Exquisite Replica

From Spamwiki

(Redirected from Ultimate Replicas)
Jump to: navigation, search

Contents

[edit] Description

Super Replicas, Exquisite Replica, Distinction Replicas, Divine Replica and Ultimate Replica
Fake watches offered at high prices

[edit] Evidence of fraud

[edit] Fake news media sites

Super Replica
image:news10.jpg
You will find a flimsy attempt to increase the credibility of the fraud by creating fake news media web sites. Each site has many links seemingly to other information, such as World, Business, Politics, Entertainment, Leisure etc. However, no matter which you choose, you are directed to a fake watch site. The News10 Online fake media site is simply a redirection to the target site, such as replica-stores.com

Redirectors

  • watchreplicalade.ru
  • watchreplicaknell.ru
  • rolexreplicadev.ru
  • watchreplicahorn.ru
  • watchreplicahone.ru

Redirection target

Domain Name: REPLICA-STORES.COM
Registrar: TRUNKOZ TECHNOLOGIES PVT LTD. D/B/A OWNREGISTRAR.COM

[edit] Copyright / trademark infringement

Each manufacturer whose copyright is being blatantly infringed provides warnings of these scam operations. For example, see the Breitling front page which states

BEWARE OF FRAUDS
Do not buy any Breitling products on the Internet:
99% of the Breitling products for sale on the Internet are fakes. The others are
second-hand watches or models of doubtful origin.

[edit] Prosecutions prohibited

Lastly, the site prohibits anyone who works for the real manufacturers, or who previously worked there, to even view the web site, nor can anyone working for the original manufacturer prosecute them, nor can their family nor their friends! Nice try.

By entering this site you hereby agree to these terms and conditions.

Code 431.322.12 of the Internet Privacy Act signed by Bill Clinton in 1995.

Code 431.322.12 established that you can not threaten our ISP(s), Internet Service Providers, or any person(s) or company(s) storing these files, and can not prosecute any person(s) affiliated with this page, which includes family(s), friends or individuals who own, run or enter or purchase from this web-site.

By continuing to enter this site, you are expressly and impliedly agreeing to all terms as stated above, and affirm that you are in compliance with all federal, state and local laws concerning the content of this site.

This false claim is used typically on illegal web sites, such as Ultimate Replicas, Distinction Replicas, Prestige Replicas and Affordable Accessories. It is refuted at http://www.lpconline.com/internet_privacy_act.html

An image of the false disclaimer:

image:Exquisite_Replicas_Terms.jpg

[edit] Samples of the spam

[edit] Sample 1

Replicas

Watches
Handbags 
Tiffany & Co Jewelry 
Luxury Pens 

The sales of brand-name quality

Best offers and prices!!


Click here to view

http:(domain deleted by Spamwiki Admin)

[edit] Sample 2

 QUALITY REPLICAS!

Rolex WatchesCartier WatchesBreitling WatchesBvlgari WatchesOmega Watches
Tag Heuer WatchesOfficine Panerai WatchesA.Lange  Sohne WatchesFranck Muller
WatchesChopard watchesHermes watchesJacob  Co. watches Get 25% off when
buying 2 watches! 

 VISIT OUR ONLINE SHOP!

[edit] Sample 3

Sample spam, address redacted
Sample spam, address redacted

This sample uses links to the genuine rolex.com web site to fake authenticity. It imbeds the logo, and an image of the Explorer brand from Rolex.

The spam has a From address of "Rolex.com" which is false.

It even pretends to be the Rolex site. If you click on the link "http://www.rolex.com" however, you are taken to a link that still contains the "rolex.com" but is actually the criminal fraud site. The link under the covers might be of the form "http://www.rolex.com.mpt.lampchin.com" which loads a web page at "lampchin.com" - not rolex.com.

False pretenses, fraud and infringement of trademark all in one.

The message header also contains elements that infringe on the CAN-SPAM law by faking the From and Reply-to addresses. The From purports to be rolex.com, but the email address and reply-to address are those of the recipient. If you try to reply to the sender, you end up sending it to yourself.

From: Rolex.com <sample@sample.com>
To: "sample" <sample@sample.com>
Reply-To: sample@sample.com
Subject: sample Rolex.com For You -40%

[edit] History of the Spam

This has been going on since at least August 2006 when web site www.speckialplanez.com was reported, registered by Paul Gregoire, an alias for Alex Polyakov. That was using name servers on domain sportystuuff.com, also attributed to Alex Polyakov. The registrar sponsoring Polyakov's operation back then was Ace of Domains, a subsidiary of Seevast Corp. Note that in February sportystuuff.com was still active, providing name service to a long chain of newer domains.

A recently spammed web site (Feb 2007) at mumqwplings.com is registered by Paul Gregoire using name servers on domain hairyolddns.com. The registrar for the name server domain is again Ace of Domains.

More recently (March 2007), access to ED Pills and Replica Watch sites have been sponsored by registrar Network Solutions through the registration of domain eggbacondns.com which acts as the name server.

Also in March, name servers on weekenddns.com were registered on DSTR Acquisition by the same Paul Gregoire, which Spamhaus records as an alias for Alex Polyakov.

In June 2007, the operation tried to take hold at Gandi.net, though was quickly suspended. It was registered under the alias of Gregory William.

In March 2011, spammed URLs started to contain the prefix "rolex.com" to falsely mislead people into thinking the site was somehow supported by Rolex. Nothing could be further from the truth, and this tactic further demonstrates the criminal use of false pretenses. Examples

  • http://www.rolex.com.roadchemical.com
  • http://www.rolex.com.sgt.lampchin.com
  • http://www.rolex.com.qpi.qokirooler.com

[edit] How to Report this Spam

You can use the Complainterator, or use the following format, substituting the spammed domain and its name servers as appropriate.

Complain to support@moniker.com. Request the name server domains be locked out from update, transfer, delete, placed on clientHold, and the address records set to 0.0.0.0. Here is a sample reporting template:

Registrar:     ACE OF DOMAINS, INC

Dear Registrar 

This is a request for you to remove the Alex Polyakov domain hairyolddns.com
and to remove its name server Address record ns1.hairyolddns.com and ns2.hairyolddns.com

From this link, you can see that it is used as a spammed site's name server:
> http://www.dnsstuff.com/tools/traversal.ch?domain=mumqwplings.com&type=a

From this link, you can see that your company is the name server's registrar
> http://www.dnsstuff.com/tools/whois.ch?ip=hairyolddns.com&email=on

To effectively remove the name server, set the name server Address record for
ns1.hairyolddns.com and ns2.hairyolddns.com  to a nonroutable address such as 0.0.0.0 or 61.61.61.61


Then set the status of domain hairyolddns.com to
    clientTransferProhibited
    clientUpdateProhibited
    clientDeleteProhibited
    clientHold

You can test that this has been successful, by using the above traversal link.

Thank you for your efforts to reduce spam and to keep criminals from abusing your terms of service.

[edit] Sponsoring Registrars

In March 2011, sample sites were registered with these

  • dooliwatch.com * Distinction Replica

BEIJING INNOVATIVE LINKAGE TECHNOLOGY

  • fookolir.com * Distinction Replica

BEIJING INNOVATIVE LINKAGE TECHNOLOGY

  • qokirooler.com * Distinction Replica

BEIJING INNOVATIVE LINKAGE TECHNOLOGY

  • aokkyert.com * Divine Replica

BEIJING INNOVATIVE LINKAGE TECHNOLOGY

  • roadchemical.com * Divine Replica

XIAMEN CHINASOURCE INTERNET SERVICE CO., LTD.

  • flyslim.com * Divine Replica

ELB GROUP, INC.

  • lampchin.com * Divine Replica

1 API GMBH

[edit] Sponsor Organization

Zed-Cash is the sponsor organization behind this type of site. They pay spammers to promote it, and they don't shut down illegal spammers.

[edit] Related spam operations

See: Category:Yambo family

Personal tools