Again Scam – Unlock your Online TV Channels

February 22, 2009

Hi,

Again the classical attempt of scam (read my previous post) this time you have to pay to have activated Online TV Channels.

Subject: Unlock your Online TV Channels

E-Mail Content:

——————————————–

Watch whatever you want whenever you want – Enjoy all your fovorite channels

Once you receive this software be prepared to watch sports, news, sitcoms, dramas and other programming from around the globe!

Top Watched TV Shows Online:
Lost, Gossip Girls, House, Scrubs, One Tree Hill

Online TV Pass: 4863
http://ddailyevent.com/re.php?lnk=1203399501&e=evilcodecave@gmail.com

– All channels are uncensored!
– This service is available 24 hours per day.
– Thousands of channels from around the world. Channels added every day!
– No monthly fees. Never pay another cable or satellite bill again!

Online TV Pass: 4863
http://ddailyevent.com/re.php?lnk=1203399501&e=evilcodecave@gmail.com

Testimonial: “Pure genius, in the near future, this will be the new standard for television” – J. Andrews. London, England

Online TV Pass: 4863
http://ddailyevent.com/re.php?lnk=1203399501&e=evilcodecave@gmail.com

Best Regards,

Michael Adams
Online TV Analyst

You will not get anymore of our emails if you go here
http://ddailyevent.com/

or write to:

Plaza Neptuno, local #7
Via ricardo J Alfaro, Tumba Muerto
Panama Ciudad
Republica de Panama

——————————————–

The technique is always the same, Money/Credit Card Scam througout fake services.

See you to the next post.. 🙂


Map Contacts Google Earth Scam

February 22, 2009

Hi,

Today we will analyze another E-Mail Scam attempt based on Fake Software Marketing.

From: New Map Contacts

Date: 21 February 2009 23:48

Subject: Download Map Contacts for Google Earth

And here the content:

———————————————-

View your Friends & Family on Google Earth – Also explore the earth’s most viewed locations

Google Earth is a Free software which allows you to view the world from the comfort of your PC. There is now a great new add-on for Google Earth which allows you to easily map all your contacts.

Your Earth Code: 6208
http://infobulletiny.com/re.php?lnk=1203403360&e=evilcodecave@gmail.com

This great new feature allows you to display your friends and family on Google Earth and view their locations and surrounding areas.

Your Earth Code: 6208
http://infobulletiny.com/re.php?lnk=1203403360&e=evilcodecave@gmail.com

– Easily add friends and family to your Google Earth
– Navigate and see the best locations earth has to offer
– Display your friends and family on the map for easy viewing

Once you receive this software be prepared to fly anywhere on Earth to view satellite imagery, maps, terrain, 3D buildings and even explore galaxies in the sky.

Your Earth Code: 6208
http://infobulletiny.com/re.php?lnk=1203403360&e=evilcodecave@gmail.com

Best Regards,

Larry Walters
Map Contacts for Earth

You will not get anymore of our emails if you go here
http://infobulletiny.com/

or write to:

Plaza Neptuno, local #7
Via ricardo J Alfaro, Tumba Muerto
Panama Ciudad
Republica de Panama

—————————————————————

By Dissecting infobullettinity we can see a silent redirection to

http://map-contact-online.com/promo/index.asp?aff=001&camp=earth_e2new&kbid=1576&sub=earth_e2

The website publicized Map-Contact, a plugin to bookmark you contacts on Google Earth, Home page is full of download now but when you click on Download Now you’re redirected to http://www.securesignup.ru a site for Credit Card Payments.

After inserting Promotion Code, we discover that this Website offers an accet to some fake software at 3 Year Unlimited VIP Access & Support for ONLY $54.95 $12.97/year (best value!) 🙂

Victims will give Credit Card data and no software will be delivered!

Look at the end of E-Mail.. again Panama 🙂

See you to the next post




Fake Download Open Office 2009 – Credit Card Fraud

October 12, 2008

Hi,

This morning I’ve discovered another funny Fraud attempt, based on a fake membership to Download Open Office 2009. This is the mail that I’ve received:

—————————————————————–

Open Office Suite 2009

Open, Create & Edit Your Files
Download Office Suite 2009??Here
Edit Word, Excel & Power Point files- 100% MS Office Compatible.

Office Solutions

Read and write PDF files just like Adobe.
Here’s how to download Open Office 2009:
1. Go to: Download Page
2. Download Open Office 2009
3. Receive access immediately
This software package is the best way to edit your documents.
Publish all of your documents online in the HTML format.
Thank you for choosing us, the worldwide leader in Open Office 2009.
For More Information Visit our Website
Thank You,

David Matthews

If you want to stop receiving mail, please go to:
http://daily–new-product.org/
or you may contact us at the following address:

Plaza Neptuno, local #7
Via ricardo J Alfaro, Tumba Muerto
Panama Ciudad
Republica de Panama

—————————————————————–

Republica de Panama? and OpenOffice?..that really strange you don’t !?!?

but let see this ‘great offer’..by clicking on the link reported into mail we are suddenly prompted to:

http://67.214.168.130/openoffice/index.asp?aff=001&camp=openoffice_espd&kbid=1587&sub=oo_espd&pop=1

and also this as you should understand sounds strange.. OpenOffice Website that is based upon an IP..

A classical well designed fake page, now let’s click on download, and as we can see we are asked for Membership, after filling email and Name/Surname fields appears the core of the Scam, the Membership to Be Activated needs a Credit Card Payment 😉

After accepting we are infront off a classical phishing form that contains:

  • Name
  • Surname
  • Location
  • PostalCode
  • E-Mail
  • Cc Number
  • CcV2
  • Scad

Here you can see the screenshot:

After clicking system “validates” you transaction and the fraud is successfully completed 🙂

Here some information about the used IP

IP Information for 67.214.168.130

IP Location: United States United States South Bend Colostore.com
IP Address: 67.214.168.130
Blacklist Status: Clear

Whois Record

OrgName:    Colostore.com
OrgID:      KCA-7
Address:    1805 South Michigan Street
City:       South Bend
StateProv:  IN
PostalCode: 46613
Country:    US

ReferralServer: rwhois://rwhois.colostore.com:4321/

NetRange:   67.214.160.0 – 67.214.191.255
CIDR:       67.214.160.0/19
OriginAS:   AS12260
NetName:    COLOSTORE-COM
NetHandle:  NET-67-214-160-0-1
Parent:     NET-67-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.COLOSTORE.COM
NameServer: NS2.COLOSTORE.COM
Comment:    http://www.colostore.com
RegDate:    2007-09-28
Updated:    2008-07-21

See you to the next post.. 🙂