May 2006 - page updated with some
more bounced spam emails with forged from addresses,:
Warning: A number of forged/spam emails have been sent out apparently
from amcho.com and other domains owned by us or our customers. The from
and reply address are a forgery. We have no association with any
product below and suspect all are scams. |
|
|
We just had a call from a company saying "someone is
trying to register your company name on the internet" who tried to sell
us the .biz and .info domain names (we already have the .com and the
.co.uk). If this happens to you ask them to quote on every single
country domain, plus all possible spellings, with and without hyphens,
then ask them how they will tell their current customer that they have
just registered the domain for someone else.
|
|
When you get an renewal notice on your domain - check
carefully that it is really from the people who have registered your
domain. Even if you are not happy with your current provider - there
are many decent people selling domain registration who do not resort to
sending out fake invoices.
|
| May 2006 - some more forged/spam
emails have been sent out with forgeged from headers. We have no
association with any of the following products or websites below and
suspect all are scams.
|
|
|
Item being advertised
|
contact details |
date and description |
|
|
|
Return-Path:
Received: from msedesign.servadmin.com (root@localhost)
by dbgraphicservices.com (8.12.10/8.12.10) with ESMTP id k4Q9Ygbn031458
for ; Fri, 26 May 2006 04:34:47 -0500
X-ClientAddr: 61.49.195.7
Received: from cirimail.com ([61.49.195.7])
by msedesign.servadmin.com (8.12.10/8.11.6) with SMTP id k4Q9YSXQ031435
for ; Fri, 26 May 2006 04:34:32 -0500
Received: from 202.181.174.229
(SquirrelMail authenticated user xxxxxxxxxxxxxxxxxx);
by cirimail.com with HTTP id Ab44qw9z028176614;
Fri, 26 May 2006 09:34:00 +0000
Message-Id: <1mZlAB.squirrel@202.181.174.229>
Date: Fri, 26 May 2006 09:34:00 +0000
Subject: Canadian online RX store
From: "Bart"
To:
User-Agent: SquirrelMail/1.4.3a
X-Mailer: SquirrelMail/1.4.3a
MIME-Version: 1.0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Good morning!
We would like to offer licensed meds from our Canadian store!
- wordwide delivery
- all meds are FDA approved
- 24/7 customer support service
- secure transactions
- qreat discounts avaiIable
Get it here: Canadian onIine RX store site
Best Regards,
OnIine PharmaceuticaIs
===============================================================================
domain registration info:
===============================================================================
Checking "revilecape.com" in the .com registry whois database... Found revilecape.com registered via INNERWISE, INC. D/B/A ITSYOURDOMAIN.COM...
Checking revilecape.com in the whois.itsyourdomain.com whois database...
The Data in our WHOIS database is provided by us for information purposes,
and to assist persons in obtaining information about or related to a domain
name registration record. We do not guarantee its accuracy. By
submitting a WHOIS query, you agree that you will use this Data only for
lawful purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass unsolicited,
commercial advertising or solicitations via e-mail (spam); or (2) enable
high volume, automated, electronic processes that apply to us, our
systems, or our customers. We reserve the right to modify these terms at
any time. By submitting this query, you agree to abide by this policy.
Domain: revilecape.com
Registrant
Todor Dyakov
Todor Dyakov
dyakyhg@yahoo.com
1126 Wines Dr
Ann Arbor, MI 48103 US
+1.7346654312
Administrative
Todor Dyakov
Todor Dyakov
dyakyhg@yahoo.com
1126 Wines Dr
Ann Arbor, MI 48103 US
+1.7346654312
Billing
Todor Dyakov
Todor Dyakov
dyakyhg@yahoo.com
1126 Wines Dr
Ann Arbor, MI 48103 US
+1.7346654312
Technical
Todor Dyakov
Todor Dyakov
dyakyhg@yahoo.com
1126 Wines Dr
Ann Arbor, MI 48103 US
+1.7346654312
Record created on May 20, 2006
Record last updated on May 20, 2006
Record expires on May 20, 2007
Domain Name Servers:
NS1.CONBRAIN.INFO
NS2.RENTSIN.INFO
NS1.TURDIREKT.INFO
NS2.BOLDKLUB.INFO
|
|
www.supersanny.com
software downloads
|
none on website |
May 2006
From: "Siobhan" feelingfitandfantastic.domainregowner@amcho.com
To: gd@staff.nudgee.com
Subject: Can't buy expensive software? Look here!
Message-Id: <20060524004537.6x1a5036.john@kjww.com>
X-Mailer: Sylpheed version 1.0.6 (GTK+ 1.2.10; i386-portbld-freebsd6.1)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Good morning,
Looking for software for your PC? We might have what you need...
- Any product from famous brands
- best prices
- great customers support
- instant delivery
You can get it here: http://www.supersanny.com
Best regards,
Siobhan
============================
Domain Registration details
============================
Checking "supersanny.com" in the .com registry whois database...
Found supersanny.com registered via INNERWISE, INC. D/B/A ITSYOURDOMAIN.COM...
Checking supersanny.com in the whois.itsyourdomain.com whois database...
The Data in our WHOIS database is provided by us for information purposes,
and to assist persons in obtaining information about or related to a domain
name registration record. We do not guarantee its accuracy. By
submitting a WHOIS query, you agree that you will use this Data only for
lawful purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass unsolicited,
commercial advertising or solicitations via e-mail (spam); or (2) enable
high volume, automated, electronic processes that apply to us, our
systems, or our customers. We reserve the right to modify these terms at
any time. By submitting this query, you agree to abide by this policy.
Domain: supersanny.com
Registrant
James Harding
James Harding
harding.james@yahoo.co.uk
102 Eswyn Road
London, na n90jg GB
+1.8005311912
Administrative
James Harding
James Harding
harding.james@yahoo.co.uk
102 Eswyn Road
London, na n90jg GB
+44.8005311912
Billing
James Harding
James Harding
harding.james@yahoo.co.uk
102 Eswyn Road
London, na n90jg GB
+44.8005311912
Technical
James Harding
James Harding
harding.james@yahoo.co.uk
102 Eswyn Road
London, na n90jg GB
+44.8005311912
Record created on May 11, 2006
Record last updated on May 11, 2006
Record expires on May 11, 2007
Domain Name Servers:
NS1.SUPERSUPERINC.COM
NS2.SUPERSUPERINC.COM
|
|
www.superadded.com
software downloads |
none on website |
May 2006
Return-path: <info@amcho.co.uk>
Received: from [127.0.0.1] (helo=localhost)
by mail.5rreo.com with esmtp (Exim 4.20)
id 1Fiper-0000Mq-A4
for info@amcecuador.com; Wed, 24 May
2006 04:28:01 -0500
Received: from mail.5rreo.com ([127.0.0.1])
by localhost (server1.movecorporation.com [127.0.0.1])
(amavisd-new, port 10024)
with ESMTP id 01157-05 for
<info@amcecuador.com>;
Wed, 24 May 2006 04:27:59 -0500 (ECT)
Received: from [83.144.88.11] (helo=jackiesmail.com)
by mail.5rreo.com with smtp (Exim 4.20)
id 1Fipeo-0000Ma-Co
for info@amcecuador.com; Wed, 24 May
2006 04:27:58 -0500
Received: from [192.168.12.14] (helo=client)
by jackiesmail.com with esmtpa (Exim
4.43 (FreeBSD))
id Ab44qw9z016575712
for info@amcecuador.com; Wed, 24 May
2006 09:04:31 +0000
Date: Wed, 24 May 2006 09:04:31 +0000
From: "Brittni" info@amcho.co.uk
To: info@amcecuador.com
Subject: Can't buy expensive software? Look here!
Message-Id: <20060524004537.6x1a5036.petrpotr@go2.pl>
X-Mailer: Sylpheed version 1.0.6 (GTK+ 1.2.10; i386-portbld-freebsd6.1)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by amavisd-new at 5rreo.com
Good morning,
Looking for software for your PC? We might have what you need...
- Any product from famous brands
- best prices
- great customers support
- instant delivery
You can get it here: http://www.superadded.com
Best regards,
Brittni
Checking "superadded.com" in the .com registry whois database...
Found superadded.com registered via INNERWISE, INC. D/B/A ITSYOURDOMAIN.COM...
Checking superadded.com in the whois.itsyourdomain.com whois database...
The Data in our WHOIS database is provided by us for information purposes,
and to assist persons in obtaining information about or related to a domain
name registration record. We do not guarantee its accuracy. By
submitting a WHOIS query, you agree that you will use this Data only for
lawful purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass unsolicited,
commercial advertising or solicitations via e-mail (spam); or (2) enable
high volume, automated, electronic processes that apply to us, our
systems, or our customers. We reserve the right to modify these terms at
any time. By submitting this query, you agree to abide by this policy.
Domain: superadded.com
Registrant
James Harding
James Harding
harding.james@yahoo.co.uk
102 Eswyn Road
London, na n90jg GB
+1.8005311912
Administrative
James Harding
James Harding
harding.james@yahoo.co.uk
102 Eswyn Road
London, na n90jg GB
+44.8005311912
Billing
James Harding
James Harding
harding.james@yahoo.co.uk
102 Eswyn Road
London, na n90jg GB
+44.8005311912
Technical
James Harding
James Harding
harding.james@yahoo.co.uk
102 Eswyn Road
London, na n90jg GB
+44.8005311912
Record created on May 11, 2006
Record last updated on May 11, 2006
Record expires on May 11, 2007
Domain Name Servers:
NS1.SUPERSUPERINC.COM
NS2.SUPERSUPERINC.COM
|
|
| Dating Services |
reg@carnegiesun.com |
April 2004 - this time I'm getting hundreds of bounces
from some sort of dating scam:
Reported it to
abuse@number1datingsite.com,
abuse@bulkregister.com - replied "complain to the ISP",
abuse@9T5.NET,
reg@carnegiesun.com,
abuse@carnegiesun.com
As follows:
Date: Mon, 19 Apr 2004 14:57:59 +0100
The following spam was sent out with forged from address
(owen@amcho.com) advertising number1datingsite.com
Please take action to stop these spam emails
and reply to abuse@amcho.com to confirm.
Received: from ga-cmng-cuda1-c3c-15.atlaga.adelphia.net (unverified [68.71.180.15])
by mssql.zzangcd.co.kr
(EMWAC SMTPRS 0.83) with SMTP id ;
Mon, 19 Apr 2004 16:10:57 +0900
Received: from mail[127.0.0.1] by ga-cmng-cuda1-c3c-15.atlaga.adelphia.net
id 5KjgOwxgSEaw; Mon, 19 Apr 2004 09:00:24 -0500
Message-ID: <7ackr$f1-4$2s@u83po>
From: "Diego Meredith"
Reply-To: other probably forged addresses removed
- they are probably getting enough hassle already!
Subject: Interested in an invitation
Date: Mon, 19 Apr 04 09:00:24 -0500
One of your buddies hooked you up on a date with another buddy.
Your invitation:
http://number1datingsite.com/confirm/?oc=3D53039=162
A FREE dating web site
CREATED BY WOMEN
=======================================================
Found number1datingsite.com registered via BULKREGISTER, LLC....
Checking number1datingsite.com in the whois.bulkregister.com whois
database...
Domain Name: NUMBER1DATINGSITE.COM
Domain Owner:
Carnegie Sun
Saffrey Square, Suite 104A P.O. Box N-9306
Nassau, 00000
BS
Administrative Contact:
Carnegie Sun reg@carnegiesun.com
Carnegie Sun
Saffrey Square, Suite 104A P.O. Box N-9306
Nassau, 00000
BS
Phone: 8666933273
Fax:
Technical Contact:
Carnegie Sun reg@carnegiesun.com
Carnegie Sun
Saffrey Square, Suite 104A P.O. Box N-9306
Nassau, 00000
BS
Phone: 8666933273
Fax:
Record updated on 2004-04-08 13:48:58
Record created on 2004-04-08
Record expires on 2005-04-08
Domain servers in listed order:
NS1.9T5.NET 202.102.245.51
NS2.9T5.NET 202.102.249.20
Register your domain name at http://www.bulkregister.com
|
|
|
Coolbox Pro Digital
|
877 846 7633 |
June 2003 - a large number of
fraudulent emails apparently from BxB.co.uk are being sent out.
Reported to ifccfbi.gov 25 june 2003. I tried calling the number from
the UK on the 27 June 2003 - apparently a fault on the line? |
|
| |
|
|
|
| |
|
|
|
