.
MRS GAIL NEUVILLE
E-MAIL: ukthunderball_claimlottery4@yahoo.co.uk
contact her with your details:
1.Name.
2.Address.
3.Nationality.
4.Age.
5.Occupation.
6.Phone/Fax.
Regards
Mrs.Gail Neuville

I think I will give it a miss, thanks.

Incidentally, you can report spam like this to Yahoo through their online reporting tool. The user ID you are reporting on is everything before the @ sign on the Yahoo email address. It is worth stating that even through the spam doesn't come from the Yahoo network, it does use a drop email address at Yahoo to process replies.

Labels: , ,

Thursday, 20 March 2008

"Gold is Risky - Green is a solid investment" - eFoodSafety.com (EFSF.OB) Spam


The Boulder Pledge is an important principle when it comes to fighting spam - basically, it is a commitment to never buy a product advertised in spam. Some people take it one step further, and say that they will never do any kind of business at all with a company that spams.

It's particularly pathetic when a firm resorts to spam to try to drum up investors. And yet, in the case of eFoodSafety.com (EFSF.OB) - a stock that has lost two thirds of its value in the past 12 months - that appears to be exactly what it happening.

A mystery spam entitled "Gold is Risky - Green is a solid investment" has been circulating over the past couple of days, both by email and also on several blogs. The link in the message points to a sign-up page at http://pws.prserv.net/RevNew/EFSF_LLP01.html with the following blurb:

To the Growth-Oriented Investor...

This could be one of the best buys you make during these recessionary times. And you can be certain this recession will reek havoc on the unprepared.
Yes!
You can achieve profits in today's market!

The coming months will be a nightmare for investors seeking significant profits, except for those who successfully position themselves in key sectors like biotech.
Be among the first to learn about this new trend opportunity.
Download our Company Fact Sheet NOW!

The growth of these sector markets will be so dramatic that it can be confidently forecasted that this as an investing “mega-trend” worth billions in new market capitalization for companies with the right products at the right time.

Download the Company Fact Sheet of one of these innovative biotech companies NOW!

The email itself is just a picture of an attractive and presumably partially naked woman, the subject and sender are:

Subject: Gold is Risky - Green is a solid investment
From: "Investing Ideas" Ignite@InvestingIdeas.prserv.net
Date: Thu, March 20, 2008 2:58 am


Some detective work is required to find out where it comes from. The address on the image is 7702 E Doubletree Ranch Road, Suite 300 Scottsdale, AZ 85258. Some research shows that this is connected with eFoodSafety.com, and indeed the three products pictured are eFoodSafety products: Cinnergen, Immune Boost Bar, Talsyn Scar Cream (shown here).

So, given the address matches eFoodSafety.com, and the only three products shown in the spam and on the landing page are eFoodSafety.com's products, then it is beyond a reasonable doubt that this is an attempt to attract investors to the EFSF.OB stock.

There's no indication to say that eFoodSafety.com is anything other than a legitimate company, and it is not even clear if they send this spam out themselves or contracted a third party to do it (technical note: the spam originates from 69.60.98.141). It does not appear to be a pump-and-dump spam. We do not know if Redwood Consultants, LLC (who are listed as their IR firm) knows about this either.

So - back to the Boulder Pledge. If you feel that you've received this message and that it was unsolicited, then you certainly shouldn't invest in EFSF.OB. As we have said before, a mismanaged email campaign can seriously damage the reputation of a firm. Perhaps eFoodSafety.com would like to find the people responsible and terminate their relationship with them before more harm comes their way.

Labels:

Monday, 10 March 2008

Truckerjobsearch.com - spam, scam or stupidity?

I'm not interested in trucks, there is no reason for anyone to send me an email about trucking. And usually, when I see email about "transportation" jobs, then it tends to be some sort of money mule scam.

So a spam email advertising truckerjobsearch.com rang alarm bells - it certainly seemed to tick all the boxes for a scam operation. But is it a scam?

Trucking Companies & Trucking Recruiters
Need to Hire More Class A Truck Drivers?
Let Trucker Distribution Inc Save your Recruiters Time & Money.

LIMITED TIME OFFER
ONLY $400.00 per month

FREE TOP BANNER ON ALL FOUR WEBSITES

NOW for ONLY $400.00 per month you can:

Receive on Average 30-50 New Truck Driver Applications Daily
(Depending on your company criteria)
Get a Top Banner on Four Premium Websites

Get a Side Profile Banner on Four Premium Websites
Hire More CDL Truck Drivers for Less
Cut Your Recruiting Budget in Half

NewTruckDrivingJobs.com
MonsterTruckDriverJobs.com
TruckerGeek.com
TruckerJobSearch.com
We are so confident in our service, that we will give your company a
FREE 24 Hour Trial via our E-MAIL system.
(Applications over the web)

Combination Rates

"All 4 Websites"
Daily Applications via Email
Side Profile Banners
Only $500.00 per month

"All 4 Websites"
Daily Applications via Email
Side Profile Banners
Data Base Access
Only $600.00 per month

"All 4 WebSites"
Daily Applications via Email
Side Profile Banners
Database Access
Featured Top Banner
Only $700.00 per month

"All 4 WebSites"
Daily Applications via Email
Side Profile Banners
Database Access
Featured Top Banner + Bottom Banners
Plus Brochure Distribution
Only $800.00 per month
---------------------------------------------------------
Individual Services:

"Brochure Distribution"
Only $450.00 per month
(150 Truck Stops )

"Top Banner"
Only $250.00 per month
(Website of Choice)

"Bottom Banner"
Only $200.00 per month
(Website of Choice)

Let Trucker Distribution build a custom package for your company TODAY!


For a FREE Trial Click Here or Call:1-888-675-5551

Originating IP is 199.239.248.221 which identifies itself as truckerout.com, the spamvertised site is hosted on 161.58.218.47. Both servers are hosted by NTT America Inc.

An investigation into the domain names and registration details shows that the sites appear to be legitimate, the sending IP address and the rDNS matches the advertised sites. There is no indication that these sites are not exactly what they say they are. So what gives?

The most common explanation for seeing spam of this type is that the operators have been conned into buying a CD that promises millions of email addresses for a very low price. Very often, these are simply scraped from web sites, or can even be just completely made up.

In all likelihood, the person marketing for this company has bought a bad mailing list in good faith. It doesn't mean that they are not a spammer (the email is certainly not CAN SPAM compliant), but it goes to demonstrate just how easy it is to damage your reputation by mismanaging an email campaign. Buying in mailing lists is best avoided, and even reputably list brokers can sell lists that have been contaminated with bad data. The only real way to be certain is to collect your own lists, if you have to buy them in then you need to research the company you are dealing with to ensure that they really exist and are wholly above board.

Labels:

Thursday, 6 March 2008

StampOffers.com - Spam or Joe Job?



There's a whole bunch of spam doing the rounds as follows:

Subject: Sell for FREE Forever !!!!!!!!!!!!!!
From: stampoffers@yahoo.com
Date: Thu, March 6, 2008 3:21 pm

The idea for StampOffers.com developed in the summer of 2002.
It all started with the creation of a chat board outside of eBay that would allow fellow philatelist the ability to talk about anything without being criticized for not maintaining a strictly philatelic conversation. Those who have made a non-philatelic post to the eBay stamp chat board know what it is like. There was a discovery on this new chat board that collectors would like to buy, sell, and trade among those who visited the chat and a few of the frequent users asked about someone starting an auction site just for stamp collectors. In January of 2003, StampOffers.com was launched!

There was much back and forth about whether StampOffers.com would be able to draw enough users and continue a steady growth and it was decided that the only way to do this was to operate with one philosophy – provide a viable alternative on the world wide web in which collectors from around the world could buy, sell, and trade stamps in an effort to further the hobby. Oh yeah…..and do it for FREE!!

To this day, StampOffers.com provides a site that allows sellers to enter a basic listing with NO INSERTION FEE and NO FINAL VALUE FEE. So how does StampOffers.com continue to operate without collecting fees? Well, let’s just say it is a combination of fellow collectors who are very appreciative of StampOffers.com’s existence combined with StampOffers.com’s desire to contribute to the hobby of philately!

Therefore, go ahead and use the site as much as you wish! The only real favor that is asked is that you pass the word about StampOffers.com. Tell your customers, your fellow collectors, your stamp club friends, your local stamp dealer, and anyone else whom you believe would be as appreciative of the site as those who are using it today.

Thank you,

StampOffers.com - The World Is Finding Us!

Join Now

James Munch

You are receiving this mailing because you agreed to be a part of our opt in mailing list.
As you would expect, no such "opt in" authorisation has been given.

There are a couple of things that are odd about the spam - first of all it seems quite unlikely that a philately site would send out this type of email, the mail is sent out repeatedly to the same address (in an apparent attempt to annoy the recipient), and it has been aimed at a spamcop.net account which perhaps indicates that "reverse listwashing" is taking place to ensure that the mail does get reported as spam.

These are all classic indications of a Joe Job - a fake spam message sent by a third party in order to cause trouble, presumably in an attempt to shut StampOffers.com down. Joe Jobs can be hard to spot, but this certainly seems to tick all the boxes.

As of 6th March 2008, the emails are being sent from a server at 74.86.158.8 through a PHP script which fingers 64.74.124.39 as the possible sending IP. This latter email address is interesting because it belongs to an Autosurf scheme called autosurfunion.com - interestingly the same server has been used for this other apparent stamp related Job Job, presumably the autosurf server is being used as a proxy.

The line in the header to look for is:
X-PHP-Script: 74.86.158.8/~ez123/conf.php for 64.74.124.39

64.74.124.39 is operated by Globalcon.net (contact email appears to be reyner -at- globalcon.net), so try sending any abuse reports their way. Also the 74.86.158.8 server with the insecure redirector should be reported to abuse -at- greenolivetree.net or perhaps via their web form.

Incidentally, this is what StampOffers.com has to say on the subject:

24 February 2008 - SPAM EMAILS

This is a special announcement about a rash of SPAM emails going out.

First, let me apologize for this occurring. StampOffers.com does NOT send out SPAM emails!! The only emails that are sent are to those who are members of StampOffers.com.

Recently, there was an individual who gained access to the site as a bidder and placed a number of fake/fradulent bids. This user created 3 different ID's and attempted to wreak havoc with each one. It appears we have finally been able to block this person from accessing the site and thus has turned to another form of cowardly entertainment.

These emails ARE NOT coming from StampOffers.com, our host, nor any server that our host runs. Our host is working with me to file the proper complaints as seen below:

I am trying everything I can to stop this and apologize to everyone. I would like to ask your assistance. When receiving these emails, contact the ISP you find in the header and point them to this board.

I am a private individual who has been running this site for 5 years. I have no interest in making money (I provide the site for FREE for everyone to use) and definitely have no desire to send out SPAM emails.

Please, if you have any questions, feel free to use the contact button below and let me know.

Thank you for your patience and understanding.

James C. Munch
I tend to concur with StampOffers.com - there are lots of signs to indicate that this is a Joe Job attack, so if you receive on, please analyse the headers carefully and report to the correct service provider.

Labels: ,

Wednesday, 27 February 2008

Dating Scam Sites VI


The return of a persistent spam.. which means that plenty of people are falling for it.

Hello! I am bored today. I am nice girl that would like to chat with you. Email me
at Ebba@ThePaganDoorway.info only, because I am using my friend's email to write
this. If you would like to see my pictures.
Of course, the nice girl is going to be a hideous troll or some ugly middle aged chickenboner. Whoever you are talking to, the aim is usually to bilk you out of a large pile of cash.

Current domains in this run are as follows:
  • Oldgloryshirts.info
  • Prideboundx.info
  • Selfhealdirect.info
  • Shineplug.info
  • Shinestick.info
  • Shinyglowstick.info
  • Superdoorway.info
  • Thedoorwaybeyond.info
  • Thedoorwaydomain.info
  • Thedoorwaygenerator.info
  • Theglowpup.info
  • Thegoldendoorway.info
  • Thehealcare.info
  • Thepagandoorway.info
  • Unitedimprove.info
All hosted on 218.23.28.100 in Anhui, China.

Labels: ,

Tuesday, 26 February 2008

Another dating scam


Dating scams are increasingly common and are something that I've blogged about before. It's really just a variation of the 419 Advanced Fee fraud scam, except the bait this time is usually a pretty Russian girl.

Hi! I'm a single girl and I'm 26 years old. Please take a look at my pictures and let me know if you like them! I live in Russia and I'm going to come to your country and work over there very soon! I don't know anybody over there and I thought it would be great to meet someone who is open to anything (as I am!). I would be happy to be friends, lovers or create a serious relationship! We will see what happens!

I hope you will write me back and I will write more info about myself and send more
photos!!!!!!!!!!!

I am writing from my friend's email address, so please make sure you do not reply directly to this email. Email me at nrochestetd0@yahoo.co.uk only.

if you don't use my personal email address then I won't be able to read your
reply and write you back. So it is very important that you get it
right.

Ok, I guess it is now your turn. Hope to hear from you today. Bye!!

btw, i got your email from dating website

Of course, the email is going to be from some ugly middle aged Russian bloke rather than an attractive young lady, but at least this one has the decency to include a couple of photos of someone who will have nothing to do with the scam at all.

Labels: ,

DAIYA PR Co Scam


Scammers can be quite funny - this one is from someone pretending to be DAIYA PR of Japan.

Job opportunity from DAIYA PR Co., Japan

Job Location World
Company Location Japan
Employment Type Employee
Salary $7,500.00/month + BONUS system

Send your profile/resume/CV to this e-mail only:
smith.is.dennis@gmail.com

DAIYA PR Co., Japan is expanding! This is job opportunity from famous Japan Corporation. Not just any opportunity but one that can make your career fun and rewarding. We have various positions over all US. You don’t need to move out from US, this job located in USA. If you are have all requirements you NEED to send us your resume or profile or CV for qualification. You will receive back our opinion in 1-2 days. Hurry up, this job opportunity is limited.

Requirements and skills:

1. Higher Education/College
2. 1+ Sales/Management (desired but optional)
3. Strong communicative skills
4. Must have MS Office installed (MS Word)
5. Must have U.S. citizenship
6. Adult age

This is original e-mail letter from DAIYA PR Co. This not any kind of: MLM, scam, spam. We will never ask to you to provide any kind of investments.
Gotta love the bit that says "This not any kind of: MLM, scam, spam." Clearly a big company like DAIYA PR would be soliciting replies to a Gmail address (only.. don't send it to the real company by mistake, will you?). In this case the email originates from 88.233.203.233 which is a compromised machine in Turkey.. not Japan.

It isn't absolutely clear what the scam is, but they are usually money laundering operations or sometimes setting up fake companies or identities. The best thing to do is steer clear.

Note: DAIYA PR is a real company and is not connected with this scam email being sent out in its name.

Labels: ,

Sunday, 10 February 2008

Who-Remembers-Me.com Spam

Who-Remembers-Me.com is a long running spam operation from the UK that has been in trouble before. I'd assumed that they had cleaned up their act, but since they are now sending to completely invalid addresses I can only assume that they haven't. Since the mail address used doesn't exist, then the so-called "friend" doesn't exist either.

Their mail server is hosted by Virgin Media, you can file a spam complaint here for the wrm3.com server they use to send, and email abuse -at- gxn.net to report the spamvertised Who-Remembers-Me.com site. Surprising their website is hosted by Donhost who always used to be one of the good guys when it came to dealing with spammers.

There's plenty of evidence for scummy activities, significantly from the Advertising Standards Authority (file a complaint here), but a Google search also comes up with plenty of supporting evidence.

Subject: Do You Remember Me?
From: "WRM Customer Services"
Date: Sun, February 10, 2008 7:02 am


A recommendation from a friend


If you do not wish to receive these emails in the future please CLICK HERE TO
UNSUBSCRIBE


Hi ----------
Friend Ref - (----------)

Your e-mail address (---------@----------) has been entered into the
Who-Remembers-Me.com "Tell a friend" link by one of your friends in order for us to
send you a short note recommending this web-site as they feel it may be of interest
to you.


Who-Remembers-Me.com enables you to rediscover old friends, neighbours, colleagues
and acquaintances by searching a wide range of categories. You can look up people
from your former workplaces, neighbourhoods and schools or even children's homes,
places of worship the armed forces and more. After reading through the profiles that
are listed, you can choose to get in touch with old friends or simply reminisce.

Click here to visit our site NOW!

Who-Remembers-Me.com • Church House • 178A Batley Road


Wakefield • England (UK) WF2 0AJ


If you wish not to receive mail from us again then please click here to have your
email address removed from our database. WE WILL HONOR YOUR REQUEST!


Please do not reply to this e-mail, as it will not get answered
if you have any questions or need any help please use the contact link on our home
page.

Labels:

Thursday, 7 February 2008

"Metrix Ventures" scam email

Some sort of modelling scam, sent to an email address from a data breach at an online retailers so you KNOW that it's a fraud. Company name given is Metrix Ventures which appears to be completely bogus, and is not related to any company of a similar name.

Subject: Job Offer
From: "Gary Pole"
Date: Thu, February 7, 2008 1:41 pm



Hello,

My name is Gary Pole. Am freelance modeling agent working for Metrix Ventures which
is based in the US and has branches also in Europe.I would like us to do some works
together. I presently have good offer for you.I want to know if you are interested
in modeling because I need pictures of a good looking person (male or female) who
will be on the magazine cover of one of my clients. Please let me know if you are
interested in the deal. You stand a chance of making reasonable money and 150 Pounds
from this deal to start, and even a noticeable fame. Let me know if you are
interested in my offer and I would give you further details.

Best Regards,
Gary.




Originating IP is 194.126.173.16, which is probably a compromised server. It amusingly identifies itself as project-crime.com in the email headers!

Labels: ,

Monday, 4 February 2008

Fake "Benjamin Vincent Solicitors" mail

Another money mule fraud, this time using the name "Benjamin Vincent Solicitors".

Subject: Business Proposal
From: "Benjamin Vincent"
Date: Mon, February 4, 2008 11:13 am
To: undisclosed-recipients:;
Priority: Normal

Dear Sir/Ma’am,
I want to ask your attention to receive money on my behalf and it will
be for our mutual benefits.

Please call me if you are interested and on your response, I will send
you the full details and more information about myself and the funds.

Yours sincerely,

Benjamin Vincent
Benjamin Vincent Solicitors
49, High Street Wanstead
London
E11 2AA
Tel: +44 771 719 0188.

Now, Benjamin Vincent Solicitors are a real company and have nothing whatsoever to do with this fraud (you can see their details here). The scammers have used the correct address, but the "+44 7717" number is a mobile phone, not a landline. In other words, this fraud is attempting to trade of the name of a wholly innocent firm. The email addresses bvsolicit@yahoo.com and bvsolicitors@hotmail.co.uk are associated with this scam.

Tsk tsk.

Labels: ,

Saturday, 2 February 2008

moneybookers.com / xcitinggames.com phish


It's unusual to see a moneybookers.com phish, but perhaps it shows that the phishers are moving on to different targets. This particular phish reads:

Greetings from moneybookers.com! We would like to inform you that you have received a payment from banking@xcitinggames.com.

Payment details

Amount: . 147.00
ID: 89089098
Subject: received payment
Note: Click here to accept this payment

Your money is waiting for you in your Moneybookers account.

Use this link to accept payment- www.moneybookers.com.

We hope you enjoy your cash.

One other notable feature of this phish is the use of an AOL redirector to attempt to fool spam filters, in this case eventually pointing to http://195.234.171.86/app/login.pl/index.htm which is a server in Italy, probably rented with stolen credit card details.

Neither moneybookers.com nor xcitinggames.com are involved in this phish. I understand that AOL have been told about their redirector problem several times but have not acted.

Labels: ,

Wednesday, 16 January 2008

"Colls Solution Company" Scam Email

This is a UK-target scam, using email addresses harvested from an online retailer who had a security breach.

This one appears to be more that just the usual advanced fee fraud or money laundering though.

Subject: JOB OFFER
From: "COLLS SOLUTION COMPANY"

Hello

We are offering a temporary job which really do not
require any professional skills.

You really don't have to have any professional skills
for this. All we are looking for right now is Uk based
individual to handle paper work, file documents and
handle payroll administration to our clients in Uk.

What will be required from you is few hours a day and
also to pay very close attention to all instructions
given to you.

Your Job will be; Handling all applications with
regards to new clients that will like to register a
company in uk and what you will be doing is Filing all
papers from these individual companies which will be
sent over to you under that companies name.

Salary terms; 120 pounds per job Get back to
us through the email address below if you are
interested in the job offer.

Please get back to me with the following details.

FULL NAME

FULL ADDRESS

E-MAIL ADDRESS

AGE

SEX

PRESENT EMPLOYMENT

MARITAL STATUS

WHEN WOULD LIKE TO START

All replies should to be forwards to the company e-mail address.

private_solutions@representative.com

Regard,

DEBRA COLLINS
Note that they say the job is "Handling all applications with regards to new clients that will like to register a company in uk and what you will be doing is Filing all papers from these individual companies which will be sent over to you under that companies name." In other words, the victim will be used as a front to create bogus offshore companies. And when those companies do something criminal, then the UK-based victim will be the one to get into trouble.

If you get one of these, forward it to abuse -at- mail.com who handle email for the representative.com domain.

Labels: ,

Sunday, 13 January 2008

Arcanely Worded Scam of the Month Award

OK, so I don't really have an Arcanely Worded Scam of the Month Award, but if I did then this rather bizarre email would count. It is, of course, a standard Advanced Fee Fraud pitch, but the almost Shakespearean wording is something else..

Subject: PLEASE RESPOND ASAP!!
From: "Timms David"

Hello,
It gives me a great deal of pleasure to write you this mail and even when it might
come to you as a surprise, I hope you find it of interest. Let me first introduce
myself. My name is David Timms. I am an Executive Auditor with a Bank here in Europe
, I would like to use this means to ask your assistance in moving some fund over to
your country. I have in the course of my duties come in contact with a good amount
of Fund that have been inactive for some years now and careful investigation proved
the original depositor of the fund died five years ago and all attempt to reach the
suppose beneficiary of the deposit were fruitless and before it is forfeited to the
state I decided to move it. It is of interest to inform you also that I have already
moved this fund out of the Establishment and now in safe keeping with a Finance and
security house, I will like to move it outside now and this is were I need your
assistance. After legal consultation, I have established modalities for!
a secured way for a perfect transaction., but be most assured that for your
assistance and partnership you will get a good percentage of the fund, it is
important to let you know that fifty percent of the rest will be invested over
there under your management for a negotiable period of time and we will open a
fruitful dialog very soon to that effect. I look forward to our working closely in
practically seeing this transaction come to a perfect end. For effective
communication, please kindly include in your reply, your complete Names, Address,
Occupation, Age and most especially your contact number and I will contact you as
soon as I get your reply. I look forward to hearing from you and my gratitude for
your Patience.
Respectfully yours,
Timms David.


Eh? "I have established modalities for a secured way for a perfect transaction"?

Labels: ,

Thursday, 27 December 2007

Dating Scam Sites V

Another bunch of dating scam sites, to follow on from these. Hosted on 210.14.129.25.

  • Engineride.info
  • Enginewreck.info
  • Glorylandusa.info
  • Glorywaychurchx.info
  • Honordays.info
  • Honorholes.info
  • Honorministries.info
  • Morninghonor.info
  • Oldgloryshirts.info
  • Simoldglory.info
  • Usoldglory.info
  • Theredglow.info

Sample email:

Hey you
I read your profile on-line a few minutes ago and you seem intresting
email me at Nikki@GloryWayChurchx.info and I will reply with a Picture and Info
about me right away
I will stay online and wait for your email
Talk to you soon

Labels: ,

Tuesday, 18 December 2007

Highly targeted phish - frauddept@ustreas.gov


This is a highly targeted phish aimed at senior management in a company. The manager (typically a principle officer or other named contact) is named in full, along with the full name of the target company. Attached is a file called complaint.zip with a trojan.

In this case, the email comes from frauddept@ustreas.gov but it could potentially come from any government agency. The bottom line.. exercise caution with unsolicited email attachments.

Dear [Real Name],

A complaint has been filled against the company you are affiliated to [Company Name] in regards to the possibillity of tax avoidance and money laundering schemes.

The complaint was filled by Mr. Benjamin Kent on 12/10/2007 and contains refferences that link your company and another 4 companies in an attemt to gain illegal proffit.

Registration : [Reference] Date: 12/10/2007

A copy of the initial complaint and claims has been attached to this e-mail.Please print and keep this copy for your personal records.

Disputes involving consumer products and/or services may be arbitrated. Unless they directly relate to the contract that is the basis of this dispute, the following claims will be considered for arbitration only if all parties agree in writing that the arbitrator may consider them:

Claims based on product liability;

Claims for personal injuries;

Claims that have been resolved by a previous court action, arbitration, or written agreement between the parties.

The decision as to whether your dispute or any part of it can be arbitrated rests solely with the US Department of Treasury.

The Department of Treasury offers a binding arbitration service for

disputes involving marketplace transactions. Arbitration is a convenient, civilized way to settle disputes quickly and fairly, without the costs associated with other legal options.

Labels: ,

Monday, 19 November 2007

Dating Scam Sites IV

More domains that seem to be associated with this dating scam, this time hosted on 210.14.129.25 in China.

  • Alpenshine.info
  • Bunlight.info
  • Charmshine.info
  • Comfortshine.info
  • Glowballproducts.info
  • Glowlightstuff.info
  • Glowplugfuel.info
  • Goldenglowinc.info
  • Healthyglowusa.info
  • Lightbal.info
  • Lightplugs.info
  • Shinebal.info
  • Shinecandles.info
  • Shineplug.info
  • Shinestick.info
  • Shinyglowstick.info
  • Thebestglow.info
  • Theglowpup.info
  • Theglowpuppy.info
  • Theredglow.info
The basic approach is unchanged:
Hello! I am tired this afternoon. I am nice girl that would like to chat with you.
Email me at fbhk@GlowBallProducts.info only, because I am writing not from my
personal email. I will reply with my pics
Well, I'm pretty tired this afternoon too but that doesn't make me want to email pics of myself to strangers!

Labels: ,

Tuesday, 2 October 2007

Yet more dating scam sites

Another set of dating scam domains related to these and these. The email follows a similar pattern to:
Hello! I am tired tonight. I am nice girl that would like to chat with you. Email me
at np@SuperOnset.info only, because I am writing not from my personal email. Don't
miss some of my naughty pictures.

See this post for more information on how the scam works. This batch of bogus domains are:

  • Closecallusa.info
  • Closecallworld.info
  • Closemorehomes.info
  • Closemoreplus.info
  • Closeopenwave.info
  • Greatnear.info
  • Mailvisionworld.info
  • Nearencounters.info
  • Onsetcombat.info
  • Quickclosepa.info
  • Superonset.info
  • Youclosemore.info
  • Youronset.info
For techies, the nameservers for all these domains are DNSREAL.COM which appears to be used exclusively for this type of scam. This is registered to what is almost definitely a bogus name and address, but does use the email dnzmazter@yahoo.com.

Labels: ,

Wednesday, 26 September 2007

Savings Pioneer (savingspioneer.com) Spam


"Savings Pioneer" (savingspioneer.com) is a persistent spammer who constantly shifts between privacy protected domains and sending IP addresses to avoid blocking. They do not honour unsubcribe requests.

They are an affiliate of Media Breakaway LLC (formerly known as OptInRealBig run by spammer Scott Richter) which in turn directs traffic through other very low quality affiliate programs such as vcmedia.com (a ValueClick domain), websponsors.com, inteletrack.com, gratisnetwork.com, swmark.com, zanox.com, atdmt.com, clash-media.net, monetizeit.net and others. In some cases the click is passed from company to company in what appears to be a fairly grubby series of business relationships.

Savings Pioneer is most likely just an affiliate of Media Breakway LLC, but Richter's outfit doesn't give any guidance on how to report affiliate abuse.

Two of Savings Pioneer's key parterns are Hurricane Electric (he.net) and Exist Hosting (existhosting.com). This latter appears to be a two-bit outfit with astoundingly bad reviews and are responsible for much of the mail handling.

The following 1,937 domains are used in rotation by Savings Pioneer to try to overcoming people blocking them. They tend to change to a new domain every day. There may be more!

If you get one of these, send a copy of the email to abuse -at- he.net.

Added 1-Nov-07: Theoretically you can also try emailing unsubscribe -at- mediabreakaway.com who seem to provide the mailing list. Unsubscribing at savingspioneer.com seems to be ignored.

Spam sites hosted on 216.218.214.250:

  • Abouttheinsect.com
  • Absolutelyimpressive.com
  • Absolutelyuncanny.com
  • Activegift.com
  • Administrativeexpert.com
  • Administrativeexpertscentral.com
  • Administrativeexpertsonline.com
  • Advancedbusinessonline.com
  • Advancedgraphicsonline.com
  • Advancedhealthtech.com
  • Advancedhomedesigns.com
  • Advancedlivingonline.com
  • Advancedprogramguide.com
  • Advancedwellnessonline.com
  • Afriendonline.com
  • Afriendsite.com
  • Airdataonline.com
  • Airmanagementonline.com
  • Airwireonline.com
  • Alarmmanagementgroup.com
  • Allboatonline.com
  • Alldigitalwork.com
  • Allfreshnews.com
  • Allnewinventions.com
  • Allpartsunlimited.com
  • Alltimedigital.com
  • Alphamanagementonline.com
  • Aluminumyacht.com
  • Amazingworldsports.com
  • Americannaturecenter.com
  • Americathewonderful.com
  • Animalhealthsite.com
  • Animalnewsonline.com
  • Antiqueautoonline.com
  • Antiqueboatauction.com
  • Appointedexecutive.com
  • Areasontogive.com
  • Areasontogiveonline.com
  • Arthropodcontrol.com
  • Arthropodculture.com
  • Arthropodencyclopedia.com
  • Arthropodfacts.com
  • Arthropodofcanada.com
  • Askhealthsource.com
  • Atlantiscrew.com
  • Authorityanswers.com
  • Badgerstatefloors.com
  • Badkarmasquad.com
  • Bakingsalts.com
  • Baymanagementsystems.com
  • Bestadvancedinfo.com
  • Bestairsystems.com
  • Bestbetdirect.com
  • Bestbusinessprogram.com
  • Bestcarpetsource.com
  • Bestcitytech.com
  • Bestdistrict.com
  • Bestfluid.com
  • Bestfriendgame.com
  • Bestfriendhost.com
  • Bestgreenhousesupplies.com
  • Bestinsectbite.com
  • Bestlabmanagement.com
  • Bestlearnenglish.com
  • Bestmarinaproperty.com
  • Bestmarmotbasin.com
  • Bestofsmoothjazz.com
  • Bestopengolf.com
  • Bestopenrates.com
  • Bestpenguins.com
  • Bestposse.com
  • Bestpowerball.com
  • Bestproducebox.com
  • Bestproductsunlimited.com
  • Bestsharingsite.com
  • Bestsmoothskin.com
  • Bestsodapop.com
  • Bestsupernet.com
  • Bestthemeparties.com
  • Bestwholeness.com
  • Bestwonderfulthings.com
  • Bigcityvisit.com
  • Biggreenbet.com
  • Biggreendirect.com
  • Biggreendream.com
  • Biggreenpalm.com
  • Biggreenventures.com
  • Bigpowerful.com
  • Bigproduce.com
  • Bigrealfruit.com
  • Bigwaxfruit.com
  • Bionatureonline.com
  • Bluemanagementgroup.com
  • Boatmotorsales.com
  • Bodyfreefitness.com
  • Bottomlessonline.com
  • Bottomlessusa.com
  • Breakmegadisco.com
  • Brightideasbulb.com
  • Brightlightbulb.com
  • Buildyourbuttons.com
  • Businessconvert.com
  • Businessdare.com
  • Businessenterprisesoa.com
  • Businessestablishmentonline.com
  • Businessgalaxies.com
  • Businessmanagementdirect.com
  • Bysecondnature.com
  • Calciumfactorsupreme.com
  • Canadaboatsales.com
  • Carsnonstop.com
  • Cedargardengreenhouse.com
  • Centercondo.com
  • Centipedearmy.com
  • Centipededirect.com
  • Centipedehouse.com
  • Centipedeleg.com
  • Centipederecords.com
  • Centipedesite.com
  • Centipedesoftware.com
  • Centipedesolutions.com
  • Centipedeworld.com
  • Centralinnovation.com
  • Centralinnovationonline.com
  • Centralinvention.com
  • Cheekymarmot.com
  • Chewymarmot.com
  • Choicemanagementservices.com
  • Choiceproductsunlimited.com
  • Citrusparkarea.com
  • Cleanairfun.com
  • Cleanpowerworld.com
  • Cliqueaway.com
  • Cliquedirect.com
  • Collegeextend.com
  • Collegegive.com
  • Collegeoffersonline.com
  • Colormanagementonline.com
  • Commercechange.com
  • Commercecreation.com
  • Commerceembark.com
  • Commerceexperience.com
  • Commercematters.com
  • Commerceobstacle.com
  • Commerceobstacles.com
  • Commercerelations.com
  • Commercestart.com
  • Commerceventure.com
  • Commercialnurseries.com
  • Concerncommerce.com
  • Concerncreation.com
  • Concernmatter.com
  • Concerntrade.com
  • Connectionunit.com
  • Cosmicdancerecords.com
  • Cosmiceggradio.com
  • Cosmiceggtest.com
  • Cosmicspacecadet.com
  • Cosmicwaterdevice.com
  • Countlesscreation.com
  • Cowsunlimitedusa.com
  • Creationsinventions.com
  • Creativemanagementonline.com
  • Creativeprotectiononline.com
  • Daswonderlandsite.com
  • Daygreensite.com
  • Dealingconnection.com
  • Dealingcreations.com
  • Dealingobstacles.com
  • Dealingrelations.com
  • Dealingventures.com
  • Defyhumannature.com
  • Dentalvisitonline.com
  • Describeamollusk.com
  • Digitalbigworld.com
  • Digitalliquidsite.com
  • Digitalmanagementonline.com
  • Digitalmediaforum.com
  • Digitalsodapop.com
  • Digitalstarworld.com
  • Digitalworldbenefits.com
  • Dimlightbulb.com
  • Directbestonline.com
  • Directioncreations.com
  • Directionpros.com
  • Directlinenow.com
  • Directmailserve.com
  • Discopunkmusic.com
  • Discothee.com
  • Dosomethingwonderful.com
  • Drinkingliquid.com
  • Dynamicgiftsonline.com
  • Dynamicleave.com
  • Dynamicoutcome.com
  • Dynamicresultonline.com
  • Dynamicsgifts.com
  • Dynamicsresult.com
  • Earthmarvel.com
  • Easyfamilyfitness.com
  • Easyfastfitness.com
  • Easygroupfitness.com
  • Easylivinghealthy.com
  • Easyonlinefitness.com
  • Easystreetfitness.com
  • Easystrong.com
  • Ecrewonline.com
  • Electricmotorsource.com
  • Embarkenterprise.com
  • Energysupersite.com
  • Enginevehicle.com
  • Enteraries.com
  • Enteryourbirthday.com
  • Entrepreneurscreations.com
  • Esharingnetwork.com
  • Esmoothjazz.com
  • Eventsunlimitedusa.com
  • Everbestfriend.com
  • Executiveappointed.com
  • Executivecreation.com
  • Executivenetworksofamerica.com
  • Executivestart.com
  • Executiveunity.com
  • Exoticwildlifeart.com
  • Expertconclusion.com
  • Expertiseknowledge.com
  • Expertmanagementsystem.com
  • Extrasmoothguide.com
  • Extremethemeparks.com
  • Factcampaign.com
  • Factorydirectguide.com
  • Familyfitnesssite.com
  • Fantasticbirthdaygifts.com
  • Fantasticcoffeesguide.com
  • Fantastichomebuys.com
  • Fantastichomesolutions.com
  • Fantasticswonderful.com
  • Fastknowledgesharing.com
  • Financestarter.com
  • Findanyshow.com
  • Findthetheme.com
  • Findyourimage.com
  • Firmcommerce.com
  • Firstfitnessclub.com
  • Fiscalfitnesscenter.com
  • Fitnessclubpro.com
  • Fitnessfindsite.com
  • Floridamaximum.com
  • Flyinginsectsite.com
  • Flyingtigersmusic.com
  • Fortunatecentral.com
  • Fortunatesite.com
  • Fortunateworld.com
  • Freegiftcentralonline.com
  • Freegiftgame.com
  • Freehabit.com
  • Freeinsect.com
  • Freepresentcards.com
  • Freepresentcentral.com
  • Freshnewstyle.com
  • Freshrootsproduce.com
  • Friendsondemand.com
  • Fromtheclique.com
  • Fromthegreenhouse.com
  • Fundentry.com
  • Fundmanagementonline.com
  • Fundmanagementsite.com
  • Fungiftcardsonline.com
  • Furrycuddleparty.com
  • Gamecentipede.com
  • Gardeninsectguide.com
  • Generalcosmiccooperation.com
  • Generalvast.com
  • Getsproduce.com
  • Getsupergreen.com
  • Giftgreatgiver.com
  • Giftsunlimitedusa.com
  • Givecardcentral.com
  • Globalbeginning.com
  • Globalbestfriend.com
  • Globalchannelone.com
  • Globalfitnessclub.com
  • Glorioussilverstallion.com
  • Goodkarmaimports.com
  • Gradelearn.com
  • Granddesignsunlimited.com
  • Greatamericanbuttons.com
  • Greatantiquecars.com
  • Greatastgiftstore.com
  • Greatcentipedebite.com
  • Greatchemists.com
  • Greatcityradio.com
  • Greatcosmicgate.com
  • Greatcrewonline.com
  • Greatdigitaldesign.com
  • Greatdiscoinferno.com
  • Greateventmanagement.com
  • Greatgamesunlimited.com
  • Greatgeneratorpro.com
  • Greatgiftscards.com
  • Greatgloriousstallion.com
  • Greatgolfdirect.com
  • Greatgreenhousekit.com
  • Greatisle.com
  • Greatkeen.com
  • Greatmanagementcompany.com
  • Greatprogressive.com
  • Greatsmoothjazz.com
  • Greattechsystems.com
  • Greatthingsunlimited.com
  • Greatvitaminguide.com
  • Greatwatertreatment.com
  • Greatwondercrew.com
  • Greatwonderland.com
  • Greenboxdirect.com
  • Greendotguide.com
  • Greenlightwebsite.com
  • Greennetworld.com
  • Greenproworld.com
  • Greensheetsonline.com
  • Greenstarworld.com
  • Greenstoreonline.com
  • Greenvalleypartners.com
  • Greenworldcall.com
  • Greenworldcom.com
  • Haydirectonline.com
  • Healthsourceworld.com
  • Highererlearninganovel.com
  • Higherlearn.com
  • Higherlearningcentral.com
  • Higherlearnings.com
  • Higherlearningstudents.com
  • Highersee.com
  • Highertake.com
  • Homefitnessfun.com
  • Homefitnessltd.com
  • Honestcontent.com
  • Honesteducationonline.com
  • Honesteducationstudents.com
  • Honestfurther.com
  • Honestlearning.com
  • Humannatureconsulting.com
  • Humannaturegifts.com
  • Ideasunlimitedusa.com
  • Ifarmproduce.com
  • Ilookfantastic.com
  • Incentiveresult.com
  • Incorporatecrew.com
  • Infoaboutpenguins.com
  • Inquirecrew.com
  • Insectcontrolzone.com
  • Insectdirect.com
  • Integratedcrew.com
  • Integrateddealing.com
  • Integratedindustry.com
  • Integratedunit.com
  • Inventivecommerce.com
  • Inventivecommerceonline.com
  • Iprofitsharing.com
  • Iskimarmot.com
  • Itsyourdisco.com
  • Iwonderonline.com
  • Justlearnonline.com
  • Karmadogonline.com
  • Kidpowerworld.com
  • Kidslearndirect.com
  • Kidslearnflash.com
  • Kidslearnnow.com
  • Kidsunlimitedonline.com
  • Kidsunlimitedusa.com
  • Knowledgedealing.com
  • Latestmedicalinventions.com
  • Learnaboutkids.com
  • Learndirectlondon.com
  • Learnenglishclub.com
  • Learnmorelinux.com
  • Learnmoreweb.com
  • Learnphonicsonline.com
  • Learnworldmusic.com
  • Legalpowerline.com
  • Letslearnmath.com
  • Letslearnsite.com
  • Letsvisitdirect.com
  • Lifesharingcenter.com
  • Lightbulbbay.com
  • Lightbulblink.com
  • Lightbulbmountain.com
  • Limitlesscommerce.com
  • Limitlesstrade.com
  • Liquidbrandonline.com
  • Liquidworldrecords.com
  • Littlegreenonline.com
  • Littlesunshineschool.com
  • Littlewebwonder.com
  • Littlewondercrew.com
  • Looksharpmodels.com
  • Looksharpusa.com
  • Lovesupremeonline.com
  • Lovetheisland.com
  • Loveyournature.com
  • Lowerlearn.com
  • Lowersee.com
  • Lowerstudy.com
  • Loyaldealing.com
  • Loyalindustry.com
  • Mammothmarmot.com
  • Managementcreations.com
  • Marinearthropod.com
  • Marmotdirect.com
  • Marmotsupreme.com
  • Marvelvast.com
  • Mediaunlimitedonline.com
  • Megaprotech.com
  • Mendeleevchemists.com
  • Mendeleevworld.com
  • Microtechguide.com
  • Minisodapop.com
  • Molluskgrins.com
  • Molluskshells.com
  • Molluskworld.com
  • Monetaryfundportal.com
  • Moralforceresult.com
  • Mostadvancedproduct.com
  • Mostwonderfullife.com
  • Mostwonderfulonline.com
  • Moveyourbuttons.com
  • Moviechanneldirect.com
  • Mrsunshineonline.com
  • Myadministrativeexperts.com
  • Myamazingfruit.com
  • Myareasontogive.com
  • Mybestisland.com
  • Mybigcreation.com
  • Mybusinessassociates.com
  • Mybusinesscommerce.com
  • Mybusinesscreations.com
  • Mybusinessdare.com
  • Mybusinessdemand.com
  • Mybusinessinvention.com
  • Mybusinessmap.com
  • Mybusinesstrade.com
  • Mycentralinnovation.com
  • Mycollegeoffers.com
  • Mycommercechange.com
  • Mycommerceconnection.com
  • Mycommercecreations.com
  • Mycommercedeals.com
  • Mycommerceobstacles.com
  • Mycommercerelations.com
  • Mycommerceventures.com
  • Mycosmicdance.com
  • Mycreativebusiness.com
  • Mycreativeprotection.com
  • Mydynamicgifts.com
  • Mydynamicresult.com
  • Myexecutivebranch.com
  • Myexecutivebusiness.com
  • Myexecutivecreations.com
  • Myexecutiveexchange.com
  • Myexecutiveone.com
  • Myexecutiveworks.com
  • Myexpertdecisions.com
  • Myfreegiftcentral.com
  • Myfruitstore.com
  • Myfungiftcards.com
  • Mygiftacard.com
  • Mygiftsindemand.com
  • Mygiveagift.com
  • Myglaciergifts.com
  • Myglobalcreation.com
  • Mygreatestpals.com
  • Mygreatgiver.com
  • Myintegratedcommerce.com
  • Myintegratedcrew.com
  • Myinventivecommerce.com
  • Mykeyproduction.com
  • Myknowledgecommerce.com
  • Mylimitlesscommerce.com
  • Mymanagementcreations.com
  • Mymanagementpros.com
  • Mynewcommerce.com
  • Myoptimalanswers.com
  • Myoptimalpartners.com
  • Myprofessionalanswers.com
  • Myprofessionalnetworks.com
  • Myprofessionscrew.com
  • Mysmartgrowth.com
  • Mysupercrew.com
  • Mysuperiorbusiness.com
  • Mytreasuregifts.com
  • Myuniversalcommerce.com
  • Myvalleycommerce.com
  • Myventureembark.com
  • Mywinagiftcard.com
  • Mywinaprize.com
  • Mywondercrewonline.com
  • Mywonderworks.com
  • Myworldwonder.com
  • Naturalfitnessguide.com
  • Nesteggentry.com
  • Nesteggportal.com
  • Netgiftsunlimited.com
  • Netmanagementservices.com
  • Netpowergenerator.com
  • Newcommerceonline.com
  • Newcoproductions.com
  • Newcrosstech.com
  • Newdigitalcity.com
  • Newmoonfruit.com
  • Newportboatrental.com
  • Nonstoplink.com
  • Nothingaboutpenguins.com
  • Novelcommerce.com
  • Noviewgreenhouse.com
  • Nycantiqueguide.com
  • Oldantiqueonline.com
  • Oldantiqueshow.com
  • Omxexchange.com
  • Onegreatgreenhouse.com
  • Onesmoothbagel.com
  • Onlinemotorsite.com
  • Openseaonline.com
  • Optimalpartnersonline.com
  • Optimalquestions.com
  • Optimalreply.com
  • Optimalrespond.com
  • Optimalwork.com
  • Originativeassets.com
  • Originativebusiness.com
  • Originativecommerce.com
  • Originativeearth.com
  • Originativeglobe.com
  • Originativeuniverse.com
  • Originativeworld.com
  • Originmanagementgroup.com
  • Ourfantasticfamilies.com
  • Ourpowerline.com
  • Outislandmarina.com
  • Papermanagementgroup.com
  • Partsunlimitedinc.com
  • Penguinproductionsonline.com
  • Peoplecanlearn.com
  • Perkinpals.com
  • Perklove.com
  • Perkluv.com
  • Peruviancentipede.com
  • Plasticfantasticsurf.com
  • Pokethepenguins.com
  • Pontoonship.com
  • Portfitness.com
  • Possemachine.com
  • Powerlinenow.com
  • Powersupplytech.com
  • Presentacard.com
  • Professionalcloth.com
  • Professionalrespond.com
  • Professioncrew.com
  • Professionscrew.com
  • Professionsunit.com
  • Publicradionetworks.com
  • Publicschoolrugby.com
  • Purenatureonline.com
  • Q2result.com
  • Radiantbulbguide.com
  • Razorsharpminds.com
  • Razorsharponline.com
  • Realsupersite.com
  • Rednotginger.com
  • Repairsourceonline.com
  • Rexdigitalmedia.com
  • Rightcamps.com
  • Savingsentrance.com
  • Savingsentree.com
  • Savingsentry.com
  • Savingsportalonline.com
  • Schoolintellect.com
  • Schoolmind.com
  • Schoolprovide.com
  • Schooluniformdisco.com
  • Secondnatureprograms.com
  • Secondoutdoors.com
  • Sharingourmoment.com
  • Sharingoursouls.com
  • Sharingyourblessings.com
  • Sharpedgetools.com
  • Sharpshoponline.com
  • Sharpsolutionsonline.com
  • Sharpworldimport.com
  • Sharpworldtravel.com
  • Shopdirectguide.com
  • Silentthemesite.com
  • Simplysmoothflavor.com
  • Simplyvelvet.com
  • Simplywonderfulscents.com
  • Sitesvalley.com
  • Smackthepenguins.com
  • Smoothgroovesonline.com
  • Smoothjazzarchives.com
  • Smoothjazzinfo.com
  • Smoothmovebenefits.com
  • Smoothmovesonline.com
  • Smoothsailingbeverages.com
  • Smoothskincompany.com
  • Smoothtransitionsonline.com
  • Smoothworldpromotion.com
  • Snailsdirect.com
  • Snailsstore.com
  • Softbodyfitness.com
  • Solutionsunlimitednow.com
  • Spacecosmic.com
  • Speedysnails.com
  • Sportsmanagementonline.com
  • Stateinsectonline.com
  • Stickworms.com
  • Stoptheinsect.com
  • Stopthepenguins.com
  • Strategicalgroup.com
  • Strategicalmethod.com
  • Strategicalsystem.com
  • Strategicsystemsonline.com
  • Stuffedwildlife.com
  • Sunriseharbormarina.com
  • Sunshinecruisesonline.com
  • Sunshinegrouponline.com
  • Sunshinestateflowers.com
  • Sunshinestatemagazine.com
  • Sunshinestatesupply.com
  • Superairco.com
  • Superantiqueappraisals.com
  • Superantiquedealers.com
  • Superarthropodsite.com
  • Superchannelone.com
  • Superdirectonline.com
  • Superdistrict.com
  • Superfanunlimited.com
  • Superfitnessequipment.com
  • Superfoodsupreme.com
  • Superfriendclub.com
  • Superfunddirect.com
  • Superginger.com
  • Supergreenhousekit.com
  • Supergreenlife.com
  • Supermanagementservices.com
  • Supermolluskworld.com
  • Superopenhomes.com
  • Superpenguinsfan.com
  • Superpowersupply.com
  • Superseekandfind.com
  • Supersharingfiles.com
  • Supersharingsite.com
  • Supersmoothmove.com
  • Supersoftwareunlimited.com
  • Supersuperdeal.com
  • Supersupervision.com
  • Superuncanny.com
  • Supervitaminman.com
  • Superwaterbed.com
  • Superwondercrew.com
  • Superwonderland.com
  • Supremeautobiz.com
  • Supremeautoshop.com
  • Supremecouncilonline.com
  • Suprememotorworld.com
  • Supremeplusonline.com
  • Supremetrustonline.com
  • Supremewheelsonline.com
  • Supremeworldwrestling.com
  • Surrealdesignsunlimited.com
  • Sweepsbest.com
  • Techworldlink.com
  • Terraviewgreenhouse.com
  • Theadministrativeexperts.com
  • Theairsite.com
  • Theairzone.com
  • Theanimalkids.com
  • Theanimalmob.com
  • Theanimalpeople.com
  • Theantiquearchives.com
  • Theantiquegame.com
  • Theareasontogive.com
  • Thearthropodguide.com
  • Thebigcreation.com
  • Thebirthdayinvitation.com
  • Thebirthdayking.com
  • Thebirthdayworks.com
  • Thebodysupreme.com
  • Thebusinessassociates.com
  • Thebusinesscommerce.com
  • Thebusinesscreations.com
  • Thebusinessdare.com
  • Thebusinessdemand.com
  • Thebusinessestablishment.com
  • Thebusinessinvention.com
  • Thebusinesstrade.com
  • Thebutterflygifts.com
  • Thecentipedeonline.com
  • Thecentralinnovation.com
  • Thecitrusfactor.com
  • Thecitruszone.com
  • Thecitymart.com
  • Thecollegeintellect.com
  • Thecollegeoffers.com
  • Thecommercechange.com
  • Thecommerceconnection.com
  • Thecommercecreations.com
  • Thecommercedeals.com
  • Thecommerceobstacles.com
  • Thecommercerelations.com
  • Thecommerceventures.com
  • Theconecrew.com
  • Thecoolgiftcards.com
  • Thecosmicbagel.com
  • Thecosmicblues.com
  • Thecosmiceye.com
  • Thecosmicgoose.com
  • Thecosmicrim.com
  • Thecosmicvoid.com
  • Thecosmicwok.com
  • Thecosmicwow.com
  • Thecreativeprotection.com
  • Thecrewcab.com
  • Thecrewproductions.com
  • Thecrunchcrew.com
  • Thedatagenerator.com
  • Thedigitalnow.com
  • Thedirectleads.com
  • Thediscokid.com
  • Thedotgenerator.com
  • Thedowntownhub.com
  • Thedowntownmap.com
  • Thedynamicgifts.com
  • Thedynamicresult.com
  • Theexecutivebusiness.com
  • Theexecutivecreations.com
  • Theexecutiveone.com
  • Theexecutivesolutions.com
  • Theexecutiveworks.com
  • Theexpertdecisions.com
  • Thefantasticbargains.com
  • Thefantasticplastic.com
  • Thefavoritegiftcards.com
  • Thefinancestarter.com
  • Thefitnessenthusiast.com
  • Thefreegiftcentral.com
  • Thefreshside.com
  • Thefreshstory.com
  • Thefreshword.com
  • Thefrugalfriend.com
  • Thefruitypenguins.com
  • Thegiftacard.com
  • Thegiftcardcentral.com
  • Thegiftingseason.com
  • Thegiftsindemand.com
  • Thegingerquestion.com
  • Thegiveagift.com
  • Thegiveareason.com
  • Theglaciergifts.com
  • Theglobalcreation.com
  • Thegreatgiver.com
  • Thegreenbroom.com
  • Thegreencouch.com
  • Thegreenhousebiz.com
  • Thegreenhousecafes.com
  • Thegreenhousecentre.com
  • Thegreenhouseguy.com
  • Thegreenhouseltd.com
  • Thehigherlearning.com
  • Theinfinitecreation.com
  • Theinsectdude.com
  • Theinsectflies.com
  • Theinsectmuseum.com
  • Theintegratedcommerce.com
  • Theintegratedcrew.com
  • Theinventionscompany.com
  • Theinventionsportal.com
  • Thekarmaarmy.com
  • Thekarmacup.com
  • Thekarmadetectives.com
  • Thekeyproduction.com
  • Theknowledgecatalyst.com
  • Theknowledgecommerce.com
  • Theknowledgeportal.com
  • Thelearninggreenhouse.com
  • Thelearnmachine.com
  • Thelearnnet.com
  • Thelimitlesscommerce.com
  • Theliquidband.com
  • Themagnificentcrocodile.com
  • Themanagementcreations.com
  • Themarinahouse.com
  • Themastercrew.com
  • Themepartiesplus.com
  • Themepartydepot.com
  • Themolluskguide.com
  • Themostwonderful.com
  • Themotorport.com
  • Thenaturetours.com
  • Thenetglobe.com
  • Theoldgreenhouse.com
  • Theonlyantique.com
  • Theoptimalanswers.com
  • Theoptimalpartners.com
  • Thepapertigers.com
  • Thepenguinsauctio.com
  • Thepenguinsrock.com
  • Thepenguinsrule.com
  • Thepowerchannel.com
  • Theprocrew.com
  • Theproduceking.com
  • Theprofessionalanswers.com
  • Thepublicbean.com
  • Thepurplepenguins.com
  • Therealvitamin.com
  • Therootcrew.com
  • Thesarcasticbadger.com
  • Thescreamingvegan.com
  • Thesharingangel.com
  • Thesharingcommunity.com
  • Thesharinglens.com
  • Thesharingpatrol.com
  • Thesharingprogram.com
  • Thesharingring.com
  • Thesharingsites.com
  • Thesharingsoftware.com
  • Thesharpdesign.com
  • Thesharpguide.com
  • Thesmoothcharacter.com
  • Thesmoothmovers.com
  • Thesmoothmoves.com
  • Thesmoothpursuit.com
  • Thesmoothsite.com
  • Thesmoothtransition.com
  • Thesmoothworks.com
  • Thesoftwaregenerator.com
  • Thesonicchannel.com
  • Thestonetigers.com
  • Thestrategicsystems.com
  • Thesunshinecommerce.com
  • Thesunshinekids.com
  • Thesuperiorbusiness.com
  • Thesuperkit.com
  • Thesuprememeal.com
  • Thetablesaw.com
  • Theteamtheme.com
  • Thetigersroar.com
  • Thetinyisland.com
  • Thetreasuregifts.com
  • Theultimatefitness.com
  • Theunitedexecutives.com
  • Theuniversalcommerce.com
  • Theunlimitednetwork.com
  • Theunlimitedoutlet.com
  • Theunlimitedpotential.com
  • Thevalleycommerce.com
  • Theventureembark.com
  • Thevirtualgreenhouse.com
  • Thewaterheater.com
  • Thewebclique.com
  • Thewildisland.com
  • Thewildlifecenter.com
  • Thewildlifepark.com
  • Thewinagiftcard.com
  • Thewinaprize.com
  • Thewirelessmarina.com
  • Thewonderbay.com
  • Thewondercrew.com
  • Thewonderdome.com
  • Thewonderfullife.com
  • Thewonderfulpeople.com
  • Thewonderfulshoppe.com
  • Thewonderfulsixties.com
  • Thewonderguys.com
  • Thewonderlandclubs.com
  • Thewonderlandexchange.com
  • Thewonderlandonline.com
  • Thewonderlandparty.com
  • Thewondernet.com
  • Theworldcrew.com
  • Theworldknowledge.com
  • Theworldmanagement.com
  • Thezodiacconnection.com
  • Thezodiacdolls.com
  • Thezodiaczoo.com
  • Thisamazingworld.com
  • Thisoldantique.com
  • Thunderbaymarina.com
  • Tigerseyegraphics.com
  • Tinyemperorpenguins.com
  • Totalfitnessdirect.com
  • Tothegreenhouse.com
  • Tradeembark.com
  • Tradeobstacles.com
  • Trovegift.com
  • Truthrace.com
  • Tuxthepenguins.com
  • Ultimatesupreme.com
  • Ultrasmoothsurfaces.com
  • Uncountedcreation.com
  • Unfastenedair.com
  • Unitedexecutivesonline.com
  • Uniteexecutives.com
  • Universalchamber.com
  • Universalcommerceonline.com
  • Universaldealing.com
  • Universewonder.com
  • Universityintellect.com
  • Unlimitedcareusa.com
  • Unlimitedgraphicsonline.com
  • Unlimitedsoundsonline.com
  • Uptownreal.com
  • Usalimitededitions.com
  • Valleydealing.com
  • Valleyscommerce.com
  • Vastegg.com
  • Veganinfurs.com
  • Venturebegin.com
  • Ventureembark.com
  • Ventureembarkonline.com
  • Ventureendeavor.com
  • Ventureinitiative.com
  • Videomailgenerator.com
  • Viewthemarina.com
  • Virtualvisitonline.com
  • Visitusafirst.com
  • Webadministrativeexperts.com
  • Webbusinessassociates.com
  • Webbusinessboard.com
  • Webbusinesscommerce.com
  • Webbusinessdeals.com
  • Webbusinessdemand.com
  • Webbusinessestablishment.com
  • Webbusinessexperience.com
  • Webbusinessinvention.com
  • Webbusinesstrade.com
  • Webcollegeintellect.com
  • Webcollegeoffers.com
  • Webcommerceconnection.com
  • Webcommercedeals.com
  • Webcommercerelations.com
  • Webcommerceventures.com
  • Webcoolgiftcards.com
  • Webcreativeprotection.com
  • Webcrewonline.com
  • Webdynamicgifts.com
  • Webdynamicresult.com
  • Webexecutivebranch.com
  • Webexecutiveone.com
  • Webexecutiveworks.com
  • Webfavoritegiftcards.com
  • Webfortunate.com
  • Webfreegiftcentral.com
  • Webgiftcardcentral.com
  • Webgiftingseason.com
  • Webgiveareason.com
  • Webglaciergifts.com
  • Webglobalbusiness.com
  • Webglobalcreation.com
  • Webglobaltrust.com
  • Webhigherlearning.com
  • Webintegratedcommerce.com
  • Webintegratedcrew.com
  • Webkeyproduction.com
  • Webknowledgecommerce.com
  • Webnewcommerce.com
  • Webnewcommerceonline.com
  • Weboptimalanswers.com
  • Weboptimalpartners.com
  • Webprofessionalanswers.com
  • Websavingsportal.com
  • Webstrategicsystems.com
  • Webuniversalcommerce.com
  • Webventureembark.com
  • Webwondercrew.com
  • Whitetigerscreation.com
  • Whitetigerssecurity.com
  • Whoismendeleev.com
  • Wideopengolf.com
  • Wildanimalhealth.com
  • Wildanimaltours.com
  • Wildlifephotoindex.com
  • Winagiftcardonline.com
  • Wisconsinbadgersport.com
  • Wisecentipede.com
  • Wondercrew.com
  • Wondercrewonline.com
  • Wondercrewproductions.com
  • Wondercrewworld.com
  • Wonderdirect.com
  • Wonderfulthingsdirect.com
  • Wonderposse.com
  • Wonderworldgroup.com
  • Wonderworldradio.com
  • Wonderworldweb.com
  • Woollymarmot.com
  • Workenterprise.com
  • Worldbeginning.com
  • Worldvitaminsource.com
  • Worldwildlifeclub.com
  • Worldwonderonline.com
  • Wowcrewonline.com
  • Yourairsupply.com
  • Youramazingsuccess.com
  • Youranimalcare.com
  • Youranimallink.com
  • Yourantiquecar.com
  • Yourboatshows.com
  • Yourbulbman.com
  • Yourcentipede.com
  • Yourcosmiccoach.com
  • Yourcosmicegg.com
  • Yourdigitalinfo.com
  • Yourdirectline.com
  • Yourdirectsupply.com
  • Yourfantastichome.com
  • Yourfavouritebuttons.com
  • Yourfindonline.com
  • Yourfinecity.com
  • Yourglobalaccess.com
  • Yourglobespan.com
  • Yourgreenhouseeffect.com
  • Yourgreenhouseflorist.com
  • Yourinsect.com
  • Yourinsectbites.com
  • Yourknowledgeonline.com
  • Yourlifewonderful.com
  • Yourlimitededition.com
  • Yourlivingair.com
  • Yourmanagementgroup.com
  • Yourmotorcenter.com
  • Yourowngreen.com
  • Yourpenguins.com
  • Yourpuppyfind.com
  • Yoursecondnature.com
  • Yoursharing