Saturday, February 26, 2011

How DonDominio enables scammers

ebay-purchase-program.com
(a fraud domain)
was recently registered and is currently being hosted by:
http://www.dondominio.com/  http://whois.domaintools.com/dondominio.com

That in itself is not unusual, as you can see by the list of spoof sites here:
http://netscammers.blogspot.com/2010/04/spoof-sites.html
It is quite common for registrars and web hosts to allow fake sites to be on their servers.

The thing that is notable about ebay-purchase-program.com, is the fact that it was allowed to be registered using the data that is presented in the whois for the domain.
See for yourselves:
http://whois.domaintools.com/ebay-purchase-program.com

Domain Name:
 EBAY-PURCHASE-PROGRAM.COM
Domain Status:
 Active
 Registrar of Record: Don Dominio (SCIP)
 Registrar URL:   http://www.dondominio.com/
 Record last updated: 23/02/2011
 Record created:  23/02/2011
 Record expires:  23/02/2012
Registrant:
 Name:   eBay INC
 Organization:  eBay INC
 Email:   support-ebay@secure-buyer-protection.com
 Address:  2145  Hamilton Avenue
 City:   San Jose
 State:   California
 Postal Code:  95125
 Country:  US
 Phone:   +1.4085658285
 Fax:
Admin Contact:
 Name:   eBay INC
 Organization:  eBay INC
 Email:   support-ebay@secure-buyer-protection.com
 Address:  2145  Hamilton Avenue
 City:   San Jose
 State:   California
 Postal Code:  95125
 Country:  US
 Phone:   +1.4085658285
 Fax:
Tech Contact:
 Name:   eBay INC
 Organization:  eBay INC
 Email:   support-ebay@secure-buyer-protection.com
 Address:  2145  Hamilton Avenue
 City:   San Jose
 State:   California
 Postal Code:  95125
 Country:  US
 Phone:   +1.4085658285
 Fax:
Nameservers list:
 ns4.dondominio.com
 ns2.dondominio.com


Not only did this web host, SOLUCIONES CORPORATIVAS IP,SLU
aka DonDominio allow a fake site to be hosted on its servers, it allowed the scammers to use eBay's real name and location to be used in the obviously invalid whois data.

To make matters worse, the web host has allowed the fake site to be registered to a defunct fake site:
secure-buyer-protection.com
http://whois.domaintools.com/secure-buyer-protection.com

That domain is mentioned in a scam here:
http://forums.ebay.com/db2/topic/International-Trading/The-Email-Is/520262446

i want to buy lot x 2 Iphone 4
the seller tell me send mail to him markbromer@gmail.com
and i received mail from support@secure-buyer-protection.com
Congratulations - eBay Transaction Started - 2 x Apple iPhone 4 32GB Brand New Unlocked
Transaction Details:
2 x Apple iPhone 4 32GB Brand New Unlocked
Brand: Apple iPhone Inspection Period: 7 business days
Model: 4 32GB Price:
US $1,000.00
Case ID: 7X4GBR35X6 Shipping: US $0.00
Description: Brand new , factory unlocked, 100% original Apple iPhone 4 32GB in sealed boxes. 1 Year international Apple Care warranty.
WesternUnion
Locate the nearest Western Union office click here.
Make the payment with cash using the eBay Representative details.
Please send us a copy of the Western Union receipt by fax at :
International : 001 206 202 5619
USA : 206 202 5619
You have to send the money to our eBay Representative.
WARNING: Do not send the money to the seller directly.
We can not guarantee the safety of your transaction if
the seller have the money before you get your items.
eBay Representative Details:
First Name : Cristian
Last Name : Dustenlar
Address : 27 Denbigh Place
City : London
Zip : SW1V 2HA
Country : United Kingdom
Amount to be sent: US $1,000.00
We will refund your WesternUnion fees after you receive and approve your merchandise.

Domain Name:
SECURE-BUYER-PROTECTION.COM

Domain Status:
Active

Registrar of Record: Don Dominio (SCIP)
Registrar URL:   www.dondominio.com

Record last updated: 07/02/2011
Record created:  07/02/2011
Record expires:  07/02/2012

Registrant:
Name:   Whois Privacy Service Protects this domain
Organization:  Only contact by email, all postal mail will be rejected
Email:   secure-buyer-protection.com@whoisprivacycontact.com
Address:  c/ Fabrica, 25 2
City:   Manacor
State:   Illes Balears
Postal Code:  07500
Country:  ES
Phone:   +34.871987733
Fax:   +34.871986601

Admin Contact:
Name:   Whois Privacy Service Protects this domain
Organization:  Only contact by email, all postal mail will be rejected
Email:   secure-buyer-protection.com@whoisprivacycontact.com
Address:  c/ Fabrica, 25 2
City:   Manacor
State:   Illes Balears
Postal Code:  07500
Country:  ES
Phone:   +34.871987733
Fax:   +34.871986601

Tech Contact:
Name:   Whois Privacy Service Protects this domain
Organization:  Only contact by email, all postal mail will be rejected
Email:   secure-buyer-protection.com@whoisprivacycontact.com
Address:  c/ Fabrica, 25 2
City:   Manacor
State:   Illes Balears
Postal Code:  07500
Country:  ES
Phone:   +34.871987733
Fax:   +34.871986601

Nameservers list:
ns4.dondominio.com
ns2.dondominio.com


Send complaints to:
abuse@ovh.net
Consumers are not protected on the internet from web hosting companies and domain registrars.

Leia Mais…