PowerEnlarge

From Spamwiki

Jump to: navigation, search

Contents

[edit] SPAM REDIRECTION: FRAUD ALERT

NOTE: Several of the spammed sites for this sponsor have begun redirecting to this entry in the Spam Wiki. The host for this site is not responsible for these redirections. However, this is a good opportunity to discover who is behind the spam you just received, and how you can go about reporting it.

Registrars are encouraged to redirect illegal spam sites to this page for this brand.

[edit] Description

PowerEnlarge is a partner-in-spam with several other spammed brands

What these sites have in common is the use of a fake secure commerce server called "Infinity Secure".

PowerEnlargeSystem screenshot
PowerEnlargeSystem screenshot

[edit] False Pretenses

The FAQ page states:
I have never ordered online. Is it safe?
Yes! It is safer then placing an order over
the phone or even buying anything at
retail stores. We don't save your credit card
information and can't even view it.
All data is transmitted through a secure
server by our credit card processor.

When you place a product into the shopping cart and proceed to Checkout, you will see that the checkout page is running non-secure http not secure https. It states that Infinity Secure is a "100% secure credit card transaction".

This is obviously a fraudulent claim, an example of false pretenses. When someone orders a penile enlargement product from one of these sites, the items ordered, the credit card number, and any personal information entered on the order forms can be viewed at various relaying servers as the data travels across the internet to the host server in China or elsewhere. The "Verified by Visa", "GeoTrust" and "Hacker Safe" logos are all fake and further examples of false pretenses.

PowerEnlarge screenshot
PowerEnlarge screenshot
Fake "secure" logos
Fake "secure" logos

[edit] Sample Spams

Subject: MSG ID:70934 Incredible, unbelievable gains achieved

Looking to achieve massive gains in a short period of time?

Forget patches, and extenders that cause pain and don't work.

Discover the new breakthrough in medical science, that allows for safe,
effective and incredible gains to your manhood.

>> Gain 3 + inches in just weeks
>> Thicker, more muscular manhood 
>> Massive amount of ejaculate

Studies show that women find intense pleasure and come more easily when
their partners have larger tools.

For a limited time only, enjoy substantial savings off this miracle
product.

- Visit our site:   www.coasteww[DOT]com 
(copy this link and then replace "[DOT]" to ".")
Subject: Powerenlarge your way to success

Making all her dreams in bed come through with your new pleasure stick.
http://www.grautens.com/
Subject: Re: rendevous with Scarlett

Powerenlarge your way to 9 inches and maximize your gains.
http://www.grautens.com/
Subject: Easily attainable new measurement!

Chalking your problems in bed up to your small dimension? Improve it!
See your gf go hog-wild as you show her your new tool!
http://cryastern.com/


midfielders strike flew just wide. MiddlesbroughCanadian Green Party
leader set to challenge MacKay forvocation as an activist and political
campaigner in Nova
Subject: {SanCashPowerEnlargeSubj} dfi capnh fwlcy

Po dxb we ey rEn udv lar ec ge is the COM rqq PLETE VIR yeq ILI fyr TY for rdp mula 
for men with all the benefits you want, but none of the negatives. The new Po fxu we 
un rEn iv lar gs ge Pil yj ls form xi ula was created based on the research and 
expertise of our me vk dic iru al he xdt rba hab list, G. Ande wwa rson, who has 
worked as a he uc rba omr list for over 40 years in Europe. With more input from 
recent cli ug nic mo al stu qkc dies plus customer feedback, we refined the 
incredible formu woq la that YOU can have today.

 
Personal approach to each customer and high standards in customer ser mww vice, 
well-organized prompt delivery service. We do our best for you to receive your Po ty 
we ify rEn liu lar ug ge as soon as possible.

B yru uy Po zee we bj rEn jde lar gb ge and prepare for incredible changes in life.

Click here!!! ... http://as.titopocos.com/?qe

In an html enabled email client, the above spam says,

PowerEnlarge is the COMPLETE VIRILITY formula for men with all the benefits you 
want but none of the negatives. The new PowerEnlarge Pills formula was created based 
on the research and expertise of our medical herbalist, G. Anderson, who has worked 
as a herbalist for over 40 years in Europe. With more input from recent clinical 
studies plus customer feedback we refined the incredible formula that YOU can have 
today.

Personal approach to each customer and high standards in customer service, well 
organized prompt delivery service. We do our best for you to receive your 
PowerEnlarge as soon as possible.

Buy PowerEnlarge and prepare for icredible changes in your life.

Click here!!! ... http://as.titopocos.com/?qe

[edit] Related Spam Operations

To show the close relationship between brands that most likely can be traced to the same source, here is a selection of spammed sites across 4 different brands. Note the example sites, and the similarities in the registrant details.

Registered with XIAMEN CHINASOURCE INTERNET SERVICE CO., LTD. and spammed at the same time

[edit] King Replicas

flickrine.com    
queatery.com     
Registrant Contact:
       Registrant Name: liuling
       Registrant Organization: He Yong
       Registrant Street1: bei jing shi hai ding qu zhi chun lu 108 hao
       Registrant Street2:
       Registrant Street3:
       Registrant City: haidingqu
                  Province: Beijing
                  Country: China
       Registrant Postal Code: 100086
       Registrant Phone: +86.1062102078
       Registrant Phone Ext.:
       Registrant FAX: +86.1062102078
       Registrant FAX Ext.:
       Registrant Email: pengpeng520250@163.com

[edit] LNHSolutions

crayette.com     
miccarete.com   
mivalent.com    
stalpean.com    
tritaten.com    
ullaec.com      
Registrant Contact:
       Registrant Name: liuling
       Registrant Organization: He Yong
       Registrant Street1: bei jing shi hai ding qu zhi chun lu 108 hao
       Registrant Street2:
       Registrant Street3:
       Registrant City: haidingqu
                  Province: Beijing
                  Country: China
       Registrant Postal Code: 100086
       Registrant Phone: +86.1062102078
       Registrant Phone Ext.:
       Registrant FAX: +86.1062102078
       Registrant FAX Ext.:
       Registrant Email: pengpeng520250@163.com

[edit] PowerEnlarge

sealadat.com     
sedaace.com      
stemilal.com     
ticlates.com     
tralkates.com    
trimmael.com     
watatem.com      
Registrant Contact:
       Registrant Name: liuling
       Registrant Organization: He Yong
       Registrant Street1: bei jing shi hai ding qu zhi chun lu 108 hao
       Registrant Street2:
       Registrant Street3:
       Registrant City: haidingqu
                  Province: Beijing
                  Country: China
       Registrant Postal Code: 100086
       Registrant Phone: +86.1062102078
       Registrant Phone Ext.:
       Registrant FAX: +86.1062102078
       Registrant FAX Ext.:
       Registrant Email: pengpeng520250@163.com

[edit] VPXL

jumapeall.com    
lapleanne.com    
plaistey.com    
vanetael.com    
Registrant Contact:
       Registrant Name: yangyi
       Registrant Organization: Hu Fang
       Registrant Street1: hai ding qu cheng nan lu112 hao
       Registrant Street2:
       Registrant Street3:
       Registrant City: haidingqu
                  Province: Beijing
                  Country: China
       Registrant Postal Code: 421001
       Registrant Phone: +86.1082952070
       Registrant Phone Ext.:
       Registrant FAX: +86.1082952070
       Registrant FAX Ext.:
       Registrant Email: yzlink@163.com

[edit] More relationships

Spammed site	Spam brand   	Primary name server	IP address	Secondary name server	IP address

gallkels.com	King Replicas	ns1.juaeaeale.com	59.37.14.183	ns2.juaeaeale.com	222.186.12.93
revanhene.com	PowerEnlarge  	ns1.juaeaeale.com	59.37.14.183	ns2.juaeaeale.com	222.186.12.93
ryberois.com	VPXL       	ns1.juaeaeale.com	59.37.14.183	ns2.juaeaeale.com	222.186.12.93

cantarells.com	King Replicas	ns1.jmapeanee.com	59.63.41.80	ns2.jmapeanee.com	221.122.67.149
pleateane.com	PowerEnlarge  	ns1.jmapeanee.com	59.63.41.80	ns2.jmapeanee.com	221.122.67.149

In each of the above cases, the host site IP address is the same as either the primary name server or the secondary name server, depending on which is selected during name to address resolution. Registrant details are common across each group.

[edit] Sponsoring Registrars

Web sites were often registered with XIAMEN CHINASOURCE INTERNET SERVICE CO., LTD. until mid June 2008, when this registrar suspended all spammed sites in their registry.

Name servers are more commonly registered with Xin Net.

[edit] Sponsor Organization

SanCash (in early 2008 known as "Etranzmu", the underground sponsor affiliate program related to GenBucks) is the sponsor organization behind this type of site. They pay spammers to promote it, and they don't shut down illegal spammers.

[edit] How to report this spam

Complainterator is configured to generate automated complaints to the sponsoring registrars for both the spammed web site and the name servers that guarantee access to it.

Personal tools