where do I report these eBay Auction Job Finder scams?

Any information or research into the rampant "Nigerian Scam" messages.

where do I report these eBay Auction Job Finder scams?

Postby kabo0m » Tue Jun 01, 2010 10:28 pm

I am not sure what I got here but I have been getting emails the last few days from different emails telling me to go to site (that coorespond with the email addresses) which are all hosted at (I think) domaindiscover.com and emails being sent through MMLITE.COM.

MMLITE.COM says this:

At our customer's request our system is acting as a proxy for email
addressed to the contacts which are listed above. Please visit
www.emailaddressprotection.com to contact the appropriate party.


These are the emails and I want to know anything about them:

Return-Path: <postmaster@fiscalupdates.com>
Received: from fiscalupdates.com (fiscalupdates.com [70.38.104.238])
X-Mailer: Robomail Version 7.3.5 ReRepet
Received: by 70.38.104.238 with SMTP id f10ou6393034utq.10.201005310231; Mon, 31 May 2010 02:31:08 -0400
Date: Mon, 31 May 2010 02:31:08 -0400
List-Unsubscribe: <mailto:unsubscribe@fiscalupdates.com>, <hXXp://fiscalupdates.com/U/504/909631>
Message-ID: <1IQE155C0201005310231cftpvmobrvlgtuynle70974opq@fiscalupdates.com>
Subject: Auction Processing Jobs at home. Immediate Placement
From: "Elizabeth Jackson" <postmaster@fiscalupdates.com>

This market is worth more than $59 billion and growing every day. Some of the bigest names in the industry are part of it. Positions are extremely limited, so don't wait to act. If you're serious about changing your financial situation, you've got to check this out now!

hXXp://fiscalupdates.com/C/7/504/909631


This email is a commercial advertisement. If you wish to not receive information from us, please let us know and you will be excluded from future distributions immediatley
hXXp://fiscalupdates.com/U/504/909631 Click Here Now to be removed or write us & be sure to include your email address.

Subscriber Requests: 4408 McLean Rd Haltom City TX 76117

Return-Path: <postmaster@debtwealthmoney.com>
Received: from debtwealthmoney.com (debtwealthmoney.com [70.38.104.237])
X-Mailer: Robomail Version 7.3.5 ReRepet
Received: by 70.38.104.237 with SMTP id x97rh0602872tnh.47.201006011834; Tue, 01 Jun 2010 18:34:24 -0400
Date: Tue, 01 Jun 2010 18:34:24 -0400
List-Unsubscribe: <mailto:unsubscribe@debtwealthmoney.com>, <hXXp://debtwealthmoney.com/U/524/909631>
Message-ID: <G163X83TU201006011834akdsivrwoepwhlftwi54241bpr@debtwealthmoney.com>
Subject: Video reveals Mom's $150 daily income machine...
From: "My Online Income System Team" <postmaster@debtwealthmoney.com>

I am always on the look out for success stories and I love to see average people make it big on the internet...I never thought I would come accross a struggling single mother who went from waitressing, living paycheck to paycheck to now earning $500+ daily online! The crazy part is...She developed her own system and is now sharing it with only 100 more people. I had to beg her to let me tell you about this program because she was about to close it down to new members this week! You can read the full story here:

hXXp://debtwealthmoney.com/C/17/524/909631


This email is a commercial advertisement. If you wish to not receive information from us, please let us know and you will be excluded from future distributions immediatley
hXXp://debtwealthmoney.com/U/524/909631 Click Here Now to be removed or write us & be sure to include your email address.

Subscriber Requests: 4408 McLean Rd Haltom City TX 76117


Whois for both:

(Asked whois.domaindiscover.com:43 about fiscalupdates.com)
fiscalupdates.com = [ 70.38.104.238 ]

Registrant:
Mail Media Lite Inc
4408B-A1 McClean Road
Haltom City TX 76117
US
Domain Name: FISCALUPDATES.COM
Administrative Contact Technical Contact Zone Contact:
Mail Media Lite Inc
4408B-A1 McClean Road
Haltom City TX 76117
US
(469)751-3511
whois@emailaddressprotection.com

VISIT http://www.emailaddressprotection.com
Domain created on 18-Oct-2008
Domain expires on 18-Oct-2010
Last updated on 20-Oct-2009
Domain servers in listed order:
NS1.MMLITE.COM
NS2.MMLITE.COM
At our customer's request our system is acting as a proxy for email
addressed to the contacts which are listed above. Please visit
hXXp://www.emailaddressprotection.com to contact the appropriate party.
Domain registration and hosting powered by DomainDiscover
As low as 9/year including FREE: responsive toll-free support
URL/frame/email forwarding easy management system and full featured DNS.


(Asked whois.domaindiscover.com:43 about debtwealthmoney.com)
debtwealthmoney.com = [ 70.38.104.237 ]

Registrant:
Mail Media Lite Inc
4408B-A1 McClean Road
Haltom City TX 76117
US
Domain Name: DEBTWEALTHMONEY.COM
Administrative Contact Technical Contact Zone Contact:
Mail Media Lite Inc
4408B-A1 McClean Road
Haltom City TX 76117
US
(469)751-3511
whois@emailaddressprotection.com

VISIT http://www.emailaddressprotection.com
Domain created on 19-Oct-2008
Domain expires on 19-Oct-2010
Last updated on 20-Oct-2009
Domain servers in listed order:
NS1.MMLITE.COM
NS2.MMLITE.COM
At our customer's request our system is acting as a proxy for email
addressed to the contacts which are listed above. Please visit
hXXp://www.emailaddressprotection.com to contact the appropriate party.
Domain registration and hosting powered by DomainDiscover
As low as 9/year including FREE: responsive toll-free support
URL/frame/email forwarding easy management system and full featured DNS.


Can I really trust https://www.tierra.net/special/email_address_protection? to send an abuse report to??? Or do I report to brian@domaindiscover.com ?
Last edited by kabo0m on Sat Jun 12, 2010 3:50 pm, edited 1 time in total.
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: where do I report these ebay auction scams?

Postby AlphaCentauri » Tue Jun 01, 2010 10:50 pm

What a mess!

If you follow the links with Malzilla, you get this sequence:
debtwealthmoney.com/C/17/524/909631

systemsupdated.com/a.php?a=CD8646&b=44924&d=0&l=0&o=&p=0&c=6843&s1=&s2=&s3=&s4=&s5=

interactiveofficial.com/b.php?a=CD8646&b=44924&d=0&l=0&o=&p=0&c=6843&s1=&s2=&s3=&s4=&s5=&lafhwojedt=15179164

users.marketleverage.com/ad/44924/CD8646/&dp=0&l=0&p=0&subid1=&subid2=&subid3=&subid4=&subid5=

www.oftsys.com/indexnew.php/ad/?b=725&a=CD46&dp=0&subid=CD46&subid2=CD8646

affiliates.offeratti.com/ad/725/CD46/&dp=0&subid1=CD46&subid2=CD8646

trksys.com/r.php?id=66&subid=CD46&subid2=

myonlineincomesystem.net/variablehead5.php?subid=CD46&subid2=



myonlineincomesystem.net is the ultimate sponsor (and they seem pretty scammy), but the steps in the middle are the affiliate programs that are used to provide credit to the affiliate that brought in the business. I haven't heard of most of them, but MarketLeverage at least claims to be have strong antispam policies:
http://marketleverage.com/LBTrustedNetw ... elease.php

If you report a spamming affiliate to a program that is serious about enforcing policies, they may terminate him and keep his earnings. It would discourage him from spamming you for any of his other sponsors.


In the course of all those redirections, there are also popunders and i-frames for these links:
systemofdeals.com/includes/popunder_script_second.php

www.tracktrust.com/redir.aspx?CID=29943&AFID=41370&DID=128070&SID=

www.experienceparkroyalresorts.com/cancunTravel.php
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: where do I report these ebay auction scams?

Postby ahoier » Thu Jun 03, 2010 1:41 pm

where are you seeing ebay links? I don't see any, but I'm not at a usable/protected workstation at the moment.....
ahoier
Spammer Killing Machine
 
Posts: 593
Joined: Thu Apr 03, 2008 4:33 pm
Location: Florida

Re: where do I report these ebay auction scams?

Postby kabo0m » Thu Jun 03, 2010 1:52 pm

ahoier wrote:where are you seeing ebay links? I don't see any, but I'm not at a usable/protected workstation at the moment.....


When I was searching for into before checking it out personally, online people who believed the emails said they were asked to do ebay auctions (The "Auction Processing Jobs at home. Immediate Placement" email). I didn't see any ebay links in the actual pages though.

AlphaCentauri wrote:What a mess!

If you follow the links with Malzilla, you get this sequence:
debtwealthmoney.com/C/17/524/909631

users.marketleverage.com/ad/44924/CD8646/&dp=0&l=0&p=0&subid1=&subid2=&subid3=&subid4=&subid5=

myonlineincomesystem.net/variablehead5.php?subid=CD46&subid2=



myonlineincomesystem.net is the ultimate sponsor (and they seem pretty scammy), but the steps in the middle are the affiliate programs that are used to provide credit to the affiliate that brought in the business. I haven't heard of most of them, but MarketLeverage at least claims to be have strong antispam policies:
http://marketleverage.com/LBTrustedNetw ... elease.php

If you report a spamming affiliate to a program that is serious about enforcing policies, they may terminate him and keep his earnings. It would discourage him from spamming you for any of his other sponsors.


So my next step is to contact MarketLeverage through this form?

MarketLeverage has implemented LashBack compliance tools to enforce CAN-SPAM guidelines
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: where do I report these ebay auction scams?

Postby ahoier » Thu Jun 03, 2010 11:49 pm

Yes, you could try that method.

Honestly, from looking at the content of these pages - it really resembles that of these typical "Work at Home Schemes" that get posted among job hunter forums and boards.....

Have you used your e-mail address recently at any said forums/board (Monster.com, motleyfool, etc.....Careerbuilder, etc...or even maybe some lesser-known?

This resembles the typical "auto-opt-in" garbage that you will receive if say, you sign up for a forum/contest, and don't fully read the fine print/AUP/ToS/etc agreement, and by "Agreeing" (to create your account, or inquire for more information) you un-intentionally gave this company permission to "sell" your e-mail address to this other "MarketLeverage" company.....again, unintentionally due to the wording in their registration agreement, etc...
ahoier
Spammer Killing Machine
 
Posts: 593
Joined: Thu Apr 03, 2008 4:33 pm
Location: Florida

Re: where do I report these ebay auction scams?

Postby kabo0m » Sun Jun 06, 2010 3:31 pm

I am on Careerbuilder and Monster but under a different email specifically for job searches. The email this came in is not associated with job searches but instead is the email I normally get pharma spam in instead.

So no I didn't opt in with this email address.

ahoier wrote:Yes, you could try that method.

Honestly, from looking at the content of these pages - it really resembles that of these typical "Work at Home Schemes" that get posted among job hunter forums and boards.....

Have you used your e-mail address recently at any said forums/board (Monster.com, motleyfool, etc.....Careerbuilder, etc...or even maybe some lesser-known?

This resembles the typical "auto-opt-in" garbage that you will receive if say, you sign up for a forum/contest, and don't fully read the fine print/AUP/ToS/etc agreement, and by "Agreeing" (to create your account, or inquire for more information) you un-intentionally gave this company permission to "sell" your e-mail address to this other "MarketLeverage" company.....again, unintentionally due to the wording in their registration agreement, etc...



On a different note but yet another 419 ...

Got a message from a "Missionary" who wants to give "five million united states dollars" if you email robinsonally@hotmaill.com

Anyone want to b8?
Last edited by kabo0m on Sun Jun 06, 2010 11:05 pm, edited 1 time in total.
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: where do I report these ebay auction scams?

Postby spamislame » Sun Jun 06, 2010 3:52 pm

kabo0m wrote:Anyone want to b8?


You're in the wrong place for that:

http://www.thescambaiter.com/forum/

I used to contribute there but baiting was not the reason why. A big part of why inboxrevenge was set up was to be a an alternative to all the pre-existing 419 baiting sites.

SiL
User avatar
spamislame
Site Admin
 
Posts: 5057
Joined: Tue May 09, 2006 9:18 am

Re: where do I report these ebay auction scams?

Postby kabo0m » Sun Jun 06, 2010 4:21 pm

I am not good enough to do it myself yet but I will join there.

spamislame wrote:
kabo0m wrote:Anyone want to b8?


You're in the wrong place for that:

http://www.thescambaiter.com/forum/

I used to contribute there but baiting was not the reason why. A big part of why inboxrevenge was set up was to be a an alternative to all the pre-existing 419 baiting sites.

SiL
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: where do I report these ebay auction scams?

Postby spamislame » Sun Jun 06, 2010 5:49 pm

kabo0m wrote:I am not good enough to do it myself yet but I will join there.


What I meant was: if you want anyone to bait this scammer, there are sites which will probably take you up on that. I'm not good at baiting either, but it also doesn't interest me.

Thanks

SiL
User avatar
spamislame
Site Admin
 
Posts: 5057
Joined: Tue May 09, 2006 9:18 am

Re: where do I report these ebay auction scams?

Postby AlphaCentauri » Sun Jun 06, 2010 8:19 pm

TSB has a thread for "extra" 419 spams for people whose ISPs are vigilant enough that they don't get enough samples to choose from in their own inboxes. You can post all you want there. It's also indexed by search engines, so people with the sense to research an email before they answer can find the site and learn about the scam before they get involved.
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: where do I report these ebay auction scams?

Postby kabo0m » Sun Jun 06, 2010 11:03 pm

AlphaCentauri wrote:TSB has a thread for "extra" 419 spams for people whose ISPs are vigilant enough that they don't get enough samples to choose from in their own inboxes. You can post all you want there. It's also indexed by search engines, so people with the sense to research an email before they answer can find the site and learn about the scam before they get involved.


Yeah I saw that so that is where I put it. ;)

spamislame wrote:What I meant was: if you want anyone to bait this scammer, there are sites which will probably take you up on that. I'm not good at baiting either, but it also doesn't interest me.

Thanks

SiL


I figured it out once I joined there. Thx :)
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: where do I report these ebay auction scams?

Postby kabo0m » Thu Jun 10, 2010 8:22 pm

Got another like the other 2 I got:

3gmarvel.com [70.38.104.235]

(got the email today)
Subject: Need eBay Workers ASAP
From: "Catherine Thomas" <postmaster@3gmarvel.com>
Subject: Need eBay Workers ASAP
Learn how to become independtly wealth by working from your home computer! Auction Job Finder allows you to raise your family and work all at the same time! Click now.

http://3gmarvel.com/C/19/623/909631

This email is a commercial advertisement. If you wish to not receive information from us, please let us know and you will be excluded from future distributions immediatley
http://3gmarvel.com/U/623/909631 Click Here Now to be removed or write us & be sure to include your email address.

Subscriber Requests: 4408 McLean Rd Haltom City TX 76117


But I think it is down since my last complaint about the other 2 IP's in the same range. Can any verify this for me because when I checked it said not reachable but the whois said it was active:

IP: 70.38.104.235
IP Location: Montreal, Canada
Website Status: active
Domain Name: 3gmarvel.com

Registrar: TIERRANET INC. D/B/A DOMAINDISCOVER
Whois Server: whois.domaindiscover.com
Referral URL: http://www.domaindiscover.com
Status: clientTransferProhibited

Expiration Date: 2010-06-24
Creation Date: 2008-06-24
Last Update Date: 2009-06-25

Name Servers:
ns1.mmlite.com
ns2.mmlite.com
See 3gmarvel.com DNS Records

Information Updated: Tue, 18 May 2010 17:58:22 UTC

http://who.is/whois/3gmarvel.com/

Hmm.. perhaps my reporting it did no good as I had gotten this reply and maybe they are now just blocking my IP so I can't see that their site is still up?? (Is that how it works??)

I am saying that because when I reported, I got this email response:

From: Marco A. <abuse@iweb.com>
Subject: [RQ #3474422] 2 email emails from sites on iWeb Technologies Inc IP 70.38.104.238

Hello,

The customer has been notified of your complaint.

We will be doing a follow up with the client in order to resolve this
situation.



Regards,
=================================================
iWeb Abuse Team
Support / Client Hub : http://hub.iWeb.com
http://www.iWeb.com
=================================================


By the way I sent the email to abuse @noc.privatedns.com but that isn't where I got the email reply from..
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: where do I report these ebay auction scams?

Postby AlphaCentauri » Fri Jun 11, 2010 7:00 pm

3gmarvel.com/C/19/623/909631 is up for me: "Auction Job Finder"
It redirects to http://www.auction-job-finder.com/?utm_source=ClickBooth&utm_medium=Affiliate&utm_campaign=CB%2B- Affiliate&subid=CD105300

They may have blocked you, or they may have blocked your entire country. Many of these affiliate links only work from certain countries' IP ranges.
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: where do I report these ebay auction scams?

Postby Red Dwarf » Fri Jun 11, 2010 7:13 pm

First redirection is
Location: http://www.clickboothlnk.com/e/?enc=alttnrspvlrkn&optionalinfo=&deployid=0&land=0&pid=0
Location: http://publishers.clickbooth.com/ez/alttnrspvlrkn/
...
sets a cookie then redirects to
http://publishers.clickbooth.com/geo_tracking_redirect.html?e=czeeaknpqqne

So where you end up depends on the geography of your IP address

eg if you are not in the required geography you might get
>> This offer is not available in your area.
>> You will be redirected shortly.
http://publishers.clickbooth.com/sw/38252/CD105300/
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10519
Joined: Tue Jun 27, 2006 2:01 am

Re: where do I report these ebay auction scams?

Postby kabo0m » Sat Jun 12, 2010 3:37 pm

Yeah I have gotten "This offer is not available in your area." many many times lately (more times than not). :(
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Next

Return to Advance-Fee Fraud [419 Fraud]

Who is online

Users browsing this forum: Ahrefs and 1 guest

cron