January 2008

What rubbish have we received today? Below is a partial list of the "spamvertised" domains sent to our accounts.

Note that this is a listing of spam received by us, not sent by us. We do not send unsolicited bulk email but spammers routinely forge our domain name in the From: line of their junk.

The pharmacy/replica spammers appear to have joined forces, with nearly identical emails, domain registrations and spamming patterns.

Organisation Domain Name Date
Black Network Inc., Canadian Pharmacy, Chang Limited, Cheap OEM Software, Cheap Software & OEM Downloadable CDs, Downloadable Software, ED Choice, ED Choise, ED Pill Store, EliteHerbal Inc., Etty Productions Limited, European Pharmacy, Express Herbal Inc., Express Herbals, Exquisite Replica, Hae Dong Limited, Health Worldwide Inc., Herbal Doctors Inc., HerbalKing, HerbalMart, King Replica, Kyung Kim LLC, Liquid Ventures Inc., MailienPharmacy Online, ManSter Penis Enlargement Formula, MaxHerbal Inc., MegaDik, Mohamed Ahmed Inc., Oemcd.net, Official Medicine, Official Medicines, Optin Media Inc., PharmSite, Prestige Footwear, Preto Productions, Pump It Productions, Soft Eden, Speshilov Inc., Stiomal.net, Tolmen Star Enterprises Ltd., VPXL, WonderCum Inc., Xingu Inc., xtrasize-plus.com, XtraSize+ darlinfiji.com, jugurall.com, whacksands.com, youonfnewdiett.com 1 January
ageforest.com, chongthebong.com, ghoosbalst.com, newkonivetwo.com, notecolumn.com, oodyaiflant.com, poeibeeto.com, pplehealthhy.com, ruisalgsoc.com, shwithahealthsong.com, tyefuncyyes.com, whateverisbestz.com 2 January
fresgooin.com, fresiagnees.com, gikajset.com, imeeedbigs.com, lhakt.com 3 January
broadhard.com, ealthisimportantone.com, elistablesen.com, fantasticsizet.com, mengwquick.com, rehtdiet.com, ruisnasheen.com, runrwcvfellnes.com, someoiwhealth.com, tlkesoknewonez.com, ujlgzaerqest.com 4 January
ashwithahealthsong.com, censerburnest.com, expectdiscuss.com, fvbakcakez.com, haefiveone.com, howremember.com, ianzreu.com, irdfodhealth.com, nwitvhdiets.com, pleaseenlargeme.com, rueshabesoo.com, sopongbob.com, unsablesettes.com 5 January
dancestood.com, finalsoil.com, loneround.com, necvthing.com, shapewould.com, thatwood.com, thegamepong.com 6 January
allinhero.com, bistesoned.com, davnycvungry.com, healhforreal.com, honeealthz.com, jbjahv.com,
geocities.com/walterdickson443 → mensurprise.com,
metalmean.com, oiestupos.com, telehydra.com,
geocities.com/dariusphelps903 → thatwood.com
7 January
anshcvealth.com, bigmanhoodnows.com, daphnonyeaar.net, eganishealthhplz.com, inefivehealthhealth.com, kiversitys.com, lafrodorn.com, moreisbettered.com, pinpongchannel.com
geocities.com/alvinryan241 → thatwood.com,
geocities.com/robtmueller480 → thatwood.com,
toobigforhernows.com,
baabsoxdi.googlepages.com → turnbetween.com
8 January
biggerbetternows.com,
geocities.com/ForrestBranch19 → medicaldirectcompare.com,
geocities.com/LucasButler98 → medicaldirectcompare.com,
geocities.com/RosemaryWeber03 → medicaldirectcompare.com,
nesoeteaok.com, pttostminus.com, qualiveok.com,
google.com/search?q=site:softnewmore.com,
spotsilent.com, streetnstrut22.com, superpongbob.com
9 January
bluetogether.com (claiming to be viagra.com),
buthutes.com, eyeonspace.com, hkhfeerok.com,
(hacked) pibemanuel.org/redir.html → holesteam.com,
kenttirered.com,
geocities.com/ColemanDillard98 → periodpicture.com,
pongbob.com, qualiveok.com, sgmykrtrewt.com, tofetchapailz.com, wvrouchs.com
10 January
chairhappen.com, clitorispider.com, nesoeteaok.com, serupnone.com, wedineonline.com 11 January
andhomedidtrot.com, asfastashecouldcaper.com, clitoricken.com, clitoroadster.com, fallgeist.com, ieoisfo.com, kenttirered.com, lpoewst.com, qualiveok.com, streetnstrut24.com, zonedayunited.com 12 January
bhbifopb.com, correctrepair.com, erocereadyok.com, hardetoneens.com, homefixny.com, kenttirered.com,
google.com/search?q=site:softnewmore.com,
softwareonlinemuch.com, streetnstrut25.com, yourwebuy.com
13 January
fixyourgun.com,
geocities.com/DelbertRichards23 → experienceson.com,
geocities.com/JefferyCooley50 → experienceson.com,
geocities.com/BrettCarson42 → medicaldirectcompare.com,
geocities.com/CarolKeller47 → medicaldirectcompare.com,
morethaniwanted.com, mshotfix.com, nowspacerun.com, pitchmelody.com, qualiveok.com,
sugaronly.com (unauthorised redirect from yahoo.com)
14 January
chinaonworld.com, icetrue.com, loopshavern.com, nesoeteaok.com, nightlostboy.com, representsingle.com, rivrejut.com,
geocities.com/AlbertNewton75 → softnewmore.com,
geocities.com/BerryRoberts65 → softnewmore.com,
geocities.com/BurlMathis52 → softnewmore.com,
geocities.com/FosterBean64 → softnewmore.com,
geocities.com/RobCarson60 → softnewmore.com,
geocities.com/FelipeLeonard53 → softsiteprovide.com,
geocities.com/HollieParker54 → softsiteprovide.com
15 January
chinaonworld.com, citibarclayz.com, classtiws.com, lotueys.com, partykoneone.com, streetshoessite.com, streetshoesworld.com, theseatsoxfactory.com 16 January
abuwaag.com, awepoli.com, cuorytes.com, flukoss.com, gotdraw.com, guidebabyyour.com, knewduring.com, mannorthestimate.com, partykoneone.com, ploytes.com, rightwinasistant.com, sweetqualitywatch.com 17 January
clopiues.com, companywait.com, jumbpoes.com, newstrutstore.com, onionkwewonez.com, ploytes.com, portsharp.com, quijuoles.com, sarahkverok.com, shopequalsok.com, sugaronly.com (unauthorised redirect from yahoo.com),
tophotho.com
18 January
bieaawgg.com,
geocities.com/ShanaKirby56 → experienceson.com,
guniyttes.com,
geocities.com/JacksonFerrell43 → medicaldirectcompare.com,
geocities.com/MajorWilliamson90 → medicaldirectcompare.com,
geocities.com/TannerLowery56 → medicaldirectcompare.com,
geocities.com/SungHeath32 → periodpicture.com,
valencrug.com, vlouet.com
19 January
distanttail.com, easystrutstore.com, fruitripehot.com, hotfruitripe.com, singlewait.com,
google.com/search?q=site:softnewmore.com,
yourstrutstore.com
20 January
celebest.com, coldoneinch.com, gonetwenty.com, manyfunerals.com, neusetres.com, oolgryqmanager.com, pjgaotaa.com, romaletu.com, ropoleus.com, winnerintwohours.com 21 January
capinsidelike.com, heavyan.com, jardineus.com, juanpoles.com, likrygifgepulik.com,
medslovedraw.com (unauthorised redirect from yahoo.com),
nesoeteaok.com, petsillyone.com, sgmykrtrewt.com, strutstorepro.com, venetianloses.com, yesself.com
22 January
columndress.com, dreeinks.com
ilook.tw/cicj → medslovedraw.com (unauthorised redirect from yahoo.com),
mystrutstore.com, petonecute.com
23 January
bnooaer.com, cowroot.com, cuteonepet.com, fallfoundwasher.com, icannotseethedifference.com,
geocities.com/TristanDelgado28 → medicaldirectcompare.com,
geocities.com/XavierBritt98 → medicaldirectcompare.com,
ncaotwoa.com, paowugaa.com, razkoesu.com,
geocities.com/AngelitaChaney84 → softnewmore.com,
geocities.com/ElvinMcguire16 → softnewmore.com,
geocities.com/JamaalCaldwell01 → softnewmore.com,
geocities.com/RamiroShepard38 → softnewmore.com,
geocities.com/DorothyStout43 → softsiteprovide.com,
geocities.com/JeanieNorman74 → softsiteprovide.com,
ueagoaa.com
24 January
bnsisieet.com, cuteonepet.com, cvogaoea.com, earleader.com, easytostrut.com, petonefast.com, shoesstreetshop.com, sweetwatchquality.com, tostruthome.com, tostrutshop.com, thelocalear.com 25 January
besttostrut.com, earcandyfm.com, mytostrut.com, nightboylost.com, strutfootwearonline.com, tostrutlive.com, townnewsabout.com 26 January
craigsue.com, dawnoffear.com, determinespell.com, easytostrut.com, goaeogpa.com, kbeodaoeg.com, manestimatenorth.com
geocities.com/JarredPittman33 → medicaldirectcompare.com,
nbiseaae.com, onsoeeagv.com, strutfootwearlive.com,
sugaronly.com (unauthorised redirect from dogpile.com),
unitedworksun.com
27 January
banksimplelend.com, besthotelsoxford.com, flatbetter.com, flieple.com, knewthick.com, lifefreeart.com, mvkdppagt.com, northestimateman.com,
geocities.com/DonaldAlford80 → softnewmore.com,
geocities.com/FranklinHenry84 → softnewmore.com,
geocities.com/StellaHorn22 → softnewmore.com,
google.com/search?q=site:softnewmore.com,
geocities.com/AlexisShepard53 → softsiteprovide.com,
geocities.com/CecilDecker12 → softsiteprovide.com,
geocities.com/NewtonDawson41 → softsiteprovide.com,
geocities.com/WaldoHarmon57 → softsiteprovide.com,
suffixtoo.com, underiron.com, unitedworksun.com
28 January
banksimplelend.com, eyrest.com, lifefreeart.com, manestimatenorth.com, nightboylost.com, northmanestimate.com, oceancarry.com, takelake.com, sellrather.com, streetfeethome.com, suplorue.com, watchqualitysweet.com, yahyijoo.com, ytisohsfg.com 29 January
clicktenbest.com, doaieyet.com, eyrest.com, knewend.com, lakehour.com, lifefreeart.com, tenbestexchange.com, tenminutetan.com, wageator 30 January
canregit.com, ceutyes.com, cratula.com, fallwasherfound.com,
formthick.com (unauthorised redirect from yahoo.com),
goldsmallman.com, heatsites.com, hubbartes.com, lannike.com, reheesteon.com, tenbestcentral.com, tendirecteurope.com, werpolo.com, youngmansleep.com
31 January
Christian Troy, Iron Clad Media beartrapping.com 14 January
Cronos Investment Company, Draper Investment Company, Waller Truck Co., Inc. wtcm.ph 21 January
Diamond Replicas, Diamond Swiss, Diamond Watches, Fly Watches, Prestige Replicas inneweve.com, inneweve.net, origineweve.com 1 January
photedneweve.org, postylneweve.org 2 January
postylneweve.org, theutneweve.com, utneweve.net, utneweve.org 3 January
theutneweve.com, webutneweve.com 4 January
dleopoel.com 7 January
dggdyhhe.com 8 January
nilarepcenter.com 14 January
kuiooap.com 15 January
jumpamaloca.com, klomonium.com 19 January
wrickerep.org 20 January
juniaknao.com, pinatapulga.com 21 January
webwrickerep.com 23 January
maggirepio.com 25 January
aquarterepio.com, saintjamesrepio.com 26 January
roupsoat.com 28 January
heyboyheygigio.com, irmaobomo.com 29 January
naotampapio.com, peolliss.com 30 January
tankseat.com 31 January
E2 Finance, Euro Vegas, Euro VIP Casino, Fortune Las Vegas, Freedom4U, Freedom From Debt Forever!, Golden Gate Casino, Magic Jackpot Casino, Mortgage-Infinity, The Palace Group, Royal Casino, Royal-Euro Casino, Spin Palace Casino, Vegas Casino, Vegas VIP Casino, World Jackpot Casino worldacasino.cn, worldacasino.net.cn, worldbcasino.cn 1 January
bestplayingsite.com, playingsitebest.net 2 January
souraim.net, worldbcasino.net.cn, worldccasino.cn 3 January
getbestbonus.net, superluxgaming.com, superrichgame.net, worlducasino.com.cn, worlducasino.net.cn 4 January
armayof.net, worldecasino.com.cn, worlducasino.cn, worlducasino.com.cn, worlducasino.net.cn, worldvcasino.cn 5 January
asilemt.com, goldtowercasino.net, silvertowercasino.com, swayolg.com, toprevolutiongame.com, worlducasino.cn, worldvcasino.cn, worldvcasino.com.cn, yoursluxgaming.com 6 January
worldocasino.net.cn, worldpcasino.cn, worldpcasino.com.cn, worldvcasino.cn, worldvcasino.net.cn, wow888spincasino.com 7 January
armayof.net, joemcasino.com, mytimecasino.com, souraim.net, thedworld.net.cn, wow888spincasino.com 8 January
worldtcasino.com.cn 9 January
asilemt.com, greateucasinos090.com, wingnow.com, wininow.com, wowacasino.com 10 January
greateucasinos090.com 11 January
thewworld.net.cn, thexworld.com.cn 12 January
greateucasinos090.com,
frederickspencermn.googlepages.com → thehworld.net.cn
13 January
greateucasinos090.com, souraim.net 14 January
hitleab.com, nowdhere.net.cn, orsyneb.net, slifrto.com, worldfcasino.cn 15 January
nowjhere.cn 16 January
nowhhere.com.cn, worldfcasino.cn 17 January
armayof.net, grandplacea.net.cn, nowuhere.cn, souraim.net 18 January
grandplaceb.com.cn, nowthere.cn, theuworld.cn 19 January
grandplacea.cn 20 January
grandplacee.com.cn, grandplacei.net.cn, grandplacej.net.cn, itshereforsure.com, theuworld.cn 21 January
gochere.net.cn, goghere.cn 22 January
bestgamingmagic.net, nowcthis.net.cn, nowfthis.net.cn, theuworld.cn 23 January
goodavibe.com.cn, goodjvibe.cn, goodgvibe.com.cn, nowisthis.cn 25 January
bigtimesaveb.net.cn, fastchi.cn, fastkhi.com.cn 26 January
bigtimesavec.com.cn 27 January
debtconsoli.cn, hitithis.com.cn, hitjthis.net.cn 28 January
theuworld.net.cn 29 January
baddebty.cn, theuworld.com.cn 30 January
bizloansw.com.cn, doethis.cn 31 January
International Legal RX medications norwegiamder.com 22 January
geroihalate.com 25 January
Local Vixens boxofitemstogrowa.com, casecontainerisnt.com 2 January
US Pharmacy simplemedifact.com, visithealthzone.com 10 January
discoverydynamic.com 11 January
briskinnovations.com, ideathrifty.com 12 January
fastexciting.com 16 January
ipharmplus.com 17 January
ipharmplus.com, stimulatingbreakthrough.com 18 January
discoverywonderful.com, stimulatingbreakthrough.com 20 January
ipharmplus.com 21 January
pennywiseidea.com 22 January
pure-best.com 26 January
absolute-most-excellent.com 27 January
really-reliable.com 28 January
"Phishers" Domain Name Date
posing as Citibank xn--04012008-275t50c.hk 6 January
xlmit5.net 12 January
t2helj.net 13 January
posing as NatWest Bank ponnqn6.cn 15 January
g4rhe.hk 18 January
coppope.es 19 January
escape6r.hk 21 January
handfile.info, worldpoint1.li 23 January
odcif.be 24 January
itemx0.be 25 January
qwe.st 27 January
Phony University Degrees Contact Details Date
(501) 634-6717 25 January
(501) 634-6717 27 January
(501) 634-6717 29 January
"Pump and Dump" Stock Date
This is how this scam works:
  1. The scammers quietly buy lots of inexpensive shares in a particular company, usually one that is small and sparsely traded.
  2. They then flood email inboxes everywhere with millions of messages touting the company as a hot stock and urging people to buy quickly. Pump.
  3. Enough unwitting investors buy the stock to create artificially high demand and prices.
  4. The scammers then stop promoting the stock and quickly sell their cheaply-purchased shares for a profit. Dump.
  5. The stock price plummets back to its pre-scam levels or even lower, and the conned investors are left with stock shares worth significantly less than what they paid.
Don't fall for it!
15 January
Unknown/Unresolved Domain Date
coursequiet.cn 1 January
5 January
6 January
knngthanugea.googlepages.com 7 January
geocities.com/AndyCarter42, sungrichlq.googlepages.com 10 January
geocities.com/mervinwilliams836 22 January
25 January
geocities.com/RodneyMercado50 27 January
30 January
Addresses Receiving Spam Total
Nonexistant and Catch-all 19
Various Compromised Mailing Lists 303
Personal 40
Obliquity.com Domain Registration 232
Obliquity.com Contact Form 0