Spammers are using URL shorteners a lot more.

I have been seeing a lot of questionable referrers in my WordPress statistic. They obviously are coming from spammers and scammers. For the past week or so there are a lot of referrers using URL shortening services such as tinyurl.com, bit.ly, etc. I cautiously opened the links to confirm my suspicions and almost all of them are pointing to domains I have already blocked.

While the URL shortening services are very valuable, they are also easily abused by the unscrupulous.

 

Scam Alert: Adobe Acrobat Reader 2011

UPDATE:
Shawn Sijnstra has been contacting us and explaining that he was a victim of identity theft. He has a blog explaining his story.: http://sijnstra.name/blog/

Please note that:
The latest version of Adobe Reader X can be obtained from Adobe.com.

There is no such thing as Adobe Acrobat Reader 2011, contrary to the scam/spam email sent to unsuspecting users.

From:     Adobe <newsletter@adobe-acrobat-upgrades.com>
Subject:     New Version Release : Adobe Acrobat Reader 2011, Upgrade Available Now !
Date:     February 16, 2011 XXXXXXXXXXXXXXXXXX
To:     XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Reply-To:     newsletter@adobe-acrobat-upgrades.com

ADOBE ACROBAT READER 2011 UPDATE NOTIFICATION

This is to remind that a new version of Adobe Acrobat Reader 2011 with enhanced features for viewing, creating, editing, printing and internet-sharing PDF documents has been released.

To check and download the latest version , go to :

http://www.adobe-acrobat-upgrades.com

Start downloading the update right now and let us know what you think about it.

We’re working on making Adobe Acrobat Reader better all the time !

Thanks and best regards,

Adobe Support

© 2011 Adobe Systems Incorporated. All rights reserved.
Adobe Systems Incorporated | 343 Preston Street | Ottawa | ON | K1S 1N4 | Canada |

UPDATE:
WhoIs information has changed.

Whois information on adobe-acrobat-upgrades.com

% By submitting a query to RU-CENTER’s Whois Service
% you agree to abide by the following terms of use:
% http://www.nic.ru/about/servpol.html (in Russian)
% http://www.nic.ru/about/en/servpol.html (in English).

Domain name:             ADOBE-ACROBAT-UPGRADES.COM
Creation Date:           2011.02.17
Expiration Date:         2012.02.17

Status:                  NOT DELEGATED

Registrant ID:           AVNEP9R-RU
Registrant Name:         JSC “Regional Network Information Center”
Registrant Organization: JSC “Regional Network Information Center”
Registrant Street1:      2/1, 3d Khoroshevskaya str.
Registrant City:         Moscow
Registrant Postal Code:  123182
Registrant Country:      RU

Administrative, Technical Contact
Contact ID:              AVNEP9R-RU
Contact Name:            JSC “Regional Network Information Center”
Contact Organization:    JSC “Regional Network Information Center”
Contact Street1:         2/1, 3d Khoroshevskaya str.
Contact City:            Moscow
Contact Postal Code:     123182
Contact Country:         RU
Contact Phone:           +7 495 737 0601
Contact Fax:             +7 495 737 0602
Contact E-mail:          auction@nic.ru

Registrar:               Regional Network Information Center, JSC dba RU-CENTER

Last updated on 2011.12.01 01:48:51 MSK/MSD

WhoIs Information on adobe-reader-upgrades.com:

Domain ID:D161523747-LROR
Domain Name:ADOBE-READER-UPGRADES.ORG
Created On:16-Feb-2011 22:20:46 UTC
Last Updated On:18-Apr-2011 03:51:45 UTC
Expiration Date:16-Feb-2012 22:20:46 UTC
Sponsoring Registrar:Regional Network Information Center, JSC dba RU-CENTER (R148-LROR)
Status:CLIENT HOLD
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:AVNEP9R-RU
Registrant Name:JSC “Regional Network Information Center”
Registrant Organization:JSC “Regional Network Information Center”
Registrant Street1:2/1, 3d Khoroshevskaya str.
Registrant Street2:
Registrant Street3:
Registrant City:Moscow
Registrant State/Province:
Registrant Postal Code:123182
Registrant Country:RU
Registrant Phone:+7.4957370601
Registrant Phone Ext.:
Registrant FAX:+7.4957370602
Registrant FAX Ext.:
Registrant Email:auction@nic.ru
Admin ID:AVNEP9R-RU
Admin Name:JSC “Regional Network Information Center”
Admin Organization:JSC “Regional Network Information Center”
Admin Street1:2/1, 3d Khoroshevskaya str.
Admin Street2:
Admin Street3:
Admin City:Moscow
Admin State/Province:
Admin Postal Code:123182
Admin Country:RU
Admin Phone:+7.4957370601
Admin Phone Ext.:
Admin FAX:+7.4957370602
Admin FAX Ext.:
Admin Email:auction@nic.ru
Tech ID:AVNEP9R-RU
Tech Name:JSC “Regional Network Information Center”
Tech Organization:JSC “Regional Network Information Center”
Tech Street1:2/1, 3d Khoroshevskaya str.
Tech Street2:
Tech Street3:
Tech City:Moscow
Tech State/Province:
Tech Postal Code:123182
Tech Country:RU
Tech Phone:+7.4957370601
Tech Phone Ext.:
Tech FAX:+7.4957370602
Tech FAX Ext.:
Tech Email:auction@nic.ru
Name Server:NS1.ADOBE-PDF-UPGRADES.COM
Name Server:NS2.ADOBE-PDF-UPGRADES.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned

WhoIs information on adobe-acrobat-upgrades.com:

% By submitting a query to RU-CENTER’s Whois Service
% you agree to abide by the following terms of use:
% http://www.nic.ru/about/servpol.html (in Russian)
% http://www.nic.ru/about/en/servpol.html (in English).

Domain name: ADOBE-ACROBAT-UPGRADES.COM
Name Server: ns1.adobe-pdf-upgrades.com
Name Server: ns2.adobe-pdf-upgrades.com
Creation Date: 2011.02.17

Status: DELEGATED

Registrant ID: CRABZUX-RU
Registrant Name: Shawn Sijnstra
Registrant Organization: Shawn Sijnstra
Registrant Street1: 2938 Avenue Street
Registrant City: New York
Registrant Postal Code: 20394
Registrant Country: US

Administrative, Technical Contact
Contact ID: CRABZUX-RU
Contact Name: Shawn Sijnstra
Contact Organization: Shawn Sijnstra
Contact Street1: 2938 Avenue Street
Contact City: New York
Contact Postal Code: 20394
Contact Country: US
Contact Phone: +1 877 8663849
Contact E-mail:  Shawn@yahoo.com

Registrar: Regional Network Information Center, JSC dba RU-CENTER

Last updated on 2011.02.17 02:46:12 MSK/MSD

Notice that the creation date is 2011.02.17 (or 2011.02.16 in Pacific Time).

Another one using adobe-reader-upgrades.org:

Domain ID:D161523747-LROR
Domain Name:ADOBE-READER-UPGRADES.ORG
Created On:16-Feb-2011 22:20:46 UTC
Last Updated On:16-Feb-2011 22:20:48 UTC
Expiration Date:16-Feb-2012 22:20:46 UTC
Sponsoring Registrar:Regional Network Information Center, JSC dba RU-CENTER (R148-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Status:ADDPERIOD
Registrant ID:CRABZUX-RU
Registrant Name:Shawn Sijnstra
Registrant Organization:Shawn Sijnstra
Registrant Street1:2938 Avenue Street
Registrant Street2:
Registrant Street3:
Registrant City:New York
Registrant State/Province:
Registrant Postal Code:20394
Registrant Country:US
Registrant Phone:+1.8778663849
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: Shawn@yahoo.com
Admin ID:CRABZUX-RU
Admin Name:Shawn Sijnstra
Admin Organization:Shawn Sijnstra
Admin Street1:2938 Avenue Street
Admin Street2:
Admin Street3:
Admin City:New York
Admin State/Province:
Admin Postal Code:20394
Admin Country:US
Admin Phone:+1.8778663849
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: Shawn@yahoo.com
Tech ID:CRABZUX-RU
Tech Name:Shawn Sijnstra
Tech Organization:Shawn Sijnstra
Tech Street1:2938 Avenue Street
Tech Street2:
Tech Street3:
Tech City:New York
Tech State/Province:
Tech Postal Code:20394
Tech Country:US
Tech Phone:+1.8778663849
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: Shawn@yahoo.com
Name Server:NS1.ADOBE-PDF-UPGRADES.COM
Name Server:NS2.ADOBE-PDF-UPGRADES.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned

Notice that the creation date is 2011.02.16

A partial list of Domain Names used by spammers and scammers.

Attach is partial list of domain names used by spammers and scammers. Add them to the blacklist in the hosts file. It is only a partial list,

2c1804-7thgkluallbz4qk0q1h.hop.clickbank.net
alipbaata.co.cc
alpordessirempit.xpac.info
aouwch.com
asmidary.com
autofeed.bestproceed.com
badlymetal.net
beaming-smiles4all.net
bestbusinesssearch.net
bestbuygiftcard.cz.cc
bestfishingtool.com
bestproceed.com
bluesquareframe.com
bonsaicareonline.com
brenaleecosmetics.net
bulletinsite.info
candidll.com
cangencorp.com
catexamine.net
cierrainteriors.com
clicktvseries.com
codemaster-helpnetwork.net
counter.bestproceed.com
counter.visitorstatistic.com
crosshairoutdoorgear.net
desidiomusicalliance.net
designscapital.com
destinationexotictrips.net
digital-hdcamcorder.com
dominopiece.com
dreamnetassociates.com
drinkingstrawstirs.com
drive-traffic-to-your-website.co.cc
e-hiburan.co.cc
earliam.com
emailgeneral.com
ent-hiburan.co.cc
everstrong-storage.net
facebook.bestproceed.com
fat-loss-4–idiots.com
featherbuy.net
firestarproductdevelopment.com
free20usd.tk
freegiftscentre.info
freezone2u.com
freidrichconstuction.net
get-back-with-the-ex.com
gets20usd.tk
graphicplusdesignteam.net
greatoffersforhomeowners.net
hopefulspiritsgroup.net
hosted-predictivedialer.com
indiana-toll-road-traffic.co.cc
internationalmesothelioma.net
interorga.biz
investmentfinancing.bloggerreviews.org
jeanrempitmmampos.xpac.info
john-onlineblog.tk
justifyingsense.com
laensenanzapereira.edu.co
lawsuitmesothelioma.passas.us
lilacmeadowdayspa.net
lyrics.myra-world.com
m.arkibrealistik.net
mambang-x.com
mesotheliomasettlementnow.com
mkt059.com
montreauxandsons.com
multiresults.com
myshutterclicks.com
netinfozones.com
netwizardinstructionalguides.net
newsodrome.com
newworldmarketgroup.net
nycpartysceneonline.com
officialdealcenteronline.net
online-dating-websites.info
or.cangencorp.com
pericardialmesotheliomasite.com
photoangels-online.net
psychologybachelors.info
quikloan.info
reptilianstudios.net
rockypoint-enterprises.net
safewayvaultcompany.com
sakindary.com
sanchez-correaimporters.net
seetruewall.com
serveubetterhosting.com
sinido.com
sizzlingblog.com
slideshowexhibition-nys.net
soapinstall.net
statistics.bestproceed.com
studentloan-consolidation-info.info
studentloaninterest.org
swagbucks.com
synergytrainingfacility.com
theblogisdead.com
tl2.candidemail.com
totalcloths.net
updatecustomerdata.com
usalatestnews.com
ushardwaredev.net
viruzreload.co.cc
vivendicapitalinc.net
web.oxyme.com
www.acterize.com
www.bestgamingcomputer.info
www.bigextracash.com
www.bigextracash.com
www.blogobo.com
www.buy-a-computer.co.cc
www.carisoprodolabuse.info
www.club-asteria.com
www.cruisejobline.com
www.cruisejobsblog.com
www.galaxycelebrity.com
www.gamerszone.info
www.greentreemortgage.org
www.i-am-stupid-am-i.co.cc
www.ipadawe.com
www.ipadz2011.com
www.mobilephonereviewssite.com
www.moredietplan.com
www.ohamerica.us
www.psychologybachelors.info
www.refinancing-home.student-loan-consilidation.com
www.zapposhoes.org
yct.com.my
yourcarguide.org
yunkissmee.xpac.info
zero-credit.info

Yet another Text-Spam: 1-305-877-4908

Text-Spam is really annoying because it actually uses the SMS quota, unless you have the ulimited plan.

I received another Text Spam message on August 15th, 2010. Don’t bother calling 1-305-877-4908 back, because it doesn’t take any phone calls and the voice mail-box is not set-up. All you need to do is to file complaints to FCC because such unsolicited text messages violate CAN-SPAM Act.

You should file form 1088G to report this violation. File a complaint on FCC site http://esupport.fcc.gov/complaints.htm

You can also call 1-888-CALL-FCC (1-888-2255-322) voice; 1-888-TELL-FCC (1-888-8355-322) TTY.

The text reads:

Do you owe $10,000+ to the IRS? Our gov’t approved program can REDUCE BACK TAXES by over 70%. Reply “YES” to see if you qualify! (optout,reply:out)

Text-Spam does violate the Communication Act of 1934.

Another Text Spam: 1-949-439-5924

I received another Text Spam message on June 21st, 2010. Don’t bother calling (949) 439-5924 back, because it doesn’t take any phone calls.. All you need to do is to file complaints to FCC because such unsolicited text messages violate CAN-SPAM Act. I inquired AT&T who is my service provider, but they are no help at all.

You should file form 1088G to report this violation. File a complaint on FCC site http://esupport.fcc.gov/complaints.htm

You can also call 1-888-CALL-FCC (1-888-2255-322) voice; 1-888-TELL-FCC (1-888-8355-322) TTY.

The text reads:

Wipe out 55% of credit card, and any unsecured debt. Must be 10K or more. 100% guarantee. To have representative call you, reply – YES

Text-Spam does violate the Communication Act of 1934.

Text Spam from (714) 267-2734

If you’re wondering who does the the number (714) 267-2734 belong to, don’t bother looking. All you need to do is to file complaints to FCC because such unsolicited text messages violate CAN-SPAM Act.

You should file form 1088G to report this violation. File a complaint on FCC site http://esupport.fcc.gov/complaints.htm

You can also call 1-888-CALL-FCC (1-888-2255-322) voice; 1-888-TELL-FCC (1-888-8355-322) TTY.

The text reads:

Do you owe more than $10,000 to the IRS or state? Our tax experts can possibly REDUCE or ELIMINATE your back taxes. Reply IRS to see if you qualify!

Text-Spam does violate the Communication Act of 1934.

Yet Another Text-Spammer: (714) 916-3671

UPDATE

I just called FCC regarding this matter and this type of “marketing” does violate CAN-SPAM Act.

You should file form 1088G to report this violation.

File a complaint on FCC site http://esupport.fcc.gov/complaints.htm

You can also call 1-888-CALL-FCC (1-888-2255-322) voice; 1-888-TELL-FCC (1-888-8355-322) TTY.

I just received another Text-Spam on my mobile phone. This is an unsolicited marketing ploy from unscrupulous individual(s).

This time is from (714) 916-3671

The Spam says:

If you are $10,000 or more in Credit Card Debt, you qualify for our Debt Settlement Program. Reply “YES” to be contacted today with info.

I have previously contacted FCC regarding this issue, and surprisingly FCC found that these Text-Spam do not violate the Communication Act of 1934.

More on this.